Sun Jun 2 07:21:49 2024
EVENTS
 FREE
SOFTWARE
INSTITUTE
 POLITICS
 JOBS
 MEMBERS'
CORNER
 MAILING
LIST
NYLXS Mailing Lists and Archives
NYLXS Members have a lot to say and share but we don't keep many secrets. Join the Hangout Mailing List and say your peice.

DATE 2024-02-01

HANGOUT

2024-06-02 | 2024-05-02 | 2024-04-02 | 2024-03-02 | 2024-02-02 | 2024-01-02 | 2023-12-02 | 2023-11-02 | 2023-10-02 | 2023-09-02 | 2023-08-02 | 2023-07-02 | 2023-06-02 | 2023-05-02 | 2023-04-02 | 2023-03-02 | 2023-02-02 | 2023-01-02 | 2022-12-02 | 2022-11-02 | 2022-10-02 | 2022-09-02 | 2022-08-02 | 2022-07-02 | 2022-06-02 | 2022-05-02 | 2022-04-02 | 2022-03-02 | 2022-02-02 | 2022-01-02 | 2021-12-02 | 2021-11-02 | 2021-10-02 | 2021-09-02 | 2021-08-02 | 2021-07-02 | 2021-06-02 | 2021-05-02 | 2021-04-02 | 2021-03-02 | 2021-02-02 | 2021-01-02 | 2020-12-02 | 2020-11-02 | 2020-10-02 | 2020-09-02 | 2020-08-02 | 2020-07-02 | 2020-06-02 | 2020-05-02 | 2020-04-02 | 2020-03-02 | 2020-02-02 | 2020-01-02 | 2019-12-02 | 2019-11-02 | 2019-10-02 | 2019-09-02 | 2019-08-02 | 2019-07-02 | 2019-06-02 | 2019-05-02 | 2019-04-02 | 2019-03-02 | 2019-02-02 | 2019-01-02 | 2018-12-02 | 2018-11-02 | 2018-10-02 | 2018-09-02 | 2018-08-02 | 2018-07-02 | 2018-06-02 | 2018-05-02 | 2018-04-02 | 2018-03-02 | 2018-02-02 | 2018-01-02 | 2017-12-02 | 2017-11-02 | 2017-10-02 | 2017-09-02 | 2017-08-02 | 2017-07-02 | 2017-06-02 | 2017-05-02 | 2017-04-02 | 2017-03-02 | 2017-02-02 | 2017-01-02 | 2016-12-02 | 2016-11-02 | 2016-10-02 | 2016-09-02 | 2016-08-02 | 2016-07-02 | 2016-06-02 | 2016-05-02 | 2016-04-02 | 2016-03-02 | 2016-02-02 | 2016-01-02 | 2015-12-02 | 2015-11-02 | 2015-10-02 | 2015-09-02 | 2015-08-02 | 2015-07-02 | 2015-06-02 | 2015-05-02 | 2015-04-02 | 2015-03-02 | 2015-02-02 | 2015-01-02 | 2014-12-02 | 2014-11-02 | 2014-10-02 | 2014-09-02 | 2014-08-02 | 2014-07-02 | 2014-06-02 | 2014-05-02 | 2014-04-02 | 2014-03-02 | 2014-02-02 | 2014-01-02 | 2013-12-02 | 2013-11-02 | 2013-10-02 | 2013-09-02 | 2013-08-02 | 2013-07-02 | 2013-06-02 | 2013-05-02 | 2013-04-02 | 2013-03-02 | 2013-02-02 | 2013-01-02 | 2012-12-02 | 2012-11-02 | 2012-10-02 | 2012-09-02 | 2012-08-02 | 2012-07-02 | 2012-06-02 | 2012-05-02 | 2012-04-02 | 2012-03-02 | 2012-02-02 | 2012-01-02 | 2011-12-02 | 2011-11-02 | 2011-10-02 | 2011-09-02 | 2011-08-02 | 2011-07-02 | 2011-06-02 | 2011-05-02 | 2011-04-02 | 2011-03-02 | 2011-02-02 | 2011-01-02 | 2010-12-02 | 2010-11-02 | 2010-10-02 | 2010-09-02 | 2010-08-02 | 2010-07-02 | 2010-06-02 | 2010-05-02 | 2010-04-02 | 2010-03-02 | 2010-02-02 | 2010-01-02 | 2009-12-02 | 2009-11-02 | 2009-10-02 | 2009-09-02 | 2009-08-02 | 2009-07-02 | 2009-06-02 | 2009-05-02 | 2009-04-02 | 2009-03-02 | 2009-02-02 | 2009-01-02 | 2008-12-02 | 2008-11-02 | 2008-10-02 | 2008-09-02 | 2008-08-02 | 2008-07-02 | 2008-06-02 | 2008-05-02 | 2008-04-02 | 2008-03-02 | 2008-02-02 | 2008-01-02 | 2007-12-02 | 2007-11-02 | 2007-10-02 | 2007-09-02 | 2007-08-02 | 2007-07-02 | 2007-06-02 | 2007-05-02 | 2007-04-02 | 2007-03-02 | 2007-02-02 | 2007-01-02 | 2006-12-02 | 2006-11-02 | 2006-10-02 | 2006-09-02 | 2006-08-02 | 2006-07-02 | 2006-06-02 | 2006-05-02 | 2006-04-02 | 2006-03-02 | 2006-02-02 | 2006-01-02 | 2005-12-02 | 2005-11-02 | 2005-10-02 | 2005-09-02 | 2005-08-02 | 2005-07-02 | 2005-06-02 | 2005-05-02 | 2005-04-02 | 2005-03-02 | 2005-02-02 | 2005-01-02 | 2004-12-02 | 2004-11-02 | 2004-10-02 | 2004-09-02 | 2004-08-02 | 2004-07-02 | 2004-06-02 | 2004-05-02 | 2004-04-02 | 2004-03-02 | 2004-02-02 | 2004-01-02 | 2003-12-02 | 2003-11-02 | 2003-10-02 | 2003-09-02 | 2003-08-02 | 2003-07-02 | 2003-06-02 | 2003-05-02 | 2003-04-02 | 2003-03-02 | 2003-02-02 | 2003-01-02 | 2002-12-02 | 2002-11-02 | 2002-10-02 | 2002-09-02 | 2002-08-02 | 2002-07-02 | 2002-06-02 | 2002-05-02 | 2002-04-02 | 2002-03-02 | 2002-02-02 | 2002-01-02 | 2001-12-02 | 2001-11-02 | 2001-10-02 | 2001-09-02 | 2001-08-02 | 2001-07-02 | 2001-06-02 | 2001-05-02 | 2001-04-02 | 2001-03-02 | 2001-02-02 | 2001-01-02 | 2000-12-02 | 2000-11-02 | 2000-10-02 | 2000-09-02 | 2000-08-02 | 2000-07-02 | 2000-06-02 | 2000-05-02 | 2000-04-02 | 2000-03-02 | 2000-02-02 | 2000-01-02 | 1999-12-02

Key: Value:

Key: Value:

MESSAGE
DATE 2024-02-18
FROM Joe Schaefer
SUBJECT Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
From hangout-bounces-at-nylxs.com Sun Feb 18 23:51:58 2024
Return-Path:
X-Original-To: archive-at-mrbrklyn.com
Delivered-To: archive-at-mrbrklyn.com
Received: from www2.mrbrklyn.com (www2.mrbrklyn.com [96.57.23.82])
by mrbrklyn.com (Postfix) with ESMTP id 9957A164115;
Sun, 18 Feb 2024 23:51:57 -0500 (EST)
X-Original-To: hangout-at-www2.mrbrklyn.com
Delivered-To: hangout-at-www2.mrbrklyn.com
Received: by mrbrklyn.com (Postfix, from userid 1000)
id 96CCF1640C6; Sun, 18 Feb 2024 23:46:37 -0500 (EST)
Resent-From: Ruben Safir
Resent-Date: Sun, 18 Feb 2024 23:46:36 -0500
Resent-Message-ID: <20240219044636.GR20445-at-www2.mrbrklyn.com>
Resent-To: hangout-at-mrbrklyn.com
X-Original-To: ruben-at-mrbrklyn.com
Delivered-To: ruben-at-mrbrklyn.com
Received: from mxout1-he-de.apache.org (mxout1-he-de.apache.org
[95.216.194.37])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client CN "*.apache.org",
Issuer "Sectigo RSA Domain Validation Secure Server CA" (not verified))
by mrbrklyn.com (Postfix) with ESMTPS id 33D641640A3
for ; Sun, 18 Feb 2024 16:12:55 -0500 (EST)
Received: from mail.apache.org (mailgw-he-de.apache.org
[IPv6:2a01:4f8:c2c:d4aa::1])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(No client certificate requested)
by mxout1-he-de.apache.org (ASF Mail Server at mxout1-he-de.apache.org) with
ESMTPS id AD19464427
for ; Sun, 18 Feb 2024 21:12:50 +0000 (UTC)
Received: (qmail 1413328 invoked by uid 998); 18 Feb 2024 21:12:45 -0000
Mailing-List: contact modperl-help-at-perl.apache.org; run by ezmlm
Precedence: bulk
Delivered-To: mailing list modperl-at-perl.apache.org
Received: (qmail 1413315 invoked by uid 116); 18 Feb 2024 21:12:44 -0000
Received: from spamproc1-he-fi.apache.org (HELO spamproc1-he-fi.apache.org)
(95.217.134.168)
by apache.org (qpsmtpd/0.94) with ESMTP; Sun, 18 Feb 2024 21:12:44 +0000
Authentication-Results: apache.org; auth=none
Received: from localhost (localhost [127.0.0.1])
by spamproc1-he-fi.apache.org (ASF Mail Server at spamproc1-he-fi.apache.org)
with ESMTP id 9DDC1C1234
for ; Sun, 18 Feb 2024 21:12:44 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamproc1-he-fi.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.004
X-Spam-Level:
X-Spam-Status: No, score=0.004 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_MSPIKE_H3=0.001,
RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, T_REMOTE_IMAGE=0.01,
T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=disabled
Authentication-Results: spamproc1-he-fi.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=sunstarsys.com
Received: from mx1-ec2-va.apache.org ([116.203.227.195])
by localhost (spamproc1-he-fi.apache.org [95.217.134.168]) (amavisd-new,
port 10024) with ESMTP id FZiA-kbn1Y65 for ;
Sun, 18 Feb 2024 21:12:43 +0000 (UTC)
Received-SPF: None (mailfrom) identity=mailfrom; client-ip=209.85.215.181;
helo=mail-pg1-f181.google.com; envelope-from=joe-at-sunstarsys.com;
receiver=
Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com
[209.85.215.181])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with
ESMTPS id 54AB4C02CE
for ; Sun, 18 Feb 2024 21:12:38 +0000 (UTC)
Received: by mail-pg1-f181.google.com with SMTP id
41be03b00d2f7-5c66b093b86so3390521a12.0
for ; Sun, 18 Feb 2024 13:12:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sunstarsys.com; s=google; t=1708290751; x=1708895551; darn=perl.apache.org;
h=cc:to:subject:message-id:date:from:in-reply-to:references
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=qSMu06TW7QyZWkZpyNo/MHd+CljaOewzAn09AzxQ/9g=;
b=U6ypMp8FlmqvyX0AGvtzsq7yxPKneVxXWtm8IS1eHVyMCq6GFKJpVYBOVD8qe1oi6W
OS0rlOjyqSkNgdXZXToXWmgiXaOBWRyhlq+/6jFqTDNtLu6ez+LfZ2BzNRXn9uIVtFxk
cOgK64UgnZVQAyTvNmAX6pjWKArc+x53kJt661/ZKrt6NPGqT/ZDhbj3fAf+I5prh5Pu
vvspI+7cHXGMtHFxz+snSQ8jsyg3CaiVbrWlc9oLigTyNzejooJwCirmYRBAu5kL5uvL
rd3+1zVuSQh/wHY3qYgipsHemOJVbBM+QmfFsBtEi0aDIDkDgNm49qrb9/iplwtWJ5Ta
SZcg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1708290751; x=1708895551;
h=cc:to:subject:message-id:date:from:in-reply-to:references
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=qSMu06TW7QyZWkZpyNo/MHd+CljaOewzAn09AzxQ/9g=;
b=GrCJE/BLBMLJCB+ml0gbDCHkCkgusmKn8QrWWgDVlAAXsypTiw8G6QD543FTcerwEP
4urcYxhNvxh75NOZGQ2fqnvtmcDWXFt35qUBCSkqETmV6x9riMaDquH3NsJo17lclypV
ETv1PSHve74fa86y/BWnsNEhJjfuj9sJG1UTz2FmFtoWM2PX1/YbMJQVVMbIngfcHKEw
82fcyYGBTCYunrsu8s0a/+CrsLGQpb70LSCBgEB1Lmeonpz02sK/S8kWjVG1o4guUdMn
uYK/ClzVA9j9x7tfp0yG9MGLlXuhRrV5J9pTNKXoA/Wgq8Ki4RGw20YknvvrWTOQtzdm
7dcw==
X-Gm-Message-State: AOJu0YxCo/eh/+vQX0p54wXivwBaHbUFQ9H58L44/jfD9yRFbgupZ+Xr
z4FDYU+ZgkjaSlF+R9CbwnmnFEEBA21oeHRiKRBqmqcKjWfaxu4TpXdb7EVbc91v3l33mMSaqgY
huZhyBpYSujG7UXxy/1VPAQn5FqTKxd6VVU0akN6Wr3NFv0XznG4=
X-Google-Smtp-Source: AGHT+IGa+7PAcDCu8oS253pS2b0sGLcbE771Dx/UfXMfTsGuOvJ960tG7YTLGaQmsBZJvc/4QUY6K4RyyYC/Ug+U6IY=
X-Received: by 2002:a17:90b:19d5:b0:299:2d92:4942 with SMTP id
nm21-20020a17090b19d500b002992d924942mr10909442pjb.7.1708290750619; Sun, 18
Feb 2024 13:12:30 -0800 (PST)
MIME-Version: 1.0
References:


In-Reply-To:
From: Joe Schaefer
Date: Sun, 18 Feb 2024 16:12:19 -0500
Message-ID:
To: Mithun Bhattacharya
Cc: mod_perl list
Subject: Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
Apache2::Request users
X-BeenThere: hangout-at-nylxs.com
X-Mailman-Version: 2.1.30rc1
List-Id: NYLXS Tech Talk and Politics
List-Unsubscribe: ,

List-Archive:
List-Post:
List-Help:
List-Subscribe: ,

Content-Type: multipart/mixed; boundary="===============0604959242=="
Errors-To: hangout-bounces-at-nylxs.com
Sender: "Hangout"

--===============0604959242==
Content-Type: multipart/alternative; boundary="0000000000005d38fc0611ae6fad"

--0000000000005d38fc0611ae6fad
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

You are welcome, colleague!

Keep in mind the SoBs are threatening to release 2.18 as we speak, but like
everything else they do, it=E2=80=99s a dog and pony show in a Potemkin Vil=
lage.

They simply are too lazy, inept, and mendacious to execute.

Use trunk, while it still exists.

Joe Schaefer, Ph.D.

Orion - The Enterprise Jamstack Wiki >

954.253.3732




On Sun, Feb 18, 2024 at 2:12=E2=80=AFPM Mithun Bhattacharya om>
wrote:

> Also thank you for the library !
>
> On Sun, Feb 18, 2024, 1:11=E2=80=AFPM Mithun Bhattacharya om>
> wrote:
>
>> So is there a cleaner/saner version of libapreq2 or is the 2012 version
>> better ?
>>
>> On Sun, Feb 18, 2024, 12:58=E2=80=AFPM Joe Schaefer =
wrote:
>>
>>> For the past 25 years, I have been the lead developer of the libapreq2
>>> subproject within the Apache HTTPd Server Parent Project. The original =
idea
>>> of libapreq as a safe/performant HTML form and Cookie parsing library c=
ame
>>> out of a collaboration between Lincoln Stein and Doug MacEachern in the
>>> late 90s.
>>>
>>> It was my vision back then to transform the library into a generic,
>>> non-Perl related C library that would support language bindings from ot=
her
>>> programming languages, which is why I pushed for the project to be home=
s
>>> under the HTTPd umbrella instead of the Apache-Perl project.
>>>
>>> While this vision was wildly successful, with language bindings
>>> available for several languages like Perl, TCL, R, etc, ever since abou=
t
>>> 2010 its proven tragic for the existing user community consisting of al=
l of
>>> them, not just Perl.
>>>
>>> What happened? Philip Gollucci, a Perl/FreeBSD olleague of mine at the
>>> time, started agitating that we promote the project to be released from
>>> inside the HTTPd server itself. What Philip didn=E2=80=99t know very we=
ll back then
>>> was how utterly vapid and territorial that team had become, which would
>>> have meant having to collaborate with them directly on user-facing
>>> decisions about the code base.
>>>
>>> In 2012, Philip got what he wanted and I stopped resisting, so he forke=
d
>>> the existing project and copied the C library components into HTTPd cor=
e.
>>>
>>> In 2016 I resigned from the Foundation en masse. You can guess the
>>> reasons.
>>>
>>> In 2020 or so, Google=E2=80=99s Security Team took advantage of an alph=
a release
>>> of httpd 2.5 by fuzzing its 8 year old copy of apreq. It found a few
>>> hotspots that needed repair.
>>>
>>> Instead of having the courtesy of reaching out to me, or anyone else
>>> involved in development of apreq, a junior engineer on the HTTPd team w=
ent
>>> about the business of =E2=80=9Cbug fixing=E2=80=9D the vulnerabilities =
Google found. You
>>> can see a record of his trial and error work in every release since the=
n.
>>>
>>> But the coup de grace was the 2022 release of 2.17, wherein the rookie
>>> developer purposely introduced a fatal bug into the codebase, breaking =
a
>>> fifteen year old regression test.
>>>
>>> If you are wondering how something with a broken regression test winds
>>> up on CPAN, you=E2=80=99ll have to look into how RELENG is done in the =
server
>>> project.
>>>
>>> Long story short, they commented out the test and shipped it anyway, an=
d
>>> called it a Security Release that fixed a vulnerability every prior rel=
ease
>>> was susceptible to.
>>>
>>> Why do I care now? Because I=E2=80=99m the sucker users reach out to fo=
r answers
>>> as a known subject matter expert.
>>>
>>> This sucks, but I=E2=80=99m sorry to tell you that my days wearing the =
Superman
>>> cape at Apache ended 8 years ago.
>>>
>>> --
>>> Joe Schaefer, Ph.D.
>>>
>>> Orion - The Enterprise Jamstack Wiki
>>>
>>>
>>> 954.253.3732
>>>
>>>
>>>

--0000000000005d38fc0611ae6fad
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

You are welcome, colleague!

div>
Keep in mind the SoBs are threatening to release 2.18=
as we speak, but like everything else they do, it=E2=80=99s a dog and pony=
show in a Potemkin Village.

uto">They simply are too lazy, inept, and mendacious to execute.
dir=3D"auto">
Use trunk, while it still exists.<=
br clear=3D"all">


dir=3D"ltr" class=3D"gmail_attr">On Sun, Feb 18, 2024 at 2:12=E2=80=AFPM Mi=
thun Bhattacharya <mithnb-at-gmail.com<=
/a>> wrote:
0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Al=
so thank you for the library !

e=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
r=3D"auto">So is there a cleaner/saner version of libapreq2 or is the 2012 =
version better ?

=3D"gmail_attr">On Sun, Feb 18, 2024, 12:58=E2=80=AFPM Joe Schaefer <href=3D"mailto:joe-at-sunstarsys.com" rel=3D"noreferrer" target=3D"_blank">joe=
-at-sunstarsys.com> wrote:
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> dir=3D"ltr">va,sans-serif;font-size:13.3333px;background-color:rgb(246,246,239)">For th=
e past 25 years, I have been the lead developer of the libapreq2 subproject=
within the Apache HTTPd Server Parent Project. The original idea of libapr=
eq as a safe/performant HTML form and Cookie parsing library came out of a =
collaboration between Lincoln Stein and Doug MacEachern in the late 90s.pan>

f;font-size:13.3333px;background-color:rgb(246,246,239)">It was my vision b=
ack then to transform the library into a generic, non-Perl related C librar=
y that would support language bindings from other programming languages, wh=
ich is why I pushed for the project to be homes under the HTTPd umbrella in=
stead of the Apache-Perl project.

t-family:Verdana,Geneva,sans-serif;font-size:13.3333px;background-color:rgb=
(246,246,239)">While this vision was wildly successful, with language bindi=
ngs available for several languages like Perl, TCL, R, etc, ever since abou=
t 2010 its proven tragic for the existing user community consisting of all =
of them, not just Perl.

erdana,Geneva,sans-serif;font-size:13.3333px;background-color:rgb(246,246,2=
39)">What happened? Philip Gollucci, a Perl/FreeBSD olleague of mine at the=
time, started agitating that we promote the project to be released from in=
side the HTTPd server itself. What Philip didn=E2=80=99t know very well bac=
k then was how utterly vapid and territorial that team had become, which wo=
uld have meant having to collaborate with them directly on user-facing deci=
sions about the code base.

y:Verdana,Geneva,sans-serif;font-size:13.3333px;background-color:rgb(246,24=
6,239)">In 2012, Philip got what he wanted and I stopped resisting, so he f=
orked the existing project and copied the C library components into HTTPd c=
ore.

serif;font-size:13.3333px;background-color:rgb(246,246,239)">In 2016 I resi=
gned from the Foundation en masse. You can guess the reasons.

=3D"color:rgb(130,130,130);font-family:Verdana,Geneva,sans-serif;font-size:=
13.3333px;background-color:rgb(246,246,239)">In 2020 or so, Google=E2=80=99=
s Security Team took advantage of an alpha release of httpd 2.5 by fuzzing =
its 8 year old copy of apreq. It found a few hotspots that needed repair.p>

font-size:13.3333px;background-color:rgb(246,246,239)">Instead of having th=
e courtesy of reaching out to me, or anyone else involved in development of=
apreq, a junior engineer on the HTTPd team went about the business of =E2=
=80=9Cbug fixing=E2=80=9D the vulnerabilities Google found. You can see a r=
ecord of his trial and error work in every release since then.

=3D"color:rgb(130,130,130);font-family:Verdana,Geneva,sans-serif;font-size:=
13.3333px;background-color:rgb(246,246,239)">But the coup de grace was the =
2022 release of 2.17, wherein the rookie developer purposely introduced a f=
atal bug into the codebase, breaking a fifteen year old regression test.>

ont-size:13.3333px;background-color:rgb(246,246,239)">If you are wondering =
how something with a broken regression test winds up on CPAN, you=E2=80=99l=
l have to look into how RELENG is done in the server project.

=3D"color:rgb(130,130,130);font-family:Verdana,Geneva,sans-serif;font-size:=
13.3333px;background-color:rgb(246,246,239)">Long story short, they comment=
ed out the test and shipped it anyway, and called it a Security Release tha=
t fixed a vulnerability every prior release was susceptible to.

=3D"color:rgb(130,130,130);font-family:Verdana,Geneva,sans-serif;font-size:=
13.3333px;background-color:rgb(246,246,239)">Why do I care now? Because I=
=E2=80=99m the sucker users reach out to for answers as a known subject mat=
ter expert.

a,sans-serif;font-size:13.3333px;background-color:rgb(246,246,239)">This su=
cks, but I=E2=80=99m sorry to tell you that my days wearing the Superman ca=
pe at Apache ended 8 years ago.


ature_prefix">--
-smartmail=3D"gmail_signature">




--0000000000005d38fc0611ae6fad--

--===============0604959242==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout

--===============0604959242==--

--===============0604959242==
Content-Type: multipart/alternative; boundary="0000000000005d38fc0611ae6fad"

--0000000000005d38fc0611ae6fad
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

You are welcome, colleague!

Keep in mind the SoBs are threatening to release 2.18 as we speak, but like
everything else they do, it=E2=80=99s a dog and pony show in a Potemkin Vil=
lage.

They simply are too lazy, inept, and mendacious to execute.

Use trunk, while it still exists.

Joe Schaefer, Ph.D.

Orion - The Enterprise Jamstack Wiki >

954.253.3732




On Sun, Feb 18, 2024 at 2:12=E2=80=AFPM Mithun Bhattacharya om>
wrote:

> Also thank you for the library !
>
> On Sun, Feb 18, 2024, 1:11=E2=80=AFPM Mithun Bhattacharya om>
> wrote:
>
>> So is there a cleaner/saner version of libapreq2 or is the 2012 version
>> better ?
>>
>> On Sun, Feb 18, 2024, 12:58=E2=80=AFPM Joe Schaefer =
wrote:
>>
>>> For the past 25 years, I have been the lead developer of the libapreq2
>>> subproject within the Apache HTTPd Server Parent Project. The original =
idea
>>> of libapreq as a safe/performant HTML form and Cookie parsing library c=
ame
>>> out of a collaboration between Lincoln Stein and Doug MacEachern in the
>>> late 90s.
>>>
>>> It was my vision back then to transform the library into a generic,
>>> non-Perl related C library that would support language bindings from ot=
her
>>> programming languages, which is why I pushed for the project to be home=
s
>>> under the HTTPd umbrella instead of the Apache-Perl project.
>>>
>>> While this vision was wildly successful, with language bindings
>>> available for several languages like Perl, TCL, R, etc, ever since abou=
t
>>> 2010 its proven tragic for the existing user community consisting of al=
l of
>>> them, not just Perl.
>>>
>>> What happened? Philip Gollucci, a Perl/FreeBSD olleague of mine at the
>>> time, started agitating that we promote the project to be released from
>>> inside the HTTPd server itself. What Philip didn=E2=80=99t know very we=
ll back then
>>> was how utterly vapid and territorial that team had become, which would
>>> have meant having to collaborate with them directly on user-facing
>>> decisions about the code base.
>>>
>>> In 2012, Philip got what he wanted and I stopped resisting, so he forke=
d
>>> the existing project and copied the C library components into HTTPd cor=
e.
>>>
>>> In 2016 I resigned from the Foundation en masse. You can guess the
>>> reasons.
>>>
>>> In 2020 or so, Google=E2=80=99s Security Team took advantage of an alph=
a release
>>> of httpd 2.5 by fuzzing its 8 year old copy of apreq. It found a few
>>> hotspots that needed repair.
>>>
>>> Instead of having the courtesy of reaching out to me, or anyone else
>>> involved in development of apreq, a junior engineer on the HTTPd team w=
ent
>>> about the business of =E2=80=9Cbug fixing=E2=80=9D the vulnerabilities =
Google found. You
>>> can see a record of his trial and error work in every release since the=
n.
>>>
>>> But the coup de grace was the 2022 release of 2.17, wherein the rookie
>>> developer purposely introduced a fatal bug into the codebase, breaking =
a
>>> fifteen year old regression test.
>>>
>>> If you are wondering how something with a broken regression test winds
>>> up on CPAN, you=E2=80=99ll have to look into how RELENG is done in the =
server
>>> project.
>>>
>>> Long story short, they commented out the test and shipped it anyway, an=
d
>>> called it a Security Release that fixed a vulnerability every prior rel=
ease
>>> was susceptible to.
>>>
>>> Why do I care now? Because I=E2=80=99m the sucker users reach out to fo=
r answers
>>> as a known subject matter expert.
>>>
>>> This sucks, but I=E2=80=99m sorry to tell you that my days wearing the =
Superman
>>> cape at Apache ended 8 years ago.
>>>
>>> --
>>> Joe Schaefer, Ph.D.
>>>
>>> Orion - The Enterprise Jamstack Wiki
>>>
>>>
>>> 954.253.3732
>>>
>>>
>>>

--0000000000005d38fc0611ae6fad
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

You are welcome, colleague!

div>
Keep in mind the SoBs are threatening to release 2.18=
as we speak, but like everything else they do, it=E2=80=99s a dog and pony=
show in a Potemkin Village.

uto">They simply are too lazy, inept, and mendacious to execute.
dir=3D"auto">
Use trunk, while it still exists.<=
br clear=3D"all">


dir=3D"ltr" class=3D"gmail_attr">On Sun, Feb 18, 2024 at 2:12=E2=80=AFPM Mi=
thun Bhattacharya <mithnb-at-gmail.com<=
/a>> wrote:
0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Al=
so thank you for the library !

e=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
r=3D"auto">So is there a cleaner/saner version of libapreq2 or is the 2012 =
version better ?

=3D"gmail_attr">On Sun, Feb 18, 2024, 12:58=E2=80=AFPM Joe Schaefer <href=3D"mailto:joe-at-sunstarsys.com" rel=3D"noreferrer" target=3D"_blank">joe=
-at-sunstarsys.com> wrote:
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> dir=3D"ltr">va,sans-serif;font-size:13.3333px;background-color:rgb(246,246,239)">For th=
e past 25 years, I have been the lead developer of the libapreq2 subproject=
within the Apache HTTPd Server Parent Project. The original idea of libapr=
eq as a safe/performant HTML form and Cookie parsing library came out of a =
collaboration between Lincoln Stein and Doug MacEachern in the late 90s.pan>

f;font-size:13.3333px;background-color:rgb(246,246,239)">It was my vision b=
ack then to transform the library into a generic, non-Perl related C librar=
y that would support language bindings from other programming languages, wh=
ich is why I pushed for the project to be homes under the HTTPd umbrella in=
stead of the Apache-Perl project.

t-family:Verdana,Geneva,sans-serif;font-size:13.3333px;background-color:rgb=
(246,246,239)">While this vision was wildly successful, with language bindi=
ngs available for several languages like Perl, TCL, R, etc, ever since abou=
t 2010 its proven tragic for the existing user community consisting of all =
of them, not just Perl.

erdana,Geneva,sans-serif;font-size:13.3333px;background-color:rgb(246,246,2=
39)">What happened? Philip Gollucci, a Perl/FreeBSD olleague of mine at the=
time, started agitating that we promote the project to be released from in=
side the HTTPd server itself. What Philip didn=E2=80=99t know very well bac=
k then was how utterly vapid and territorial that team had become, which wo=
uld have meant having to collaborate with them directly on user-facing deci=
sions about the code base.

y:Verdana,Geneva,sans-serif;font-size:13.3333px;background-color:rgb(246,24=
6,239)">In 2012, Philip got what he wanted and I stopped resisting, so he f=
orked the existing project and copied the C library components into HTTPd c=
ore.

serif;font-size:13.3333px;background-color:rgb(246,246,239)">In 2016 I resi=
gned from the Foundation en masse. You can guess the reasons.

=3D"color:rgb(130,130,130);font-family:Verdana,Geneva,sans-serif;font-size:=
13.3333px;background-color:rgb(246,246,239)">In 2020 or so, Google=E2=80=99=
s Security Team took advantage of an alpha release of httpd 2.5 by fuzzing =
its 8 year old copy of apreq. It found a few hotspots that needed repair.p>

font-size:13.3333px;background-color:rgb(246,246,239)">Instead of having th=
e courtesy of reaching out to me, or anyone else involved in development of=
apreq, a junior engineer on the HTTPd team went about the business of =E2=
=80=9Cbug fixing=E2=80=9D the vulnerabilities Google found. You can see a r=
ecord of his trial and error work in every release since then.

=3D"color:rgb(130,130,130);font-family:Verdana,Geneva,sans-serif;font-size:=
13.3333px;background-color:rgb(246,246,239)">But the coup de grace was the =
2022 release of 2.17, wherein the rookie developer purposely introduced a f=
atal bug into the codebase, breaking a fifteen year old regression test.>

ont-size:13.3333px;background-color:rgb(246,246,239)">If you are wondering =
how something with a broken regression test winds up on CPAN, you=E2=80=99l=
l have to look into how RELENG is done in the server project.

=3D"color:rgb(130,130,130);font-family:Verdana,Geneva,sans-serif;font-size:=
13.3333px;background-color:rgb(246,246,239)">Long story short, they comment=
ed out the test and shipped it anyway, and called it a Security Release tha=
t fixed a vulnerability every prior release was susceptible to.

=3D"color:rgb(130,130,130);font-family:Verdana,Geneva,sans-serif;font-size:=
13.3333px;background-color:rgb(246,246,239)">Why do I care now? Because I=
=E2=80=99m the sucker users reach out to for answers as a known subject mat=
ter expert.

a,sans-serif;font-size:13.3333px;background-color:rgb(246,246,239)">This su=
cks, but I=E2=80=99m sorry to tell you that my days wearing the Superman ca=
pe at Apache ended 8 years ago.


ature_prefix">--
-smartmail=3D"gmail_signature">




--0000000000005d38fc0611ae6fad--

--===============0604959242==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout

--===============0604959242==--

  1. 2024-02-01 From: "Free Software Foundation" <info-at-fsf.org> Subject: [Hangout - NYLXS] Free Software Supporter -- Issue 190,
  2. 2024-02-01 Sandy Dave <sandy-at-esolvit.com> Subject: [Hangout - NYLXS] (#4976) Front-End Web Developer/Web Designer in
  3. 2024-02-05 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #654 - Perl and FOSDEM
  4. 2024-02-07 Ruben Safir <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] Censorship has always been part of the publishing
  5. 2024-02-08 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Look below for the key paragraph here - note we
  6. 2024-02-08 Ruben Safir <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] Indian response to Muslim Imperialism
  7. 2024-02-08 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Anything they want to do, they just do...
  8. 2024-02-09 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] odoo - if it is hallf of what they say it is
  9. 2024-02-11 Ruben Safir <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] the depths of the Nazi involvement with the UN in
  10. 2024-02-11 mayer ilovitz <pmamayeri-at-gmail.com> Re: [Hangout - NYLXS] the depths of the Nazi involvement with the
  11. 2024-02-11 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Tech and archeology
  12. 2024-02-12 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] The Hezbollah Threat - why war in the north can
  13. 2024-02-13 NYOUG <execdir-at-nyoug.org> Subject: [Hangout - NYLXS] Upcoming Events for Oracle Professionals
  14. 2024-02-14 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] It is open so it much be good. What can go wrong
  15. 2024-02-14 mayer ilovitz <pmamayeri-at-gmail.com> Subject: [Hangout - NYLXS] putting the NY CD 3 special election into
  16. 2024-02-14 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] this really just needs to be seen without my
  17. 2024-02-15 mayer ilovitz <pmamayeri-at-gmail.com> Re: [Hangout - NYLXS] this really just needs to be seen without my
  18. 2024-02-15 mayer ilovitz <pmamayeri-at-gmail.com> Subject: [Hangout - NYLXS] =?utf-8?q?washingtonpost=2Ecom_12/14/24=3A_?=
  19. 2024-02-16 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] [gcc-bugs-at-gcc.gnu.org: ` ` Piano ` `]
  20. 2024-02-18 Mithun Bhattacharya <mithnb-at-gmail.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  21. 2024-02-18 Mithun Bhattacharya <mithnb-at-gmail.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  22. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  23. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  24. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  25. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  26. 2024-02-18 Mithun Bhattacharya <mithnb-at-gmail.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  27. 2024-02-18 Mithun Bhattacharya <mithnb-at-gmail.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  28. 2024-02-15 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] static code analysis for Perl5 code?
  29. 2024-02-14 From: "Randolf Richardson" <randolf-at-modperl.pl> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  30. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Subject: [Hangout - NYLXS] HTTPd Devs Considered Harmful to Apache2::Request
  31. 2024-02-15 Joseph He <joseph.he.2008-at-gmail.com> Subject: [Hangout - NYLXS] static code analysis for Perl5 code?
  32. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  33. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  34. 2024-02-14 Ed Sabol <edwardjsabol-at-gmail.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  35. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  36. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  37. 2024-02-14 From: "Randolf Richardson" <randolf-at-modperl.pl> Subject: [Hangout - NYLXS] Case-sensitive $r->param?
  38. 2024-02-14 Ed Sabol <edwardjsabol-at-gmail.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  39. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Subject: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  40. 2024-02-14 Ruben Safir <ruben-at-mrbrklyn.com> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  41. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  42. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Subject: [Hangout - NYLXS] Reviving the mod_perl social network
  43. 2024-02-14 From: "Randolf Richardson" <randolf-at-modperl.pl> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  44. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  45. 2024-02-13 Joe Schaefer <joe-at-sunstarsys.com> Subject: [Hangout - NYLXS] Config Primer on mod_perl with mpm_event
  46. 2024-02-18 Mithun Bhattacharya <mithnb-at-gmail.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  47. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  48. 2024-02-18 Mithun Bhattacharya <mithnb-at-gmail.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  49. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  50. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  51. 2024-02-18 Mithun Bhattacharya <mithnb-at-gmail.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  52. 2024-02-18 Mithun Bhattacharya <mithnb-at-gmail.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  53. 2024-02-15 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] static code analysis for Perl5 code?
  54. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Subject: [Hangout - NYLXS] HTTPd Devs Considered Harmful to Apache2::Request
  55. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  56. 2024-02-14 From: "Randolf Richardson" <randolf-at-modperl.pl> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  57. 2024-02-14 Ed Sabol <edwardjsabol-at-gmail.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  58. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Subject: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  59. 2024-02-14 Ruben Safir <ruben-at-mrbrklyn.com> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  60. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  61. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Subject: [Hangout - NYLXS] Reviving the mod_perl social network
  62. 2024-02-14 From: "Randolf Richardson" <randolf-at-modperl.pl> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  63. 2024-02-15 Joseph He <joseph.he.2008-at-gmail.com> Subject: [Hangout - NYLXS] static code analysis for Perl5 code?
  64. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  65. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  66. 2024-02-14 From: "Randolf Richardson" <randolf-at-modperl.pl> Subject: [Hangout - NYLXS] Case-sensitive $r->param?
  67. 2024-02-13 Joe Schaefer <joe-at-sunstarsys.com> Subject: [Hangout - NYLXS] Config Primer on mod_perl with mpm_event
  68. 2024-02-18 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] HTTPd Devs Considered Harmful to
  69. 2024-02-14 Ed Sabol <edwardjsabol-at-gmail.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  70. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] how to make :Sealed subs reentrant...
  71. 2024-02-14 Joe Schaefer <joe-at-sunstarsys.com> Re: [Hangout - NYLXS] Case-sensitive $r->param?
  72. 2024-02-19 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #656 - Perl Conference
  73. 2024-02-19 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #656 - Perl Conference
  74. 2024-02-19 mayer ilovitz <pmamayeri-at-gmail.com> Subject: [Hangout - NYLXS] JP 2/19/24: The Truth About the Dearborn Jihad
  75. 2024-02-19 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] kashmir
  76. 2024-02-19 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] ill let you figure this out..
  77. 2024-02-21 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Non-systemd Distos
  78. 2024-02-21 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Lets play a game - what is this crap
  79. 2024-02-20 NYOUG <execdir-at-nyoug.org> Subject: [Hangout - NYLXS] Upcoming Events for Oracle Professionals
  80. 2024-02-21 James E Keenan <jkeenan-at-pobox.com> Subject: [Hangout - NYLXS] March 11 NY Perlmongers Social Meeting - Peculier
  81. 2024-02-22 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Massive Russian Cyber Attack paralizes healthcare
  82. 2024-02-23 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Just can not get right and wrong straigt
  83. 2024-02-23 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] cudu is being "open sourced"
  84. 2024-02-23 Ruben Safir <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] rembrandts
  85. 2024-02-23 Evgeny Grin <k2k-at-narod.ru> Subject: [Hangout - NYLXS] GNU libmicrohttpd v1.0.1 released
  86. 2024-02-25 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] firefox security and webassembly and VMS
  87. 2024-02-25 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] FWIW - from my daughter..
  88. 2024-02-25 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Listening to it in first account is very sobbering
  89. 2024-02-27 From: "Miriam Bastian, FSF" <info-at-fsf.org> Subject: [Hangout - NYLXS] Exciting talks, hands-on workshops,
  90. 2024-02-26 Touro Graduate School of Technology <info.gst-at-touro.edu> Subject: [Hangout - NYLXS] Workshop Tonight: Ethics In AI Workshop : Feb
  91. 2024-02-29 Ruben Safir <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] Donate $20 and put your name up
  92. 2024-02-29 Ruben Safir <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] Fwd: Contracting News: February 2024 Vendor
  93. 2024-02-29 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Swoden and the 4th amendment and this President
  94. 2024-02-24 Walt Mankowski <waltman-at-pobox.com> Re: [Hangout - NYLXS] March 11 NY Perlmongers Social Meeting -

NYLXS are Do'ers and the first step of Doing is Joining! Join NYLXS and make a difference in your community today!