Firefox 36+ listens on UDP:1900

older
Re: [Cryptography] "Most Americans...

Georgi Guninski

23 Mar 2015 23 Mar '15

1:10 p.m.

Firefox 36+ listens on UDP:1900, which appears SSDP. Search the web or check the fiasco: https://bugzilla.mozilla.org/show_bug.cgi?id=1111967 This well might have privacy and/or security implications. As is probably known, my opinion of Firefox is close to that of exploder. -- georgi

Show replies by date

Cathal Garvey

23 Mar 23 Mar

1:22 p.m.

Anything to do with Firefox Hello, I wonder? Which is terrible, by the way, and not something I'd recommend. On 23/03/15 13:10, Georgi Guninski wrote:

...

Firefox 36+ listens on UDP:1900, which appears SSDP.

Search the web or check the fiasco: https://bugzilla.mozilla.org/show_bug.cgi?id=1111967

This well might have privacy and/or security implications.

As is probably known, my opinion of Firefox is close to that of exploder.

-- Scientific Director, IndieBio Irish Programme Got a biology-inspired business idea that $50,000 - & 3 months in a well equipped lab could accelerate? Apply for the Summer programme in Ireland: http://indie.bio/apply-to-ireland Twitter: @onetruecathal Phone: +353876363185 miniLock: JjmYYngs7akLZUjkvFkuYdsZ3PyPHSZRBKNm6qTYKZfAM peerio.com: cathalgarvey

rysiek

1:43 p.m.

Dnia poniedziałek, 23 marca 2015 15:10:47 Georgi Guninski pisze:

...

Firefox 36+ listens on UDP:1900, which appears SSDP.

Search the web or check the fiasco: https://bugzilla.mozilla.org/show_bug.cgi?id=1111967

This well might have privacy and/or security implications.

FFS. Also semi-related: https://bugzilla.mozilla.org/show_bug.cgi?id=1012209 Go home, Mozilla. You're drunk.

...

As is probably known, my opinion of Firefox is close to that of exploder.

"Firefox: at least still better than closed source shite" -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

Georgi Guninski

2:17 p.m.

On Mon, Mar 23, 2015 at 02:43:53PM +0100, rysiek wrote:

...

Go home, Mozilla. You're drunk.

Just ranting. It is common knowledge that Mozilla are Google satellite, releasing default Bing versions when they bargain for money. More importantly, they ditched off their lead developer, Brendan Eich, the creator of javascript at Netscape times, because of made up gay-related donation scandal. -- georgi

Cathal Garvey

2:38 p.m.

...

It is common knowledge that Mozilla are Google satellite, releasing default Bing versions when they bargain for money.

It would be lovely if more people ponied up to the Foundation so they didn't have to make these tiny-yet-big-impact bargains.

...

More importantly, they ditched off their lead developer, Brendan Eich, the creator of javascript at Netscape times, because of made up gay-related donation scandal.

Well, it wasn't made-up, he donated to an anti-equality campaign (which is his right!) but put Mozilla's name next to his vote, which is not OK. They didn't fire him IIRC, he stepped down after a wave of criticism which was probably excessive. Still, if I were a Mozillan I wouldn't want a CEO who had a prior history of using the company name to forward a personal religious agenda, no matter how great a developer he is. All of which is outside scope for this list, so I'll stop there. Firefox Hello, which might be to blame, is on-topic though; is that module even open source? Mozilla are really sinking fast (ahem, EME) as a thought-leading ideology hub, so it wouldn't surprise me to learn they were bundling closed-source-open-port-ware. On 23/03/15 14:17, Georgi Guninski wrote:

...

On Mon, Mar 23, 2015 at 02:43:53PM +0100, rysiek wrote:

...
Go home, Mozilla. You're drunk.

Just ranting.

It is common knowledge that Mozilla are Google satellite, releasing default Bing versions when they bargain for money.

More importantly, they ditched off their lead developer, Brendan Eich, the creator of javascript at Netscape times, because of made up gay-related donation scandal.

Georgi Guninski

3:06 p.m.

On Mon, Mar 23, 2015 at 02:38:12PM +0000, Cathal Garvey wrote:

...

...
More importantly, they ditched off their lead developer, Brendan Eich, the creator of javascript at Netscape times, because of made up gay-related donation scandal.

Well, it wasn't made-up, he donated to an anti-equality campaign (which is his right!) but put Mozilla's name next to his vote, which is not OK.

I continue to believe it was made up. What is a reference that BE put mozilla on the donation? This might be just employment and many donors put $X$ in that box. I suspect corporations can't donate on such matters, at least in a relatively sane society, might be wrong. On second thought, if Mozilla donated anti-gay why it is still not boycotted by gays?

Nikos Roussos

3:14 p.m.

On Mon, Mar 23, 2015 at 4:38 PM, Cathal Garvey wrote:

...

Firefox Hello, which might be to blame, is on-topic though; is that module even open source? Mozilla are really sinking fast (ahem, EME) as a thought-leading ideology hub, so it wouldn't surprise me to learn they were bundling closed-source-open-port-ware.

Hello is part of Firefox's codebase, so yes it's fully Open Source. https://hg.mozilla.org/mozilla-central/file/bc85c479668a/browser/components/... Same goes for EME. The Firefox implementation is Open Source.

Cathal Garvey

4:05 p.m.

...

Same goes for EME. The Firefox implementation is Open Source.

Well. The "sandbox" in which closed-source EME malware runs is Open Source, the EME malware itself is not; if it were, it wouldn't achieve its intended goals of preventing the user from accessing media without interference. On 23/03/15 15:14, Nikos Roussos wrote:

...

On Mon, Mar 23, 2015 at 4:38 PM, Cathal Garvey wrote:

...
Firefox Hello, which might be to blame, is on-topic though; is that module even open source? Mozilla are really sinking fast (ahem, EME) as a thought-leading ideology hub, so it wouldn't surprise me to learn they were bundling closed-source-open-port-ware.

Hello is part of Firefox's codebase, so yes it's fully Open Source. https://hg.mozilla.org/mozilla-central/file/bc85c479668a/browser/components/...

Same goes for EME. The Firefox implementation is Open Source.

Nikos Roussos

4:48 p.m.

On Mon, Mar 23, 2015 at 6:05 PM, Cathal Garvey wrote:

...

...
Same goes for EME. The Firefox implementation is Open Source.

Well. The "sandbox" in which closed-source EME malware runs is Open Source, the EME malware itself is not; if it were, it wouldn't achieve its intended goals of preventing the user from accessing media without interference.

I guess you are talking about the CDM module. Yes, that's not Open Source, but that doesn't ship along with Firefox. It's pretty much the same as with NPAPI plugins. Implementation is Open Source, but (for instance) Flash plugin is not. Thus it's not shipped with Firefox.

rysiek

28 Mar 28 Mar

8:53 p.m.

Dnia poniedziałek, 23 marca 2015 16:05:12 Cathal Garvey pisze:

...

...
Same goes for EME. The Firefox implementation is Open Source.

Well. The "sandbox" in which closed-source EME malware runs is Open Source, the EME malware itself is not; if it were, it wouldn't achieve its intended goals of preventing the user from accessing media without interference.

Hence implementing EME will do no good for Mozilla, and is a lost chance to take a stand: http://rys.io/en/141 -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

Georgi Guninski

23 Mar 23 Mar

4:51 p.m.

On Mon, Mar 23, 2015 at 02:38:12PM +0000, Cathal Garvey wrote:

...

.... Mozilla are really sinking fast (ahem, EME)

IMHO this won't happen while google are pouring on them "money for nothing and chicks for free" (for the younger generation this is a song). -- georgi

rysiek

28 Mar 28 Mar

8:59 p.m.

Dnia poniedziałek, 23 marca 2015 18:51:40 Georgi Guninski pisze:

...

On Mon, Mar 23, 2015 at 02:38:12PM +0000, Cathal Garvey wrote:

...
.... Mozilla are really sinking fast (ahem, EME)

IMHO this won't happen while google are pouring on them

"money for nothing and chicks for free"

(for the younger generation this is a song).

Shit, does the fact that I was acutely aware of this make me the older generation? Dang. Also, the music video is semi-relevant to this list, too! "The music video for the song featured early computer animation illustrating the lyrics. The video was one of the first uses of computer-animated human characters and was considered ground-breaking at the time of its release." -- http://en.wikipedia.org/wiki/Money_for_Nothing_(song)#Music_video inb4 "ooh minecraft" -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

Georgi Guninski

29 Mar 29 Mar

5:18 p.m.

On Sat, Mar 28, 2015 at 09:59:33PM +0100, rysiek wrote:

...

...
"money for nothing and chicks for free"

(for the younger generation this is a song).

Shit, does the fact that I was acutely aware of this make me the older generation? Dang.

I suspect so, but the god of your universe knows better ;) -- georgi

Tom Ritter

24 Mar 24 Mar

11:51 a.m.

On 23 March 2015 at 09:38, Cathal Garvey wrote:

...

Well, it wasn't made-up, he donated to an anti-equality campaign (which is his right!) but put Mozilla's name next to his vote, which is not OK. ... All of which is outside scope for this list, so I'll stop there.

This is a close-to-but-not-exact recounting. His disclosure of his employer was required by state law, and was neither a statement of support by the company nor his attempt to make it so. https://brendaneich.com/2012/04/community-and-diversity/ http://www.heritage.org/research/reports/2009/10/the-price-of-prop-8 -tom

Cathal Garvey

12:07 p.m.

Thanks for that perspective; from without, it looked like he was adding it voluntarily to tie his funding to Mozilla. I still stand by the right of employees to protest an employer who votes against their rights, but my opinion of Eich is marginally higher, knowing that he wasn't deliberately tarnishing Mozilla for his own agenda. I strongly disagree with his views, but I respect that he has a right to have them. If his views conflict with his suitability for a role or employment though, that's entirely on him and I don't see that it deserves a white-wash. We're soon to have a referendum on marriage equality here in Ireland, and if my employer were campaigning actively against it (they are not!), I'd be quick to raise my voice. On 24/03/15 11:51, Tom Ritter wrote:

...

On 23 March 2015 at 09:38, Cathal Garvey wrote:

...
Well, it wasn't made-up, he donated to an anti-equality campaign (which is his right!) but put Mozilla's name next to his vote, which is not OK. ... All of which is outside scope for this list, so I'll stop there.

This is a close-to-but-not-exact recounting. His disclosure of his employer was required by state law, and was neither a statement of support by the company nor his attempt to make it so.

https://brendaneich.com/2012/04/community-and-diversity/ http://www.heritage.org/research/reports/2009/10/the-price-of-prop-8

-tom

3478

Age (days ago)

3484

Last active (days ago)

List overview

Download

14 comments

5 participants

participants (5)

Cathal Garvey
Georgi Guninski
Nikos Roussos
rysiek
Tom Ritter