|
From: <gai...@li...> - 2002-07-08 12:57:48
|
I'm moving this to the mailing list btw. My hope is that others might see this, and wish to help with the process, or have ideas. I'm stoked about the code clean up and being able to move the plugins to a different dir. I was getting some flack from the gaim developers for having all of the code in headers. My defense is that the first developer did all of that. I just never changed it. However, when I compile it and try to load it, it gives me "undefined symbol: passphrase_run_dialog" If I remember correctly that was always because we didn't link -lgpgme in the binary. Well we fixed it in the past by putting the -lgpgme in the LIBS= line. I'm not sure if this helps or not, but I hope it does. On the brighter side of life, I just got a modem.. not another shitty winmodem that came with this laptop, a real full blooded modem. So now I will be online more often and in linux. Feel free to IM me at w0d3n with any ideas as well. Please use the mailing list if anyone has ideas so we can share them as well. peace w0 --- Nadeem Riaz <na...@bl...> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Eric Krause wrote: > |>1.) Remove the key/screen name problem; you can > have > |>the person you are > |>talking to send you his uid in the message.(Even > |>automagically download > |>key from keyserver if they aren't in your keyring) > | > | > | Done. The key/screen name problem is fixed as of > | 0.9.6 or the latest cvs. We've known that was a > | problem for quite some time and was the main > reason I > | moved the code to use gpgme and not the straight > | forking to gpg. Right now the key's fingerprint > is > | sent as his identifier, which is then used to > | associate it with a key. Getting the keys from > the > | keyserver is not planned until version 2.0 > | > | > | > |>2.) You need to have each party sign their > messages > |>or you are can > |>become vulnerable to a man-in-the-middle attack. > |>I.e. somoene can alter > |>the bitstream in the middle and you can not > |>defintiely verify its origin. > | > | > | The other developer and I have talked at great > lengths > | about this problem and agree. Additional security > | features will also be implimented in v2.0. For > | example the creation of the rc5 key will be split > | between the two users. The initial key exchange > will > | be signed messages as well. The rest of the > messages > | need not be signed. > | > | > | > |>3.) Try to figure out how to allocate secure > memory > |>(so nothing is > |>written to hard disk) This probably requires gaim > to > |>be setuid, which is > |>probably incredibly insecure. > | > | > | An interesting problem. Not sure how to go about > it, > | but if you send a message to the mailing list it > might > | spark a good conversation. > | > | > | > |>4.) Try to coordinate proctocol w/some protocol > used > |>by a windows client > | > | > | Yes, we have looked at the possibility of doing > this > | as well. More so now that I have a winmodem and > I'm > | stuck using windows. We also plan to test and > then > | implement using gaim-e with all of the other > protocol > | plugins with gaim-e. Version 2.0 also has the > | daunting task of creating relatively secure chat > | rooms. We have hashed out many ideas on how to do > | this, if you want to add to the conversation, > again, > | send something to the list. > | > | > | > |>If you are intersted in these features, have plans > |>for them, or think > |>they'd be a bad idea, let me know please. I'll > |>probably start working on > |>some of it later this weekend. > | > | > | More hands are always welcome to make things work. > | However, we are really trying to freeze the code > so > | that we can produce a stable release before we > move on > | to the other great ideas that we want to > implement. > | As great of idea as this is, no one will want to > use > | it if gaim-e crashes gaim every hour. (which it > seems > | to be doing lately, and we can't figure out why) > | > | peace > | emk > | > | __________________________________________________ > | Do You Yahoo!? > | Sign up for SBC Yahoo! Dial - First Month Free > | http://sbc.yahoo.com > | > > Getting a stable version out definitely seems like a > first step. The CVS > version I downloaded hasn't crashed on me once, > though I haven't used it > for hours on end. Are the backtraces from the core > dump always the same, > and always in gaim-e code? > > The tgz I've attached are my modifications to a CVS > pulled a day or two > ago. The reason it isn't a diff is because the diff > would have been > larger. I basically redid the compile system. All > those header files now > have their own .c files. To compile just unpackage > in > gaim-<version>/plugins ; cd > gaim-<version>/plugins/gaim-e ; make && make > install . So installation and building shoudl be > easier now. I haven't > completely cleaned up all the files (i.e. move > function signatures to > appropriate header files (most are in gaim-e.h > still)). Note, I didn't > actaully change any lines of code, just moved most > of them from a .h to > a .c . If you like the way I've reoganized the > compiling, I can continue > to clean up the remaining parts and possibly clean > up some other minor > stuff. Probably be the easiest way for me to learn > the rest of the code. > > The archive @ > http://sourceforge.net/mailarchive/forum.php?forum_id=55 > doesn't show the discussion you mention (or I can't > find it). Are they > archived somewhere else? I've only found > http://sourceforge.net/forum/forum.php?thread_id=687780&forum_id=124253 > Although I have some thoughts on that in particular, > I guess there is no > point in discussing those until. > > > > - -- Nadeem > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (GNU/Linux) > Comment: Using GnuPG with Mozilla - > http://enigmail.mozdev.org > > iD8DBQE9Jq/Jo0oF08XXEu4RAtnAAJ4qvxSAiMaTEPZYiHwsvLYeYkBKowCdEgyr > HV+1DSlm7UYbNqgikV6gPxo= > =WG1j > -----END PGP SIGNATURE----- > > ATTACHMENT part 2 application/x-gzip name=gaim-e.tgz __________________________________________________ Do You Yahoo!? Sign up for SBC Yahoo! Dial - First Month Free http://sbc.yahoo.com |