Re: Mozilla Cloud non-Decryptable Download?

[email protected] Sat, 28 Nov 2015 10:02:13 +0100
Newsgroups	gmane.comp.mozilla.security
Message-ID	<20151128090213.GB892@g0n>
And I also confirm that I have received kind reply from Andrew
Sutherland, who wrote (pasting):

See
https://feeding.cloud.geek.nz/posts/how-tracking-protection-works-in-firefox/
for a description of the underlying tracking protection implementation
and links to a script that can help you dump and analyze these files.
(And links to other info too.)

(pasted).

I will study those instructions. Just, I work only at turtle-speed no
matter how I tried ;-) .

Thanx!


On 151127-15:59-0800, Francois Marier wrote:
> On 27/11/15 03:46 AM, [email protected] wrote:
> > https://forums.gentoo.org/viewtopic-t-1034140.html#7847334
> > 
> > But in short: if these are legitimate, what are they, and where are they
> > now in my system.
> 
> The small one is the tracking protection blacklist
> (mozstd-track-digest256) and the larger one is the entity whitelist
> (mozstd-trackwhite-digest256).
> 
> You can find more info about these lists here:
> 
>   https://wiki.mozilla.org/Security/Tracking_protection#Lists

I will be try and carefully ponder over that.

> > (Also why any "tracking protection" when I don't have it in my Firefox
> > settings?)
> 
> They are downloaded if one (or both) of these prefs is turned on:
> 
>   privacy.trackingprotection.enabled (default: false)
>   privacy.trackingprotection.pbmode.enabled (default: true)
> 
> Francois
And I will check these.

Thanx.

And, somewhat important, and really confusing, my Firefox, with which I
was able to (mis)report a bug at:

tshark saves raw stream in ascii file, content unrecoverable 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11750

(just to show it should work in the case below: that was closest to the
last previous use of Firefox, 6 days ago now; and see what happens to me
below, for why I can't use it before I get the command of it myself)

[really confusing,] ... [my Firefox] does not do any GET'ing nor
POST'ing when it should, as per:

http://croatiafidelis.hr/foss/cap/cap-151127-plus/

All there, not yet worked enough on it to make proper questions, other
then: no GET's, no POST's so how could I have logged in?

Made with my (primitive) program https://github.com/miroR/uncenz so the
screencast and the traffic dump are corresponding.

Questions not proper yet, but if anyone can help tell the reason for my
not logging in there, I'll be greatful.

Regards!
-- 
Miroslav Rovis
Zagreb, Croatia
http://www.CroatiaFidelis.hr

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
signature.asc (application/pgp-signature, 819 B)