Delivery-Date: Fri, 22 May 2015 07:59:23 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id B25CB1E0873
	for <archiver@seul.org>; Fri, 22 May 2015 07:59:20 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 9A30535B96;
	Fri, 22 May 2015 11:59:17 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 5493D35B87
 for <tor-talk@lists.torproject.org>; Fri, 22 May 2015 11:59:14 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id F2mpc_RUCAGW for <tor-talk@lists.torproject.org>;
 Fri, 22 May 2015 11:59:14 +0000 (UTC)
Received: from mail-ob0-x229.google.com (mail-ob0-x229.google.com
 [IPv6:2607:f8b0:4003:c01::229])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 2689835B86
 for <tor-talk@lists.torproject.org>; Fri, 22 May 2015 11:59:14 +0000 (UTC)
Received: by obcus9 with SMTP id us9so11302808obc.2
 for <tor-talk@lists.torproject.org>; Fri, 22 May 2015 04:59:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=bentasker.co.uk; s=google;
 h=mime-version:in-reply-to:references:date:message-id:subject:from:to
 :content-type; bh=h9Msbkno3VfwntfjLQONCcvFks9ZAYghxAVpQaBTG2A=;
 b=U0zAkq0BEbN2i1DKYO3NnlMCPlp1ky2Y7m1UEv8I1QckbRm09FYLJw5vZl6SsQ1j/r
 ffVsAInEEAZ/20A92XoikBCdvyaIND37WqmYTft7V6GioQDPzFrjywcTXw853svvWuLr
 msiW+o7rIZA6IHFsjMTu2nrHd5NA3GllnPT5A=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:in-reply-to:references:date
 :message-id:subject:from:to:content-type;
 bh=h9Msbkno3VfwntfjLQONCcvFks9ZAYghxAVpQaBTG2A=;
 b=GcnyngoGm0/cGZUYEG3v7Xayu/euriUpK+tH1WF8/nksepYSyk0afnK3tW3KAErFOn
 JW0vItUSpD45I8/0zaNxADcMrp7dGEv+8v04TXI/zDLtC+KXXcF5rjs1z+BanVpYe61f
 geJYGhd6gEbp0qjt1aYC1fBTN3rFrk+TL5WIwpZASQkxqiPuAMAJUgite1qK8A9uGJaO
 gD0UfX9AArKhqOeJjudKw9Jct7RLidRw+dv0JZTcRda+IpCGTVs2uZcUqx/x1E76nStV
 Kd01axnzAweMmWg1xdSAmNHBYZfqR/8IPVZHHAW+Fm1bqw37NVRt+MMbdEA9DjcJnH4A
 QFRg==
X-Gm-Message-State: ALoCoQljbyZO5pUwryJfwLu8Xl3ZMnaBFCUd0zeShDMyAd0nRJpuIEZTlRPTpirvDlmp8oevgxZY
MIME-Version: 1.0
X-Received: by 10.182.80.225 with SMTP id u1mr6415589obx.23.1432295951900;
 Fri, 22 May 2015 04:59:11 -0700 (PDT)
Received: by 10.76.83.169 with HTTP; Fri, 22 May 2015 04:59:11 -0700 (PDT)
X-Originating-IP: [86.137.150.43]
In-Reply-To: <555F0D9D.6050809@rawbw.com>
References: <CAD2Ti2-qdymrnM-nHqP2sVBYP=notY6sW54dQ1to-KTbkTEY4A@mail.gmail.com>
 <555E2BFC.6000709@rawbw.com> <20150521224759.10603.72916@KingMob>
 <555E6C5A.2090305@rawbw.com>
 <CABMkiz7wxX10xCVRH_seefCWuWx=oNs5Qd7UH19LAHmJdeTaNA@mail.gmail.com>
 <555F0D9D.6050809@rawbw.com>
Date: Fri, 22 May 2015 12:59:11 +0100
Message-ID: <CABMkiz7Scr9ZCy4iw5McOB60pU7StdwF2BX8+SZ8Cvz6iMfeHg@mail.gmail.com>
From: Ben Tasker <ben@bentasker.co.uk>
To: tor-talk@lists.torproject.org
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] Mailpile SMTorP [ref: nexgen P2P email]
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

Actually, having taken a look, I stand corrected. Although it started off
as just Python, Node has seeped it's way in a little bit (in terms of if
you're wanting to build from source).

They're using Grunt (by default) to process LESS files, which requires
node, you've also got bower (that should have jumped out at me in your
error!).

Your make all, of course, builds the JS and CSS, which uses Grunt and Bower.

As far as I can see, Node is only used for automating parts of the build,
which to be honest makes it worse in my view - requiring a completely
different tool chain just to build?

You *can* run Mailpile without having Node installed by using the pre-built
binaries, just install the dependencies, but that's placing an awful lot of
trust in the repo (and the devs themselves).

There was a slight off-topic tangent about "why not use node" here[1] in
2013 but around a year later Grunt was introduced in Oct 14[2] (hadn't
realised my build was quite so out of date....). Not going to dig any
further.

So, basically, you have two options

- trust the devs never to fold to pressure and tamper with the binaries
- Use node to build your own from source

So

> Mailpile certainly doesn't look like as secure as such system could be.

Sadly it looks that way, though I doubt it's likely to change, I've been
waiting for the 1.0 milestone to see whether the other issues I have with
it get addressed. Some, I know, have as the GH issues have been resolved,
so I'm being patient with the other bits :)

[1] - https://github.com/mailpile/Mailpile/issues/58
[2] -
https://github.com/mailpile/Mailpile/commit/f21a1e92b483f48a83ba44347681bd812b636923



On Fri, May 22, 2015 at 12:06 PM, Yuri <yuri@rawbw.com> wrote:

> On 05/22/2015 02:52, Ben Tasker wrote:
>
>> What procedure did you use to try and make the package? I'm running
>> Mailpile and definitely don't have node set up.
>>
>> If you're building the dev version, one of it's requirement's is nose so
>> perhaps there's a typo kicking about?
>>
>
> In my case, framework by default ran 'make -f Makefile all', that's when
> it needs node.
>
>
> Yuri
> --
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>



-- 
Ben Tasker
https://www.bentasker.co.uk
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

