0

At this point the tor binary is in version 0.2.8.7.1. Ricochet (https://ricochet.im) hasn't been updated since February and is using tor version 0.2.7.6. There are some major updates between versions. Is it ever a good idea to simply copy the 2.8 binary provided by the official tor repo and overwrite the ricochet binary? I'm not clear on the security/functionality risks involved. Needless to say, I haven't tried this yet.

  • Orbot is also out of date, but nobody bothered to do anything about that. – SuperSluether Sep 13 '16 at 4:29
  • 0.2.7.6 is still within the recommended set, it's not broken. This isn't an issue. – cacahuatl Sep 13 '16 at 15:06
  • 1
    I'm voting to close this question as off-topic because it's not a question. – cacahuatl Sep 13 '16 at 15:07
  • @canonizingironize the question is: "Is it a good idea to simply overwrite the ricochet binary?" – Andrew Lott Oct 17 '16 at 19:56
  • @canonizingironize it's a clear-stated question, so closing it is a pure vandalism – Alexey Vesnin Oct 17 '16 at 20:07
1

The list of recommended versions contains 0.2.7.6, so it is not officially outdated.

If you want to use a newer version of Tor with Ricochet, just copy or link the Tor binary to the directory where Ricochet lives and start the software. Below you see a screenshot of Ricochet's settings which tells you that it runs with Tor version 0.2.8.8. I used the method above to get a newer version of Tor.

version 0.2.8.8 of Tor

0

Yes, you can make a drop-in replacement of the binary files, as far as I know Tor is just bundled into the Ricochet, it's not patched and/or tailored in source to fit the needs

UPDATE: Take a look at it's source code - there's no shipped or included tor binary. There's only a messenger itself

Some of the information contained in this post requires additional references. Please edit to add citations to reliable sources that support the assertions made here. Unsourced material may be disputed or deleted.

  • Yes but the releases that are shipped contained a tor binary. – cacahuatl Oct 17 '16 at 20:51
  • indeed! the release bundle is obliged to deliver all the parts of the chain, and it's totally OK! Because it's a bundle – Alexey Vesnin Oct 17 '16 at 20:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.