Re: Mozilla Cloud non-Decryptable Download?

[email protected] Sun, 1 Nov 2015 21:54:17 +0100
Newsgroups	gmane.comp.mozilla.security
Message-ID	<20151101205417.GA9304@g0n>
Hi!

This looks precious to me. Feels right away as the honest advice:

On 151101-15:27-0500, Andrew Sutherland wrote:
> On Sun, Nov 1, 2015, at 07:22 AM, [email protected] wrote:
> > I'll be greateful for any clues helpful to my decrpyting of that
> > download.
> 
> It's likely a MAR file.  If it is, the file header should start with the
> magic keyword "MAR1".  See https://wiki.mozilla.org/Software_Update:MAR
> for more details and a link to a file at the bottom that understands
> them.
> 
> You make reference to a "GET" inside the HTTPS data-stream.  It may be
> worth manually downloading that URL separately using wget/curl/other and
> seeing what is extracted from that.  It's possible that in the
> hexediting you extracted part of the framing around the file, and this
> would likely help shed light on that.  Alternately, from brief
> searching, it sounds like wireshark should already be able to save the
> decompressed content streams from HTTP  via "File -> Export Objects ->
> HTTP"?
> 
> Andrew
> _______________________________________________
> dev-security mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-security

Now, pls. here comes in my turtle speed of doing things. I've only
reached this far to even discuss these issues, because of huge work that
I input.

Your advice is accepted here with sincere gratitude, but for me to fully
understand it, it will take time!

I will be glad if the download (it's an autodownload, behind what I was
doing, not initiated by me in any way, which can be seen from the
screencast associated (taken with my uncenz (primitive) program:

https://github.com/miroR/uncenz

Thank you, Andrew! You look like what I called Old Guard Mozilla (in the
previous topic on Gentoo, linked in the outset of this topic in Gentoo,
which bears the same title as this thread!

If only Old Guard Mozilla folks would lead in your community, and if
Mozilla left the Octopus of the Internet, the Goog, alone!
-- 
Miroslav Rovis
Zagreb, Croatia
http://www.CroatiaFidelis.hr

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
signature.asc (application/pgp-signature, 819 B)