prom dresses 2009
PROMS 0.12.1
PROMS project is a Web-based project management system. more>>
Proms is a Web-based project management system whose primary goal is to provide a facility for developers to communicate with other developers, to communicate things to end-users, and to get feed-back from users. It also acts as a placeholder for project information.
Projects can be split up into multiple parts and project maintainers can assign tasks and programmers to each part.
Proms is meant to be a very lightweight replacement of the sourceforge project management software, and has been built more or less modular.
Enhancements:
- This release adds deleting of files and todos, and the ability to flag projects as private.
- The "manage" tab is no longer visible for anonymous users.
- A serious bug that prevented mail from being sent and a bug in the creation of directories that hold project files have been fixed, as well as a bug in the setup script.
ProM 4.0
ProM is a new era in process mining tool support. more>>
Process Mining research is concerned with the extraction of knowledge about a (business) process from its process execution logs. Process Mining strives to gain insight into various perspectives, such as the process (or control flow) perspective, the performance, data, and organizational perspective (The processmining.org web site has more in-depth information and scientific publications available).
ProM is an extensible framework that supports a wide variety of process mining techniques in the form of plug-ins. It is platform independent as it is implemented in Java, and can be downloaded free of charge. We welcome and support practical applications of ProM! Note that the ProM framework is issued under an open source license, namely the Common Public License (CPL), and we invite researchers and developers to contribute in the form of new plug-ins.
Currently, there are already more than 90 plug-ins available, and we support the import of (and the conversion between) several process modelling languages, such as:
- Petri nets (PNML, TPN)
- EPCs / EPKs (Aris graph format, EPML)
- YAWL
- (and many more)
There are mining plugins, such as:
- Plugins supporting control-flow mining techniques (such as the Alpha algorithm, Genetic mining, Multi-phase mining, ...)
- Plugins analysing the organizational perspective (such as the Social Network miner, the Staff Assignment miner, ...)
- Plugins dealing with the data perspective (such as the Decision miner, ...)
(and many more)
Furthermore, there are analysis plugins dealing with:
- The verification of process models (e.g., Woflan analysis)
- Verification of Linear Temporal Logic (LTL) formulas on a log
- Checking the conformance between a given process model and a log
- Performance analysis (Basic statistical analysis, and Performance Analysis with a given process model)
- Finally, ProM sports a large array of log filters, which are a valuable tool for cleaning logs from undesired, or unimportant, artefacts.
Enhancements:
- This release features fundamental framework improvements and the addition of a major set of new plugins.
- The performance of log reading has been improved dramatically, introducing live modification of logs and random access.
- More than 70 newly added plugins substantially extend the analysis feature set.
MM3-WebAssistant Private 2009
Archives visited web pages with your browser to be used on- and offline. Offline each page is available with its original URL. There is no difference between surfing in the internet or archive. You can even use your bookmarks offline. Efficient use of the archive by marking and highlighting words. This proxy offline browser allows mobile users to access internet information when they dont have internet access. An ideal addition to every browser! more>>
MM3-WebAssistant Private - The offline browser is a personal proxy server sitting behind your regular browser (Firefox, IE, Safari, Opera - whatever!), silently and speedily handling all the network traffic. Unlike most offline browsers with this concept, you dont have to specifically tell WebAssistant to capture a website - it remembers everything you see, automatically adding new pages to the cache. WebAssistant updates your cached pages (in the background) so youve always got the latest version to hand. Theres no difference between surfing the web and surfing your archive; you can even use your bookmarks or search your pages offline when you dont have a network connection.
Your Benefits:
Work offline (train, plane, beach - wherever you like) without worrying that you have the info you need. Reduces the pressure of knowing what to save, and the necessity for repeating browsing sessions looking for something that was missed.
Incorporate the web into presentations or talks where you dont have internet access. You can sure youll always have the page you need with WebAssistant.
Mobile users have the flexibility of accessing information from the web without having to worry about expensive access points. Shun overpriced wifi access ports - or at least only pay for what you really need.
Important Features:
Automatically archive all pages visited.
Accelerates in the web online browsing or updates the archive.
No difference between on- and offline browsing.
Links to resources of cache archives are marked for quick navigation.
Compare HTML pages from internet and archive. The changes are highlighted.
Browse and interactive navigation in the original hierarchy of downloaded pages.
Burn a site (or many sites) to CD for backup or archive.
Supports the protocols HTTP and FTP.
Supplied with a detailed manual, a simple and completely comprehensive installation and deinstallation.
The reader is an ideal addition to every browser!
Enhancements:
Version 2008
System Requirements:Java of version 1.4 or higher<<less
msn-pecan 0.0.19
msn-pecan is an alternative MSN protocol plugin for libpurple more>>
Major Features:
- Support for personal messages (readonly)
- Server-side storage for display names
- Partial direct connection support
- Improved network IO
- Improved error handling
- Network issues tested with netem
- GObject usage
Enhancements
- Personal status messages now work properly (can be enabled and disabled).
- Voice clip support has been added.
- There is a fix for WLM 2009 user displays, P4-context support for groups.im, a new option to hide Plus! tags, and support for Plus! sounds.
Canadian Payroll Apr_2009-00
Canadian Payroll is a helpful tool for calculating Canadian payroll taxes. more>> Canadian Payroll Apr_2009-00 is a helpful tool for calculating Canadian payroll taxes. CdnPayroll is a collection of python functions which calculates Canadian payroll tax withholdings based on the most recent federal publication. Canadian Payroll is mostly for use by developers, but others use it with great success too.
Cdn Payroll is intended to be used primarily from another program or graphical user interface. This is because the numerous command line options necessary to fully implement the federal (and now provincial) tables become tedious very quickly.
Major Features:
- Federal taxes for all of Canada
- TONI provincial tables
- Several output options
- Holiday Pay
- Advances
- Ability to save file
- Spreadsheet output
- Cross platform command line
- Graphical Interface (Linux)
- New web interface included
- Distributed free under the GPL
Enhancements: Changes were made for the 88th edition of Payroll Deductions Formulas for Computer Programs for Canada (t4127-09e.pdf), which is effective January 01, 2009.
SureMoKu 2009-05-28
SureMoKu 2009-05-28 is another compact yet useful SMK analysis tool. It is actually a software used for analysing positions in renju / gomoku games more>>
Requirements:
- Python
schily 2009-07-06
schily is a set of tools written or managed by J?rg Schilling. more>>
Enhancements:
- Smake is allowed to use /bin/bosh instead of bash on Linux or ksh on HP-UX.
- Some small problems were fixed in smake.
- Cdrtools was upgraded to 2.01.01a53.
- Some extensions were made as a first step to allow compilation on the ATARI ST with MINT.
TBFeedNotifier 2009-02-16
TBFeedNotifier provides you with an extremely useful extension for the Thunderbird e-mail client to display notifications on new RSS feeds. more>> TBFeedNotifier 2009-02-16 provides you with an extremely useful extension for the Thunderbird e-mail client to display notifications on new RSS feeds. This program is totally free for everyone!
Requirements: Mozilla Thunderbird
ProM Import Framework 3.1
ProM Import Framework allows you to extract process enactment event logs from a set of information systems. more>>
These can be exported in the MXML format, which is the standard event log data format for Process Mining analysis techniques.
Process Mining is a family of a-posteriori analysis techniques to extract abstract information from process enactment logs. More in-depth information about the are of process mining is available at processmining.org.
Installation:
- Decompress and extract the provided *.tar.gz archive.
- This will create a folder ProMimport, containing all files necessary.
- Start the application by running the provided shell script start.sh.
- The import filter plugins delivered with your installation package are located in the Plugins folder inside the ProMimport directory.
- Load the plugins (which are packaged in *.jar files) that you want to use from within the running app. For that, use Load filter plugin.. from the Filters menu.
- 3rd party plugins, or plugins developed by you, can be added to the application in exactly the same manner.
- Once imported, filters are automatically added to the applications filter cache, and zre re-loaded on every successive startup. Further, all filter and application configuration data is transparently made persistent by the application.
- Thus, after importing all filter plugins necessary, you can safely delete the Plugins folder.
Enhancements:
- This is the initial release of the ProM framework under the new open source CPL license.
- Installers / disk images are provided for Windows and Mac OS X, while the provided source archive is also executable on all platforms supporting Java 5.0.
- Notice that this release depends on a Java runtime environment of version 1.5 / 5.0 or later.
- Prior JRE releases may yield unexpected errors.
Pngcrush 1.7.0
Pngcrush 1.7.0 is yet another extremely useful utility for everyone. It is actually an optimizer for PNG (Portable Network Graphics) files more>>
Pngcrush 1.7.0 is yet another extremely useful utility for everyone. It is actually an optimizer for PNG (Portable Network Graphics) files. It can be run from a commandline in an MSDOS window, or from a UNIX or LINUX commandline.
Its main purpose is to reduce the size of the PNG IDAT datastream by trying various compression levels an PNG filter methods. It also can be used to remove unwanted ancillary chunks, or to add certain chunks including gAMA, tRNS, iCCP, and textual chunks.
Please note that when statically linked to the supplied zlib code, this script is believed to be immune to the zlib-1.1.3 "double-free" bug, since by default it detects and rejects any "double-free" attempt. It merely generates a "Decompression Error" message and rejects the file.
Enhancements: Jul 18 2009
- Save (but do not recompress) APNG chunks if the output file has the ".apng" extension and the color_type and bit_depth are not changed.
Lyricue 1.9.9
Lyricue is used to edit/display song lyrics on a second screen/projector for use at singing events such as church services. more>>
You should use this tool because:
- With Lyricue you are not restricted to setting everything up before the event as you can add, remove and change songs on the fly.
- You can edit a song while it is up on the screen and quickly show your changes (good for when you notice a misspelling or the singers decide to change the words on you).
- You can even type up notes directly to the screen or quickly display a bible verse at an instants notice.
Major Features:
- Web interface available - Precue
- OpenGL accelerated server using Clutter
- Video backgrounds
- Display over live video
- Runs in English, German, French, Dutch or Swedish
- Networkable (ie run interface and server on different machines)
- User access controls
- Multiple Playlists
- Copyright info for songs
- Automatic Page advance
- Duplicate/Delete individual pages in playlist
- Preferences Dialog
- Re-orderable playlist
- Playlist entries to change background
- Can run at configurable resolution
- User-specific configuration/images (or can all refer to global one)
- All songs kept in a database and so screens are dynamically generated, allowing you to easily change the backdrop, font etc without having to change all the songs
- Can automatically create screens for bible verses (KJV included since there are licensing issues with NIV)
- Quick searching for songs
- Playlist shown as collapsible tree so easy to find wanted page
- Can use any image as backdrop (stored in database)
- Can add images to playlist (stored in database)
- Add/Edit/Remove Songs (even while they are being displayed)
- Honourize a song (change 'jesus' to 'Jesus' etc)
- Preview a song as you enter it
- Drag'n'Drop playlist adding
- Searching by song name or the lyrics themselves
- Change Font/Colours of server
- Graphical error reporting
- Spellchecking
Enhancements: 9/6/2009
- New clutter-based server (allows OpenGL accelerated transitions)
- Major UI re-working
- Presentation import
- Video display
- Webcam display
- Work better with non-english bibles
- Background transitions
- Songbeamer file import
- Gtk2-Perl 1.020 or later
- MySQL 4.0.12 or later
- Perl 5.8.0 or later

Gnome Catalog 0.3.4.2
This is a cataloging software for CDs and DVDs. more>>
Gnome Catalog 0.3.4.2 is a handy application for Gnome. It is actually a cataloging software for CDs and DVDs.
The program have been develop in python-gtk for gnome desktop, using pyvorbis, mp3info, musicbraiz, and sqlite as database backend. The program should be very easy of use and very fast.
Enhancements: Feb 21 2009
- German translation
- Solved bugs regarding utf8 characters
Requirements:
- python-gtk2
- python-pyvorbis
- python-pysqlite2
- python-gnome2
- gtk+
FunionFS 0.4.3
FunionFS is an Union filesystem for the FUSE driver. more>>
This program works only with the Fuse driver which is natively included since the 2.6.14 Linux kernel.
Above all, what is an Union filesystem?
It is a method used when one wants to manufacture LiveCD Linux such as Knoppix: support (CDROM) is only a read-only one.
The operating system, however, needs to write on this filesystem. The method consists in superimposing (Union) on the read only filesystem, a small size read-write one.
This filesystem (often stored in a RAMDISK) contains all the modifications made by OS on the CDROM content.
This method is often used for of Linux Stored in a PROM or a compressed file like in CRAMFS.
Enhancements:
- Some bugs have been corrected.
- A rewrite of the directory management is pending that will correct some problems that are happening when overlaying many directories.
Evernote Web Clipper 3.0.0.51093
Provides a button and context menus to easily add a selection or an entire page to Evernote. more>>
You just have to select a portion of text and images, then click. Results may vary depending on how the webpage is structured.
Enhancements: June 15, 2009
- Fix bugs causing instability on some Macintosh configuration.
Requirements: Mozilla Firefox
Fenris 0.07-m2 build 3245
Fenris is a multipurpose tracer, debugger, and code analysis tool. more>>
The main logical components are:
- Fenris: high-level tracer, a tool that detects the logic used in C programs to find and classify functions, logic program structure, calls, buffers, interaction with system and libraries, I/O and many other structures. Fenris is mostly a "whats inside" tracer, as opposed to ltrace or strace, tracers intended to inspect external "symptoms" of the internal program structure. Fenris does not depend on libbfd for accessing ELF structures, and thus is much more robust when dealing with "anti-debugging" code.
- libfnprints and dress: fingerprinting code that can be used to detect library functions embedded inside a static application, even without symbols, to make code analysis simplier; this functionality is both embedded in other components and available as a standalone tool that adds symtab to ELF binaries and can be used with any debugger or disassembler.
- Aegir: an interactive gdb-alike debugger with modular capabilities, instruction by instruction and breakpoint to breakpoint execution, and real-time access to all the goods offered by Fenris, such as high-level information about memory objects or logical code structure.
- nc-aegir: a SoftICE-alike GUI for Aegir, with automatic register, memory and code views, integrated Fenris output, and automatic Fenris control (now under development).
- Ragnarok: a visualisation tool for Fenris that delivers browsable information about many different aspects of program execution - code flow, function calls, memory object life, I/O, etc (to be redesigned using OpenDX or a similar data exploration interface).
- ...and some other companion utilities.
Code analysis is not limited to debugging, quality assurance or security audits. Understanding and handling file formats or communication protocols used by proprietary solutions, a problem that many corporations face when they decide to change their base software platform from one, obsolete or insufficient solution to another, perhaps more suitable, is a task that can consume long months and millions of dollars, especially when any misjudgment or misinterpretation is made.
Because of that, accurate and complete information about existing solutions has to be obtained and evaluated in a timely manner. This project is an attempt to fill the gap between currently used tools by providing a freely available program analysis utility, suitable for black-box code audits, algorithm analysis,
rapid reconnaissance in open-source projects, tracking down bugs, evaluating security subsystems, performing computer forensics, etc.
This program does not automate the process of auditing, and does not favor any particular use. Instead of that, it is intended to be a flexible and universal application that will be a valuable solution for many advanced users. While functional, it is probably not tested sufficiently, there are many issues to fix, several known bugs, some portability problems.
It is being released primarily to get user feedback, comments, and, most important, to request development support, as my resources are very limited, both in terms of available time and development platforms. This project is and will be distributed as a free software, regardless of projected use, accompanied by complete sources, under the terms and
conditions of GPL. Why do you might need this code? Well, there are few reasons...
Human beings are, so far, the best code analysts. Unlike computer programs, they have imagination, ability to build synthetic abstract models, and yet to observe and analyze smallest details at the same time. Functionality is often being described as "doing what the program is supposed to do", security as "doing what the program is supposed to do and
nothing more". While it might sound funny, that is the most general and complete definition we have. In most real-life scenarios only humans really know what are their expectations. Building strict formal models of our expectations does not necessarily mean that models themselves are flawless, and is very time-consuming. Then, even with such models,
validating the code is not always possible, due to its computational complexity. That is why real, live programs (not including some critical developments) do not have such models, do not follow any particular coding guidelines, and cannot be formally examined without human judgment.
Unfortunately, humans are also highly inaccurate and very expensive. They work slowly, and better results can be achieved by hiring better specialists and performing more careful audit. And after all, even the best expert can overlook something in complex, hard to read code. It is almost impossible for human to perform an accurate audit of a large, complex, heterogeneous project written e.g. in C - like Sendmail, BIND, Apache - and provide results in reasonable time.
Things get even worse when humans try to understand algorithms and protocols used by complex closed-source black box solutions. They are simply too slow, and not always able to make accurate guesses about dozens of complicated, conditional parameter passes and function calls before final action is taken.
While it might sound surprising, human-driven code audit is very similar to playing chess - it is a general analysis of possible states, way too many to be implicitly projected by our conscience, a result of experience, knowledge, some unparalleled capabilities of human brain, and luck. It is also a subject to false moves and misjudgment. And there are maybe just a few hundred excellent players.
As for today, freely and commercially available audit tools both use two opposite approaches. First approach tends to minimize human role by automating the review of source code. Source code analysis methods are good in spotting known, repeatable static errors in the code - such as format string vulnerabilities. On the other hand, static tools are not able to trace and analyze all possible execution paths of complex application by
simply looking at its source.
The reason for inability to follow all execution paths lies deeply in the foundations of modern computation theory, and one of its aspects is known as "the halting problem". Speaking in more general terms, in many cases (such as complex software, or even underlying operating system), the amount of medium needed to store all possible states of a complex program exceeds significantly the number of particles in the
universe; and the amount of time needed to generate and process them sequentially is greater than the lifetime of our universe, even having a machine that works with the speed of light.
This might be changed by the development of new computation models, such as quantum computing, or by creating mathematical models that allow us to make such problems non-polynomial - but for now, we are far from this point, and static analysis is restrained in many very serious ways, even though many software suppliers tend to market their products as the ultimate, 100% solutions. Subtle, complex, conditional dynamic errors, such as privilege dropping problems, input-dependent table overflows in C and many other issues usually cannot be detected without generating a completely unacceptable number of false positives.
This kind of software is highly dependent on coding style, and specific notation or development practices might render them less efficient - for example, automated audit utilities can usually detect problems like insecure call to strcpy() function, but will very likely not notice insecure manual copy in do-while
loop. The truth is, for programs that do not have previously built formal models, static auditing utilities look for known, common problems in known, common types of code in a very limited scope.
Another issue is the applicability of this approach to algorithm analysis tasks. In the domain of automated audit tools, this problem is "reduced" to building a formal model of program behavior, or, more appropriately, generating certain predictive statements about the code. While there are very interesting developments in this direction, such as the work of professor Patrick Cousot, it is very difficult to make any detailed, accurate and abstract enough run-time predictions for complex source code that has any immediate value in the analysis of unknown algorithm.
Last but not least, static analysis of sources can be deployed only when the source code is available, which does not have to be the case. This approach is a subject to many shortcomings, tricky assertions, and is a technique of strictly limited capabilities. This is, of course, not to dismiss this method - but to demonstrate that this much favored approach is not flawless and how much it needs to be accompanied with auxiliary methods.
The second approach to be discussed here is based on a dynamic run-time program analysis. This method is usually used to provide the user with information about actual program execution path, letting him make decisions on which path to follow and giving him free will to draw any conclusions and perform all the synthetic reasoning.
This method is
applied to a live binary executed in real-time and is based on monitoring syscalls (strace), libcalls (ltrace) or functions (xtrace); in certain cases, breakpoint debuggers, such as gdb, can be used, however it is usually not feasible to use them to perform anything more than in-depth analysis of a very small portion of program functionality. Usually, such analysis provides a very useful information on what is happening, and this information is provided in uniform, reduced-output form.
A careful auditor can analyze program behavior and find interesting or potentially dangerous run-time conditions. By monitoring how a given application interacts with external world, he (or she) can determine whether some other
conditions can be triggered and eventually explore them by examining sources or re-running the program. Advantages are enormous, as such software enables the auditor to spot very subtle errors in code that "looked good", to observe actual execution, not to try to figure it out, and to find or trace down not obvious or non-schematic vulnerabilities. Run-time trace tools are primarily used for fast reconnaissance tasks and for tracing down notorious errors that are not clearly visible in the source, significantly reducing the time of such operations.
There are, however, serious drawbacks related to this method. First of all, known tracing tools do not provide the complete information. They will detect strcpy() call, but wont report if exactly the same functionality has been implemented from scratch by the author of given program. And, in some cases, the amount of produced data
can be enormous, and because of its completely unstructured character, it makes the observation of overall execution vector almost impossible. Two most important problems are: correlating trace data with actual code, and determining what occurred in the "dark matter" between two lines of trace output.
There are some attempts to combine both approaches - run-time evaluation and source code analysis - such as Purify or many other commercial development support products. Unfortunately, they all feature a limited set of capabilities that need development-side or compilation-time support and are not really suitable for comprehending black box solutions or performing a general analysis. Most of them are targeted for dynamic memory debugging and code / memory profiling.
While not mentioned above, there is also another approach to black-box code - high-level decompiler. However, the complexity of modern compilers makes it very difficult to develop an effective C decompiler or similar utility, and there are only a few (two?) projects available to accomplish it, all of them not able to deal with too complex or optimized code. Finally, there is no guarantee that generated output code will be any help in comprehending the program. For now, this approach remains almost purely theoretical,
and I am not aware of any auditors using it extensively. Why? Well, heres an example of decompiled, mildly optimized code *with* some symbolic information: http://www.backerstreet.com/rec/ex386/hdgO.rec . One may argue it is less readable than cross-referenced disassembly.
This project, Fenris, is named after the monstrous wolf, son of the Norse god Loki. It is not the ultimate answer to all questions, not a solution for all problems, and under no circumstances is intended to replace other tools and techniques. On the other hand, it makes one step forward compared to other tools, trying to support the auditor and to make his work much more effective. This is accomplished by combining a number of techniques, including partial run-time decompiler, stateful analysis, code fingerprinting, I/O analysis, high-level visualization layer, traditional interactive debugger features and run-time code modification capabilities. The goal is to provide a very detailed trace information, and, at the same time, to provide data suitable to build a model of program behavior more quickly and in more convenient way.
Fenris is not supposed to find vulnerabilities or bugs, or to guess algorithms or describe protocols. It is supposed to report and analyze the execution path - detect and describe functional blocks, monitor data flow in the program, marking its lifetime, source, migration and destination, analyze how functions work and what conditions are evaluated.
At the end, it can deliver you an execution model of traced program (or arbitrarily chosen portion of it, if complete trace results in too much noise or irrelevant information), and hint you how this model can change in different conditions. Fenris does not need source codes of analyzed application, but obviously does not keep the auditor from using them.
For many users, Fenris might be a new tool or tools, for others - just a command-line replacement or addition to strace, ltrace, gdb or similar applications (theres a brief list of other nice tools in doc/other.txt). And thats the idea - to build a tool that is simple, reusable, but also precise and smart. It is supposed to have advantages over other tools, but not to be an ultimate replacement or the final solution. Some users can just use very specific features, such as automated function fingerprinting, and use companion tools instead of the main program.
- Page: 1 of 2
- 1
- 2