Re: SRWare Iron: Chromium without the data-mining

2010-05-24 Thread Christoph Anton Mitterer
Hi.

AFAIK, even Chrome has disabled most tracking stuff per default (except
those things which FF/etc. do too).

With chromium, it was regarded to be a (reportable) bug if anything that
is privacy sensitive could not be disabled, IIRC.

And regarding Iron,... the following might be interesting:
http://neugierig.org/software/chromium/notes/2009/12/iron.html

Cheers,
Chris.


smime.p7s
Description: S/MIME cryptographic signature
-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-24 Thread Giuseppe Iuculano
Il 18/05/2010 19:12, Ryan Oram ha scritto:
 Chrome Incognito Tracks Visited Sites
 http://www.lewiz.org/2010/05/chrome-incognito-tracks-visited-sites.html

I just backported upstream commit that fixes this huge privacy killer
bug...

 This seems to be becoming a theme. As Chromium has much of the same
 privacy issues as Chrome (SRWare Iron is made from Chromium and the
 code is striped from Chromium), this feature is surely in Chromium
 as well.
 I find this completely unacceptable.

Please report[1] these privacy issues more explicitly than referring to
a related blog post.

[1]http://www.debian.org/Bugs/Reporting

Cheers,
Giuseppe



signature.asc
Description: OpenPGP digital signature
-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-19 Thread Joao Pinto
 I can't start a SRWare PPA immediately as they haven't released
 updated source code in some time (probably due to neglience if
 anything).

 Thanks,
 Ryan


If you believe there are serious concerns with the current chromium package
just file bugs, why fork when you can fix it ?

Best regards,

-- 
João Luís Marques Pinto
GetDeb Team Leader
http://www.getdeb.net
http://blog.getdeb.net
-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-19 Thread Ryan Oram
On Wed, May 19, 2010 at 6:03 PM, Joao Pinto joao.pi...@getdeb.net wrote:

 I can't start a SRWare PPA immediately as they haven't released
 updated source code in some time (probably due to neglience if
 anything).

 Thanks,
 Ryan

 If you believe there are serious concerns with the current chromium package
 just file bugs, why fork when you can fix it ?

 Best regards,

 --
 João Luís Marques Pinto
 GetDeb Team Leader
 http://www.getdeb.net
 http://blog.getdeb.net


I didn't realize how sketchy Iron was. Mailing lists are a good bug
testing device for proposals (if only it didn't get emailed to
everyone... :P). You live and learn I guess (and I did).

I filed a bug upstream to make the DNS pre-caching and URL/search
suggestions in Chromium opt-in:
http://code.google.com/p/chromium/issues/detail?id=44527

Thanks,
Ryan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Ryan Oram
Chrome Incognito Tracks Visited Sites
http://www.lewiz.org/2010/05/chrome-incognito-tracks-visited-sites.html

This seems to be becoming a theme. As Chromium has much of the same
privacy issues as Chrome (SRWare Iron is made from Chromium and the
code is striped from Chromium), this feature is surely in Chromium
as well.

I find this completely unacceptable.

Thanks,
Ryan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Ryan Oram
On Tue, May 18, 2010 at 1:12 PM, Ryan Oram r...@infinityos.net wrote:
 Chrome Incognito Tracks Visited Sites
 http://www.lewiz.org/2010/05/chrome-incognito-tracks-visited-sites.html

 This seems to be becoming a theme. As Chromium has much of the same
 privacy issues as Chrome (SRWare Iron is made from Chromium and the
 code is striped from Chromium), this feature is surely in Chromium
 as well.

 I find this completely unacceptable.

 Thanks,
 Ryan


The above seems to be an oversight on Google's part. But the fact that
it hasn't been fixed, despite being known for over a month, is a good
indicator that Google isn't too concerned about privacy...

Thanks,
Ryan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread John Moser
Shut up.  You're whining like a raving politicized lune and nobody is
listening to your monologue.

Apply some critical thinking skills.  It's a bug in a special mode of a
browser, a mode that doesn't store history/cookies.  It's not (known to be)
sharing anything with the 'net, so it's innocuous as known.  Nobody can
agree on if it even works; or if it does, if it works between sessions.

I suppose when a cloud goes in front of the sun you panic and look up to
check if the sun is dying.

On May 18, 2010 1:24 PM, Ryan Oram r...@infinityos.net wrote:

On Tue, May 18, 2010 at 1:12 PM, Ryan Oram r...@infinityos.net wrote: 
Chrome Incognito Tracks V...
The above seems to be an oversight on Google's part. But the fact that
it hasn't been fixed, despite being known for over a month, is a good
indicator that Google isn't too concerned about privacy...

Thanks, Ryan -- Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com Modify se...
-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Joe Terranova
Don't hold back, John. Tell us how you really feel.

On Tue, May 18, 2010 at 1:30 PM, John Moser john.r.mo...@gmail.com wrote:
 Shut up.  You're whining like a raving politicized lune and nobody is
 listening to your monologue.

 Apply some critical thinking skills.  It's a bug in a special mode of a
 browser, a mode that doesn't store history/cookies.  It's not (known to be)
 sharing anything with the 'net, so it's innocuous as known.  Nobody can
 agree on if it even works; or if it does, if it works between sessions.

 I suppose when a cloud goes in front of the sun you panic and look up to
 check if the sun is dying.

 On May 18, 2010 1:24 PM, Ryan Oram r...@infinityos.net wrote:

 On Tue, May 18, 2010 at 1:12 PM, Ryan Oram r...@infinityos.net wrote: 
 Chrome Incognito Tracks V...

 The above seems to be an oversight on Google's part. But the fact that
 it hasn't been fixed, despite being known for over a month, is a good
 indicator that Google isn't too concerned about privacy...

 Thanks, Ryan -- Ubuntu-devel-discuss mailing list
 Ubuntu-devel-discuss@lists.ubuntu.com Modify se...

 --
 Ubuntu-devel-discuss mailing list
 Ubuntu-devel-discuss@lists.ubuntu.com
 Modify settings or unsubscribe at:
 https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss



-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Ryan Oram
On Tue, May 18, 2010 at 1:30 PM, John Moser john.r.mo...@gmail.com wrote:
 Shut up.  You're whining like a raving politicized lune and nobody is
 listening to your monologue.

 Apply some critical thinking skills.  It's a bug in a special mode of a
 browser, a mode that doesn't store history/cookies.  It's not (known to be)
 sharing anything with the 'net, so it's innocuous as known.  Nobody can
 agree on if it even works; or if it does, if it works between sessions.

 I suppose when a cloud goes in front of the sun you panic and look up to
 check if the sun is dying.

Towards the end, everyone was picking up the bug.

Yes, it's a little detail. But it's one that can be be easily picked
up by any trojan or tracking software. It completely defeats the
purpose of the Incognito mode, which is to prevent any of this
information to be stored.

Thanks,
Ryan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Jonathon Fernyhough
On 18 May 2010 01:15, Ryan Oram r...@infinityos.net wrote:
 http://www.srware.net/en/software_srware_iron_chrome_vs_iron.php

 This should become a full open source project with a community behind
 it. With Mozilla disregarding H.264, the community needs a full
 browser capable of H.264 video playback without the privacy issues of
 Chrome.


Unless things have changed, Chromium does not include the tracking
features of the branded Chrome. Hence, Chromium is fine. Plus it has
the benefit of already being a full open source project.

 We need to Iceweasel Chromium.


Why? Are there distribution restrictions on Chromium? In any event,
Ubuntu distributes Firefox. Maybe talk to Debian?

 I'm willing to put the infinityOS team behind this,

So you and one other?

 but I would like
 the help and support of the Ubuntu community.


To build and package Chromium? That's already being done for Maverick,
and there are PPA channels for Release, Beta and Daily builds.

 Thanks,
 Ryan


Good luck.

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Ryan Oram
On Tue, May 18, 2010 at 3:33 AM, Jonathon Fernyhough
j.fernyho...@gmail.com wrote:
 Unless things have changed, Chromium does not include the tracking
 features of the branded Chrome. Hence, Chromium is fine. Plus it has
 the benefit of already being a full open source project.

It doesn't include everything, but it does include a lot of it. This
is outlined on the SRWare website. SRWare went through and removed all
of the offending code, so perhaps it would be best if Ubuntu/Debian
went and talked to them about officially packaging SRWare Iron for
inclusion into the Ubuntu and Debian distributions. SRWare Iron has
released source code as well, although it appears to be out of date.

 Why? Are there distribution restrictions on Chromium? In any event,
 Ubuntu distributes Firefox. Maybe talk to Debian?

I've posted this on the debian-devel mailing list as well. This was
posted out of a concern that Canoncial is thinking about switching
over to Chromium in later releases as Lubuntu has done already. I have
seen articles of this possibility as well. I don't feel making
Chromium the default browser is appropriate until the privacy issues
are addressed. I also feel that taking care these issues before a
switch to Chromium is even seriously considered is beneficial to
everyone.

 I'm willing to put the infinityOS team behind this,

 So you and one other?

I have a team of about 5 people at the moment. My team is certainly
small, which would prevent us from taking a more central role in such
a project, but we would be more than willing to help package it and
test it.

 but I would like
 the help and support of the Ubuntu community.


 To build and package Chromium? That's already being done for Maverick,
 and there are PPA channels for Release, Beta and Daily builds.

As infinityOS is based on the Ubuntu codebase and will stay that way,
whatever benefits Ubuntu will benefit infinityOS as well. As I have
said in prior posts, we intend to give back whatever we take. We have
an obligation to contribute to the Ubuntu community, as infinityOS
would not be possible without its great amount of work.

We would be more than willing to assist in a project to alleviate the
privacy concerns of Chromium.

 Good luck.


Thank you,
Ryan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Dylan McCall
 I've posted this on the debian-devel mailing list as well. This was
 posted out of a concern that Canoncial is thinking about switching
 over to Chromium in later releases as Lubuntu has done already. I have
 seen articles of this possibility as well. I don't feel making
 Chromium the default browser is appropriate until the privacy issues
 are addressed. I also feel that taking care these issues before a
 switch to Chromium is even seriously considered is beneficial to
 everyone.

Given that the privacy concerns have been neatly documented[1] by
Google including instructions on disabling the offending features, I
can't shake the doubt that they could ever be addressed in some
peoples' opinions.
[1] http://www.google.com/support/chrome/bin/answer.py?answer=114836hl=en-GB

Granted, I may just be ill informed. Is there some detail being missed
in that document?

It's not that I have anything against Iron, of course, though I am
slightly wary of their website and apparent lack of a source
repository. Doesn't feel brilliantly maintained. Maybe they just need
a gentle nudge in Launchpad's direction.
With regards to packaging, there is a Launchpad PPA with daily builds
of Chromium, so they surely have sorted out any installation and
packaging quirks in that source repository. Perhaps you can get a diff
with Iron's changes, and if you're incredibly lucky it'll apply
smoothly. Could save you some work :)


Dylan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Dmitrijs Ledkovs
On 19 May 2010 00:49, Dylan McCall dylanmcc...@gmail.com wrote:
 I've posted this on the debian-devel mailing list as well. This was
 posted out of a concern that Canoncial is thinking about switching
 over to Chromium in later releases as Lubuntu has done already. I have
 seen articles of this possibility as well. I don't feel making
 Chromium the default browser is appropriate until the privacy issues
 are addressed. I also feel that taking care these issues before a
 switch to Chromium is even seriously considered is beneficial to
 everyone.

 Given that the privacy concerns have been neatly documented[1] by
 Google including instructions on disabling the offending features, I
 can't shake the doubt that they could ever be addressed in some
 peoples' opinions.
 [1] http://www.google.com/support/chrome/bin/answer.py?answer=114836hl=en-GB


Note this link above is about Google Chrome not about Chromium.
Chromium doesn't have that.

 Granted, I may just be ill informed. Is there some detail being missed
 in that document?

 It's not that I have anything against Iron, of course, though I am
 slightly wary of their website and apparent lack of a source
 repository. Doesn't feel brilliantly maintained. Maybe they just need
 a gentle nudge in Launchpad's direction.
 With regards to packaging, there is a Launchpad PPA with daily builds
 of Chromium, so they surely have sorted out any installation and
 packaging quirks in that source repository. Perhaps you can get a diff
 with Iron's changes, and if you're incredibly lucky it'll apply
 smoothly. Could save you some work :)



The chromium daily builds ppa is more accuratly should be described as
a mini-fork it has spliced chromium tree almost in half and throughout
out loads of junk (embedded copies of libraries being the most
significant part).

My personal opinion is that current chromium daily builds ppa (which
is maintained by a few folks including some that do mozilla for
ubuntu) is far more secure and stable in terms of packaging and
integration with Ubuntu  Debian _and_ it doesn't have google goggles
spying users.

At UDS it has been discussed to switch Ubuntu Netbook Remix to
Chromium for Maverick.


 Dylan

 --
 Ubuntu-devel-discuss mailing list
 Ubuntu-devel-discuss@lists.ubuntu.com
 Modify settings or unsubscribe at: 
 https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Ryan Oram
On Tue, May 18, 2010 at 7:49 PM, Dylan McCall dylanmcc...@gmail.com wrote:
 I've posted this on the debian-devel mailing list as well. This was
 posted out of a concern that Canoncial is thinking about switching
 over to Chromium in later releases as Lubuntu has done already. I have
 seen articles of this possibility as well. I don't feel making
 Chromium the default browser is appropriate until the privacy issues
 are addressed. I also feel that taking care these issues before a
 switch to Chromium is even seriously considered is beneficial to
 everyone.

 Given that the privacy concerns have been neatly documented[1] by
 Google including instructions on disabling the offending features, I
 can't shake the doubt that they could ever be addressed in some
 peoples' opinions.
 [1] http://www.google.com/support/chrome/bin/answer.py?answer=114836hl=en-GB

 Granted, I may just be ill informed. Is there some detail being missed
 in that document?

 It's not that I have anything against Iron, of course, though I am
 slightly wary of their website and apparent lack of a source
 repository. Doesn't feel brilliantly maintained. Maybe they just need
 a gentle nudge in Launchpad's direction.
 With regards to packaging, there is a Launchpad PPA with daily builds
 of Chromium, so they surely have sorted out any installation and
 packaging quirks in that source repository. Perhaps you can get a diff
 with Iron's changes, and if you're incredibly lucky it'll apply
 smoothly. Could save you some work :)


 Dylan


A Launchpad PPA of SRWare Iron would solve all my concerns.

Also, quite a few of the issues could be resolved by disabling certain
features in Chromium by default. This includes disabling the URL
suggestion features and the DNS pre-fetching features. These features
are best left as opt-in IMO.

Thanks,
Ryan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Ryan Oram
On Tue, May 18, 2010 at 7:57 PM, Dmitrijs Ledkovs
dmitrij.led...@ubuntu.com wrote:
 The chromium daily builds ppa is more accuratly should be described as
 a mini-fork it has spliced chromium tree almost in half and throughout
 out loads of junk (embedded copies of libraries being the most
 significant part).

 My personal opinion is that current chromium daily builds ppa (which
 is maintained by a few folks including some that do mozilla for
 ubuntu) is far more secure and stable in terms of packaging and
 integration with Ubuntu  Debian _and_ it doesn't have google goggles
 spying users.

I am extremely happy to see that Ubuntu is already taking direct steps
to alleviate many of these concerns. However, consulting with SRWare
to see what excatly they removed from Chromium (as their website is
admittingly quite vague) and applying some of their changes as well to
the builds would be a good additional step. Leaving the features I
mentioned before as opt-in (suggestions and DNS-prefetching) would be a
good idea as well.

Thanks,
Ryan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Dane Mutters
accidently hit reply instead of sending to the list...whoops...


 I think some of you would be interested in reading this page that
 (allegedly) documents some of the (allegedly) somewhat shady
 beginnings of Iron:

 http://neugierig.org/software/chromium/notes/2009/12/iron.html

 If this information is correct, then I heavily question that Iron is a
 worthwhile project/fork at all, as opposed to being a way to garner
 publicity and money from fear mongering and (amusingly enough) Google
 advertisements on their web page.

 --Dane

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Ryan Oram
On Tue, May 18, 2010 at 8:15 PM, Dmitrijs Ledkovs
dmitrij.led...@ubuntu.com wrote:
 Just do it !!! Ubuntu has chromium maintainers already. Start your own
 SRWare ppa.

 And please stop spamming ubuntu  debian mailing list. You were
 already asked once to stop this non-sence.

 When you have constructive packaging suggestions either submit
 branches for merge-proposals or submit new packages via REVU.

I'll look into it in about a week. Such a project is a bit big for the
infinityOS team, which is why I posted it here (and on the Debian
mailling list) in the first place.

I can't start a SRWare PPA immediately as they haven't released
updated source code in some time (probably due to neglience if
anything).

Thanks,
Ryan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Ryan Oram
On Tue, May 18, 2010 at 8:27 PM, Dane Mutters dmutt...@gmail.com wrote:
 I think some of you would be interested in reading this page that
 (allegedly) documents some of the (allegedly) somewhat shady
 beginnings of Iron:

 http://neugierig.org/software/chromium/notes/2009/12/iron.html

 If this information is correct, then I heavily question that Iron is a
 worthwhile project/fork at all, as opposed to being a way to garner
 publicity and money from fear mongering and (amusingly enough) Google
 advertisements on their web page.

 --Dane

I wasn't aware of this. Thank you for the link.

Thanks,
Ryan

PS I still feel, however, the features I mentioned before be made opt-in.

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: SRWare Iron: Chromium without the data-mining

2010-05-18 Thread Scott Kitterman


Ryan Oram r...@infinityos.net wrote:

A Launchpad PPA of SRWare Iron would solve all my concerns.

Fortunately those are open to everyone so you are able to scratch your own itch.

Scott K

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


SRWare Iron: Chromium without the data-mining

2010-05-17 Thread Ryan Oram
http://www.srware.net/en/software_srware_iron_chrome_vs_iron.php

This should become a full open source project with a community behind
it. With Mozilla disregarding H.264, the community needs a full
browser capable of H.264 video playback without the privacy issues of
Chrome.

We need to Iceweasel Chromium.

I'm willing to put the infinityOS team behind this, but I would like
the help and support of the Ubuntu community.

Thanks,
Ryan

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss