Re: [gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Kent Fredric]

On Thu, 01 Sep 2016 22:03:37 +0100
"M. J. Everitt"  wrote:

> [and No, I'm
> not volunteering at this point!!!]

Well volunteered [future] you.


pgpKawF6IrKFy.pgp
Description: OpenPGP digital signature

Re: [gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[M. J. Everitt]

On 01/09/16 17:58, Duncan wrote:
> Martin Vaeth posted on Thu, 01 Sep 2016 05:03:20 + as excerpted:
>
>> Duncan <1i5t5.dun...@cox.net> wrote:
>>> Martin Vaeth posted on Wed, 31 Aug 2016 18:08:17 + as excerpted:
>>>
 Kent Fredric  wrote:
> I really wish there was a way to run ancient firefox with security
> fixes :(
 There's palemoon
>>> For Linux?
>> Even for gentoo: There's a "palemoon" overlay in layman.
> Again, thanks, everyone.  I'm not personally so put off by firefox /yet/ 
> to need palemoon, but I'm very glad to be corrected and know that it's at 
> least /available/ for Linux, both in case I /do/ need it myself, and so I 
> can correctly mention it as an option to others should the subject come 
> up elsewhere.
>
I believe there are several Firefox-derived forks out there, some
available some less-so for linux. I was exploring a couple of ones I'd
heard mentioned that aren't in portage (or overlays, to my knowledge)
which it would be possible to add to the web browser portfolio if a
suitable enthusiastic maintainer were to come forward ... [and No, I'm
not volunteering at this point!!!]



signature.asc
Description: OpenPGP digital signature

Re: [gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[waltdnes]

On Thu, Sep 01, 2016 at 03:12:08PM +1200, Kent Fredric wrote
> On Wed, 31 Aug 2016 21:03:34 -0500
> »Q«  wrote:
> 
> >  says it's in Gentoo overlays, but I don't
> > know which ones.
> 
> Tar.bz2's from http://linux.palemoon.org/download/mainline/ are
> working nicely for me as a straight download/unpack/run-in-$HOME

  Or, with root or sudo, you can make Pale Moon global on your system.

rm -rf /usr/local/palemoon
tar -C /usr/local/ -xvjf palemoon.bz2
ln -sf /usr/local/palemoon/palemoon /usr/bin/palemoon

...or in /opt...

rm -rf /opt/palemoon
tar -C /opt/ -xvjf palemoon.bz2
ln -sf /opt/palemoon/palemoon /usr/bin/palemoon

  And there's also the option of cloning the git repository, and
building on your own machine with "-march=native".  I also build a
32-bit version "-march=bonnell" in a VM on my desktop, for use in my
ancient 32-bit-only Atom netbook.  I disable webRTC, gconf+dbus,
pulseaudio, etc. in my personal builds.

-- 
Walter Dnes 
I don't run "desktop environments"; I run useful applications

[gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Duncan]

Martin Vaeth posted on Thu, 01 Sep 2016 05:03:20 + as excerpted:

> Duncan <1i5t5.dun...@cox.net> wrote:
>> Martin Vaeth posted on Wed, 31 Aug 2016 18:08:17 + as excerpted:
>>
>>> Kent Fredric  wrote:

 I really wish there was a way to run ancient firefox with security
 fixes :(
>>>
>>> There's palemoon
>>
>> For Linux?
> 
> Even for gentoo: There's a "palemoon" overlay in layman.

Again, thanks, everyone.  I'm not personally so put off by firefox /yet/ 
to need palemoon, but I'm very glad to be corrected and know that it's at 
least /available/ for Linux, both in case I /do/ need it myself, and so I 
can correctly mention it as an option to others should the subject come 
up elsewhere.

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman

Re: [gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Bill Kenworthy]

and it doesn't work on some websites whereas firefox does - the
Australian census site for one :(

BillK



On 09/01/16 13:03, Martin Vaeth wrote:
> Duncan <1i5t5.dun...@cox.net> wrote:
>> Martin Vaeth posted on Wed, 31 Aug 2016 18:08:17 + as excerpted:
>>
>>> Kent Fredric  wrote:
 I really wish there was a way to run ancient firefox with security
 fixes :(
>>> There's palemoon
>> For Linux?
> Even for gentoo: There's a "palemoon" overlay in layman.
> For instance, palemoon still provides the old privacy-keeping
> sync method instead of firefox's new data harvester.
>
> The only reason I still want firefox installed is that palemoon
> still only supports gstreamer (though they recently updated
> optionally to gstreamer:1.0) but not ffmpeg.
>
>

[gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Martin Vaeth]

Duncan <1i5t5.dun...@cox.net> wrote:
> Martin Vaeth posted on Wed, 31 Aug 2016 18:08:17 + as excerpted:
>
>> Kent Fredric  wrote:
>>>
>>> I really wish there was a way to run ancient firefox with security
>>> fixes :(
>>
>> There's palemoon
>
> For Linux?

Even for gentoo: There's a "palemoon" overlay in layman.
For instance, palemoon still provides the old privacy-keeping
sync method instead of firefox's new data harvester.

The only reason I still want firefox installed is that palemoon
still only supports gstreamer (though they recently updated
optionally to gstreamer:1.0) but not ffmpeg.

Re: [gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Kent Fredric]

On Wed, 31 Aug 2016 21:03:34 -0500
»Q«  wrote:

>  says it's in Gentoo overlays, but I don't
> know which ones.

Tar.bz2's from http://linux.palemoon.org/download/mainline/ are working nicely 
for me
as a straight download/unpack/run-in-$HOME

Much so ( and more securely so ) than the equivalent with using legacy 
Firefoxes :)



pgpYS2PQghV7Y.pgp
Description: OpenPGP digital signature

[gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[»Q«]

On Thu, 1 Sep 2016 01:59:21 + (UTC)
Duncan <1i5t5.dun...@cox.net> wrote:

> Martin Vaeth posted on Wed, 31 Aug 2016 18:08:17 + as excerpted:

> > There's palemoon  
> 
> For Linux?  I haven't looked into it personally, but I had read that 
> palemoon was MS-platform only.  So it's news to me if it's available
> for Linux.  Thanks very much for clearing that up for me if it's
> available for Linux, also!

 says it's in Gentoo overlays, but I don't
know which ones.

[gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Duncan]

Martin Vaeth posted on Wed, 31 Aug 2016 18:08:17 + as excerpted:

> Kent Fredric  wrote:
>>
>> I really wish there was a way to run ancient firefox with security
>> fixes :(
> 
> There's palemoon

For Linux?  I haven't looked into it personally, but I had read that 
palemoon was MS-platform only.  So it's news to me if it's available for 
Linux.  Thanks very much for clearing that up for me if it's available 
for Linux, also!

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman

[gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Martin Vaeth]

Kent Fredric  wrote:
>
> I really wish there was a way to run ancient firefox with security
> fixes :(

There's palemoon

Firefox bloat (was: Re: [gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1)

[Kristian Fiskerstrand]

On 08/31/2016 01:28 PM, Kent Fredric wrote:
> On Wed, 31 Aug 2016 03:46:38 + (UTC)
> Duncan <1i5t5.dun...@cox.net> wrote:
> 

..

> 
> 
> I really wish there was a way to run ancient firefox with security
> fixes :(
> 
> I've started to really draw hate for all the new stuff they're adding.

You and me both, it is amazing how a project (actually both projects,
includes thunderbird as well), that were explicitly set up in order to
be lightweight alternatives to the suit are so utterly bloated
(thunderbird for some reason includes an IRC and xampp clients). It
makes security auditing horrible, introduces numberous issues on a broad
attack plane and breaks stability.

That said, little we can do about this downstream, but here is [the
thread last time I brought it up upstream]


References:
[the thread last time I brought it up upstream]:
https://mail.mozilla.org/pipermail/tb-planning/2016-January/004357.html


-- 
Kristian Fiskerstrand
OpenPGP certificate reachable at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3



signature.asc
Description: OpenPGP digital signature

Re: [gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Kent Fredric]

On Wed, 31 Aug 2016 03:46:38 + (UTC)
Duncan <1i5t5.dun...@cox.net> wrote:

> Umm... you mean chromium, not firefox, correct?
> 

Correct, mental bozo bits flipped temporarily ;)

> Either way, having to stick with an old and likely vulnerable browser 
> because the new one won't build isn't a bug I'd like to have.
> 
> (In fact, that's one reason I'm downloading my browser updates direct 
> from upstream, now, at least firefox ebuilds can be far enough behind
> for even ~arch, that I get worried I'm risking my security due to
> browsing with an outdated browser with known flaws published for
> several days, long enough the bad guys are likely exploiting them!
> Yes, there's additional risk from running the same binary build
> everyone else is, but when it's days after the upstream update and
> security flaws notification, and there's no ~arch or even hard-masked
> ebuild for it, even in the mozilla overlay let alone in the main
> tree, on an app as security- critical as a browser...)



I really wish there was a way to run ancient firefox with security
fixes :(

I've started to really draw hate for all the new stuff they're adding.

I put up with australis for a few years, but I've finally had enough of
it. ( Not merely the look and feel, but how it was implemented has
rubbed me wrong for far too long, much longer than the typical "people
hate new things" period )


pgpRbzmQKKDvX.pgp
Description: OpenPGP digital signature

[gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Martin Vaeth]

Duncan <1i5t5.dun...@cox.net> wrote:
>
>> Alexis Ballier  wrote:
>>
>> As opposed to "roll out ffmpeg 3 prematurely" which will break *more*
>> than just firefox.
>
> Umm... you mean chromium, not firefox, correct?

I also think so. I have unmasked ffmpeg-3 since several months,
because I don't use any package from bug 574788, but instead >gcc-5.
Everything for which I (and I suppose most people) need ffmpeg
compiles (and so far runs) without any problems:
libquicktime, xine-lib-1.2.6-r1, mplayer-1.3.0, mpv-0.19.0,
handbrake-0.10.5-r1, firefox-48.0, avidemux-2.6.8

(Well, for the apparently maintainer-needed avidemux I had lately
to do a version bump to 2.6.12 and some patching in the mv overlay;
but this was only for the very latest bump of ffmpeg-1.3.2 -> 1.3.3
plus a simultaneous bump gcc-5.4.0 -> 6.2.0. I didn't check whether
the ffmpeg bump was related here, at all, or whether a similar
patching could have been done for avidemux-2.6.8)

[gentoo-dev] Re: chromium-54 needs ffmpeg-3.0.1

[Duncan]

Kent Fredric posted on Wed, 31 Aug 2016 03:11:07 +1200 as excerpted:

> On Tue, 30 Aug 2016 09:37:51 +0200 Alexis Ballier 
> wrote:
> 
>> Most are fixed, but for me this implies that the space for breaking
>> users setup is much wider with bundled ffmpeg...
> 
> But that fallout is limited to firefox.
> 
> As opposed to "roll out ffmpeg 3 prematurely" which will break *more*
> than just firefox.

Umm... you mean chromium, not firefox, correct?

Because I checked a couple of the bugs wondering how on earth a chromium-
bundled ffmpeg would bug out firefox, and they're definitely chromium 
bugs, generally build-related, not firefox.

Either way, having to stick with an old and likely vulnerable browser 
because the new one won't build isn't a bug I'd like to have.

(In fact, that's one reason I'm downloading my browser updates direct 
from upstream, now, at least firefox ebuilds can be far enough behind for 
even ~arch, that I get worried I'm risking my security due to browsing 
with an outdated browser with known flaws published for several days, 
long enough the bad guys are likely exploiting them!  Yes, there's 
additional risk from running the same binary build everyone else is, but 
when it's days after the upstream update and security flaws notification, 
and there's no ~arch or even hard-masked ebuild for it, even in the 
mozilla overlay let alone in the main tree, on an app as security-
critical as a browser...)

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman