Page 1 of 2 12 LastLast
Results 1 to 20 of 21
Like Tree5Likes
  1.    #1  
    And do I have the correct URL? I can't open it. http://patches.webos-internals.org
  2. #2  
    yes right url, but down.
  3. #3  
    Was not really reliable the last year... Also the Precentral feeds give me some strange issues lately.. often I only get a few bytes and then nothing and Preware stops downloading... probably the few bytes are some error page, haven't really investigated that.

    It's strange... two years ago I had the feeling that the HP App cat would die sooner than all this community stuff. But currently it seems to be the other way round.
  4. #4  
    Their tweets may shed light on that issue

    https://twitter.com/webosinternals

    It would not let me embed their tweet
    Last edited by mattmers; 12/21/2013 at 07:28 PM.
    Smartphones: Nokia 5230 > Palm Pre 2 > Nokia 701 (returned) > HP Pre 3 > BB Z10 (save me from it) + HP Touchpad
    Cars: 1993 Subaru Impreza AWD > 2007 Saab 9-3 2.0T


    LinkedIn: Matthew Mers
    Twitter: MatthewMers
  5. #5  
    Quote Originally Posted by Grabber5.0 View Post
    And do I have the correct URL? I can't open it. http://patches.webos-internals.org
    still down ? did it move? what is wrong about this patch portal?
    missing resources? technical issues? other ?
  6.    #6  
    Quote Originally Posted by MartinH@webos View Post
    still down ? did it move? what is wrong about this patch portal?
    missing resources? technical issues? other ?
    It was hacked, and sounds like it will not likely be brought back up as they are focused on other things and it needs a lot of changes.
  7. #7  
    Well now who's so indecent as to hack the lil ole Internalz feed? Weak.
  8. #8  
    Quote Originally Posted by Grabber5.0 View Post
    It was hacked, and sounds like it will not likely be brought back up as they are focused on other things and it needs a lot of changes.
    Hmm, thanks. I think I read about something being "hacked". Too bad. Did the hackers actually destroy the content? Or is the main effort to protect this site against future hacker attacks?
    "they" are the folks behind webos-internals.org - right? and many of these people also work on openwebos ports to other hardware - right?
    So - it is more a lag of resources (knowledgable people and their time). It would be valuable to reestablish that site - but resources are missing.
    Is there any specific forum thread about this issue? or is this current one the right place?
  9. #9  
    The patch portal had quite advanced scripts running in the background that would automatically create Preware feeds, push to GitHub etc. However this code has a number of severe security issues that could give hackers access to things they're not supposed to. Fixing it is a lot of work and we prefer as a small team to focus on LuneOS where we wouldn't need the patch portal because we intend to include patches and make them Tweaks enabled. It seems we can manually add patches to Preware when required though. I'll test this and try to write some instructions.

    -- Sent from my TouchPad using Communities
    HP Veer (daily driver), HP Pre 3, HP Touchpad Proper 4G/LTE (Sierra MC7710), HP Touchpad 32GB WiFi, Palm Pre 2
    Preemptive likes this.
  10. Choorp's Avatar
    Posts
    155 Posts
    Global Posts
    385 Global Posts
    #10  
    Quote Originally Posted by MartinH@webos View Post
    Did the hackers actually destroy the content?
    Nope, looks like it's all still there.

    http://ipkg.preware.org/
    MartinH@webos likes this.
  11. #11  
    Quote Originally Posted by Herrie View Post
    The patch portal had quite advanced scripts running in the background that would automatically create Preware feeds, push to GitHub etc. However this code has a number of severe security issues that could give hackers access to things they're not supposed to. Fixing it is a lot of work and we prefer as a small team to focus on LuneOS where we wouldn't need the patch portal because we intend to include patches and make them Tweaks enabled. It seems we can manually add patches to Preware when required though. I'll test this and try to write some instructions.

    -- Sent from my TouchPad using Communities
    Perhaps I don't quite understand how this works, but I think it would be nice to have a patch portal available in the future.

    While customisations that were once unofficial, can be included in official LuneOS, there may be new, conflicting, experimental or simply unusual patches that might be of interest to individual users. It could also be a testing ground for patches that might end up in future releases. So while it will naturally be a smaller part of the webOS experience, I think it could still have value and be in the open spirit of webOS. Also, for those who continue with legacy devices until they fail, those patches will still be vital! ;-)

    Oh, and I think I already posted this, but can the webOS Nation app gallery host patches? Does that still work? Might be a useful work around/temporary replacement or simply parallel backup.

    Thanks for the forthcoming manual instructions.
    Last edited by Preemptive; 06/22/2014 at 07:01 PM.
  12. #12  
    LuneOS has a rolling release model with (monthly) releases instead of infrequent updates like with legacy. Having patches separately will be difficult because it's likely they won't work in a next release due to the large amount of ongoing code changes. The approach is different from legacy here. Since the OS is built by the community we're a lot more flexible to include things that Palm/HP didn't. Having them Tweaks enabled shouldn't break anything even if alpha/beta. In case it does it's quick to fix because we maintain the full OS as community :-)

    The app portal could work but the patches would have to be inside an IPK then I guess.

    -- Sent from my TouchPad using Communities
    Last edited by Herrie; 06/23/2014 at 03:06 AM.
    HP Veer (daily driver), HP Pre 3, HP Touchpad Proper 4G/LTE (Sierra MC7710), HP Touchpad 32GB WiFi, Palm Pre 2
  13. #13  
    Monthly? Wow!

    On the 6th of each month, right? ;-)
  14. #14  
    I'm just bumping this. We are looking at fixing this or replacing it with a formalised manual update system. If anyone can describe the original problem, that would be really useful.
    • Does the original feed update code exist? Answer: Replacement code exists.
    • What issues prevented re-implementation? Security or time / effort?
    • What issues might prevent re-implementation? Answer: Permission and possibly code-checking.
    • How long or how much effort would it require?
    • I think I recall that Preware cannot install patches unless they are packaged as IPKs. Is this correct?
    Last edited by Preemptive; 08/22/2017 at 11:09 AM.
  15. #15  
    Quote Originally Posted by Preemptive View Post
    I'm just bumping this. We are looking at fixing this or replacing it with a formalised manual update system. If anyone can describe the original problem, that would be really useful.
    • Does the original feed update code exist?
    • What issues prevented re-implementation? Security or time / effort?
    • What issues might prevent re-implementation?
    • How long or how much effort would it require?
    • I think I recall that Preware cannot install patches unless they are packaged as IPKs. Is this correct?
    I updated the code back in the day to fix the "known" vulnerabilities at the time. I don't recall what was the reason this was never implemented to be honest. It wasn't a complete rewrite but just fixing known exploits I was able to establish using various tools.

    I still have the updated code laying around here it seems
    HP Veer (daily driver), HP Pre 3, HP Touchpad Proper 4G/LTE (Sierra MC7710), HP Touchpad 32GB WiFi, Palm Pre 2
    Preemptive likes this.
  16. #16  
    Oh... that seems really good!

    I was expecting to default to manual updates! This is an unexpected development!

    So is it simply a case of you or Novaldex implementing or installing this? He mentioned an upcoming server rebuild, so that might be a good opportunity.
  17. #17  
    Oh... that seems really good!

    I was expecting to default to manual updates! This is an unexpected development!

    So is it simply a case of you or Novaldex implementing or installing this? He mentioned an upcoming server rebuild, so that might be a good opportunity.
    Well there were reasons why this wasn't implemented and put back online back in the day. To be honest the code is not extremely clean I would say. 2 php files only with the main code. Not extremely clean and structured.

    It's not up to me to take that decision but the code IS there.

    -- Sent from my TouchPad using Communities
    HP Veer (daily driver), HP Pre 3, HP Touchpad Proper 4G/LTE (Sierra MC7710), HP Touchpad 32GB WiFi, Palm Pre 2
  18. #18  
    So...

    We need someone who 'is' webOS Internals to give us the OK and possibly implement the code.

    It seems you are saying that you'd like someone who knows php to review your code also.
  19. #19  
    Well the code would need a really thorough review. I just fixed known vulnerabilities that I was able to locate with some tools about 3 years ago. This exercise would need to be repeated for currently known exploits. Also the php version on the webserver currently might be incompatible with some bits in the php files seeing these date back from 2009-2011 it seems.

    -- Sent from my TouchPad using Communities
    HP Veer (daily driver), HP Pre 3, HP Touchpad Proper 4G/LTE (Sierra MC7710), HP Touchpad 32GB WiFi, Palm Pre 2
  20. #20  
    I'm afraid I don't know any php experts. The only options I can offer here are:
    • Ask Rod Whitby who did the original php code and ask if that person would be willing to review for us.
    • I can tweet from pivotCE: A request for any php experts to review.
    • (and / or) I suspect this might be better coming from the Internals twitter account, which is probably Mr Whitby again. Maybe pivotCE can retweet a message from there.

    I don't know how wide ranging recent server upgrades were, but perhaps Novaldex can give us version numbers so we know where we are regarding the php version.

    If that gets us no where, then we will have to revert to a plan to collect new patches and add them manually from time to time.
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 28
    Last Post: 03/25/2014, 08:09 AM
  2. [patch request] disable captive portal on webos 2.2.4
    By soldato2000 in forum Palm Pre 2
    Replies: 0
    Last Post: 01/02/2012, 05:15 AM
  3. Replies: 0
    Last Post: 12/14/2011, 03:59 AM
  4. webOsInternals is down.....
    By Tyndall in forum WebOS Internals
    Replies: 0
    Last Post: 02/13/2011, 07:46 AM
  5. org.webosinternals.shell and org.webosinternals.commander
    By rwhitby in forum webOS Development
    Replies: 28
    Last Post: 08/30/2009, 03:45 PM

Posting Permissions