For free desktop email programs, Geary is still an option

10 replies [Last post]
t3g
t3g
Offline
Joined: 05/15/2011

Geary 0.100 just came out and you can grab it for Trisquel 7:

sudo add-apt-repository ppa:yorba/ppa
sudo apt-get update && sudo apt-get install geary

Source: http://www.omgubuntu.co.uk/2015/03/install-geary-ubuntu-linux-email-update

tomlukeywood
Offline
Joined: 12/05/2014
SuperTramp83

I am a translator!

Offline
Joined: 10/31/2014

don't trust third party repositories. if a .deb file has been tempered with then it's game over for you pc. Remember that when you install a deb file you give it root privileges. And when you give that sort of privilege to a malicious .deb you are screeeeewed..
That is how I understand it. I may be wrong

tomlukeywood
Offline
Joined: 12/05/2014

"I may be wrong"
your not

someone could replace the program normally there with this:


#include
int main(){
system("dd if=/dev/zero of=/dev/sda");//very bad :(
return 0;
}

alimiracle
Offline
Joined: 01/18/2014

You're right
but Not in this way

This program Exposed
It is so small
and nede root

tomlukeywood
Offline
Joined: 12/05/2014

wel you could just do that and then fill the rest of the file with zero's to make it bigger and if it needs root then just do

rm -r /home/user/*

Legimet
Offline
Joined: 12/10/2013

But the deb could have a malicious preinst/postinst script.

Legimet
Offline
Joined: 12/10/2013

That won't compile, because your #include preprocessor directive isn't complete. You should #include .

EDIT: Nvm, it's a bug in the forum.

t3g
t3g
Offline
Joined: 05/15/2011

This is an official PPA from the developer (Yorba) for their GPL licensed Geary software. https://launchpad.net/~yorba/+archive/ubuntu/ppa

Do your research before you mislead users.

tomlukeywood
Offline
Joined: 12/05/2014

that then depends on weather you trust that developer
i think its just good practise to compile from source if your download a program outside your main repo's

SuperTramp83

I am a translator!

Offline
Joined: 10/31/2014

yes. If you know how to do it then you should compile every single application that is not directly in the repos. I agree.