Re: Mozilla performing pdf.js DNS queries?

2014-11-13 Thread Larry Sheldon

On 11/13/2014 08:27, Seth Mos wrote:


We see this from Ubuntu terminals running Mozilla Firefox 33.0



I have personally declared FF33 to be a pinnacle disaster in a long 
string of disasters.


I don't have the wherewithal, time, or desire to sort out what new 
breakages there are and which are "just" unfortunate coincidences.


Most annoying is that with either FF or TB running, my windows 8.1 
machine hangs for minutes at a time.



--
The unique Characteristics of System Administrators:

The fact that they are infallible; and,

The fact that they learn from their mistakes.


Quis custodiet ipsos custodes


Re: Mozilla performing pdf.js DNS queries?

2014-11-13 Thread Reed Loden
https://bugzilla.mozilla.org/show_bug.cgi?id=1098415 has been filed to
track this issue.

~reed

On Thu, Nov 13, 2014 at 5:26 AM, Seth Mos  wrote:

> Hi,
>
> Whilst rummaging through some DNS (dnsmasq) logs I've noticed quite a
> decent amount of queries for pdf.js from what appear to be mozilla
> browsers.
>
> Seems rather odd that it is performing DNS queries for a internal PDF
> viewer.
>
> Has anyone else come across these lookups?
>
> Kind regards,
>
> Seth
>


Re: Mozilla performing pdf.js DNS queries?

2014-11-13 Thread David Conrad
On Nov 13, 2014, at 8:42 AM, Ken Chase  wrote:
> <@darq> 17:40 < ircperson> oof. apparently .prod is a TLD now 
> <@darq> 17:40 < ircperson> and a friend's environment is basically on fire. 
> <@darq> HAHAHA  

https://www.icann.org/resources/pages/name-collision-2013-12-06-en

Regards,
-drc



signature.asc
Description: Message signed with OpenPGP using GPGMail


Re: Mozilla performing pdf.js DNS queries?

2014-11-13 Thread Ken Chase
<@darq> 17:40 < ircperson> oof. apparently .prod is a TLD now 
<@darq> 17:40 < ircperson> and a friend's environment is basically on fire. 
<@darq> HAHAHA  
 
/kc   


On Thu, Nov 13, 2014 at 12:00:56PM -0500, valdis.kletni...@vt.edu said:
  >On Thu, 13 Nov 2014 14:26:28 +0100, Seth Mos said:
  >
  >> Whilst rummaging through some DNS (dnsmasq) logs I've noticed quite a
  >> decent amount of queries for pdf.js from what appear to be mozilla 
browsers.
  >>
  >> Seems rather odd that it is performing DNS queries for a internal PDF
  >> viewer.
  >
  >Totally wild shot in the dark - recent Mozilla have an onboard PDF viewer
  >written in javascript called pdf.js
  >
  >http://en.wikipedia.org/wiki/PDF.js
  >
  >It's callable from within other javascript via chrome:// or resource://
  >references, but sometimes people don't get it right:
  >
  
>http://superuser.com/questions/614002/how-to-open-pdf-js-in-firefox-via-chrome-url
  >
  >My guess is that somebody else didn't quite get it right, and is trying to
  >get to the hostname when they intended to get to the javascript.



-- 
Ken Chase - k...@heavycomputing.ca skype:kenchase23 +1 416 897 6284 Toronto 
Canada
Heavy Computing - Clued bandwidth, colocation and managed linux VPS @151 Front 
St. W.


Re: Mozilla performing pdf.js DNS queries?

2014-11-13 Thread Valdis . Kletnieks
On Thu, 13 Nov 2014 14:26:28 +0100, Seth Mos said:

> Whilst rummaging through some DNS (dnsmasq) logs I've noticed quite a
> decent amount of queries for pdf.js from what appear to be mozilla browsers.
>
> Seems rather odd that it is performing DNS queries for a internal PDF
> viewer.

Totally wild shot in the dark - recent Mozilla have an onboard PDF viewer
written in javascript called pdf.js

http://en.wikipedia.org/wiki/PDF.js

It's callable from within other javascript via chrome:// or resource://
references, but sometimes people don't get it right:

http://superuser.com/questions/614002/how-to-open-pdf-js-in-firefox-via-chrome-url

My guess is that somebody else didn't quite get it right, and is trying to
get to the hostname when they intended to get to the javascript.


pgpnqC0LkwArK.pgp
Description: PGP signature


Re: Mozilla performing pdf.js DNS queries?

2014-11-13 Thread Seth Mos
David Hofstee schreef op 13-11-2014 14:39:
> Pdf is quite a standard. One might wonder what it cannot do. One could call 
> it evil. 
> 
> http://superuser.com/questions/368486/link-to-image-within-pdf-and-have-the-image-displayed
>  

Ah yes, a image within a PDF could definitely do this I suppose. I just
thought it odd that the browser would leak this out.

dnsmasq[3151]: query[A] pdf.js from 10.6.24.11
dnsmasq[3151]: query[] pdf.js from 10.6.24.11
dnsmasq[3151]: query[A] pdf.js from 10.6.24.11
dnsmasq[3151]: query[] pdf.js from 10.6.24.11

This could become a whole can of worms if a .js TLD ever makes it to the
internet and registers this domain name.

We see this from Ubuntu terminals running Mozilla Firefox 33.0

Best regards,

Seth

> 
> 
> 
> David Hofstee
> 
> Deliverability Management
> MailPlus B.V. Netherlands (ESP)
> 
> 
> -Oorspronkelijk bericht-
> Van: NANOG [mailto:nanog-boun...@nanog.org] Namens Seth Mos
> Verzonden: Thursday, November 13, 2014 2:26 PM
> Aan: NANOG list
> Onderwerp: Mozilla performing pdf.js DNS queries?
> 
> Hi,
> 
> Whilst rummaging through some DNS (dnsmasq) logs I've noticed quite a decent 
> amount of queries for pdf.js from what appear to be mozilla browsers.
> 
> Seems rather odd that it is performing DNS queries for a internal PDF viewer.
> 
> Has anyone else come across these lookups?
> 
> Kind regards,
> 
> Seth
> 
> 



RE: Mozilla performing pdf.js DNS queries?

2014-11-13 Thread David Hofstee
Pdf is quite a standard. One might wonder what it cannot do. One could call it 
evil. 

http://superuser.com/questions/368486/link-to-image-within-pdf-and-have-the-image-displayed
 



David Hofstee

Deliverability Management
MailPlus B.V. Netherlands (ESP)


-Oorspronkelijk bericht-
Van: NANOG [mailto:nanog-boun...@nanog.org] Namens Seth Mos
Verzonden: Thursday, November 13, 2014 2:26 PM
Aan: NANOG list
Onderwerp: Mozilla performing pdf.js DNS queries?

Hi,

Whilst rummaging through some DNS (dnsmasq) logs I've noticed quite a decent 
amount of queries for pdf.js from what appear to be mozilla browsers.

Seems rather odd that it is performing DNS queries for a internal PDF viewer.

Has anyone else come across these lookups?

Kind regards,

Seth


Mozilla performing pdf.js DNS queries?

2014-11-13 Thread Seth Mos
Hi,

Whilst rummaging through some DNS (dnsmasq) logs I've noticed quite a
decent amount of queries for pdf.js from what appear to be mozilla browsers.

Seems rather odd that it is performing DNS queries for a internal PDF
viewer.

Has anyone else come across these lookups?

Kind regards,

Seth