gmane.comp.gnome.tomboy

Re: state of rainy for sync; private accounts

Aaron Borden — 2013-05-24T15:28:38

I disagree here. I think the web should be moving away from passwords.
Especially with so many web companies leaking user/password data
(LinkedIn, last.fm, LivingSocial, Formspring, etc.), the fewer companies
that deal with passwords the better. Passwords are really not a great UX
experience[1].

If done right, OAuth can feel just as native and natural as a password
login. It also has the advantage of being able to revoke individual
tokens, rather than having to change the password for all your "good"
clients. If we were to implement any other syncing in the cloud (GDrive,
Dropbox, etc.), it would be done via OAuth. Any tomboy client
implementing an OAuth sync plugin would have a low bar to add any other
OAuth sync service.

In looking into a tomboy Dropbox plugin, I realized that the .NET
libraries for OAuth aren't amazing, and in general the web is only
"barely satisfied" with OAuth. If something marginally better existed,
they would flock to it. From what I've read, Mozilla Persona[2] has a
lot of potenti

Re: state of rainy for sync; private accounts

Timo Dörr — 2013-05-24T05:22:34

I agree. A simple username/password combination might be enough for
authentication to most users. The GUI in Tomboy could just offer 2 text
input fields to enter those, and they could just be passed within the urls
as standard http credentials with every request (like
https://username:password-OdjcZfihWi1g9hUCZPvPmw< at >public.gmane.org/). On the server, I could check if
credentials were given, and if so, use those instead of OAuth. As long as
SSL is used, this should be secure.

Greetz
Timo


2013/5/24 Jared L Jennings <jared-8ahqS111WRRXkn1EJAUYDNi2O/JbrIOy< at >public.gmane.org>

_______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/listinfo.cgi/tomboy-list-beatniksoftware.com

Re: Notice when sync fails

Jared L Jennings — 2013-05-24T02:39:57

There isn't anything for this. 
I think we should have something though. Feel free to open a bug and I will see if something can be developed.

Notice when sync fails

Tudza White — 2013-05-23T23:19:51

How can I get Tomboy to display a notice if the sync operations fails?

Right now, if I go into Tomboy | Toools | Synchronize Notes I will get a
notice if the sync fails, but not when the program is just running.  I have
sync set to happen automatically every ten minutes.

Re: state of rainy for sync; private accounts

Jared L Jennings — 2013-05-23T23:10:22

Gotcha. 
Yeah. I would like to see that happen. I have seen it in other apps and it gives the feeling of completeness.

Re: state of rainy for sync; private accounts

Brandon Trussell — 2013-05-23T22:42:23

I mean authentication directly with Rainy instead of an OAuth server.
Removing the intermediary, and doing that over the API instead of an HTML
page.

- Brandon

On Thursday, May 23, 2013, Jared Jennings wrote:

Re: state of rainy for sync; private accounts

Jared Jennings — 2013-05-23T16:34:09



Are you thinking of something like Authentication with a Social site?


Jared Jennings
http://jaredjennings.org
_______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/listinfo.cgi/tomboy-list-beatniksoftware.com

Version 1.15.1 Windows Binary released

Jared Jennings — 2013-05-06T18:55:48

I've published the Windows binary and updated the download page.
http://projects.gnome.org/tomboy/download.html

Jared

_______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/listinfo.cgi/tomboy-list-beatniksoftware.com

Re: MacOS X Version of Tomboy?

Jared Jennings — 2013-05-02T14:33:54

Brandon,

I wouldn't discourage you from writing Tomboy version with Native code, but I sure hope that instead we can convince you to work on Macboy and learn C# :)

The benefits were for two reasons:
1. The tomboy developers know C# and not ObjC, at least many of us ;)
2. I had written the Tomboy library (in C#) and so I'm reusing that code in Macboy. The Tomboy library is also used by Rainy.

I would be glad to help you get up to speed with C# for Macboy. For that matter, the issues that I am having now are with Webkit more so than they are with other pieces. While the fixes would likely be in the C# code of Macboy, still if you understand ObjC and Webkit it would be a great help and likely very useful.

Also, once I finish with Macboy I plan to start on an IOS version. I already have the project started, but no real code yet. Obviously I would be doing that in C# with MonoTouch.. but if you beat me to it with a Native IOS App I wouldn't complain :)

Jared

On May 1, 2013, at 5:07 PM, Brandon Trussell <bra

Re: MacOS X Version of Tomboy?

Brandon Trussell — 2013-05-01T22:07:49

I'd like to help... if only it wasn't C#.... :-\

Was it every attempted natively?

I'm all for combing apple docs if needed to help... I'm familiar with it.

And isn't the benefit of the huge runtime that the code should be portable?
 So maybe most of the current Tomboy code will work well and there's only
relatively few Apple specifics that need to be worked out?

Let me know.  I have a vested interest in it at this point... I just
realized I can't fully test Rainy because I don't use a platform that has
Tomboy that can sync with Rainy.... unless Tomboy 1.6 can do it...

- Brandon


On Thu, Mar 7, 2013 at 12:32 PM, David H. Silber <dhs-FBWV0/nXW+dPHkh+F3Kk4Q< at >public.gmane.org>wrote:

_______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/listinfo.cgi/tomboy-list-beatniksoftware.com

Re: state of rainy for sync; private accounts

Brandon Trussell — 2013-05-01T21:19:26

Will the authentication have to be done via html? Is there a way that isn't
HTML nor OAuth? How do most apps authenticate with api servers?  Gmail.app,
Yelp.app, any app can think of that has login functionality...  I figure
the credentials are passed via HTTPS in JSON or something.  The app can ask
the user for their credentials and log into rainy & begin syncing.

I ask because that route seems more simple.  Then there is only a rainy
server that is needed, instead of rainy + an HTML/JS front-end with login
capability, or rainy + an OAuth server.

It just crossed my mind that I suppose OAuth is/was the desired end goal
due to backwards compatibility with apps that already work with OAuth.
Maybe OAuth was the first implementation because U1 offered the storage and
instead of trusting apps with U1 credentials, they probably suggested just
OAuth against U1.  Well U1 isn't the sync server anymore... so the
requirement for OAuth may not be there anymore. The tomboy apps are
presumably trusted, because even with

Re: Tomboy GTK3 - GNOME 3 branch

Jared Jennings — 2013-04-28T16:45:19

That would be great. I haven't looked at any of this yet. So really need examples of switching from GTK2 to GTK3. I believe Banshee has done this.

These branch would also include the changes to properly use the GNOME SHELL notification areas. We basically need all the info, examples we can get.

Jared

On Apr 28, 2013, at 6:01 AM, Tammy Miller <tgmiller5-PkbjNfxxIARBDgjK7y7TUQ< at >public.gmane.org> wrote:


_______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/listinfo.cgi/tomboy-list-beatniksoftware.com

Re: Tomboy GTK3 - GNOME 3 branch

Tammy Miller — 2013-04-28T11:01:14

Jared, 
I will be glad to help. 
Thanks. 
Tammy 

Date: Fri, 26 Apr 2013 17:27:57 -0500
From: jared-8ahqS111WRRXkn1EJAUYDNi2O/JbrIOy< at >public.gmane.org
To: tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
Subject: [tomboy-list] Tomboy GTK3 - GNOME 3 branch









I've created a GTK3 branch for GTK3 / GNOME 3 bindings. Nothing has been pushed to the branch yet, but feel free to have fun and submit patches if anyone feel so inclined.
https://git.gnome.org/browse/tomboy/log/?h=gtk3-dev

Any objections or comments, feel free to send my way.Jared Jenningshttp://jaredjennings.org


_______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/listinfo.cgi/tomboy-list-beatniksoftware.com       _______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/li

Tomboy GTK3 - GNOME 3 branch

Jared Jennings — 2013-04-26T22:27:57

I've created a GTK3 branch for GTK3 / GNOME 3 bindings. Nothing has been
pushed to the branch yet, but feel free to have fun and submit patches if
anyone feel so inclined.

https://git.gnome.org/browse/tomboy/log/?h=gtk3-dev

Any objections or comments, feel free to send my way.
Jared Jennings
http://jaredjennings.org
_______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/listinfo.cgi/tomboy-list-beatniksoftware.com

.NET + GNOME hackfest to port to GNOME#3

David Nielsen — 2013-04-22T22:19:45

I figured I'd let everyone know that this years .NET + GNOME hackfest is being arranged with the aim to get our excellent suite of .NET based GNOME applications ported to the GNOME3 ecosystem.

I hope that this Octobers event will serve as a great tool in bringing .NET to GNOME3 with style starting with applications like Banshee, Tomboy and Pinta. 

A wiki page with further information can be found here (and can be expected to be updated frequently). You are also welcome to mail me personally if you have interest in the event.

https://live.gnome.org/Hackfests/dotNET2013 

I bid you all a good day and hope to see you in Vienna come October.

Re: state of rainy for sync; private accounts

Timo Dörr — 2013-04-18T20:25:51

Actually, most of the OAuth stuff is already in place. What really needs to
be done is get a "website" that we can point to (passing the oauth
credentianl in the query string). The website performs authentication
(checks username + password for validity) in any way - this could even be
google/facebook authentication. If the auth is succesfull, the website
redirects back to to a localhost url where tomboy is listening, passing
oauth credentials plus a token that verifies that the user was authed.

This website is not specific to rainy or JSON, U1 worked exactly the same.
Data is exchange via query string parameters in the url. I just did not
want to go through the hassle of creating a nice-looking website. This
would require to ship some kind of ASP.NET with rainy. For a future
MonkeySquare hosted public service, this could i.e. also be done in rails
or django or whatever. The website does not need any access to the rainy
database, only a pre-shared key (that is not open to the public) is
exchanged between ra

Re: state of rainy for sync; private accounts

Jared Jennings — 2013-04-18T16:19:17

Timo,

I might be able to help you implement a security framework (authentication) for this. I've just recently worked a lot with this. Even though you are using JSON, we could implement a framework that would handle these oAuth requests, but and also user/password for web authentication.

If you like, I can poke around over the next couple of weeks and provide some thoughts.

Jared

On Apr 17, 2013, at 1:48 PM, Timo Dörr <timo-oiv2iH3A6tQb1SvskN2V4Q< at >public.gmane.org> wrote:


_______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/listinfo.cgi/tomboy-list-beatniksoftware.com

Re: Fwd: state of rainy for sync; private accounts

Timo Dörr — 2013-04-17T18:48:54

Having the username + password in the Url is an ugly hack that I added in
the early days to get up and running do the real  work, not the OAuth
stuff. As long as you use SSL and trust Rainy + Tomboy, this is fine. If
one has access to your machine and can go into the Tomboy settings, your
password is displayed in cleartext which is rather bad, but with U1 one
could also extract your oauth token from your gconf, and use that to get
into your account - so not much of a difference.

Anyways, it is a hack and planned to be removed. The thing is, Rainy is a
pure JSON request/response server (using ServiceStack) and does not serve
http website requests (yet). So to get the username/password out of the
url, a website is needed (like U1) that displays a login form or offers a
signup procedure, that allows for the usual login & signup stuff (retrieve
lost password, create new account etc.) and performs the oauth token
exchange & redirect.

To avoid adding an ASP.NET section (or even worse, make it in django,php or
ra

Re: Fwd: state of rainy for sync; private accounts

Robert Nordan — 2013-04-17T08:12:32

As far as I know, when passwords are transmitted in clear text over https,
they are unreadable for any attackers trying to listen. The point of OAuth
is really to guarantee that the program or site that is asking you to log
in to the server isn't going to steal what you type in before it's sent to
the server. (like the five bazillion sites that want you to log in with
Facebook)

In principle, if you trust Tomboy and the Rainy server to not do anything
naughty, OAuth shouldn't be needed.

Btw Timo, I'm planning on getting Rainy set up on my server soonish now
that U1 is gone, so if there's any bugs I'll be sure to report them! ;-)

/Robert N
On 17 Apr 2013 07:36, "Brandon Trussell" <brandon2k3-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:

_______________________________________________
Tomboy-list mailing list
Tomboy-list-0fE9KPoRgkiLrwD38QH1XXHrszOJ0dCBAL8bYrjMMd8< at >public.gmane.org
http://lists.beatniksoftware.com/listinfo.cgi/tomboy-list-beatniksoftware.com

Fwd: state of rainy for sync; private accounts

Brandon Trussell — 2013-04-17T05:35:32

Accindently didn't send this to the list...

---------- Forwarded message ----------
From: Brandon Trussell <brandon2k3-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>
Date: Tue, Apr 16, 2013 at 6:31 PM
Subject: Re: [tomboy-list] state of rainy for sync; private accounts
To: Timo Dörr <timo-oiv2iH3A6tQb1SvskN2V4Q< at >public.gmane.org>

On Fri, Mar 15, 2013 at 5:23 AM, Timo Dörr <timo-oiv2iH3A6tQb1SvskN2V4Q< at >public.gmane.org> wrote:

<snip>

With the SSL support landet in the public test server (see:

If Rainy is now capable of hosting notes for private accounts, I'd like to
be become a tester for it.  I'm interesting in building a sync client using
Rainy given it now as authentication.

So from the site, I see the notes on how to configure the username and
password.  I see Tomboy client for linux takes those settings directly in
the URL.  Even if HTTPS is used, is the username and password transmitted
in clear text?

If it is, OAuth with another server is the plan to make it more secure?
Thanks in advance.  Parti

Re: Tomboy and Possible Storage Backends

Jared Jennings — 2013-04-09T20:09:36

Yes, sorry I meant git, not get.

Just so everyone is clear, which I think this goes without saying, but *just in case*. The Tomboy team will support anyone that wants to provide a GIT or any other type of backend. The problem is that it is mainly Aaron and I (with Alex having submitted a lot of awesome bug fixes lately) writing any code at the moment. So while we may choose another solution other than GIT, feel MORE THAN WELCOME to submit a branch that implements GIT and if written properly it WILL be accepted into the Tomboy master.

I cannot even finish the version of Tomboy for OSX. ha ha. So providing a possibly difficult backend sync isn't smart :)

Jared

On Apr 8, 2013, at 10:10 PM, Jeremy Malcolm <Jeremy-XEFddEF5vW5Wo+R/V/U2/g< at >public.gmane.org> wrote: