You are not logged in.

#1 2021-08-26 18:15:14

Automath
Member
Registered: 2016-05-16
Posts: 115

Why firefox is not setting extended attributes for downloaded files?

For what i browsed the user.xdg.origin.url attribute is set for every system except for macos, then why is this not working?

I have firefox 91 and my system is up to date.

The user.xdg.origin.url is a name of file extended attribute which record value should be the site url from where the file was downloaded. I find this attribute useful because i need it to differentiate my content from everything else that I download from the internet.

By the way can you give me some tips about correctly setting and mantaining extended attributes? is there a list of applications that currently implement them?

Offline

#2 2021-08-26 18:18:51

Automath
Member
Registered: 2016-05-16
Posts: 115

Re: Why firefox is not setting extended attributes for downloaded files?

Now I also note that wget is neither implementing this.

Offline

#3 2021-08-26 18:55:12

loqs
Member
Registered: 2014-03-06
Posts: 17,194

Re: Why firefox is not setting extended attributes for downloaded files?

Did you pass the --xattr option to wget?  CVE-2018-20483  https://bugzilla.redhat.com/show_bug.cgi?id=1662705
https://bugzilla.mozilla.org/show_bug.cgi?id=665531
chrome did implement it but dropped support https://chromium.googlesource.com/chrom … d16b8ed071

Offline

#4 2021-08-26 19:32:04

Automath
Member
Registered: 2016-05-16
Posts: 115

Re: Why firefox is not setting extended attributes for downloaded files?

loqs wrote:

Did you pass the --xattr option to wget?

nope hmm
 

Now that you posted it i re read that request and correctly interpreted this time - seems the team is not ok with this.
 

loqs wrote:

chrome did implement it but dropped support https://chromium.googlesource.com/chrom … d16b8ed071

Also what a shame, I can't see why people see this that wrong, maybe only because a restrictive behaviour by windows, but it-s specs are far more benevolent. I mean it's 2021, isn't it time to evolve our conception from the old rusty msdos hyeratic filesystem?

Aren't you tired of having no clue where a file comes from and what is for? Then why don't you learn how to use and implement extended attributes? If for me I would like that every application implement them consistently as I'm going to do also. Let cp mv and rsync  add user.movedfrom, user.copiedfrom, user.hasbackup, user.mastercopy, user.copyist attributes, and every other program set user.creator and user.creationdate. That should be integral part of a modern filesystem and if anybody want's it the old ways (8 chars name, 3 chars extension, no spaces between) can have it by demand.

Also files could have expiration date in order to not clutter space with things you needed only twice last year, but that would be an idea for other post.

Offline

#5 2021-08-27 05:44:14

seth
Member
Registered: 2012-09-03
Posts: 49,981

Re: Why firefox is not setting extended attributes for downloaded files?

I mean it's 2021, isn't it time to evolve our conception from the old rusty msdos hyeratic filesystem?

You're running arch on vfat?

This isn't a FS thing, there're valid privacy/security concerns pointed out in the RH bug and the mozilla thread states that

Chromium on Windows doesn't suffer from this problem:

ꜰɪʟᴇ: user.Zone.Identifier: [ZoneTransfer]
ZoneId=3

Ie, it saves only whether the file came from your computer, local network, or the Interwebs at large.

Which is utterly different from attaching a URL to some file and exposing the unwitting user to this data collection.

…Then why don't you learn how to use and implement extended attributes?…

I reckon you just learned about the existence of xattr and are just like me, when I got my first hammer as a Toddler.
About 1 week before my Mom took it away…

Offline

#6 2021-08-27 09:06:45

latalante1
Member
Registered: 2018-08-30
Posts: 110

Re: Why firefox is not setting extended attributes for downloaded files?

You mix completely different things. You direct a grudge against who, no one knows what.

As mentioned the privacy rationale, security is important.

Firefox keeps a history of downloaded files (not from incognito sessions).
https://support.mozilla.org/en-US/questions/1319253
You can easily extract this information and duplicate it by adding user extended attributes (xattr).         

sqlite3 places.sqlite "SELECT moz_annos.content, moz_places.url FROM moz_annos INNER JOIN moz_places ON moz_places.id=moz_annos.place_id WHERE moz_annos.anno_attribute_id=2;"

Offline

#7 2021-08-27 09:19:18

progandy
Member
Registered: 2012-05-17
Posts: 5,184

Re: Why firefox is not setting extended attributes for downloaded files?

You could probably also create an extension that sets extended attributes similar to this notification addon combined with native messaging:
https://addons.mozilla.org/de/firefox/a … fications/


Found it: https://addons.mozilla.org/en-US/firefox/addon/rodc/ ( https://github.com/igorlogius/rodc )
Just write a script to set all desired attributes. The github repository contains a native application manifest and example script: rodc.json / rodc.py
https://developer.mozilla.org/en-US/doc … _messaging

Last edited by progandy (2021-08-28 19:31:41)


| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |

Offline

#8 2021-08-28 19:11:16

Automath
Member
Registered: 2016-05-16
Posts: 115

Re: Why firefox is not setting extended attributes for downloaded files?

seth wrote:

I mean it's 2021, isn't it time to evolve our conception from the old rusty msdos hyeratic filesystem?

You're running arch on vfat?

I was being ironic, of course not but not that much has changed...

This isn't a FS thing, there're valid privacy/security concerns pointed out in the RH bug and the mozilla thread states that

Chromium on Windows doesn't suffer from this problem:

ꜰɪʟᴇ: user.Zone.Identifier: [ZoneTransfer]
ZoneId=3

Ie, it saves only whether the file came from your computer, local network, or the Interwebs at large.

Which is utterly different from attaching a URL to some file and exposing the unwitting user to this data collection.

What RH bug? if all worked as expected I don't see the cpncern about attaching an url to a file unless I don't want anybody else to know that, in which case I would set the correct permissions or disable the function.

…Then why don't you learn how to use and implement extended attributes?…

I reckon you just learned about the existence of xattr and are just like me, when I got my first hammer as a Toddler.
About 1 week before my Mom took it away…

I'm no toddler, it's an ugly custom to diminish the other side as some do here, I can not be an expert in computer systems as to mantain a distribution like you do , but I know enough of system administration to feel the lack of tools - or knowledge to use them more properly.  Surely I know about xattr since I lerant to use windows like 15 years back. I don't know if there is a serious bug about attributes, I just want to mantain my personal storage in order and for that I need to be able to track files and differentiate them from useless stuff. It's true though that I studied the use of attributes in more in depth since recently, because I can-t know everything and I'm not that genius.

Seriously obsessed with hammers or not I can't tell why people don't use them more often, I'm not the only one that is demanding for that.

Offline

#9 2021-08-28 19:29:18

Automath
Member
Registered: 2016-05-16
Posts: 115

Re: Why firefox is not setting extended attributes for downloaded files?

latalante1 wrote:

You mix completely different things. You direct a grudge against who, no one knows what.

As mentioned the privacy rationale, security is important.

Firefox keeps a history of downloaded files (not from incognito sessions).
https://support.mozilla.org/en-US/questions/1319253
You can easily extract this information and duplicate it by adding user extended attributes (xattr).         

sqlite3 places.sqlite "SELECT moz_annos.content, moz_places.url FROM moz_annos INNER JOIN moz_places ON moz_places.id=moz_annos.place_id WHERE moz_annos.anno_attribute_id=2;"

~Your command issues me this error:

$ sqlite3 places.sqlite "SELECT moz_annos.content, moz_places.url FROM moz_annos INNER JOIN moz_places ON moz_places.id=moz_annos.place_id WHERE moz_annos.anno_attribute_id=2;"
Error: no such table: moz_annos

Incorrect field name?~
Ok I must specify the path of my profile before places.sqlite (I confused that filename as a built in), anyway I used sqlite once in my life and I have no idea for what that is for.

I don't know about this but some security caveats are paranoid stuff, they're ok if I'm running a big enterprise but for personal use some stuff turns security flaws for how secure they are. I'm still about to configure my ssh client to let me connect to other computers in my local net, do I really need this warning?

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Not even the FBI servers should be that alarming, not to mention last time I run journalctl and there was a huge error in red indicating that inkscape had a critical error and crashed, How could be equally remarked same as a critical system error? I know that arch is complex and multipurpose and that I'm telling mixed stuff but really couldn't be that difficult to make difference of critical errors in the journal, for say something.

Last edited by Automath (2021-08-28 20:47:17)

Offline

#10 2021-08-28 20:27:33

Automath
Member
Registered: 2016-05-16
Posts: 115

Re: Why firefox is not setting extended attributes for downloaded files?

progandy wrote:

You could probably also create an extension that sets extended attributes similar to this notification addon combined with native messaging:
https://addons.mozilla.org/de/firefox/a … fications/


Found it: https://addons.mozilla.org/en-US/firefox/addon/rodc/ ( https://github.com/igorlogius/rodc )
Just write a script to set all desired attributes. The github repository contains a native application manifest and example script: rodc.json / rodc.py
https://developer.mozilla.org/en-US/doc … _messaging

I tried but I lack the patience right now, it's a very underdevelopped addon. Have you tried it? Does it works?

Offline

#11 2021-08-29 07:28:31

progandy
Member
Registered: 2012-05-17
Posts: 5,184

Re: Why firefox is not setting extended attributes for downloaded files?

The addon works perfectly fine.
Install the addon,
copy rodc.json and rodc.py from github to ~/.mozilla/native-messaging-hosts,
fix the path in rodc.json,
make rodc.py executable
then edit the python script to set the attributes you want.


| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |

Offline

#12 2021-08-29 18:43:04

Automath
Member
Registered: 2016-05-16
Posts: 115

Re: Why firefox is not setting extended attributes for downloaded files?

progandy wrote:

The addon works perfectly fine.
Install the addon,
copy rodc.json and rodc.py from github to ~/.mozilla/native-messaging-hosts,
fix the path in rodc.json,
make rodc.py executable
then edit the python script to set the attributes you want.

Ok I'll try. It's a shame that doesn't come with that in options, and that I'm obligated to python for running bash code or I have to "recompile" the xpi.

Offline

#13 2021-08-29 18:54:41

progandy
Member
Registered: 2012-05-17
Posts: 5,184

Re: Why firefox is not setting extended attributes for downloaded files?

You can use any scripting language, just change the file called in rodc.json. There is also a bash (needs bc, jq, xxd, ...) and nodejs example in the repo.

Last edited by progandy (2021-08-29 18:57:44)


| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |

Offline

Board footer

Powered by FluxBB