6:11 p.m.
Sorry if this was discussed already, but it looks like Firefox 57 on
Fedora 26 (and I assume 27 but have not checked) in the Fedora repo has
"extension.shield-recipe-client.enabled = true".
1) Is there a reason this is not turned off by default? This is being
used to install extensions without notifying users.
2) At what point will it be appropriate to consider changing the
default browser? This is just the latest in a series of questionable
things Mozilla has done.
-- Ben
11:43 p.m.
On 12/16/2017 04:11 PM, Benjamin Kreuter wrote:
Sorry if this was discussed already, but it looks like Firefox 57 on
Fedora 26 (and I assume 27 but have not checked) in the Fedora repo has
"extension.shield-recipe-client.enabled = true".
1) Is there a reason this is not turned off by default? This is being
used to install extensions without notifying users.
It seems to be the upstream default. Perhaps you could file a bug and
politely ask the maintainer to consider changing it. I would think at
least in stable releases it should be off.
2) At what point will it be appropriate to consider changing the
default browser? This is just the latest in a series of questionable
things Mozilla has done.
Well, 'default' is not too clear cut these days... but if you mean the
browser shipped by the workstation edition, the workstation working
group would be the ones to talk to. For each of the spins, their groups
(xfce, kde, etc).
I agree this latest thing was handled poorly, but personally I think
firefox is still the best choice.
kevin
6:09 a.m.
On 12/17/2017 01:11 AM, Benjamin Kreuter wrote:
Sorry if this was discussed already, but it looks like Firefox 57 on
Fedora 26 (and I assume 27 but have not checked) in the Fedora repo has
"extension.shield-recipe-client.enabled = true".
1) Is there a reason this is not turned off by default? This is being
used to install extensions without notifying users.
I wonder if this is related to Mr. Robot extension that was
automatically installed without user's consent:
https://www.cnet.com/news/mozilla-backpedals-after-mr-robot-firefox-misstep/
>
> 2) At what point will it be appropriate to consider changing the
> default browser? This is just the latest in a series of questionable
> things Mozilla has done.
>
> -- Ben
>
>
>
> _______________________________________________
> devel mailing list -- devel(a)lists.fedoraproject.org
> To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org
>
1:09 p.m.
On 12/17/2017 04:09 AM, Till Hofmann wrote:
On 12/17/2017 01:11 AM, Benjamin Kreuter wrote:
> Sorry if this was discussed already, but it looks like Firefox 57 on
> Fedora 26 (and I assume 27 but have not checked) in the Fedora repo has
> "extension.shield-recipe-client.enabled = true".
>
> 1) Is there a reason this is not turned off by default? This is being
> used to install extensions without notifying users.
I wonder if this is related to Mr. Robot extension that was
automatically installed without user's consent:
https://www.cnet.com/news/mozilla-backpedals-after-mr-robot-firefox-misstep/
Yeah, that is the reason I thought the OP was bringing this up for...
kevin
1:16 p.m.
On Sun, 2017-12-17 at 11:09 -0800, Kevin Fenzi wrote:
On 12/17/2017 04:09 AM, Till Hofmann wrote:
>
>
> On 12/17/2017 01:11 AM, Benjamin Kreuter wrote:
> > Sorry if this was discussed already, but it looks like Firefox 57
> > on
> > Fedora 26 (and I assume 27 but have not checked) in the Fedora
> > repo has
> > "extension.shield-recipe-client.enabled = true".
> >
> > 1) Is there a reason this is not turned off by default? This is
> > being
> > used to install extensions without notifying users.
>
> I wonder if this is related to Mr. Robot extension that was
> automatically installed without user's consent:
> https://www.cnet.com/news/mozilla-backpedals-after-mr-robot-firefox
> -misstep/
Yeah, that is the reason I thought the OP was bringing this up for...
Yes that is the point; as far as I can tell that is the about:config
setting that enables the "let Mozilla silently install extensions"
feature.
-- Ben
8:56 a.m.
Il giorno sab, 16/12/2017 alle 19.11 -0500, Benjamin Kreuter ha
scritto:
"extension.shield-recipe-client.enabled = true".
The correct option is "extensions.shield-recipe-client.enabled"
(extension is missing of 's'), ad for default is "true"
Now I have set it to False.
Thanks
--
Dario Lesca
(inviato dal mio Linux Fedora 27 Workstation)
9:20 a.m.
Il giorno gio, 21/12/2017 alle 15.56 +0100, Dario Lesca ha scritto:
Il giorno sab, 16/12/2017 alle 19.11 -0500, Benjamin Kreuter ha
scritto:
> "extension.shield-recipe-client.enabled = true".
The correct option is "extensions.shield-recipe-client.enabled"
(extension is missing of 's'), ad for default is "true"
Now I have set it to False.
Another curious flag: "extensions.ui.experiment.hidden"
in my config it is set to true, now I have set to false
Thanks
--
Dario Lesca
(inviato dal mio Linux Fedora 27 Workstation)
_______________________________________________
devel mailing list -- devel(a)lists.fedoraproject.org
To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org
--
Dario Lesca
(inviato dal mio Linux Fedora 27 Workstation)
12:35 p.m.
On 21 December 2017 at 17:20, Dario Lesca <d.lesca(a)solinos.it> wrote:
Il giorno gio, 21/12/2017 alle 15.56 +0100, Dario Lesca ha scritto:
> Il giorno sab, 16/12/2017 alle 19.11 -0500, Benjamin Kreuter ha
> scritto:
> > "extension.shield-recipe-client.enabled = true".
>
> The correct option is "extensions.shield-recipe-client.enabled"
> (extension is missing of 's'), ad for default is "true"
>
> Now I have set it to False.
Another curious flag: "extensions.ui.experiment.hidden"
in my config it is set to true, now I have set to false
I found this upstream bug report[1], and it's reproducible. So,
there's something seriously screwed up upstream, and as someone said
in the "firefox Looking Glass" thread on this list[2], looks like
Marketing is overruling the security/privacy devs in Mozilla, I think
he nailed the issue at the core of this debacle.
[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1425186
[2]
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.o...
--
Ahmad Samir
1:05 p.m.
On Thu, Dec 21, 2017 at 10:35 AM, Ahmad Samir <ahmadsamir3891(a)gmail.com>
wrote:
I found this upstream bug report[1], and it's reproducible. So,
there's something seriously screwed up upstream, and as someone said
in the "firefox Looking Glass" thread on this list[2], looks like
Marketing is overruling the security/privacy devs in Mozilla, I think
he nailed the issue at the core of this debacle.
If you read the bug report it appears that this isn't a bug at all - but
rather someone going
into about:config and making assumptions which are incorrect.
There is a warning when you go into about:config - you're suppose to know
what you're doing.
If you want to disable shield studies, go into preferences/privacy
security. You don't need to fiddle
with about:config.
2:32 p.m.
On 21 December 2017 at 21:05, Gerald B. Cox <gbcox(a)bzb.us> wrote:
On Thu, Dec 21, 2017 at 10:35 AM, Ahmad Samir <ahmadsamir3891(a)gmail.com>
wrote:
>
> I found this upstream bug report[1], and it's reproducible. So,
> there's something seriously screwed up upstream, and as someone said
> in the "firefox Looking Glass" thread on this list[2], looks like
> Marketing is overruling the security/privacy devs in Mozilla, I think
> he nailed the issue at the core of this debacle.
If you read the bug report it appears that this isn't a bug at all - but
rather someone going
into about:config and making assumptions which are incorrect.
The bug report had been updated _after_ I posted in this thread. ;)
There is a warning when you go into about:config - you're suppose
to know
what you're doing.
True, but knowledge comes from docs, I did search around about the
extensions.ui.experiment.hidden pref, but there's no documentation of
it any where that I could see. Which is weird, given I always find
pref names on https://dxr.mozilla.org .
If you want to disable shield studies, go into preferences/privacy
security.
You don't need to fiddle
with about:config.
There's another report that changing settings via the preferences
panel doesn't always stick
https://bugzilla.mozilla.org/show_bug.cgi?id=1425663
--
Ahmad Samir
2379
days inactive
2383
days old
9 comments
6 participants
participants (6)
-
Ahmad Samir -
Benjamin Kreuter -
Dario Lesca -
Gerald B. Cox -
Kevin Fenzi -
Till Hofmann