From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: "Jorge P. de Morais Neto" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 14 Jun 2021 21:30:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 49029@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16237061629719 (code B ref -1); Mon, 14 Jun 2021 21:30:02 +0000 Received: (at submit) by debbugs.gnu.org; 14 Jun 2021 21:29:22 +0000 Received: from localhost ([127.0.0.1]:47875 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lsu94-0002Wg-6c for submit@debbugs.gnu.org; Mon, 14 Jun 2021 17:29:22 -0400 Received: from lists.gnu.org ([209.51.188.17]:52278) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lsu92-0002WZ-8k for submit@debbugs.gnu.org; Mon, 14 Jun 2021 17:29:21 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33392) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lsu91-00035l-Uk for bug-guix@gnu.org; Mon, 14 Jun 2021 17:29:20 -0400 Received: from knopi.disroot.org ([178.21.23.139]:44678) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lsu8z-0003Ng-E4 for bug-guix@gnu.org; Mon, 14 Jun 2021 17:29:19 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 48FAE5BE7E for ; Mon, 14 Jun 2021 23:29:15 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k9xt2-_ZwBlG for ; Mon, 14 Jun 2021 23:29:13 +0200 (CEST) From: "Jorge P. de Morais Neto" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1623706152; bh=bxosl3uIKAEyh0wTlaF151+yEwnv2dFlMPoTDZ5KXEg=; h=From:To:Subject:Date; b=UGxVg0ERYVii7vCfTtek6R09AO+EuB1K2rQuvfP8OF6D/1dztxaPR4ZEfOiRGpDWb gxmXzSeLT8Oa82Me85ekBll55v6Y/oy1gFeCyOTztODvIs83bIthQ2kfDArqdrxlHx BUNiyRZj8iXg5OGWFay13H5g8tJTJWJ9uh+T3JEBFMH8WhD+veoDpiNVedUz9kg97W h9ddbtHn+xXla6Kui4fOyorNJJYyhbhmRmq8nbYcY+CKBIvDk5sapthtLWJUN+CTVa 6pzmYx64kxB/XnlEOwdlfPT2wu9/qhrXbVuNLJTOC363nQtAL1A+l1o5y9Y//HDpYI Dd2y452OH3ntQ== Date: Mon, 14 Jun 2021 18:29:03 -0300 Message-ID: <87k0mwdtk0.fsf@disroot.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=178.21.23.139; envelope-from=jorge+list@disroot.org; helo=knopi.disroot.org X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Hi. I use Guix atop Debian=C2=B9 testing (currently bullseye). I normally browse the web on GNU IceCat and sometimes Firefox and Emacs EWW. I only use (ungoogled-)chromium for the rare websites that don't work on the other browsers. Long ago I installed in Chromium the extension The Great Suspender, and only today (months after G$$gle Chrome, according to news articles) did my Chromium disable it for having malware. And the only Chromium that did that for me was Debian's. So, I hypothesize that the ungoogling process has disabled Chromium's ability to automatically disable malware extensions. If true, that is a serious defect of ungoogled-chromium and Guix should make sure that users at least know about it. There could be a warning in the Guix package description *and* on the browser's start page. Thank you for your work on GNU! Regards =C2=B9 When I find the time I intend to migrate to PureOS for superior libre software ethics. --=20 - https://stallmansupport.org "In Support of Richard Stallman" - If an email of mine arrives at your spam box, please notify me. - Please adopt free/libre formats like PDF, ODF, Org, LaTeX, Opus, WebM and= 7z. - Free/libre software for Replicant, LineageOS and Android: https://f-droid= .org - [[https://www.gnu.org/philosophy/free-sw.html][What is free software?]] From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 15 Jun 2021 13:50:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 49029@debbugs.gnu.org X-Debbugs-Original-To: "Jorge P. de Morais Neto via Bug reports for GNU Guix" X-Debbugs-Original-Cc: 49029@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16237649977695 (code B ref -1); Tue, 15 Jun 2021 13:50:01 +0000 Received: (at submit) by debbugs.gnu.org; 15 Jun 2021 13:49:57 +0000 Received: from localhost ([127.0.0.1]:48774 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lt9S0-000200-C9 for submit@debbugs.gnu.org; Tue, 15 Jun 2021 09:49:56 -0400 Received: from lists.gnu.org ([209.51.188.17]:53724) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lt9Rs-0001zg-0A for submit@debbugs.gnu.org; Tue, 15 Jun 2021 09:49:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33324) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lt9Rr-00019K-KY for bug-guix@gnu.org; Tue, 15 Jun 2021 09:49:47 -0400 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:46097) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lt9Rp-0000LZ-PV for bug-guix@gnu.org; Tue, 15 Jun 2021 09:49:47 -0400 Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id 1AE075C01C5; Tue, 15 Jun 2021 09:49:45 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute1.internal (MEProxy); Tue, 15 Jun 2021 09:49:45 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-transfer-encoding:in-reply-to; s=mesmtp; bh=UGO5FvbrEOjFbZj1UPWGzWPhlnA4qfeRmRtccVlKf7M=; b=WAu64nVFY3/z C7XI8rSPtfW210CrOJgM5DJnoD/Knu/qy4FC19d9jjAWy/MmKwwViyOgwZzO1cQN IvrgtOd0yZH/oWErTGleL3DFxNT6kvHo+XSRZWviUNQX27eusFJDNt0cNIbV2Eiu liTRonGc8QFvhKb9JXd4NGlu/nNW9cs= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=UGO5FvbrEOjFbZj1UPWGzWPhlnA4qfeRmRtccVlKf 7M=; b=OBIrtIvuuLhC/djlWAYKCQ9+V1paqop793vUC4yH7zaO+2UT8Jyf0ci4F +irYnCq8yjCeGqAIM11G+AemHiAY30TYRw3mRainT1536Vah7vhZVPNjJVAQb1Np UPM6yETWhD4QMh5oSi3FrlioQv5OBivua5SLy15bGCZ9znLmq535g7IgHyEAW19b pRlQnQrFp23i3Asv4zKwuwPR+bsimOGygjlT0UAE2pLGkehvLpD2MNAi5EBXIPjk HfjfKOiZiivmygQ3udxWlaKai6km0IpANdMoAe3+MgqgC7n6zrBQzkEeoCvxgJYu I8aYDbymg5IpLayrARl21IL/MMZwA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrfedvjedgjedtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvffukfhfgggtugfgjgesthekredttddtudenucfhrhhomhepnfgvohcu hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth htvghrnhepvdfgffelkedvkeeivdfhfedvtdevgedvheffjeeutdetvddtveeliefhleeu gfefnecuffhomhgrihhnpegthhhrohhmihhumhdrohhrghdpghhnuhdrohhrghenucevlh hushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghm uhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 15 Jun 2021 09:49:44 -0400 (EDT) Date: Tue, 15 Jun 2021 09:49:43 -0400 From: Leo Famulari Message-ID: References: <87k0mwdtk0.fsf@disroot.org> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <87k0mwdtk0.fsf@disroot.org> Received-SPF: pass client-ip=66.111.4.26; envelope-from=leo@famulari.name; helo=out2-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) On Mon, Jun 14, 2021 at 06:29:03PM -0300, Jorge P. de Morais Neto via Bug reports for GNU Guix wrote: > Hi. I use Guix atop Debianš testing (currently bullseye). > > I normally browse the web on GNU IceCat and sometimes Firefox and > Emacs EWW. I only use (ungoogled-)chromium for the rare websites that > don't work on the other browsers. Long ago I installed in Chromium the > extension The Great Suspender, and only today (months after G$$gle > Chrome, according to news articles) did my Chromium disable it for > having malware. And the only Chromium that did that for me was > Debian's. > > So, I hypothesize that the ungoogling process has disabled Chromium's > ability to automatically disable malware extensions. If true, that is a > serious defect of ungoogled-chromium and Guix should make sure that > users at least know about it. There could be a warning in the Guix > package description *and* on the browser's start page. Chromium is a program that is meant to be "evergreen". Version numbers are not highlighted to the user and the software is supposed to update itself, quickly and often. It's like a "rolling release" just for that program. A variant of the package that blocks communication to Google and requires one of us to update it is, if you trust the Chromium team, categorically less up-to-date than a "normal Chromium" downloaded directly from chromium.org, and thus also less "secure", as you've seen. I don't know exactly how the "disable malware extensions" mechanism works, but it's likely that the "ungoogling" disables the possibility that it can happen quickly, outside of full program updates. It's a tradeoff we (have to?) make to offer a variant of Chromium that is judged acceptable by us under the Free System Distribution Guidelines, which Guix follows: https://www.gnu.org/distros/free-system-distribution-guidelines.en.html Personally I use the "regular" variants of browsers, that talk directly to the "motherships" of Google and Mozilla, for that reason. By the way, the Debian testing branch is the last to receive security updates, and in general has no guarantee of fast security updates. If you want to use a Debian with more up-to-date software than the stable branch and also are concerned about your security, you might consider using Debian sid. From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Leo Prikler Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 15 Jun 2021 14:41:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Leo Famulari , "Jorge P. de Morais Neto" Cc: 49029@debbugs.gnu.org Received: via spool by 49029-submit@debbugs.gnu.org id=B49029.162376805931148 (code B ref 49029); Tue, 15 Jun 2021 14:41:02 +0000 Received: (at 49029) by debbugs.gnu.org; 15 Jun 2021 14:40:59 +0000 Received: from localhost ([127.0.0.1]:50416 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltAFO-00086J-RJ for submit@debbugs.gnu.org; Tue, 15 Jun 2021 10:40:59 -0400 Received: from mailrelay.tugraz.at ([129.27.2.202]:24160) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltAFM-00086A-A4 for 49029@debbugs.gnu.org; Tue, 15 Jun 2021 10:40:57 -0400 Received: from [10.0.0.4] (62-116-34-49.adsl.highway.telekom.at [62.116.34.49]) by mailrelay.tugraz.at (Postfix) with ESMTPSA id 4G49wh6K10z1LLyL; Tue, 15 Jun 2021 16:40:52 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.11.0 mailrelay.tugraz.at 4G49wh6K10z1LLyL DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tugraz.at; s=mailrelay; t=1623768053; bh=vY4cXgw4b9GIRtX9wT9HiMVn9tDkeh6LDu9NI8O9YCY=; h=Subject:From:To:Cc:Date:In-Reply-To:References:From; b=UK6nYVig7avozo6E0ZkRPFXNpr/iS0A359TIsYRvnrRUWyVfMx+eR+O6mqwl+2dZx KaPoFpxdpmv5KBh0heqWm1/923QDcuwZt1jo5Ukc+rn0q6VEMQrLLu5IjbJWwUtmpI H+5q6lhgrdYeonEigt9B+e2MoOB2jVxZjvdbw2k4= Message-ID: From: Leo Prikler Date: Tue, 15 Jun 2021 16:40:31 +0200 In-Reply-To: References: <87k0mwdtk0.fsf@disroot.org> Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-TUG-Backscatter-control: bt4lQm5Tva3SBgCuw0EnZw X-Spam-Scanner: SpamAssassin 3.003001 X-Spam-Score-relay: -1.9 X-Scanned-By: MIMEDefang 2.74 on 129.27.10.116 X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Am Dienstag, den 15.06.2021, 09:49 -0400 schrieb Leo Famulari: > On Mon, Jun 14, 2021 at 06:29:03PM -0300, Jorge P. de Morais Neto via > Bug reports for GNU Guix wrote: > > Hi. I use Guix atop Debian testing (currently bullseye). > > > > I normally browse the web on GNU IceCat and sometimes Firefox and > > Emacs EWW. I only use (ungoogled-)chromium for the rare websites > > that > > don't work on the other browsers. Long ago I installed in Chromium > > the > > extension The Great Suspender, and only today (months after G$$gle > > Chrome, according to news articles) did my Chromium disable it for > > having malware. And the only Chromium that did that for me was > > Debian's. > > > > So, I hypothesize that the ungoogling process has disabled > > Chromium's > > ability to automatically disable malware extensions. If true, that > > is a > > serious defect of ungoogled-chromium and Guix should make sure that > > users at least know about it. There could be a warning in the Guix > > package description *and* on the browser's start page. > > Chromium is a program that is meant to be "evergreen". Version > numbers > are not highlighted to the user and the software is supposed to > update > itself, quickly and often. It's like a "rolling release" just for > that > program. > > A variant of the package that blocks communication to Google and > requires one of us to update it is, if you trust the Chromium team, > categorically less up-to-date than a "normal Chromium" downloaded > directly from chromium.org, and thus also less "secure", as you've > seen. > > I don't know exactly how the "disable malware extensions" mechanism > works, but it's likely that the "ungoogling" disables the possibility > that it can happen quickly, outside of full program updates. > > It's a tradeoff we (have to?) make to offer a variant of Chromium > that > is judged acceptable by us under the Free System Distribution > Guidelines, which Guix follows: > > https://www.gnu.org/distros/free-system-distribution-guidelines.en.html > > Personally I use the "regular" variants of browsers, that talk > directly > to the "motherships" of Google and Mozilla, for that reason. > > By the way, the Debian testing branch is the last to receive security > updates, and in general has no guarantee of fast security updates. If > you want to use a Debian with more up-to-date software than the > stable > branch and also are concerned about your security, you might consider > using Debian sid. On a somewhat related note, this also highlights the trust people put into storefronts like Google or Mozilla. An update, that would first be pushed to Github and then to distros like Debian or Guix would have had more people looking at it critically. Not to say, that Guix can't ever ship malware, but that we try our darndest not to ;) Now that I think of it, I should probably push my cosmetic changes to evil-malware-service-type. From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: "Jorge P. de Morais Neto" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 15 Jun 2021 17:01:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 49029@debbugs.gnu.org, Leo Famulari Received: via spool by 49029-submit@debbugs.gnu.org id=B49029.16237764045308 (code B ref 49029); Tue, 15 Jun 2021 17:01:02 +0000 Received: (at 49029) by debbugs.gnu.org; 15 Jun 2021 17:00:04 +0000 Received: from localhost ([127.0.0.1]:50663 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltCPy-0001NF-V1 for submit@debbugs.gnu.org; Tue, 15 Jun 2021 13:00:03 -0400 Received: from knopi.disroot.org ([178.21.23.139]:52872) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltCPw-0001MV-FS for 49029@debbugs.gnu.org; Tue, 15 Jun 2021 13:00:01 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 0E8B35BE7D; Tue, 15 Jun 2021 18:59:59 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x1siK6gFIo13; Tue, 15 Jun 2021 18:59:57 +0200 (CEST) From: "Jorge P. de Morais Neto" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1623776393; bh=PJwlG2pzCdO2lBhK3irUZTXbEQXizWiHWcTkUX5agt0=; h=From:To:Subject:References:Date:In-Reply-To; b=OO+E6oA2tegOi/uwZQFpUMZakSuR0eu+13kKD5hJ0OxLCoLbeTt+9Z1AavlbjyoZJ 8LlufrhQzIvQmuQ48Q2gHxg7ADFtrG6kOBY8OvoJBdgjPk2aGV1+foIo9PPjYakkW3 ep8xHlVJHLkpsYnDdd8pJJxrdqw9vaxQowmv2jeW/BqHGicBIwkpU2tQ7zcVqV11mw K1yuz01dmPCjlMYKIerUdwjSImt8GFwx5HNyafRetRDP268Ytsx/gsdZ4P9a0Y8qwo 821+0tSbmWcBOATwQ6Q5syGyOT3JiypHD/WVeixkb/njq6ZXQc6uVaM7jfsPXq7CLV ybcKCQNkPqBXw== References: <87k0mwdtk0.fsf@disroot.org> Date: Tue, 15 Jun 2021 13:59:44 -0300 In-Reply-To: (Leo Famulari's message of "Tue, 15 Jun 2021 09:49:43 -0400") Message-ID: <87czsndpxb.fsf@disroot.org> Mime-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi. I didn't receive your email (I did this reply from Emacs debbugs package). Please include my email address in further messages to mitigate the risk that I miss them. I continue below: On 06/15/21 09:49 , Leo Famulari wrote: > Chromium is a program that is meant to be "evergreen". Version > numbers are not highlighted to the user and the software is supposed > to update itself, quickly and often. It's like a "rolling release" > just for that program. > A variant of the package that blocks communication to Google and > requires one of us to update it is, if you trust the Chromium team, > categorically less up-to-date than a "normal Chromium" downloaded > directly from chromium.org, and thus also less "secure", as you've seen. > I don't know exactly how the "disable malware extensions" mechanism > works, but it's likely that the "ungoogling" disables the possibility > that it can happen quickly, outside of full program updates. > > It's a tradeoff we (have to?) make to offer a variant of Chromium that > is judged acceptable by us under the Free System Distribution > Guidelines, which Guix follows: I can accept a reasonable trade-off, but I still believe this should be actively communicated to users. It is not obvious. If had known that before, I would certainly have been more careful with extensions. Indeed, now that I know, I have not only deleted my old (ungoogled-)Chromium profile, but also, on the new profile, I installed only HTTPS Everywhere and Privacy Badger extensions. I have also changed an important password that I remember having used on the malware-infected Chromium. > By the way, the Debian testing branch is the last to receive security > updates, and in general has no guarantee of fast security updates. If > you want to use a Debian with more up-to-date software than the stable > branch and also are concerned about your security, you might consider > using Debian sid. Thank you for the advice. I already knew that though, and I think the security risk of Debian testing is mitigated by my care. I have installed and configured debsecan. It emails be about Debian vulnerabilities, and then, in aptitude, I manually pull important security updates from Debian unstable (sid). That is a bit time-consuming, but I fear that going full unstable would be too unreliable (more breakages) and would remove the option of settling in stable without reinstalling. I mean, since my sources.list refers to bullseye, then, when it becomes stable, I will have Debian stable and will have a choice whether (and when) to upgrade to the new testing (bookworm). Regards! -- - https://stallmansupport.org "In Support of Richard Stallman" - If an email of mine arrives at your spam box, please notify me. - Please adopt free/libre formats like PDF, ODF, Org, LaTeX, Opus, WebM and 7z. - Free/libre software for Replicant, LineageOS and Android: https://f-droid.org - https://www.gnu.org/philosophy/free-sw.html "What is free software?" From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 16 Jun 2021 16:32:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Jorge P. de Morais Neto" Cc: 49029@debbugs.gnu.org Received: via spool by 49029-submit@debbugs.gnu.org id=B49029.162386109031767 (code B ref 49029); Wed, 16 Jun 2021 16:32:01 +0000 Received: (at 49029) by debbugs.gnu.org; 16 Jun 2021 16:31:30 +0000 Received: from localhost ([127.0.0.1]:53227 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltYRu-0008GJ-Cv for submit@debbugs.gnu.org; Wed, 16 Jun 2021 12:31:30 -0400 Received: from wout3-smtp.messagingengine.com ([64.147.123.19]:34337) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltYRt-0008G6-Aa for 49029@debbugs.gnu.org; Wed, 16 Jun 2021 12:31:29 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id 341B61393; Wed, 16 Jun 2021 12:31:23 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Wed, 16 Jun 2021 12:31:23 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=IUMEYNO6jPosbcBJUbzspIF/ VValndBUlYFZ7Vvduac=; b=yFGRUTSgebeZNgxzdWnJOTdyJPk9cteOfl4lfG1p MaGF6SlOKn1zmowRpcyID5mwc4fGUsmnJMFvLa1fXPTqv09TwASHBHvohyj2j+2o /3jx5WYvPu5T719E/OP53Pi8PhEm+PSCtJrXpyorVRnaJDUDg9lKCJZHfNY6fZ8Y xIc= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=IUMEYN O6jPosbcBJUbzspIF/VValndBUlYFZ7Vvduac=; b=wMvZDGUUcXjN4JOvW/+0Tf +3XcFrFB2CSqSFtDxiQkc8ylwfZGRCTAYDqN70RlONKoIjYRwcmV9eBZA3tZvcjO tpPjCxTDEClSkgD8/PKw8z7E5IfDFNMOSUxmkIbonKumQ7hh5MioK+l92rbg+tq7 LzWHRYuT69IOX63VB6I7PJubqvUtd3jLuEqJ2blPT10woHhPgydTayu+XqsiVX8J IDDY6OImGBZkh2byedSAOAfPzjggrkdUJw9+TvPBtNIK8Dp+MeApwNoAJ0D3QzRF RcZ2z3b83B0YvQvhfTFjHwnxrPiTJT6d2zLhRLogklkI458YY+/t9NwoFIqd9HBQ == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrfedvledgleelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesthdtre dttddtvdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgr rhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhepgfeileejtdeiieetkeeiieefteefve effefhkedtgffggeffudekvdefueduveeunecuffhomhgrihhnpehinhhtvghrnhgvthdr tghhrhhomhgvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrh homheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 16 Jun 2021 12:31:22 -0400 (EDT) Date: Wed, 16 Jun 2021 12:31:20 -0400 From: Leo Famulari Message-ID: References: <87k0mwdtk0.fsf@disroot.org> <87czsndpxb.fsf@disroot.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <87czsndpxb.fsf@disroot.org> X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) On Tue, Jun 15, 2021 at 01:59:44PM -0300, Jorge P. de Morais Neto wrote: > I can accept a reasonable trade-off, but I still believe this should be > actively communicated to users. It is not obvious. If had known that > before, I would certainly have been more careful with extensions. > Indeed, now that I know, I have not only deleted my old > (ungoogled-)Chromium profile, but also, on the new profile, I installed > only HTTPS Everywhere and Privacy Badger extensions. I have also > changed an important password that I remember having used on the > malware-infected Chromium. That trade-off applies for everything we package: in general, Guix packages will be less up to date than what upstream offers, and thus probabilistically more buggy and, based on your threat model, they may be "less secure". It's the same for any distro. But, the situation is exacerbated for Chromium, which is developed very rapidly and has the most complete and advanced security posture of probably any program in use right now. I guess that's what hundreds of billions of dollars in annual revenue can buy. Chromium, and web browsers in general, also have the most dire security exposure, because most computer users do *everything* in their browser, and because they are used to interact with untrusted data (the internet). Chrome / Chromium is the "juiciest" target for attackers. From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 16 Jun 2021 16:34:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 49029@debbugs.gnu.org Cc: marius@gnu.org X-Debbugs-Original-To: "Jorge P. de Morais Neto via Bug reports for GNU Guix" X-Debbugs-Original-Cc: 49029@debbugs.gnu.org, Marius Bakke Received: via spool by submit@debbugs.gnu.org id=B.162386119131939 (code B ref -1); Wed, 16 Jun 2021 16:34:02 +0000 Received: (at submit) by debbugs.gnu.org; 16 Jun 2021 16:33:11 +0000 Received: from localhost ([127.0.0.1]:53232 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltYTW-0008J4-Pa for submit@debbugs.gnu.org; Wed, 16 Jun 2021 12:33:10 -0400 Received: from lists.gnu.org ([209.51.188.17]:37972) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltYTV-0008Iy-VL for submit@debbugs.gnu.org; Wed, 16 Jun 2021 12:33:10 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:40564) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ltYTV-0006pj-Nu for bug-guix@gnu.org; Wed, 16 Jun 2021 12:33:09 -0400 Received: from wout3-smtp.messagingengine.com ([64.147.123.19]:41789) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ltYTT-0000WW-BP; Wed, 16 Jun 2021 12:33:09 -0400 Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.west.internal (Postfix) with ESMTP id 0A5F210D1; Wed, 16 Jun 2021 12:33:04 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Wed, 16 Jun 2021 12:33:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=VKSEMCmLnslsQJiK/i+jxBux WRK3eO1rSQae+5IeP9Y=; b=wgg/pYNZX2fjLG7x+G+ay9duR2EBtG0ZAKHpezKA uT8kpyQGUiI8JuA4JoB7q0BbmIhUQvTMO3VgojI727VfmNJpHmvlWo9AILgf06+2 a7zvEKj9aOEb2wuSKvk2QFVFc3+l1MyxaGTVpz3KZe9RxxSHYfRv0eqk6TqW89Ym IyU= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=VKSEMC mLnslsQJiK/i+jxBuxWRK3eO1rSQae+5IeP9Y=; b=L4Ejpryi27D3A7FZIJlfOp 8+KXcU88yJQwKk8RQY2g9pJFbem5gFAaE2DnxSy8Wd9A94XficD5hjL74GFiDMdt bMCB8GKh1pIYE0kdPtYjbsk54cLrL+WYuKjqXGJw/qccBYIS9oz8Zc5pjj0oko97 x6mSezmM3FVYtyNBk8xEPiZsP80tOtskbopsLodkIPirZoWidneLgpJCXpNzRnYL Knq0INSVk1KEJb5eQH3DHkUfnv5aBlzF/KkrjuMsCStc1m8J+uFXgzI8DBjr8ifl Yk5eDMvQ4m/cX3tiziVP07mkk8CByZu75KPevZCj+TDk7//ISfAr9A4sYh7ekzvg == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrfedvledgleelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvffukfhfgggtuggjsehttdertddttddvnecuhfhrohhmpefnvghoucfh rghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtth gvrhhnpeeukeektdffvddtudegjeegtdevhfeufeeivdejiedtieegtdevjedvjeehffev gfenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvg hosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 16 Jun 2021 12:33:04 -0400 (EDT) Date: Wed, 16 Jun 2021 12:33:02 -0400 From: Leo Famulari Message-ID: References: <87k0mwdtk0.fsf@disroot.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <87k0mwdtk0.fsf@disroot.org> Received-SPF: pass client-ip=64.147.123.19; envelope-from=leo@famulari.name; helo=wout3-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) On Mon, Jun 14, 2021 at 06:29:03PM -0300, Jorge P. de Morais Neto via Bug reports for GNU Guix wrote: > I normally browse the web on GNU IceCat and sometimes Firefox and > Emacs EWW. I only use (ungoogled-)chromium for the rare websites that > don't work on the other browsers. Long ago I installed in Chromium the > extension The Great Suspender, and only today (months after G$$gle > Chrome, according to news articles) did my Chromium disable it for > having malware. And the only Chromium that did that for me was > Debian's. Does anybody know what we need to do to fix this bug? Do we need to update the ungoogled-chromium package? From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Marius Bakke Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 16 Jun 2021 21:10:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Leo Famulari , "Jorge P. de Morais Neto" Cc: 49029@debbugs.gnu.org Received: via spool by 49029-submit@debbugs.gnu.org id=B49029.162387776918359 (code B ref 49029); Wed, 16 Jun 2021 21:10:01 +0000 Received: (at 49029) by debbugs.gnu.org; 16 Jun 2021 21:09:29 +0000 Received: from localhost ([127.0.0.1]:53447 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltcmv-0004m2-5z for submit@debbugs.gnu.org; Wed, 16 Jun 2021 17:09:29 -0400 Received: from eggs.gnu.org ([209.51.188.92]:60774) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltcmt-0004lp-S5 for 49029@debbugs.gnu.org; Wed, 16 Jun 2021 17:09:28 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:34558) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ltcmo-0000Jy-GV; Wed, 16 Jun 2021 17:09:22 -0400 Received: from host-37-191-231-185.lynet.no ([37.191.231.185]:38408 helo=localhost) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ltcmo-0006oI-7U; Wed, 16 Jun 2021 17:09:22 -0400 From: Marius Bakke In-Reply-To: References: <87k0mwdtk0.fsf@disroot.org> Date: Wed, 16 Jun 2021 23:09:19 +0200 Message-ID: <878s39ms8w.fsf@gnu.org> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain Leo Famulari skriver: > On Mon, Jun 14, 2021 at 06:29:03PM -0300, Jorge P. de Morais Neto via Bug reports for GNU Guix wrote: >> I normally browse the web on GNU IceCat and sometimes Firefox and >> Emacs EWW. I only use (ungoogled-)chromium for the rare websites that >> don't work on the other browsers. Long ago I installed in Chromium the >> extension The Great Suspender, and only today (months after G$$gle >> Chrome, according to news articles) did my Chromium disable it for >> having malware. And the only Chromium that did that for me was >> Debian's. > > Does anybody know what we need to do to fix this bug? Do we need to > update the ungoogled-chromium package? It's not easily possible to install extensions with ungoogled-chromium, apart from the two that are available directly through Guix. If the user goes out of their way to install extensions, such as using a browser from a different distro, there is little we can do. Mixing browser profiles between the vanilla and ungoogled Chromium is not a supported use case. Warranty void. I'd accept a patch that warns or refuses to use a "tainted" browser profile, or changes the default browser profile directory so it does not conflict with vanilla. But I'm inclined to close this as "not-a-bug" for now. WDYT, Jorge? --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIUEARYKAC0WIQRNTknu3zbaMQ2ddzTocYulkRQQdwUCYMpofw8cbWFyaXVzQGdu dS5vcmcACgkQ6HGLpZEUEHfyNgD/Zz08EoVzciB7iALTdxzS/6gZzkzB1+gfUNdE YLmboaIA/Ap/6iYyK9YMzdbAlrUMyMwOgsRBbIfhdNUQIaek6ccE =5FFr -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Jorge P. de Morais Neto Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 16 Jun 2021 22:19:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Marius Bakke , Leo Famulari Cc: 49029@debbugs.gnu.org Received: via spool by 49029-submit@debbugs.gnu.org id=B49029.162388189425040 (code B ref 49029); Wed, 16 Jun 2021 22:19:02 +0000 Received: (at 49029) by debbugs.gnu.org; 16 Jun 2021 22:18:14 +0000 Received: from localhost ([127.0.0.1]:53480 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltdrS-0006Vo-7V for submit@debbugs.gnu.org; Wed, 16 Jun 2021 18:18:14 -0400 Received: from knopi.disroot.org ([178.21.23.139]:44488) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ltdrQ-0006Vf-JG for 49029@debbugs.gnu.org; Wed, 16 Jun 2021 18:18:13 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 61DEC5BF14; Thu, 17 Jun 2021 00:18:11 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rtAS-XnOLZGZ; Thu, 17 Jun 2021 00:18:10 +0200 (CEST) From: Jorge P. de Morais Neto DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1623881889; bh=ksEggZAYY0wQP9k5tL2gjYRz+f7O/0ToTgUG1BgK6Os=; h=From:To:Cc:Subject:In-Reply-To:References:Date; b=Tb1Dlth7k7114RT+LO6rKXszIGmQ9wN7iqmTx7mnUMLxdzxb0YNolaURClXHStZZt iue4AETeef6A/B5xU7ShbJwQQoVJ5+CPU1OlBYeMDhoifcCedkeZ6tWPU98BaF1+1P tvlc02i7/4iW7IXJUUw1uqMgaAaBEQ4a+FaLdIM6BVkjFFIxqXgBWKZAtESteXzfJy FuEuiXOV2sxRHSaJuKmlB6ox/pPpBuCAm4TfhC1zqzBAWVEqnnc0HkZuLf/GwiwcYt g/jJPGRAimPmuFSdgG4It4IoQ3TZP5DTRStWn5tvEadu0BQIV125qK9CkNrsQpD5Hc +hhp0e+Za5qBw== In-Reply-To: <878s39ms8w.fsf@gnu.org> References: <87k0mwdtk0.fsf@disroot.org> <878s39ms8w.fsf@gnu.org> Date: Wed, 16 Jun 2021 19:17:13 -0300 Message-ID: <871r91e9p2.fsf@disroot.org> Mime-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Marius. Em [2021-06-16 qua 23:09:19+0200], Marius Bakke escreveu: > It's not easily possible to install extensions with ungoogled-chromium, > apart from the two that are available directly through Guix. If the > user goes out of their way to install extensions, such as using a > browser from a different distro, there is little we can do. > > Mixing browser profiles between the vanilla and ungoogled Chromium is > not a supported use case. Warranty void. In my case, the Debian Chromium's profile was already there when I installed Guix's ungoogled-chromium. I didn't even notice that Guix's ungoogled-chromium cannot install extensions from the Chrome Store. > I'd accept a patch that warns or refuses to use a "tainted" browser > profile, or changes the default browser profile directory so it does not > conflict with vanilla. Unfortunately I cannot write such a patch; I would have to dedicate a large amount of time learning about Chromium's insides (which are reportedly byzantine) and I don't even know if I'll actually keep using Guix's ungoogled-chromium. But couldn't you report this to ungoogled-chromium upstream? > But I'm inclined to close this as "not-a-bug" for now. WDYT, Jorge? In my humble opinion, users should be communicated, especially users of Guix package manager on another GNU distribution. Maybe at least a warning in the package description that mixing Guix's ungoogled-chromium and host distribution's Chromium on the same profile is unsupported? Regards -- - https://stallmansupport.org "In Support of Richard Stallman" - I am Brazilian. I hope my English is correct and I welcome feedback. - https://www.defectivebydesign.org - https://www.gnu.org From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 04 Jan 2022 04:57:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Jorge P. de Morais Neto Cc: 49029@debbugs.gnu.org, Leo Famulari , Marius Bakke Received: via spool by 49029-submit@debbugs.gnu.org id=B49029.164127216923762 (code B ref 49029); Tue, 04 Jan 2022 04:57:01 +0000 Received: (at 49029) by debbugs.gnu.org; 4 Jan 2022 04:56:09 +0000 Received: from localhost ([127.0.0.1]:36728 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4brk-0006BC-Od for submit@debbugs.gnu.org; Mon, 03 Jan 2022 23:56:08 -0500 Received: from mail-qv1-f52.google.com ([209.85.219.52]:33687) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4bri-0006Ag-Dl for 49029@debbugs.gnu.org; Mon, 03 Jan 2022 23:56:06 -0500 Received: by mail-qv1-f52.google.com with SMTP id kk22so33311789qvb.0 for <49029@debbugs.gnu.org>; Mon, 03 Jan 2022 20:56:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=qJoZBBLzBWSXVDpkyBeibcN9F4GF9PGPNVcFhMuhlLU=; b=WJfdwtj1vpe/IWi4S/l6XbL+pDaEvhwGl0q7tQDIrI7JsRAxqmQhaUvBd4gVKEbJcW WBGroHRacN/NfAPSUz6mqR/hr6FITKE2LZ3CmCSnQUjcm8ooekvz33lIQ1kyMtcYG0Te 4OQLCjiBZfs9Qozfzxhy0jdqt6sX5z5z40TepOLaxfk2WC3nZSSAm2+TrwBenh+oJY/U aZJ6183stfyKMC7vnsdPqqcFzHG1jBo6chqyk5smhz/oEyBK9a6db8/VnV7l+OJVYdF8 IYZ3SuhAHHh5vqiCCjv6YXj0LbTmKUEoQK2b22gKrTqLlIzRnFpafxIsn7uPIE+hUTE+ 36kw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=qJoZBBLzBWSXVDpkyBeibcN9F4GF9PGPNVcFhMuhlLU=; b=IzEoKnQs0KClen3myXhHVD9Tz1mkV3Fe79ulIMSuR/rSNznrCzWpNr9zYpfWsdk6Ho pvBxxLnWDHe6UX6PKhuGqUFWgYReb9Zu4KkvrJHt/aVq55sz3ljde6VtZ14cFMnlg6nR 0z3Nb8748a2KayEQzYK4uoFFufXWkDD5KLsz7IWI2kcdZzVqseYxxI8m14iOwWoIqo3l e2t/9lOICyZXFHoZ0WHy2lMyV5UCk0NrtxMx46z6fE42g9ubfhspDnMVEaSpVneKXH+/ Mp6f39TRIGn6BmgbCgMwBQthPY6oupXxm7XDEUPxwQnBy/ykArAvSSdATBRPv615ON2y 0eEQ== X-Gm-Message-State: AOAM5304tYPPb5hODMjhJcM2R75KK6e5NUBgefhxKFB4TGf7Azu4uO+z DPGzyehUyrS3L9q82ew2SSVZSwKYTCU= X-Google-Smtp-Source: ABdhPJx3v63WLYhl6K+TIYlZ2bT5+E7IFmoSNOaOAjXU2Yg1dCelFt6bw2qdnkSI3I47pyTwnQHbsg== X-Received: by 2002:a05:6214:c87:: with SMTP id r7mr44277188qvr.2.1641272160640; Mon, 03 Jan 2022 20:56:00 -0800 (PST) Received: from hurd (dsl-152-60.b2b2c.ca. [66.158.152.60]) by smtp.gmail.com with ESMTPSA id x14sm11093379qko.110.2022.01.03.20.55.59 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 03 Jan 2022 20:56:00 -0800 (PST) From: Maxim Cournoyer References: <87k0mwdtk0.fsf@disroot.org> <878s39ms8w.fsf@gnu.org> <871r91e9p2.fsf@disroot.org> Date: Mon, 03 Jan 2022 23:55:59 -0500 In-Reply-To: <871r91e9p2.fsf@disroot.org> (Jorge P. de Morais Neto's message of "Wed, 16 Jun 2021 19:17:13 -0300") Message-ID: <878rvwumjk.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello Jorge, Jorge P. de Morais Neto writes: > Hi Marius. > > Em [2021-06-16 qua 23:09:19+0200], Marius Bakke escreveu: > >> It's not easily possible to install extensions with ungoogled-chromium, >> apart from the two that are available directly through Guix. If the >> user goes out of their way to install extensions, such as using a >> browser from a different distro, there is little we can do. >> >> Mixing browser profiles between the vanilla and ungoogled Chromium is >> not a supported use case. Warranty void. > > In my case, the Debian Chromium's profile was already there when I > installed Guix's ungoogled-chromium. I didn't even notice that Guix's > ungoogled-chromium cannot install extensions from the Chrome Store. > >> I'd accept a patch that warns or refuses to use a "tainted" browser >> profile, or changes the default browser profile directory so it does not >> conflict with vanilla. > > Unfortunately I cannot write such a patch; I would have to dedicate a > large amount of time learning about Chromium's insides (which are > reportedly byzantine) and I don't even know if I'll actually keep using > Guix's ungoogled-chromium. But couldn't you report this to > ungoogled-chromium upstream? With close to 1500 bugs open, we need *your* help :-). If you think this issue is worthy of bringing upstream, please see to it! Otherwise, I'm afraid I'll close this issue as not-a-bug as Marius suggested, as it appears to me reasonable that the Guix-installed ungoogled-chromium wouldn't know to police (especially outside of regular updates) software installed from external sources to Guix. Thank you, Maxim From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Jorge P. de Morais Neto Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 06 Jan 2022 11:35:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Maxim Cournoyer Cc: 49029@debbugs.gnu.org, Leo Famulari , Marius Bakke Received: via spool by 49029-submit@debbugs.gnu.org id=B49029.164146889216508 (code B ref 49029); Thu, 06 Jan 2022 11:35:02 +0000 Received: (at 49029) by debbugs.gnu.org; 6 Jan 2022 11:34:52 +0000 Received: from localhost ([127.0.0.1]:39796 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n5R2i-0004IB-3Y for submit@debbugs.gnu.org; Thu, 06 Jan 2022 06:34:52 -0500 Received: from knopi.disroot.org ([178.21.23.139]:54206) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n5R2g-0004I1-3Q for 49029@debbugs.gnu.org; Thu, 06 Jan 2022 06:34:50 -0500 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 7030A189A; Thu, 6 Jan 2022 12:34:48 +0100 (CET) X-Virus-Scanned: SPAM Filter at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mo4dY3L0inB0; Thu, 6 Jan 2022 12:34:47 +0100 (CET) From: Jorge P. de Morais Neto DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1641468887; bh=pItlkYCFqfSphxvbgkbKzVfXISs2+T9Pzf+8Atf/pYc=; h=From:To:Cc:Subject:In-Reply-To:References:Date; b=XYKImgS8g3KY9WzTQkPen3TZH7d81F6AGGWotZalMM8z6i8n6h0qS7H/iRLvIFJqc xnybKlatqWntedUryfkQSPIBqz6J6nlU5AWDGfsztFfWBazDab/tTahsDJaNKbTZd5 8RFrQapOL88KwQyA8kitjF0K8C+YTQqU4wpOPcrJTWOn2Ehz8oMCE3g7RZTDqx/b2o G/Jx8lXsMLK6NmD1lfZIdfiVvIy6EFraXgKsAFqTvKqoyg1rEA9YzgbdUhm1I8utqJ s2FaDMeYeJtsA8RPTRQHUf/LKNQbQojQuv40dEAYlnO0+oF65y/wAjqlnz01J3BhlP RQCp+R67me0UA== In-Reply-To: <878rvwumjk.fsf@gmail.com> References: <87k0mwdtk0.fsf@disroot.org> <878s39ms8w.fsf@gnu.org> <871r91e9p2.fsf@disroot.org> <878rvwumjk.fsf@gmail.com> Date: Thu, 06 Jan 2022 08:34:34 -0300 Message-ID: <87r19l14j9.fsf@disroot.org> Mime-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello! Em [2022-01-03 seg 23:55:59-0500], Maxim Cournoyer escreveu: > With close to 1500 bugs open, we need *your* help :-). If you think > this issue is worthy of bringing upstream, please see to it! Do you know of a way of bringing this issue upstream without a GitHub account? I could not find one. Kind regards -- - Many people hate injustice but few check the facts; this causes more injustice. Ask me about - I am Brazilian. I hope my English is correct and I welcome feedback. - Free Software Supporter: https://www.fsf.org/free-software-supporter - If an email of mine arrives at your spam box, please notify me. From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 06 Jan 2022 13:47:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Jorge P. de Morais Neto Cc: 49029@debbugs.gnu.org, Leo Famulari , Marius Bakke Received: via spool by 49029-submit@debbugs.gnu.org id=B49029.16414768145207 (code B ref 49029); Thu, 06 Jan 2022 13:47:01 +0000 Received: (at 49029) by debbugs.gnu.org; 6 Jan 2022 13:46:54 +0000 Received: from localhost ([127.0.0.1]:39911 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n5T6T-0001Lu-QJ for submit@debbugs.gnu.org; Thu, 06 Jan 2022 08:46:53 -0500 Received: from mail-qk1-f178.google.com ([209.85.222.178]:41616) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n5T6Q-0001Lf-Q4 for 49029@debbugs.gnu.org; Thu, 06 Jan 2022 08:46:52 -0500 Received: by mail-qk1-f178.google.com with SMTP id m2so2637728qkd.8 for <49029@debbugs.gnu.org>; Thu, 06 Jan 2022 05:46:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=apoDgqp5VIKnSgeePZ2BO/WOKZZxKR/DVkH4Ghm0MRc=; b=eHZK2mnQzJ+ZFbzFEVsjcriH4Blw3iDm6fwtLpNQU0SNo72HrK9ST0f/FhklLb37EF L7vTcVjIaoKR8ssv6tDEdzrn0CPLZRa09U/88kzZ0P0yhj8NDq7F3GQlO/mS+LsBPozB aPdO+mk8PZuYn477i08tzjO6ZFrCwl67oxFQg6W4ClZ9FBvRNsp7BoXsgUFRXDt3TJAG PCT0Cld1CKs1qmp0qHc0dxqbbDf8qAFc8xa6OJIjM3YbDWH3n86aia3PJDlMtgcMgaGT 7R6uRdxRVo99dJzG2wOZpT6U5v3xmMjW8Byb8+Q/F4d3Wv5vmTopf00okZhSxlyHNnub wN+w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=apoDgqp5VIKnSgeePZ2BO/WOKZZxKR/DVkH4Ghm0MRc=; b=uVRP6cWGUrXcXv9dQB2DYTODeI11+RjuXxhf9BrGThbR4FRU9iYaOCjyKbJq6FoqQ/ 7y1kagdLJ7L8MppYVbv5UG9++0kQI46SeqBepNfePzNteblkG2NDSPdMdZZvGsfUp6H9 X3yhE/cJdvSjkkJF7fNAamfvv0UU8s1gIjiW4m4HDVharQctTqtRzaGmnEjOiXvuPSY3 VIY3+1F8vn0tB196F6l3zZLfsk4WjTHK/kYVoiHpQhpEueHkfsroCMEtjEZR+PuKqzeH TjKZMuwjI2YdWp2ucojnDedJxZZeArmDFS4WhJ93X/fOjLxQUP3as0EBSYFJNOujP2ny vAsA== X-Gm-Message-State: AOAM530MeV6KrMI4lHGw3ghF4NhZbvXTHhe8yqLZyy46jneU6Hm468bx vpTNRD5x2HcUv+CHlssLiVhpAL3niQM= X-Google-Smtp-Source: ABdhPJxpTklFm08bX4iPVGW7FQNAHytq640FiOQrO0QLOJLpzv8IA2rJ8dTLWwIv6TRnnQ/e8jtf5Q== X-Received: by 2002:a37:a244:: with SMTP id l65mr42052277qke.672.1641476805015; Thu, 06 Jan 2022 05:46:45 -0800 (PST) Received: from hurd (dsl-10-146-199.b2b2c.ca. [72.10.146.199]) by smtp.gmail.com with ESMTPSA id v12sm1530485qkl.50.2022.01.06.05.46.44 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 06 Jan 2022 05:46:44 -0800 (PST) From: Maxim Cournoyer References: <87k0mwdtk0.fsf@disroot.org> <878s39ms8w.fsf@gnu.org> <871r91e9p2.fsf@disroot.org> <878rvwumjk.fsf@gmail.com> <87r19l14j9.fsf@disroot.org> Date: Thu, 06 Jan 2022 08:46:43 -0500 In-Reply-To: <87r19l14j9.fsf@disroot.org> (Jorge P. de Morais Neto's message of "Thu, 06 Jan 2022 08:34:34 -0300") Message-ID: <87bl0prn7g.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Jorge P. de Morais Neto writes: > Hello! > > Em [2022-01-03 seg 23:55:59-0500], Maxim Cournoyer escreveu: > >> With close to 1500 bugs open, we need *your* help :-). If you think >> this issue is worthy of bringing upstream, please see to it! > > Do you know of a way of bringing this issue upstream without a GitHub > account? I could not find one. You could find one of the project maintainers email address in the git history of the project and send them a private email with your suggestion. Thanks, Maxim From unknown Sat Jun 21 03:30:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender Resent-From: Jorge P. de Morais Neto Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 07 Jan 2022 00:10:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49029 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Maxim Cournoyer Cc: 49029@debbugs.gnu.org, Leo Famulari , Marius Bakke Received: via spool by 49029-submit@debbugs.gnu.org id=B49029.16415141779900 (code B ref 49029); Fri, 07 Jan 2022 00:10:01 +0000 Received: (at 49029) by debbugs.gnu.org; 7 Jan 2022 00:09:37 +0000 Received: from localhost ([127.0.0.1]:42667 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n5cp6-0002Zc-Nb for submit@debbugs.gnu.org; Thu, 06 Jan 2022 19:09:36 -0500 Received: from knopi.disroot.org ([178.21.23.139]:59860) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n5cp1-0002ZK-Ub for 49029@debbugs.gnu.org; Thu, 06 Jan 2022 19:09:34 -0500 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 8B1FA56B84; Fri, 7 Jan 2022 01:09:30 +0100 (CET) X-Virus-Scanned: SPAM Filter at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OUXEsAPbDWwI; Fri, 7 Jan 2022 01:09:29 +0100 (CET) From: Jorge P. de Morais Neto DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1641514168; bh=HCEmyCtl53JCbKMFTTmqUyGWsXCWp0YHjbLZ4ouVw+E=; h=From:To:Cc:Subject:In-Reply-To:References:Date; b=hIHgr0PlrGxkNL/wDLpRrWUUXI4xcRCNTQBflRc41WBqhUIX+biaU6dKEW3e59t4q 4m7ggF2Goi0fKPVxXCKoBOCSR2n3Oe5RYmLeXiQoAYVWK+Qz2oIeXaar93sTQ0LGrN Z7QGFO/L3jg2AQybI5GvDCZTj/pqHGvhYeYhru6Un7kkK/s7Vc9Fbnrb824Oi+jA2/ T6s4aE7aa+vw+ro1Yy8Qduh/WOjEsw6g8IJJKac6icPpJmAehbL977cpvFce5abJ3T jLNgszhgVWrB3sfvcD0cLZPzniXn/IRYjPPofaZTZufLPWLdhwdF2autTcxjdDGM7r U43ynFkokV0OQ== In-Reply-To: <87bl0prn7g.fsf@gmail.com> References: <87k0mwdtk0.fsf@disroot.org> <878s39ms8w.fsf@gnu.org> <871r91e9p2.fsf@disroot.org> <878rvwumjk.fsf@gmail.com> <87r19l14j9.fsf@disroot.org> <87bl0prn7g.fsf@gmail.com> Date: Thu, 06 Jan 2022 21:09:23 -0300 Message-ID: <87lezs1k5o.fsf@disroot.org> Mime-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Em [2022-01-06 qui 08:46:43-0500], Maxim Cournoyer escreveu: > You could find one of the project maintainers email address in the git > history of the project and send them a private email with your > suggestion. I have just emailed Eloston. I will inform here if he replies. Kind regards -- - Please adopt free/libre formats like PDF, Org, LaTeX, ODF, Opus, WebM and 7z. - Libre apps for AOSP (Replicant, LineageOS, etc.) and Android: F-Droid - https://www.gnu.org/philosophy/free-sw.html "What is free software?" From unknown Sat Jun 21 03:30:45 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: "Jorge P. de Morais Neto" Subject: bug#49029: closed (Re: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender) Message-ID: References: <87v8yvpgd0.fsf@gmail.com> <87k0mwdtk0.fsf@disroot.org> X-Gnu-PR-Message: they-closed 49029 X-Gnu-PR-Package: guix Reply-To: 49029@debbugs.gnu.org Date: Fri, 07 Jan 2022 18:10:03 +0000 Content-Type: multipart/mixed; boundary="----------=_1641579003-20382-1" This is a multi-part message in MIME format... ------------=_1641579003-20382-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #49029: ungoogled-chromium failed to disable malware extension The Great Su= spender which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 49029@debbugs.gnu.org. --=20 49029: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D49029 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1641579003-20382-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 49029-done) by debbugs.gnu.org; 7 Jan 2022 18:10:01 +0000 Received: from localhost ([127.0.0.1]:45847 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n5tgf-0005IE-3k for submit@debbugs.gnu.org; Fri, 07 Jan 2022 13:10:01 -0500 Received: from mail-qv1-f44.google.com ([209.85.219.44]:33639) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n5tgc-0005Hx-9S for 49029-done@debbugs.gnu.org; Fri, 07 Jan 2022 13:09:59 -0500 Received: by mail-qv1-f44.google.com with SMTP id kk22so6250711qvb.0 for <49029-done@debbugs.gnu.org>; Fri, 07 Jan 2022 10:09:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=DPH8KgKAnSOb6cONngD94lkTcSX15ze1eWnNhmxCMf4=; b=X/284IobJpJ4N9Q0sEqjy/DiE7Jq+7Wa2n2FHEtLkIPbvp6sTSIuGvAFWbMGjUDJKL i7RnpvnizJUPOpasXd+UjXaTGpgF53RorE1qhQnx4RmsL4ispztbu/lz9HOw+o6uErAg CmXOchvzuyySfaZhsMNdfWzWGV+x3db7XP0Pw+RoY94wukICnxGQ4Mi5zeskkEdlBr/f n3XfAWccA1c2EhbcPHtv95/pHwxySNUj83yTpwPcx91QrK/HbdXhOLoZDl1P1KizNJkp yFXGlZxaBl70HwBCiEgZ/1aeyfqliR9nyPDlKH4W4XZhSYe8cN76X2N4lHxLy+hRXEAY GLKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=DPH8KgKAnSOb6cONngD94lkTcSX15ze1eWnNhmxCMf4=; b=TZRiLmB1pD+lNI0wG1D7mAmJiWvr3LcR0PHJWzu7d4kp3nMsry7rEnOVllg+y5gxxo azZO+o/KR82mqx1V0Lh0klUlsNUY5HtV6IeWw2GPz4xaO0f+Xhl3suNWXveZxSpT3xcR ygCMjY8WtziApIagleoHcgZH/F83C1wLp0wXf7TfINi7WVQG6KCVwgti9vrdZuJ0070h aL2+MCGLk62qnJQNvBt8ixNwXO+A0xAteN6REmj7wv3pjhYGR0irJBld16cgyFtevfLy 9KsqwCrq/HpzafbaBjoU9SA97608SAuL8K3KqDhj6NwNRXZrwvCMjwcZdKyZZHPlS/E5 KS0Q== X-Gm-Message-State: AOAM531PZNyHiCXoi7QH8xp06hnuYnwKoRc7TyqJz7g1PNV+SlZzb1pw D7IiucfEiBeRXMLuAp/d1JkIk6rIimGJGA== X-Google-Smtp-Source: ABdhPJycSDZC6GmMjWSiEF3/MhECKMjocLHKPFJIBOHRiykka6sImALY5+0siYuXWOCkNXOYqTki+Q== X-Received: by 2002:a05:6214:c69:: with SMTP id t9mr59811100qvj.114.1641578992298; Fri, 07 Jan 2022 10:09:52 -0800 (PST) Received: from hurd (dsl-149-254.b2b2c.ca. [66.158.149.254]) by smtp.gmail.com with ESMTPSA id bi9sm3861152qkb.60.2022.01.07.10.09.51 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 07 Jan 2022 10:09:51 -0800 (PST) From: Maxim Cournoyer To: Jorge P. de Morais Neto Subject: Re: bug#49029: ungoogled-chromium failed to disable malware extension The Great Suspender References: <87k0mwdtk0.fsf@disroot.org> <878s39ms8w.fsf@gnu.org> <871r91e9p2.fsf@disroot.org> <878rvwumjk.fsf@gmail.com> <87r19l14j9.fsf@disroot.org> <87bl0prn7g.fsf@gmail.com> <87lezs1k5o.fsf@disroot.org> Date: Fri, 07 Jan 2022 13:09:47 -0500 In-Reply-To: <87lezs1k5o.fsf@disroot.org> (Jorge P. de Morais Neto's message of "Thu, 06 Jan 2022 21:09:23 -0300") Message-ID: <87v8yvpgd0.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 49029-done Cc: Leo Famulari , 49029-done@debbugs.gnu.org, Marius Bakke X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Jorge, Jorge P. de Morais Neto writes: > Hi, > > Em [2022-01-06 qui 08:46:43-0500], Maxim Cournoyer escreveu: > >> You could find one of the project maintainers email address in the git >> history of the project and send them a private email with your >> suggestion. > > I have just emailed Eloston. I will inform here if he replies. Thank you for doing so. I'll close this on Guix side, as the discussion has now moved to upstream, but feel free to reply with their response (if any) here, for the record! Thank you, Maxim ------------=_1641579003-20382-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 14 Jun 2021 21:29:22 +0000 Received: from localhost ([127.0.0.1]:47875 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lsu94-0002Wg-6c for submit@debbugs.gnu.org; Mon, 14 Jun 2021 17:29:22 -0400 Received: from lists.gnu.org ([209.51.188.17]:52278) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lsu92-0002WZ-8k for submit@debbugs.gnu.org; Mon, 14 Jun 2021 17:29:21 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33392) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lsu91-00035l-Uk for bug-guix@gnu.org; Mon, 14 Jun 2021 17:29:20 -0400 Received: from knopi.disroot.org ([178.21.23.139]:44678) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lsu8z-0003Ng-E4 for bug-guix@gnu.org; Mon, 14 Jun 2021 17:29:19 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 48FAE5BE7E for ; Mon, 14 Jun 2021 23:29:15 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k9xt2-_ZwBlG for ; Mon, 14 Jun 2021 23:29:13 +0200 (CEST) From: "Jorge P. de Morais Neto" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1623706152; bh=bxosl3uIKAEyh0wTlaF151+yEwnv2dFlMPoTDZ5KXEg=; h=From:To:Subject:Date; b=UGxVg0ERYVii7vCfTtek6R09AO+EuB1K2rQuvfP8OF6D/1dztxaPR4ZEfOiRGpDWb gxmXzSeLT8Oa82Me85ekBll55v6Y/oy1gFeCyOTztODvIs83bIthQ2kfDArqdrxlHx BUNiyRZj8iXg5OGWFay13H5g8tJTJWJ9uh+T3JEBFMH8WhD+veoDpiNVedUz9kg97W h9ddbtHn+xXla6Kui4fOyorNJJYyhbhmRmq8nbYcY+CKBIvDk5sapthtLWJUN+CTVa 6pzmYx64kxB/XnlEOwdlfPT2wu9/qhrXbVuNLJTOC363nQtAL1A+l1o5y9Y//HDpYI Dd2y452OH3ntQ== To: bug-guix@gnu.org Subject: ungoogled-chromium failed to disable malware extension The Great Suspender Date: Mon, 14 Jun 2021 18:29:03 -0300 Message-ID: <87k0mwdtk0.fsf@disroot.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=178.21.23.139; envelope-from=jorge+list@disroot.org; helo=knopi.disroot.org X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Hi. I use Guix atop Debian=C2=B9 testing (currently bullseye). I normally browse the web on GNU IceCat and sometimes Firefox and Emacs EWW. I only use (ungoogled-)chromium for the rare websites that don't work on the other browsers. Long ago I installed in Chromium the extension The Great Suspender, and only today (months after G$$gle Chrome, according to news articles) did my Chromium disable it for having malware. And the only Chromium that did that for me was Debian's. So, I hypothesize that the ungoogling process has disabled Chromium's ability to automatically disable malware extensions. If true, that is a serious defect of ungoogled-chromium and Guix should make sure that users at least know about it. There could be a warning in the Guix package description *and* on the browser's start page. Thank you for your work on GNU! Regards =C2=B9 When I find the time I intend to migrate to PureOS for superior libre software ethics. --=20 - https://stallmansupport.org "In Support of Richard Stallman" - If an email of mine arrives at your spam box, please notify me. - Please adopt free/libre formats like PDF, ODF, Org, LaTeX, Opus, WebM and= 7z. - Free/libre software for Replicant, LineageOS and Android: https://f-droid= .org - [[https://www.gnu.org/philosophy/free-sw.html][What is free software?]] ------------=_1641579003-20382-1--