GNU bug report logs - #68361
Mozzarella may list non-free add-ons

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: gnuzilla; Reported by: Nguyễn Gia Phong <cnx@HIDDEN>; dated Wed, 10 Jan 2024 02:18:02 UTC; Maintainer for gnuzilla is bug-gnuzilla@HIDDEN.

Message received at 68361 <at> debbugs.gnu.org:


Received: (at 68361) by debbugs.gnu.org; 10 Jan 2024 19:03:47 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jan 10 14:03:47 2024
Received: from localhost ([127.0.0.1]:43202 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rNdrf-0001Mh-F5
	for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 14:03:47 -0500
Received: from cross.elm.relay.mailchannels.net ([23.83.212.46]:8786)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <bill-auger@HIDDEN>) id 1rNdrd-0001MZ-Mw
 for 68361 <at> debbugs.gnu.org; Wed, 10 Jan 2024 14:03:46 -0500
X-Sender-Id: dreamhost|x-authsender|bill-auger@HIDDEN
Received: from relay.mailchannels.net (localhost [127.0.0.1])
 by relay.mailchannels.net (Postfix) with ESMTP id 0BEA081C3C;
 Wed, 10 Jan 2024 19:03:45 +0000 (UTC)
Received: from pdx1-sub0-mail-a205.dreamhost.com (unknown [127.0.0.6])
 (Authenticated sender: dreamhost)
 by relay.mailchannels.net (Postfix) with ESMTPA id 6BFD081B04;
 Wed, 10 Jan 2024 19:03:44 +0000 (UTC)
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1704913424; a=rsa-sha256;
 cv=none;
 b=Tj9RvdOS7vlAjfttKd/lUjru3sYILxhkfzWHMlQz+i2oVzLguZFQ+T/KousHRvm5g2smSi
 14ZAZXnCc0bDc0OE6lXXFLRWUa6FwWpVQnw77e1PG9mr88YvWgsfwCWZVJW/Dtq0YiYpzP
 BuhcAHLIYPgjhX0zgsmnw1/JGdGye46dTG/fik1oa1MG4lNcwNWkNBEmDfou/XKcZS8+d7
 l18VheMyzY7BGUpSuTLIaXO3/8kyxP953RlPIRUMM3O8IEH+l35yF2e2yPzLEB2AELkO9O
 8stpAmL00YLZaLgPBiLOxt8PnSe2VaIbjFibLEYhXK7msS2yRbbZ41b6wq737w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
 d=mailchannels.net; s=arc-2022; t=1704913424;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding:
 in-reply-to:in-reply-to:references:references:dkim-signature;
 bh=1Gc8gkDaQTfCZgTkksY0JG/iKilO/XzrWhgHmq1yD2o=;
 b=vy7ub2lQG1cUcOUB62wfAqSrRw26tQstLkEjBPqsWRVXS4lKPjrwRAHTpYb6+dgVKaUsp7
 WuhMTEgePowGc4jGQGXD/6gj180cLKwwerswkHsiS9W++v6V8kpDDBracpITj51eeO3/SO
 880Uqntdj4Il/F25ZS3FeIKNyz4C6M3DPTFOwJLit0jfoJ0TvkJPw+vWqUtjDTwhWwPPGY
 SZvWljhzpRDt6IF/dJd1TVjRVQX9r4N2n4k+CVxfKIGH4u7lc87q+UtfnotCFL13TQv6T2
 jH4US3n0ifbWDUm9ULvrWEgLnJsriqp9Ab2mb8bKJRmV9m2suOENnXe930Nc7A==
ARC-Authentication-Results: i=1; rspamd-568947cb6c-x5b6n;
 auth=pass smtp.auth=dreamhost smtp.mailfrom=bill-auger@HIDDEN
X-Sender-Id: dreamhost|x-authsender|bill-auger@HIDDEN
X-MC-Relay: Neutral
X-MailChannels-SenderId: dreamhost|x-authsender|bill-auger@HIDDEN
X-MailChannels-Auth-Id: dreamhost
X-Army-Obese: 6e913590496ba7fc_1704913424674_1060515945
X-MC-Loop-Signature: 1704913424674:3856108318
X-MC-Ingress-Time: 1704913424674
Received: from pdx1-sub0-mail-a205.dreamhost.com (pop.dreamhost.com
 [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384)
 by 100.100.10.89 (trex/6.9.2); Wed, 10 Jan 2024 19:03:44 +0000
Received: from parabola.localdomain (024-183-181-070.res.spectrum.com
 [24.183.181.70])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest
 SHA256) (No client certificate requested)
 (Authenticated sender: bill-auger@HIDDEN)
 by pdx1-sub0-mail-a205.dreamhost.com (Postfix) with ESMTPSA id 4T9HJb4lbvz5F; 
 Wed, 10 Jan 2024 11:03:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=peers.community;
 s=dreamhost; t=1704913424;
 bh=1Gc8gkDaQTfCZgTkksY0JG/iKilO/XzrWhgHmq1yD2o=;
 h=Date:From:To:Cc:Subject:Content-Type:Content-Transfer-Encoding;
 b=HzMyNICUqdXnWqUp25MHSjq1JN6TAtMVpVxsof1WIprFd8aoX2WLlI8YKHpmHe++Y
 60FEl+SO2b5KPGkRaQSRuxucc58noW9xblmOBt8D9vQHBUgk7CzA6sDENRFXseueZZ
 yRimpFiWohjhieKNb84fKR60a2SpxpUwQQXg3XP/QyQvsCjsEY/C4m3UZ01GA3Xv1D
 6peK+V2mZbXKymKDf3B4yKVPdehEvmvG18QZ44cUpYa4C0ZOT+qwHhTuZ7PND8qpnY
 yfEFRSxz1SRCBMTCxvBGzQnpcl0CDMNipJlH5JwLxWWiPXGlXdyHfsNWm+q4Abq3EU
 N0pUXfy0hkKCw==
Date: Wed, 10 Jan 2024 14:03:01 -0500
From: bill-auger <bill-auger@HIDDEN>
To: bug-gnuzilla--- via GNUzilla bug reports <bug-gnuzilla@HIDDEN>
Subject: Re: bug#68361: Mozzarella may list non-free add-ons
Message-ID: <20240110140301.4f25ad30@HIDDEN>
In-Reply-To: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
Organization: parabola gnu/linux
X-Mailer: Claws Mail 4.1.1 (GTK 3.24.39; x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Spam-Score: -0.0 (/)
X-Debbugs-Envelope-To: 68361
Cc: 68361 <at> debbugs.gnu.org, =?UTF-8?B?Tmd1eeG7hW4=?= Gia Phong <cnx@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

though the public instance of the mozarella website is hosted under gnuzilla's
web space, it not part of the gnuzilla project or any GNU project - it is used
by other web browsers also, such as parabola's iceweasel and trisquel's
abrowser - mozarella's author probably does not read this mailing list; so i
would not expect anything to happen unless this issue is raised on the
mozarella bug tracker

https://gitlab.trisquel.org/joeall/mozzarella/-/issues

i suppose that a link to the bug tracker should be added to the mozarella UI to
guide bug reports toward the author




Information forwarded to bug-gnuzilla@HIDDEN:
bug#68361; Package gnuzilla. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 10 Jan 2024 19:03:58 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jan 10 14:03:58 2024
Received: from localhost ([127.0.0.1]:43205 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rNdrp-0001ND-Rb
	for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 14:03:58 -0500
Received: from lists.gnu.org ([2001:470:142::17]:43334)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <bill-auger@HIDDEN>) id 1rNdrn-0001Mu-La
 for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 14:03:56 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <bill-auger@HIDDEN>)
 id 1rNdrj-0001C4-9t
 for bug-gnuzilla@HIDDEN; Wed, 10 Jan 2024 14:03:51 -0500
Received: from buffalo.tulip.relay.mailchannels.net ([23.83.218.24])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <bill-auger@HIDDEN>)
 id 1rNdrh-0002kf-Gx
 for bug-gnuzilla@HIDDEN; Wed, 10 Jan 2024 14:03:51 -0500
X-Sender-Id: dreamhost|x-authsender|bill-auger@HIDDEN
Received: from relay.mailchannels.net (localhost [127.0.0.1])
 by relay.mailchannels.net (Postfix) with ESMTP id 0BEA081C3C;
 Wed, 10 Jan 2024 19:03:45 +0000 (UTC)
Received: from pdx1-sub0-mail-a205.dreamhost.com (unknown [127.0.0.6])
 (Authenticated sender: dreamhost)
 by relay.mailchannels.net (Postfix) with ESMTPA id 6BFD081B04;
 Wed, 10 Jan 2024 19:03:44 +0000 (UTC)
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1704913424; a=rsa-sha256;
 cv=none;
 b=Tj9RvdOS7vlAjfttKd/lUjru3sYILxhkfzWHMlQz+i2oVzLguZFQ+T/KousHRvm5g2smSi
 14ZAZXnCc0bDc0OE6lXXFLRWUa6FwWpVQnw77e1PG9mr88YvWgsfwCWZVJW/Dtq0YiYpzP
 BuhcAHLIYPgjhX0zgsmnw1/JGdGye46dTG/fik1oa1MG4lNcwNWkNBEmDfou/XKcZS8+d7
 l18VheMyzY7BGUpSuTLIaXO3/8kyxP953RlPIRUMM3O8IEH+l35yF2e2yPzLEB2AELkO9O
 8stpAmL00YLZaLgPBiLOxt8PnSe2VaIbjFibLEYhXK7msS2yRbbZ41b6wq737w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
 d=mailchannels.net; s=arc-2022; t=1704913424;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding:
 in-reply-to:in-reply-to:references:references:dkim-signature;
 bh=1Gc8gkDaQTfCZgTkksY0JG/iKilO/XzrWhgHmq1yD2o=;
 b=vy7ub2lQG1cUcOUB62wfAqSrRw26tQstLkEjBPqsWRVXS4lKPjrwRAHTpYb6+dgVKaUsp7
 WuhMTEgePowGc4jGQGXD/6gj180cLKwwerswkHsiS9W++v6V8kpDDBracpITj51eeO3/SO
 880Uqntdj4Il/F25ZS3FeIKNyz4C6M3DPTFOwJLit0jfoJ0TvkJPw+vWqUtjDTwhWwPPGY
 SZvWljhzpRDt6IF/dJd1TVjRVQX9r4N2n4k+CVxfKIGH4u7lc87q+UtfnotCFL13TQv6T2
 jH4US3n0ifbWDUm9ULvrWEgLnJsriqp9Ab2mb8bKJRmV9m2suOENnXe930Nc7A==
ARC-Authentication-Results: i=1; rspamd-568947cb6c-x5b6n;
 auth=pass smtp.auth=dreamhost smtp.mailfrom=bill-auger@HIDDEN
X-Sender-Id: dreamhost|x-authsender|bill-auger@HIDDEN
X-MC-Relay: Neutral
X-MailChannels-SenderId: dreamhost|x-authsender|bill-auger@HIDDEN
X-MailChannels-Auth-Id: dreamhost
X-Army-Obese: 6e913590496ba7fc_1704913424674_1060515945
X-MC-Loop-Signature: 1704913424674:3856108318
X-MC-Ingress-Time: 1704913424674
Received: from pdx1-sub0-mail-a205.dreamhost.com (pop.dreamhost.com
 [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384)
 by 100.100.10.89 (trex/6.9.2); Wed, 10 Jan 2024 19:03:44 +0000
Received: from parabola.localdomain (024-183-181-070.res.spectrum.com
 [24.183.181.70])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest
 SHA256) (No client certificate requested)
 (Authenticated sender: bill-auger@HIDDEN)
 by pdx1-sub0-mail-a205.dreamhost.com (Postfix) with ESMTPSA id 4T9HJb4lbvz5F; 
 Wed, 10 Jan 2024 11:03:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=peers.community;
 s=dreamhost; t=1704913424;
 bh=1Gc8gkDaQTfCZgTkksY0JG/iKilO/XzrWhgHmq1yD2o=;
 h=Date:From:To:Cc:Subject:Content-Type:Content-Transfer-Encoding;
 b=HzMyNICUqdXnWqUp25MHSjq1JN6TAtMVpVxsof1WIprFd8aoX2WLlI8YKHpmHe++Y
 60FEl+SO2b5KPGkRaQSRuxucc58noW9xblmOBt8D9vQHBUgk7CzA6sDENRFXseueZZ
 yRimpFiWohjhieKNb84fKR60a2SpxpUwQQXg3XP/QyQvsCjsEY/C4m3UZ01GA3Xv1D
 6peK+V2mZbXKymKDf3B4yKVPdehEvmvG18QZ44cUpYa4C0ZOT+qwHhTuZ7PND8qpnY
 yfEFRSxz1SRCBMTCxvBGzQnpcl0CDMNipJlH5JwLxWWiPXGlXdyHfsNWm+q4Abq3EU
 N0pUXfy0hkKCw==
Date: Wed, 10 Jan 2024 14:03:01 -0500
From: bill-auger <bill-auger@HIDDEN>
To: bug-gnuzilla--- via GNUzilla bug reports <bug-gnuzilla@HIDDEN>
Subject: Re: bug#68361: Mozzarella may list non-free add-ons
Message-ID: <20240110140301.4f25ad30@HIDDEN>
In-Reply-To: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
Organization: parabola gnu/linux
X-Mailer: Claws Mail 4.1.1 (GTK 3.24.39; x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Received-SPF: pass client-ip=23.83.218.24;
 envelope-from=bill-auger@HIDDEN;
 helo=buffalo.tulip.relay.mailchannels.net
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.9 (/)
X-Debbugs-Envelope-To: submit
Cc: 68361 <at> debbugs.gnu.org, =?UTF-8?B?Tmd1eeG7hW4=?= Gia Phong <cnx@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.1 (/)

though the public instance of the mozarella website is hosted under gnuzilla's
web space, it not part of the gnuzilla project or any GNU project - it is used
by other web browsers also, such as parabola's iceweasel and trisquel's
abrowser - mozarella's author probably does not read this mailing list; so i
would not expect anything to happen unless this issue is raised on the
mozarella bug tracker

https://gitlab.trisquel.org/joeall/mozzarella/-/issues

i suppose that a link to the bug tracker should be added to the mozarella UI to
guide bug reports toward the author




Information forwarded to bug-gnuzilla@HIDDEN:
bug#68361; Package gnuzilla. Full text available.

Message received at 68361 <at> debbugs.gnu.org:


Received: (at 68361) by debbugs.gnu.org; 10 Jan 2024 17:06:18 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jan 10 12:06:18 2024
Received: from localhost ([127.0.0.1]:42686 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rNc1y-0001qt-BH
	for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 12:06:18 -0500
Received: from out4-smtp.messagingengine.com ([66.111.4.28]:34075)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <clement@HIDDEN>) id 1rNc1w-0001qb-E4
 for 68361 <at> debbugs.gnu.org; Wed, 10 Jan 2024 12:06:17 -0500
Received: from compute6.internal (compute6.nyi.internal [10.202.2.47])
 by mailout.nyi.internal (Postfix) with ESMTP id 71C455C0179;
 Wed, 10 Jan 2024 12:06:12 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163])
 by compute6.internal (MEProxy); Wed, 10 Jan 2024 12:06:12 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lassieur.org; h=
 cc:cc:content-transfer-encoding:content-type:content-type:date
 :date:from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to; s=fm1; t=1704906372;
 x=1704992772; bh=/5MbURgmt1hwg9zNm6JuTRz1zOeDcGx6S/03mCdesvQ=; b=
 amhJECyrJXygo/iAL0q9VHNSi/XC8xEcu2DYraI4qIpgS1F526L/jMNL1BciC6Kq
 i9Y9qtzQHOV4j1MZ1Np/TGe3h90kbEgVg6E+rLOaf8NPgrX3okl62Hy6t8ynNLV0
 hlzUNXeEzubU2QPbvtYQcCXwH7Z4eqd11dpJpRfCokgEMHoO+R+uO4V2JUqoEmEa
 GIuMv9yH9zRv3QI/3k/y7ibuKXUhT+9nwRBkJFcsxEUwVNfPuEUD2qqAj/2xfwm3
 MyIQ8/eoN1WWSgPHwcwTW3rY7jdgmJhRpp294lwsWx+hBoMkOrMB/vcK8yO/V/1g
 hJeMBSVWWb9/zcQLrDaHYQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:content-type:date:date:feedback-id:feedback-id
 :from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1704906372; x=
 1704992772; bh=/5MbURgmt1hwg9zNm6JuTRz1zOeDcGx6S/03mCdesvQ=; b=l
 FJrPxBBSoxT6VE5/NtqM/ox/r9Jgo6J0wcywlt044L5xVhCaOKoHhq/KcosVC89e
 DlQ8IEj60zShe5j/4+pJ93zVwkxeNTWHWq5i5k4kibsyS7bG2dCYPsw+TasY88Kd
 6WPrFtu3sTeooy5W+fHEqMAFUfyFYqa2/mC4+0xjd3T8Fycn/Cfh9gciEe/MdGUx
 ILuAJOFu3TH8WvkPlckQhpK29vl7AQdUrtLiwgEMSF3oGK8z656QI6h7DWLAnRff
 o+QKqbsq8Z89qaB+O7hJK8pVKgrrI9irlQcp7fXVAb35BXOQv46fKU57emtgKTPL
 deEboq4hqK9+sle1WkENA==
X-ME-Sender: <xms:hM6eZezHLr_XPZmv2xoQf0Ohw-kxY7SV_UiHvHhEbOrLM53hN6XT1Q>
 <xme:hM6eZaRDD6yNk5vFB9xi-w_O2PoUPEcW7ao9cIFQ8K9-qk98G0crcmvQhaIPAjR5d
 y48KWNL1jkR-0YIhbg>
X-ME-Received: <xmr:hM6eZQV91YN5nUuji098x-mE1Azwxc2gq2IT-yMpUy-LpchMIMUE7Q>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdeiuddgleehucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucenucfjughrpefhvfevufgjfhffkfgfgggtgfesth
 hqredttderjeenucfhrhhomhepvehlrohmvghnthcunfgrshhsihgvuhhruceotghlvghm
 vghntheslhgrshhsihgvuhhrrdhorhhgqeenucggtffrrghtthgvrhhnpeeikeekhedufe
 efteekteeutdetgeegkeevveegjedtleetgeehjeelueetgeehieenucffohhmrghinhep
 ghhithhhuhgsuhhsvghrtghonhhtvghnthdrtghomhdpmhhoiihilhhlrgdrohhrghdpgh
 hnuhdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhr
 ohhmpegtlhgvmhgvnhhtsehlrghsshhivghurhdrohhrgh
X-ME-Proxy: <xmx:hM6eZUgluMuqOEvVzE7DENzCXnxsdQQaVS5dxKcikOco-PuPmBEOgw>
 <xmx:hM6eZQBUijnRLzbO2qPt3QYBIYykayOIo5pRBCaVj3hHImqdGlXtuw>
 <xmx:hM6eZVJgRLirXFSwoT8utp313_OLHqr7-d9mJJ9HiPgDUAJC97mgEw>
 <xmx:hM6eZbpVMexwJ7A1RxvdQEEqFxzUkwKEGVKemMGwGR6hTBu32p_3_w>
Feedback-ID: i4c21472a:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed,
 10 Jan 2024 12:06:11 -0500 (EST)
From: =?utf-8?Q?Cl=C3=A9ment_Lassieur?= <clement@HIDDEN>
To: 68361 <at> debbugs.gnu.org
Subject: Re: bug#68361: Mozzarella may list non-free add-ons
In-Reply-To: <87wmshjfy1.fsf@HIDDEN> (=?utf-8?Q?=22Cl=C3=A9ment?=
 Lassieur"'s message of "Wed, 10 Jan 2024 17:44:54 +0100")
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
 <87wmshjfy1.fsf@HIDDEN>
Date: Wed, 10 Jan 2024 18:06:07 +0100
Message-ID: <87sf35jeyo.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 68361
Cc: cnx@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Wed, Jan 10 2024, Cl=C3=A9ment Lassieur wrote:

> On Wed, Jan 10 2024, bug-gnuzilla--- via GNUzilla bug reports wrote:
>
>> Hi,
>>
>> I learned about Mozzarella from social media, so I missed
>> the official announcement of how it is curated,
>> i.e. automatically or manually added entries.
>>
>> Either way, I spotted ff2mpv being listed
>> although it is published under a non-free license:
>> https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE
>>
>> The Firefox add-on page still shows the original Expat license though,
>> so Mozzarella inherit this metadata.
>>
>> I think cases like this are rare enough to not demand a web UI
>> to report extensions add-ons accidentally listed on Mozzarella,
>> but there should be a mechanism to manually remove it
>> from the repository to avoid misleading users into installing
>> proprietary software.
>>
>> BTW all Mozzarella pages have an empty <title>, which makes it difficult
>> to browse multiple extensions in different tabs/windows.
>>
>> Kind regards,
>> Phong
>
> Hi,
>
> I think this is an issue indeed.  But there is another one that is more
> serious: even if we remove ff2mpv from Mozzarella, all users who have it
> installed will have new updates pulling the non-free code forever.
>
> A possible fix would be to change the source of the add-ons, from
> addons.mozilla.org to Guix
> (e.g. file:///gnu/store/dxck0g51w8kzmzdn1nx97dsnp78jq4sv-ublock-origin-1.=
54.0-xpi/lib/mozilla/extensions/uBlock0.firefox.xpi).

Sorry my link is wrong.  That would be
https://bordeaux.guix.gnu.org/nar/lzip/dxck0g51w8kzmzdn1nx97dsnp78jq4sv-ubl=
ock-origin-1.54.0-xpi.
But it wouldn't work right away anyway because the format is not correct.

> That would require us to sign our add-ons though.  I don't know how
> feasible it is.
>
> Cl=C3=A9ment




Information forwarded to bug-gnuzilla@HIDDEN:
bug#68361; Package gnuzilla. Full text available.

Message received at 68361 <at> debbugs.gnu.org:


Received: (at 68361) by debbugs.gnu.org; 10 Jan 2024 16:45:07 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jan 10 11:45:06 2024
Received: from localhost ([127.0.0.1]:42646 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rNbhS-0004Zt-Eb
	for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 11:45:06 -0500
Received: from out4-smtp.messagingengine.com ([66.111.4.28]:45993)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <clement@HIDDEN>) id 1rNbhP-0004MJ-PG
 for 68361 <at> debbugs.gnu.org; Wed, 10 Jan 2024 11:45:04 -0500
Received: from compute2.internal (compute2.nyi.internal [10.202.2.46])
 by mailout.nyi.internal (Postfix) with ESMTP id D18E05C0154;
 Wed, 10 Jan 2024 11:44:59 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163])
 by compute2.internal (MEProxy); Wed, 10 Jan 2024 11:44:59 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lassieur.org; h=
 cc:cc:content-transfer-encoding:content-type:content-type:date
 :date:from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to; s=fm1; t=1704905099;
 x=1704991499; bh=IZxNXuvbBTj2/Q0yCisnlFsyiRcb37PgPqTqQANBHXk=; b=
 mxaAho9TtlcpoO9qOPyh30mjiwP+slmdA/GKb6Sy2OsnADJtcrbnbdhEdfB338SQ
 5HapY46WfWMm5O+XEvD4JYbnhEgSziB/Q0IRL6AldQBygsZyQM9SZAP55SNvQUxf
 ml9mXYj6MvVduFn3i9SdBJrdpPlzKxqb2qBFbnXNOQbB7wQqobzm1ldauBo4pMLA
 GI2rL/xLNy6Y+kHDKeZn1XPc/tpJgGX1PrSOSztpA9fCzZyaTdAmCBQLqhM5nis7
 8XRKRIvXzlidmbV5NUshBO0xqVX9scGEyErWv8iaHXL78lqmWchYlrjy3X67kfdj
 B6tn24cL7M82OvEG3mXA2Q==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:content-type:date:date:feedback-id:feedback-id
 :from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1704905099; x=
 1704991499; bh=IZxNXuvbBTj2/Q0yCisnlFsyiRcb37PgPqTqQANBHXk=; b=T
 CIzpPQHdo1WLAL5V9kliR9kDhmYNazEQJcm4s0iMQNDkx5NvtLm9PwuCUvn7a1AR
 byvE630DPcnX0+rz/1AFsvJzqqaYZHG62hRk3Z0SbSDAS/Bb7f7k0xfBQr420jlb
 j4Kbpa5StrFpjdvlho5tGMxe8Nj1Yj4u8CoNz6VXGcvAzRWEA4cNE67ObQ0OSBh6
 GAcP56Yai0N03Ac+bJc07sxbkZ/0MrboYLyzijdZawIWXM8YPF/iIwo9MPDOt84+
 D3dlCv7Ny/4TZIbdGpZkeqGYJQfcCEWD3xnmkaZ2uWa1F4fLFtpoBWEeEPtRhypY
 MALOwsSCBns5RCrSZy40w==
X-ME-Sender: <xms:i8meZf8FcZbrCECro3Ukk82CadQZuDKy8qCmxR3Hy9S8aUqpm9C9TQ>
 <xme:i8meZbvDjIrMbUuXqpW8fqu_gl1TbIvJllt2kJIahlOp0Zq54tYLM1JcAzJp1GE6m
 XTu8HAzgaI4aSzdZQw>
X-ME-Received: <xmr:i8meZdCwjQegVY-9_KDStzubpvqsl7t-B1zkA46DHAj76FhbDMjyog>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdeiuddgleduucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
 cujfgurhephffvvefujghffffkfgggtgfgsehtqhertddtreejnecuhfhrohhmpeevlhor
 mhgvnhhtucfnrghsshhivghurhcuoegtlhgvmhgvnhhtsehlrghsshhivghurhdrohhrgh
 eqnecuggftrfgrthhtvghrnheptdetudeikeeggefhfeehudehvefhtdehteegffettdeu
 tdeuuefhgedutedvieeknecuffhomhgrihhnpehgihhthhhusghushgvrhgtohhnthgvnh
 htrdgtohhmpdhmohiiihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfr
 rghrrghmpehmrghilhhfrhhomheptghlvghmvghntheslhgrshhsihgvuhhrrdhorhhg
X-ME-Proxy: <xmx:i8meZbeU0ihp7tT5VxWjx84iFzJ2AzijtM45E7Tf-0YSNB5G9d-mFw>
 <xmx:i8meZUOAPZpqxtCYaj2nkWs6gt6T32r0CRMu7Zb6O_MKlllhOw7UdA>
 <xmx:i8meZdlqFsaEB5NvyoMa_iK11NDvSIbRmeiL5kOo6DCELiO4k5Hk6A>
 <xmx:i8meZe3fTFA5gkOvBJDI27mVfyFNlQFNmaJWkTI51ePuYO2FuzxHVQ>
Feedback-ID: i4c21472a:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed,
 10 Jan 2024 11:44:57 -0500 (EST)
From: =?utf-8?Q?Cl=C3=A9ment_Lassieur?= <clement@HIDDEN>
To: bug-gnuzilla--- via GNUzilla bug reports <bug-gnuzilla@HIDDEN>
Subject: Re: bug#68361: Mozzarella may list non-free add-ons
In-Reply-To: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN> (bug-gnuzilla@HIDDEN's
 message of "Wed, 10 Jan 2024 10:53:46 +0900")
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
Date: Wed, 10 Jan 2024 17:44:54 +0100
Message-ID: <87wmshjfy1.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 68361
Cc: 68361 <at> debbugs.gnu.org, =?utf-8?Q?Nguy=E1=BB=85n?= Gia Phong <cnx@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Wed, Jan 10 2024, bug-gnuzilla--- via GNUzilla bug reports wrote:

> Hi,
>
> I learned about Mozzarella from social media, so I missed
> the official announcement of how it is curated,
> i.e. automatically or manually added entries.
>
> Either way, I spotted ff2mpv being listed
> although it is published under a non-free license:
> https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE
>
> The Firefox add-on page still shows the original Expat license though,
> so Mozzarella inherit this metadata.
>
> I think cases like this are rare enough to not demand a web UI
> to report extensions add-ons accidentally listed on Mozzarella,
> but there should be a mechanism to manually remove it
> from the repository to avoid misleading users into installing
> proprietary software.
>
> BTW all Mozzarella pages have an empty <title>, which makes it difficult
> to browse multiple extensions in different tabs/windows.
>
> Kind regards,
> Phong

Hi,

I think this is an issue indeed.  But there is another one that is more
serious: even if we remove ff2mpv from Mozzarella, all users who have it
installed will have new updates pulling the non-free code forever.

A possible fix would be to change the source of the add-ons, from
addons.mozilla.org to Guix
(e.g. file:///gnu/store/dxck0g51w8kzmzdn1nx97dsnp78jq4sv-ublock-origin-1.54=
.0-xpi/lib/mozilla/extensions/uBlock0.firefox.xpi).

That would require us to sign our add-ons though.  I don't know how
feasible it is.

Cl=C3=A9ment




Information forwarded to bug-gnuzilla@HIDDEN:
bug#68361; Package gnuzilla. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 10 Jan 2024 16:45:29 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jan 10 11:45:29 2024
Received: from localhost ([127.0.0.1]:42651 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rNbho-0005bA-WC
	for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 11:45:29 -0500
Received: from lists.gnu.org ([2001:470:142::17]:33574)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <clement@HIDDEN>) id 1rNbhm-0004XQ-S3
 for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 11:45:27 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <clement@HIDDEN>)
 id 1rNbhS-0004EA-7L
 for bug-gnuzilla@HIDDEN; Wed, 10 Jan 2024 11:45:06 -0500
Received: from out4-smtp.messagingengine.com ([66.111.4.28])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <clement@HIDDEN>)
 id 1rNbhP-0002KB-PO
 for bug-gnuzilla@HIDDEN; Wed, 10 Jan 2024 11:45:05 -0500
Received: from compute2.internal (compute2.nyi.internal [10.202.2.46])
 by mailout.nyi.internal (Postfix) with ESMTP id D18E05C0154;
 Wed, 10 Jan 2024 11:44:59 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163])
 by compute2.internal (MEProxy); Wed, 10 Jan 2024 11:44:59 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lassieur.org; h=
 cc:cc:content-transfer-encoding:content-type:content-type:date
 :date:from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to; s=fm1; t=1704905099;
 x=1704991499; bh=IZxNXuvbBTj2/Q0yCisnlFsyiRcb37PgPqTqQANBHXk=; b=
 mxaAho9TtlcpoO9qOPyh30mjiwP+slmdA/GKb6Sy2OsnADJtcrbnbdhEdfB338SQ
 5HapY46WfWMm5O+XEvD4JYbnhEgSziB/Q0IRL6AldQBygsZyQM9SZAP55SNvQUxf
 ml9mXYj6MvVduFn3i9SdBJrdpPlzKxqb2qBFbnXNOQbB7wQqobzm1ldauBo4pMLA
 GI2rL/xLNy6Y+kHDKeZn1XPc/tpJgGX1PrSOSztpA9fCzZyaTdAmCBQLqhM5nis7
 8XRKRIvXzlidmbV5NUshBO0xqVX9scGEyErWv8iaHXL78lqmWchYlrjy3X67kfdj
 B6tn24cL7M82OvEG3mXA2Q==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:content-type:date:date:feedback-id:feedback-id
 :from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1704905099; x=
 1704991499; bh=IZxNXuvbBTj2/Q0yCisnlFsyiRcb37PgPqTqQANBHXk=; b=T
 CIzpPQHdo1WLAL5V9kliR9kDhmYNazEQJcm4s0iMQNDkx5NvtLm9PwuCUvn7a1AR
 byvE630DPcnX0+rz/1AFsvJzqqaYZHG62hRk3Z0SbSDAS/Bb7f7k0xfBQr420jlb
 j4Kbpa5StrFpjdvlho5tGMxe8Nj1Yj4u8CoNz6VXGcvAzRWEA4cNE67ObQ0OSBh6
 GAcP56Yai0N03Ac+bJc07sxbkZ/0MrboYLyzijdZawIWXM8YPF/iIwo9MPDOt84+
 D3dlCv7Ny/4TZIbdGpZkeqGYJQfcCEWD3xnmkaZ2uWa1F4fLFtpoBWEeEPtRhypY
 MALOwsSCBns5RCrSZy40w==
X-ME-Sender: <xms:i8meZf8FcZbrCECro3Ukk82CadQZuDKy8qCmxR3Hy9S8aUqpm9C9TQ>
 <xme:i8meZbvDjIrMbUuXqpW8fqu_gl1TbIvJllt2kJIahlOp0Zq54tYLM1JcAzJp1GE6m
 XTu8HAzgaI4aSzdZQw>
X-ME-Received: <xmr:i8meZdCwjQegVY-9_KDStzubpvqsl7t-B1zkA46DHAj76FhbDMjyog>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdeiuddgleduucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
 cujfgurhephffvvefujghffffkfgggtgfgsehtqhertddtreejnecuhfhrohhmpeevlhor
 mhgvnhhtucfnrghsshhivghurhcuoegtlhgvmhgvnhhtsehlrghsshhivghurhdrohhrgh
 eqnecuggftrfgrthhtvghrnheptdetudeikeeggefhfeehudehvefhtdehteegffettdeu
 tdeuuefhgedutedvieeknecuffhomhgrihhnpehgihhthhhusghushgvrhgtohhnthgvnh
 htrdgtohhmpdhmohiiihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfr
 rghrrghmpehmrghilhhfrhhomheptghlvghmvghntheslhgrshhsihgvuhhrrdhorhhg
X-ME-Proxy: <xmx:i8meZbeU0ihp7tT5VxWjx84iFzJ2AzijtM45E7Tf-0YSNB5G9d-mFw>
 <xmx:i8meZUOAPZpqxtCYaj2nkWs6gt6T32r0CRMu7Zb6O_MKlllhOw7UdA>
 <xmx:i8meZdlqFsaEB5NvyoMa_iK11NDvSIbRmeiL5kOo6DCELiO4k5Hk6A>
 <xmx:i8meZe3fTFA5gkOvBJDI27mVfyFNlQFNmaJWkTI51ePuYO2FuzxHVQ>
Feedback-ID: i4c21472a:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed,
 10 Jan 2024 11:44:57 -0500 (EST)
From: =?utf-8?Q?Cl=C3=A9ment_Lassieur?= <clement@HIDDEN>
To: bug-gnuzilla--- via GNUzilla bug reports <bug-gnuzilla@HIDDEN>
Subject: Re: bug#68361: Mozzarella may list non-free add-ons
In-Reply-To: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN> (bug-gnuzilla@HIDDEN's
 message of "Wed, 10 Jan 2024 10:53:46 +0900")
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
Date: Wed, 10 Jan 2024 17:44:54 +0100
Message-ID: <87wmshjfy1.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Received-SPF: pass client-ip=66.111.4.28; envelope-from=clement@HIDDEN;
 helo=out4-smtp.messagingengine.com
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,
 T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.6 (/)
X-Debbugs-Envelope-To: submit
Cc: 68361 <at> debbugs.gnu.org, =?utf-8?Q?Nguy=E1=BB=85n?= Gia Phong <cnx@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.4 (/)

On Wed, Jan 10 2024, bug-gnuzilla--- via GNUzilla bug reports wrote:

> Hi,
>
> I learned about Mozzarella from social media, so I missed
> the official announcement of how it is curated,
> i.e. automatically or manually added entries.
>
> Either way, I spotted ff2mpv being listed
> although it is published under a non-free license:
> https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE
>
> The Firefox add-on page still shows the original Expat license though,
> so Mozzarella inherit this metadata.
>
> I think cases like this are rare enough to not demand a web UI
> to report extensions add-ons accidentally listed on Mozzarella,
> but there should be a mechanism to manually remove it
> from the repository to avoid misleading users into installing
> proprietary software.
>
> BTW all Mozzarella pages have an empty <title>, which makes it difficult
> to browse multiple extensions in different tabs/windows.
>
> Kind regards,
> Phong

Hi,

I think this is an issue indeed.  But there is another one that is more
serious: even if we remove ff2mpv from Mozzarella, all users who have it
installed will have new updates pulling the non-free code forever.

A possible fix would be to change the source of the add-ons, from
addons.mozilla.org to Guix
(e.g. file:///gnu/store/dxck0g51w8kzmzdn1nx97dsnp78jq4sv-ublock-origin-1.54=
.0-xpi/lib/mozilla/extensions/uBlock0.firefox.xpi).

That would require us to sign our add-ons though.  I don't know how
feasible it is.

Cl=C3=A9ment




Information forwarded to bug-gnuzilla@HIDDEN:
bug#68361; Package gnuzilla. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 10 Jan 2024 02:17:55 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Jan 09 21:17:55 2024
Received: from localhost ([127.0.0.1]:41467 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rNOAE-00037j-Ni
	for submit <at> debbugs.gnu.org; Tue, 09 Jan 2024 21:17:55 -0500
Received: from lists.gnu.org ([2001:470:142::17]:50778)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cnx@HIDDEN>) id 1rNO1t-0000Hx-AP
 for submit <at> debbugs.gnu.org; Tue, 09 Jan 2024 21:09:18 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <cnx@HIDDEN>) id 1rNO1g-0005zg-GN
 for bug-gnuzilla@HIDDEN; Tue, 09 Jan 2024 21:09:04 -0500
Received: from tem.loang.net ([2a03:3b40:100::1:2])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.90_1) (envelope-from <cnx@HIDDEN>) id 1rNO1e-0002gr-M5
 for bug-gnuzilla@HIDDEN; Tue, 09 Jan 2024 21:09:04 -0500
DKIM-Signature: a=rsa-sha256; bh=x024ZgAPIGNyOSSXoKrw6CPMbVYh9bsYnCOkzXpbn98=; 
 c=relaxed/relaxed; d=loang.net;
 h=Subject:Subject:Sender:To:To:Cc:From:From:Date:Date:MIME-Version:Content-Type:Content-Type:Content-Transfer-Encoding:Reply-To:In-Reply-To:Message-Id:Message-Id:References:Autocrypt:Openpgp;
 i=@loang.net; s=default; t=1704851634; v=1; x=1705283634;
 b=0J9qkigzTiF9ici++8+FSrua+Hk4Vm12dIZdLQ2upJgvBKnOuAOnxNVVyjKXtFyP8N9F+Vmf
 EirXXQ1dOYWfE5U9WOlbVHGoUovSHCC1eQU8b6l/b0FUwpv1+pXusgdwbq9Umse+xtmdgJwHW42
 tbw/XTEqLwnxNUHdqm8q0Xc8fsrkEIHKG7F9I0hAjWk7hN4EthtaduSKl3+mljjiyaYVv3NU4Or
 VA6IoHcA+jjWvplqyE8T63hrRdGvEjsyfZQmnuRyGsAoY7TGM0I+BxtGwQvMAP3+cxeeehzl0un
 d1HPuxw8WHDfHcsth92gAnKhUSvAsmVMwJ4RZqWXLI1Tg==
Received: by tem.loang.net (envelope-sender <cnx@HIDDEN>) with ESMTPS id
 3d45eab1; Wed, 10 Jan 2024 01:53:54 +0000
Content-Type: multipart/signed;
 boundary=cc3ac21dd79a92ef0e8862b73508645d83afda040bdce10f932822a36615;
 micalg=pgp-sha512; protocol="application/pgp-signature"
Date: Wed, 10 Jan 2024 10:53:46 +0900
Message-Id: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
Subject: Mozzarella may list non-free add-ons
To: <bug-gnuzilla@HIDDEN>
From: =?utf-8?q?Nguy=E1=BB=85n_Gia_Phong?= <cnx@HIDDEN>
X-Mailer: aerc 0.15.2
Received-SPF: pass client-ip=2a03:3b40:100::1:2; envelope-from=cnx@HIDDEN;
 helo=tem.loang.net
X-Spam_score_int: -12
X-Spam_score: -1.3
X-Spam_bar: -
X-Spam_report: (-1.3 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 MIME_HEADER_CTYPE_ONLY=0.1, SPF_HELO_SOFTFAIL=0.732, SPF_PASS=-0.001,
 T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.1 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  Hi, I learned about Mozzarella from social media, so I missed
 the official announcement of how it is curated, i.e. automatically or manually
 added entries. Either way,
 I spotted ff2mpv being listed although it is published
 under a non-free license:
 https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE
 Content analysis details:   (1.1 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 0.1 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required
 MIME headers
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Debbugs-Envelope-To: submit
X-Mailman-Approved-At: Tue, 09 Jan 2024 21:17:53 -0500
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.1 (/)

--cc3ac21dd79a92ef0e8862b73508645d83afda040bdce10f932822a36615
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8

Hi,

I learned about Mozzarella from social media, so I missed
the official announcement of how it is curated,
i.e. automatically or manually added entries.

Either way, I spotted ff2mpv being listed
although it is published under a non-free license:
https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE

The Firefox add-on page still shows the original Expat license though,
so Mozzarella inherit this metadata.

I think cases like this are rare enough to not demand a web UI
to report extensions add-ons accidentally listed on Mozzarella,
but there should be a mechanism to manually remove it
from the repository to avoid misleading users into installing
proprietary software.

BTW all Mozzarella pages have an empty <title>, which makes it difficult
to browse multiple extensions in different tabs/windows.

Kind regards,
Phong

--cc3ac21dd79a92ef0e8862b73508645d83afda040bdce10f932822a36615
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iIQEABYKACwWIQSDiv4NVdwHTjYPlDqEtpzm8/a3ZwUCZZ34rA4cY254QGxvYW5n
Lm5ldAAKCRCEtpzm8/a3Z9bFAPsEiCka15v+ZrCziGRPmeMAU2a3h/MAx7SGLvuy
ZxWqbgD/ZaB5gFB1T40gFQMuO7cdS898aOtUEIZzIapwF9IRAA8=
=7Sgh
-----END PGP SIGNATURE-----

--cc3ac21dd79a92ef0e8862b73508645d83afda040bdce10f932822a36615--




Acknowledgement sent to Nguyễn Gia Phong <cnx@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnuzilla@HIDDEN. Full text available.
Report forwarded to bug-gnuzilla@HIDDEN:
bug#68361; Package gnuzilla. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Sat, 20 Jan 2024 12:30:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.