Re: [arch-general] opinion request about Firefox add-ons

[Doug Newgard]

On Sun, 31 Jan 2016 18:38:15 +0100
Elmar Stellnberger  wrote:

> Am 2016-01-31 um 18:07 schrieb Ralf Mardorf:
> > On Sun, 31 Jan 2016 17:58:57 +0100, Elmar Stellnberger wrote:  
> >> Besides this I would suggest some improvements in the default settings  
> >
> > Defaults that differ from Upstream, such as removing everything Google
> > related from about:config or what kind of "improvements"? I guess Arch
> > users expect to get defaults that most closely correspond to Upstream.
> >  
> 
> By the time various security suggestions about Firefox settings are 
> reaching me at least every now and then like f.i.
> 
> * Some time ago EFF said f.i. that
> security.ssl3.dhe_rsa_aes_128/256_sha should be set to false
> see: 
> https://www.eff.org/deeplinks/2015/10/how-to-protect-yourself-from-nsa-attacks-1024-bit-DH
> 
> * Some more hints can be found at privacytools.io not all of which may 
> be appropriate for a default configuration.
> https://www.privacytools.io/#about_config
> 
> * There are even more recommendations out there not all of which I do 
> currently have handy. In my opinion collecting and considering all of 
> that advice may be worth the work of the Arch security team.
> 
> * Removing Google as the default default search engine as well as other 
> Google related stuff would be a good point to me as well. Endorsing 
> ultimate trust to Google services while Google has received lots of 
> money from intelligence services and the Pentagon should be considered a 
> bad idea. There are plenty of alternatives like f.i. duckduckgo, qwant 
> or ixquick. I mean we should give the user an informed choice on what 
> services and search engines to use or not to use.
> 
> Finally we could distribute more restrictive default settings f.i. 
> disabling flash, webgl, etc. as an additional package.

Convince upstream to make the changes and Arch will follow suit.

Re: [arch-general] opinion request about Firefox add-ons

[Jonathan Roemer]

On Sun, 2016-01-31 at 18:07 +0100, Ralf Mardorf wrote:
> I guess Arch
> users expect to get defaults that most closely correspond to Upstream.

Yes. The relevant bug report is here.
https://bugs.archlinux.org/task/45900

This was also covered in a mailing list thread earlier this month.
https://lists.archlinux.org/pipermail/arch-general/2016-
January/040372.html

Re: [arch-general] Chromium Favorites Bar Partially Inoperative

[Damjan Georgievski]

> I just installed Chromium, v. 48.0.2564.97, two days ago.  I imported
> my bookmarks from Firefox and enabled the bookmarks bar.  I added a few
> new bookmarks to the bar, but not in my existing folders.
>
> Today, I tried to drag-and-drop the bookmarks into the folders on my
> bookmarks bar, but nothing happened - the bookmarks just remained on
> the bar.  In addition, it seems impossible to move anything on the bar,
> i.e., adjusting the order of folders or bookmarks.  Everything just stays
> where it was originally placed.
>
> For those who don't use Chromium, this is not normal behavior - one should
> be able to drag-and-drop into folders, subfolders, and slide things
> around at will.
>
> In fact, even in the bookmark manager it is not possible to drag-and-drop;
> the only way I've found to move a bookmark into a folder is to copy and
> paste it there, then delete the original.
>
> I've tried disabling my two extensions without luck, and I see no
> recent activity on the boards or on Chromium's bug tracker.
>
> Anyone else seeing this?  Any suggestions?

huh.
possibly unreleated but I just experienced that drag from dolphin
to a html5 drop-zone doesn't work either.
it even doesn't work from a directory view in chromium itself to a
html5 page in chromium.

OTOH,
firefox directory view -> chromium page
and
chromium directory view -> firefox page
both work fine.

some people on the forums noticed something similar too
https://bbs.archlinux.org/viewtopic.php?id=207338

-- 
damjan

Re: [arch-general] opinion request about Firefox add-ons

[Ralf Mardorf]

On Sun, 31 Jan 2016 12:15:13 -0500, Jonathan Roemer wrote:
>On Sun, 2016-01-31 at 18:07 +0100, Ralf Mardorf wrote:
>> I guess Arch users expect to get defaults that most closely
>> correspond to Upstream.  
>
>Yes. The relevant bug report is here.
>https://bugs.archlinux.org/task/45900

To disable "official-branding" by the build options is ok,
I'm just surprised about Elmar's "Besides this I would suggest some
improvements in the default settings, so that users may enjoye a more
secure browsing experience".

Re: [arch-general] opinion request about Firefox add-ons

[Jonathan Roemer]

On Sun, 2016-01-31 at 11:45 -0500, Francis Gerund wrote:
> is there a better idea?
> Any opinions?

uBlock Origin
https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/

signature.asc
Description: This is a digitally signed message part

Re: [arch-general] opinion request about Firefox add-ons

[Ralf Mardorf]

On Sun, 31 Jan 2016 18:38:15 +0100, Elmar Stellnberger wrote:
>duckduckgo

For me duckduckgo is completely useless.

>ixquick

Most of the times I'm using startpage.

However, I'm not talking about the Google search engine, but about
"safe browsing" and other Google features used by Firefox.

I would prefer that dangerous stuff, such as the "safe browsing" by
default would be removed, but it might be such a Google feature other
users expect to get by default. Firefox anyway isn't my preferred
browser. IMO Arch packages should provide the defaults from
upstream. An AUR package could provide a version of Firefox with
alternative defaults, assumed somebody is willing to maintain it.

Re: [arch-general] opinion request about Firefox add-ons

[Sebastiaan Lokhorst]

I think everyone is missing the point: the firefox-adblock-plus package[1]
is broken since it does not work with the latest version of Firefox.
It should probably be dropped from the repositories. I've opened a bug
report.[1]

[1] https://bugs.archlinux.org/task/47970

[arch-general] Chromium Favorites Bar Partially Inoperative

[Dutch Ingraham]

Hello all:

I just installed Chromium, v. 48.0.2564.97, two days ago.  I imported 
my bookmarks from Firefox and enabled the bookmarks bar.  I added a few
new bookmarks to the bar, but not in my existing folders.

Today, I tried to drag-and-drop the bookmarks into the folders on my
bookmarks bar, but nothing happened - the bookmarks just remained on
the bar.  In addition, it seems impossible to move anything on the bar,
i.e., adjusting the order of folders or bookmarks.  Everything just stays
where it was originally placed.

For those who don't use Chromium, this is not normal behavior - one should
be able to drag-and-drop into folders, subfolders, and slide things
around at will.

In fact, even in the bookmark manager it is not possible to drag-and-drop;
the only way I've found to move a bookmark into a folder is to copy and
paste it there, then delete the original.

I've tried disabling my two extensions without luck, and I see no
recent activity on the boards or on Chromium's bug tracker.

Anyone else seeing this?  Any suggestions?

Re: [arch-general] opinion request about Firefox add-ons

[Elmar Stellnberger]

Am 2016-01-31 um 17:45 schrieb Francis Gerund:

Hi.

Firefox 44.0 does not seem to allow installing the firefox-adblock-plus
addon package from the Arch community repository.  Instead, Firefox states
that it only allows addons "signed" by Mozilla to be installed.  That seems
to exclude the package mentioned.

I could install the adblock-plus addon version available from Mozilla,
directly through Firefox.  But is this okay, or a bad idea, or is there a
better idea?

Any opinions?



Well, I would personally also like to see the most used as well as some 
security relevant Firefox addons to be packaged including AdBlock Plus, 
the Extended DNSSEC Validator, a good http2https plugin and possibly 
even FireFTP and Flagfox. Though all these addons should to my believe 
be available via https getting them looked after and signed by the Arch 
security team would certainly improve the security when using Firefox. 
Besides this I would suggest some improvements in the default settings 
so that users may enjoye a more secure browsing experience. However the 
question always remains on how readily Arch maintainers would adopt 
these suggestions.


P.S.: what about uBlock Origin;
is it better/simpler/more secure than AdBlock Plus?
perhaps get this one pre-packaged instead of AdBlock Plus.

Re: [arch-general] opinion request about Firefox add-ons

[Attila]

On Sun, 31 Jan 2016 19:25:56 +0100 Ralf Mardorf wrote:

> For me duckduckgo is completely useless.

You never use '!archpkg firefox' or '!archwiki firefox'? The nice thing
about duckduckgo is the use of bangs (and for me that i don't need
to remember the original url :) ).

> However, I'm not talking about the Google search engine, but about
> "safe browsing" and other Google features used by Firefox.

If you want to spend some time with reading:

http://www.ghacks.net/2015/08/18/a-comprehensive-list-of-firefox-privacy-and-security-settings/

See you, Attila

Re: [arch-general] Chromium Favorites Bar Partially Inoperative

[Dutch Ingraham]

On Sun, Jan 31, 2016 at 11:08:16PM +0100, Damjan Georgievski wrote:
> > I just installed Chromium, v. 48.0.2564.97, two days ago.  I imported
> > my bookmarks from Firefox and enabled the bookmarks bar.  I added a few
> > new bookmarks to the bar, but not in my existing folders.
> >
> > Today, I tried to drag-and-drop the bookmarks into the folders on my
> > bookmarks bar, but nothing happened - the bookmarks just remained on
> > the bar.  In addition, it seems impossible to move anything on the bar,
> > i.e., adjusting the order of folders or bookmarks.  Everything just stays
> > where it was originally placed.
> >
> > For those who don't use Chromium, this is not normal behavior - one should
> > be able to drag-and-drop into folders, subfolders, and slide things
> > around at will.
> >
> > In fact, even in the bookmark manager it is not possible to drag-and-drop;
> > the only way I've found to move a bookmark into a folder is to copy and
> > paste it there, then delete the original.
> >
> > I've tried disabling my two extensions without luck, and I see no
> > recent activity on the boards or on Chromium's bug tracker.
> >
> > Anyone else seeing this?  Any suggestions?
> 
> huh.
> possibly unreleated but I just experienced that drag from dolphin
> to a html5 drop-zone doesn't work either.
> it even doesn't work from a directory view in chromium itself to a
> html5 page in chromium.

Thanks Damjan, but unfortunately I don't think it is related.

Actually, this is getting interesting.

First, this is related to Chromium, as Firefox does not exhibit this
behavior.

Second, I decided to test the issue with KDE, DWM, and Awesome (Awesome
is what I was using when I first noticed the issue.)  The problem does
not exist with KDE or DWM - only Awesome.

Third, and this is the really interesting part, the problem only exists
on my right monitor; if I open Chromium on my left monitor, the bookmarks
work as expected.  In fact, I can even drag a running instance of Chromium
from the right monitor, where the bookmarks are not working properly, to
the left monitor and they begin working!

I'm using the [AMD/ATI] Cedar [Radeon HD 5000/6000/7350/8350 Series] card and
the xf86-video-ati driver.

I've tried starting X with and without an xrandr script, but it makes no 
difference. I've also looked at the Arch ATI wiki and tried some tweaks
to my 20-radeon.conf, without success.

I think this is most likely a driver issue than an Awesome/Chromium issue;
they are likely just exposing some underlying driver quirk.

Does anyone have any diagnostic/other hints?