Re: libnss3, currently in testing

[Gene Heskett]

On Saturday 17 September 2016 10:34:17 claude juif wrote:

> 2016-09-09 13:36 GMT+02:00 Gene Heskett :
> > On Thursday 08 September 2016 19:02:31 Henrique de Moraes Holschuh 
wrote:
> > > On Thu, 08 Sep 2016, Gene Heskett wrote:
> > > > Has anyone an idea of a schedule of when that will put this
> > > > security update into the wheezy repo's?
> > >
> > > https://wiki.debian.org/LTS
> > >
> > > Please contact the Debian LTS people, and if this fix is not
> > > already in the priority queue, you could offer to sponsor the work
> > > required or something.
> > >
> > > > I believe this is why I cannot use the paypal account I just
> > > > opened.
> > >
> > > Gene, may I humbly suggest you should get a new box for
> > > non-Linux-CNC work, and keep that wheezy box you use for Linux-CNC
> > > off the grid so that it doesn't become a liability in the future?
> >
> > Liability?  Only if its destroyed on purpose by a malicious update.
> > I have a router with dd-wrt reflashed into it.  No back doors.  And
> > it stops _all_ the unfunny stuff. And according to the error message
> > I get when I run firefox-esr from a terminal, SSL is missing.  But
> > its not, FF just can't find it. IMO firefox-esr is a disaster
> > despite the hype.
> >
> > > You will be happier in the medium/long term after the investment
> > > in the new box pays itself off, Debian jessie should work much
> > > better overall for you for desktopish things (i.e. not Linux-CNC),
> > > and the rest of us will be happier even sooner because we will
> > > have less support requests related to oldstable to attend to[1]
> > > ;-)
> > >
> > > Paypal works just fine with firefox in a standard Debian 8.6
> > > install.
> > >
> > > [1] Any work done for stable and unstable/testing _usually_ helps
> > > a lot more people than work done for oldstable.
> >
> > I can appreciate that, but wheezy is supposed to have security
> > support until sometime in 2018, but this gradual destruction of a
> > formerly working system just to get folks to update smells an awful
> > lot like fedora, and that rebuild your system every 30 days got old,
> > very fast, so I bailed to mandrake all those years ago.  And now its
> > happening again.  All I want is a system that Just Works(TM) and now
> > it isn't.
>
> Fedora work just fine, and you don't need to rebuild anything every 30
> days. I use it for years now, because sometimes I want cutting edge
> packages.
>
> You want too much for free ...

I'll be 82 in 2 weeks, and on SS, so I watch my $.

> You just need to update your ssl library to be able to use paypal.  So
> : - You upgrade to jessie and use VM to run linux CNC stuff (or the
> opposite) - You pin libnss3 to stretch/unstable in apt preferences (it
> may or may not work)
>  - You grab the deb src and dpkg-buildpackage by yourself
>  - You wait until a fix is available
>
> 4 solutions comes to you, choose one and do it ! You don't need to be
> rude against people trying to help you.

I wasn't intending to be rude. My appologies if it came thru that way.

In the meantime I've made a rather astonshing (to me) discovery that the 
original, never updated, google Chromium browser works just fine and is 
3 or 5 times faster than firefox has been for several years. I did have 
to confirm it was me to paypal since they had not previously seen me 
trying to login using Chromium. After that confirmation, everything is 
just ducky.

>
> > Sometime today I'll see if I can figure out how to install the real
> > mozilla firefox 48.something tarball.  Maybe even make it use the
> > new flashplayer.so, now at major version 23 something. I already
> > have them downloaded.
> >
> > Cheers, Gene Heskett
> > --
> > "There are four boxes to be used in defense of liberty:
> >  soap, ballot, jury, and ammo. Please use in that order."
> > -Ed Howdershelt (Author)
> > Genes Web page 


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: libnss3, currently in testing

[claude juif]

2016-09-09 13:36 GMT+02:00 Gene Heskett :

> On Thursday 08 September 2016 19:02:31 Henrique de Moraes Holschuh wrote:
>
> > On Thu, 08 Sep 2016, Gene Heskett wrote:
> > > Has anyone an idea of a schedule of when that will put this security
> > > update into the wheezy repo's?
> >
> > https://wiki.debian.org/LTS
> >
> > Please contact the Debian LTS people, and if this fix is not already
> > in the priority queue, you could offer to sponsor the work required or
> > something.
> >
> > > I believe this is why I cannot use the paypal account I just opened.
> >
> > Gene, may I humbly suggest you should get a new box for non-Linux-CNC
> > work, and keep that wheezy box you use for Linux-CNC off the grid so
> > that it doesn't become a liability in the future?
>
> Liability?  Only if its destroyed on purpose by a malicious update. I
> have a router with dd-wrt reflashed into it.  No back doors.  And it
> stops _all_ the unfunny stuff. And according to the error message I get
> when I run firefox-esr from a terminal, SSL is missing.  But its not, FF
> just can't find it. IMO firefox-esr is a disaster despite the hype.
>
> > You will be happier in the medium/long term after the investment in
> > the new box pays itself off, Debian jessie should work much better
> > overall for you for desktopish things (i.e. not Linux-CNC), and the
> > rest of us will be happier even sooner because we will have less
> > support requests related to oldstable to attend to[1] ;-)
> >
> > Paypal works just fine with firefox in a standard Debian 8.6 install.
> >
> > [1] Any work done for stable and unstable/testing _usually_ helps a
> > lot more people than work done for oldstable.
>
> I can appreciate that, but wheezy is supposed to have security support
> until sometime in 2018, but this gradual destruction of a formerly
> working system just to get folks to update smells an awful lot like
> fedora, and that rebuild your system every 30 days got old, very fast,
> so I bailed to mandrake all those years ago.  And now its happening
> again.  All I want is a system that Just Works(TM) and now it isn't.
>

Fedora work just fine, and you don't need to rebuild anything every 30
days. I use it for years now, because sometimes I want cutting edge
packages.

You want too much for free ...

You just need to update your ssl library to be able to use paypal.  So :
 - You upgrade to jessie and use VM to run linux CNC stuff (or the opposite)
 - You pin libnss3 to stretch/unstable in apt preferences (it may or may
not work)
 - You grab the deb src and dpkg-buildpackage by yourself
 - You wait until a fix is available

4 solutions comes to you, choose one and do it ! You don't need to be rude
against people trying to help you.


> Sometime today I'll see if I can figure out how to install the real
> mozilla firefox 48.something tarball.  Maybe even make it use the new
> flashplayer.so, now at major version 23 something. I already have them
> downloaded.
>
> Cheers, Gene Heskett
> --
> "There are four boxes to be used in defense of liberty:
>  soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author)
> Genes Web page 
>
>

Re: libnss3, currently in testing

[Gene Heskett]

On Thursday 08 September 2016 19:02:31 Henrique de Moraes Holschuh wrote:

> On Thu, 08 Sep 2016, Gene Heskett wrote:
> > Has anyone an idea of a schedule of when that will put this security
> > update into the wheezy repo's?
>
> https://wiki.debian.org/LTS
>
> Please contact the Debian LTS people, and if this fix is not already
> in the priority queue, you could offer to sponsor the work required or
> something.
>
> > I believe this is why I cannot use the paypal account I just opened.
>
> Gene, may I humbly suggest you should get a new box for non-Linux-CNC
> work, and keep that wheezy box you use for Linux-CNC off the grid so
> that it doesn't become a liability in the future?

Liability?  Only if its destroyed on purpose by a malicious update. I 
have a router with dd-wrt reflashed into it.  No back doors.  And it 
stops _all_ the unfunny stuff. And according to the error message I get 
when I run firefox-esr from a terminal, SSL is missing.  But its not, FF 
just can't find it. IMO firefox-esr is a disaster despite the hype.

> You will be happier in the medium/long term after the investment in
> the new box pays itself off, Debian jessie should work much better
> overall for you for desktopish things (i.e. not Linux-CNC), and the
> rest of us will be happier even sooner because we will have less
> support requests related to oldstable to attend to[1] ;-)
>
> Paypal works just fine with firefox in a standard Debian 8.6 install.
>
> [1] Any work done for stable and unstable/testing _usually_ helps a
> lot more people than work done for oldstable.

I can appreciate that, but wheezy is supposed to have security support 
until sometime in 2018, but this gradual destruction of a formerly 
working system just to get folks to update smells an awful lot like 
fedora, and that rebuild your system every 30 days got old, very fast, 
so I bailed to mandrake all those years ago.  And now its happening 
again.  All I want is a system that Just Works(TM) and now it isn't.

Sometime today I'll see if I can figure out how to install the real 
mozilla firefox 48.something tarball.  Maybe even make it use the new 
flashplayer.so, now at major version 23 something. I already have them 
downloaded.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: libnss3, currently in testing

[Henrique de Moraes Holschuh]

On Thu, 08 Sep 2016, Gene Heskett wrote:
> Has anyone an idea of a schedule of when that will put this security 
> update into the wheezy repo's?

https://wiki.debian.org/LTS

Please contact the Debian LTS people, and if this fix is not already in
the priority queue, you could offer to sponsor the work required or
something.

> I believe this is why I cannot use the paypal account I just opened.

Gene, may I humbly suggest you should get a new box for non-Linux-CNC
work, and keep that wheezy box you use for Linux-CNC off the grid so
that it doesn't become a liability in the future?

You will be happier in the medium/long term after the investment in the
new box pays itself off, Debian jessie should work much better overall
for you for desktopish things (i.e. not Linux-CNC), and the rest of us
will be happier even sooner because we will have less support requests
related to oldstable to attend to[1] ;-)

Paypal works just fine with firefox in a standard Debian 8.6 install.

[1] Any work done for stable and unstable/testing _usually_ helps a lot
more people than work done for oldstable.

-- 
  Henrique Holschuh

Re: libnss3, currently in testing

[Gene Heskett]

On Thursday 08 September 2016 17:51:43 Michael Lange wrote:

> Hi,
>
> On Thu, 8 Sep 2016 09:28:33 -0400
>
> Gene Heskett  wrote:
> > Greetings all;
> >
> > Has anyone an idea of a schedule of when that will put this security
> > update into the wheezy repo's?
> >
> > I believe this is why I cannot use the paypal account I just opened.
>
> Maybe you could try the version from jessie, if dependencies let you
> do so. At least the chance might be better than with the
> unstable-version. Since the problem you described looked somewhat
> different from Mark's, I am not so sure that it's the same package
> that causes the problem, though.
>
> Regards
>
> Michael

Well, I could be talked out of it, but when I called paypal, their tech 
help told me to use a different browser, but google chomium, years older 
that FF-ESR, will not even log in. Chrome I don't have, google wants to 
know way more about me than I feel like sharing with such a high profile 
hacking target as google.  Taini't gonna happen while I am still looking 
at the green side of the grass.

FF-ESR will log in, but when I select send money, it goes to a screen 
where I enter the PP account name of the person I want to send $25 to, 
and click the "next" button, FF sends exactly 0 bytes of data back to 
paypal. All paypal can tell me is that they are about to wash their 
hands and just blacklist FF.  Claims all the winders browsers work just 
fine.

And the only thing I can do is buy a whole nother unit, and the one click 
pay for that works just fine, I've already done it.

Bottom line is, what good is a paypal account if a linux user cannot use 
it?

Rant off. thanks.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: libnss3, currently in testing

[Michael Lange]

Hi,

On Thu, 8 Sep 2016 09:28:33 -0400
Gene Heskett  wrote:

> Greetings all;
> 
> Has anyone an idea of a schedule of when that will put this security 
> update into the wheezy repo's?
> 
> I believe this is why I cannot use the paypal account I just opened.

Maybe you could try the version from jessie, if dependencies let you do
so. At least the chance might be better than with the unstable-version.
Since the problem you described looked somewhat different from Mark's, I
am not so sure that it's the same package that causes the problem, though.

Regards

Michael

.-.. .. ...- .   .-.. --- -. --.   .- -. -..   .--. .-. --- ... .--. . .-.

He's dead, Jim.
-- McCoy, "The Devil in the Dark", stardate 3196.1