Re: [Slackbuilds-users] Remind and Wyrd errors

[T3 slider]

On Thu, Sep 5, 2019, 8:31 AM Jostein Berntsen  wrote:

> Remind has got a new download page and a new version 3.1.16:
>
> https://dianne.skoll.ca/projects/remind/download/remind-03.01.16.tar.gz
>
> Wyrd errors out with this after the dependencies have been installed:
>
> hecking for working ncurses library... found in -lncurses
> checking for term.h... configure: error: not found
> configure: error: ./configure failed for curses
>

Thanks for the heads up, I may have neglected to rebuild wyrd after
upgrading remind (I can't remember offhand), though the error you've posted
doesn't really look like a remind linking issue. I'll take a look this
weekend. Wyrd is essentially abandonware at this point but I still use it
so I'll try to make sure it works.

-T3slider

>
___
SlackBuilds-users mailing list
SlackBuilds-users@slackbuilds.org
https://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
Archives - https://lists.slackbuilds.org/pipermail/slackbuilds-users/
FAQ - https://slackbuilds.org/faq/

Re: [Slackbuilds-users] remind source missing

[T3 slider]

Thanks for the heads-up, I'll try to push an update (version bump with the
right url) before the next SBo update.

-T3slider

On Mon, Jul 22, 2019, 9:09 PM Jostein Berntsen  wrote:

> When remind SlackBuild gives me "404 not found" when installing.
>
> This should be updated to:
>
> https://dianne.skoll.ca/projects/remind/download/remind-03.01.16.tar.gz
>
>
> Jostein
> ___
> SlackBuilds-users mailing list
> SlackBuilds-users@slackbuilds.org
> https://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
> Archives - https://lists.slackbuilds.org/pipermail/slackbuilds-users/
> FAQ - https://slackbuilds.org/faq/
>
>
___
SlackBuilds-users mailing list
SlackBuilds-users@slackbuilds.org
https://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
Archives - https://lists.slackbuilds.org/pipermail/slackbuilds-users/
FAQ - https://slackbuilds.org/faq/

Re: [Slackbuilds-users] MD5 hash sums

[T3 slider]

On Wed, Aug 22, 2018, 11:15 PM David O'Shaughnessy  wrote:

> For an
> attacker to change the upstream source archive without changing the MD5
> requires a 2nd preimage attack, which as far as I understand is not
> computationally feasible at present. This is different to a much simpler
> collision attack, where the attacker generates two _new_ archives with
> new (and matching) MD5s.
>

The download files do not necessarily have to be tar archives, and in some
cases (generally those with multiple download files and therefore multiple
checksums), individual files can be included for download. Intentional PDF
collisions have been around for ages (see
https://www.mscs.dal.ca/~selinger/md5collision/ ), so if a SlackBuild
includes some documentation as a download link, and the upstream server has
since been compromised, a user could definitely be stuck with a malicious
file even if the SlackBuild maintainer did everything right and verified
upstream signatures. It is probably more difficult to generate tarballs
with collisions but I'm guessing it isn't quite as difficult as we're
pretending it is, and it's irrelevant since unzipped files can be passed as
download links.

Simply put, this is bad security. Anyone who disagrees doesn't understand
the problem. Can't we just add an optional sha256sum in the .info file and
maintainers can gradually add these checksums to their SlackBuilds,
targeting some point in the future that these fields will be required (and
possibly the md5s retired)?

-T3slider

>
___
SlackBuilds-users mailing list
SlackBuilds-users@slackbuilds.org
https://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
Archives - https://lists.slackbuilds.org/pipermail/slackbuilds-users/
FAQ - https://slackbuilds.org/faq/

Re: [Slackbuilds-users] Download URLs gone MIA

[T3 slider]

The "official" links to old versions for MakeMKV are here:
https://makemkv.com/download/old/

However, I'll see if I can upgrade this tomorrow (it's currently one minor
version behind).

-T3slider

On Mon, May 21, 2018, 11:27 PM B Watson  wrote:

> Downloads for multimedia/makemkv are 404. Found copies with matching
> md5sums here:
>
> http://ftp.osuosl.org/pub/gentoo/distfiles/makemkv-oss-1.12.0.tar.gz
> http://ftp.osuosl.org/pub/gentoo/distfiles/makemkv-bin-1.12.0.tar.gz
>
> Also office/gnucash3 is missing, found a matching copy here:
>
> http://ftp.netbsd.org/pub/pkgsrc/distfiles/gnucash-3.1.tar.bz2
> ___
> SlackBuilds-users mailing list
> SlackBuilds-users@slackbuilds.org
> https://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
> Archives - https://lists.slackbuilds.org/pipermail/slackbuilds-users/
> FAQ - https://slackbuilds.org/faq/
>
>
___
SlackBuilds-users mailing list
SlackBuilds-users@slackbuilds.org
https://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
Archives - https://lists.slackbuilds.org/pipermail/slackbuilds-users/
FAQ - https://slackbuilds.org/faq/

Re: [Slackbuilds-users] Link corrupted dnscrypt-proxy (1.9.5) SlackBuilds

[T3 slider]

Thanks for updating the links Willy, I'll look at updating the version over
the weekend.

-T3slider

On Feb 28, 2018 1:05 PM, "Willy Sudiarto Raharjo" 
wrote:

> Hello, I was trying to install dnscryp-proxy from SlackBuilds, but link
> do not work.
>
> I think because of Cisco bought dnscrypt.org  now
> is called opendns.com 

I have this fixed on my branch
You can get this from
https://sources.lede-project.org/dnscrypt-proxy-1.9.5.tar.bz2


--
Willy Sudiarto Raharjo


___
SlackBuilds-users mailing list
SlackBuilds-users@slackbuilds.org
https://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
Archives - https://lists.slackbuilds.org/pipermail/slackbuilds-users/
FAQ - https://slackbuilds.org/faq/
___
SlackBuilds-users mailing list
SlackBuilds-users@slackbuilds.org
https://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
Archives - https://lists.slackbuilds.org/pipermail/slackbuilds-users/
FAQ - https://slackbuilds.org/faq/