Re: Mozilla Cloud non-Decryptable Download?

[email protected] Sun, 1 Nov 2015 20:38:46 +0100
Newsgroups	gmane.comp.mozilla.security
Message-ID	<20151101193846.GB6112@g0n>
On 151101-13:31-0500, Julien Vehent wrote:
> On Sun  1.Nov'15 at 17:19:59 +0100, [email protected] wrote:
> > So, where are the ingredients to gunzip that file?
> 
> Gzip compression is a standard feature of HTTP.
I'm familiar with that. I gunzip'd lots of data from tcp stream.

> The data is simply
> compressed by the web servers that serve it to Firefox.
That's generally the case, sure. I know that. But I'm not talking
generally here. I have posted what anybody in the world, and esp.
Mozilla devs with complete ease, can check. Not repeating. Gave all the
links. Even repeated the explanation. Why did you cut it out?

Yes why did you cut it out and simply talk generally what I know, and
what even beginners know?

Other readers, pls. there is no need to reply to this talk here. I am
replying out of courtesy, not out of need.

Pls reply to my previous emails, esp. my immediately previous email to
this email, the one that Julian cut out the real information out, or, if
the link will show correctly (as it does no on phpBB-driven Gentoo
Forums, where the link must be pasted into your browser's address bar,
(as I explained in
https://forums.gentoo.org/viewtopic-t-1031758.html#7835158 calling Goog
the rapist of standars; sorry!, I had to)...

Reply to, if the link will show correctly (sending with the good and
honest Mutt):

https://groups.google.com/d/msg/mozilla.dev.security/abSHPU4EaP8/Tyd_nEh5CAAJ

please. Thank you!


> 
> I'm not familiar with gzip's internal, but I can only imagine that the
> "encryption" error is a misreading of the file. Maybe you're missing
> chunks? Maybe your extraction process corrupted the data?
>
I'll give you the margin of error possibility, here.

But, to me, it does not look like a gzip error. I think gzip is
reporting what is sees, gzip is stating what is examined and found out
for being the case.

But the thing is, those files are verifiable that they happened to me,
to my machine at that time, and those procedures that I described can
easily be repeated. So, while...

(
> Again, we don't encrypt binary files.
>
I take you word that it is against the prescibed procedure at Mozilla.
And I aplaud Mozilla for that prescribed procedure... Just has, maybe,
that procedure here been violated?

> - Julien
)

[So, while] I can take that (the choic that you don't deal with gzip
much), and thank you anyway...  I still hope not all Mozilla devs are
unfamiliar with gzip.

Anybody can share more light on this one.

And, again, you don't need to reply to this email, but rather to the
immediately previous mail of mine, and pls reply with checking up those
procedures after which the file is there, just as I explained in that
email of mine previous to this one, and, to which the Unix's file and
gzip command state clearly what they found about that file.

For which I will be thankful to you!

-- 
Miroslav Rovis
Zagreb, Croatia
http://www.CroatiaFidelis.hr

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
signature.asc (application/pgp-signature, 819 B)