Page MenuHomePureOS Tracker

sean.obrien (Sean O'Brien)
User

Projects

User does not belong to any projects.

User Details

User Since
Oct 9 2018, 11:25 (283 w, 6 d)

Recent Activity

Nov 28 2019

invade-evident awarded T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store a Like token.
Nov 28 2019, 16:40 · Restricted Project, Restricted Project

Feb 13 2019

sean.obrien added a comment to T688: Rename PureBrowser to Firefox.

@jonas.smedegaard yes that does seem to be the case.

Feb 13 2019, 02:57
sean.obrien added a comment to T688: Rename PureBrowser to Firefox.

it's worth questioning our assumptions in cases like this, and luckily I had just been in a discussion about this very thing with a PureOS user, looked up the policy, and can't find anything restricting us from doing that. I will contact Mozilla on Friday trademark-permissions@mozilla.com if there are no objections, but it's best to let this sit for a while.

Feb 13 2019, 02:56

Jan 29 2019

sean.obrien added a comment to T688: Rename PureBrowser to Firefox.

it's worth questioning our assumptions in cases like this, and luckily I had just been in a discussion about this very thing with a PureOS user, looked up the policy, and can't find anything restricting us from doing that. I will contact Mozilla on Friday trademark-permissions@mozilla.com if there are no objections, but it's best to let this sit for a while.

Jan 29 2019, 07:37
sean.obrien added a comment to T688: Rename PureBrowser to Firefox.

copypasta from my comments in a Matrix room, but TL;DR let's just rebrand it back to Firefox, I'm pretty sure Mozilla will give us its blessing to do so.

Jan 29 2019, 07:26

Jan 26 2019

sean.obrien added a comment to T686: Update Etcher / LiveUSB instructions.

thanks @sriram.ramkrishna! slight tweaks that make these more OS-agnostic and (hopefully) future-proof:

Jan 26 2019, 20:49 · Restricted Project
sean.obrien created T686: Update Etcher / LiveUSB instructions.
Jan 26 2019, 20:31 · Restricted Project

Jan 6 2019

sean.obrien added a comment to T156: firefox-esr: default search engine tracks users.

DuckDuckGo is using jQuery functions that check canvas size. Are they actually tracking users? I would prefer not to jump to conclusions here. This makes me skeptical: https://www.reddit.com/r/privacy/comments/ad4h0u/duckduckgo_now_fingerprinting_visitors/

Jan 6 2019, 16:51 · Restricted Project, Restricted Project

Dec 20 2018

sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

why enabling the compatibility mode, as it seems like we do for PureBrowser by default, doesn't fix the problem is a mystery to me.

Dec 20 2018, 10:40 · Restricted Project, Restricted Project
sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

@jonas.smedegaard the recommendation was unofficial and I'd rather not push on it... could end up with policy that isn't in our interest. Waterfox uses the same style of UA string, and they have compatibility with the addons store.

Dec 20 2018, 10:37 · Restricted Project, Restricted Project

Dec 19 2018

sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

For reference, this is the JS library that the Mozilla addons team uses to figure out the UA: https://github.com/faisalman/ua-parser-js/

Dec 19 2018, 10:42 · Restricted Project, Restricted Project
sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

@jonas.smedegaard clarification - I visited addons.mozilla.org in a new browser tab after making that UA change, and was able to install addons that would fail with the previous UA string. I assume the UA override in about:config does *not* fix the problem for the browser as a whole, which is why browsing through the "addons manager" still barks at you for not running a compatible browser.

Dec 19 2018, 10:40 · Restricted Project, Restricted Project

Dec 18 2018

sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

I did some more testing, and for the sake of accuracy, this is a slightly better UA string:

Dec 18 2018, 22:27 · Restricted Project, Restricted Project
sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

We need to change the PureBrowser user agent string format to be compatible with the Firefox addons site. After discussions with Mozilla, this is the format of the string we need to send:

Dec 18 2018, 20:10 · Restricted Project, Restricted Project

Dec 9 2018

sean.obrien added a comment to T644: Firefox ESR is not privacy-protecting enough by default.

When I first suggested this in the other issue, these addons were just suggestions, not a "must have" list.

Dec 9 2018, 22:12
sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

@sean.obrien you mention "menu items that go nowhere".
Which issue is that? Or can you please file as a (separate!) issue if not already tracked?

Dec 9 2018, 06:08 · Restricted Project, Restricted Project

Dec 6 2018

sean.obrien edited the content of Firefox Compatibility Mode.
Dec 6 2018, 17:21
sean.obrien renamed Firefox Compatibility Mode from Firefox Compat Mode to Firefox Compatibility Mode.
Dec 6 2018, 17:20
sean.obrien added a comment to T644: Firefox ESR is not privacy-protecting enough by default.

thx @jeremiah.foster for opening this.

Dec 6 2018, 17:00
sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

Thanks @mladen.pejakovic that does, sort of, solve the issue. However @jeremiah.foster , we're shipping a browser with menu items that go nowhere when users try to ad addons... how could they possibly know to go into the browser registry about:config ?

Dec 6 2018, 16:59 · Restricted Project, Restricted Project

Dec 5 2018

sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

@Jeremiah thanks for weighing in.

Dec 5 2018, 13:15 · Restricted Project, Restricted Project
sean.obrien updated subscribers of T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

@jeremiah.foster adding you for your perspective on this.

Dec 5 2018, 00:41 · Restricted Project, Restricted Project

Dec 2 2018

sean.obrien added a comment to T347: Make it easy to start Tor Browser Bundle.

thanks @mladen.pejakovic that is helpful. I made some slight wording changes to the warning so we don't scare away users. I'll be working with Jeremiah on this to see if we can come up with a smoother solution, but this wiki entry is much needed in the meantime.

Dec 2 2018, 08:11 · Restricted Project
sean.obrien edited the content of TorBrowser on PureOS.
Dec 2 2018, 08:09
sean.obrien edited the content of TorBrowser on PureOS.
Dec 2 2018, 08:09

Nov 19 2018

sean.obrien added a comment to T110: firefox-esr - promotes nonfree search engines.

My recommendation for this would be only privacy-respecting choices:

Nov 19 2018, 12:09 · Freedom-harm: need nonfree service, Restricted Project
sean.obrien triaged T609: firefox-esr - links to search engine which loads non-free JavaScript as Low priority.

It seems to me that the issue here is the question of the licensing status of JavaScript loaded by DuckDuckGo.

Nov 19 2018, 10:19 · Restricted Project, Freedom-harm: downloads nonfree code

Oct 31 2018

sean.obrien raised the priority of T270: firefox-esr: tolerates execution of nonfree Javascript from Normal to Freedom Issue.

What's the status on this? The issue of LibreJS is coming up again in general, and I will also be requesting some other addons are either default or opt-in (perhaps with a slide in the first-boot setup wizard for PureOS).

Oct 31 2018, 09:12 · Freedom-harm: downloads potentially nonfree code

Oct 13 2018

sean.obrien added a comment to T594: Decide how to handle phone-specific syncs from Debian unstable to PureOS.
In T594#11055, @guido wrote:

@sean.obrien (this might become a bit off topic): the flatpak side needs more work for the 3rd party apps.

Oct 13 2018, 08:33 · Restricted Project, Restricted Project
sean.obrien added a comment to T594: Decide how to handle phone-specific syncs from Debian unstable to PureOS.

@guido got it, thanks! The further we can think down the road the better, so if I can be of any help let me know. I'm not yet sure what else might be necessary / desired by devs for mobile app development.

Oct 13 2018, 06:47 · Restricted Project, Restricted Project
sean.obrien added a comment to T594: Decide how to handle phone-specific syncs from Debian unstable to PureOS.

Anything we can do to make developing apps for the Librem phone smoother is really important. Does it make sense at this point to author a strategy / procedures for packages like this? Maybe a separate repo for unstable packages that we want to make available on PureOS as quickly as possible to encourage Librem phone development? I'm still getting my feet wet, so perhaps some of this is worked out already.

Oct 13 2018, 01:32 · Restricted Project, Restricted Project

Oct 12 2018

sean.obrien added a comment to T347: Make it easy to start Tor Browser Bundle.

Sure let's discuss more (edit: in another medium). I intend to solve the root problem identified by @thegoat above:

Oct 12 2018, 09:36 · Restricted Project
sean.obrien added a comment to T347: Make it easy to start Tor Browser Bundle.

A thought - If the issue is PureOS/Purism governance, then maybe we just take the TB downloader package from Debian contrib and start maintaining it in-house, making sure we have someone tracking changes in upstream TB very closely so we don't lag behind, and building a good relationship with Tor Project where we give them a heads up that we're doing this. We should also build a relationship with the Debian package managers for that downloader script... it's quite possible they're happy for us to be the maintainers for Debian contrib as well. But maybe not.

Oct 12 2018, 06:31 · Restricted Project
sean.obrien added a comment to T347: Make it easy to start Tor Browser Bundle.

Is it in your opinion more important to fix immediately (i.e. no time to wait for PureOS, we must hand over the keys to the castle to upstream) bugs in Tor Browser, or do you find it equally important that we (as they become available) enable mechanisms for the Linux developers and GNOME developers and any other upstreams to address 0-days in their code?

Oct 12 2018, 06:20 · Restricted Project
sean.obrien added a comment to T347: Make it easy to start Tor Browser Bundle.

Let me rephrase: The Tor Browser launcher/downloader *has* been packaged for Debian. I believe it has lagged behind in updates, even in my past experience, but I would want more concrete information on that.

Oct 12 2018, 05:05 · Restricted Project
sean.obrien added a comment to T347: Make it easy to start Tor Browser Bundle.

I do not recommend that PureOS bypass Debian and pull directly from upstream - either as PureOS-specific development effort (a package) or by our users (a script like torbrowser-bundle). The amount of work is less but we loose the security tracking and wider use (more eyeballs) from Debian.

Oct 12 2018, 04:45 · Restricted Project
sean.obrien added a comment to T347: Make it easy to start Tor Browser Bundle.

In my opinion, this issue should be solved by packaging Tor Browser for Debian main.

Oct 12 2018, 04:11 · Restricted Project

Oct 11 2018

sean.obrien added a comment to T421: Need a reference document for packages with external sources.

The problem here is very nicely explained, and I agree that a reference document with a high-level design pattern we can refer to is the best solution. Let me know if there's anything I can do to move this along.

Oct 11 2018, 16:27 · Restricted Project
sean.obrien added a comment to T553: unspecified when a PureOS issue is truly "resolved".

Suggestion - can we figure out a workflow with subtasks and/or parent tasks? That way there's no need to look outside of this issue tracker for solutions, and we can sort/clean up current tasks here that may be in the kind of limbo you describe.

Oct 11 2018, 16:14 · Restricted Project
sean.obrien added a comment to T347: Make it easy to start Tor Browser Bundle.

What do we need to do to move this forward? We really need to have Tor Browser available in some form. @jonas.smedegaard I know we've had some discussions about software outside of PureOS repo in general. What's your suggested solution for shipping TBB (or do you suggest not shipping it)?

Oct 11 2018, 16:07 · Restricted Project
sean.obrien added a comment to T596: PureOS should make it easy to include similarly-free external resources.

Others than me in Purism/PureOS are happy about Flatpack - doesn't that provide the needed sidechannel for injecting these popular tools?

Oct 11 2018, 15:46 · Restricted Project
sean.obrien added a comment to T596: PureOS should make it easy to include similarly-free external resources.

A bit of some history...
Last fall, soon after I was hired to Purism and my interest in nitpicking and policy making became clear, I was tasked with tracking "Freedom issues" - i.e. make sure PureOS would comply with FSF FSDG.
Instead of simply "obey the gospel of FSF", I tried make sense of their rules and find the logic that make sense to me that PureOS follows - which happens to fit FSF rules but makes sense on its own as well.
The rule I have followed - which FSF does not dictate but in my interpretation fits their concretely written rules - is that PureOS must be responsible towards our users in what we offer them.
My guess is that FSF has peculiarly odd phrases like "Nor should the distribution refer to third-party repositories that are not committed to only including free software; even if they only have free software today, that may not be true tomorrow" is that they don't trust other organisations (e.g. Debian) to stay on the rght path, but they do want other organisations to trust them (e.g. use their list of Mozilla-compatible addons).

Oct 11 2018, 13:24 · Restricted Project
sean.obrien added a comment to T596: PureOS should make it easy to include similarly-free external resources.

Thanks @jonas.smedegaard ! Potentially this is a bad forum for this discussion but I appreciate the title change.

Oct 11 2018, 11:44 · Restricted Project
sean.obrien added a comment to T596: PureOS should make it easy to include similarly-free external resources.

I'll add really quickly - if Debian main is still considered problematic, I understand, but I don't think that precludes making some of the Electron-based clients for E2EE messaging available through their repos (though not marked by default).

Oct 11 2018, 11:24 · Restricted Project
sean.obrien added a comment to T596: PureOS should make it easy to include similarly-free external resources.

You're quite right that the GNU FSDG is very clear on this issue:

Oct 11 2018, 11:17 · Restricted Project
sean.obrien added a comment to T550: purebrowser need a start page.

Seems to me that the best course of action is to talk to DuckDuckGo and see what the opportunities are here. We could of course use DuckDuckGo's search without any discussion, but a custom arrangement might be better for both parties.

Oct 11 2018, 09:32 · Restricted Project
sean.obrien added a comment to T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.

Understood, I'll think about this and see if it makes sense to comment on these other issues or open new, separate ones. However - T247 doesn't quite fit with the UA issue. The User Agent behavior is identifying PureBrowser in the way that has been decided in past discussions/issues, but Mozilla is detecting PureBrowser as not Firefox. Users who click Tools > Add-ons are given choices that don't work, and diverted down channels that go nowhere. See for example the attached screenshot of what my PureBrowser is currently recommending to me on the "Get Add-ons" screen.

Oct 11 2018, 09:27 · Restricted Project, Restricted Project
sean.obrien added a comment to T596: PureOS should make it easy to include similarly-free external resources.

Such change(s) would be encouraging those resources.
Since those resources are external to us, we cannot ensure our users that they fit our constraints e.g. regarding software freedoms - and even if they happen to currently align with out constraints we have no way of intervening if that change later on, after our users have installed our system onto their systems.
PureOS is the subset of Debian which is "Free" both by Debian definitions and by Free Software Foundation definitions. Encouraging inclusion of Debian resources would - in the eyes of FSF - be encouraging non-free stuff, and we would loose the endorsement from FSF as being a Free system by their standards.

Oct 11 2018, 08:58 · Restricted Project

Oct 10 2018

sean.obrien added a comment to T575: Encrypted disk not found during boot.
Oct 10 2018, 14:29
sean.obrien added a comment to T575: Encrypted disk not found during boot.

I had this issue on the OEM version of PureOS 8 Beta 1, Librem 15 v3. I ended up doing a full reinstall of PureOS.

Oct 10 2018, 14:29
sean.obrien created T596: PureOS should make it easy to include similarly-free external resources.
Oct 10 2018, 11:58 · Restricted Project
sean.obrien created T595: PureBrowser incompatible with user-agent sniffing at Firefox add-on store.
Oct 10 2018, 09:17 · Restricted Project, Restricted Project