- Libraries - Haskell.org

On the state of 'tar'
by hasufell 08 Apr '20

08 Apr '20

Friends, 'tar' [0][1] is an excellent native haskell implementation of the tar format. However, there are currently a lot of unattended issues: * unicode filepaths broken due to Char8 use [2] * executable bits handled improperly [3] * no support for long filepath extension [4][5] * doesn't handle hardlinks properly [6] * handles symbolic links too strictly [7] Most of these issues are 2 to 4 years old, some of them have PRs that have never been reviewed. 'tar' fails to unpack our own ghc bindists even [4]. I consider it, in this state, too unreliable for production use. Since it is in the 'haskell' namespace on github and probably the first hit on hackage, this needs to be improved quickly, IMO. Users currently can use tar-bytestring [8] (no windows support) or libarchive [9] (not a native implementation), but 'tar' should ultimately be fixed and maintained properly. -- [0] https://hackage.haskell.org/package/tar [1] https://github.com/haskell/tar [2] https://github.com/haskell/tar/issues/6 [3] https://github.com/haskell/tar/issues/25 [4] https://github.com/haskell/tar/issues/49 [5] https://github.com/haskell/tar/issues/27 [6] https://github.com/haskell/tar/issues/51 [7] https://github.com/haskell/tar/issues/32 [8] https://github.com/hasufell/tar-bytestring [9] https://hackage.haskell.org/package/libarchive -- Cheers, Julian

4 6

[bzlib] [PATCH] Fix build with base >= 4.13
by hasufell 07 Apr '20

07 Apr '20

https://gist.github.com/hasufell/a5f1091646d1b891e6d2a73714dbb50e Last time I pinged duncan he seemed to have forgotten it. If you don't mind sharing maintainership, please do so.

3 4

Re: intent to enable 2fa requirement for github.com/haskell org
by Carter Schonwald 25 Mar '20

25 Mar '20

Yeah, there’s def an incredible diversity of tools that are great in this space. And there’s at this point decent tools for almost every platform constraint imaginable. On Wed, Mar 25, 2020 at 1:30 PM Giorgio Marinelli <giorgio(a)marinel.li> wrote: > I use the following 2fa tools. They offer also import/export > functionalities. > > - andOTP (Android) https://github.com/andOTP/andOTP > - OTPClient (Linux) https://github.com/paolostivanin/OTPClient > > Regards, > > > Giorgio > > On Wed, 25 Mar 2020 at 17:48, Carter Schonwald > <carter.schonwald(a)gmail.com> wrote: > > > > Duncan, David, please figure out 2fa tools that work for you and enable > them, > > > > > > https://github.com/tadfisher/pass-otp > > > > https://github.com/solokeys/solo > > > > https://github.com/herrjemand/awesome-webauthn#hardware-authenticators > > > > https://1password.com/ > > > > https://keepass.info/download.html > > > > > > if you are having trouble figuring out tools you're comfortable using, > please share with us those constraints we can help you! > > > > im here to help (and i'm delaying enabling another day or two to provide > help to some active contributors who are having their own difficulties > setitng up this stuff) > > > > On Wed, Mar 18, 2020 at 6:16 PM Duncan Coutts <duncan(a)dcoutts.me.uk> > wrote: > >> > >> On Wed, 2020-03-18 at 14:46 -0400, Carter Schonwald wrote: > >> > hey everyone, because so much important stuff for the community, it > >> > makes sense to add 2fa required for the org, are there any good > >> > reasons to either wait to do this, or not do it? Feedback welcome! > >> > >> I think I might get cut off. > >> > >> Is it not still the case that github's 2fa needs a program running on a > >> mobile phone, or an SMS-capable mobile phone? Is there any support for > >> normal tools running on a normal Linux machine? > >> > >> (I think last time I tried to use the SMS route, it refused to send SMS > >> messages to my landline, despite the fact that I can receive them) > >> > >> > >> Duncan > >> > > _______________________________________________ > > ghc-devs mailing list > > ghc-devs(a)haskell.org > > http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs >

1 0

Re: intent to enable 2fa requirement for github.com/haskell org
by Carter Schonwald 25 Mar '20

25 Mar '20

Duncan, David, please figure out 2fa tools that work for you and enable them, https://github.com/tadfisher/pass-otp https://github.com/solokeys/solo https://github.com/herrjemand/awesome-webauthn#hardware-authenticators https://1password.com/ https://keepass.info/download.html if you are having trouble figuring out tools you're comfortable using, please share with us those constraints we can help you! im here to help (and i'm delaying enabling another day or two to provide help to some active contributors who are having their own difficulties setitng up this stuff) On Wed, Mar 18, 2020 at 6:16 PM Duncan Coutts <duncan(a)dcoutts.me.uk> wrote: > On Wed, 2020-03-18 at 14:46 -0400, Carter Schonwald wrote: > > hey everyone, because so much important stuff for the community, it > > makes sense to add 2fa required for the org, are there any good > > reasons to either wait to do this, or not do it? Feedback welcome! > > I think I might get cut off. > > Is it not still the case that github's 2fa needs a program running on a > mobile phone, or an SMS-capable mobile phone? Is there any support for > normal tools running on a normal Linux machine? > > (I think last time I tried to use the SMS route, it refused to send SMS > messages to my landline, despite the fact that I can receive them) > > > Duncan > >

1 0

Export functions on Natural in Numeric.Natural
by Zemyla 23 Mar '20

23 Mar '20

Functions in GHC.Natural like naturalToWordMaybe and minusNaturalMaybe are extremely useful, especially when trying to write provably total functions, and I wish they were available in a Safe module like Numeric.Natural. I also want a total function that does the following: -- This function turns an Integer n into a pair of -- (fromInteger (abs n), fromInteger (signum n)). integerToNaturalSign :: Integer -> (Natural, Int) #if 0 -- This is the reference version, except for the fact that numeric literals don't exist yet -- when GHC.Natural is being defined, and fromInteger isn't actually total. integerToNaturalSign n = case compare n 0 of LT -> (fromInteger (negate n), -1) EQ -> (0, 0) GT -> (fromInteger n, 1) #elif !defined(MIN_VERSION_integer_gmp) -- This is like the reference version, except using the newtype wrapper and MagicHash. integerToNaturalSign n = case compare n (intToInteger# 0#) of LT -> (Natural (negateInteger n), I# (-1#)) EQ -> (Natural n, I# 0#) GT -> (Natural n, I# 1#) #else -- We take advantage of the GMP functions and constructors. integerToNaturalSign (Jn# bn) = (bigNatToNatural bn, I# (-1#)) integerToNaturalSign (S# i#) = case isTrue# (i# <# 0#) of True -> (NatS# (int2Word# (negateInt# i#)), I# (-1#)) _ -> (NatS# (int2Word# i#), I# (i# ># 0#)) integerToNaturalSign (Jp# bn) = (bigNatToNatural bn, I# 1#) #endif

2 3

Alternative instance for Const
by chessai . 22 Mar '20

22 Mar '20

We already have instance Monoid m => Applicative (Const m) we could easily add instance Monoid m => Alternative (Const m) where empty = coerce mempty (<|>) = coerce (<>) which trivially satisfies left/right identity and associativity. I propose we add this instance to base.

5 5

Re: intent to enable 2fa requirement for github.com/haskell org
by Carter Schonwald 19 Mar '20

19 Mar '20

Awesome! After talking with several folks, feedback has been that best practices are to make sure the notice is a week before hand. So what I’ll do is personally reach out to those who aren’t 2fa enabled in the Haskell gh org (and haven’t commented on this thread )and ask them to enable 2fa on their GitHub account. Perhaps I should attach a 2fa options explainer ! I’ll look at folks responses and if everyone active has made the switch over, I’ll look to do a transition next Monday or Tuesday. Be well! (Nyc and many other places are pretty strange right now :/ ) -Carter On Wed, Mar 18, 2020 at 7:42 PM Duncan Coutts <duncan(a)dcoutts.me.uk> wrote: > On Wed, 2020-03-18 at 19:05 -0400, Carter Schonwald wrote: > > No. You don’t. You can use a yubi key and or a totp tool like google > > Authenticator or 1Password etc. no phones required > > It took me a while, but I have successfully managed to turn 2FA back > into 1FA. > > In case it helps anyone else, generate your 2FA response with > > $ oathtool --totp -b $the-2fa-secret > > Where $the-2fa-secret is the code github gives you after the recovery > codes (initially shown as a barcode, but they'll give you the actual > code if you click the link). > > > On Wed, Mar 18, 2020 at 6:16 PM Duncan Coutts <duncan(a)dcoutts.me.uk> > wrote: > > > On Wed, 2020-03-18 at 14:46 -0400, Carter Schonwald wrote: > > > > hey everyone, because so much important stuff for the community, it > > > > makes sense to add 2fa required for the org, are there any good > > > > reasons to either wait to do this, or not do it? Feedback welcome! > > > > > > I think I might get cut off. > > > > > > Is it not still the case that github's 2fa needs a program running on a > > > mobile phone, or an SMS-capable mobile phone? Is there any support for > > > normal tools running on a normal Linux machine? > > > > >

3 3

Re: intent to enable 2fa requirement for github.com/haskell org
by Carter Schonwald 18 Mar '20

18 Mar '20

No. You don’t. You can use a yubi key and or a totp tool like google Authenticator or 1Password etc. no phones required On Wed, Mar 18, 2020 at 6:16 PM Duncan Coutts <duncan(a)dcoutts.me.uk> wrote: > On Wed, 2020-03-18 at 14:46 -0400, Carter Schonwald wrote: > > hey everyone, because so much important stuff for the community, it > > makes sense to add 2fa required for the org, are there any good > > reasons to either wait to do this, or not do it? Feedback welcome! > > I think I might get cut off. > > Is it not still the case that github's 2fa needs a program running on a > mobile phone, or an SMS-capable mobile phone? Is there any support for > normal tools running on a normal Linux machine? > > (I think last time I tried to use the SMS route, it refused to send SMS > messages to my landline, despite the fact that I can receive them) > > > Duncan > >

1 0

intent to enable 2fa requirement for github.com/haskell org
by Carter Schonwald 18 Mar '20

18 Mar '20

hey everyone, because so much important stuff for the community, it makes sense to add 2fa required for the org, are there any good reasons to either wait to do this, or not do it? Feedback welcome! (if theres no objections i'll do it friday or this weekend, so theres some lead time for anyone who's not setup for that yet) Best wishes and great health to all -carter

6 7

New CLC co-chairs, New maintainers of `base`
by chessai . 13 Mar '20

13 Mar '20

As you know from previous announcements, Edward Kmett is stepping down as CLC Chair, and Ryan Scott is stepping down from the CLC altogether. They are both also stepping down as co-maintainers of base. Carter Schonwald and myself, chessai, will be the new CLC co-chair and co-maintainers of base. Thank you again to Edward and Ryan for all of their accomplishments and hard work. Carter and I look forward to serving this wonderful community.

1 0