Re: [dev] security issue running surf from home folder

2015-01-07 Thread tautolog
Hi Markus,   I can summarize from my perspective. I good point was made that creating a ‎directory is to be avoided. I think it comes down to the command-line way of launching surf, the alternative to launching surf from a launcher based out of the home folder.   Say you call up surf just to dow

[dev] Re: surf trivial bugs patch

2015-01-07 Thread tautolog
I forgot to bump the size of cmd[] for this one. Ben   Original Message   From: Ben Woolley Sent: Wednesday, January 7, 2015 6:32 PM To: dev mail list Subject: surf trivial bugs patch Just a couple minor things I found while working on other things. The geolocation state was being lost on new w

[dev] Re: disk cache patch

2015-01-07 Thread tautolog
‎I also forgot to bump the size of cmd[] for this one, too.  Ben   Original Message   From: Ben Woolley Sent: Wednesday, January 7, 2015 3:18 PM To: dev mail list Subject: disk cache patch Hi all, It turns out that enabling libsoup's disk cache is fairly straightforward. I left it enabled by de

Re: [dev] security issue running surf from home folder

2015-01-08 Thread tautolog
In my personal configuration, I include in the prompt that control-c will cancel the download, a natural side-effect/feature of the implementation. Ben   Original Message   From: Dmitrij D. Czarkoff Sent: Thursday, January 8, 2015 6:17 PM To: dev mail list Reply To: dev mail list Subject: Re: [de

Re: [dev] security issue running surf from home folder

2015-01-08 Thread tautolog
The saving to desktop vs. working directory has arguments on both sides, but that is easy enough to change in config, and leave the default to maintainer preference. A prompt would make either case known before the download, so leaving a prompt in by default helps make the distinction less of an

Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation)

2015-01-24 Thread tautolog
Ben   Original Message   From: Christoph Lohmann Sent: Friday, January 23, 2015 11:57 PM To: dev mail list Reply To: dev mail list Subject: Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation) Greetings. On Sat, 24 Jan 2015 08:49:50 +0100 Ben Woo

Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation)

2015-01-24 Thread tautolog
Thanks for the reply, Christoph, = profiling = I view panopticlick as a theoretical demonstration of how many bits of entropy can leak, not a robust implementation that can properly test defenses against sophisticated profiling.  The panopticlick site cannot measure the noise-based approach. O

Re: [dev] surf alternatives for Adblock Plus, Privacy Badger, Self-Destructing Cookies, BetterPrivacy

2015-01-26 Thread tautolog
Hi Markus, My patch adds a decidenavigation() callback, which is exactly where that interface would need to be called. I can add it to my branch with minimal effort, and even make a separate patch, but handling the dependency would need to be done in a way that conforms to the suckless philosop

Re: [dev] surf alternatives for Adblock Plus, Privacy Badger, Self-Destructing Cookies, BetterPrivacy

2015-01-26 Thread tautolog
Hi Markus, I can certainly provide the code to consume that interface in a standalone patch with stubs. I am already in there, so I can commit to that. I have been looking at the filter format. The filter format is actually fairly complex. It supports regular expressions, and has features that

Re: [dev] surf, bug

2015-02-04 Thread tautolog
Hi, In my patch, I needed to have an XSync after XChangeProperty in setatom, not just before it. It seemed to fix a race condition. I am not sure I actually fixed it completely, because I don't know how that stuff works yet, but it helped in my case.  I haven't been able to reproduce the bug,

Re: [dev] Suckless web rendering engine

2015-02-16 Thread tautolog
I believe their latest code has float support, but it isn't released yet. Their CSS support is starting to mature. ‎I use it under tabbed, like surf.  I have been following it for years, and they have their own kind of suckless approach, but oriented toward enabling developing countries to acces

Re: [dev] [surf] Webapps in Surf

2015-03-05 Thread tautolog
Is your corporate proxy stripping the headers that allow cross-origin requests? Maybe test from a different network just to be sure. Ben   Original Message   From: Jeroen Op 't Eynde Sent: Thursday, March 5, 2015 12:23 PM To: dev@suckless.org Reply To: dev mail list Subject: [dev] [surf] Webapps

Re: [dev] [surf] Webapps in Surf

2015-03-06 Thread tautolog
Which command line options are you using? This is so that people can try with your settings, and find settings that might work, and be able to tell you which would require changing.  Ben   Original Message   From: Jeroen Op 't Eynde Sent: Friday, March 6, 2015 10:26 AM To: dev mail list Reply To

Re: [dev] [surf] [patch] 13 patches from my Universal Same-Origin Policy branch

2015-03-25 Thread tautolog
Thanks for the reply, Nick. Re: patch 5, have you seen that behavior before? I saw something from an Ajax request from some advertising code, and made that change after debugging.  Re: patch 7, ‎I want to do the user agent similar to how I do accept language, adding meaningless semantics that a

Re: [dev] [surf] [patch] 13 patches from my Universal Same-Origin Policy branch

2015-03-25 Thread tautolog
Thank you for the reply, Markus.  That is a very good point. The reason why I wanted to try this approach is because, even with being in a very large anonymous set in HTTP headers, the IP address network or region may be used split large sets down to individuals. I saw it in a paper, but I don'

Re: [dev] [surf] [patch] 13 patches from my Universal Same-Origin Policy branch

2015-03-30 Thread tautolog
My view is that the progression of the web has been actively manipulated, but technical solutions exist. ‎There is power in creation. It isn't just hype, but money, and its creations.  I have a vision for the web, but it seems you do, too. What is your vision? Ben   Original Message   From: Dmi

Re: [dev] [surf] [PATCH] Add NODISKCACHE option to disable the disk cache at compile-time

2015-04-13 Thread tautolog
Hi Nick, What is the build error? ‎I submitted the disk cache support, and can fix it. I am looking to see if I have an environment to reproduce.  Thanks, Ben   Original Message   From: Nick Sent: Monday, April 13, 2015 3:06 PM To: dev@suckless.org Reply To: dev mail list Subject: [dev] [surf]

Re: [dev] [surf] [PATCH] Add NODISKCACHE option to disable the disk cache at compile-time

2015-04-13 Thread tautolog
Thank you, Nick.  ‎It looks like you can use SOUP_CHECK_VERSION(2, 34, 0) to test for the version that supports disk cache. ‎May you please try your patch with that code, and send me an updated patch? I will then test on my own system with support, and verify that the positive case also works. 

Re: [dev] [surf] [PATCH] Add NODISKCACHE option to disable the disk cache at compile-time

2015-04-14 Thread tautolog
On those platforms that need that define set before the include, does the -D argument actually work? Ben   Original Message   From: Nick Sent: Tuesday, April 14, 2015 2:21 AM To: dev mail list Reply To: dev mail list Subject: Re: [dev] [surf] [PATCH] Add NODISKCACHE option to disable the disk ca

Re: [dev] [surf] [PATCH] Add NODISKCACHE option to disable the disk cache at compile-time

2015-04-14 Thread tautolog
Cool. My concern is about adding "unstable" code on a "stable" distribution. ‎The disk cache is disabled by default, so it is probably not an issue. If someone enables it, it is their decision. I am not the maintainer, so it isn't my call, but if the maintainer wants my input as the original su

Re: [dev] [surf] [PATCH] Add NODISKCACHE option to disable the disk cache at compile-time

2015-04-15 Thread tautolog
You are right, Nick. My patch had left it enabled. It looks like nearly everything is enabled by default. ‎ Tomorrow, or whenever I can get to it, I will submit a new patch derived from yours that uses the version testing macro, and submit the unstable hack as a patch to the website, unless the

Re: [dev] [surf] Using more memory than firefox

2015-06-01 Thread tautolog
Hi Ivan, How are you determining the memory use of multiple processes? Is it accounting for shared mappings? For example, I have a database application that has mappings shared across processes for each core. When I look at top(1), my memory usage would appear to be 200% when 4 processes are re

Re: [dev] [surf] Using more memory than firefox

2015-06-02 Thread tautolog
Hi Ivan, You can isolate data by just adding another key to all queries, but that has to be effectively done for all data access, which is the hard part. For example, there is a window.name DOM property that is used as a window cookie. That access would need to be keyed by origin to properly fo

Re: [dev] [surf] Using more memory than firefox

2015-06-03 Thread tautolog
See my previous mailing list messages for details. I keep my local repo here: ‎https://github.com/legitparty/surf-isolated Ben   Original Message   From: Eric Pruitt Sent: Wednesday, June 3, 2015 11:53 AM To: dev mail list Reply To: dev mail list Subject: Re: [dev] [surf] Using more memory than fi

Re: [dev] [surf] Firefox's tracking protection

2015-07-07 Thread tautolog
Surf-isolated is just my personal branch. It is not official in any way. I am not a surf developer myself, other than having a few trivial commits make it into the official surf. I have no commit access, and I am not the maintainer. However, I answered your question because I am familiar with th

Re: [dev] I don't get mailinglists.

2015-07-15 Thread tautolog
My impression is the following, if it matters: 1. dev@ is like a users@ list, since ‎all users should be devs 2. hackers@ is like a submit@ or patches@ list Does that sound right, or is the analogy muddying things up even more? Ben   Original Message   From: Christoph Lohmann Sent: Wednesday,

Re: [dev] A chance for a suckless web?

2015-10-11 Thread tautolog
"Reader mode" in major browsers already is powered by a subset of html5 for marking up articles. That is already widely deployed, and supports the article meta attributes the same way as ‎AMP does. I often use it on my phone to bypass those CSS popup ads that appear in front of articles. I have

Re: [dev] [sent] 0.1 release

2015-11-22 Thread tautolog
I suggest that "be a chance to be popular" be changed to "satisfy more use cases". You wouldn't want to offend anyone's anti-populist sensibilities. ;) Ben   Original Message   From: Pickfire Sent: Thursday, November 19, 2015 8:36 AM To: dev@suckless.org Reply To: dev mail list Subject: Re: [dev

Re: [dev] Announcement: Backporting the fun into C

2015-11-22 Thread tautolog
I actually like the idea. I was just talking to Ben   Original Message   From: Martti Kühne Sent: Sunday, November 22, 2015 4:00 PM To: dev mail list Reply To: dev mail list Subject: Re: [dev] Announcement: Backporting the fun into C Currently this work is about exploring the possibilities, the l

Re: [dev] Announcement: Backporting the fun into C

2015-11-22 Thread tautolog
I accidentally hit send early. Anyway, I was talking to a developer friend who didn't know C, but knew php, and was explaining how he can work with much of the code he was a bit intimidated by because the memory handling and the fancy pointer stuff is outside the main business logic, so it isn't