[gentoo-user] Overlay for wickr

[gentoo-user] Overlay for wickr

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 266 bytes --]

Hi All,

Would anyone know which overlay has wickr[1], or if there is an ebuild for it?  
I can't find it in portage.

Also, do you use it and what do you think of it?  Is it as secure as claimed?

[1] https://www.wickr.com/downloads/

-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

Re: [gentoo-user] Overlay for wickr

[Emanuele Rusconi]

[-- Attachment #1: Type: text/plain, Size: 453 bytes --]

On 15 March 2015 at 20:20, Mick <michaelkintzios@gmail.com> wrote:

> Hi All,
>
> Would anyone know which overlay has wickr[1], or if there is an ebuild for
> it?
> I can't find it in portage.
>
> Also, do you use it and what do you think of it?  Is it as secure as
> claimed?
>
> [1] https://www.wickr.com/downloads/
>
> --
> Regards,
> Mick
>

It's not open source, is it?
Why do you want an ebuild to install a binary .deb file?

-- Emanuele Rusconi

[-- Attachment #2: Type: text/html, Size: 957 bytes --]

Re: [gentoo-user] Overlay for wickr

[Rich Freeman]

On Sun, Mar 15, 2015 at 6:03 PM, Emanuele Rusconi <emarsk@gmail.com> wrote:
>
> It's not open source, is it?
> Why do you want an ebuild to install a binary .deb file?

There aren't many of them, but there are ebuilds that install
proprietary binary files even in the main repository.  One of the
advantages of Gentoo is that we actually can distribute ebuilds like
these without distributing the copyrighted binaries they are used to
install.  Most other packaging systems put the files to be installed
in the same file as the metadata required to install them, which ends
up meaning that you can't distribute either.

That said, I have no idea if this particular program has been packaged
by anybody.

-- 
Rich

Re: [gentoo-user] Overlay for wickr

[Emanuele Rusconi]

[-- Attachment #1: Type: text/plain, Size: 1250 bytes --]

On 15 March 2015 at 23:15, Rich Freeman <rich0@gentoo.org> wrote:

> On Sun, Mar 15, 2015 at 6:03 PM, Emanuele Rusconi <emarsk@gmail.com>
> wrote:
> >
> > It's not open source, is it?
> > Why do you want an ebuild to install a binary .deb file?
>
> There aren't many of them, but there are ebuilds that install
> proprietary binary files even in the main repository.  One of the
> advantages of Gentoo is that we actually can distribute ebuilds like
> these without distributing the copyrighted binaries they are used to
> install.  Most other packaging systems put the files to be installed
> in the same file as the metadata required to install them, which ends
> up meaning that you can't distribute either.
>
> That said, I have no idea if this particular program has been packaged
> by anybody.
>
> --
> Rich
>
>
I understand the convenience of having an ebuild to distribute commonly
used software like flash, especially from a distribution POV, but the
question still goes unanswered: why does HE want an ebuild to install a
.deb package?

Anyway, http://gpo.zugaina.org/ shows no results, and I'm not aware of
any better resource to find ebuilds. Also, I never used or heard of that
software, so I'm afraid I have no answers, only questions.

[-- Attachment #2: Type: text/html, Size: 1920 bytes --]

Re: [gentoo-user] Overlay for wickr

[Rich Freeman]

On Sun, Mar 15, 2015 at 6:35 PM, Emanuele Rusconi <emarsk@gmail.com> wrote:
>
> I understand the convenience of having an ebuild to distribute commonly
> used software like flash, especially from a distribution POV, but the
> question still goes unanswered: why does HE want an ebuild to install a
> .deb package?
>

Obviously I can't speak for him, but some obvious benefits include:
1.  Convenience - emerge foo and you're done.
2.  Package-managed files.  So, you can uninstall it too.
3.  Automatic hash checking/etc - if the deb is tampered with then
portage will refuse to install it unless they also hack into the
Gentoo repo and change the hashes there as well.
4.  openrc init.d scripts and systemd units following Gentoo conventions/etc.
5.  Automated updates, possibly including a stable branch.
6.  If in the main tree, then you benefit from Gentoo's security policies.

-- 
Rich

Re: [gentoo-user] Overlay for wickr

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 1382 bytes --]

On Monday 16 Mar 2015 01:48:31 Rich Freeman wrote:
> On Sun, Mar 15, 2015 at 6:35 PM, Emanuele Rusconi <emarsk@gmail.com> wrote:
> > I understand the convenience of having an ebuild to distribute commonly
> > used software like flash, especially from a distribution POV, but the
> > question still goes unanswered: why does HE want an ebuild to install a
> > .deb package?
> 
> Obviously I can't speak for him, but some obvious benefits include:
> 1.  Convenience - emerge foo and you're done.
> 2.  Package-managed files.  So, you can uninstall it too.
> 3.  Automatic hash checking/etc - if the deb is tampered with then
> portage will refuse to install it unless they also hack into the
> Gentoo repo and change the hashes there as well.
> 4.  openrc init.d scripts and systemd units following Gentoo
> conventions/etc. 5.  Automated updates, possibly including a stable
> branch.
> 6.  If in the main tree, then you benefit from Gentoo's security policies.


Rich covered it very well on my behalf (thank you Rich).  I find it more 
convenient to use a repo's package manager to avoid proliferation of files 
that could cause clashes on my system.  In this case, I would rather use 
portage.

I've looked at zugaina too and didn't find anything, hence I asked here.  I'll 
file a bug at some point, unless anyone beats me to it.

-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

Re: [gentoo-user] Overlay for wickr

[Matti Nykyri]

> On Mar 16, 2015, at 8:28, Mick <michaelkintzios@gmail.com> wrote:
>  
> I've looked at zugaina too and didn't find anything, hence I asked here.  I'll 
> file a bug at some point, unless anyone beats me to it.

Writing an ebuild to do the install is like 5 min job :) I'm now in a train only with a phone, but when i get home i can write you one.

Just my opinion... I would never ever trust non open source encryption software. Everyting published isn't true :)

-- 
-Matti

Re: [gentoo-user] Overlay for wickr

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 929 bytes --]

On Monday 16 Mar 2015 06:49:18 Matti Nykyri wrote:
> > On Mar 16, 2015, at 8:28, Mick <michaelkintzios@gmail.com> wrote:
> > 
> > I've looked at zugaina too and didn't find anything, hence I asked here. 
> > I'll file a bug at some point, unless anyone beats me to it.
> 
> Writing an ebuild to do the install is like 5 min job :) I'm now in a train
> only with a phone, but when i get home i can write you one.
> 
> Just my opinion... I would never ever trust non open source encryption
> software. Everyting published isn't true :)

Right, I don't trust it either, but I was looking for an alternative to G-
Talk, I'm told it is no longer working on MSWindows with its native G-Talk 
client, unless the user has installed Chrome and enabled Google's Hangouts.

I was also looking for an alternative to WhatsApp for IOS.  Please shout if 
there's a better IM cross-platform application.

-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

Re: [gentoo-user] Overlay for wickr

[Matti Nykyri]

On Mon, Mar 16, 2015 at 08:49:18AM +0200, Matti Nykyri wrote:
> > On Mar 16, 2015, at 8:28, Mick <michaelkintzios@gmail.com> wrote:
> >  
> > I've looked at zugaina too and didn't find anything, hence I asked here.  I'll 
> > file a bug at some point, unless anyone beats me to it.
> 
> Writing an ebuild to do the install is like 5 min job :) I'm now in a train only with a phone, but when i get home i can write you one.
> 
> Just my opinion... I would never ever trust non open source encryption software. Everyting published isn't true :)

Ok... No I'm happily back home after circling around the World ;)

Doing the ebuild was a bit more tricky... The program has bad bugs :(

The wickr executable is linked against icu-52, but in the archive the libraries are libicui18n-53 -> had to make symbolic link
Also the symboltable in wickr had to be altered.

And the ebuild:

------------- Clip ---------------
EAPI=5

inherit eutils

DESCRIPTION="Wickr Top-Secret Messenger"
HOMEPAGE="https://www.wickr.com/downloads/"
SRC_URI="x86? ( http://mywickr.info/download.php?p=332 -> ${P}_i386.deb )
	amd64? ( http://mywickr.info/download.php?p=364 -> ${P}_amd64.deb )"

LICENCE=""
SLOT="0"
KEYWORDS="~amd64 ~x86"
IUSE="x86 amd64"

RDEPEND="sys-libs/glibc
	sys-devel/gcc
	sys-apps/util-linux
	media-sound/pulseaudio"

src_unpack() {
	mkdir ${S}
	cd ${S}

	ar x ${DISTDIR}/${A}
}

src_install() {
	cd ${D}
	tar --same-owner --preserve-permissions -xof ${S}/data.tar.xz

	if use x86 ; then
		MY_OFFSET=332312
	elif use amd64 ; then
		MY_OFFSET=393763
	fi
	echo "3" | dd of=usr/bin/wickr bs=1 count=1 seek=${MY_OFFSET} conv=notrunc

	cd usr/lib/wickr
	ln -s libicui18n.so.53 libicui18n.so.52
}
------------- Clip ---------------

After correcting those the software segfaults in libQt5core.so that is provided in the archive... So you probably need Qt5 installed.

-- 
-Matti

Re: [gentoo-user] Overlay for wickr

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 2179 bytes --]

On Friday 20 Mar 2015 19:59:12 Matti Nykyri wrote:
> On Mon, Mar 16, 2015 at 08:49:18AM +0200, Matti Nykyri wrote:
> > > On Mar 16, 2015, at 8:28, Mick <michaelkintzios@gmail.com> wrote:
> > > 
> > > I've looked at zugaina too and didn't find anything, hence I asked
> > > here.  I'll file a bug at some point, unless anyone beats me to it.
> > 
> > Writing an ebuild to do the install is like 5 min job :) I'm now in a
> > train only with a phone, but when i get home i can write you one.
> > 
> > Just my opinion... I would never ever trust non open source encryption
> > software. Everyting published isn't true :)
> 
> Ok... No I'm happily back home after circling around the World ;)
> 
> Doing the ebuild was a bit more tricky... The program has bad bugs :(
> 
> The wickr executable is linked against icu-52, but in the archive the
> libraries are libicui18n-53 -> had to make symbolic link Also the
> symboltable in wickr had to be altered.
> 
> And the ebuild:
> 
> ------------- Clip ---------------
> EAPI=5
> 
> inherit eutils
> 
> DESCRIPTION="Wickr Top-Secret Messenger"
> HOMEPAGE="https://www.wickr.com/downloads/"
> SRC_URI="x86? ( http://mywickr.info/download.php?p=332 -> ${P}_i386.deb )
> 	amd64? ( http://mywickr.info/download.php?p=364 -> ${P}_amd64.deb )"
> 
> LICENCE=""
> SLOT="0"
> KEYWORDS="~amd64 ~x86"
> IUSE="x86 amd64"
> 
> RDEPEND="sys-libs/glibc
> 	sys-devel/gcc
> 	sys-apps/util-linux
> 	media-sound/pulseaudio"
> 
> src_unpack() {
> 	mkdir ${S}
> 	cd ${S}
> 
> 	ar x ${DISTDIR}/${A}
> }
> 
> src_install() {
> 	cd ${D}
> 	tar --same-owner --preserve-permissions -xof ${S}/data.tar.xz
> 
> 	if use x86 ; then
> 		MY_OFFSET=332312
> 	elif use amd64 ; then
> 		MY_OFFSET=393763
> 	fi
> 	echo "3" | dd of=usr/bin/wickr bs=1 count=1 seek=${MY_OFFSET} conv=notrunc
> 
> 	cd usr/lib/wickr
> 	ln -s libicui18n.so.53 libicui18n.so.52
> }
> ------------- Clip ---------------
> 
> After correcting those the software segfaults in libQt5core.so that is
> provided in the archive... So you probably need Qt5 installed.

Thanks!  I will try it when I install qt5.

-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

[gentoo-user] Re: Overlay for wickr

[James]

Mick <michaelkintzios <at> gmail.com> writes:


> Would anyone know which overlay has wickr[1], or if there is an ebuild 
> for it?  I can't find it in portage.

wickr appears to be closed source, from what I read.

> Also, do you use it and what do you think of it?  Is it as secure 
> as claimed?  [1] https://www.wickr.com/downloads/


It's going to take a while. It is possible even upon duplication
that is has the ability to self corrupt. Is there going to be 
an algorithm that reconstructs after destruction?

I'm quite certain the NSA and such folks have legends of mathmaticians
and coders working on that: image restoration alogs....


I have found a few open source "self destructing" projects, here's
one you can read about [1].  For sure it is time for Gentooers to find
something and at least hack an embuild/overlay for it for use to
experiment around with. File a bug about needing a self destruction
option in gmail, such as mxhero [2] is another hack out there.


[1]
http://www.reddit.com/r/onions/comments/1p6ju4/announcing_lethe_a_new_open_source/

[2] http://www.mxhero.com/self-destructing-emails.html


hth,
James