Just seen on the crypto mailing list, for all those chromium users ...
Nik
---------- Forwarded Message ----------
Subject: [cryptography] chromium: unconditionally downloads binary blob
Date: Mittwoch, 17. Juni 2015, 14:12:17
From: Alexander Klimov <alserkli(a)inbox.ru>
An: cryptography(a)randombit.net
<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786909>
After upgrading chromium to 43, I noticed that when it is running and
immediately after the machine is on-line it silently starts
downloading "Chrome Hotword Shared Module" extension, which contains a
binary without source code. There seems no opt-out config.
that extension:
- doesn't appear in the extension list;
- is apparently used to provide an “ok google” voice activation stuff.
The fact that Audio Capture Allowed is set to yes, and that both the
extension and the shared module are marked as “enabled” are definitely
bothering me.
[...]
We believe that the bug you reported is fixed in the latest version of
chromium-browser, which is due to be installed in the Debian FTP
archive.
[...]
Shouldn't we see a DSA [Debian Security Advisory] following this
incident?
Since no one really know which binaries have been downloaded there and
what they actually do, and since it cannot be excluded that it was
actually executed, such systems are basically to be considered
compromised.
Quite a deal of people choose open source just to prevent that - get
untrustworthy / unverifiable code run on their systems - failed.
--
Regards,
ASK
-------------------------------------------------------
--
Please do not email me anything that you are not comfortable also sharing with the NSA.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Dear all,
in R14.1.x and in the somehow upcoming R14.0.1 release, tdevelop has reverted to use .kdevelop project files instead
of .tdevelop files. Also, the main entry in such file was reverted to "kdevelop" instead of "tdevelop". This has been
done to improve compatibility with KDevelop3 project files.
When you switch to the "new" version, you will need the following renaming:
1) .tdevelop files -> .kdevelop
2) .tdevelop.filelist files -> .kdevelop.filelist
3) change <tdevelop> to <kdevelop> in any .kdevelop file
4) change </tdevelop> to </kdevelop> in any .kdevelop file
Cheers
Michele
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQIcBAEBCgAGBQJVgRiSAAoJECp1t8qK3tXPPwoP/jciCGEv4z4kx581xI9X0iCr
WjiZrmQX+ZbQOYhtv2+ZFsIjy3MdPvp5uWU0nEkcRAk1a2B+YNlLF/Dc5wE2Hw4O
K328Xk6fIJ1WDq7sxH1lYOC6nB4I2rHShTZxf0gc8KV/F3ndsGwUHh/NPpyuWucx
xO3afbb8IFvsJ7rCCkJFYGSWwQPnwuXjSiC2ao+mZY/TPBPPetZs67RVwJtaukj1
M9jE97jvpus12EIUmMclAnKDXmZKuZWU1a4CiMpnGDsbYx2jTZG0dXRij9uO5/yj
slgVWbHLLECJWlj6HMYKRrSxQWK5QwkYkSOpn5OnOAgcZZd9EFwOokWfyGB973kg
4noc7pYuvEo0Tm18/jYJ8uzWECCOW+xFUoZTBSN3uSjj9h0d3302vzNsPzk/YPkX
RxbTFrsZUO8Ya6fahD91taqJJd3AIZFhDqfwhfavt0HtAaY/iAaZWc0dsLd2Ge54
+MZACWz/g0+j0lGVcgI4OkxJqY8k6RtqEvKWLoo+BIfIXnPKlVRToELjwozG5ZCE
On8Vkg/9BnIe17kWFei+UwlkwHB6t6z8hTDD/04gjeTK4UR5XyUYIjxfib4tLNbl
Mrq/q/C9zfva5BlZGiuyJKZ+T3yznbXGyNHgSVD+3udiVlQSbUeGM88r/RnnqJCS
8bmphkuelzaSj+za9nS3
=jWev
-----END PGP SIGNATURE-----
Sorry for my last post that inadvertently posted a picture, I hadn't
noticed it until after it was sent.
I had to use a web-client at the time, back to normal now
again my apologies
Bloody hell!
What a perfect reply.
I agree with everything you said.
I would add the power of Konqueror.
File Manager, FTP/SFTP tool, action menus, image viewer, webbrowser, and more.
Well said lad, well said indeed.
Kate
> everything kde4 is no more :
>
> * fast and user friendly
> * stable and mostly bug-free
> * pretty good configuration for most everything useful
> * will never use up al of your ram like kde4
> * systemd-free
> * well maintained, good community
> * many power user useful features that disappeared from kde4( i cant
> live without konsole 3 features that disappeared from kde4).
>
> I d also say that the trinity fork started after the first (
> officialy stable / final ) kde4 release were complete disasters, full
> of bugs, crashes and user unfriendly choices ), that prooved the new
> kde team was nothing professional and had no respect for users,
> pushing as stable/final release some stuff that wasnt even worth an
> alpha version.
>
>
> On Sun, Jun 14, 2015 at 8:20 AM, Lisi Reisz <lisi.reisz(a)gmail.com> wrote:
> > On Thursday 11 June 2015 17:57:46 Lisi Reisz wrote:
> >> I am shortly giving a talk on TDE. Any points that people particularly
> >> think I should mention? In fact, any pointers?
> >
> > Thank you very much to all who have replied so far! I am known for being
a
> > strong proponent of TDE, which is why I have been asked to do this, and I
> > want to do it justice.
> >
> > We all use such different aspects of it! What was that I said about its
being
> > flexible?? :-)
> >
> > It is a tool. A great tool. It helps, instead of getting in the way.
And as
> > Nik said it has such wonderful applications.
> >
> > Amarok is still a front runner, and as for K3b, which Nik mentioned, on
the
> > day I switched full-time to Linux, K3b was the main reason. I was dual
> > booting at the time, and burning a fair number of CDs. I got fed up with
> > rebooting in order to use K3b instead of Nero, so I took a deep breath,
and
> > stayed in Linux.
> >
> > Lisi
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail:
trinity-users-unsubscribe(a)lists.pearsoncomputing.net
> > For additional commands, e-mail:
trinity-users-help(a)lists.pearsoncomputing.net
> > Read list messages on the web archive:
http://trinity-users.pearsoncomputing.net/
> > Please remember not to top-post:
http://trinity.pearsoncomputing.net/mailing_lists/#top-posting
> >
>
>
>
> --
> Cordialement
>
> -----------------------------------
>
> William Waisse, PGP 0x 690B4E07
> http://waisse.org | http://neoskills.com | http://ww7.pe |
> https://careers.stackoverflow.com/neofutur
>
> "Computers are like air conditionners. They work better when you close
windows."
> "You have enemies? Good. That means you've stood up for something in your
life."
> "First they ignore you, then they laugh at you, then they fight you,
> then you win"
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: trinity-users-unsubscribe(a)lists.pearsoncomputing.net
> For additional commands, e-mail:
trinity-users-help(a)lists.pearsoncomputing.net
> Read list messages on the web archive:
http://trinity-users.pearsoncomputing.net/
> Please remember not to top-post:
http://trinity.pearsoncomputing.net/mailing_lists/#top-posting
>
>
I am shortly giving a talk on TDE. Any points that people particularly think
I should mention? In fact, any pointers?
I love the light flexibility and the marvellous configurability. Its single
biggest plus for me is the set-up wizard. I *love* it. I can get rid of the
moving, transparent etc. bits _before_ I even log in for the first time, so
that I never have to see them. I may see them for the first time during my
talk!
What about the rest of you?
I shall use TDE 3.10.13.2 on Wheezy. I considered upgrading to 14, but if it
goes wrong I haven't a lot of time to reinstall and reconfigure (because I am
a bit over-stretched at the moment.) I need to use my own desktop because
some of the things that I want to demonstrate I can't really set up anywhere
else. E.g. KMail. I need mail!
I am open to contradiction on that. But I am so familiar with 3.10.13.2, and
it is mostly going to be a live demonstration. I don't want to do too much
"eerm...." "let me see ......" I am bound to do some!
Thanks.
Lisi
First, the configurability. In TDE, I can configure all things in a
system. Toolbar in Konqueror doesn't have a button I want? I can add it.
I need specialized toolbar in specific place? No problem.
And I can configure GUI in the setup-level - before first run.
Another thing is this inflatable part on the left side of Konqueror
window. I have e.g. two directory trees there to quickly switch
between my "private" directory and "public HTML" directory when I
develop PHP pages.
A very good thing is the configuration center, especially custom
keyboard actions/shortcuts panel. I have this device:
http://mcbx.netne.net/computers/newspix/progkey.jpg
configured for unused ctrl/alt/Menu shortcuts. With TDE, I can start
programs with one (literally said) button.
TWin is another program which is a major TDE's advantage. If I have
a network monitor plot window, I can configure it to be bound to one
screen, on the top in one place and it won't be accidentially moved.
TDE is really fast in older computers. Generally, I had it running
without problems on 768MB RAM and Pentium 4 1.5GHz.
TDE has a good set of programs for common tasks (Multimedia, e-mail,
communication, text editing) sharing common parts, so they can share
data without conversion.
MCbx
Lisi Reisz <lisi.reisz(a)gmail.com> napisał(a):
> I am shortly giving a talk on TDE. Any points that people
> particularly think I should mention? In fact, any pointers?
>
> I love the light flexibility and the marvellous configurability. Its
> single biggest plus for me is the set-up wizard. I *love* it. I can
> get rid of the moving, transparent etc. bits _before_ I even log in
> for the first time, so that I never have to see them. I may see them
> for the first time during my talk!
>
> What about the rest of you?
>
> I shall use TDE 3.10.13.2 on Wheezy. I considered upgrading to 14,
> but if it goes wrong I haven't a lot of time to reinstall and
> reconfigure (because I am a bit over-stretched at the moment.) I
> need to use my own desktop because some of the things that I want to
> demonstrate I can't really set up anywhere
I'm running Slavek's very excellent TDE 14.0.1-pre on Debian Jessie,
and I use the TDE CrystalSVG icon set. I recently noticed an unusual
icon on one of my folders. It could have been like this for a while as
I don't often use this folder, but can anyone tell me what the "plug"
icon in the following screenshot signifies, please ?
http://www.leverton.org/temp/TDE%20folder-with-plug%20icon.png
I have checked in Properties that it hasn't been manually set to
this. It hasn't, and I can't see a "plug" icon or overlay anyway.
The folder has the same filesystem attributes, extended attributes and
user attributes as its siblings, so I think it must be some property
only known to TDE that's causing the plug overlay to be added. It's no
problem to me, but I'm curious to know what property that might be.
Nick
--
"The Internet, a sort of ersatz counterfeit of real life"
-- Janet Street-Porter, BBC2, 19th March 1996
Hello,
I like this old method of starting the graphic Desktop,
by booting Linux to the the konsole text mode, reaching to
the login and password as user :
$ startx [entry]
but I fall on a black screen or I receive an error message,
that X server cannot be launched.
Which informations do I have to type in my /home/<user>/.xinitrc,
to boot directly on TDE ?
Which informations do I have to add in others file ?
Good evening for the west european people,
and have a good day for the others.
André
Hi all!
As it is indeed quite quiet on the mailinglist I thought I might share my 4 months of FreeBSD Desktop here :-)
What I especially like on *BSD is that there are no surprises. Things simply work as doctumented. There is valid documentation and a handbook that covers almost all things you'd want to know. But if an application is not in ports, things get ugly. And that's the down side of FreeBSD: no TDE.
In quest for a usable desktop environment I went over GNOME (argh! Now I know again why I hate it) over XFCE (too gnomish) to LXDE (too windows like) and KDE4 (yes, that was a rainy day full of desperation. Just like visiting a home-improvement market: you almost get what you need, but in the end of the day you've spent a lot of time and mony and didn't get the job done).
Days got better after purging these nice DEs: openbox was an improvement but in the end FVWM came and stayed. Now my FVWM looks quite simillar to my TDE setup on wheezy :-)
But there are some things that I cannot quite replace:
kmail: the one and only mailclient that has a working maildir implementation and usable GUI. This is the one and only application I did not find a usable replacement for.
kpdf: slim, working PDF viewer. I've also tried mupdf (very good and fast, but I cannot mark and copy text), epdfviewer (ok, but quite broken copy function, hangs on pdfs with big images), okular (slow like a slug, pulls in 1GB dependecies, full of clutter, otherwise ok) and evince (well, GNOME), non is a match. I use mupdf+epdfviewer for now.
konqueror: pcmanfm is a usable replacement, but needs quite a bit of work till it does it's job.
So, it's 30°C outside, rainy days all gone, and I'm here on FreeBSD with FVWM and kmail running in a VM ... and desperatly waiting for Slavec to sort out the -fPIC compiler issue on FreeBSD :-)
Nik
--
Please do not email me anything that you are not comfortable also sharing with the NSA.