You are not logged in.
Does it mean that FF v57 protects from cross-site scripting out-of-the-box?
I'm not sure about the specifics in respect of CSS (I think I would still rely on noscript to prevent that) but FF now uses the same seccompf-bpf sandboxing as Chrom{e,ium} so it should be roughly on a par with that security-wise and considerably better for privacy-related issues.
Offline
Here just another two links for tinkering about:config in Firefox:
https://github.com/pyllyukko/user.js
https://www.privacy-handbuch.de/handbuch_21u.htm (it's in German but the options are easy to understand)
Offline
Update babble about former stupid babble. This ...
Open terminal "killall firefox", relaunch FF, it'll offer to restore all the tabs from your last session, if you want it to click that ... done.
Never do this myself, never have to, could probably run FF continuously for weeks at a time and never see any such behavior from it AND still be using considerably less than a freshly launched Chrome instance w 8-10tabs open. Jmo ... but if you're using extensions that are that crappy, which have serious memory leaks and whatever else, then time to find a better plugin or another/better way to do whatever it is that extension does. Cause if the maintainer/dev of it, is that shoddy in how they create and release their software, who knows what other buggy junk is lurking in it or odd behavior it may be causing in x-nixers browser ... (OS)
Another pointless 2 cents brought to you by da fine folks here at stupe babble LLP excelsior! AND ps, Noscript made it over to FF v57.
Last edited by BLizgreat! (2017-11-30 03:35:51)
Offline
Also as if anyone has any reason to care, got rid of the Lmde2 FF v57 and it's repos + pin in sources.list n preferences. It was running fine but went with my normal way of running FF and downloaded FF v57 directly from Mozilla and set it to automatically update itself. Being new and all, I don't want any lag between Mozilla putting out any patches and xyz-Mint maintainer getting around to putting those versions into their software repo's. Also not that it's a big deal ... just that's what I decided to do.
Even when the tarded Iceweasel thing was going on, it was never massive lag, think the repo may've even been maintained by Mozilla itself, can't remember. (Edit: Nope, though Mozilla kept one and whichever poor package maintainer had to deal with rebranding Firefox to be Iceweasel got stuck doing it for Debian.) So if those were major security patches, not like nixers were ever left out and potentially vunerable for very long, shrugs. Still though, yes all the cool Debian stable based distro's will make sure to have latest Firefox available for users in it's repo's. OR NOT ... not my decision, nor skin offa my nose, just a thought.
Last edited by BLizgreat! (2017-11-30 05:32:17)
Offline
tarded Iceweasel thing
Here a good package for you BLiz:
https://packages.debian.org/stretch/xul … l-branding
Iceweasel forever! 8o
Offline
^ CON = coffee out nose Hoas. Woah and it's for Stretch too !
Offline
Yep you guessed it, if you guessed I'm going to babble some more. No kidding though, BL has non-free in iso and resultant install, this distinguishes it from Debian stable, why not make sure the latest browser(s) are readily available too. Guess it comes down to end-goal, if BL team wants the distro to be popular. Think it's safe to say, the web-browser is going to be the single most used application on vast majority of desktop gnu/Linux installs or any other platform for that matter.
Which is one of the things that always aggravated me about Core/#!. Though can't really criticize him. Iceweasel v 3.5 ( for the longest time.) FF was at like 8-9 at the time, then the pinning @ 1001 thing. The guy was always back and forth, all around weird about how he handled things. IW 3.5 ? Errrr, can't be a Debian purist, cause #! had non-free and etc out-of-box. Always 1/2 hearted in the approach to the distro. Times when he said, that's it, am quitting my day job, going to focus exclusively on #! etc etc blahblah. Never happened. Were so many opportunities for him and in the end he flushed a great gnu/Linux distro and forum, right down the crapper. Including a chance to make a good living at it imo.
Was one of the pointless babblages about not making the same mistakes #!/Core did. Yep, am kinda side-line quarterbacking here, just making observations though. At least IW 3.5 isn't being opted for here. Though FF 52-esr isn't likely to receive any standing ovations from potential users so much either. Though with quantum doing the webextensions thing, why not offer both imo anyway ? One requires no additional effort, as it's in stock repo's for people who want it. The other can't be much work either surely.
Also mentioned find myself annoyed, at a time when Mozilla/Firefox is on the ropes and rallying to try to recover, so many distro's among opensource are turning back on them. Chrome stands to be the repeat of the dreaded IE days on the web, though MUCH better than IE, probably present day versions included and doubt Google Inc will leverage it's browser share as craptastically as M$ did while IE was dominating. Of course ironically FF was a key player in breaking it's strange-hold on the webz.
Good for BL, good for the userbase (same thing) and good for Firefox ? Hey, sounds like a win/win/win type of situation. End stupe babble. *Country men, lend me some beer money !??! * Getz offa soapbox.
Last edited by BLizgreat! (2017-11-30 10:02:06)
Offline
DANG IT, one more ~!~! Also not that I don't continue to have mucho respect for Corenominal, believe he's genuinely a good all around guy and knowledgeable nixer. Always wondered if he ever truly wanted #! to be all that popular, as in had other things going on and didn't want the responsibility etc and/or whether he ever thought he deserved any opportunity to make money off of #!/Debian. All this is speculation and wish him and Bobo well wherever they find themselves today.
Also ... well cloud = silver lining, guess there wouldn't even be a Bunsenlabs gnu/Linux, if Core had been more interested or commercially motivated. (DANG IT!!! Definitely wouldn't be a BL, if BL team hadn't stepped up and made this distro happen either !) Win some, lose some, gain some ... babblesome ?
VlBLL! and Vl#!! too !
Last edited by BLizgreat! (2017-11-30 11:14:14)
Offline
Including a chance to make a good living at it imo.
I'm wondering how is that supposed to work out? I mean in case of a distro like #!, how would have been cash generated? I think users would not pay for downloading .img files (although some distros offer a business version) and I'm not sure how much money e.g. ads on the forum would bring in. Some other ways perhaps I forgot? I don't know, but such a project does not seem to be suitable for business.
Offline
BL has non-free in iso and resultant install, this distinguishes it from Debian stable, why not make sure the latest browser(s) are readily available too
The latest version (v57) of Firefox is already available for any users of BunsenLabs, it can be downloaded directly from Mozilla and run from the user's $HOME folder with no risk of upsetting the dependency chain, that is what I would advise for anybody who needs all the latest bugs, sorry features.
Guess it comes down to end-goal, if BL team wants the distro to be popular
No, not at all, popularity has never been a goal of the project (and probably never will be).
BunsenLabs aims to continue the spirit of #! and provide a simple, easy-to-customise desktop based on a window manager, a panel and a few other tools rather than an entire desktop environment.
Iceweasel v 3.5 ( for the longest time.) FF was at like 8-9 at the time
Debian handled IW/FF differently back then and they allowed the version to become very stagnant but this has changed with the introduction of the ESR package which is now kept completely up to date by Debian and I really do think that firefox-esr is a better match for Debian stable than the cutting-edge version.
Offline
BunsenLabs aims to continue the spirit of #! and provide a simple, easy-to-customise desktop based on a window manager, a panel and a few other tools rather than an entire desktop environment.
And because of that we <heart> BunsenLabs.
Offline
@Martix there are many ways to passively monetize a distro ( well .. many active ways too.) Targeted ads/CPA or whatever else are one of those surely. Core at times did make (again)half-hearted efforts with a #! store aka: merchandising approach. It was always done poorly from what I observed about it. His heart just never really seemed in it and/or he didn't have the interest in learning about how to better go about it or whatever. The #! site/forum ... yep, did have value and could've even been beneficial to it's usebase. It's basic net-marketing type junk.
The difference is how it's implemented imo, if it's truly passive and non-intrusive on the userbase then it's being done right. There are many ways to passively monetize a gnu/Linux distro, even expanding into ventures or employment opportunities among the nixers who congregate in x-community. Provided they have the skills, more than a few do in a given gnu/Linux community. They may be self-taught or whatever but yeah, plenty of demand and niche's for qualified techies.
In what I'm vaguely babbling about above, not only benefits the distro but those among the userbase with said skills, as it's an opportunity from them to get involved in a field they already really enjoy and potentially make a decent living at it too. Plenty of geeks and nixers will diligently increase their tech knowledge/skillset paid or not, may as well get paid for doing something you enjoy. Anyway, there's a bit to it and if I fully disclosed all my thoughts on it, I'd have to kill ya guys and I like's ya's ... so.
@Hoas, nothing wrong with that, though I tend to doubt the sincerity too. Who creates a distro and doesn't want it to be popular and well regarded and/or attract a good amount of nixers to the community and userbase ? Though guess it could be the case or the case for xyz-person associated with an ongoing project, whichever. Also doesn't make all that much sense to me from the standpoint that again, once the works been done, it's the same amount of work whether 12 people or 2 million end up using the final product of the efforts. Nobody puts out a distro unless they think they have the gnu/Linux special sauce/recipe and yeah fairly sure it's just natural they want it to be popular and well received.
Final decision on that is of course up to whichever maintainers, any developers etc involved in x-project and at this point likely putting cart + before horse as BL is still in an infancy stage, shrugs. Just babbling random thoughts, whatever happens to rattle around in ma bean.
Having it (latest FF) available via Mozilla, is not the same, is different in many ways, not going to pick it apart as to why. Already did really, so no reason to re-type the babble. For Debian to consider a piece of software, widely deployed and in use by millions, FF current to be unstable is silly imo but it's the way they do it.(ALL HAIL DEBIAN!!!) Ah just random thoughts/obs, take or leave it BL team. As again, I don't really have a dog in the fight and have always had (always will)latest FF or any other versions easily available in all things Debian.
Btw: Nope couldn't get FF v 1.0 running on Stretch, shrugs. Would've been interesting just to see it side-by with newer FF, guessing I'll live, shrugs.
Last edited by BLizgreat! (2017-12-01 00:29:10)
Offline
BLizgreat! wrote:Including a chance to make a good living at it imo.
I'm wondering how is that supposed to work out? I mean in case of a distro like #!, how would have been cash generated? I think users would not pay for downloading .img files (although some distros offer a business version) and I'm not sure how much money e.g. ads on the forum would bring in. Some other ways perhaps I forgot? I don't know, but such a project does not seem to be suitable for business.
In fact, we discussed our donation system and we discussed the pros and cons of PayPal, and we discussed and resolved to not touch donations except for paying for our web presence, and we've had occasional discussions about what happens to those funds if BL ends. Donating our funds to Debian is the consensus among us. Ads have never entered the discussion, and I doubt they ever will.
We're doing this because we loved #! and the community it generated, and we love Debian. You can simply install Openbox and tint2 over stable, we're hoping BL has a little more going for it than just that.
Off-topic is allowed in "Off Topic"!
No, he can't sleep on the floor. What do you think I'm yelling for?!!!
Offline
@Hoas, nothing wrong with that, though I tend to doubt the sincerity too. Who creates a distro and doesn't want it to be popular and well regarded and/or attract a good amount of nixers to the community and userbase ? Though guess it could be the case or the case for xyz-person associated with an ongoing project, whichever. Also doesn't make all that much sense to me from the standpoint that again, once the works been done, it's the same amount of work whether 12 people or 2 million end up using the final product of the efforts. Nobody puts out a distro unless they think they have the gnu/Linux special sauce/recipe and yeah fairly sure it's just natural they want it to be popular and well received.
First, remember that HoaS was not part of the original Team, he was invited aboard quite a bit later.
Second, I'll just speak for myself... I invested time in BL because of my great experience on the #! forums, the first Linux forum that I felt had a select group of great thinkers on board, who had wit and style and, sometimes, major geek cred, but who were generally massively supportive of varying viewpoints and, especially, of Linux users in general without major blatant elitism.
So, for me, it was that and having some time available and deciding to try to crack live-build as a personal challenge, as that was the last piece of the first puzzle and needed to be done, in my mind. Truly, nothing more. I did it, with no coding knowledge, by RTFM (and hours... actually a few months of debian-lists research and trial-and-error).
That said, I'm thrilled with how the derivative has gone. I'm part of an international team of volunteers that includes our entire forum and Linux as a community. Money... ha!
No, he can't sleep on the floor. What do you think I'm yelling for?!!!
Offline
^ Hey and glad you got aboard HHH, also yep, when one person makes a blanket statement about a distro, I tend to think, that's your opinion, other people involved may feel differently and x-person can't speak for them, shrugs. Not that it's a big deal either way. Am really glad you guy(s) the people who came into BL first and those who join/ed later too. Btw: Congratz Tknomanzr.
Also do get what you're saying HHH, regardless of whichever nixers motivations, glad BL emerged out of #! getting shutdown. Still occasionally feel compelled to babble, such as the having new browsers thing or don't repeat the same mistake #! made here or there thingy too. Those are just opinions and/or obs of what I see/saw going on. Not sure where I fit in Bunsenlabs, perhaps resident babbler ?
Dang it, been wondering where Damo's been, hadn't heard of him being sick. That sucks, thought he was occupied with the next release or whatever(or priority life type stuff), like Sector11 ( surely even as a Mod, he'll still share hiz conky artistry with us mere non-conky mortal types). Arghhh and yeah, good vibes to Damo.
Offline
Not sure where I fit in Bunsenlabs, perhaps resident babbler ?
Well, you've had that title forever!
Wherever you see fit, my friend. There's always Off Topic, if nothing else fits.
No, he can't sleep on the floor. What do you think I'm yelling for?!!!
Offline
I've updated your title, let me know if you like it or not.
No, he can't sleep on the floor. What do you think I'm yelling for?!!!
Offline
Oops, just saw your 1st post HHH, was responding to the second above there. Hey, nothing wrong with however things get done, again ... might feel compelled to give a nudge here and there or babble about da dread $$$ thing, everyone and project needs to meet minimum needs. While yeppers, have come to understand that if someone can leverage an open source project to generate revenue, then there's nothing wrong with it, if it's done right.
That being, yeah a lot of time/effort and it's a nixer's wet-dream to make a decent living dorking with gnu/Nix. Also tends to result in a better final distro me thinks because volunteering vs making a living, has to mean someone doesn't have as much time to focus on xyz-project either. Blahblahblah, just saying absolutely something to keep in mind and occasionally revisit imo. Also the old, those who fail to plan, plan to fail saying, shrugs.
Offline
LMAO .. thanks, I like HHH.
Offline
LMAO .. thanks, I like HHH.
hhh, please. No affiliation with the wrestler.
No, he can't sleep on the floor. What do you think I'm yelling for?!!!
Offline