<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<atom:link href="http://dev1galaxy.org/extern.php?action=feed&amp;tid=6662&amp;type=rss" rel="self" type="application/rss+xml" />
		<title><![CDATA[Dev1 Galaxy Forum / the right procedure ?]]></title>
		<link>http://dev1galaxy.org/viewtopic.php?id=6662</link>
		<description><![CDATA[The most recent posts in the right procedure ?.]]></description>
		<lastBuildDate>Sun, 04 May 2025 20:46:54 +0000</lastBuildDate>
		<generator>FluxBB</generator>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=55495#p55495</link>
			<description><![CDATA[<p>opensnitch <a href="https://github.com/evilsocket/opensnitch" rel="nofollow">https://github.com/evilsocket/opensnitch</a> is must have nowadays.</p>]]></description>
			<author><![CDATA[dummy@example.com (Devarch)]]></author>
			<pubDate>Sun, 04 May 2025 20:46:54 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=55495#p55495</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=53625#p53625</link>
			<description><![CDATA[<p>Nice tip Ron. ;-)</p>]]></description>
			<author><![CDATA[dummy@example.com (GlennW)]]></author>
			<pubDate>Wed, 25 Dec 2024 21:22:25 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=53625#p53625</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=53623#p53623</link>
			<description><![CDATA[<p>I&#039;d suggest reading this: <a href="https://easylinuxtipsproject.blogspot.com/p/security.html" rel="nofollow">https://easylinuxtipsproject.blogspot.c … urity.html</a><br />It&#039;s just as applicable to Devuan (and any other Linux distro).</p>]]></description>
			<author><![CDATA[dummy@example.com (Ron)]]></author>
			<pubDate>Wed, 25 Dec 2024 16:52:58 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=53623#p53623</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=53621#p53621</link>
			<description><![CDATA[<p>Hello:</p><p>Just a (belated) comment / heads-up:</p><div class="quotebox"><cite>aluma wrote:</cite><blockquote><div><p>... enough RAM (4 GB or more) ...</p></div></blockquote></div><p>My Devuan Daedalus system runs on a box with a 120GB SSD and 8GB RAM.<br />As my <span class="bbc">conky</span> swap file use always read nought, I decided to reduce it to 2.6GB just in case some application looks for a swap file.<br />I plan to reduce it further should I need more space in <span class="bbc">/</span> or <span class="bbc">/home</span>.</p><p>Long after that, I set up a <ins>tmpfs</ins> like you suggested.<br />It ran without a hitch till a couple of days ago when I had a system lock-up while streaming a video.<br />Something I had never encountered before and made me fear for my system&#039;s SSD. </p><p>After making a full <span class="bbc">Clonezilla</span> image of my system drive, I had a look (among other things) at <span class="bbc">df -h</span> and found that it was set up with a capacity of 3.9GB, something I was not aware of:</p><div class="codebox"><pre><code>$ df -h
--- snip ---
tmpfs           3.9G   18M  2.0G   1% /home/groucho/.cache/mozilla/firefox
--- snip ---
$ </code></pre></div><p>This is 50% of the available physical system RAM in my box.<br />And the <em>default</em> value <ins>tmpfs</ins> claims when it is set up <em>without</em> specifying the desired size.<br />In this specific case, it was more than the amount assigned* to <span class="bbc">/dev/shm</span>:</p><div class="codebox"><pre><code>$ df -h | grep tmpfs
tmpfs           788M  800K  787M   1% /run
tmpfs           5.0M  8.0K  5.0M   1% /run/lock
tmpfs           2.1G     0  2.1G   0% /dev/shm
tmpfs           3.9G   20M  2.0G   1% /home/groucho/.cache/mozilla/firefox
tmpfs           788M  8.0K  788M   1% /run/user/1000
$</code></pre></div><p>* apparently limited by the amount of available RAM in a system</p><p>Suspecting some sort of conflict (?) somewhere, I did some searching and found <a href="https://www.baeldung.com/linux/tmpfs-size-dynamics#2-preventing-deadlock-situations" rel="nofollow">this</a> tidbit which may be of use.</p><p>I have now set it up with a specified size of 2GB:</p><div class="codebox"><pre><code>$ cat /etc/fstab
--- snip ---
tmpfs     /home/groucho/.cache/mozilla/firefox  tmpfs nosuid,nodev,noatime,user,uid=1000,size=2G  0  0</code></pre></div><div class="codebox"><pre><code>$ df -h
--- snip ---
tmpfs           2.0G   18M  2.0G   1% /home/groucho/.cache/mozilla/firefox
--- snip ---
$ </code></pre></div><p>I really don&#039;t really know if the two lockups I had were caused by my system using a 3.9GB tmpfs but I&#039;ll report back if I get another lock-up.</p><p>Best,</p><p>A.</p>]]></description>
			<author><![CDATA[dummy@example.com (Altoid)]]></author>
			<pubDate>Wed, 25 Dec 2024 14:23:46 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=53621#p53621</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50496#p50496</link>
			<description><![CDATA[<p>@devur</p><div class="quotebox"><blockquote><div><p>но архива &#039;r6a038wc.default-esr/cache2/&#039; больше не существует.</p></div></blockquote></div><p>Just look at its contents after launch Firefox.<br />In RAM, the cache will be created when Firefox is launched in a new session and, naturally, will disappear when the computer is turned off. In addition, it improves browser performanceь and reduces the number of rewrites of SSD drives..</p>]]></description>
			<author><![CDATA[dummy@example.com (aluma)]]></author>
			<pubDate>Thu, 13 Jun 2024 05:02:59 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50496#p50496</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50489#p50489</link>
			<description><![CDATA[<div class="quotebox"><cite>devur wrote:</cite><blockquote><div><p>unsure whether I want that type of files on my system.</p></div></blockquote></div><p>Like all browsers, Firefox is not 100% secure. Vulnerabilities are found and exploited. Clamav is also for Windows so it finds PUAs. PAUs require an NTFS/NTFS+ filesystem as well as the Win OS to run. They cannot run on Linux filesystems or work with a Linux OS. They&#039;re useless and take up HD space.</p><p>Suggestion: In Firefox &gt; Settings &gt; Privacy and Security &gt; History, is &#039;Clear history when Firefox closes&#039; checked? In History &gt; Settings, are all of them checked? If the PUAs still get through, find where they&#039;re stored and write a script you can click on on the desktop to delete them. </p><p>Another way is an icon on the desktop to start Firefox, with a &lt;script&gt; to delete the PUAs executed when Firefox processes end. </p><div class="codebox"><pre><code>#!/bin/bash
firefox &amp;&amp; &lt;script&gt;</code></pre></div>]]></description>
			<author><![CDATA[dummy@example.com (fanderal)]]></author>
			<pubDate>Wed, 12 Jun 2024 21:28:42 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50489#p50489</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50488#p50488</link>
			<description><![CDATA[<p>and for fanderal there is something in what you point to, I am however unsure whether I want that type of files on my system.</p>]]></description>
			<author><![CDATA[dummy@example.com (devur)]]></author>
			<pubDate>Wed, 12 Jun 2024 17:15:10 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50488#p50488</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50487#p50487</link>
			<description><![CDATA[<p>I have added extension to Firefox, and added tmpfs to /etc/fstmp and it has gone well.&#160; but there is no longer any archive &#039;r6a038wc.default-esr/cache2/&#039; it does not exist.</p>]]></description>
			<author><![CDATA[dummy@example.com (devur)]]></author>
			<pubDate>Wed, 12 Jun 2024 17:10:21 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50487#p50487</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50486#p50486</link>
			<description><![CDATA[<p>A quick search for <span class="bbc">PUA.Win.Trojan.Xored-1</span> in quotes finds this, posted years ago: <a href="https://askubuntu.com/questions/1006237/clamav-detects-trojans#1006252" rel="nofollow">https://askubuntu.com/questions/1006237 … ns#1006252</a></p><div class="quotebox"><blockquote><div><p>UA.Win.Exploit.CVE_2012_1461-1</p><p>* PUA means &quot;potential unwanted application&quot;.&#160; PUA are not virusses, those are claims by clamav that there is an application they consider &quot;unwanted&quot; because that file or extension have been proven to be abused in Windows<br />* Win as 2nd part means it is a Windows related notice.<br />* clamav has an option to not scan for PUA&#039;s.<br />(snipped for length)</p></div></blockquote></div><p>Clamav identifies them as Win exploits and trojans. As @chris2be8 noted, it means they need a Win filesystem to run, and are incompatible with any Linux filesystem.</p><p>@aluma&#039;s suggestion is one way to deal with it. Another is a small script to delete stored data inside the directories in ~/.cache/mozilla/firefox/xxxxxx.default-esr/ or wherever they&#039;re stored.</p>]]></description>
			<author><![CDATA[dummy@example.com (fanderal)]]></author>
			<pubDate>Wed, 12 Jun 2024 16:58:00 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50486#p50486</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50484#p50484</link>
			<description><![CDATA[<p>From the description those look like malware aimed at Windows systems that your browser cached. So probably not a threat to a Linux system.</p><p>Put CVE_2012_1461 into your favourite search engine for more details. Or the full name of the vulnerabilities.</p><p>You could also look at what&#039;s in /home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/ (how big are the files, what does <span class="bbc">file</span> say they are, etc).</p>]]></description>
			<author><![CDATA[dummy@example.com (chris2be8)]]></author>
			<pubDate>Wed, 12 Jun 2024 16:06:40 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50484#p50484</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50477#p50477</link>
			<description><![CDATA[<p>If there is enough RAM (4 GB or more), the browser cache can be located in it.<br />Add a line to /etc/fstab like this</p><div class="codebox"><pre><code>tmpfs     /home/usre2/.cache/mozilla/firefox  tmpfs  nosuid,nodev,noatime,user,uid=1000  0  0</code></pre></div><p>&quot;uid=1000&quot; - specify your user specifically.</p>]]></description>
			<author><![CDATA[dummy@example.com (aluma)]]></author>
			<pubDate>Wed, 12 Jun 2024 10:38:59 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50477#p50477</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50476#p50476</link>
			<description><![CDATA[<p>Yes you can see the virus List.<br />And the only action on these pc w3</p><div class="codebox"><pre class="vscroll"><code>ClamTk, v6.07
Tue Jun 11 17:04:30 2024
ClamAV Signatures: 8710280
Directories Scanned:

Found 0 possible threats (4 files scanned).

No threats found.
---------------------------------------------

ClamTk, v6.07
Tue Jun 11 17:20:05 2024
ClamAV Signatures: 8710280
Directories Scanned:
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries

Found 25 possible threats (58531 files scanned).

/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/1231DD2EA9FCAEAD544000B2C42978033720B3F3      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/BDCC87EE344E20D465A1A939BB259ED33DCB37FA      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/B925469B00E39A393DA96976DC2BCCC47341C595      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/BA08D5E9D857B7AC9C99FEB3B2B4BFD983CFC754      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/DF42EAB2E87062092AAD4C969EAEEA511E0CA610      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/3EDB8FF08D388E71BABA2694A8FE95E537EFFEF9      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/B67A87B9957498FF0DECE6550E9852A338E2D96D      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/A0DF9F80C099D12857FBB5F80A97BEBB97EFEDA1      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/28200FEE743D8A88FC050ACB35C95AA9B000037C      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/A922BEDD3229F0BFF5652A7FF975D68EE52D133E      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/1C4038F316498439FBB4808F7D7CD82EE32B68FD      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/3EEE453E76E2CE763DFB313F5CE2D067E036B95E      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/C825FDD50D1349BBAE185BA58FB6639213962633      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/D86D41F5976E38E5DED9FEF99AE4B7D7A29B78EB      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/D6FAE84D27C79C66291F17E9FF4F20E228950157      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/E89BF141CDE9063624EE6D5BE6F90AE378303E28      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/C6437DF9DCFAE9833749D321E621EC079A11DA1D      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/00A2EEB79D840DEA619FFAB8AEE00AE4DFA782C9      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/F6B8F755EFE9F6903824ED6888C029BB8C0B0876      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/8FF38A09CDDB798688671E5C8A473A201D78F066      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/963B4624DDF84378163EB0FFFA408FE6F5FECEA7      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/F769C5DCDD6D0ED9009B2DB63111C83E4F67E8B8      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/5E7F2843EBB750CDA86FC638453B893B24DDBBB5      PUA.Win.Trojan.Xored-1              
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/48ADD0A5F5D9453FC7537A6956C9F57DC9604F25      PUA.Win.Exploit.CVE_2012_1461-1     
/home/usre2/.cache/mozilla/firefox/r6a038wc.default-esr/cache2/entries/80E3C62564962F770C8A3CE1B855CEE812903949      PUA.Win.Exploit.CVE_2012_1461-1     
--------------------------------------------------------------------------------------------------------------------------------------------------------------</code></pre></div>]]></description>
			<author><![CDATA[dummy@example.com (devur)]]></author>
			<pubDate>Wed, 12 Jun 2024 10:27:16 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50476#p50476</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50474#p50474</link>
			<description><![CDATA[<p>Are you sure they are viruses? What were the names of the viruses and can you share what web sites you think might have given you viruses or are these websites NSFW?</p><p>In any case, as a matter of privacy and security i use the arkenfox user.js and fiddle with a user-overrides.js config.</p><p><a href="https://github.com/arkenfox/user.js/" rel="nofollow">https://github.com/arkenfox/user.js/</a></p><p>as stargate mentions, use ublock-origin and tick as many filter lists boxes that apply and also use filter lists from filterlists.com.</p><p>The filter lists from anti-corp (no-google in filterlists.com) are great if you want to try to completely block google, just saying. </p><p><a href="https://github.com/nickspaargaren/no-google" rel="nofollow">https://github.com/nickspaargaren/no-google</a></p>]]></description>
			<author><![CDATA[dummy@example.com (soren)]]></author>
			<pubDate>Wed, 12 Jun 2024 09:16:00 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50474#p50474</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50473#p50473</link>
			<description><![CDATA[<p>check these out for web browsers:<br />https everywhere<br />minerblock<br />noscript<br />privacybadger<br />snowflake<br />ublockorigin<br />uboscope<br />umatrix<br />--</p><p>check these out for hosts file blocking:</p><p>blocklists sources:<br />ttps://someonewhocares.org<br />ttps://www.spamhaus.org<br />ttps://filterlists.com<br />ttps://github.com/hagezi/dns-blocklists<br />ttps://github.com/badmojr/1Hosts</p><p>also one website/list not being frequently updated(last 20210306):<br />ttps://winhelp2002.mvps.org/hosts.txt<br />(still good for reference)</p>]]></description>
			<author><![CDATA[dummy@example.com (stargate-sg1-cheyenne-mtn)]]></author>
			<pubDate>Wed, 12 Jun 2024 07:29:47 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50473#p50473</guid>
		</item>
		<item>
			<title><![CDATA[Re: the right procedure ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=50466#p50466</link>
			<description><![CDATA[<p>Not allowing java script by default can help. <br />I usually have the extensions &quot;ublock origin&quot; and &quot;umatrix&quot; running with firefox.</p>]]></description>
			<author><![CDATA[dummy@example.com (delgado)]]></author>
			<pubDate>Tue, 11 Jun 2024 18:24:57 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=50466#p50466</guid>
		</item>
	</channel>
</rss>
