Author Topic: i2phex 0.1.1.26 released  (Read 5017 times)

0 Members and 1 Guest are viewing this topic.

Offline bitz

  • Advanced
  • ***
  • Posts: 160
  • Karma: +2/-0
  • Planet Peer Community
    • View Profile
    • My Blog
i2phex 0.1.1.26 released
« on: September 20, 2005, 05:57:54 AM »
Quote from: legion
New I2Phex Version Released Today
Since nobody else has put together a updated distribution, builds and it has been over a week since jrandom's update to the source.
I decided to do it myself. ;)

Get it from
http://legion.i2p/archives/i2phex_0.1.1.26.zip
Or once the mirrors have been updated
http://55cancri.i2p/archive/i2phex_0.1.1.26.zip
http://ptm.i2p/i2phex_0.1.1.26.zip

Here is its sha1 hash
Code: [Select]
4295EB5AF63E43AEAB2A09960B1C4438DFE01ED4
Accordingly I also updated my i2phex launcher, as the old one will no longer work with this new version.

http://legion.i2p/archives/I2PhexLauncher.zip
Or once the mirror has been updated
http://55cancri.i2p/archive/I2PhexLauncher.zip

Here is its sha1 hash
Code: [Select]
BA3AB5B3FB97A2E5B6F99C0D6F3336E237C59F64
You can get the source archive from http://legion.i2p/pages/Archives.html
Here is its sha1 hash
Code: [Select]
FC9504E6679A9237577A9AD6471CA8EE0A58F061
I hope my releasing this new version does not upset anyone.

Offline postman

  • Advanced
  • ***
  • Posts: 281
  • Karma: +5/-0
  • Planet Peer Community
    • View Profile
Re: i2phex 0.1.1.26 released
« Reply #1 on: September 20, 2005, 01:08:41 PM »
WARNING:


this is not a release by the i2phex developer sirup!
It does not seem to contain any sourcecode.


Please be careful what you install on your machine

postman
--
postman@i2pmail.org
Postmaster and Administrator
http://hq.postman.i2p - I2P's free and anonymous Mailsystem

Offline bitz

  • Advanced
  • ***
  • Posts: 160
  • Karma: +2/-0
  • Planet Peer Community
    • View Profile
    • My Blog
Re: i2phex 0.1.1.26 released
« Reply #2 on: September 20, 2005, 02:12:09 PM »
WARNING:
this is not a release by the i2phex developer sirup!
It does not seem to contain any sourcecode.
Please be careful what you install on your machine
postman

Really you don't say...

Quote from: legion
New I2Phex Version Released Today
You can get the source archive from http://legion.i2p/pages/Archives.html
Here is its sha1 hash
Code: [Select]
FC9504E6679A9237577A9AD6471CA8EE0A58F061

Oh then what is that? Legion was kind enough to even post hashes, a build, source, a updated launcher and was rather clear about everything.

Also doesn't this make it clear that it is from legion and not sirup.

Quote from: legion
Since nobody else has put together a updated distribution, builds and it has been over a week since jrandom's update to the source.
I decided to do it myself. ;)

I guess I'm just wondering if that warning was really needed. Thing is you don't have to just trust legion, you can download the source, look it over and compile it yourself.

Nothing seems all that questionable about this release it to me, then again it doesn't hurt to be careful now does it. Please if you do find something wrong with it do let the rest of us know.

Offline postman

  • Advanced
  • ***
  • Posts: 281
  • Karma: +5/-0
  • Planet Peer Community
    • View Profile
Re: i2phex 0.1.1.26 released
« Reply #3 on: September 20, 2005, 03:25:06 PM »
Excuse me, bitz

but according to jrandom, who just analyzed the stuff,
the launcher's sources haven't been included at all. And the
binary contains some sketchy strings
(Encrypt but no Decrypt, references to websites, etc).

Those issues might be easy to solve, but imho
legion should have:

-> renamed the software to avoid further confusion with sirup's (semi)official release
-> provided access to ALL the sourcecode contained in the binary distribution

everything else just heightens the level of
mischief, fear and paranoia.

This was (the only reason) for my warning

postman
--
postman@i2pmail.org
Postmaster and Administrator
http://hq.postman.i2p - I2P's free and anonymous Mailsystem

Offline bitz

  • Advanced
  • ***
  • Posts: 160
  • Karma: +2/-0
  • Planet Peer Community
    • View Profile
    • My Blog
Re: i2phex 0.1.1.26 released
« Reply #4 on: September 20, 2005, 04:34:53 PM »
Excuse me, bitz

but according to jrandom, who just analyzed the stuff,
the launcher's sources haven't been included at all. And the
binary contains some sketchy strings
(Encrypt but no Decrypt, references to websites, etc).

Those issues might be easy to solve, but imho
legion should have:

-> renamed the software to avoid further confusion with sirup's (semi)official release
-> provided access to ALL the sourcecode contained in the binary distribution

everything else just heightens the level of
mischief, fear and paranoia.

This was (the only reason) for my warning

postman

The launcher is a optional closed source custom tool, as it always has been and is just for windows users.
The binary distribution of i2phex 0.1.1.26 does not contain the launcher.
All sources to the 0.1.1.26 binary is included in this source archive.
Rename what? The 0.1.1.26 archives and build? No I think that would not be good at all, just add to the confusion.
I don't know about the binary's source, what those strings and other things you mentioned is all about.
As to anything else I'm not sure, this is really all I can surmise from looking at the files and provided information.

Does not seem all that confusing, cryptic or paranoia inducing to me. Then again, if one were to be paranoid, they'd compile everything themselves after carefully checking the sources and run various tests in a sandbox environment. Which basically means they wouldn't be running windows anyways and certainly wouldn't trust apple, microsoft or any other company for that matter, let alone some faceless random peer.