IRC: #boycottnovell @ Techrights IRC Network: Wednesday, June 30, 2021

schestowitz

<h5><a href="https://palant.info/2021/06/28/having-fun-with-css-injection-in-a-browser-extension/"> Having fun with CSS injection in a browser extension</a></h5>

-TechrightsBN/#boycottnovell-palant.info | Having fun with CSS injection in a browser extension | Almost Secure

schestowitz

schestowitz

<p>Normally, CSS injection vulnerabilities are fairly boring. With some luck, you can use them to assist a clickjacking attack. That is, unless the vulnerable party is a browser extension, and it lets you inject CSS code into high profile properties such as Google’s. I’ve now had some fun playing with this scenario, courtesy of G App Launcher browser extension.</p>

schestowitz

<p>The vulnerability has been resolved in G App Launcher 23.6.1 on the same day as I reported it. Version 23.6.5 then added more changes to further reduce the attack surface. This was a top notch communication experience, many thanks to Carlos Jeurissen!</p></blockquote></li>

*job has quit (connection closed)

Jun 30 05:10

*job (~job@bfjdrpzm6v77y.irc) has joined #boycottnovell

Jun 30 05:15

schestowitz

I think we can write some search and replace scripts to help migrate the wiki to gemini, but should we? Dir and file creation, plus updates (and wiki changes) won't be easy to automate, so maintenance overhead in the long run.

Jun 30 05:43

Techrights-sec

Do you mean mirror the wikin in Gemini? Read-only would not be too hard,

Jun 30 07:24

Techrights-sec

but would tak some time.

Jun 30 07:24

*job has quit (connection closed)

Jun 30 10:05

*psydroid_ (~psydroid@cqggrmwgu7gji.irc) has joined #boycottnovell

Jun 30 10:20

*psydroid_ has quit (Ping timeout: 2m30s)

Jun 30 10:23

*job (~job@bfjdrpzm6v77y.irc) has joined #boycottnovell

Jun 30 10:23

*psydroid_ (~psydroid@cqggrmwgu7gji.irc) has joined #boycottnovell

Jun 30 10:27

*psydroid_ has quit (connection closed)

Jun 30 10:40

*psydroid_ (~psydroid@cqggrmwgu7gji.irc) has joined #boycottnovell

Jun 30 10:45

*psydruid has quit (connection closed)

Jun 30 11:11

*psydruid (~psydruid@jevhxkzmtrbww.irc) has joined #boycottnovell

Jun 30 11:12

*psydroid_ has quit (connection closed)

Jun 30 12:23

*psydruid (~psydruid@jevhxkzmtrbww.irc) has left #boycottnovell

Jun 30 12:24

*psydruid (~psydruid@jevhxkzmtrbww.irc) has joined #boycottnovell

Jun 30 12:24

*psydroid_ (~psydroid@cqggrmwgu7gji.irc) has joined #boycottnovell

Jun 30 12:24

*Disconnected (Connection reset by peer).

*Now talking on #boycottnovell

*Topic for #boycottnovell is: TechRights.org | Channel #boycottnovell for http://TechRights.org | Free Software Sentry – watching and reporting maneuvers of those who oppose software freedom :: please also join channels #techrights and #boycottnovell-social

*Topic for #boycottnovell set by schestowitz!~roy@haii6za73zabc.irc at Tue Jun 1 20:22:10 2021

*rianne__ (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

*libertybox (~schestowitz_log@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 12:38

*job (~job@bfjdrpzm6v77y.irc) has joined #boycottnovell

Jun 30 12:38

*Disconnected (Connection reset by peer).

Jun 30 12:45

*Now talking on #boycottnovell

*Topic for #boycottnovell set by schestowitz!~roy@haii6za73zabc.irc at Tue Jun 1 20:22:10 2021

*rianne__ (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

*Techrights-sec (~quassel@22e8m8t4gqjin.irc) has joined #boycottnovell

*libertybox (~schestowitz_log@22e8m8t4gqjin.irc) has joined #boycottnovell

Techrights-sec

One way would be to read the database directly and query for updates.

Techrights-sec

Another would be to poll the Wiki's RSS feed with cron and then scrape the HTML

Techrights-sec

I'm not sure how navigation within the mirrored wiki would work in Gemini.

Techrights-sec

It seems hard to create / import the navigation.

https://nitter.actionsack.com/yuhong2/status/1410188245678186498#m

Techrights-sec

Jun 30 13:12

-TechrightsBN/#boycottnovell-nitter.actionsack.com | Yuhong Bao (@yuhong2): "https://news.ycombinator.com/item?id=27686678 Part of the reason why I talked about Google so much is that even Techrights trusted it." | nitter

Jun 30 13:12

*job has quit (Ping timeout: 2m30s)

Jun 30 13:21

*Disconnected (Connection timed out).

Jun 30 13:36

*Now talking on #boycottnovell

*Topic for #boycottnovell set by schestowitz!~roy@haii6za73zabc.irc at Tue Jun 1 20:22:10 2021

*rianne (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

*libertybox (~schestowitz_log@22e8m8t4gqjin.irc) has joined #boycottnovell

*acer-box (~acer-box@22e8m8t4gqjin.irc) has joined #boycottnovell

*psydroid_ (~psydroid@cqggrmwgu7gji.irc) has joined #boycottnovell

*blitzed (~blitzed@dtqwd9qmkxpqy.irc) has joined #boycottnovell

*spazzz (~spazz@urifce6zxwtdi.irc) has joined #boycottnovell

*bridge (~bridge@sp6mg7ktjfurg.irc) has joined #boycottnovell

*irc.techrights.org gives channel operator status to bridge

*Techrights-sec (~quassel@22e8m8t4gqjin.irc) has joined #boycottnovell

*liberty_box (~liberty@22e8m8t4gqjin.irc) has joined #boycottnovell

*MinceR` (~mincer@sgfzprzxvda2g.irc) has joined #boycottnovell

Jun 30 13:44

*psydruid (~psydruid@jevhxkzmtrbww.irc) has joined #boycottnovell

Jun 30 13:45

*Disconnected (Connection reset by peer).

*Now talking on #boycottnovell

*Topic for #boycottnovell set by schestowitz!~roy@haii6za73zabc.irc at Tue Jun 1 20:22:10 2021

*blitzed (~blitzed@dtqwd9qmkxpqy.irc) has joined #boycottnovell

*rianne (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

https://nitter.actionsack.com/lonestarangle/status/1410282614729105413#m

*psydruid (~psydruid@jevhxkzmtrbww.irc) has joined #boycottnovell

Jun 30 13:54

*psydroid_ (~psydroid@cqggrmwgu7gji.irc) has joined #boycottnovell

Jun 30 13:54

*Techrights-sec (~quassel@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 13:54

*MinceR` (~mincer@sgfzprzxvda2g.irc) has joined #boycottnovell

Jun 30 13:56

*MinceR` is now known as MinceR

Jun 30 13:58

*job (~job@bfjdrpzm6v77y.irc) has joined #boycottnovell

Jun 30 14:09

*Disconnected (Connection timed out).

Jun 30 14:32

*Now talking on #boycottnovell

Jun 30 14:36

*Topic for #boycottnovell set by schestowitz!~roy@haii6za73zabc.irc at Tue Jun 1 20:22:10 2021

Jun 30 14:36

Techrights-sec

what are the five most popular wiki pages? I'm looking at the EPO wikipage

Jun 30 15:11

Techrights-sec

but need more examples to ensure a more generic conversion.

Jun 30 15:11

schestowitz

we're doing some work on routers at the moment, so the sites aren't in a state to be doing work on right now. most viewed pages would inclue front page, mono etc.

Jun 30 15:12

*job has quit (connection closed)

Jun 30 15:19

*bridge has quit (connection closed)

Jun 30 15:34

*bridge (~bridge@sp6mg7ktjfurg.irc) has joined #boycottnovell

Jun 30 15:37

*irc.techrights.org gives channel operator status to bridge

Jun 30 15:37

*qa2 has quit (Quit: )

Jun 30 16:48

*DaemonFC (~daemonfc@hyvmz96nd5wc2.irc) has joined #boycottnovell

Jun 30 17:29

*liberty_box has quit (Ping timeout: 2m30s)

Jun 30 17:43

*rianne_ has quit (Ping timeout: 2m30s)

Jun 30 17:43

*rianne_ (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 18:06

*liberty_box (~liberty@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 18:06

*liberty_box has quit (Ping timeout: 2m30s)

Jun 30 18:13

*rianne_ has quit (Ping timeout: 2m30s)

Jun 30 18:13

*rianne_ (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 18:22

*liberty_box (~liberty@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 18:23

*DaemonFC has quit (Quit: Leaving)

Jun 30 18:37

*DaemonFC (~daemonfc@hcz4kwb5fv9w4.irc) has joined #boycottnovell

Jun 30 18:45

*psydroid_ has quit (connection closed)

Jun 30 18:54

*liberty_box has quit (Ping timeout: 2m30s)

Jun 30 18:55

*rianne_ has quit (Ping timeout: 2m30s)

Jun 30 18:55

*liberty_box (~liberty@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 18:57

*rianne_ (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 18:57

*DaemonFC has quit (Quit: Leaving)

Jun 30 18:59

*DaemonFC (~daemonfc@rs9rjg3ve4y6a.irc) has joined #boycottnovell

Jun 30 19:12

*DaemonFC has quit (Ping timeout: 2m30s)

Jun 30 19:38

*liberty_box has quit (Ping timeout: 2m30s)

Jun 30 19:43

*rianne_ has quit (Ping timeout: 2m30s)

Jun 30 19:44

*rianne_ (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 20:12

*liberty_box (~liberty@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 20:12

Techrights-sec

Jun 30 20:19

-TechrightsBN/#boycottnovell-nitter.actionsack.com | Americana🗽 (@lonestarangle): "🤨http://techrights.org/2020/07/02/ddg-privacy-abuser-in-disguise/" | nitter

Jun 30 20:19

*rianne_ has quit (Ping timeout: 2m30s)

Jun 30 20:22

*liberty_box has quit (Ping timeout: 2m30s)

Jun 30 20:22

*rianne_ (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 20:36

*liberty_box (~liberty@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 20:37

*liberty_box has quit (Ping timeout: 2m30s)

Jun 30 21:08

*rianne_ has quit (Ping timeout: 2m30s)

Jun 30 21:09

*rianne_ (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 21:13

*rianne_ has quit (Ping timeout: 2m30s)

Jun 30 21:17

*rianne_ (~rianne@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 21:23

*liberty_box (~liberty@22e8m8t4gqjin.irc) has joined #boycottnovell

Jun 30 21:24

schestowitz

>>> What is your impression? Do the videos work for you? Have you had any

schestowitz

>>> experience with video over IPFS issues for your own videos?

schestowitz

>> I know gemini:// is unsuitable for large file.

schestowitz

schestowitz

>> Some people told me that Techrights videos ended up in IPFS, but I never

schestowitz

>> tried streaming over IPFS and I suppose lag would be a colossal barrier.

schestowitz

schestowitz

>> IPFS is probably not good as a protocol for videos.

schestowitz

schestowitz

> The problem can be subdivided into different spaces:

schestowitz

schestowitz

> - the ipfs.io gateways

schestowitz

schestowitz

> - IPFS itself

schestowitz

schestowitz

> The problems may only exist when a user accesses content through

schestowitz

> ipfs.io. I could simply run my own alternative to ipfs.io and include

schestowitz

> that in my URLs. People with a local IPFS daemon could still access the

schestowitz

> content if my gateway is down.