bug#59175: GNU Icecat not loading cloudflare
On 11/13/22 03:01, bill-auger wrote: On Sat, 12 Nov 2022 12:38:12 +0100 Antonio wrote: Do you know of this GitLab bug https://gitlab.com/gitlab-org/gitlab/-/issues/345328? yes, that bug is years-old now - it has been addressed on this mailing list; but the patches are yet to be accepted: https://lists.gnu.org/archive/html/bug-gnuzilla/2021-05/msg5.html I overlooked how those values apply, the useragent string is not currently spoofed, but the navigator.oscpu (and others) are spoofed, this mismatch breaks things. I'm removing the custom spoofing values as this is all handled together by the fingerprinting protection mechanism at this point.
bug#59175: GNU Icecat not loading cloudflare
On 11/13/22 03:01, bill-auger wrote: On Sat, 12 Nov 2022 12:38:12 +0100 Antonio wrote: Do you know of this GitLab bug https://gitlab.com/gitlab-org/gitlab/-/issues/345328? yes, that bug is years-old now - it has been addressed on this mailing list; but the patches are yet to be accepted: https://lists.gnu.org/archive/html/bug-gnuzilla/2021-05/msg5.html that mentions bug#47276 "Stuck at Cloudflare 'browser checks'" (perhaps still open), of which this (bug#59175) is a duplicate IceCat 102 is not set to spoof the referrer. I have tried both the methods those patches indicate, and the problem is not resolved. I have tried a long list of changes and I cannot figure out the reason, but it doesn't seem to be the user agent. A bad user agent should result in the cloudflare check failing and showing a captcha, what we have is a redirect loop. I have tested with other cloudflare-served sites and they all seem to fail the same way. I'm considering this a release blocker. A head scratcher is that Abrowser, when loading the same settings file from IceCat, works correctly. Same for Firefox 102 ESR binaries from mozilla, suggesting that the problem may be in some other part of the IceCat build process, either in a patch or other code change; or in the toolchain, or in a library embedded at build time. My next step will be to build icecat tests with no customization, and add them in chunks, to isolate the problem. Ideas and tests are welcome!
Re: [Bug-gnuzilla] Installer doesn't recognize new manifest files
On 5/11/19 5:27 AM, Antonio Trande wrote: > Hi all. > > Newer 'https-everywhere' addon contains new manifest files in META-INF > directory (cose.manifest, cose.sign) unrecognized by IceCat installer: > > BUILDSTDERR: Error: > /builddir/build/BUILD/icecat-60.6.3/objdir/dist/bin/browser/extensions/jid1-KtlZuoiikVfFew@jetpack/META-INF/cose.manifest:1: > Unknown manifest directive: Manifest-Version: > BUILDSTDERR: Error: > /builddir/build/BUILD/icecat-60.6.3/objdir/dist/bin/browser/extensions/jid1-KtlZuoiikVfFew@jetpack/META-INF/cose.manifest:3: > Unknown manifest directive: Name: > BUILDSTDERR: Error: > /builddir/build/BUILD/icecat-60.6.3/objdir/dist/bin/browser/extensions/jid1-KtlZuoiikVfFew@jetpack/META-INF/cose.manifest:4: > Unknown manifest directive: Digest-Algorithms: > BUILDSTDERR: Error: > /builddir/build/BUILD/icecat-60.6.3/objdir/dist/bin/browser/extensions/jid1-KtlZuoiikVfFew@jetpack/META-INF/cose.manifest:5: > Unknown manifest directive: SHA1-Digest: > BUILDSTDERR: Error: > /builddir/build/BUILD/icecat-60.6.3/objdir/dist/bin/browser/extensions/jid1-KtlZuoiikVfFew@jetpack/META-INF/cose.manifest:6: > Unknown manifest directive: SHA256-Digest: > > Do you know how to fix this behavior? That was corrected in commit http://git.savannah.gnu.org/cgit/gnuzilla.git/commit/?id=7859a9131fcda359265dc16ef55933e5ed218119 signature.asc Description: OpenPGP digital signature -- http://gnuzilla.gnu.org
[Bug-gnuzilla] IceCat 60.3.0 Release
GNUzilla is the GNU version of the Mozilla suite, and GNU IceCat is the GNU version of the Firefox browser. Its main advantage is an ethical one: it is entirely free software. While the Firefox source code from the Mozilla project is free software, they distribute and recommend non-free software as plug-ins and addons. Also their trademark license restricts distribution in ways that hinder freedom 0. GNU IceCat has multiple practical advantages as well, such as better privacy and security settings, extensive blocking of sites that may track the user's browsing habits, or the inclusion of LibreJS and other extensions that help browse without running non-free javascript. The user manual pages are at http://libreplanet.org/wiki/Group:IceCat/ Please contribute by joining the wiki and editing the manuals. Source tarballs, binaries for generic GNU/Linux systems and translations are available at http://ftp.gnu.org/gnu/gnuzilla/ GPG key ID:D7E04784 GNU IceCat releases Fingerprint: A573 69A8 BABC 2542 B5A0 368C 3C76 EED7 D7E0 4784 https://savannah.gnu.org/project/memberlist-gpgkeys.php?group=gnuzilla == This is the 60.3.0 ESR release of GNU IceCat, containing substantial improvements from the previous major version (v52.x ESR): * LibreJS 7.x, now based in the WebExtensions API. It currently provides a very similar set of features compared with the version shipped with IceCat 52.x, but its performance and robustness have greatly improved. Tests and comments are welcome. * A set of companion extensions for LibreJS by Nathan Nichols (https://addons.mozilla.org/en-US/firefox/user/NateN1222/) are pre-installed, and provide workarounds to use some services at USPS, RSF.org, SumOfUs.org, pay.gov, McDonald's, goteo.org and Google Docs without using nonfree JavaScript. * A series of configuration changes and tweaks were applied to ensure that IceCat does not initiate network connections that the user has not explicitly requested. This implies not downloading feeds, updates, blacklists or any other similar data during startup. * A new homepage shows the most important privacy and freedom options available, with explanations for the user to tune IceCat's behavior to their specific needs. * We no longer include SpyBlock, which was IceCat's fork of AdBlockPlus that allowed to block all third-party requests during "Private Browsing" mode. Now, we include an extension that blocks all third party requests by default, and provides a simple interface to whitelist specific third-party resources on a per-site basis. * A basic TOR integration extension is included. Note that you need to separately run the TOR service at the operating system for this extension to work. If you use a GNU/Linux system this is usually done by installing the "tor" package. Thanks to Giorgio Maone, Nathan Nichols, Nyk Nyby and Zach Wick for their contribution to LibreJS and IceCat, and happy testing! -- http://gnuzilla.gnu.org
[Bug-gnuzilla] IceCat 60.2.0 Pre-release
GNUzilla is the GNU version of the Mozilla suite, and GNU IceCat is the GNU version of the Firefox browser. Its main advantage is an ethical one: it is entirely free software. While the Firefox source code from the Mozilla project is free software, they distribute and recommend non-free software as plug-ins and addons. Also their trademark license restricts distribution in ways that hinder freedom 0. GNU IceCat has multiple practical advantages as well, such as better privacy and security settings, extensive blocking of sites that may track the user's browsing habits, or the inclusion of LibreJS and other extensions that help browse without running non-free javascript. https://www.gnu.org/software/gnuzilla/ GPG key ID:D7E04784 GNU IceCat releases Fingerprint: A573 69A8 BABC 2542 B5A0 368C 3C76 EED7 D7E0 4784 https://savannah.gnu.org/project/memberlist-gpgkeys.php?group=gnuzilla == This is a pre-release for version 60.2.0 of GNU IceCat, available at http://alpha.gnu.org/gnu/gnuzilla/60.2.0/ This release contains substantial design and usability changes from the previous major version (v52.x ESR) so I'm publishing it at alpha.gnu.org to request testing and comments before moving it to ftp.gnu.org. Source Code plus binaries for GNU/Linux x86 and x86_64 are available. The main differences (other than those provided from upstream changes from v52.x to v60.x) are: * LibreJS 7.x, now based in the WebExtensions API. It currently provides a very similar set of features compared with the version shipped with IceCat 52.x but testing, comments and advice are welcome. * A set of companion extensions for LibreJS by Nathan Nichols (https://addons.mozilla.org/en-US/firefox/user/NateN1222/) are pre-installed, and provide workarounds to use some services at USPS, RSF.org, SumOfUs.org, pay.gov, McDonald's, goteo.org and Google Docs without using nonfree JavaScript. * A series of configuration changes and tweaks were applied to ensure that IceCat does not initiate network connections that the user has not explicitly requested. This implies not downloading feeds, updates, blacklists or any other similar data needed during startup. * A new homepage shows the most important privacy and freedom options available, with explanations for the user to tune IceCat's behavior to their specific needs. * We no longer include SpyBlock, which was IceCat's fork of AdBlockPlus that allowed to block all third-party requests during "Private Browsing" mode. Now, we include an extension that blocks all third party requests by default, and provides a simple interface that allows to whitelist specific third-party resources on a per-site basis. This change is the most significant usability change from IceCat 52.x and I'd like to get testers to provide an opinion on it. One of the reasons for its inclusion is that unlike other blockers it doesn't need to download any files to do its job, thus avoiding the previously mentioned unrequested network connections. Thanks to Giorgio Maone, Nathan Nichols, Nyk Nyby and Zach Wick for their contribution to LibreJS and IceCat, and happy testing! -- http://gnuzilla.gnu.org
[Bug-gnuzilla] IceCat 52.6.0 release
GNUzilla is the GNU version of the Mozilla suite, and GNU IceCat is the GNU version of the Firefox browser. Its main advantage is an ethical one: it is entirely free software. While the Firefox source code from the Mozilla project is free software, they distribute and recommend non-free software as plug-ins and addons. Also their trademark license restricts distribution in ways that hinder freedom 0. GNU IceCat has multiple practical advantages as well, such as better privacy and security settings, extensive blocking of sites that may track the user's browsing habits, or the inclusion of LibreJS and other extensions that help browse without running non-free javascript. https://www.gnu.org/software/gnuzilla/ The user manual pages are at http://libreplanet.org/wiki/Group:IceCat/ Please contribute by joining the wiki and editing the manuals. Source tarballs, binaries for generic GNU/Linux systems and translations are available at http://ftp.gnu.org/gnu/gnuzilla/ GPG key ID:D7E04784 GNU IceCat releases Fingerprint: A573 69A8 BABC 2542 B5A0 368C 3C76 EED7 D7E0 4784 https://savannah.gnu.org/project/memberlist-gpgkeys.php?group=gnuzilla == Changes since v52.3.0-ESR == * Extensions: - HTTPS Everywhere updated to 2018.1.11 - "goteo.org payments with free JS" updated to 1.1 - "LibreJS compatible Pay.gov" updated to 1.3 - "Reveal hidden HTML" updated to 1.6 - Enabled WebRTC, but prevent leaking the LAN ip. -- http://gnuzilla.gnu.org
[Bug-gnuzilla] IceCat 52.3.0 release
GNUzilla is the GNU version of the Mozilla suite, and GNU IceCat is the GNU version of the Firefox browser. Its main advantage is an ethical one: it is entirely free software. While the Firefox source code from the Mozilla project is free software, they distribute and recommend non-free software as plug-ins and addons. Also their trademark license restricts distribution in ways that hinder freedom 0. GNU IceCat has multiple practical advantages as well, such as better privacy and security settings, extensive blocking of sites that may track the user's browsing habits, or the inclusion of LibreJS and other extensions that help browse without running non-free javascript. https://www.gnu.org/software/gnuzilla/ The user manual pages are at http://libreplanet.org/wiki/Group:IceCat/ Please contribute by joining the wiki and editing the manuals. Source tarballs, binaries for generic GNU/Linux systems and translations are available at http://ftp.gnu.org/gnu/gnuzilla/ GPG key ID:D7E04784 GNU IceCat releases Fingerprint: A573 69A8 BABC 2542 B5A0 368C 3C76 EED7 D7E0 4784 https://savannah.gnu.org/project/memberlist-gpgkeys.php?group=gnuzilla == Changes since v52.1.-ESR == * Added extension collection https://addons.mozilla.org/en-US/firefox/collections/NateN1222/librejs-compatibility-add-ons/ * SpyBlock updated to 2.9.1 * HTTPS Everywhere updated to 5.2.21 * Removed Youtube player extension, as Youtube can no longer be browsed without running non-free javascript. * Fixed OCSP check settings that were impeding captive portal usage. -- http://gnuzilla.gnu.org
[Bug-gnuzilla] IceCat 52.0.2 release
GNUzilla is the GNU version of the Mozilla suite, and GNU IceCat is the
GNU version of the Firefox browser. Its main advantage is an ethical
one: it is entirely free software. While the Firefox source code from
the Mozilla project is free software, they distribute and recommend
non-free software as plug-ins and addons. Also their trademark license
restricts distribution in several ways incompatible with freedom 0.
https://www.gnu.org/software/gnuzilla/
The user manual pages are at http://libreplanet.org/wiki/Group:IceCat/
You can contribute by joining the wiki and editing the manuals.
Source tarballs, binaries for generic GNU/Linux systems and translations
are available at http://ftp.gnu.org/gnu/gnuzilla/52.0.2/
GPG key ID:D7E04784 GNU IceCat releases
Fingerprint: A573 69A8 BABC 2542 B5A0 368C 3C76 EED7 D7E0 4784
https://savannah.gnu.org/project/memberlist-gpgkeys.php?group=gnuzilla
This release introduces few changes aside of the major upgrade from v45
to v52. It required changes to the branding, default extensions, and
build system. These development-relevant changes can be tracked at
http://git.savannah.gnu.org/cgit/gnuzilla.git and
http://git.savannah.gnu.org/cgit/gnuzilla.git/tree/data/Changelog.IceCat
Notable improvements introduced upstream include:
* Captive portal detection and handling
* Native support for FLAC
* Along with many performance and security improvements.
* Multiprocess windows ("Electrolysis"). Note that GNU LibreJS is not
compatible with this feature, which is globally disabled as a result.
Please consult https://www.gnu.org/software/librejs/ on how to help.
--
http://gnuzilla.gnu.org
