You are not logged in.
For what i browsed the user.xdg.origin.url attribute is set for every system except for macos, then why is this not working?
I have firefox 91 and my system is up to date.
The user.xdg.origin.url is a name of file extended attribute which record value should be the site url from where the file was downloaded. I find this attribute useful because i need it to differentiate my content from everything else that I download from the internet.
By the way can you give me some tips about correctly setting and mantaining extended attributes? is there a list of applications that currently implement them?
Offline
Now I also note that wget is neither implementing this.
Offline
Did you pass the --xattr option to wget? CVE-2018-20483 https://bugzilla.redhat.com/show_bug.cgi?id=1662705
https://bugzilla.mozilla.org/show_bug.cgi?id=665531
chrome did implement it but dropped support https://chromium.googlesource.com/chrom … d16b8ed071
Online
Did you pass the --xattr option to wget?
nope
Now that you posted it i re read that request and correctly interpreted this time - seems the team is not ok with this.
chrome did implement it but dropped support https://chromium.googlesource.com/chrom … d16b8ed071
Also what a shame, I can't see why people see this that wrong, maybe only because a restrictive behaviour by windows, but it-s specs are far more benevolent. I mean it's 2021, isn't it time to evolve our conception from the old rusty msdos hyeratic filesystem?
Aren't you tired of having no clue where a file comes from and what is for? Then why don't you learn how to use and implement extended attributes? If for me I would like that every application implement them consistently as I'm going to do also. Let cp mv and rsync add user.movedfrom, user.copiedfrom, user.hasbackup, user.mastercopy, user.copyist attributes, and every other program set user.creator and user.creationdate. That should be integral part of a modern filesystem and if anybody want's it the old ways (8 chars name, 3 chars extension, no spaces between) can have it by demand.
Also files could have expiration date in order to not clutter space with things you needed only twice last year, but that would be an idea for other post.
Offline
I mean it's 2021, isn't it time to evolve our conception from the old rusty msdos hyeratic filesystem?
You're running arch on vfat?
This isn't a FS thing, there're valid privacy/security concerns pointed out in the RH bug and the mozilla thread states that
Chromium on Windows doesn't suffer from this problem:
ꜰɪʟᴇ: user.Zone.Identifier: [ZoneTransfer]
ZoneId=3Ie, it saves only whether the file came from your computer, local network, or the Interwebs at large.
Which is utterly different from attaching a URL to some file and exposing the unwitting user to this data collection.
…Then why don't you learn how to use and implement extended attributes?…
I reckon you just learned about the existence of xattr and are just like me, when I got my first hammer as a Toddler.
About 1 week before my Mom took it away…
Offline
You mix completely different things. You direct a grudge against who, no one knows what.
As mentioned the privacy rationale, security is important.
Firefox keeps a history of downloaded files (not from incognito sessions).
https://support.mozilla.org/en-US/questions/1319253
You can easily extract this information and duplicate it by adding user extended attributes (xattr).
sqlite3 places.sqlite "SELECT moz_annos.content, moz_places.url FROM moz_annos INNER JOIN moz_places ON moz_places.id=moz_annos.place_id WHERE moz_annos.anno_attribute_id=2;"
Offline
You could probably also create an extension that sets extended attributes similar to this notification addon combined with native messaging:
https://addons.mozilla.org/de/firefox/a … fications/
Found it: https://addons.mozilla.org/en-US/firefox/addon/rodc/ ( https://github.com/igorlogius/rodc )
Just write a script to set all desired attributes. The github repository contains a native application manifest and example script: rodc.json / rodc.py
https://developer.mozilla.org/en-US/doc … _messaging
Last edited by progandy (2021-08-28 19:31:41)
| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |
Offline
I mean it's 2021, isn't it time to evolve our conception from the old rusty msdos hyeratic filesystem?
You're running arch on vfat?
I was being ironic, of course not but not that much has changed...
This isn't a FS thing, there're valid privacy/security concerns pointed out in the RH bug and the mozilla thread states that
Chromium on Windows doesn't suffer from this problem:
ꜰɪʟᴇ: user.Zone.Identifier: [ZoneTransfer]
ZoneId=3Ie, it saves only whether the file came from your computer, local network, or the Interwebs at large.
Which is utterly different from attaching a URL to some file and exposing the unwitting user to this data collection.
What RH bug? if all worked as expected I don't see the cpncern about attaching an url to a file unless I don't want anybody else to know that, in which case I would set the correct permissions or disable the function.
…Then why don't you learn how to use and implement extended attributes?…
I reckon you just learned about the existence of xattr and are just like me, when I got my first hammer as a Toddler.
About 1 week before my Mom took it away…
I'm no toddler, it's an ugly custom to diminish the other side as some do here, I can not be an expert in computer systems as to mantain a distribution like you do , but I know enough of system administration to feel the lack of tools - or knowledge to use them more properly. Surely I know about xattr since I lerant to use windows like 15 years back. I don't know if there is a serious bug about attributes, I just want to mantain my personal storage in order and for that I need to be able to track files and differentiate them from useless stuff. It's true though that I studied the use of attributes in more in depth since recently, because I can-t know everything and I'm not that genius.
Seriously obsessed with hammers or not I can't tell why people don't use them more often, I'm not the only one that is demanding for that.
Offline
You mix completely different things. You direct a grudge against who, no one knows what.
As mentioned the privacy rationale, security is important.
Firefox keeps a history of downloaded files (not from incognito sessions).
https://support.mozilla.org/en-US/questions/1319253
You can easily extract this information and duplicate it by adding user extended attributes (xattr).sqlite3 places.sqlite "SELECT moz_annos.content, moz_places.url FROM moz_annos INNER JOIN moz_places ON moz_places.id=moz_annos.place_id WHERE moz_annos.anno_attribute_id=2;"
~Your command issues me this error:
$ sqlite3 places.sqlite "SELECT moz_annos.content, moz_places.url FROM moz_annos INNER JOIN moz_places ON moz_places.id=moz_annos.place_id WHERE moz_annos.anno_attribute_id=2;"
Error: no such table: moz_annos
Incorrect field name?~
Ok I must specify the path of my profile before places.sqlite (I confused that filename as a built in), anyway I used sqlite once in my life and I have no idea for what that is for.
I don't know about this but some security caveats are paranoid stuff, they're ok if I'm running a big enterprise but for personal use some stuff turns security flaws for how secure they are. I'm still about to configure my ssh client to let me connect to other computers in my local net, do I really need this warning?
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Not even the FBI servers should be that alarming, not to mention last time I run journalctl and there was a huge error in red indicating that inkscape had a critical error and crashed, How could be equally remarked same as a critical system error? I know that arch is complex and multipurpose and that I'm telling mixed stuff but really couldn't be that difficult to make difference of critical errors in the journal, for say something.
Last edited by Automath (2021-08-28 20:47:17)
Offline
You could probably also create an extension that sets extended attributes similar to this notification addon combined with native messaging:
https://addons.mozilla.org/de/firefox/a … fications/Found it: https://addons.mozilla.org/en-US/firefox/addon/rodc/ ( https://github.com/igorlogius/rodc )
Just write a script to set all desired attributes. The github repository contains a native application manifest and example script: rodc.json / rodc.py
https://developer.mozilla.org/en-US/doc … _messaging
I tried but I lack the patience right now, it's a very underdevelopped addon. Have you tried it? Does it works?
Offline
The addon works perfectly fine.
Install the addon,
copy rodc.json and rodc.py from github to ~/.mozilla/native-messaging-hosts,
fix the path in rodc.json,
make rodc.py executable
then edit the python script to set the attributes you want.
| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |
Offline
The addon works perfectly fine.
Install the addon,
copy rodc.json and rodc.py from github to ~/.mozilla/native-messaging-hosts,
fix the path in rodc.json,
make rodc.py executable
then edit the python script to set the attributes you want.
Ok I'll try. It's a shame that doesn't come with that in options, and that I'm obligated to python for running bash code or I have to "recompile" the xpi.
Offline
You can use any scripting language, just change the file called in rodc.json. There is also a bash (needs bc, jq, xxd, ...) and nodejs example in the repo.
Last edited by progandy (2021-08-29 18:57:44)
| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |
Offline