Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Thomas Daede
On 12/18/2017 03:00 PM, Sam Varshavchik wrote: > Does anyone read this as Mozilla admitting that they messed up? This was published today: https://blog.mozilla.org/firefox/update-looking-glass-add/ signature.asc Description: OpenPGP digital signature

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Gerald B. Cox
On Mon, Dec 18, 2017 at 3:00 PM, Sam Varshavchik wrote: > > Can you point out to me which part indicates that Mozilla admits that they > made a mistake. Sounds to me like they're just blaming the dumb users for > not understanding how wonderful was "the experience [they] created". > Keeping with

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Sam Varshavchik
Gerald B. Cox writes: Everyone makes mistakes - this wasn't the first by Mozilla and won't be the last.  I don't believe they are acting out of malice.  As long as they admit and correct mistakes as they go along that is fine with me. Here's the most complete statement from Mozilla that I

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Björn Persson
Daniel P. Berrange wrote: > IMHO requesting support for a build flag to disable this ability to > remotely push executable code out to user's browser is not unreasonable, I agree. There should be a single, properly documented build-time option to disable all current and future features that downl

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Björn Persson
Chris Adams wrote: > Are > there any other packages that can silently download and run non-Fedora > code? The other web browsers. They'll silently download and run Javascript code from pretty much every website. It's a crazy dangerous practice, but that genie isn't going to go back into the bott

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread nicolas . mailhot
- Mail original - De: "Adam Williamson" > My mail is based on a belief that Mozilla is still one of the better > actors we have to work with in the category of desktop browser > suppliers, Adam, I agree it's still one of the better actors, but the better actor bar keeps lowering every

[Fedocal] Reminder meeting : Modularity Office Hours

2017-12-18 Thread nils
Dear all, You are kindly invited to the meeting: Modularity Office Hours on 2017-12-19 from 10:00:00 to 11:00:00 US/Eastern At https://meet.jit.si/fedora-modularity The meeting will be about: This is where you ask the Fedora Modularity Team questions (and we try to answer them)! Join us o

Re: Bullet 2.87 coming to rawhide

2017-12-18 Thread Rich Mattes
On Tue, Nov 28, 2017 at 8:18 PM, Rich Mattes wrote: > Hi all, > > I'm planning on updating bullet to 2.87 in rawhide over the weekend. > The following packages are affected: > > $ dnf repoquery --source --alldeps --whatrequires "bullet*" > Last metadata expiration check: 0:37:51 ago on Tue 28 Nov

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Björn Persson
Florian Weimer wrote: > On 12/18/2017 08:31 PM, Chris Murphy wrote: > > I don't remember being actively asked about such data collection, and > > I've recently installed on a clean system, nightly on Fedora, and then > > final releases of 57 on Windows and macOS. Does anyone have a screen > > shot

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Adam Williamson
On Mon, 2017-12-18 at 22:36 +0100, nicolas.mail...@laposte.net wrote: > Is it surprising that the Mozilla foundation, that decided long ago > that users were idiots that didn't know what they wanted, and > reoriented itself to serve the cloud industry I don't share this opinion at all. If Fedora a

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Björn Persson
Adam Williamson wrote: > since then, a new sub-preference seems to have appeared, labelled > 'Allow Firefox to install and run studies'. In the Swedish translation the sub-preference doesn't even exist. There is no second checkbox under the translation of "Allow Firefox to send technical and int

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Gerald B. Cox
On Mon, Dec 18, 2017 at 1:03 PM, Adam Williamson wrote: > > Again, this is something I covered in my original mail. We distribute > Firefox as the default browser to a large number of people who trust us > to provide them with software. This gives us both a responsibility to > our users and, pres

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread nicolas . mailhot
De: "Adam Williamson" > I think we should be concerned by this kind of behaviour on the part of > the supplier of our default desktop browser, and we should express that > concern to them. Adam, We should understand that there is a whole software ecosystem that grew on the Internet and free sof

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Florian Weimer
On 12/18/2017 09:59 PM, Gerald B. Cox wrote: Everyone makes mistakes - this wasn't the first by Mozilla and won't be the last. I don't believe they are acting out of malice. Of course not. But at some level, there is a deception involved: Mozilla present a strong privacy focus for Firefox, b

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Adam Williamson
On Mon, 2017-12-18 at 12:59 -0800, Gerald B. Cox wrote: > On Mon, Dec 18, 2017 at 12:51 PM, Adam Williamson < > adamw...@fedoraproject.org> wrote: > > > > > > The only reason we are beating a dead horse is because you keep > > > telling us that we shouldn't have beaten a dead horse in a way that

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Gerald B. Cox
On Mon, Dec 18, 2017 at 12:51 PM, Adam Williamson < adamw...@fedoraproject.org> wrote: > > > The only reason we are beating a dead horse is because you keep > > telling us that we shouldn't have beaten a dead horse in a way that > > requires us to explain why we are doing so. Look we understand..

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Adam Williamson
On Mon, 2017-12-18 at 15:48 -0500, Stephen John Smoogen wrote: > On 18 December 2017 at 15:42, Gerald B. Cox wrote: > > > > And in any case, a tie-in with a television-show related game is > > > clearly neither telemetry nor some kind of user interaction study. Yet > > > to me, Mozilla's response

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Stephen John Smoogen
On 18 December 2017 at 15:42, Gerald B. Cox wrote: >> And in any case, a tie-in with a television-show related game is >> clearly neither telemetry nor some kind of user interaction study. Yet >> to me, Mozilla's response does not seem to convey understanding of this >> at all. It basically just

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread R P Herrold
On Mon, 18 Dec 2017, Chris Adams wrote: > the requires downloads to be useful. I think simply requiring Mozilla > to change their policies is unacceptable, as this still depends on a > third party to properly enforce such policies (and not have any security > issue that could result in untrusted

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Gerald B. Cox
On Mon, Dec 18, 2017 at 12:23 PM, Adam Williamson < adamw...@fedoraproject.org> wrote: > On Mon, 2017-12-18 at 20:52 +0100, Florian Weimer wrote: > > > So I just booted Firefox 27 Workstation live and opened Firefox. > Indeed, a pop-under tab appears with this URL (so you can close it > without e

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Adam Williamson
On Mon, 2017-12-18 at 20:52 +0100, Florian Weimer wrote: > On 12/18/2017 08:31 PM, Chris Murphy wrote: > > I don't remember being actively asked about such data collection, and > > I've recently installed on a clean system, nightly on Fedora, and then > > final releases of 57 on Windows and macOS.

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Gerald B. Cox
On Mon, Dec 18, 2017 at 12:06 PM, Chris Adams wrote: > Once upon a time, Gerald B. Cox said: > > First of all, when you install Fx, it asks you specifically if you want > to > > participate in Fx Data Collection - you can opt out at that point. > > AFAIK, not when you install from an RPM. > > Se

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Chris Adams
Once upon a time, Gerald B. Cox said: > First of all, when you install Fx, it asks you specifically if you want to > participate in Fx Data Collection - you can opt out at that point. AFAIK, not when you install from an RPM. -- Chris Adams ___ devel

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Florian Weimer
On 12/18/2017 08:31 PM, Chris Murphy wrote: I don't remember being actively asked about such data collection, and I've recently installed on a clean system, nightly on Fedora, and then final releases of 57 on Windows and macOS. Does anyone have a screen shot or description of what this "ask" look

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Chris Murphy
On Mon, Dec 18, 2017 at 12:16 PM, Adam Williamson wrote: > On Mon, 2017-12-18 at 11:09 -0800, Gerald B. Cox wrote: >> >> First of all, when you install Fx, it asks you specifically if you want to >> participate in Fx Data Collection - you can opt out at that point. > > Well, not quite. I installed

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Gerald B. Cox
On Mon, Dec 18, 2017 at 11:16 AM, Adam Williamson < adamw...@fedoraproject.org> wrote: > On Mon, 2017-12-18 at 11:09 -0800, Gerald B. Cox wrote: > > > > First of all, when you install Fx, it asks you specifically if you want > to > > participate in Fx Data Collection - you can opt out at that poin

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Adam Williamson
On Mon, 2017-12-18 at 11:09 -0800, Gerald B. Cox wrote: > > First of all, when you install Fx, it asks you specifically if you want to > participate in Fx Data Collection - you can opt out at that point. Well, not quite. I installed Firefox rather a long time ago on this system. Again I can't pro

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Gerald B. Cox
On Mon, Dec 18, 2017 at 10:36 AM, Kevin Fenzi wrote: > > > Additionally, can we turn the "Allow firefox to install and run studies" > preference to off/false by default in Fedora packages. It seems odd that > this is now opt-out. > > I don't know. I personally tend to side with upstream on their

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Daniel P. Berrange
On Mon, Dec 18, 2017 at 10:42:17AM -0800, Adam Williamson wrote: > On Mon, 2017-12-18 at 12:34 -0600, Chris Adams wrote: > > Once upon a time, Adam Williamson said: > > > As part of a tie-in with an American TV show, Mozilla thought it'd be a > > > great idea to silently install a cryptically-name

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Daniel P. Berrange
On Mon, Dec 18, 2017 at 12:34:46PM -0600, Chris Adams wrote: > Once upon a time, Adam Williamson said: > > As part of a tie-in with an American TV show, Mozilla thought it'd be a > > great idea to silently install a cryptically-named addon in all(?) > > Firefox deployments. Which can't be turned o

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Chris Adams
Once upon a time, Adam Williamson said: > Well, practically speaking we do have to have *some* degree of trust in > our suppliers for apps as large and complex as a web browser or, say, > an office app. True, but I do think there's a difference between trusting code we get and trusting that they

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Adam Williamson
On Mon, 2017-12-18 at 12:34 -0600, Chris Adams wrote: > Once upon a time, Adam Williamson said: > > As part of a tie-in with an American TV show, Mozilla thought it'd be a > > great idea to silently install a cryptically-named addon in all(?) > > Firefox deployments. Which can't be turned off. >

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Florian Weimer
On 12/18/2017 07:29 PM, Adam Williamson wrote: Sure. A new release coming out affords many people in the pipeline many chances to notice changes in it. The packager has the opportunity to notice significant changes while updating the package. Users of updates-testing have the opportunity to notic

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Kevin Fenzi
On 12/18/2017 09:55 AM, Adam Williamson wrote: ...snip... > > “Our goal with the custom experience we created with Mr. Robot was to > engage our users in a fun and unique way,” a Mozilla representative > said in a statement. “Real engagement also means listening to feedback. > And so while the web

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Chris Adams
Once upon a time, Adam Williamson said: > As part of a tie-in with an American TV show, Mozilla thought it'd be a > great idea to silently install a cryptically-named addon in all(?) > Firefox deployments. Which can't be turned off. I thought that this was actually a violation of the packaging po

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Adam Williamson
On Mon, 2017-12-18 at 13:08 -0500, Matthew Miller wrote: > On Mon, Dec 18, 2017 at 09:55:26AM -0800, Adam Williamson wrote: > > I think we should be concerned by this kind of behaviour on the part of > > the supplier of our default desktop browser, and we should express that > > concern to them. As

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Stephen John Smoogen
On 18 December 2017 at 13:08, Matthew Miller wrote: > On Mon, Dec 18, 2017 at 09:55:26AM -0800, Adam Williamson wrote: >> I think we should be concerned by this kind of behaviour on the part of >> the supplier of our default desktop browser, and we should express that >> concern to them. Assuming

Re: Firefox "Looking Glass" fiasco

2017-12-18 Thread Matthew Miller
On Mon, Dec 18, 2017 at 09:55:26AM -0800, Adam Williamson wrote: > I think we should be concerned by this kind of behaviour on the part of > the supplier of our default desktop browser, and we should express that > concern to them. Assuming Fedora-as-a-project shares my concern, do we > have a chan

Firefox "Looking Glass" fiasco

2017-12-18 Thread Adam Williamson
So in case you haven't heard of it (or noticed about it), there was a kerfuffle in Firefox land recently about this: https://www.theverge.com/2017/12/16/16784628/mozilla-mr-robot-arg-plugin-firefox-looking-glass As part of a tie-in with an American TV show, Mozilla thought it'd be a great idea to

Re: MASS CHANGE announcement: python2- prefix renaming, part 2

2017-12-18 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Dec 18, 2017 at 03:06:35PM +0100, Iryna Shcherbina wrote: > Hi, > > if the timing is not good, then I can take the generated patch set > and turn it into Pagure Pull Requests with a script. Packagers would > be able to review/merge them during the holidays and we can merge > the rest on Ja

Re: Introducing myself to Fedora

2017-12-18 Thread Charalampos Stratakis
- Original Message - > From: "Spyros Trigazis" > To: devel@lists.fedoraproject.org > Cc: "Dusty Mabe" > Sent: Saturday, December 16, 2017 11:37:30 PM > Subject: Introducing myself to Fedora > > > > Hello Fedora Developers, > > I would like to join the packagers group and I am sendin

Re: wrong selinux label on user-1000.journal, AVC denials

2017-12-18 Thread Lukas Vrabec
On 12/16/2017 12:04 AM, Chris Murphy wrote: Fedora 27 workstation. I'm getting selinux AVC denial messages in the journal as a result of user-1000.journal having label system_u:object_r:unlabeled_t:s0. It's the only log file with that label, the other files and the directory its in have system_u:

Re: Introducing myself to Fedora

2017-12-18 Thread Dusty Mabe
On 12/16/2017 05:37 PM, Spyros Trigazis wrote: > Hello Fedora Developers, > > I would like to join the packagers group and I am sending you > this email to introduce myself. > > My name is Spyros Trigazis and I'm currently working for the CERN [1] > Cloud Infrastructure team [2]. More specifica

Re: MASS CHANGE announcement: python2- prefix renaming, part 2

2017-12-18 Thread Iryna Shcherbina
Hi, if the timing is not good, then I can take the generated patch set and turn it into Pagure Pull Requests with a script. Packagers would be able to review/merge them during the holidays and we can merge the rest on January 2nd. This is just a suggestion, let me know if it sounds like an id

Fedora Rawhide-20171218.n.0 compose check report

2017-12-18 Thread Fedora compose checker
Missing expected images: Server boot x86_64 Server dvd i386 Workstation live i386 Server dvd x86_64 Server boot i386 Kde live i386 Failed openQA tests: 51/106 (x86_64), 1/2 (arm) New failures (same test did not fail in Rawhide-20171217.n.0): ID: 180966 Test: x86_64 universal install_delete

Re: MASS CHANGE announcement: python2- prefix renaming, part 2

2017-12-18 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Dec 18, 2017 at 01:05:03PM +, Stephen Gallagher wrote: > On Sun, Dec 17, 2017 at 3:16 PM Zbigniew Jędrzejewski-Szmek < > zbys...@in.waw.pl> wrote: > > > Dear fellow Fedora developers, > > > > I plan to execute part 2 of the renaming. First part was announced and > > discussed here [1].

Re: MASS CHANGE announcement: python2- prefix renaming, part 2

2017-12-18 Thread Stephen Gallagher
On Sun, Dec 17, 2017 at 3:16 PM Zbigniew Jędrzejewski-Szmek < zbys...@in.waw.pl> wrote: > Dear fellow Fedora developers, > > I plan to execute part 2 of the renaming. First part was announced and > discussed here [1]. Recently, Iryna Shcherbina announced [2] plans for > a follow up: changing the r

Re: Re: Proposed Fedora packaging guideline: Forge-hosted projects packaging automation

2017-12-18 Thread nicolas . mailhot
Hi, > 4. There is a bug in EL7 that causes spectool not to process the resulting > files. rpmbuild and mock work fine though. I > added a -i switch to the macro that prints the resolved source url, you can > then dump it in curl, wget or whatever in EL7. > Alternatively, get someone to fix the E