Jump to content




OneOS Version 2 - The All in One Operating System


910 replies to this topic

#841 Viking

  • Members
  • 14 posts

Posted 08 March 2015 - 09:16 PM

Hello!

I didn't find the fs.getName() implementation for the OneOS' Helpers API and I think it's a very useful method.
e.g.

function getFileName(path)
  -- ...
end

or

function dirContainsFile(path, file)
  -- ...
end


And there are lot of useful methods that I have to paste into _every_ program. It can be a bit annoying, So I think you should implement some methods for file handling, table handling and maybe for string handling.

Edited by Viking, 15 August 2015 - 05:21 PM.


#842 doublequestionmark

  • Members
  • 118 posts
  • LocationI honestly don't know

Posted 10 March 2015 - 02:39 AM

I found a Huge Security Bug in OneOs.

although the password is encrypted and stored in a file, the password can be viewed in plain text in the OneOS log

#843 oeed

    Oversimplifier

  • Members
  • 2,095 posts
  • LocationAuckland, New Zealand

Posted 10 March 2015 - 06:58 AM

View Postdoublequestionmark, on 10 March 2015 - 02:39 AM, said:

I found a Huge Security Bug in OneOs.

although the password is encrypted and stored in a file, the password can be viewed in plain text in the OneOS log
Umm, what? Are you sure. If so that's quite the stuff on my behalf.

Actually, it's hashed... I think. So that's impossible isn't it?

Anyway, I won't be having passwords in future.

View PostViking, on 08 March 2015 - 09:16 PM, said:

Hello!

I didn't find the fs.getName() implementation for the OneOS' Helpers API and I think it's a very useful method.
e.g.
name = read()
if "startup" == getFileName("/Programs/Ink.program/"..name) then
   print("You entered startup.")
end
  

Here is mine if you haven't added it yet, but you want:

function getFileName(path)
  local name = path
  for char = 1, #path+1 do
	if string.sub("/"..path, char, char) == "/" then
	  name = ""
	else
	  name = name..string.sub("/"..path, char, char)
	end
  end
  return name
end


or

function dirContainsFile(path, file)
  for k, v in pairs(fs.list(path)) do
	 if v == file then
		return true
	 end
  end
  return false
end


And there are lot of useful methods that I have to paste into _every_ program. It can be a bit annoying, So I think you should implement some method for file handling, table handling and maybe for string handling.

It's certainly crossed my mind to have those. I'll figure out what I want to add.

Edited by oeed, 10 March 2015 - 07:00 AM.


#844 cdel

  • Banned
  • 496 posts
  • LocationMelbourne, Australia

Posted 10 March 2015 - 01:00 PM

Regarding hashes, if you're using a standard library such as SHA256 it can be cracked within seconds if done correctly.

Edit: however this doesn't work like decryption, this requires you to obtain the hash by brute forcing it.

Edited by cdel, 10 March 2015 - 01:01 PM.


#845 oeed

    Oversimplifier

  • Members
  • 2,095 posts
  • LocationAuckland, New Zealand

Posted 10 March 2015 - 08:48 PM

View Postcdel, on 10 March 2015 - 01:00 PM, said:

Regarding hashes, if you're using a standard library such as SHA256 it can be cracked within seconds if done correctly.

Edit: however this doesn't work like decryption, this requires you to obtain the hash by brute forcing it.
Maybe with rainbow tables, but brute forcing is not something that could be done in seconds really.

#846 cdel

  • Banned
  • 496 posts
  • LocationMelbourne, Australia

Posted 10 March 2015 - 11:49 PM

Outside of cc, I was able to crack a SHA256 hash in 7.43 seconds.

You can even do this within cc, but it will obviously take a lot longer.

Edited by cdel, 10 March 2015 - 11:50 PM.


#847 SooBahkCode

  • Members
  • 21 posts

Posted 11 March 2015 - 03:22 AM

Question; How do I put an image on my program files? I wanted to know because it's really annoying having designed an image in sketch but not being able to use it as my program's app-icon.

#848 ElvishJerricco

  • Members
  • 803 posts

Posted 11 March 2015 - 07:39 AM

View Postcdel, on 10 March 2015 - 11:49 PM, said:

Outside of cc, I was able to crack a SHA256 hash in 7.43 seconds.

You can even do this within cc, but it will obviously take a lot longer.

Cracking sha256 requires either a poorly chosen password, or a number of brute force attempts that's on the order of 2^256 (~10^77). For reference, the universe is only 4.3e20 milliseconds old, so you'd need to do ~10^57 hashes (give or take on the order) per millisecond to reach an order of calculation able to crack a hash within 1.4e9 years.

So to crack it in 7.43 seconds means your password was easily guessable, not that sha256 isn't good enough. Most usecases salt password hashes anyway, so even guessable passwords require knowledge of the salt, which can be difficult to obtain.

Edited by ElvishJerricco, 11 March 2015 - 07:53 AM.


#849 cdel

  • Banned
  • 496 posts
  • LocationMelbourne, Australia

Posted 11 March 2015 - 07:52 AM

I was using what was http://crackstation.net, cracked a reasonable hash in several seconds. But I understand where you're coming from, a hash that isn't salted with an easy password could be cracked with ease, whereas a better and salted password wouldn't.

#850 LDDestroier

  • Members
  • 1,095 posts
  • LocationACDC Town

Posted 16 March 2015 - 10:54 PM

I found that in OneOS 1.3.4 (maybe other versions too) you cannot update to the beta. Running on the latest version of CCEmuRedux on Windows 8.1.

#851 Geforce Fan

  • Members
  • 846 posts
  • LocationMissouri, United States, America, Earth, Solar System, Milky Way, Universe 42B, Life Street, Multiverse, 4th Dimension

Posted 17 March 2015 - 09:18 PM

One major flaw of OneOS is, in my opinion, the fact there's the OS, and a graphical UI, and you can't have one without the other.
This is much more similar to Winows that MacOSX or Linux.
That being said, there's be almost no benefit to running OneOS without the UI. OneOS does not add any "os" type improvements to CC.
There's no metadata, file permissions, etc.

#852 cdel

  • Banned
  • 496 posts
  • LocationMelbourne, Australia

Posted 17 March 2015 - 09:36 PM

There is some fs modifications, it sandboxes programs to a single directory so they can't "break out" and cause all kinds of havoc. Im not 100%, but I believe programs have their own environments too.

#853 Geforce Fan

  • Members
  • 846 posts
  • LocationMissouri, United States, America, Earth, Solar System, Milky Way, Universe 42B, Life Street, Multiverse, 4th Dimension

Posted 17 March 2015 - 09:55 PM

View Postcdel, on 17 March 2015 - 09:36 PM, said:

There is some fs modifications, it sandboxes programs to a single directory so they can't "break out" and cause all kinds of havoc. Im not 100%, but I believe programs have their own environments too.
Their environments are completely sandboxed, but they could just use OneOS.FS for global FS access and there's a function for rebooting and shutting down too.

#854 oeed

    Oversimplifier

  • Members
  • 2,095 posts
  • LocationAuckland, New Zealand

Posted 17 March 2015 - 10:11 PM

View PostGeforce Fan, on 17 March 2015 - 09:18 PM, said:

One major flaw of OneOS is, in my opinion, the fact there's the OS, and a graphical UI, and you can't have one without the other.
This is much more similar to Winows that MacOSX or Linux.
That being said, there's be almost no benefit to running OneOS without the UI. OneOS does not add any "os" type improvements to CC.
There's no metadata, file permissions, etc.

There is global file system sandboxing. At this stage it only redirects aliases, but in future I am planning to add metadata.

The whole point of OneOS is to make everything nicer and easier to use. It would require a huge amount of changes and provide no benefit to make a command line mode.


I haven't had any time to work on OneOS recently and probably won't for a while. So don't expect much for a while.

#855 Geforce Fan

  • Members
  • 846 posts
  • LocationMissouri, United States, America, Earth, Solar System, Milky Way, Universe 42B, Life Street, Multiverse, 4th Dimension

Posted 17 March 2015 - 10:26 PM

View Postoeed, on 17 March 2015 - 10:11 PM, said:

I SAID there was no benefit from the command line... not in OneOS.
Anyway, I managed to get my OS running OneOS. You uncover all sorts of bugs when you do something pointless :P
Then, I changed OneOS's shell program to just call my OS's init function in its API.
So I got my OS working in OneOS. <cheapshot> Now I just need OneOS to work! </cheapshot>

#856 LordOdin

  • New Members
  • 1 posts

Posted 20 March 2015 - 10:05 AM

I was wondering if i can use wired modems in the browser for OneOS also when i try to download the beta 2.0 i get this
Posted Image

Edited by LordOdin, 21 March 2015 - 04:00 PM.


#857 anybody

  • New Members
  • 2 posts

Posted 25 March 2015 - 07:22 AM

Cool oeed! Can't wait to see what you do next!

#858 Geforce Fan

  • Members
  • 846 posts
  • LocationMissouri, United States, America, Earth, Solar System, Milky Way, Universe 42B, Life Street, Multiverse, 4th Dimension

Posted 25 March 2015 - 10:44 PM

Something that I think is funny about OneOS, is that, under the hood, it's not like OSX at all. It's more like windows. They both:
Have shells that are part of the OS -- you can't have one without the other(yes you can boot to CraftOS, but that's just circumventing OneOS)
Cannot boot to a command prompt(same as above)
Are not unix-like
Have good backwards-compatibility
And are both are really more of graphical shells than OSes
OneOS may look like OSX, but it under the hood, it's more like Windows.

Edited by Geforce Fan, 25 March 2015 - 10:45 PM.


#859 UnknownAssassin

  • New Members
  • 1 posts

Posted 27 March 2015 - 09:39 PM

When opening the AppStore I always get
Error: startup: 729: attemot to concantenate nil and string
There is nothing at the displayed help website.

Edited by UnknownAssassin, 28 March 2015 - 09:05 AM.


#860 Geforce Fan

  • Members
  • 846 posts
  • LocationMissouri, United States, America, Earth, Solar System, Milky Way, Universe 42B, Life Street, Multiverse, 4th Dimension

Posted 31 March 2015 - 05:00 AM

Clicking the back button on setup causes this to crash, lol.
Also, the performance is not the best on V2

Edited by Geforce Fan, 31 March 2015 - 05:03 AM.






5 user(s) are reading this topic

0 members, 5 guests, 0 anonymous users