You are not logged in.
- Topics: Active | Unanswered
#1051 Re: Off-topic » Choose your browser carefully » 2020-10-30 05:04:25
I don't disagree with many of your points, but a largely unknown browser from a one man project forked from dead code which was previously developed by a large paid team of devs, cannot automatically be considered secure - especially as that generation of firefox/mozilla was never particularly secure to begin with. You seem to be missing the point the firefox cves will mostly apply to its forks as well... Check the dates of all of those exploitable and bear in mind that most of his security fixes are backports. I assune that the two cves, one severe and remote, are palemoon specific and that firefox was not affected as it was not based on the same obsolete code. .You're also skipping over the fact that modern browser have security features such as sandboxing. Despite the bundled data collection, chromium project is currently the most secure.
He also only dropped google's safebrowsing telemetry because the version in his fork was obsolete and unsupported by google. Not for any rationale relating to privacy. Same reason geo.ip was dropped - and for that he found a reolacement. Go to that site and see how precisley and efficiently it locates you.
I have nothing against palemoon, but agree with the author of the linked article that user spinning it as a privacy and/or security focused browser are doing so out based sone misunderstanding. Its pre australis firefox.
Pale moon amounts to a tiny fraction of a percent of browser marketshare, where firefox is more than a few percent and chromium is massive (a massive monopoly). These browsers have greater exposure, more eyeballs and are bigger and more attractive targets, so it stands to reason that move vulnerabilities are found and fixed.
How can chromium be the most secure if its doing a massive amount of data collecting? That doesn't make sense. Also, they plan to make addons that block ads worthless, not sure if they have been doing that yet, but they planning to last I checked, plus its made by google. Don't trust google man, its bad...
If you want to make a case against palemoon, there is only one issue I have with them, they don't seem to be too fond of noscript. As for everything else you say, i kind of doubt sandboxing is enough to justify using a chrome based web browser. If there is another issue, its that not enough addons get updates.
Besides, more eyeballs doesn't work if they aren't razor focused on the real issues, such as blocking data collection and preventing malware. I am sure they are decent at preventing malware, but Palemoon focuses on stability, security and usability and nothing else.
Firefox has become like, hardly better than chromium. They are losing their individuality due to webextensions, which in itself, has a fingerprinting issue.
Greater exposure can be good, but only if the developers are serious about not allowing the phone home crap. Which btw, firefox isn't. So meh... I will keep using palemoon till something better shows up. Which I really doubt. 
That all being said, the two issues gave are valid, the ones you gave, not so much.
#1052 Re: Off-topic » Choose your browser carefully » 2020-10-28 19:16:25
zapper wrote:Palemoon does not phone home anymore if it ever did. That I don't know[...]
I hope I'm not alone in seeing the fallacy there...
If data collection can be disabled, in firefox then I don't personally see the need for any of the current 3rd party forks or "based on" projects. With the exception of ungoogled chromium I can't see the benefits.
Of course the browsers, the web in fact has becone hugely complex and is largely under the control of several huge US corporations (including FAANGS). To build a new browser is beyond the resources of any individual, small project - beyond anyone lacking the support of those. Linux itsekf haa become largely developed and financed by fortune 500 companies. A web browser like chromium/blink is a larger codebase now than some entire OS'. If you have tried building firefox or chromium from source you will know what I mean.
From a security perspective, firefox has been catching with chromium in terms of multi process sandboxing and other security features, pale moon, a fork of a several years old firefox release, isnt even close.
Nope, no yours is the fallacy, Seriously...
chrome and even chromium are spyware hell and is largely insecure due to this. As for, palemoon, they focus on stability and security primarily. Not new features like firefox does. Also, those new features of firefox and chromium are largely antifeatures. Remember pocket? that spys on you. They try to add stuff like that all the time...
So... yeah. I refuse to trust webextensions anything. Or google anything. By the way, palemoon is not built from scratch, its based on old firefox yes, but they have less vulnerabilities in their system, not more but less!
They also are making changes based on current firefox and they patch things quickly. By current firefox, I mean stuff that would affect palemoon too. Which by the way, there is alot less of that... Defense in depths and not applicable are alot more common though.
Adding that correction so you know what I mean. aka about defense in depht, etc...
Also, even if you disable data collection in options in firefox, it dials home a hell of a lot.
I have seen this a lot even in post webextensions icecat, let alone regular firefox. My cache by firefox was used twice as much even when i disabled all of their spyware defaults. I compared palemoon to firefox, both with noscript on default settings. I don't know why you would trust anything googleized, including firefox webextensions versions.
By the way, the larger the code base, the more time it takes to audit and fix problems.
This is the same issue as system dumb and arguably redhat's freedesktop.org crap in general. Bloated...
The more bloat, that harder to audit, the harder to fix.
Compare the vulnerabilities here: https://www.cvedetails.com/
You will find more critical bugs in firefox than palemoon.
I am kind of surprised someone who hates something as bloated as system dumb, would support something as bloated as firefox or chromium whether its ungoogled or not when there are clear alternatives... This puzzles me to no end.
#1053 Re: Freedom Hacks » To permanently block installation of Pulseaudio. » 2020-10-27 22:32:28
When installing multimedia software pulseaudio can be pulled in as a dependency or as a recommends. This can be blocked by using APT pinning. Place a file in /etc/apt/preferences.d containing the following: -
Package: pulseaudio
Pin: release n=beowulf
Pin-Priority: -10Any software you do not want installed can be blocked in a similar way.
I use a Perl script to generate an avoid-pkgName file.
Sounds good!
#1054 Re: Off-topic » Choose your browser carefully » 2020-10-27 22:29:27
Palemoon is also sometimes recommended by people as a privacy respecting browser, but Palemoon is not even promoted as a privacy respecting browser so I don't know where that comes from. Palemoon also "phones home" and it also connects to Google every time it is started up just like Chromium.
This mitigation guide resolves the above problems (i.e. "phoning home" and contacting Google). There's also a fork with placeholder title Web Browser that corrects much of Pale Moon's mistakes (e.g. automatic updates, add-on blacklists).
Palemoon does not phone home anymore if it ever did. That I don't know, but anything based on webkit or webextensions, you should look at from a distance if at all even.
remember, google made webextensions and as for webkit apple and google both must use it for a reason... Do not trust them for this and because google is google.
Which is to say, do plenty of evil. 
#1055 Re: Off-topic » Choose your browser carefully » 2020-10-27 22:27:00
blackhole wrote:There was a thread about Mozilla recently on LQ:
The trouble is, that the alternatives to Firefox are worse. The 3rd party forks are what amounts to snake oil salesmen peddling their wares. I despise the UIs of both chromium anf Firefox, but just learned to live with them and disable the telemetry / data collection where possible.Sounds like Stockholm syndrome to me. I can't speak to other FF forks, but your comments about them don't apply to Pale Moon.
I trust palemoon, way more than the other browsers, Moonchild can be sometimes, a bit of a dick, but he means well. And he isn't in this for greed like mozilla, google, microsoft, etc... and also, he is the only one fighting the webkit/chromium empire.
Thus, I will always use palemoon or basilisk or iceweasel-uxp if possible.
That being said, yes it sounds like stockholm syndrome to me also.
#1056 Re: Devuan » Meet Chimaera's deepsea theme » 2020-10-24 00:41:08
I used cinnabar colors for Beowulf. That crimson pigment (which is quite toxic) was very popular in the Renaissance.
Yes, and that was very lovely.
This one is a bit more meh, but if you guys like it, go ahead. I mostly use Hyperbola nowadays aside from my X230 which I might use less in the future.
Besides, wallpaper isnt as important as the project itself, right?
#1057 Re: Hardware & System Configuration » Freeze at startup probably caused by nvidia driver » 2020-10-24 00:37:26
Unless one uses older hardware, intel graphics and/or rhe nouveau or vesa drivers you're pretty much stuck with proprietary firmware for display adapters . Even when using a completely FOSS solution, x86 as an architecture uses a lot of firmware, much of it already on the devices - and it's almost always proprietary.
Yes, I had forgotten that... my bad...
I use a few old thinkpads at the moment...
third gen + second gen. Both on the X type.
Although for the life of me, if something cannot be corebooted and have intel me disabled, I will not use it for my personal projects.
Also, I wont store anything sensitive or anything projects of lasting value unless I have a better setup than that still. Like something where you can completely remove the intel me from the hardware.
This all being said, I think nvidia, is harder to liberate then intel even.
I guess my point is, avoid new hardware whenever possible if its x86ish whether its intel or amd.
Otherwise, security and stability issues will occur eventually.
Edit: I should probably stop replying here, this is way off topic... ps, I do have some writing hobbies in case you wonder what I try to hide.
#1058 Re: DIY » [HowTo] runit-init as PID1 » 2020-10-24 00:26:46
Runit with runit-init for me was twice as fast as openrc. Hard to believe, but yeah it is. 
It worked fine for me on both testing devuan and devuan beowulf, can't say if the others it works well on.
But, on devuan beowulf when you switch from openrc to runit and add runit-init and then try to go back for some reason to openrc, I once had some issues on beowulf. heh... weird stuff.
If you intend to install runit-init + runit the moment you install devuan beowulf, don't install openrc right off the bat. Unless you know something I don't...
That kind of thing caused me some issues once, where dependency hell got in the way...
PS, in my experience, runit + runit-init cut my boot time in half. and shutdown happens in a 1/3 less time if I recall correctly.
#1059 Re: Devuan » Meet Chimaera's deepsea theme » 2020-10-23 02:11:09
There has never been a brown theme. That was Ubuntu.
Hmm, maybe its more of a dark redish brown i was thinking of.
Lol...
I got my colors mixed up probably.
#1060 Re: Devuan » Meet Chimaera's deepsea theme » 2020-10-23 01:57:22
This wallpaper is okay, but I liked the brown one more. A light gray one would also be good in future someday though!
#1061 Re: Hardware & System Configuration » Freeze at startup probably caused by nvidia driver » 2020-10-23 01:56:16
I installed devuan on one computer once, a while back, it refused to let me log in without logging me back out, different problem, but it may be due to the same sort of issue, this desktop computer needed propreitary firmware to run properly. My point being, avoid nvidia if possible... or any propreitary firmware... not even just a security issue, but also stability issue and a juice guzzler issue... meaning it drains battery fast.
If you still insist on using it, the poster above me has a point, you need some more logs or information to give us for us to help you.
I know my inital reply isn't helpful if you insist on using the nvidia driver or if its required, but yeah, that's usually how I think. So my bad...
#1062 Re: Devuan Derivatives » GNUinOS - Libre » 2020-10-21 01:00:26
zapper wrote:Is it using both runit and runit-init?
I love that combo and am using it on my x230 thinkpad, and yes it is faster than openrc.
It does use both runit and runit-init, but most of the services are still managed in the classic way.
zapper wrote:I would love to see Gnuinos be like a deblobbed devuan like trisquel is for ubuntu, only ten thousand fold better. trisquel still has a lot of freedom issues, rust, java and redhat's bs services.
Yes, the freedom flaws related with rust and cargo due to IceCat, as you know from the Hyperbola forum.
Excellent to hear, is there a guide to migrate from devuan to gnuinos and is it almost as stable as devuan?
I would love an unbranded palemoon even more than even iceweasel-uxp, one that is set to reasonable privacy settings.
And yes, I much prefer Hyperbola's way of doing things usually. I dislike anything to do with redhat, but for now some stuff needd.
If HyperbolaBSD is ever successful, I hope you or someone else will make their own spin. heh... I like to have wine, and that is not going to be available on HyperbolaBSD due to multilib security issues. For one of my laptops anyways...
That being said, till that day comes of HyperbolaBSD being stable, I hope you will continue your tireless work.
Just a heads up though, I use the beowulf version of devuan
#1063 Re: Devuan » Devuan, maybe not for every one but most! » 2020-10-18 02:41:57
brocashelm wrote:can see why some people aren't too fond of APT and its tendency to break dependencies, when Pacman can work around that sort of thing.
well, it's a matter of opinion, i tend to think otherwise : debian/apt does a great job in keeping just necessary dependencies with packages, while pacman brings in the whole dependency "world" in.
tried artix sometime ago, and installed a simple qt app in a gtk3 DE.... well, the whole QT came in , hundred or more MBs (cant exactly remember size)... tried the same in debian/devuan, qt dependencies for the same package are less than 10M..
also first pacman upgrade from a month old artix iso installation, brought in ~600M of updates !!!! i don't recall similar apt downloads, even in dist-upgrading debian/devuan stable every 2 years ....
so, size matters also.. (packages+dependencies/installation.)
apt breaking dependencies is a side effect maybe, but not much of an irritation really and usually fixed fast.my 2c
i prefer pacman myself, but that being said, I hate archlinux and their pro systemd stance. I only love Hyperbola's use of pacman.
Haven't tried artix though.
but yeah, pacman appears to be more lightweight/smaller hence why it interests me so...
#1064 Re: ARM Builds » mnt reform support? » 2020-10-18 02:13:25
zapper wrote:If it can handle an emulator like desmume and palemoon or two emulators and palemoon, than it would probably be good enough for me till they get a better processor.
I wonder what the most recent, fastest processor type that you can get without having any remote backdoors/blobs is with 4gbs of ram or more obviously and if possible LPDDR4,
Anyways thanks for the thoughts.
You welcome,
Indeed maybe mnt reform is the most open of them all( the price seems to go up when you talk of openess.. )balthazar.space
it seems they will attempt something with RISCV in mind, but they don't rule out a ARM cortex-a7x version..
The project seems ambitious indeed..Other project, that is not ARM based, but Instead PowerPC based is the www.powerpc-notebook.org
They seem each time closer to get a pcb design, for the Slimbook Eclipse laptop chassis
But its a laptop around 1500€( also a bit expensive.. )Its also a 4 core cpu( SMT 2 - 8 threads ) at 2Ghz, but with some serious amount of Ram, I believe it goes till 32 or 64 GB Ram..
The problem with PowerPC( to a less extent than RISCV ofcourse,.. because support for RISCV right now almost doesn't exist.... ), is the environment around with supported applications..At same time Debian has a port for PowerPC 64 bits, and its growing fast..
At the moment, this is my dream of a laptop, I confess!A powerful AMD eGPU( Open Source Drivers ), mechanical keyboard with RGB, tons of memory Ram( even tough its LPDDR3 ) and its dual chanel, and a cpu with 8 threads at 2Ghz, with nvme disks, everything..
But it costs around some 1500€( its a estimated price range, they have done.. )It could be that "I loose my head" and advance for this one
Sorry to bug anyone with this thread again, but I wondered, i had a netbook once called the acer aspire one, it had the n450 atom intel processor in it, would the mnt reform be 2x or 4x faster then that laptop and would it be able to handle 2x or 4x more applications then n450? keep in mind, the n450 i had only had one gigabyte of ram vs mnt reform's 4gb.
I also could only load one firefox application. would the mnt reform be able to handle 2-4x more applications.
So, it is this:
https://ark.intel.com/content/www/us/en … 6-ghz.html
with 1gb of ram in acer aspire one
vs mnt reform
with its 1mx8m 4 arm a53 cortex processors.
How much faster do you think it would be?
Or should I have started a new thread?
let me know.
#1065 Re: Off-topic » Vivaldi: Best performing browser on Chromebook style laptop » 2020-10-09 23:32:05
zapper wrote:I thought vivaldi was spyware I am kind of surprised anyone uses it, or anything made from chromium as a base in general.
https://spyware.neocities.org/articles/vivaldi.html
Though to be fair, aside from tor browser, palemoon and lynx, i feel like most web browsers are loaded down with crap. Firefox sadly is as well.
Though easier to mitigate then anything with a chromium base.
Well regardless, just thought I would show you that link. IF you enjoy vivaldi okay, but its not very privacy friendly no matter how its configured...
Read this link too if willing,
Thanks for the info. I don't care, because it doesn't matter; There isn't an Internet or telephone/smartphone service available in Canada that itself isn't spied upon. I have more important things to concern myself with.
Meh, I have one gaming laptop with devuan and wine which plays starcraft 2, two with Hyperbola which I use for writing, etc...
My point being, I prefer to deny them as much as I feel like is reasonable which in my case means, I deny when I feel like it is feasible. That being said, choose wisely...
I still prefer palemoon myself, but each to their own I suppose.
#1066 Re: Off-topic » Vivaldi: Best performing browser on Chromebook style laptop » 2020-10-06 20:04:21
I thought vivaldi was spyware I am kind of surprised anyone uses it, or anything made from chromium as a base in general.
https://spyware.neocities.org/articles/vivaldi.html
Though to be fair, aside from tor browser, palemoon and lynx, i feel like most web browsers are loaded down with crap. Firefox sadly is as well.
Though easier to mitigate then anything with a chromium base.
Well regardless, just thought I would show you that link. IF you enjoy vivaldi okay, but its not very privacy friendly no matter how its configured...
Read this link too if willing,
#1067 Re: Off-topic » What other distro are you using (besides devuan)? » 2020-10-06 19:58:12
zapper wrote:Voidlinux is good except for one thing... I don't like that they have a very new kernel. Also, no linux-libre option.
Void have an LTS kernel metapackage which is currently tracking the 4.14 branch and also offer 4.4, 4.9 & 4.19. Their kernels are already de-blobbed.
zapper wrote:Devuan at least has that option thanks to jxself.org
Devuan's kernels are also de-blobbed, no need to rely on third-party repositories.
Huh, didn't know that their kernels were already deblobbed, is this verifiable?
And they do have an lts package? Nice... didn't know that either. Hmm, might revisit in future.
#1068 Re: Off-topic » Vivaldi: Best performing browser on Chromebook style laptop » 2020-09-28 04:04:26
davidb wrote:A very good comparison. How about SeaMonkey? This is my browser of choice.
So I gave SeaMonkey a whirl, by downloading their binary package from their website, and it actually ran really well on this machine. Youtube playback was smooth, but the audio didn't work. I imagine that it was compiled with the PA dependency, so can't fault it for that given that I don't have PA installed. Page loads were slower, but that's what ya get on today's Internet when you're not using Ad Block. It did seem to be more frugal with memory than Firefox, so it could be good for low end hardware.
Was neat how much SeaMonkey still looked like the Netscape Navigator I remember using in Windows 95.
Have you tried using apulse in combination with seamonkey? I bet audio would work then.
#1069 Re: ARM Builds » mnt reform support? » 2020-09-26 07:54:21
zapper wrote:I wonder if any processors based on A76 or A77 will be liberated in maybe 5-10 years of their blobs... or perhaps under 5 years...
Why? Well no meltdown spectre vulnerabilities for them.
We can hope right?Till Risc-V comes out with something as fast as intel's p8600 or faster.
Anyways, I am pondering stuff right now. I will have time to ponder long after this. Thanks for particpating in this thread.
I wonder if I should wait on balthazar.space' idea of a laptop.
Well the next devices to expect are like the Rockchip RK3588, 8nm, 4xA76 + 4xA55, its around 30-40% better than the rk3399, which should be ok, for a decent laptop..
But probably we will not see then tile 2021 or 2022 sadly..This ARM processors are affected by Spectre and/or Meltdown, as they employ the technologies that makes the exploit possible, that already happen in rk3399 for example( 2xA72 )
Everything above Cortex a55, and you have lots of vulnerabilities.. sadly.
Good point, also... nvidia just aquired arm, so we'll have to see what happens because of that.
Imx8m might be the way to go for me then... till risc-v is useful for laptops.
#1070 Re: Installation » Upgrade from Debian Wheezy to Devuan Jessie » 2020-09-26 07:52:35
Ascii or beowulf are both good options. just dont stay on wheezy or jessie.
#1071 Re: Devuan » Debian has fallen. What now? » 2020-09-26 07:46:20
the problem is that DVA (devuan veterant administrators bla bla bla ) are like "PICCORO mckaygerhard".. so experts.. so improvement.. so great..
but a little difference: PICCORO does not need help and are not mantaining a distro.. those DVA need help, manpowers and support for Devuan users..
so .. i guess devuan administrators.. need changes.. so Devuan need hard changes..
Judging by this thread alone, you really seem angry, try to calm down. If you don't like devuan, why not use debian?
Trolling doesn't really benefit anyone. I have done my share of trolling, but these people have done nothing to deserve it, so please don't...
Reserve trolling against other trolls if you have to,
Just my two cents...
Try not to take this personally, but this is going nowhere.
#1072 Re: Forum Feedback » Unable to edit any of my own posts » 2020-09-21 04:12:45
Edit: Updated with archive.org suggestion
ralph.ronnquist wrote:Thanks. Yes. It looks like a code bug; that the edit code picks up the topic's timestamp rather than the post's timestamp.
This might have been fixed now by my spurios replacing of a 't' with a 'p'; otherwise it'll require thought.Thanks. I have now been able to edit my post.
Reasons to allow unlimited time for editing.
Posted issues take an indeterminate time to solve. By setting an edit time limit, you don't allow posters to change a topic subject to [solved]
I am a very poor typist and make many typos and grammatical errors which I may not notice until days later when reviewing my posts. And yes, I do like to go back and review my posts and admire them
I may discover additional issues that I should have discussed originally in a HOWTO days later or weeks later. Edit timeouts could prevent me from updating the HOWTO
Alternatives to Time Limits
Quote posts you are replying to. Even if the original poster modifies or deletes a post, the post is still in the quoted reply
Use rdiff-backup to take daily snapshots of your forum. rdiff-backup is like a version control system for files and only stores deltas for text files like CVS. If a post gets deleted, it can be restored with rdiff-backup. Note that rdiff-backup works on many different file systems and platforms including MAC OSX
Submit a discussion thread URL to archive.org.
These ideas I like, time limits only under certain conditions, and have backups somewhere if need be. I like!
#1073 Re: Forum Feedback » Unable to edit any of my own posts » 2020-09-19 22:41:49
golinux wrote:Ralph has been tweaking the timeout limits on editing and deleting posts
Are timeouts set on a per forum basis? I can still edit my post on this forum made over an hour a go (Forum Feedback) but couldn't edit
https://dev1galaxy.org/viewtopic.php?pid=24754#p24754
less than two minutes after I posted it.
Regardless, any timeout changes should be published so as not to catch posters by surprise.
I wish it could be somewhere between an hour and a day that you could modify it. But obviously not delete after an hour.
#1074 Re: Devuan Derivatives » GNUinOS - Libre » 2020-09-19 22:40:29
Hi,
I'm uploading new images of gnuinos:
https://www.gnuinos.org/Beowulf/
Here you are a screenshot:
https://www.gnuinos.org/screenshots/202 … _scrot.png
Gnuinos is using runit as init system.
Is it using both runit and runit-init?
I love that combo and am using it on my x230 thinkpad, and yes it is faster than openrc.
I would love to see Gnuinos be like a deblobbed devuan like trisquel is for ubuntu, only ten thousand fold better. trisquel still has a lot of freedom issues, rust, java and redhat's bs services.
That being said, trisquel was still better than ubuntu. Let's hope GNUinos can be better than even devuan is on its own.
#1075 Re: Off-topic » What other distro are you using (besides devuan)? » 2020-09-15 17:10:43
Hyperbola and thats about it. 
My Devuan laptop is an x230 thinkpad with intel me disabled and coreboot on it.
The laptop i using now is a thinkpad x200 with libreboot. Hyperbola is on it.
Voidlinux is good except for one thing... I don't like that they have a very new kernel. Also, no linux-libre option.
Devuan at least has that option thanks to jxself.org
Unrelated to devuan, but it is an option.
I now use i3-wm for most of my laptops, except the x230 thinkpad which I use xfce4 on.
Board footer
