[HOME] [DOWNLOAD] [DOCS] [NEWS] [SUPPORT] [TIPS] [ISSUES] [Priority Support]

Can't install Electrum


#21

https://whonix.org/wiki/Install_Software#Prefer_APT

You can install electrum any way you’d like. We believe the instructions in the wiki are the preferred method. If you prefer qubinix’s method thats fine. Or if you would like to help with wiki documentation that would be awesome to.


#22

This isn’t a question about the wiki or about personal preferences.

I am interested to understand, in this particular case (yes I get that in general APT is preferable), why is qubnix’s method less safe.

  1. Do we know for sure the file is authentic? yes, we verify with signature.
  2. Do we use third party packagers? no, we don’t.
  3. Do we use the latest version that is recommended by the developers? yes we do.

#23

For most users it is hard to find out the real project page. Users are vulnerable to landing on phising websites. See:

Most users nowadays don’t even enter domain names into the browser bar. They don’t know the difference between url bar and search bar. Rather than entering urls, they enter stuff into search engines and then click links.

Giving this security non-awareness in big parts of the population… And…

https://www.whonix.org/wiki/OpenPGP#Common_Misconceptions

Gpg verification is hard. For most users it’s hard to obtain the gpg signing key of the author making sure they’re not getting the public key of an impostor. Gpg signs files. Not file names. Even if users have the right key, they’re likely to overlook Signature made Mon 02 Jul 2018 07:12:08 AM UTC and to be affected by a version freeze attack.

So apt-get is still preferable. Doesn’t need to introduce external websites and/or new signing keys.


#24

FWIW I totally agree with @Patrick and @0brand about apt being the preferable install method.

When I made those instructions I wasn’t aware that there was a current version of electrum in debian repos. Historically the debian packages have been outdated, but that has changed recently.


#25

Thanks for the detailed explanation.


#26

i am followed this instructions:https://www.whonix.org/wiki/Electrum

The result message:
E: Release ‘buster’ for ‘electrum’ was not found

What is wrong?
Which are the right instructions?


#27

electrum was removed from Debian testing. Please give me a little time to figure out the instructions.

https://tracker.debian.org/pkg/electrum


#28

Should we install from Debian sid?


#29

Yes. tested electrum “sid” and everything look OK i.e. GUI, networking etc. I’ll fix the instruction a little later on (create Template:Install Testing and make any other needed changes)


#30

You mean

https://www.whonix.org/wiki/Template:Install_Sid

or

https://www.whonix.org/wiki/Template:Install_Unstable

?


#31

qubenix:

More reasons to be cautious of third party package managers: a JS dependency used in many cryptocurrency wallets was used to inject malware, steal funds.

One positive outcome is that other projects are now reviewing their own policies and security practices regarding third party package managers.

Great find!

Could you add this please to documentation under


and also mention from
https://www.whonix.org/wiki/Install_Software#Avoid_Manual_Software_Installation?
The latter is affected by the same issue since users may often confuse
using a third party package manager vs manual software installation.
It’s separate things but very related since manual software installation
instructions may include instructions using third party package managers
or have scripts which act similar. (In result one could be victim of a
malicious dependency like in above case.)


#32

Yes, I meant Template:Install_Unstable :slight_smile:

Edit:

Will also need.

https://whonix.org/wiki/Install_Software#Install_from_Debian_unstable


#33

Thank you for reporting this. Instructions have been updated.

https://www.whonix.org/wiki/Electrum


#34

Followed the instructions @ https://www.whonix.org/wiki/Electrum, the install didn’t succeed cause of unmet dependency “python3-electrum”, I also seem to be unable to follow the qubenix’s instructions from above where I’m getting

File “./electrum”, line 53
sys.exit(f"Error: {str(e)}. Try 'sudo python3 -m pip install '")
^
SyntaxError: invalid syntax
user@host:~/Electrum-3.3.2/electrum$

Any chance someone could help a noob out. Thanks in advance!


#35

Hi sinbrkatetete

This works for me.

Can you please post steps to reproduce. Meaning copy and paste all commands and output from your konsole please.

Also, are you using an Other Operating System (aka a custom workstation other than the default Whonix-Workstation VM)?