[OTR-dev] [Fwd: Re: [OTR-users] Verification of OTR plugin for Miranda IM]

Aldert J.B.P. Hazenberg aldert at rotz.org
Mon Jun 19 02:14:05 EDT 2006


Email from Scott that ended up in my mailbox. :)

Aldert.

-------- Original Message --------
Subject: Re: [OTR-users] Verification of OTR plugin for Miranda IM
Date: Mon, 19 Jun 2006 15:40:49 +1000
From: Scott Ellis <scott.ellis at optusnet.com.au>
To: Aldert J.B.P. Hazenberg <aldert at rotz.org>
References: <44957773.4020209 at rotz.org>

Hi all,

The OTR plugin for Miranda has a very similar life story to the
Trillian plugin according to the recent post by Twan. I too relied
heavily on the gaim plugin source code to get an idea of how the
implementation should work.

Miranda is even worse in terms of logging - in that it logs everything
(unencrypted) and logging cannot easily be disabled (it is possible to
log to memory only using some third party database plugins). And as
I've mentioned before, Miranda has no concept of 'accounts' per se, so
it pretends to the OTR library that there is only one account.

The source code is available though, and I'm open to any suggetions or
patches.

The trustworthiness of all Miranda plugins can be questioned, and this
is an issue that has been and still is discussed on the Miranda
forums. Moderation of the Miranda file listing is relatively new
thing, and certain automated process are in place such as virus
scanning of the binaries. I don't think there ever will be resources
enough for a code review of new plugins and updates. I think there are
plans to ensure all plugins on the file listing are submitted with
source code - I'm unsure whether they will in future be rebuilt from
the source before being made available for download.

For the Miranda OTR plugin, and for all Miranda plugins in fact, the
only sure method is to build it from sources you've read and
understood, or find a trustworthy friend capable of doing it for you.
The OTR plugin source does include a project file for the free MinGW
Studio development environment, so it's not impossible to build it
yourself even with little knowledge of programming.

I have no objection to the OTR team providing public access to their
own build of the dll and/or to the sources, if that turns out to be a
more acceptable way around the trust issue.

Scott


On 19/06/06, Aldert J.B.P. Hazenberg <aldert at rotz.org> wrote:
>
> Hi Guys and Girls,
>
> I noticed that Miranda IM has an OTR plugin (cool!!!!!, thanks Scott!)
> http://addons.miranda-im.org/details.php?action=viewfile&id=2644
>
> Question I have about this :
>
> 1. As it seems to me that this plugin is written by somebody not in
>   the "core" OTR team, should the code not be checked for "issues" ?
>
>   Code can be found here :
>   http://addons.miranda-im.org/feed.php?dlsource=2644
>
> 2. Even if the code is ok, how can i be sure that the ddl supplied is
>   built from that code ? (as the dll is not supplied by the OTR team)
>
> Aldert.
>
> _______________________________________________
> OTR-users mailing list
> OTR-users at lists.cypherpunks.ca
> http://lists.cypherpunks.ca/mailman/listinfo/otr-users
>


-- 
Scott



More information about the OTR-dev mailing list