Sigil-0.9.9 Released - Page 3

Divingduck · 01-02-2018, 03:33 AM

Last Brownie?
https://www.youtube.com/watch?v=uui3jdrph5Q

Brad_Reed · 01-02-2018, 08:48 PM

I had fallen a few versions behind, as my linux distro didn't have recent enough Qt5 or python3 to build sigil. I am happy to say I built 0.9.9 with no issues and all seems well. (Slackware-current with QT5 added)

eschwartz · 01-08-2018, 07:00 AM

So, finally got around to dealing with this new Sigil version, as I am now the official (co-)maintainer of the Arch Linux package.

And I see it has PGP signatures for the source code tarballs, as you promised when I requested it.

Quick question though, DiapDealer -- do you publish your key anywhere other than in that signature file? It would be nice if, for example, you could cross-post the fingerprint to the official Sigil blog, and to your release announcement here (making three independently operated sites that would have to be hacked in order to pull off a forgery). An integral part of having the signature so that it can be verified tamper-free, is being able to check that any hypothetical attacker did not just upload their own faked key at the same time as the source code itself.

DiapDealer · 01-08-2018, 08:15 AM

Quote:

Originally Posted by eschwartz

Quick question though, DiapDealer -- do you publish your key anywhere other than in that signature file? It would be nice if, for example, you could cross-post the fingerprint to the official Sigil blog, and to your release announcement here (making three independently operated sites that would have to be hacked in order to pull off a forgery). An integral part of having the signature so that it can be verified tamper-free, is being able to check that any hypothetical attacker did not just upload their own faked key at the same time as the source code itself.

My key should be available from any of the main public key-servers. The ID for my key is provided as part of the "Verified" tag on Github (clicking the Verified link will show the ID). I can post it in an additional place if you like. But three places seems like overkill to me.

eschwartz · 01-08-2018, 08:23 AM

I'd prefer at least one place other than Github, that can be identified as belonging to you.

As for keyservers, those don't count as anyone can upload a fake key to a keyserver, so it doesn't provide independent verification.
(A theoretical attacker who gained control of your github account and tagged a fake release using a fake key, would have no problem also uploading the fake key to the keyserver. But there's a pretty good chance he didn't also gain the ability to publish to the official Sigil blog.)

For example, the blog states the following information regarding the OSX releases:

Quote:

Originally Posted by Sigil-ebook.com

There will be a lot of output but you should look for the following: Authority=Developer ID Application: Kevin Hendricks (2SMCVQU3CJ)

DiapDealer · 01-08-2018, 05:22 PM

I added the fingerprint for my PGP key (found on public key-servers) to the Source section of the "Get" page on the Sigil Blog, and to the first post of this Release thread.

That should allow anyone to independently verify my public key and thus the detached signatures for source archives/git tag.

eschwartz · 01-08-2018, 06:23 PM

Thanks.

I've uploaded the latest Sigil release to the Arch repositories, with new optional dependencies, byte-compiled the plugin runner code, and using the system hunspell dictionaries.

https://git.archlinux.org/svntogit/c...e3925cab0fe247

AlanHK · 01-25-2018, 06:06 AM

Quote:

Originally Posted by DiapDealer

Two new Quick Launch Icons for plugins were added to the main menu. There are now a total of five available.

Cool... but even three identical icons was a bit cryptic. I know I can just mouse over them to see the name, but would prefer if I could choose an icon (plugins could include them in their package) and/or have text labels.

DiapDealer · 01-25-2018, 06:19 AM

Quote:

Originally Posted by AlanHK

Cool... but even three identical icons was a bit cryptic. I know I can just mouse over them to see the name, but would prefer if I could choose an icon (plugins could include them in their package) and/or have text labels.

Custom quicklaunch icons coming in the next version.

https://www.mobileread.com/forums/sh...&postcount=287

odamizu · 02-14-2018, 09:19 PM

Quote:

Originally Posted by DiapDealer

Attention Mac OS X Users
... To get the latest bug fixes, Sigil-0.9.9's embedded Python has been linked with the very latest version: Tcl 8.6.4.1 ...

See: http://www.activestate.com/activetcl/downloads
Version: 8.6.4.1

ActiveState is currently showing 8.6.6.8606 and 8.6.7.0 on their download page. Do you know if these will play nice with Sigil (and also Alf non-Calibre standalone app, if this can be asked and answered here).

I may be installing on a new Mac, so if Sigil (and Alf) need 8.6.4.1 specifically, I'll have to dig up the installer package from somewhere as it doesn't seem to be on ActiveState's current download page.

Thank you!

KevinH · 02-14-2018, 09:24 PM

Any ActiveState 8.6.x version should work just fine with Sigil on Mac, just do not use 8.5.X as they have way too many bugs.

odamizu · 02-14-2018, 09:38 PM

Great! Muchas gracias, kind sir!

Maui · 02-16-2018, 03:35 PM

I installed the one available on the download page without any problems.

odamizu · 02-17-2018, 11:22 AM

Thanks for reporting this, Maui!

vichuvideo · 03-20-2018, 03:02 PM

0.9.9 crashing.
Crash happened ocasionally with 0.7.2 when editing epub with video.
But with 0.9.9 crash occur more frequently (also when editing epub with video).
Crash occur sometime after inserting of video, sometime when change from code view to book view, sometime after inserting an image in other chapter or section different of the one that contain the video.
Someone know why?

01-02-2018, 03:33 AM	#31
Divingduck Wizard Posts: 1,166 Karma: 1410083 Join Date: Nov 2010 Location: Germany Device: Sony PRS-650	Last Brownie? https://www.youtube.com/watch?v=uui3jdrph5Q Last edited by Divingduck; 01-02-2018 at 03:36 AM.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Sigil-0.9.3 Released	KevinH	Sigil	56	03-03-2016 06:46 PM
Sigil-0.8.900 released for testing - Wait for Sigil-0.8.901	KevinH	Sigil	106	10-04-2015 10:41 AM
Sigil 0.8.2 Released	user_none	Sigil	12	12-22-2014 06:02 PM
Sigil 0.7.1 Released	user_none	Sigil	64	03-26-2013 10:02 PM

01-02-2018, 08:48 PM	#32
Brad_Reed Junior Member Posts: 2 Karma: 10 Join Date: Jul 2017 Device: kindle paperwhite; astak easy reader; iRex	I had fallen a few versions behind, as my linux distro didn't have recent enough Qt5 or python3 to build sigil. I am happy to say I built 0.9.9 with no issues and all seems well. (Slackware-current with QT5 added)

01-08-2018, 07:00 AM	#33
eschwartz Ex-Helpdesk Junkie Posts: 19,421 Karma: 85400180 Join Date: Nov 2012 Location: The Beaten Path, USA, Roundworld, This Side of Infinity Device: Kindle Touch fw5.3.7 (Wifi only)	So, finally got around to dealing with this new Sigil version, as I am now the official (co-)maintainer of the Arch Linux package. And I see it has PGP signatures for the source code tarballs, as you promised when I requested it. Quick question though, DiapDealer -- do you publish your key anywhere other than in that signature file? It would be nice if, for example, you could cross-post the fingerprint to the official Sigil blog, and to your release announcement here (making three independently operated sites that would have to be hacked in order to pull off a forgery). An integral part of having the signature so that it can be verified tamper-free, is being able to check that any hypothetical attacker did not just upload their own faked key at the same time as the source code itself.

01-08-2018, 05:22 PM	#36
DiapDealer Grand Sorcerer Posts: 28,358 Karma: 203720150 Join Date: Jan 2010 Device: Nexus 7, Kindle Fire HD	I added the fingerprint for my PGP key (found on public key-servers) to the Source section of the "Get" page on the Sigil Blog, and to the first post of this Release thread. That should allow anyone to independently verify my public key and thus the detached signatures for source archives/git tag.

01-08-2018, 06:23 PM	#37
eschwartz Ex-Helpdesk Junkie Posts: 19,421 Karma: 85400180 Join Date: Nov 2012 Location: The Beaten Path, USA, Roundworld, This Side of Infinity Device: Kindle Touch fw5.3.7 (Wifi only)	Thanks. I've uploaded the latest Sigil release to the Arch repositories, with new optional dependencies, byte-compiled the plugin runner code, and using the system hunspell dictionaries. https://git.archlinux.org/svntogit/c...e3925cab0fe247

02-14-2018, 09:24 PM	#41
KevinH Sigil Developer Posts: 8,480 Karma: 5703586 Join Date: Nov 2009 Device: many	Any ActiveState 8.6.x version should work just fine with Sigil on Mac, just do not use 8.5.X as they have way too many bugs.

02-14-2018, 09:38 PM	#42
odamizu just an egg Posts: 1,796 Karma: 6759036 Join Date: Mar 2015 Device: Kindle, iOS	Great! Muchas gracias, kind sir!

02-16-2018, 03:35 PM	#43
Maui Connoisseur Posts: 57 Karma: 600000 Join Date: Jan 2018 Device: Galaxy Tab S2	I installed the one available on the download page without any problems.

02-17-2018, 11:22 AM	#44
odamizu just an egg Posts: 1,796 Karma: 6759036 Join Date: Mar 2015 Device: Kindle, iOS	Thanks for reporting this, Maui!

03-20-2018, 03:02 PM	#45
vichuvideo Junior Member Posts: 4 Karma: 10 Join Date: Mar 2018 Location: Venezuela Device: smart mobile phone	0.9.9 crashing. Crash happened ocasionally with 0.7.2 when editing epub with video. But with 0.9.9 crash occur more frequently (also when editing epub with video). Crash occur sometime after inserting of video, sometime when change from code view to book view, sometime after inserting an image in other chapter or section different of the one that contain the video. Someone know why?

Advert

Advert