Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare

2018-04-01 Thread golinux

On 2018-04-01 11:24, Steve Litt wrote:

On Sun, 1 Apr 2018 16:29:23 +0200
Antony Stone  wrote:


On Sunday 01 April 2018 at 16:13:10, aitor_czr wrote:

> On 31/03/18 20:54, Rick Moen wrote:



> Where is Vladimir Karimov, one of the worst dictators of the world,
> fortunately dead?


[snip]


Secondly, what has the current resting place of a dead dictator got
to do with Open Source licensing and Red Hat copyrights?


Who's buried in Grant's Tomb?

SteveT
__


And what does any of this diversion have to do with firefox and 
cloudflare?


golinux
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare

2018-04-01 Thread Steve Litt
On Sun, 1 Apr 2018 16:29:23 +0200
Antony Stone  wrote:

> On Sunday 01 April 2018 at 16:13:10, aitor_czr wrote:
> 
> > On 31/03/18 20:54, Rick Moen wrote:

> > Where is Vladimir Karimov, one of the worst dictators of the world,
> > fortunately dead?  
> 
[snip]
> 
> Secondly, what has the current resting place of a dead dictator got
> to do with Open Source licensing and Red Hat copyrights?

Who's buried in Grant's Tomb?
 
SteveT

Steve Litt 
April 2018 featured book: Troubleshooting Techniques
 of the Successful Technologist
http://www.troubleshooters.com/techniques
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare

2018-04-01 Thread Rowland Penny
On Sun, 1 Apr 2018 17:39:35 +0200
aitor_czr  wrote:

> Hi,
> 
> On 01/04/18 16:29, Antony Stone wrote:
> > On Sunday 01 April 2018 at 16:13:10, aitor_czr wrote:
> >
> >> On 31/03/18 20:54, Rick Moen wrote:
> >>
> >>> Yes, and your point is?
> >> My point of view, you mean?
> >>
> >> By downloading CentOS software, you acknowledge that you
> >> understand all of the following: CentOS software and technical
> >> information may be subject to the U.S. Export Administration
> >> Regulations (the “EAR”) and other U.S. and foreign laws and may
> >> not be exported, re-exported or transferred (a) to a prohibited
> >> destination country under the EAR or U.S. sanctions regulations
> >> (currently Cuba, Iran, North Korea, Sudan, Syria, and the Crimea
> >> Region of Ukraine, subject to change as posted by the United
> >> States government)
> >>
> >> Where is Vladimir Karimov, one of the worst dictators of the world,
> >> fortunately dead?
> > I often, and certainly in this case, find obscure rhetorical
> > questions presented as part of an answer to a request for
> > clarification, to be more of a hindrance than a help.
> >
> > Firstly, I am not familiar with who Vladimir Karimov is, and a
> > Google / Wikipedia search has not helped me to find out.
> 
> You don't miss anything
> 
> > Secondly, what has the current resting place of a dead dictator got
> > to do with Open Source licensing and Red Hat copyrights?
> >
> > Please, when asked for clarification, try to provide a clear answer
> > instead of simply making statements prompting even more people to
> > wonder "what?"
> 
> I don't claim to be aggressive; i only whish to express that
> scientific projects (like Scientific Linux, based on CentOS, is
> presumed to be) should stay away from policy (and religions).
> 
>    Aitor.

I wish you would get your facts right ;-)

Scientific Linux is not based on Centos, it (like Centos) is based on
RHEL.

Rowland


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare

2018-04-01 Thread aitor_czr

Hi,

On 01/04/18 16:29, Antony Stone wrote:

On Sunday 01 April 2018 at 16:13:10, aitor_czr wrote:


On 31/03/18 20:54, Rick Moen wrote:


Yes, and your point is?

My point of view, you mean?

By downloading CentOS software, you acknowledge that you understand all
of the following: CentOS software and technical information may be
subject to the U.S. Export Administration Regulations (the “EAR”) and
other U.S. and foreign laws and may not be exported, re-exported or
transferred (a) to a prohibited destination country under the EAR or
U.S. sanctions regulations (currently Cuba, Iran, North Korea, Sudan,
Syria, and the Crimea Region of Ukraine, subject to change as posted by
the United States government)

Where is Vladimir Karimov, one of the worst dictators of the world,
fortunately dead?

I often, and certainly in this case, find obscure rhetorical questions
presented as part of an answer to a request for clarification, to be more of a
hindrance than a help.

Firstly, I am not familiar with who Vladimir Karimov is, and a Google /
Wikipedia search has not helped me to find out.


You don't miss anything


Secondly, what has the current resting place of a dead dictator got to do with
Open Source licensing and Red Hat copyrights?

Please, when asked for clarification, try to provide a clear answer instead of
simply making statements prompting even more people to wonder "what?"


I don't claim to be aggressive; i only whish to express that scientific 
projects (like Scientific Linux, based on CentOS, is presumed to be) 
should stay away from policy (and religions).


  Aitor.


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare

2018-04-01 Thread Rick Moen
Quoting Antony Stone (antony.st...@devuan.open.source.it):

> Firstly, I am not familiar with who Vladimir Karimov is, and a Google
> / Wikipedia search has not helped me to find out.
> 
> Secondly, what has the current resting place of a dead dictator got to
> do with Open Source licensing and Red Hat copyrights?

I'm guessing he meant Islam Abduganiyevich Karimov, dictator of
Uzbekistan, who died in Tashkent (the capital) in 2016 after an
iron-fisted, very bloody, and generally terrifying 27-year rule.  He's
buried in his native Samarkand.  ;->

Perhaps aitor_czr noticed Uzbekistan being missing from the cited Export
Administration Regulations (EAR) prohibited-countries list.[1]  The EARs are
a long-running farce by which the US Department of Commerce's Bureau of
Industry and Security (BIS) (advised by the No Such Agency, Never Say
Anything, NSA people) pretend as if the rest of the planet can't and
doesn't originate strong crypto.

Because CentOS includes strong crypto and is a project based at least
nominally in the USA, the project make a ritual gesture towards
compliance with the EARs.  However, like other open source projects,
IIRC they take no actual measures whatsover to prevent countries deemed
naughty by the NSA^w Department of Commerce to download their software,
and merely make the ritual declaration that people in certain countries
'may not' download it, nosirree, nope.

[1] Why?  Perhaps in accordance with the old motto, 'There's no fuel
like an oil fuel.'  (Apologies to members of the international community
who might not get the pun.  The joke is a little idiomatic.)

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Unbootable system due to cryptsetup depending to two libs in /usr

2018-04-01 Thread fsmithred
On 04/01/2018 10:29 AM, Klaus Ethgen wrote:
> Hi,
> 
> Am So den  1. Apr 2018 um 15:14 schrieb fsmithred:
>>> In fact, debian did intentional break libpopt as the version in ascii
>>> installs to /lib but the version in ceres installs to /usr.
> [...]
>> Nothing installs to /lib anymore, because it's just a symlink to /usr/lib.
>> You can get this on ascii with a debootstrap install.
> 
> Well, that is only true if you have the pöttering usrmerge package
> installed. If you do a minimal ascii bootstrap, you don't get infected
> by that package.
> 
> The pöttering followers invented that to break all installations with
> separate /usr. In fact, that package damages your whole system
> sustainably.
> 
> Regards
>Klaus
> -- 

The usrmerge package is not installed here. I can't find it mentioned in
apt history or bootstrap.log.  It's only in buster/beowulf and sid/ceres.
Guess I'll have to do another debootstrap of ascii and see if it's still
happening.

fsr

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare

2018-04-01 Thread Antony Stone
On Sunday 01 April 2018 at 16:13:10, aitor_czr wrote:

> On 31/03/18 20:54, Rick Moen wrote:
>
> > Yes, and your point is?
>
> My point of view, you mean?
>
> By downloading CentOS software, you acknowledge that you understand all
> of the following: CentOS software and technical information may be
> subject to the U.S. Export Administration Regulations (the “EAR”) and
> other U.S. and foreign laws and may not be exported, re-exported or
> transferred (a) to a prohibited destination country under the EAR or
> U.S. sanctions regulations (currently Cuba, Iran, North Korea, Sudan,
> Syria, and the Crimea Region of Ukraine, subject to change as posted by
> the United States government)
> 
> Where is Vladimir Karimov, one of the worst dictators of the world,
> fortunately dead?

I often, and certainly in this case, find obscure rhetorical questions 
presented as part of an answer to a request for clarification, to be more of a 
hindrance than a help.

Firstly, I am not familiar with who Vladimir Karimov is, and a Google / 
Wikipedia search has not helped me to find out.

Secondly, what has the current resting place of a dead dictator got to do with 
Open Source licensing and Red Hat copyrights?

Please, when asked for clarification, try to provide a clear answer instead of 
simply making statements prompting even more people to wonder "what?"


Thanks,


Antony.

-- 
https://tools.ietf.org/html/rfc6890 - providing 16 million IPv4 addresses for 
talking to yourself.

   Please reply to the list;
 please *don't* CC me.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Unbootable system due to cryptsetup depending to two libs in /usr

2018-04-01 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi,

Am So den  1. Apr 2018 um 15:14 schrieb fsmithred:
> > In fact, debian did intentional break libpopt as the version in ascii
> > installs to /lib but the version in ceres installs to /usr.
[...]
> Nothing installs to /lib anymore, because it's just a symlink to /usr/lib.
> You can get this on ascii with a debootstrap install.

Well, that is only true if you have the pöttering usrmerge package
installed. If you do a minimal ascii bootstrap, you don't get infected
by that package.

The pöttering followers invented that to break all installations with
separate /usr. In fact, that package damages your whole system
sustainably.

Regards
   Klaus
- -- 
Klaus Ethgen   http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16Klaus Ethgen 
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C
-BEGIN PGP SIGNATURE-
Comment: Charset: ISO-8859-1
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=YUyP
-END PGP SIGNATURE-
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Unbootable system due to cryptsetup depending to two libs in /usr

2018-04-01 Thread fsmithred
On 04/01/2018 09:37 AM, Klaus Ethgen wrote:
> Am So den  1. Apr 2018 um  9:59 schrieb Klaus Ethgen:
> [libpopt and libargon]
>> I run ceres. ascii is not affected.
> 
> In fact, debian did intentional break libpopt as the version in ascii
> installs to /lib but the version in ceres installs to /usr.
> 
> Regards
>Klaus
> -- 

Nothing installs to /lib anymore, because it's just a symlink to /usr/lib.
You can get this on ascii with a debootstrap install.

lrwxrwxrwx   1 root root 7 Nov 10 10:44 lib -> usr/lib
lrwxrwxrwx   1 root root 9 Nov 10 10:44 lib32 -> usr/lib32
lrwxrwxrwx   1 root root 9 Nov 10 10:44 lib64 -> usr/lib64
lrwxrwxrwx   1 root root10 Nov 10 10:44 libx32 -> usr/libx32

fsmithred
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Mozilla is at it again - Firefox nightly sends all your hostname lookups to cloudflare

2018-04-01 Thread aitor_czr

Hi Rick,

On 31/03/18 20:54, Rick Moen wrote:

Quoting aitor_czr (aitor_...@gnuinos.org):

Scientific Linux is a CentOS based distribution,

Indeed, which in turn is an RHEL rebuild, with the result that they are
both RHEL rebuilds.  I'm thus really not sure what your point is.


But..., read here:

https://www.centos.org/legal/

Yes, and your point is?

My point of view, you mean?

By downloading CentOS software, you acknowledge that you understand all 
of the following: CentOS software and technical information may be 
subject to the U.S. Export Administration Regulations (the “EAR”) and 
other U.S. and foreign laws and may not be exported, re-exported or 
transferred (a) to a prohibited destination country under the EAR or 
U.S. sanctions regulations (currently Cuba, Iran, North Korea, Sudan, 
Syria, and the Crimea Region of Ukraine, subject to change as posted by 
the United States government)


Where is Vladimir Karimov, one of the worst dictators of the world, 
fortunately dead?


   Aitor.








___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Unbootable system due to cryptsetup depending to two libs in /usr

2018-04-01 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Am So den  1. Apr 2018 um  9:59 schrieb Klaus Ethgen:
[libpopt and libargon]
> I run ceres. ascii is not affected.

In fact, debian did intentional break libpopt as the version in ascii
installs to /lib but the version in ceres installs to /usr.

Regards
   Klaus
- -- 
Klaus Ethgen   http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16Klaus Ethgen 
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C
-BEGIN PGP SIGNATURE-
Comment: Charset: ISO-8859-1
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=Pi8v
-END PGP SIGNATURE-
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Unbootable system due to cryptsetup depending to two libs in /usr

2018-04-01 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Sorry, resend to dng@lists.dyne.org

Am Fr den 30. Mär 2018 um 20:29 schrieb Alessandro Selli:
> On Fri, 30 Mar 2018 at 15:22:21 +0100
> Klaus Ethgen  wrote:
> 
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA512
> > 
> > Hi,
> > 
> > recently, debian patched the use of two libraries into cryptsetup,
> > libargon and libpopt. Both are living under /usr.
> > 
> > That leads to unbootable system when /usr is on separate partition and
> > you using disk encryption (or even having /usr on a encrypted
> > partition). This bug happens with or without initrd.
> 
>   I am not affected and I do use initramfs.  What release od Devuan are you
> runnning?

You are only affekted if you have separate /usr and encrypted partitions
that are decrypted in boot (like /home or even the whole system).

I run ceres. ascii is not affected.

And yes, this bug was introduced by debian, not by devuan. But devuan
took the package from debian without a change.

Regards
   Klaus
- -- 
Klaus Ethgen   http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16Klaus Ethgen 
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C
-BEGIN PGP SIGNATURE-
Comment: Charset: ISO-8859-1

iQGzBAEBCgAdFiEEMWF28vh4/UMJJLQEpnwKsYAZ9qwFAlrAn4QACgkQpnwKsYAZ
9qynRgv+LIC7Adqc5Ye4U67tHHbKrV6EaElLM5JOT7ALJ3UdmeevsMfN9ARmABHL
5fziZgkF4Ooz1a5x7ts1nllMrnFp0rUXva6k6hCwqfcoVKP2mkP0xeMBnrzlnCMT
b248HWnLMq85A3gro6VmQqxvXq0gGKjbuzhcqpjGqRbE33ZO8Iej3YDeCmMti7sG
YnRNMBfiMrhF3YqclBDx0TP3/XeTBdV15Y/tOTz+nyx1APthY8lQddvsuxiFID9m
eUmWDSsGFQ4HZ7XRdOP3Br5ugKgsnQR+nrs6o967jH31h2zE6EXWi2LP/Ujio5+O
0fNbyjBUtYw89Bdcl1TTHVc01hMBTsSACuNzngNComyJ/bEOGbtY4eweDD7i1MCt
MiyjjgcHUlK+EqD3KGHoM0LOOvIP3vH4SBntxbGdYC0aTcY1jKldc3fiobHPfpWz
9tl6k9mv44wGo7/HTi2nCgaMhyCWT0UTHK7M5njSFnmmSd6NKyM2n+xXO5zsYKwI
bIJgevjs
=PTDQ
-END PGP SIGNATURE-
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng