<html><head></head><body><p dir=ltr>Good point can anyone verify this?</p>
<br><br><div class="gmail_quote">On June 30, 2014 10:07:21 AM CDT, Leif Ryge <leif@synthesize.us> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">Unfortunately (unless I'm missing something; I haven't investigated fully) the<br />statement "'pip install allmydata-tahoe' now works" is rather dangerously<br />misleading as it implies that that is a safe command to run on an<br />internet-connected computer.<br /><br />Recent versions of pip verify SSL certificates and won't download over<br />unencrypted HTTP unless you specifically tell it to. But, unless I'm mistaken,<br />"pip install allmydata-tahoe" will still run tahoe's "<a href="http://setup.py">setup.py</a> build" which<br />will brazenly download and execute unverified code.<br /><br />If I am mistaken (and I hope I am!) someone should close<br /><a href="https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2055">https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2055</a> ("Building tahoe safely is<br />non-trivial").<br /><br />~leif<br /><br />On Mon, Jun 30, 2014 at 06:58:30AM -0700, Callme Whatiwant wrote:<br /><blockquote class="gmail_quote"
style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> Huzzah!<br /> <br /> On Mon, Jun 23, 2014 at 12:47 PM, Brian Warner <warner@lothar.com> wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Just a heads up, the new Nevow-0.11.1 release a few days ago fixed<br /> tahoe's #2032, which means that you should now be able to install tahoe<br /> with just:<br /><br /> pip install allmydata-tahoe<br /><br /> That should grab all the necessary dependencies for you, including Twisted.<br /><br /> Hooray for easier installations!<br /><br /> cheers,<br /> -Brian<br /><br /> #2032: <a href="https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2032">https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2032</a><br /><hr /><br /> tahoe-dev mailing list<br /> tahoe-dev@tahoe-lafs.org<br /> <a
href="https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev">https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev</a><br /></blockquote><hr /><br /> tahoe-dev mailing list<br /> tahoe-dev@tahoe-lafs.org<br /> <a href="https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev">https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev</a><br /></blockquote></pre><p style="margin-top: 2.5em; margin-bottom: 1em; border-bottom: 1px solid #000"></p><pre class="k9mail"><hr /><br />tahoe-dev mailing list<br />tahoe-dev@tahoe-lafs.org<br /><a href="https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev">https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev</a><br /></pre></blockquote></div><br>
-- <br>
Sent from Kaiten Mail. Please excuse my brevity.</body></html>