[qubes-users] Re: Adding a Firefox add-on error to -dvm ?

2019-05-15 Thread Jon deps

On 5/15/19 11:45 AM, 'awokd' via qubes-users wrote:

john s.:


in /etc/apt/sources.list there is this

deb https://deb.debian.org/debian-security stretch/updates main 
contrib non-free

but that is not the same as
deb https://deb.debian.org/debian stretch-updates main contrib non-free


No, they are different. First is for high priority security updates. 
Second is for proposed general updates- most of them will make it to 
stable but not if there's a problem found with them in this stage. For 
example, when I checked while responding to the above, there was also a 
kernel update and some bind updates in there that hadn't yet been pushed 
to stable.




ok, yeah I went ahead and updates those  kernel and bind updates, 
before I realized it was pulling them from the  stretch-updates, then 
removed that  repo , hopefully,  no harm done


thxagain

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3a044955-fb2c-a673-d696-3036d575f233%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Adding a Firefox add-on error to -dvm ?

2019-05-15 Thread 'awokd' via qubes-users

john s.:


in /etc/apt/sources.list there is this

deb https://deb.debian.org/debian-security stretch/updates main contrib 
non-free

but that is not the same as
deb https://deb.debian.org/debian stretch-updates main contrib non-free


No, they are different. First is for high priority security updates. 
Second is for proposed general updates- most of them will make it to 
stable but not if there's a problem found with them in this stage. For 
example, when I checked while responding to the above, there was also a 
kernel update and some bind updates in there that hadn't yet been pushed 
to stable.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/725886a7-11a5-a955-e3d4-c909f30023b5%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Adding a Firefox add-on error to -dvm ?

2019-05-15 Thread john s.

On 5/10/19 1:17 AM, awokd wrote:

deb https://deb.debian.org/debian stretch-updates main contrib non-free


thanksforthereply,


hmm just curious

in /etc/apt/sources.list there is this

deb https://deb.debian.org/debian-security stretch/updates main contrib 
non-free






but that is not the same as
deb https://deb.debian.org/debian stretch-updates main contrib non-free


??


your solution worked  am just curious if my sources.list  was not 
correct  somehow ?




--
A895 0C7C A244 8E2E FD77 A3DB 180B 7D4D D158 F8B6

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b0784d91-79a9-1e18-ef5a-eb3aca1d03b2%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Adding a Firefox add-on error to -dvm ?

2019-05-14 Thread Daniil Travnikov
On Monday, May 6, 2019 at 8:58:48 PM UTC+3, 22...@tutamail.com wrote:
> I used to be able to add "add-ons" to my -dvm's (e.g. HHTPS Everywhere, No 
> Script, etc...). I would periodically update these add-ons in the -dvm.
> 
> Recently I noticed an add-on needed update and when I went to update it, it 
> says it was no longer compatible? I knew enough to start the -dvm using 
> gnome->terminal->firefox in -dvm however this time it didn't allow me to 
> update the add-on?
> 
> Not sure this is a security enhancement with a recent update but any feedback 
> would be appreciated...I hate running scripts on random webpages...
> 
> Thx rip22...

I think it could be a problem which created by Mozilla:

https://blog.torproject.org/noscript-temporarily-disabled-tor-browser


You could try to do this:

1. Open the address about:config in the Firefox Browser address bar
2. At the top of the page, search for xpinstall.signatures.required
3. Set the xpinstall.signatures.requiredentry to false by double clicking it

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/78f8dd52-22c5-4789-bffc-a4e18801e8fc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Adding a Firefox add-on error to -dvm ?

2019-05-09 Thread 'awokd' via qubes-users

Jon deps:

On 5/8/19 6:31 AM, 'awokd' via qubes-users wrote:

22rip-2xk3N/kkaK1Wk0Htik3J/w...@public.gmane.org wrote:


Recently I noticed an add-on needed update and when I went to update
it, it says it was no longer compatible? I knew enough to start the
-dvm using gnome->terminal->firefox in -dvm however this time it
didn't allow me to update the add-on?


The new Tor Browser package with updated certificate and working 
addons is out. Use update-torbrowser in your whonix-ws template to 
upgrade to 8.0.9.




any guess what happens to  debian-9  firefox-esr  re: intermediate 
certifcate bug fix ?


Looks like it's coming in 60.6.2esr-1~deb9u1, which is in 
stretch-updates, but not stable.


If you can't wait for it, then in your Debian template(s):
sudo su
nano /etc/apt/sources.list
Add this line:
deb https://deb.debian.org/debian stretch-updates main contrib non-free
ctrl-x, y to save
apt update
apt install firefox-esr

nano /etc/apt/sources.list
Remove this line:
deb https://deb.debian.org/debian stretch-updates main contrib non-free
ctrl-x, y to save

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/31fe751f-5515-36ad-6967-762384952f36%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Adding a Firefox add-on error to -dvm ?

2019-05-09 Thread Jon deps

On 5/8/19 6:31 AM, 'awokd' via qubes-users wrote:

22rip-2xk3N/kkaK1Wk0Htik3J/w...@public.gmane.org wrote:


Recently I noticed an add-on needed update and when I went to update
it, it says it was no longer compatible? I knew enough to start the
-dvm using gnome->terminal->firefox in -dvm however this time it
didn't allow me to update the add-on?


The new Tor Browser package with updated certificate and working addons 
is out. Use update-torbrowser in your whonix-ws template to upgrade to 
8.0.9.




any guess what happens to  debian-9  firefox-esr  re: intermediate 
certifcate bug fix ?


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5fe53fb2-626d-f40a-c38a-1c9c78a81c40%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Adding a Firefox add-on error to -dvm ?

2019-05-08 Thread 'awokd' via qubes-users

22rip-2xk3N/kkaK1Wk0Htik3J/w...@public.gmane.org wrote:


Recently I noticed an add-on needed update and when I went to update
it, it says it was no longer compatible? I knew enough to start the
-dvm using gnome->terminal->firefox in -dvm however this time it
didn't allow me to update the add-on?


The new Tor Browser package with updated certificate and working addons 
is out. Use update-torbrowser in your whonix-ws template to upgrade to 
8.0.9.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4381ac51-4a4d-afc8-aa35-bfac09970a92%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Adding a Firefox add-on error to -dvm ?

2019-05-07 Thread Jon deps

On 5/7/19 1:32 AM, haaber wrote:

On Mon, 6 May 2019 10:58:47 -0700 (PDT)
22rip-2xk3N/kkaK1Wk0Htik3J/w...@public.gmane.org wrote:


Recently I noticed an add-on needed update and when I went to update
it, it says it was no longer compatible? I knew enough to start the
-dvm using gnome->terminal->firefox in -dvm however this time it
didn't allow me to update the add-on?


Perhaps this is a side effect of firefox's recent (last day or two)
failure to update some key, leading everyone's firefox's to reject all
addons?  google this and you will find tons of people complaining.
You can circumvent this by disabling signing altogether (!?!).
Obviously it's ridiculous for me to suggest this on the qubes list; you
should not install unsigned updates. But I was fine doing this for
my already-installed addons, whose signatures had been checked before.
Once they come up with a fix, I will turn signing back on and then
update.

The update is through on debian (called firefox 60.6.2-esr), android
(different version number) and I guess also on fedora (but I have no
fedora anymore, so I cannot tell you. Just update all of your templateVMs.



fwiw not debian-9 template update here

user@debian-9-1:~$ sudo apt-get install firefox-esr
Reading package lists... Done
Building dependency tree
Reading state information... Done
firefox-esr is already the newest version (60.6.1esr-1~deb9u1).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a1fc186b-2df2-fc46-49cd-b5a5be3a2dde%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Adding a Firefox add-on error to -dvm ?

2019-05-07 Thread Jon deps

On 5/7/19 1:32 AM, haaber wrote:

On Mon, 6 May 2019 10:58:47 -0700 (PDT)
22rip-2xk3N/kkaK1Wk0Htik3J/w...@public.gmane.org wrote:


Recently I noticed an add-on needed update and when I went to update
it, it says it was no longer compatible? I knew enough to start the
-dvm using gnome->terminal->firefox in -dvm however this time it
didn't allow me to update the add-on?


Perhaps this is a side effect of firefox's recent (last day or two)
failure to update some key, leading everyone's firefox's to reject all
addons?  google this and you will find tons of people complaining.
You can circumvent this by disabling signing altogether (!?!).
Obviously it's ridiculous for me to suggest this on the qubes list; you
should not install unsigned updates. But I was fine doing this for
my already-installed addons, whose signatures had been checked before.
Once they come up with a fix, I will turn signing back on and then
update.

The update is through on debian (called firefox 60.6.2-esr), android
(different version number) and I guess also on fedora (but I have no
fedora anymore, so I cannot tell you. Just update all of your templateVMs.



just use chromium till  whonix-ws  and ESR get updated  IMO ,

pretty lame FF is calling it a bug, when apparently it was them 
forgetting to update their middleman certificates or so


found out chromium is much faster anyway  :(

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b6cd943f-38ac-9fea-0e29-66b6e7266036%40riseup.net.
For more options, visit https://groups.google.com/d/optout.