GNU logs - #68361, boring messages

Message sent to bug-gnuzilla@HIDDEN:

Subject: bug#68361: Mozzarella may list non-free add-ons
Resent-From: =?UTF-8?Q?Nguy=E1=BB=85n?= Gia Phong <cnx@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnuzilla@HIDDEN
Resent-Date: Wed, 10 Jan 2024 02:18:02 +0000
Resent-Message-ID: <handler.68361.B.170485307512016 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 68361 <at> debbugs.gnu.org
Content-Type: multipart/signed;
 boundary=cc3ac21dd79a92ef0e8862b73508645d83afda040bdce10f932822a36615;
 micalg=pgp-sha512; protocol="application/pgp-signature"
Date: Wed, 10 Jan 2024 10:53:46 +0900
Message-Id: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
From: =?UTF-8?Q?Nguy=E1=BB=85n?= Gia Phong <cnx@HIDDEN>
Received-SPF: pass client-ip=2a03:3b40:100::1:2; envelope-from=cnx@HIDDEN;
 helo=tem.loang.net
X-Spam_score_int: -12
X-Spam_score: -1.3
X-Spam_bar: -
X-Spam_report: (-1.3 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 MIME_HEADER_CTYPE_ONLY=0.1, SPF_HELO_SOFTFAIL=0.732, SPF_PASS=-0.001,
 T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.1 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  Hi, I learned about Mozzarella from social media, so I missed
 the official announcement of how it is curated, i.e. automatically or manually
 added entries. Either way,
 I spotted ff2mpv being listed although it is published
 under a non-free license:
 https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE
 Content analysis details:   (1.1 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 0.1 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required
 MIME headers
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Mailman-Approved-At: Tue, 09 Jan 2024 21:17:53 -0500
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.1 (/)

--cc3ac21dd79a92ef0e8862b73508645d83afda040bdce10f932822a36615
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8

Hi,

I learned about Mozzarella from social media, so I missed
the official announcement of how it is curated,
i.e. automatically or manually added entries.

Either way, I spotted ff2mpv being listed
although it is published under a non-free license:
https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE

The Firefox add-on page still shows the original Expat license though,
so Mozzarella inherit this metadata.

I think cases like this are rare enough to not demand a web UI
to report extensions add-ons accidentally listed on Mozzarella,
but there should be a mechanism to manually remove it
from the repository to avoid misleading users into installing
proprietary software.

BTW all Mozzarella pages have an empty <title>, which makes it difficult
to browse multiple extensions in different tabs/windows.

Kind regards,
Phong

--cc3ac21dd79a92ef0e8862b73508645d83afda040bdce10f932822a36615
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iIQEABYKACwWIQSDiv4NVdwHTjYPlDqEtpzm8/a3ZwUCZZ34rA4cY254QGxvYW5n
Lm5ldAAKCRCEtpzm8/a3Z9bFAPsEiCka15v+ZrCziGRPmeMAU2a3h/MAx7SGLvuy
ZxWqbgD/ZaB5gFB1T40gFQMuO7cdS898aOtUEIZzIapwF9IRAA8=
=7Sgh
-----END PGP SIGNATURE-----

--cc3ac21dd79a92ef0e8862b73508645d83afda040bdce10f932822a36615--

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: =?UTF-8?Q?Nguy=E1=BB=85n?= Gia Phong <cnx@HIDDEN>
Subject: bug#68361: Acknowledgement (Mozzarella may list non-free add-ons)
Message-ID: <handler.68361.B.170485307512016.ack <at> debbugs.gnu.org>
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
X-Gnu-PR-Message: ack 68361
X-Gnu-PR-Package: gnuzilla
Reply-To: 68361 <at> debbugs.gnu.org
Date: Wed, 10 Jan 2024 02:18:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-gnuzilla@HIDDEN

If you wish to submit further information on this problem, please
send it to 68361 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
68361: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D68361
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-gnuzilla@HIDDEN:

Subject: bug#68361: Mozzarella may list non-free add-ons
Resent-From: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur <clement@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnuzilla@HIDDEN
Resent-Date: Wed, 10 Jan 2024 16:46:01 +0000
Resent-Message-ID: <handler.68361.B.170490512921567 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 68361 <at> debbugs.gnu.org
Cc: cnx@HIDDEN
Feedback-ID: i4c21472a:Fastmail
From: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur <clement@HIDDEN>
In-Reply-To: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN> (bug-gnuzilla@HIDDEN's
 message of "Wed, 10 Jan 2024 10:53:46 +0900")
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
Date: Wed, 10 Jan 2024 17:44:54 +0100
Message-ID: <87wmshjfy1.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Received-SPF: pass client-ip=66.111.4.28; envelope-from=clement@HIDDEN;
 helo=out4-smtp.messagingengine.com
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,
 T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.6 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.4 (/)

On Wed, Jan 10 2024, bug-gnuzilla--- via GNUzilla bug reports wrote:

> Hi,
>
> I learned about Mozzarella from social media, so I missed
> the official announcement of how it is curated,
> i.e. automatically or manually added entries.
>
> Either way, I spotted ff2mpv being listed
> although it is published under a non-free license:
> https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE
>
> The Firefox add-on page still shows the original Expat license though,
> so Mozzarella inherit this metadata.
>
> I think cases like this are rare enough to not demand a web UI
> to report extensions add-ons accidentally listed on Mozzarella,
> but there should be a mechanism to manually remove it
> from the repository to avoid misleading users into installing
> proprietary software.
>
> BTW all Mozzarella pages have an empty <title>, which makes it difficult
> to browse multiple extensions in different tabs/windows.
>
> Kind regards,
> Phong

Hi,

I think this is an issue indeed.  But there is another one that is more
serious: even if we remove ff2mpv from Mozzarella, all users who have it
installed will have new updates pulling the non-free code forever.

A possible fix would be to change the source of the add-ons, from
addons.mozilla.org to Guix
(e.g. file:///gnu/store/dxck0g51w8kzmzdn1nx97dsnp78jq4sv-ublock-origin-1.54=
.0-xpi/lib/mozilla/extensions/uBlock0.firefox.xpi).

That would require us to sign our add-ons though.  I don't know how
feasible it is.

Cl=C3=A9ment

Message sent to bug-gnuzilla@HIDDEN:

Subject: bug#68361: Mozzarella may list non-free add-ons
Resent-From: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur <clement@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnuzilla@HIDDEN
Resent-Date: Wed, 10 Jan 2024 16:46:02 +0000
Resent-Message-ID: <handler.68361.B68361.170490510717651 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 68361 <at> debbugs.gnu.org
Cc: cnx@HIDDEN
Feedback-ID: i4c21472a:Fastmail
From: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur <clement@HIDDEN>
In-Reply-To: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN> (bug-gnuzilla@HIDDEN's
 message of "Wed, 10 Jan 2024 10:53:46 +0900")
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
Date: Wed, 10 Jan 2024 17:44:54 +0100
Message-ID: <87wmshjfy1.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

On Wed, Jan 10 2024, bug-gnuzilla--- via GNUzilla bug reports wrote:

> Hi,
>
> I learned about Mozzarella from social media, so I missed
> the official announcement of how it is curated,
> i.e. automatically or manually added entries.
>
> Either way, I spotted ff2mpv being listed
> although it is published under a non-free license:
> https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE
>
> The Firefox add-on page still shows the original Expat license though,
> so Mozzarella inherit this metadata.
>
> I think cases like this are rare enough to not demand a web UI
> to report extensions add-ons accidentally listed on Mozzarella,
> but there should be a mechanism to manually remove it
> from the repository to avoid misleading users into installing
> proprietary software.
>
> BTW all Mozzarella pages have an empty <title>, which makes it difficult
> to browse multiple extensions in different tabs/windows.
>
> Kind regards,
> Phong

Hi,

I think this is an issue indeed.  But there is another one that is more
serious: even if we remove ff2mpv from Mozzarella, all users who have it
installed will have new updates pulling the non-free code forever.

A possible fix would be to change the source of the add-ons, from
addons.mozilla.org to Guix
(e.g. file:///gnu/store/dxck0g51w8kzmzdn1nx97dsnp78jq4sv-ublock-origin-1.54=
.0-xpi/lib/mozilla/extensions/uBlock0.firefox.xpi).

That would require us to sign our add-ons though.  I don't know how
feasible it is.

Cl=C3=A9ment

Message sent to bug-gnuzilla@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#68361: Mozzarella may list non-free add-ons
Resent-From: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur <clement@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnuzilla@HIDDEN
Resent-Date: Wed, 10 Jan 2024 17:07:01 +0000
Resent-Message-ID: <handler.68361.B68361.17049063787127 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 68361
X-GNU-PR-Package: gnuzilla
X-GNU-PR-Keywords: 
To: 68361 <at> debbugs.gnu.org
Cc: cnx@HIDDEN
Received: via spool by 68361-submit <at> debbugs.gnu.org id=B68361.17049063787127
          (code B ref 68361); Wed, 10 Jan 2024 17:07:01 +0000
Received: (at 68361) by debbugs.gnu.org; 10 Jan 2024 17:06:18 +0000
Received: from localhost ([127.0.0.1]:42686 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rNc1y-0001qt-BH
	for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 12:06:18 -0500
Received: from out4-smtp.messagingengine.com ([66.111.4.28]:34075)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <clement@HIDDEN>) id 1rNc1w-0001qb-E4
 for 68361 <at> debbugs.gnu.org; Wed, 10 Jan 2024 12:06:17 -0500
Received: from compute6.internal (compute6.nyi.internal [10.202.2.47])
 by mailout.nyi.internal (Postfix) with ESMTP id 71C455C0179;
 Wed, 10 Jan 2024 12:06:12 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163])
 by compute6.internal (MEProxy); Wed, 10 Jan 2024 12:06:12 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lassieur.org; h=
 cc:cc:content-transfer-encoding:content-type:content-type:date
 :date:from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to; s=fm1; t=1704906372;
 x=1704992772; bh=/5MbURgmt1hwg9zNm6JuTRz1zOeDcGx6S/03mCdesvQ=; b=
 amhJECyrJXygo/iAL0q9VHNSi/XC8xEcu2DYraI4qIpgS1F526L/jMNL1BciC6Kq
 i9Y9qtzQHOV4j1MZ1Np/TGe3h90kbEgVg6E+rLOaf8NPgrX3okl62Hy6t8ynNLV0
 hlzUNXeEzubU2QPbvtYQcCXwH7Z4eqd11dpJpRfCokgEMHoO+R+uO4V2JUqoEmEa
 GIuMv9yH9zRv3QI/3k/y7ibuKXUhT+9nwRBkJFcsxEUwVNfPuEUD2qqAj/2xfwm3
 MyIQ8/eoN1WWSgPHwcwTW3rY7jdgmJhRpp294lwsWx+hBoMkOrMB/vcK8yO/V/1g
 hJeMBSVWWb9/zcQLrDaHYQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:content-type:date:date:feedback-id:feedback-id
 :from:from:in-reply-to:in-reply-to:message-id:mime-version
 :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1704906372; x=
 1704992772; bh=/5MbURgmt1hwg9zNm6JuTRz1zOeDcGx6S/03mCdesvQ=; b=l
 FJrPxBBSoxT6VE5/NtqM/ox/r9Jgo6J0wcywlt044L5xVhCaOKoHhq/KcosVC89e
 DlQ8IEj60zShe5j/4+pJ93zVwkxeNTWHWq5i5k4kibsyS7bG2dCYPsw+TasY88Kd
 6WPrFtu3sTeooy5W+fHEqMAFUfyFYqa2/mC4+0xjd3T8Fycn/Cfh9gciEe/MdGUx
 ILuAJOFu3TH8WvkPlckQhpK29vl7AQdUrtLiwgEMSF3oGK8z656QI6h7DWLAnRff
 o+QKqbsq8Z89qaB+O7hJK8pVKgrrI9irlQcp7fXVAb35BXOQv46fKU57emtgKTPL
 deEboq4hqK9+sle1WkENA==
X-ME-Sender: <xms:hM6eZezHLr_XPZmv2xoQf0Ohw-kxY7SV_UiHvHhEbOrLM53hN6XT1Q>
 <xme:hM6eZaRDD6yNk5vFB9xi-w_O2PoUPEcW7ao9cIFQ8K9-qk98G0crcmvQhaIPAjR5d
 y48KWNL1jkR-0YIhbg>
X-ME-Received: <xmr:hM6eZQV91YN5nUuji098x-mE1Azwxc2gq2IT-yMpUy-LpchMIMUE7Q>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdeiuddgleehucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucenucfjughrpefhvfevufgjfhffkfgfgggtgfesth
 hqredttderjeenucfhrhhomhepvehlrohmvghnthcunfgrshhsihgvuhhruceotghlvghm
 vghntheslhgrshhsihgvuhhrrdhorhhgqeenucggtffrrghtthgvrhhnpeeikeekhedufe
 efteekteeutdetgeegkeevveegjedtleetgeehjeelueetgeehieenucffohhmrghinhep
 ghhithhhuhgsuhhsvghrtghonhhtvghnthdrtghomhdpmhhoiihilhhlrgdrohhrghdpgh
 hnuhdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhr
 ohhmpegtlhgvmhgvnhhtsehlrghsshhivghurhdrohhrgh
X-ME-Proxy: <xmx:hM6eZUgluMuqOEvVzE7DENzCXnxsdQQaVS5dxKcikOco-PuPmBEOgw>
 <xmx:hM6eZQBUijnRLzbO2qPt3QYBIYykayOIo5pRBCaVj3hHImqdGlXtuw>
 <xmx:hM6eZVJgRLirXFSwoT8utp313_OLHqr7-d9mJJ9HiPgDUAJC97mgEw>
 <xmx:hM6eZbpVMexwJ7A1RxvdQEEqFxzUkwKEGVKemMGwGR6hTBu32p_3_w>
Feedback-ID: i4c21472a:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed,
 10 Jan 2024 12:06:11 -0500 (EST)
From: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur <clement@HIDDEN>
In-Reply-To: <87wmshjfy1.fsf@HIDDEN> ("=?UTF-8?Q?Cl=C3=A9ment?=
 Lassieur"'s message of "Wed, 10 Jan 2024 17:44:54 +0100")
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
 <87wmshjfy1.fsf@HIDDEN>
Date: Wed, 10 Jan 2024 18:06:07 +0100
Message-ID: <87sf35jeyo.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Wed, Jan 10 2024, Cl=C3=A9ment Lassieur wrote:

> On Wed, Jan 10 2024, bug-gnuzilla--- via GNUzilla bug reports wrote:
>
>> Hi,
>>
>> I learned about Mozzarella from social media, so I missed
>> the official announcement of how it is curated,
>> i.e. automatically or manually added entries.
>>
>> Either way, I spotted ff2mpv being listed
>> although it is published under a non-free license:
>> https://raw.githubusercontent.com/woodruffw/ff2mpv/master/LICENSE
>>
>> The Firefox add-on page still shows the original Expat license though,
>> so Mozzarella inherit this metadata.
>>
>> I think cases like this are rare enough to not demand a web UI
>> to report extensions add-ons accidentally listed on Mozzarella,
>> but there should be a mechanism to manually remove it
>> from the repository to avoid misleading users into installing
>> proprietary software.
>>
>> BTW all Mozzarella pages have an empty <title>, which makes it difficult
>> to browse multiple extensions in different tabs/windows.
>>
>> Kind regards,
>> Phong
>
> Hi,
>
> I think this is an issue indeed.  But there is another one that is more
> serious: even if we remove ff2mpv from Mozzarella, all users who have it
> installed will have new updates pulling the non-free code forever.
>
> A possible fix would be to change the source of the add-ons, from
> addons.mozilla.org to Guix
> (e.g. file:///gnu/store/dxck0g51w8kzmzdn1nx97dsnp78jq4sv-ublock-origin-1.=
54.0-xpi/lib/mozilla/extensions/uBlock0.firefox.xpi).

Sorry my link is wrong.  That would be
https://bordeaux.guix.gnu.org/nar/lzip/dxck0g51w8kzmzdn1nx97dsnp78jq4sv-ubl=
ock-origin-1.54.0-xpi.
But it wouldn't work right away anyway because the format is not correct.

> That would require us to sign our add-ons though.  I don't know how
> feasible it is.
>
> Cl=C3=A9ment

Message sent to bug-gnuzilla@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#68361: Mozzarella may list non-free add-ons
Resent-From: bill-auger <bill-auger@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnuzilla@HIDDEN
Resent-Date: Wed, 10 Jan 2024 19:04:01 +0000
Resent-Message-ID: <handler.68361.B.17049134385287 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 68361
X-GNU-PR-Package: gnuzilla
X-GNU-PR-Keywords: 
To: 68361 <at> debbugs.gnu.org
Cc: cnx@HIDDEN
X-Debbugs-Original-To: bug-gnuzilla--- via GNUzilla bug reports <bug-gnuzilla@HIDDEN>
X-Debbugs-Original-Cc: 68361 <at> debbugs.gnu.org, =?UTF-8?Q?Nguy=E1=BB=85n?= Gia Phong <cnx@HIDDEN>
Received: via spool by submit <at> debbugs.gnu.org id=B.17049134385287
          (code B ref -1); Wed, 10 Jan 2024 19:04:01 +0000
Received: (at submit) by debbugs.gnu.org; 10 Jan 2024 19:03:58 +0000
Received: from localhost ([127.0.0.1]:43205 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rNdrp-0001ND-Rb
	for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 14:03:58 -0500
Received: from lists.gnu.org ([2001:470:142::17]:43334)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <bill-auger@HIDDEN>) id 1rNdrn-0001Mu-La
 for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 14:03:56 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <bill-auger@HIDDEN>)
 id 1rNdrj-0001C4-9t
 for bug-gnuzilla@HIDDEN; Wed, 10 Jan 2024 14:03:51 -0500
Received: from buffalo.tulip.relay.mailchannels.net ([23.83.218.24])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <bill-auger@HIDDEN>)
 id 1rNdrh-0002kf-Gx
 for bug-gnuzilla@HIDDEN; Wed, 10 Jan 2024 14:03:51 -0500
X-Sender-Id: dreamhost|x-authsender|bill-auger@HIDDEN
Received: from relay.mailchannels.net (localhost [127.0.0.1])
 by relay.mailchannels.net (Postfix) with ESMTP id 0BEA081C3C;
 Wed, 10 Jan 2024 19:03:45 +0000 (UTC)
Received: from pdx1-sub0-mail-a205.dreamhost.com (unknown [127.0.0.6])
 (Authenticated sender: dreamhost)
 by relay.mailchannels.net (Postfix) with ESMTPA id 6BFD081B04;
 Wed, 10 Jan 2024 19:03:44 +0000 (UTC)
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1704913424; a=rsa-sha256;
 cv=none;
 b=Tj9RvdOS7vlAjfttKd/lUjru3sYILxhkfzWHMlQz+i2oVzLguZFQ+T/KousHRvm5g2smSi
 14ZAZXnCc0bDc0OE6lXXFLRWUa6FwWpVQnw77e1PG9mr88YvWgsfwCWZVJW/Dtq0YiYpzP
 BuhcAHLIYPgjhX0zgsmnw1/JGdGye46dTG/fik1oa1MG4lNcwNWkNBEmDfou/XKcZS8+d7
 l18VheMyzY7BGUpSuTLIaXO3/8kyxP953RlPIRUMM3O8IEH+l35yF2e2yPzLEB2AELkO9O
 8stpAmL00YLZaLgPBiLOxt8PnSe2VaIbjFibLEYhXK7msS2yRbbZ41b6wq737w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
 d=mailchannels.net; s=arc-2022; t=1704913424;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding:
 in-reply-to:in-reply-to:references:references:dkim-signature;
 bh=1Gc8gkDaQTfCZgTkksY0JG/iKilO/XzrWhgHmq1yD2o=;
 b=vy7ub2lQG1cUcOUB62wfAqSrRw26tQstLkEjBPqsWRVXS4lKPjrwRAHTpYb6+dgVKaUsp7
 WuhMTEgePowGc4jGQGXD/6gj180cLKwwerswkHsiS9W++v6V8kpDDBracpITj51eeO3/SO
 880Uqntdj4Il/F25ZS3FeIKNyz4C6M3DPTFOwJLit0jfoJ0TvkJPw+vWqUtjDTwhWwPPGY
 SZvWljhzpRDt6IF/dJd1TVjRVQX9r4N2n4k+CVxfKIGH4u7lc87q+UtfnotCFL13TQv6T2
 jH4US3n0ifbWDUm9ULvrWEgLnJsriqp9Ab2mb8bKJRmV9m2suOENnXe930Nc7A==
ARC-Authentication-Results: i=1; rspamd-568947cb6c-x5b6n;
 auth=pass smtp.auth=dreamhost smtp.mailfrom=bill-auger@HIDDEN
X-Sender-Id: dreamhost|x-authsender|bill-auger@HIDDEN
X-MC-Relay: Neutral
X-MailChannels-SenderId: dreamhost|x-authsender|bill-auger@HIDDEN
X-MailChannels-Auth-Id: dreamhost
X-Army-Obese: 6e913590496ba7fc_1704913424674_1060515945
X-MC-Loop-Signature: 1704913424674:3856108318
X-MC-Ingress-Time: 1704913424674
Received: from pdx1-sub0-mail-a205.dreamhost.com (pop.dreamhost.com
 [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384)
 by 100.100.10.89 (trex/6.9.2); Wed, 10 Jan 2024 19:03:44 +0000
Received: from parabola.localdomain (024-183-181-070.res.spectrum.com
 [24.183.181.70])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest
 SHA256) (No client certificate requested)
 (Authenticated sender: bill-auger@HIDDEN)
 by pdx1-sub0-mail-a205.dreamhost.com (Postfix) with ESMTPSA id 4T9HJb4lbvz5F; 
 Wed, 10 Jan 2024 11:03:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=peers.community;
 s=dreamhost; t=1704913424;
 bh=1Gc8gkDaQTfCZgTkksY0JG/iKilO/XzrWhgHmq1yD2o=;
 h=Date:From:To:Cc:Subject:Content-Type:Content-Transfer-Encoding;
 b=HzMyNICUqdXnWqUp25MHSjq1JN6TAtMVpVxsof1WIprFd8aoX2WLlI8YKHpmHe++Y
 60FEl+SO2b5KPGkRaQSRuxucc58noW9xblmOBt8D9vQHBUgk7CzA6sDENRFXseueZZ
 yRimpFiWohjhieKNb84fKR60a2SpxpUwQQXg3XP/QyQvsCjsEY/C4m3UZ01GA3Xv1D
 6peK+V2mZbXKymKDf3B4yKVPdehEvmvG18QZ44cUpYa4C0ZOT+qwHhTuZ7PND8qpnY
 yfEFRSxz1SRCBMTCxvBGzQnpcl0CDMNipJlH5JwLxWWiPXGlXdyHfsNWm+q4Abq3EU
 N0pUXfy0hkKCw==
Date: Wed, 10 Jan 2024 14:03:01 -0500
From: bill-auger <bill-auger@HIDDEN>
Message-ID: <20240110140301.4f25ad30@HIDDEN>
In-Reply-To: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
Organization: parabola gnu/linux
X-Mailer: Claws Mail 4.1.1 (GTK 3.24.39; x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Received-SPF: pass client-ip=23.83.218.24;
 envelope-from=bill-auger@HIDDEN;
 helo=buffalo.tulip.relay.mailchannels.net
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.9 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.1 (/)

though the public instance of the mozarella website is hosted under gnuzilla's
web space, it not part of the gnuzilla project or any GNU project - it is used
by other web browsers also, such as parabola's iceweasel and trisquel's
abrowser - mozarella's author probably does not read this mailing list; so i
would not expect anything to happen unless this issue is raised on the
mozarella bug tracker

https://gitlab.trisquel.org/joeall/mozzarella/-/issues

i suppose that a link to the bug tracker should be added to the mozarella UI to
guide bug reports toward the author

Message sent to bug-gnuzilla@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#68361: Mozzarella may list non-free add-ons
Resent-From: bill-auger <bill-auger@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnuzilla@HIDDEN
Resent-Date: Wed, 10 Jan 2024 19:04:02 +0000
Resent-Message-ID: <handler.68361.B68361.17049134275258 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 68361
X-GNU-PR-Package: gnuzilla
X-GNU-PR-Keywords: 
To: 68361 <at> debbugs.gnu.org
Cc: cnx@HIDDEN
X-Debbugs-Original-To: bug-gnuzilla--- via GNUzilla bug reports <bug-gnuzilla@HIDDEN>
X-Debbugs-Original-Cc: 68361 <at> debbugs.gnu.org, =?UTF-8?Q?Nguy=E1=BB=85n?= Gia Phong <cnx@HIDDEN>
Received: via spool by 68361-submit <at> debbugs.gnu.org id=B68361.17049134275258
          (code B ref 68361); Wed, 10 Jan 2024 19:04:02 +0000
Received: (at 68361) by debbugs.gnu.org; 10 Jan 2024 19:03:47 +0000
Received: from localhost ([127.0.0.1]:43202 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rNdrf-0001Mh-F5
	for submit <at> debbugs.gnu.org; Wed, 10 Jan 2024 14:03:47 -0500
Received: from cross.elm.relay.mailchannels.net ([23.83.212.46]:8786)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <bill-auger@HIDDEN>) id 1rNdrd-0001MZ-Mw
 for 68361 <at> debbugs.gnu.org; Wed, 10 Jan 2024 14:03:46 -0500
X-Sender-Id: dreamhost|x-authsender|bill-auger@HIDDEN
Received: from relay.mailchannels.net (localhost [127.0.0.1])
 by relay.mailchannels.net (Postfix) with ESMTP id 0BEA081C3C;
 Wed, 10 Jan 2024 19:03:45 +0000 (UTC)
Received: from pdx1-sub0-mail-a205.dreamhost.com (unknown [127.0.0.6])
 (Authenticated sender: dreamhost)
 by relay.mailchannels.net (Postfix) with ESMTPA id 6BFD081B04;
 Wed, 10 Jan 2024 19:03:44 +0000 (UTC)
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1704913424; a=rsa-sha256;
 cv=none;
 b=Tj9RvdOS7vlAjfttKd/lUjru3sYILxhkfzWHMlQz+i2oVzLguZFQ+T/KousHRvm5g2smSi
 14ZAZXnCc0bDc0OE6lXXFLRWUa6FwWpVQnw77e1PG9mr88YvWgsfwCWZVJW/Dtq0YiYpzP
 BuhcAHLIYPgjhX0zgsmnw1/JGdGye46dTG/fik1oa1MG4lNcwNWkNBEmDfou/XKcZS8+d7
 l18VheMyzY7BGUpSuTLIaXO3/8kyxP953RlPIRUMM3O8IEH+l35yF2e2yPzLEB2AELkO9O
 8stpAmL00YLZaLgPBiLOxt8PnSe2VaIbjFibLEYhXK7msS2yRbbZ41b6wq737w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
 d=mailchannels.net; s=arc-2022; t=1704913424;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding:
 in-reply-to:in-reply-to:references:references:dkim-signature;
 bh=1Gc8gkDaQTfCZgTkksY0JG/iKilO/XzrWhgHmq1yD2o=;
 b=vy7ub2lQG1cUcOUB62wfAqSrRw26tQstLkEjBPqsWRVXS4lKPjrwRAHTpYb6+dgVKaUsp7
 WuhMTEgePowGc4jGQGXD/6gj180cLKwwerswkHsiS9W++v6V8kpDDBracpITj51eeO3/SO
 880Uqntdj4Il/F25ZS3FeIKNyz4C6M3DPTFOwJLit0jfoJ0TvkJPw+vWqUtjDTwhWwPPGY
 SZvWljhzpRDt6IF/dJd1TVjRVQX9r4N2n4k+CVxfKIGH4u7lc87q+UtfnotCFL13TQv6T2
 jH4US3n0ifbWDUm9ULvrWEgLnJsriqp9Ab2mb8bKJRmV9m2suOENnXe930Nc7A==
ARC-Authentication-Results: i=1; rspamd-568947cb6c-x5b6n;
 auth=pass smtp.auth=dreamhost smtp.mailfrom=bill-auger@HIDDEN
X-Sender-Id: dreamhost|x-authsender|bill-auger@HIDDEN
X-MC-Relay: Neutral
X-MailChannels-SenderId: dreamhost|x-authsender|bill-auger@HIDDEN
X-MailChannels-Auth-Id: dreamhost
X-Army-Obese: 6e913590496ba7fc_1704913424674_1060515945
X-MC-Loop-Signature: 1704913424674:3856108318
X-MC-Ingress-Time: 1704913424674
Received: from pdx1-sub0-mail-a205.dreamhost.com (pop.dreamhost.com
 [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384)
 by 100.100.10.89 (trex/6.9.2); Wed, 10 Jan 2024 19:03:44 +0000
Received: from parabola.localdomain (024-183-181-070.res.spectrum.com
 [24.183.181.70])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest
 SHA256) (No client certificate requested)
 (Authenticated sender: bill-auger@HIDDEN)
 by pdx1-sub0-mail-a205.dreamhost.com (Postfix) with ESMTPSA id 4T9HJb4lbvz5F; 
 Wed, 10 Jan 2024 11:03:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=peers.community;
 s=dreamhost; t=1704913424;
 bh=1Gc8gkDaQTfCZgTkksY0JG/iKilO/XzrWhgHmq1yD2o=;
 h=Date:From:To:Cc:Subject:Content-Type:Content-Transfer-Encoding;
 b=HzMyNICUqdXnWqUp25MHSjq1JN6TAtMVpVxsof1WIprFd8aoX2WLlI8YKHpmHe++Y
 60FEl+SO2b5KPGkRaQSRuxucc58noW9xblmOBt8D9vQHBUgk7CzA6sDENRFXseueZZ
 yRimpFiWohjhieKNb84fKR60a2SpxpUwQQXg3XP/QyQvsCjsEY/C4m3UZ01GA3Xv1D
 6peK+V2mZbXKymKDf3B4yKVPdehEvmvG18QZ44cUpYa4C0ZOT+qwHhTuZ7PND8qpnY
 yfEFRSxz1SRCBMTCxvBGzQnpcl0CDMNipJlH5JwLxWWiPXGlXdyHfsNWm+q4Abq3EU
 N0pUXfy0hkKCw==
Date: Wed, 10 Jan 2024 14:03:01 -0500
From: bill-auger <bill-auger@HIDDEN>
Message-ID: <20240110140301.4f25ad30@HIDDEN>
In-Reply-To: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
References: <CYANGOX86UA7.25KLXSE1BOXLZ@HIDDEN>
Organization: parabola gnu/linux
X-Mailer: Claws Mail 4.1.1 (GTK 3.24.39; x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

though the public instance of the mozarella website is hosted under gnuzilla's
web space, it not part of the gnuzilla project or any GNU project - it is used
by other web browsers also, such as parabola's iceweasel and trisquel's
abrowser - mozarella's author probably does not read this mailing list; so i
would not expect anything to happen unless this issue is raised on the
mozarella bug tracker

https://gitlab.trisquel.org/joeall/mozzarella/-/issues

i suppose that a link to the bug tracker should be added to the mozarella UI to
guide bug reports toward the author

Last modified: Sat, 20 Jan 2024 12:30:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.