jsKnotMaker

[wotknot]

first edition
its got old style images, needs (works ) firefox, interface is bare bones but you can draw knots with it

[Mrs Glenys Chew]

Hi Wotnot,

I take it jsKM will run on any system, then?  I'm a bit wary of downloading first edition programs

Regards,

Glenys

[Znex]

After downloading and changing the extension, the file will not unzip and looks to be corrupted.

[WebAdmin]

Has ayone else had a problem?  I think it said 13 downloads last night.

But that is where my computing knowhow stops.  I'll leave it in your capable hands

Regards
Glenys

[DerekSmith]

Irrespective of first edition or not, I would be exceedingly cautious about downloading executables (and a javascript is an executable) from someone who only has three posts.

It might be a dream of a utility, but it could just as easily hack any sensitive information on your machine and open it up to all / any abuse without you being aware it is happening.

The FCB / Knotmaker program was written by people who know one another and the program was openly published in text so that anyone could confirm that the program was genuine and only did what it claimed to do, so the final executable could be reasonably trusted.

I have not downloaded this offering, and no matter how tempted I am to believe that it is genuine and safe, I would need a lot of assurance before I would put an executable onto my computer (but then, I am paranoid and block ALL javascript by using the NoScript add-on for Firefox)

Wotknot - would you be prepared to post the javascript as text so that it could be safely examined before anyone exposes their computers to it?

Note to the unwary - zip files can be made to auto initialise, so you are even putting your computer at risk, just by changing the extension and trying to open the zip.

It might be wise to block the download at least until wotknot gets back to us with some safe text files.

Derek

[roo]

Irrespective of first edition or not, I would be exceedingly cautious about downloading executables (and a javascript is an executable) from someone who only has three posts.

It might be a dream of a utility, but it could just as easily hack any sensitive information on your machine and open it up to all / any abuse without you being aware it is happening.

The FCB / Knotmaker program was written by people who know one another and the program was openly published in text so that anyone could confirm that the program was genuine and only did what it claimed to do, so the final executable could be reasonably trusted.

I have not downloaded this offering, and no matter how tempted I am to believe that it is genuine and safe, I would need a lot of assurance before I would put an executable onto my computer (but then, I am paranoid and block ALL javascript by using the NoScript add-on for Firefox)

Wotknot - would you be prepared to post the javascript as text so that it could be safely examined before anyone exposes their computers to it?

Note to the unwary - zip files can be made to auto initialise, so you are even putting your computer at risk, just by changing the extension and trying to open the zip.

It might be wise to block the download at least until wotknot gets back to us with some safe text files.

Derek

A vanishingly small number of people could evaluate a program based on a text program description for function, errors, or malicious content.  Further, the content of the text program description may or may not match what is contained in an executable file.   I wouldn't blame anyone for not wanting to touch an executable from forum posters.

[DerekSmith]

Roo,

It is reportedly Javascript which means it is an interpreted script, not a compiled executable.  That means that someone skilled in reading Javascript could examine the script for content and if it is OK, the same script can then be used by we mortals who are only interested in using it - not in understanding it.

Javascript is always text up to the point that your browser interprets it, so in that respect it is always 'exposed' provided you have access to a simple text document - i.e. the html file for the page to be run that contains the javascript.

Javascript is actually a  very popular language - most of the school kids I know are all js wizards, so if we can have access to the text we should be able to quickly confirm its safety.

Derek

[roo]

Roo,

It is reportedly Javascript which means it is an interpreted script, not a compiled executable.  That means that someone skilled in reading Javascript could examine the script for content and if it is OK, the same script can then be used by we mortals who are only interested in using it - not in understanding it.

Javascript is always text up to the point that your browser interprets it, so in that respect it is always 'exposed' provided you have access to a simple text document - i.e. the html file for the page to be run that contains the javascript.

Javascript is actually a  very popular language - most of the school kids I know are all js wizards, so if we can have access to the text we should be able to quickly confirm its safety.

Derek

Mmm-hmm.  It's nice to know that school kids can spot malicious or seriously defective javascript from a mile away when the experts are being surprised on a regular basis by malicious innovations  :

http://www.google.com/search?hl=en&q=javascript+malicious&start=10&sa=N

But I suppose we should all err on the side of recklessness.  And why should I trust you again?

[DerekSmith]

Mmm-hmm.  It's nice to know that school kids can spot malicious or seriously defective javascript from a mile away when the experts are being surprised on a regular basis by malicious innovations  :

http://www.google.com/search?hl=en&q=javascript+malicious&start=10&sa=N

But I suppose we should all err on the side of recklessness.  And why should I trust you again?

Kids can probably spot it so easily because they are likely to be the ones writing it in the first place.

Recklessness ? I don't know about that, but I do subscribe to the principle that I should try to do something every day that scares me - Keeps me alive - while recklessness might just lead to the opposite...

Trust in me ?  When did you ever stop trusting in me ? ?  I don't talk to imaginary friends, I hate bureaucracy, I love dogs, and I tie knots - jeez - what's not to trust ? ?

Can you hear the tune in your mind as I sing - 'Trusst in ME, jusst in ME.  Closse your eyesss and trusst in ME'

Derek

[wotknot]

Its nice to see paranoia is alive and well, yarr
You can view the source  at  http://github.com/a899337/jsknotmaker
and download a zip file from http://github.com/a899337/jsknotmaker/archives/master (download button)
its just a webpage, but you'll have to download it for now  until i learn my way around github
Nothing malicious, no exploit potential whatsoever, honest, scout Bobs honor! 

Later

[Znex]

I downloaded and everything seemed to work fine in Firefox. It looks like it has a lot of potential on the many possible crossings. Oh, I didn't find anything malicious in the code either 

[DerekSmith]

Its nice to see paranoia is alive and well, yarr
You can view the source  at  http://github.com/a899337/jsknotmaker
and download a zip file from http://github.com/a899337/jsknotmaker/archives/master (download button)
its just a webpage, but you'll have to download it for now  until i learn my way around github
Nothing malicious, no exploit potential whatsoever, honest, scout Bobs honor! 

Later

LOL

Well done Wotknot, lovely utility and so small considering it is tile based.  What an array of tiles, and all available for the user to modify to their hearts content - a real 'Play Pit'.

Particularly so for me, because I know very little JS, so this will be a great example for me to use as a learning aid.  There certainly seems to be merit to having utilities that run from within the browser.

--------------------

Mel, Glenys,

Would there be any chance of serving this via the Guild web site and server?

Derek

[admin]

Mel, Glenys,
Would there be any chance of serving this via the Guild web site and server?

I've not had a chance to look at this yet (only got back from a short break yesterday) but it should be possible if Glenys gives the go-ahead. Would this be making it available for download or offering it as an online tool? Or both?

[DerekSmith]

Both, but I was thinking more as an online tool.

Derek

[admin]

I've grabbed a copy of the file and I'll see what I can do about embedding it in a page. Once I have something to show, I'll post the url here so people can review and test it.