kmod-blacklist-ubuntu: fetch from tar.gz, not bazaar

Now the source is just a miniature archive.
kmod-blacklist-ubuntu: fix references to binaries
sqliteodbc: fix library location

Commit d7d3c8fd828cf6aba4d511be1927458507422a67 (sqliteodbc: update to
0.995, add more metadata) mistakenly moved libraries from $out/lib to
$out (or rather stopped moving them from $out to $out/lib).

Move them back to $out/lib where they're expected to be and referred to
by the /etc/odbcinst.ini snippet.
Added snapBlaze and sqliteSimple haskell packages
silver-searcher: updated to 0.19.2

Also fixed the "libgcc_s.so.1 must be installed for pthread_cancel to
work" problem.
proofgeneral: fix build with earlier version of texinfo.
haskell-abstract-deque: update to version 0.2.2.1
haskell-atomic-primops: update to version 0.6
haskell-doctest: update to version 0.9.10.1
haskell-pipes-network: update to version 0.6.2
haskell-shelly: update to version 1.4.4
Update node packages

Signed-off-by: Shea Levy <shea@shealevy.com>
psqlodbc: update from 8.3 to 9.3 (fixes build)
libav: bugfix updates for both branches; maintain
retroshare: 0.5.1d -> 0.5.5c
Replace the current Yubikey PBA implementation with the previous one.

Rationale:
  * The main reason for choosing to implement the PBA in accordance
    with the Yubico documentation was to prevent a MITM-USB-attack
    successfully recovering the new LUKS key.
  * However, a MITM-USB-attacker can read user id and password when
    they were entered for PBA, which allows him to recover the new
    challenge after the PBA is complete, with which he can challenge
    the Yubikey, decrypt the new AES blob and recover the LUKS key.
  * Additionally, since the Yubikey shared secret is stored in the
    same AES blob, after such an attack not only is the LUKS device
    compromised, the Yubikey is as well, since the shared secret
    has also been recovered by the attacker.
  * Furthermore, with this method an attacker could also bruteforce
    the AES blob, if he has access to the unencrypted device, which
    would again compromise the Yubikey, should he be successful.
  * Finally, with this method, once the LUKS key has been recovered
    once, the encryption is permanently broken, while with the previous
    system, the LUKS key itself it changed at every successful boot,
    so recovering it once will not necessarily result in a permanent
    breakage and will also not compromise the Yubikey itself (since
    its secret is never stored anywhere but on the Yubikey itself).

Summary:
The current implementation opens up up vulnerability to brute-forcing
the AES blob, while retaining the current MITM-USB attack, additionally
making the consequences of this attack permanent and extending it to
the Yubikey itself.
Limit livecd label to 11 characters

vfat partition labels can only be 11 characters long

Signed-off-by: Shea Levy <shea@shealevy.com>
Document EFI installation

Signed-off-by: Shea Levy <shea@shealevy.com>
Update node packages to np2nix 5.5.0

Signed-off-by: Shea Levy <shea@shealevy.com>
Revert "Hide nodePackages from nix-env"

Now node packages that aren't just programs have a node- prefix in their
names.

This reverts commit 2f11bc495b50c36c1984f334df6867c1b9200a91.

Signed-off-by: Shea Levy <shea@shealevy.com>