Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare
I agree that a fork is needed, but I think this would be a whole lot of work. IMHO, it's not enough to just disable features by default or have good defaults. The fact they are there to begin with is a similar argument as with systemd - we don't want to install these features to begin with, and want a smaller browser. There's a lot of things that should/could be removed - pocket, ebook mode, ads in tabs, dbus support, aspell hard dependency (in packages) and especially EME features, google safe browsing, health reporting, etc. A lot of times a forks fall short of taking care of everything, sometimes features are built but disabled by default (which is not much better than disabling it yourself). AFAIK there's no general purpose fork that takes care of *all* the freedom and bloat issues. If palemoon offered something akin to extended support releases it would be a great candidate for that, as it would be suitable for Devuan stable releases. From there it would be easy to offer an alternative build from the same source package, without some of the stuff we don't like. I tried building my own palemoon packages recently from Steve Pussers sources, and was able to disable dbus and pulse support very easily but sadly my builds were very unstable. Thanks, chillfan ‐‐‐ Original Message ‐‐‐ On March 27, 2018 10:43 PM, taii...@gmx.com wrote: > "Oh but you can opt-out" > > Assuming you even know about it in the first place - and what? you need > > to opt-out of probably thousands of bad things in your life which makes > > such a policy absolute bullshit. > > "If it was opt-in no one would do it and therefo-" > > Yeah no shit - because no one really wants their data collected ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Protect laptop from power supply voltage transients
Edward Bartolo wrote: > What you wrote reminded me of a dangerous filter that consists of two > high voltage series-connected capacitors connected in parallel with > the mains with their middle point earthed. Since these capacitors are > almost certainly the same value they will devide the mains voltage by > two. This fact can be verified with a high impedance voltmeter > connected with the disconnected earth connector and one terminal of > the mains supply. Yes. Doesn't need to be that high an impedance meter either, a while ago (as part of a discussion in another forum) I just did a quick check with a basic digital multimeter and measured about 95V on my Macbook Pro. And as I mentioned, there's enough current there to be able to feel it. > I want to avoid using a dangerous circuit like this. Good luck with that, you will struggle to find any equipment without such a filter - unless it's cheap Chinese s**t where you find places on the board for them, but once "certified" they omit them to knock a couple of pennys off the price. > With it, my death would only be a dielectric failure away. They are supposed to be X (or is it Y ?) rated - supposed to fail open-circuit rather than closed, but your point is valid. But given how much equipment has exactly this setup, and how few incidents we hear about (I can't recall hearing of any), it doesn't seem to be that big of a problem. But yes, it does seem odd that it's allowed to connect the chassis of equipment (weakly unless a cap fails) to the mains 8-O > One way to solve this problem may be to use a pair of isolating > transformers for the audio signals ... Or use an optical connection and convert to analogue outside of the computer ? Not sure how many laptops have optical outputs these days, or whether a USB device would have low and stable enough latency/jitter for the job ... ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] popupmenu: a new dynamic menu in Gtk2 for WMs
Hi Steve, On 29/01/18 08:05, Steve Litt wrote: Hi Aitor, I skimmed your source, and also the source of menu-cache.h, which I found on the net someplace. I couldn't figure out the structure by which your menu hierarchy is stored on the hard disk. Do you have any documentation about configuring popupmenu's menu hierarchy? Does popupmenu's menu hierarchy get updated every time someone installs a new application? That would be a cool thing to add to UMENU2, but I have no idea how to do it. Does popupmenu have, or will it have, a mode by which someone can modify the menu hierarchy or add/delete/change menu items via an intuitive form that asks for and acquires user input? That's something UMENU2 doesn't have yet. You mentioned that part of popupmenu isn't as fast as you'd like (presumably slower than the user can type/mouse). Does popupmenu run anew everytime someone clicks on the start button? I'm pretty sure any time consumption at all comparable to human typing speed involves reading from the hard disk. In UMENU Classic I solved this by busting the hierarchy file into individual single menu files. It was a mess. UMENU2 puts the entire hierarchy in a directory tree, so the entirety of the requested menu's information is contained in the direct subdirectories of that menu entry's directory. Which makes it lightning fast. Maybe you can do something like UMENU Classic or UMENU2, or perhaps create an index file to point at specific menus within the hierarchy. Or maybe the code in menu-cache.h/menu-cache.c is meant to address this problem. Menus are fun, aren't they? SteveT I'm a bit confused about umenu. You talk about two (different?) projects in troubleshooters.com: dmenu and umenu. Are they the same? I thought that umenu was developed in python, but seems to be written in perl, isn't it? BTW, there are two threads dedicated to dynamic menus in the forum of bunsenlabs (if you want to follow them): https://forums.bunsenlabs.org/viewtopic.php?id=3387 https://forums.bunsenlabs.org/viewtopic.php?pid=69755#p69755 Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare
On Thu, Mar 29, 2018 at 06:32:44AM -0400, Chillfan wrote: > > A lot of times a forks fall short of taking care of everything, sometimes features are built but disabled by default (which is not much better than disabling it yourself). It's a lot better than having to disable the feature yourself and not being aware it's there. -- hendrik ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare
hi Chillfan, On Thu, 29 Mar 2018, Chillfan wrote: > I agree that a fork is needed, but I think this would be a whole lot of work. yes. forks are a LOT of work. Even Devuan, which I'd say is a relatively easy fork, mostly needing work on the infrastructure and testing and documentation side, was more demanding than expected. > If palemoon offered something akin to extended support releases it > would be a great candidate for that, palemoon is stuck at "version 27" series of Firefox and in any case its in the 2x series I doubt it can be brought up to 50 since the codebase is rather different. said that, I'm happy with palemoon, using always the latest stable release tagged on the git tree, compiling it myself on Devuan and then github.com/dyne/tinfoil for sandboxing. here the mozconfig I use, please note I do not disable pulseaudio or dbus, because that gives problems, yet I do not use pulseaudio (but I do use dbus...) export MOZILLA_OFFICIAL=1 mk_add_options AUTOCLOBBER=1 mk_add_options MOZ_CO_PROJECT=browser ac_add_options --enable-application=browser mk_add_options MOZ_OBJDIR=`pwd`/pmbuild ac_add_options --enable-jemalloc ac_add_options --enable-jemalloc-lib # ac_add_options --disable-dbus ac_add_options --disable-gstreamer ac_add_options --enable-alsa ac_add_options --disable-oss ac_add_options --enable-pulseaudio ac_add_options --disable-necko-wifi ac_add_options --enable-official-branding ac_add_options --disable-installer ac_add_options --disable-updater ac_add_options --disable-tests ac_add_options --disable-debug ac_add_options --disable-mochitest ac_add_options --with-pthreads ac_add_options --enable-strip ac_add_options --enable-optimize="-O2 -march=native -pipe" ciao ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare
I suspect if I tried building from palemoon sources, it might be easier to figure that out (I will try with your mozconfig some time). In any case Steve Pussers builds seem to work reliably and are regularly updated, which makes it easy. The issue I think is when you don't use dbus or pulse, etc but still have the support. But I don't think it's good to remove those in a standard built meant for everyone. Interestingly someone pointed to an issue where dbus support would use a lot of resources in conjunction with libsdl2 if the dbus daemon isn't available but the support library is. So this might be a good reason why someone would want to build their own at times. @hendrik I agree that does improve the situation a little bit. I think it would be great if there was more of a "hard" fork or more collaboration though. Afaik the only one removing EME altogether is icecat. I think a tweaked build of that would be interesting. Thanks, chillfan On March 29, 2018 4:42 PM, Jaromil wrote: > hi Chillfan, > > On Thu, 29 Mar 2018, Chillfan wrote: > > > I agree that a fork is needed, but I think this would be a whole lot of > > work. > > yes. forks are a LOT of work. Even Devuan, which I'd say is a > > relatively easy fork, mostly needing work on the infrastructure and > > testing and documentation side, was more demanding than expected. > > > If palemoon offered something akin to extended support releases it > > > > would be a great candidate for that, > > palemoon is stuck at "version 27" series of Firefox and in any case > > its in the 2x series I doubt it can be brought up to 50 since the > > codebase is rather different. > > said that, I'm happy with palemoon, using always the latest stable > > release tagged on the git tree, compiling it myself on Devuan and then > > github.com/dyne/tinfoil for sandboxing. here the mozconfig I use, > > please note I do not disable pulseaudio or dbus, because that gives > > problems, yet I do not use pulseaudio (but I do use dbus...) > > export MOZILLA_OFFICIAL=1 > > mk_add_options AUTOCLOBBER=1 > > mk_add_options MOZ_CO_PROJECT=browser > > ac_add_options --enable-application=browser > > mk_add_options MOZ_OBJDIR=`pwd`/pmbuild > > ac_add_options --enable-jemalloc > > ac_add_options --enable-jemalloc-lib > > ac_add_options --disable-dbus > = > > ac_add_options --disable-gstreamer > > ac_add_options --enable-alsa > > ac_add_options --disable-oss > > ac_add_options --enable-pulseaudio > > ac_add_options --disable-necko-wifi > > ac_add_options --enable-official-branding > > ac_add_options --disable-installer > > ac_add_options --disable-updater > > ac_add_options --disable-tests > > ac_add_options --disable-debug > > ac_add_options --disable-mochitest > > ac_add_options --with-pthreads > > ac_add_options --enable-strip > > ac_add_options --enable-optimize="-O2 -march=native -pipe" > > ciao ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] Extended attributes - in major use?
Hi List, I've been backing up my system with rsync years without the --xattrs option. I'm curious if important parts of Debian/Devuan rely on extended attributes. TIA -- Joel Roth ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Extended attributes - in major use?
On Thu, 29 Mar 2018 09:00:59 -1000 Joel Roth wrote: > Hi List, > > I've been backing up my system with rsync years without > the --xattrs option. I'm curious if important parts of > Debian/Devuan rely on extended attributes. > > TIA > Don't know about most of Devuan, but Samba relies on xattrs when run as a DC or Unix domain member. Rowland ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Extended attributes - in major use?
On Thu, Mar 29, 2018 at 09:00:59AM -1000, Joel Roth wrote: > I've been backing up my system with rsync years without > the --xattrs option. I'm curious if important parts of > Debian/Devuan rely on extended attributes. Type: ｢getcap -r /bin /sbin /usr /lib｣. If anything pops up, you'd lose the functionality of that program after a restore. Note that these caps are set in postinst conditionally, requiring capability support in the kernel and filesystem, plus userspace tool (libcap2-bin). This is installed by default, but if you started with a minimal install, you won't have it. In such cases, the fallback is to set the relevant programs setuid root, which is far less secure. The other good use I know of is selinux, which I have never played with. Then there's Chromium and wget's tracking. There are also ACLs but I haven't used those either. Thus: capabilities, selinux labels, ACLs, user namespace; that's all I'm aware of. Meow! -- ⢀⣴⠾⠻⢶⣦⠀ When I visited the US a couple decades ago, Hillary molested and ⣾⠁⢰⠒⠀⣿⡁ groped me. You don't believe? Well, the burden of proof is on you! ⢿⡄⠘⠷⠚⠋⠀ Flooding a douche with obviously false accusations makes your other ⠈⠳⣄ words dubious even when they happen to be true. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare
On Wed, Mar 28, 2018 at 02:42:53AM +0200, Adam Borowski wrote: > On Tue, Mar 27, 2018 at 05:43:15PM -0400, taii...@gmx.com wrote: > > https://www.theregister.co.uk/2018/03/20/mozilla_firefox_test_of_privacy_mechanism_prompts_privacy_worries/ > > > > Mozilla sucks these days - they pay zero attention to the issue of > > browser fingerprinting and keep sending users data to other parties via > > bogus "opt out" "research" studies. > > > > "Oh but you can opt-out" > > Assuming you even know about it in the first place - and what? you need > > to opt-out of probably thousands of bad things in your life which makes > > such a policy absolute bullshit. > > The only saving grace is that they do this tracking on a test group. On the > other hand, Chromium saves both the URL and refer[r]er of every downloaded > file using an user-namespace xattr, a little-known feature implemented by > most filesystems (not tmpfs, if you use /tmp for testing :p). Even in its > "incognito mode" that's not supposed to log anything. I though most popular download tools do that? Chromium for at least six years: https://bugs.chromium.org/p/chromium/issues/detail?id=45903 Curl for 8 years: https://github.com/curl/curl/blob/master/src/tool_xattr.c#L55 Wget: https://fossies.org/linux/wget/src/xattr.c#60 Plasma desktop: https://api.kde.org/frameworks/kfilemetadata/html/usermetadata_8cpp_source.html#127 Even Fedora already obsoleted Yum: http://yum.baseurl.org/gitweb?p=urlgrabber.git;a=blob;f=urlgrabber/grabber.py#l1775 And, according to this, Microsoft Skype: http://blog.manton.im/2017/02/working-with-extended-attributes-in.html Firefox is lagging: https://bugzilla.mozilla.org/show_bug.cgi?id=665531 I consider it standard in GNU/Linux (for years!), so why bring it up now? -- Tomasz TorczTo co nierealne -- tutaj jest normalne. xmpp: zdzich...@chrome.pl Ziomale na życie mają tu patenty specjalne. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Extended attributes - in major use?
On Thu, Mar 29, 2018 at 09:17:38PM +0200, Adam Borowski wrote: > On Thu, Mar 29, 2018 at 09:00:59AM -1000, Joel Roth wrote: > > I've been backing up my system with rsync years without > > the --xattrs option. I'm curious if important parts of > > Debian/Devuan rely on extended attributes. > > Type: ｢getcap -r /bin /sbin /usr /lib｣. If anything pops up, you'd lose the > functionality of that program after a restore. Note that these caps are set > in postinst conditionally, requiring capability support in the kernel and > filesystem, plus userspace tool (libcap2-bin). This is installed by > default, but if you started with a minimal install, you won't have it. In > such cases, the fallback is to set the relevant programs setuid root, which > is far less secure. Thanks. This is very interesting! Fortunately, it looks like not a whole lot (in my current system) relies on xattrs. Seems like the usage is, as you say, a safer alternative to setuid. $ getcap -r /bin /sbin /usr /lib /bin/ping6 = cap_net_raw+ep /bin/ping = cap_net_raw+ep /usr/bin/dumpcap = cap_net_admin,cap_net_raw+eip /usr/bin/fping6 = cap_net_raw+ep /usr/bin/i3status = cap_net_admin+ep /usr/bin/fping = cap_net_raw+ep /usr/bin/gnome-keyring-daemon = cap_ipc_lock+ep > The other good use I know of is selinux, which I have never played with. > > Then there's Chromium and wget's tracking. > > There are also ACLs but I haven't used those either. > > > Thus: capabilities, selinux labels, ACLs, user namespace; that's all I'm > aware of. > Meow! -- Joel Roth ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Extended attributes - in major use?
Adam Borowski - 29.03.18, 21:17: > On Thu, Mar 29, 2018 at 09:00:59AM -1000, Joel Roth wrote: > > I've been backing up my system with rsync years without > > the --xattrs option. I'm curious if important parts of > > Debian/Devuan rely on extended attributes. > > Type: ｢getcap -r /bin /sbin /usr /lib｣. If anything pops up, you'd lose the > functionality of that program after a restore. Note that these caps are > set in postinst conditionally, requiring capability support in the kernel > and filesystem, plus userspace tool (libcap2-bin). This is installed by > default, but if you started with a minimal install, you won't have it. In > such cases, the fallback is to set the relevant programs setuid root, which > is far less secure. One prominent example meanwhile is: % getcap /bin/ping /bin/ping = cap_net_raw+ep :) Unless I know better I always use ｢rsync -aAHXS｣ for backuping directory trees. Of these I think especially -H has a significant cost. And -S, but -S will save quite some space with files with large holdes in it. Nice, I like these: ｢｣｢｣｢｣｢｣｢｣｢｣ :) Now I wonder how to type these on a keyboard with German keyboard layout. Hmmm, Alt-Gr-S is ſ but that is not the same as ｢. Hmmm, did not find it. Thanks, -- Martin ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] ｢｣ quotes (was: Re: Extended attributes - in major use?)
On Thu, Mar 29, 2018 at 10:57:44PM +0200, Martin Steigerwald wrote:
> Nice, I like these: ｢｣｢｣｢｣｢｣｢｣｢｣ :) Now I wonder how to type these on a
> keyboard with German keyboard layout. Hmmm, Alt-Gr-S is ſ but that is not the
> same as ｢. Hmmm, did not find it.
I don't know of any preconfigured way to type these; I for one use a Compose
sequence but a more convenient binding could be nice. Especially if we
could agree on something ("Alt-[" ?) and submit upstream to X guys.
'｢'/'｣' are "halfwidth" (ie, normal width) version of Chinese/Japanese
quotes: '「'/'」' which would be problematic in most settings because
support for double-width characters is often lacking.
Among other alternatives, »foo« are worse as their direction is
inconsistent: I was taught »foo« but some countries use «foo», the French
"« foo »", Swedes »foo»; “foo” is unwise to use together with ".
It's nice to have a set of unambiguous quotation marks that are not used by
the shell, so you can quote shell commands without confusion.
On the other hand, I heard Perl6 uses ｢｣ quotes; among their other Unicode
uses, this is the only pair of characters that has seen wide adoption.
Meow!
--
⢀⣴⠾⠻⢶⣦⠀ When I visited the US a couple decades ago, Hillary molested and
⣾⠁⢰⠒⠀⣿⡁ groped me. You don't believe? Well, the burden of proof is on you!
⢿⡄⠘⠷⠚⠋⠀ Flooding a douche with obviously false accusations makes your other
⠈⠳⣄ words dubious even when they happen to be true.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ｢｣ quotes (was: Re: Extended attributes - in major use?)
Adam Borowski - 29.03.18, 23:40:
> On Thu, Mar 29, 2018 at 10:57:44PM +0200, Martin Steigerwald wrote:
> > Nice, I like these: ｢｣｢｣｢｣｢｣｢｣｢｣ Now I wonder how to type these on a
> > keyboard with German keyboard layout. Hmmm, Alt-Gr-S is ſ but that is not
> > the same as ｢. Hmmm, did not find it.
>
> I don't know of any preconfigured way to type these; I for one use a Compose
> sequence but a more convenient binding could be nice. Especially if we
> could agree on something ("Alt-[" ?) and submit upstream to X guys.
>
> '｢'/'｣' are "halfwidth" (ie, normal width) version of Chinese/Japanese
> quotes: '「'/'」' which would be problematic in most settings because
> support for double-width characters is often lacking.
>
> Among other alternatives, »foo« are worse as their direction is
> inconsistent: I was taught »foo« but some countries use «foo», the French
> "« foo »", Swedes »foo»; “foo” is unwise to use together with ".
Well I know how to type „these German quotes“, but I bet they are not
unambiguous either.
> On the other hand, I heard Perl6 uses ｢｣ quotes; among their other Unicode
> uses, this is the only pair of characters that has seen wide adoption.
Well, about Perl, there a funny REBOL script¹. It outputs:
N O W P E R L U S E R S W O N ' T
F E E L L E F T O U T
[1] http://www.rebol.org/view-script.r?script=alien.r
:)
But anyhow, we are clearly off topic here.
Thanks,
--
Martin
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ｢｣ quotes (was: Re: Extended attributes - in major use?)
On Fri, Mar 30, 2018 at 12:03:33AM +0200, Martin Steigerwald wrote: > Adam Borowski - 29.03.18, 23:40: > > On the other hand, I heard Perl6 uses ｢｣ quotes; among their other Unicode > > uses, this is the only pair of characters that has seen wide adoption. > > Well, about Perl, there a funny REBOL script¹. It outputs: > > > > N O W P E R L U S E R S W O N ' T > F E E L L E F T O U T > > Probably because artfully obfuscated code is a medium in which perl has proved uniquely and prolifically expressive.(*1) We can recognize envy when we see it ;-) 1. https://www.foo.be/docs/tpj/issues/vol4_3/tpj0403-0017.html > [1] http://www.rebol.org/view-script.r?script=alien.r > > :) > > But anyhow, we are clearly off topic here. Going further, it looks :-) > Thanks, > -- > Martin > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng -- Joel Roth ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
