Search found 2173 matches

by kurotsugi
16 Jun 2019 21:24
Forum: Testing Zone
Topic: Upstream in /opt
Replies: 3
Views: 58

Re: Upstream in /opt

I'm not sure if there're a consensus about where to put something inside the system. everything seems to be based on practicality, i.e : do whatever easy for you. /opt is mostly used in situation when you don't know/don't want to know whatever structure inside your /directory. simply throw everythin...
by kurotsugi
15 Jun 2019 21:31
Forum: Testing Zone
Topic: Firefox/waterfox and DoH - what default to choose?
Replies: 20
Views: 243

Re: Firefox/waterfox and DoH - what default to choose?

trr mode in 5 didn't work for my firefox. only zero (disable mode) works. I'm using debian's build so I'm not sure if this behaviour is same across all build. the funny thing is that the default setting is zero. however, I need to set trr mode to something else then reset it to make it work
by kurotsugi
15 Jun 2019 13:40
Forum: Testing Zone
Topic: Firefox/waterfox and DoH - what default to choose?
Replies: 20
Views: 243

Re: Firefox/waterfox and DoH - what default to choose?

there's a DoH list for dnscrypt https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v2/public-resolvers.md the technology is still new so there isn't many option. in term of performance and security, the top four would be cloudflare, google, quad9 and opendns. cloudflare is a new pl...
by kurotsugi
14 Jun 2019 08:37
Forum: Testing Zone
Topic: Firefox/waterfox and DoH - what default to choose?
Replies: 20
Views: 243

Re: Firefox/waterfox and DoH - what default to choose?

it is available on about:config. well...at least for now :lol: network.trr.mode=0 will disable firefox DoH and it will use whatever in your system instead. since it's using the regular conf method, it's unlikely that someone will hack it. I do get that it should impact on the issue of mitm - but is ...
by kurotsugi
14 Jun 2019 06:22
Forum: Testing Zone
Topic: Firefox/waterfox and DoH - what default to choose?
Replies: 20
Views: 243

Re: Firefox/waterfox and DoH - what default to choose?

AFAIK with DoH the security lies more on the site owner rather than either the browser nor the dns server. this "certificate" stuff should not confused with earlier firefox issue. some people actually prefer DoT instead of DoH since it retain all the control that we have. mozilla's decision to make ...
by kurotsugi
13 Jun 2019 21:57
Forum: Testing Zone
Topic: Firefox/waterfox and DoH - what default to choose?
Replies: 20
Views: 243

Re: Firefox/waterfox and DoH - what default to choose?

someone actually already busted DoH :lol: there are three things, the address, the sign/certificate, and the content of message. both the address and the sign are on plain text so anyone actually could easily start from there. decrypting the packet is also possible. though, I never heard that someon...
by kurotsugi
13 Jun 2019 06:52
Forum: Testing Zone
Topic: Firefox/waterfox and DoH - what default to choose?
Replies: 20
Views: 243

Re: Firefox/waterfox and DNSSEC - what default to choose?

no more blocking anything via host files or pihole I don't understand why DoH could interferee with the hosts file blocking mechanism. AFAIK the browser check that file first before anything else. did I missed something here? perhaps you were reading about DoH makes blocking impossible. I believe t...
by kurotsugi
13 Jun 2019 06:12
Forum: Bug Control
Topic: systemd internal default resolver might leak to Google
Replies: 11
Views: 130

Re: systemd internal default resolver might leak to Google

nope. I think I understand it correctly :3 when someone without technical knowledge connect his device, he expect his device works OOTB. this is epecially true for a new linux user (which is one of our main market). even for someone with proper technical knowledge it's quite a long step to know whic...
by kurotsugi
13 Jun 2019 00:57
Forum: Bug Control
Topic: systemd internal default resolver might leak to Google
Replies: 11
Views: 130

Re: systemd internal default resolver might leak to Google

that's good for some people like you and me but most people want things just works. I mean, it's called fallback for a reason :lol:
well...my personal choice would be:
1. empty
2. cloudfare
3. opendns
by kurotsugi
13 Jun 2019 00:40
Forum: Testing Zone
Topic: Firefox/waterfox and DoH - what default to choose?
Replies: 20
Views: 243

Re: Firefox/waterfox and DNSSEC - what default to choose?

the technology seems good to me, at least on paper. that's it. regardless the technology you'll still need to "trust" on something. it could be either your vpn provider or your dns server. it might be better to put "trust" out of the discussion and only discuss objectively about what we know about t...
by kurotsugi
12 Jun 2019 01:33
Forum: Bug Control
Topic: Waterfox source
Replies: 9
Views: 174

Re: Waterfox source

I've never heard that if someone create a package he's obliged to upload the source code. this responsibility usually fall to the one who modified the source code. I think ilu is right about it
by kurotsugi
12 Jun 2019 01:30
Forum: Bug Control
Topic: systemd internal default resolver might leak to Google
Replies: 11
Views: 130

Re: systemd internal default resolver might leak to Google

last time I've heard that fedora/systemd is pushing internal resolver so I believe there won't be a radical decision soon. the fallback dns is set by "someone" to google just because they need something which nearly always work in all condition. AFAIK it should be harmless since the fallback dns onl...
by kurotsugi
09 Jun 2019 17:36
Forum: Bug Control
Topic: systemd internal default resolver might leak to Google
Replies: 11
Views: 130

Re: systemd internal default resolver might leak to Google

perhaps we should hear other's opinion first. last time I've heard that redhat is pushing to local resolver so the problem AFAIK is a theorical problem. even if they use google dns instead, debian is conservative so it won't happened in debian realm soon. considering the timeline, we will have rough...
by kurotsugi
09 Jun 2019 10:54
Forum: Bug Control
Topic: systemd internal default resolver might leak to Google
Replies: 11
Views: 130

Re: systemd internal default resolver might leak to Google

I haven't followed systemd development recently but IIRC this mechanism is rarely used so it should not a major concern for most of us (i.e: it's not used unless there's no other conf). personally I prefer to not mess with resolver setting since it's kind of personal setting for most of us
by kurotsugi
28 May 2019 05:13
Forum: Testing Zone
Topic: Breakage and News tracker for debian testing [buster]
Replies: 179
Views: 43046

Re: Breakage and News tracker for debian testing [buster]

I'd say it's quite a peaceful day for debian testing. I've created new thread for next testing here viewtopic.php?f=78&t=7539
by kurotsugi
28 May 2019 05:12
Forum: Testing Zone
Topic: Breakage and News Tracker for Debian Testing [Bullseye]
Replies: 2
Views: 57

Breakage and News Tracker for Debian Testing [Bullseye]

Here's the breakage and news tracker for debian testing (currently : bullseye)

...
by kurotsugi
21 May 2019 21:11
Forum: Testing Zone
Topic: problem with gdebi (SolydX, ee) [SOLVED]
Replies: 31
Views: 476

Re: problem with gdebi (SolydX, ee)

gdedebi is redundant and buggy. I thougt it was obsolete but perhaps I'm wrong. it's just a front end so it doesn't really matter. you can use dpkg for that purpose

Go to advanced search