Register Guidelines E-Books Search Today's Posts Mark Forums Read

Go Back   MobileRead Forums > E-Book Software > Calibre > Plugins

Notices

Reply
 
Thread Tools Search this Thread
Old 05-31-2011, 03:14 PM   #1
Agama
Guru
Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.
 
Agama's Avatar
 
Posts: 667
Karma: 436517
Join Date: Jul 2010
Location: UK
Device: PRS-300 (R.I.P.), PW2, Nexus7
Plugin Safety

Are there any safeguards in place for using calibre plugins?

I have seen the warning on adding a plugin which says that a plugin could be malware, and we can choose to trust the developer or not. But many of us do not have enough Python knowledge to check the plugin code for malicious behaviour.

Now I'm not suggesting that any of the plugin developers are rogues, but it would only take one bad apple to cause havoc to an unsuspecting user.

So in terms of safeguards, I wondered if the calibre team do any peer reviews of code submitted for plugins? Is there a list of 'certified' plugins?
Agama is offline   Reply With Quote
Old 05-31-2011, 03:20 PM   #2
kovidgoyal
creator of calibre
kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.
 
kovidgoyal's Avatar
 
Posts: 26,320
Karma: 5382313
Join Date: Oct 2006
Location: Mumbai, India
Device: Various
I certainly don't review plugin code. I have my hand full reviewing code submitted for inclusion into calibre as it is

I suggest you stick to plugins you get from the plugins forum here. Look at the thread for the plugin. If it has many comments indicating several users, or is developed by a long term member of this board, then it is likely to be OK.
kovidgoyal is offline   Reply With Quote
 
Advertisement
Old 05-31-2011, 04:01 PM   #3
user_none
Sigil & calibre developer
user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.
 
user_none's Avatar
 
Posts: 2,465
Karma: 986493
Join Date: Jan 2009
Location: Florida, USA
Device: Nook STR
Plugins that are not distributed as part of calibre are not vetted, tested or guarenteed to work. Hence the warning message when adding 3rd party plugins. If they're not a part of calibre they're 3rd party.

You are as safe with plugins from respected and long term members of this community, like Kiwidude, as you are with plugins that come as part of caibre.

What it really comes down to is the source (not code) of the plugin. Is it some randome site on the internet or a MobileRead member with thousands of posts and tens of thousands of karma points? Ask yourself do I trust giving the plugin and by extension the person who wrote it to run it on my computer?
user_none is offline   Reply With Quote
Old 05-31-2011, 04:38 PM   #4
Agama
Guru
Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.Agama ought to be getting tired of karma fortunes by now.
 
Agama's Avatar
 
Posts: 667
Karma: 436517
Join Date: Jul 2010
Location: UK
Device: PRS-300 (R.I.P.), PW2, Nexus7
Thanks for the replies. I have been trying one of Kiwidude's plugins, (currently in beta), as it looks useful and I've seen him posting quite a bit to this forum so I can see that he's got a good reputation. (I didn't know that sites other than MR even had calibre plugins, but it certainly sounds safer to stay away from them).

Do plugins from members ever become part of calibre itself?
Agama is offline   Reply With Quote
Old 05-31-2011, 04:44 PM   #5
user_none
Sigil & calibre developer
user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.user_none ought to be getting tired of karma fortunes by now.
 
user_none's Avatar
 
Posts: 2,465
Karma: 986493
Join Date: Jan 2009
Location: Florida, USA
Device: Nook STR
Quote:
Originally Posted by Agama View Post
Do plugins from members ever become part of calibre itself?
Yes. However, it's up to the plugin author if they want to go this route. Some like having their plugins separate. Some use plugins as a beta test before having it included directly in calibre.
user_none is offline   Reply With Quote
Old 06-01-2011, 03:02 AM   #6
Manichean
Wizard
Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!Manichean My eyes! My eyes! The light is just too bright!
 
Manichean's Avatar
 
Posts: 3,130
Karma: 80520
Join Date: Feb 2008
Location: Germany
Device: Cybook Gen3
Moderator Notice
Moved out of the development subforum. Please read the sticky before posting there.
Manichean is offline   Reply With Quote
Old 06-01-2011, 12:40 PM   #7
CRussel
Wizard
CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.CRussel ought to be getting tired of karma fortunes by now.
 
CRussel's Avatar
 
Posts: 4,729
Karma: 30303932
Join Date: Jul 2010
Location: Sunshine Coast, BC
Device: Kindle PW, Fire HDX 8.9, Fire HD8.9, Fire 7HD, Surface 2
Quote:
Originally Posted by user_none View Post
Plugins that are not distributed as part of calibre are not vetted, tested or guarenteed to work. Hence the warning message when adding 3rd party plugins. If they're not a part of calibre they're 3rd party.

You are as safe with plugins from respected and long term members of this community, like Kiwidude, as you are with plugins that come as part of caibre.

What it really comes down to is the source (not code) of the plugin. Is it some randome site on the internet or a MobileRead member with thousands of posts and tens of thousands of karma points? Ask yourself do I trust giving the plugin and by extension the person who wrote it to run it on my computer?
While I agree in principle, I think it's also important to realize that at least one significant plugin that is used by thousands of Calibre users is not available on this board. That plug in has stood the test of time for safety, but won't ever be here on MobileRead because of forum policy.
CRussel is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
New Plugin Type Idea: Library Plugin cgranade Plugins 3 09-15-2010 01:11 PM
Mystery and Crime Fletcher, J.S.: The Safety Pin v2.0 2008-06-21 JSWolf IMP Books 1 06-21-2008 11:32 PM
Mystery and Crime Fletcher, J.S.: The Safety Pin v2.0 2008-06-21 JSWolf Kindle Books 1 06-21-2008 11:28 PM
Mystery and Crime Fletcher, J.S.: The Safety Pin v2.0 2008-06-21 JSWolf BBeB/LRF Books 3 06-21-2008 11:19 PM
Wrist/neck strap for safety dcalder Bookeen 4 01-16-2008 10:41 AM


All times are GMT -4. The time now is 10:17 AM.


MobileRead.com is a privately owned, operated and funded community.