Delivery-Date: Sat, 23 May 2015 22:07:48 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.5 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FORGED_YAHOO_RCVD,FREEMAIL_FROM,RCVD_IN_DNSWL_MED,T_DKIM_INVALID,
	T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 5FC4F1E0A9B
	for <archiver@seul.org>; Sat, 23 May 2015 22:07:45 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 8970934E96;
	Sun, 24 May 2015 02:07:37 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 8C8FA34E09
 for <tor-talk@lists.torproject.org>; Sun, 24 May 2015 02:07:33 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id cUrsZ4_NKyOk for <tor-talk@lists.torproject.org>;
 Sun, 24 May 2015 02:07:33 +0000 (UTC)
Received: from nm24-vm0.bullet.mail.bf1.yahoo.com
 (nm24-vm0.bullet.mail.bf1.yahoo.com [98.139.213.161])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 6635D34DE6
 for <tor-talk@lists.torproject.org>; Sun, 24 May 2015 02:07:33 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;
 t=1432433250; bh=EGwObxEaeW5s2CIjsqNfE2yypNQuPY9caLuS7WkGOYo=;
 h=Date:From:To:Subject:References:In-Reply-To:From:Subject;
 b=nn2CT6Cp8KjMikfEcsdoyz+2qYxqfuaToX1WngXFb4y1X2dRs2sREda/e6oppbNLpq1NZSUhJiRl5pZ+O/zEYURJOheGUj9utrjD/oyk1AIEvx7Txazj5EkdtRvER4qMU8yHU11lX5x6mMefHa5IaedsCIQXld47BjZcp2G76NN0/GxuQQ1Q15xjJ8QeWPf0phkJXBPhO8ZGjWqy2T+VNl6cEShBhXfogj0/ZG5lSbtP7O9QbLa2R2z0MeBnvRAxFrxQe9fZVHlnUqsIKHydrrlnWnSa77dBnxA0hJFf9v9fl+KNQg7upNyXro1xJ1kmHA9VJshxsyHanqtLvCK2ww==
Received: from [66.196.81.174] by nm24.bullet.mail.bf1.yahoo.com with NNFMP;
 24 May 2015 02:07:30 -0000
Received: from [68.142.230.78] by tm20.bullet.mail.bf1.yahoo.com with NNFMP;
 24 May 2015 02:07:30 -0000
Received: from [127.0.0.1] by smtp235.mail.bf1.yahoo.com with NNFMP;
 24 May 2015 02:07:30 -0000
X-Yahoo-Newman-Id: 442214.91958.bm@smtp235.mail.bf1.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: OqM6_CoVM1mehbTnu7CNo0CTINvWJF8unoCLaCRX.QQfx_W
 us0DYrTnSYi2MBEkgEV1RDCK33Q1_W.xF6s_PpaI8ZttrUQAxWPD.StFoUZ0
 IaCpHrDJuz__FDF3vr3dzbCRVxtt65_Ec3HLbURRh5c5rAIQr3_B_aOXWb6i
 O76ijEam4fLs_l7enlREgo.FZUuYR.wi40_TWPy4JiKySVbSVGSBA7OTJZnm
 qqgDyeTQia6roaa0fQVu0rzlRKu9WZJ5yxHa86SduZjj2MgcmO0fyULXW.jl
 TvOVt6bzGgoZdAUE08OdmG62O1fWPv.r1H0EUjAGYBNqHV7h8OhdgkRdiyX0
 GrHXFMeGDcVQUyqy0SPMZARjJD.3pCtCfusnzQFC7kslAs8NLrNFC6lzAHRl
 tGYwKY99K5OZBpon9Of8zOrA1IIz.Nr57KWAOgp1gLv4pm9GkhNo5oJxUmFr
 5fYQgw6hexxdvjWpIChsg_7NTEnwYkz19ZWhF7k3XVkWpwnjKLBS6s2R0yi7
 jFk6zpvHV_dwo9mXKC4h44azS8RYzrAKLbQ--
X-Yahoo-SMTP: 2naF56eswBDuYDy9JW2WHf3pncV9
Message-ID: <55613256.4020304@yahoo.com>
Date: Sat, 23 May 2015 22:07:18 -0400
From: Jonathan Wilkes <jancsika@yahoo.com>
User-Agent: Mozilla/5.0 (X11; Linux i686;
 rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <CAD2Ti2-qdymrnM-nHqP2sVBYP=notY6sW54dQ1to-KTbkTEY4A@mail.gmail.com>
 <555E2BFC.6000709@rawbw.com> <20150521224759.10603.72916@KingMob>
 <555E6C5A.2090305@rawbw.com>
 <CABMkiz7wxX10xCVRH_seefCWuWx=oNs5Qd7UH19LAHmJdeTaNA@mail.gmail.com>
In-Reply-To: <CABMkiz7wxX10xCVRH_seefCWuWx=oNs5Qd7UH19LAHmJdeTaNA@mail.gmail.com>
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] Mailpile SMTorP [ref: nexgen P2P email]
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On 05/22/2015 05:52 AM, Ben Tasker wrote:
> What procedure did you use to try and make the package? I'm running
> Mailpile and definitely don't have node set up.
>
> If you're building the dev version, one of it's requirement's is nose so
> perhaps there's a typo kicking about?
>
> On Fri, May 22, 2015 at 12:38 AM, Yuri <yuri@rawbw.com> wrote:
>
>> On 05/21/2015 15:47, Ruben Pollan wrote:
>>
>>> I find really funny when people rant about things without even looking on
>>> what
>>> they are talking about.
>>>
>>> Mailpile does not use node, it's written in python and all the javascript
>>> of it
>>> is for the browser. Up to now mailpile is in a beta status and is too
>>> soon to
>>> value if their distribution methods are trustworthy.
>>>
>> Please don't hurt yourself while falling from your chair laughing, because
>> I tried to make a package and it breaks:
>> --- js ---
>> bower install
>> env: node: No such file or directory
>> *** [js] Error code 127
>>
>> Did you just say *Mailpile does not use node* ?

 From the Mailpile Makefile:
debian-dev:
     sudo apt-get install python-imaging python-lxml python-jinja2 pep8 \
                          ruby-dev yui-compressor python-nose spambayes \
                          phantomjs python-pip python-mock npm
     if [ "$(shell cat /etc/debian_version)" = "jessie/sid"  ]; then\
         sudo apt-get install rubygems-integration;\
     else \
         sudo apt-get install rubygems; \
     fi
     sudo apt-get install python-pgpdump || pip install pgpdump
     sudo pip install 'selenium>=2.40.0'
     which lessc >/dev/null || sudo gem install therubyracer less
     which bower >/dev/null || sudo npm install -g bower
     which uglify >/dev/null || sudo npm install -g uglify
...

I'm not a security specialist, but it looks like if you don't already 
have bower
and uglify installed on your Debian system this will attempt to download
the unsigned packages using npm.

On Jessie:
aptitude search bower
returns nothing.

But
aptitude search uglify
p   node-uglify                     - JavaScript parser, 
mangler/compressor and
v   uglifyjs                        -

On both Jessie and Wheezy, Mailpile's Makefile will pull a node module 
from an
unsigned package manager even though that same package is available from
a Debian mirror (where the packages _are_ signed).

In any case, someone should make the relevant (and trivial) fix to the 
build script.
Plus address any other trivial problems that reveal an alarming lack of 
discipline
for software attempting to juggle both secure and insecure messaging in 
the same UI.

-Jonathan

>>
>>
>> Yuri
>> --
>> tor-talk mailing list - tor-talk@lists.torproject.org
>> To unsubscribe or change other settings go to
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>>
>
>

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

