Fwd: re: New winetricks 20080704: added firefox3, kde verbs (and a whole lot of other stuff)

[Pau Garcia i Quiles]

Hello,

winetricks is a quick and dirty script to download and install various  
redistributable runtime libraries sometimes needed to run programs in  
Wine. The last version of winetricks adds support for installing KDE  
on wine. Dan Kegel is the winetricks developer.

----- Forwarded message from dank at kegel.com -----
     Date: Fri, 4 Jul 2008 11:12:56 -0700
     From: Dan Kegel <dank at kegel.com>
Reply-To: Dan Kegel <dank at kegel.com>
  Subject: re: New winetricks 20080704: added firefox3, kde verbs (and  
a whole lot of other stuff)
       To: pgquiles at elpauer.org

> I'm one of the kde-windows developers.

You get around, don't you?  :-)

> To make maintenance of
> winetricks easier, we've added a kdewin-installer-gui-latest.exe which
> links to the latest version of the installer. The md5sums file will be
> updated to contain the md5sum for the -latest.exe file, too.

Sadly, that doesn't help, because winetricks (for security
reasons) hardcodes the sha1sum into the winetricks script.
Imagine: an attacker modifies both the .exe and the md5sum
file at your site.  The only way I can detect that is to have
my own copy of checksums.

But that's ok, I'm used to updating checksums.

First bug: kstars can't download its extra data :-(
A +winsock trace isn't too enlightening, nor is a look
through the source that the kdewin installer downloads.
I can't even find where the networking is done.
Got any tips for me?

BTW the KDEwin installer fails when downloading the helper apps
process explorer etc. from sysinternals - maybe they have new files,
and the checksums don't match?


----- End forwarded message -----


-- 
Pau Garcia i Quiles
http://www.elpauer.org
(Due to my workload, I may need 10 days to answer)