lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 17 Jan 2014 20:04:13 -0800
From: Patrick O'Keeffe <seclists-fulldisclosure@...eeffe.net>
To: full-disclosure@...ts.grok.org.uk
Subject: Ubuntu, duckduckgo, and additional info

> On Wed, Jan 15, 2014 at 6:47 AM,  <silence_is_best at hushmail.com> wrote:
>> I see thank you.  My distribution.id nuke did nothing....any way to disable
>> this?  It's all about choice after all right ;)
> 
> Settings > Manage Search Engines > Add

This won't work quite as expected. FF only hides search plugins when you
"Remove" them from the list. If you attempt to add the DDG plugin
directly from their webpage, an error message will notify you that a
plugin of that name already exists whether it's hidden or not.

The only real solution is to edit the plugin definition file (as root).
I found it under:

/usr/lib/firefox/distribution/searchplugins/locale/en-US/duckduckgo.xml

Remove this line near the bottom:

  <Param name="t" value="canonical"/>

I'm fairly sure you'll have to do this after each update too.

[Sorry if this doesn't thread right; I just joined the list]

-p

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists