Re: [opensource-dev] TPV Wiki page locked ?
On Sat, 11 Oct 2014 20:02:00 +0200, Henri Beauchamp wrote: > On Sat, 11 Oct 2014 19:44:50 +0200, Martin Fürholz wrote: > > > http://status.secondlifegrid.net/2014/10/07/post2378/ > > Ah, yes, that would explain it... Thanks ! Is the Wiki maintenance still in progress (after a month, it'd be surprising), because I still can't edit in it... Did someone forget to flip back the switch on, at LL ? Henri. ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] TPV Wiki page locked ?
I asked Oz about this the other day. All wiki pages are still locked with no time frame for when the underlaying security issues will be addressed. -jonathan On 11/8/14, Henri Beauchamp wrote: > On Sat, 11 Oct 2014 20:02:00 +0200, Henri Beauchamp wrote: > >> On Sat, 11 Oct 2014 19:44:50 +0200, Martin Fürholz wrote: >> >> > http://status.secondlifegrid.net/2014/10/07/post2378/ >> >> Ah, yes, that would explain it... Thanks ! > > Is the Wiki maintenance still in progress (after a month, it'd be > surprising), because I still can't edit in it... > > Did someone forget to flip back the switch on, at LL ? > > Henri. > ___ > Policies and (un)subscribe information available here: > http://wiki.secondlife.com/wiki/OpenSource-Dev > Please read the policies before posting to keep unmoderated posting > privileges > ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] TPV Wiki page locked ?
On Sat, 8 Nov 2014 11:24:18 -0500, Jonathan Welch wrote: > I asked Oz about this the other day. All wiki pages are still locked > with no time frame for when the underlaying security issues will be > addressed. > > -jonathan Thanks for the info. Henri. ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] TPV Wiki page locked ?
Copying the raw wiki source might not work without some modifications -- aren't there some LL-specific macros that some pages use? On Sat, Nov 8, 2014 at 11:45 AM, Henri Beauchamp wrote: > On Sat, 8 Nov 2014 11:24:18 -0500, Jonathan Welch wrote: > >> I asked Oz about this the other day. All wiki pages are still locked >> with no time frame for when the underlaying security issues will be >> addressed. >> >> -jonathan > > Thanks for the info. > > Henri. ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
[opensource-dev] Did that new CDN break web profiles for all TPVs?
Hi, is it just me, or did that new CDN break webprofiles for all viewers that don't have some new code for it? In Dolphin Viewer 3 Beta as well as in FS all I see is plaintext, links in profiles don't work anymore, no graphics; as if the stylesheet is missing. In the original viewer from get.secondlife.com and in a binary built from the latest viewer-release export the profiles work just fine, and if I go to someone's profile in firefox using http://my.secondlife.com/lance.corrimal it loads fine, too. Any suggestions? Cheers, LC ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
No Problem for me on Firestorm or other TPVs. Windows 7 64bit. There have been no screams from Firestorm users about broken web profiles since CDN rolled out. I don't see how CDN is even related to web profiles. > Date: Sat, 8 Nov 2014 21:21:59 +0100 > From: lance.corri...@eregion.de > To: opensource-dev@lists.secondlife.com > Subject: [opensource-dev] Did that new CDN break web profiles for all TPVs? > > Hi, > > is it just me, or did that new CDN break webprofiles for all viewers > that don't have some new code for it? > > In Dolphin Viewer 3 Beta as well as in FS all I see is plaintext, links > in profiles don't work anymore, no graphics; as if the stylesheet is > missing. In the original viewer from get.secondlife.com and in a binary > built from the latest viewer-release export the profiles work just fine, > and if I go to someone's profile in firefox using > http://my.secondlife.com/lance.corrimal it loads fine, too. > > Any suggestions? > > Cheers, > LC > ___ > Policies and (un)subscribe information available here: > http://wiki.secondlife.com/wiki/OpenSource-Dev > Please read the policies before posting to keep unmoderated posting privileges ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
On Sat, 08 Nov 2014 21:21:59 +0100, Lance Corrimal wrote: > Hi, > > is it just me, or did that new CDN break webprofiles for all viewers > that don't have some new code for it? Working fine here (France) in the Cool VL Viewer, including with a one year old release that didn't have the newest llqtwebkit library neither the new pipelining stuff (albeit the latter won't affect the built-in web browser used by the web profiles). > In Dolphin Viewer 3 Beta as well as in FS all I see is plaintext, links > in profiles don't work anymore, no graphics; as if the stylesheet is > missing. In the original viewer from get.secondlife.com and in a binary > built from the latest viewer-release export the profiles work just fine, > and if I go to someone's profile in firefox using > http://my.secondlife.com/lance.corrimal it loads fine, too. > > Any suggestions? Perhaps a problem with your local CDN cache... That is, if profiles do use CDN at your location. Here, 'nslookup my.secondlife.com' reports: my.secondlife.com canonical name = profiles-production-2-1922215598.us-west-2.elb.amazonaws.com. Name: profiles-production-2-1922215598.us-west-2.elb.amazonaws.com Address: 54.245.247.187 Name: profiles-production-2-1922215598.us-west-2.elb.amazonaws.com Address: 54.245.106.156 Name: profiles-production-2-1922215598.us-west-2.elb.amazonaws.com Address: 54.214.14.37 So, I'm apparently not hitting a CDN server when loading a web profile (AFAIK, CDN is only for meshes and textures, in SL). Try configuring a proxy (outside your country) for the web connections in the viewer, and see if it makes any difference. Oh... and do clear your viewer's web cache (in case a truncated/corrupted CSS file is cached there and messes up everything). Henri. ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
Hi, Firestorm 4.6.7.42398 32bit with havoc, running on 64bit windows 7: profile broken. Same on my wife's computer, and as well on linux on my laptop. Works fine using the official viewer from LL. screenshot: https://cloud.eregion.de/public.php?service=files&t=cd651a235e7142b6eb7aa1e41c879285 Cheers LC Am 08.11.2014 um 21:27 schrieb Whirly Fizzle: > No Problem for me on Firestorm or other TPVs. > Windows 7 64bit. > There have been no screams from Firestorm users about broken web > profiles since CDN rolled out. > I don't see how CDN is even related to web profiles. > > > Date: Sat, 8 Nov 2014 21:21:59 +0100 > > From: lance.corri...@eregion.de > > To: opensource-dev@lists.secondlife.com > > Subject: [opensource-dev] Did that new CDN break web profiles for > all TPVs? > > > > Hi, > > > > is it just me, or did that new CDN break webprofiles for all viewers > > that don't have some new code for it? > > > > In Dolphin Viewer 3 Beta as well as in FS all I see is plaintext, links > > in profiles don't work anymore, no graphics; as if the stylesheet is > > missing. In the original viewer from get.secondlife.com and in a binary > > built from the latest viewer-release export the profiles work just fine, > > and if I go to someone's profile in firefox using > > http://my.secondlife.com/lance.corrimal it loads fine, too. > > > > Any suggestions? > > > > Cheers, > > LC > > ___ > > Policies and (un)subscribe information available here: > > http://wiki.secondlife.com/wiki/OpenSource-Dev > > Please read the policies before posting to keep unmoderated posting > privileges ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
Hi, i get the same results from nslookup. Lets see how clearing cache does... I'm just wondering how the cache on 5 different computers, using two different viewers with separate caches on four of them, could get the same corrupted css file in it (without the lab breaking the css file in the first place...) a moment later: cleared all caches, still broken. Cheers LC Am 08.11.2014 um 21:38 schrieb Henri Beauchamp: > On Sat, 08 Nov 2014 21:21:59 +0100, Lance Corrimal wrote: > >> Hi, >> >> is it just me, or did that new CDN break webprofiles for all viewers >> that don't have some new code for it? > Working fine here (France) in the Cool VL Viewer, including with a one > year old release that didn't have the newest llqtwebkit library neither > the new pipelining stuff (albeit the latter won't affect the built-in > web browser used by the web profiles). > >> In Dolphin Viewer 3 Beta as well as in FS all I see is plaintext, links >> in profiles don't work anymore, no graphics; as if the stylesheet is >> missing. In the original viewer from get.secondlife.com and in a binary >> built from the latest viewer-release export the profiles work just fine, >> and if I go to someone's profile in firefox using >> http://my.secondlife.com/lance.corrimal it loads fine, too. >> >> Any suggestions? > Perhaps a problem with your local CDN cache... That is, if profiles do > use CDN at your location. Here, 'nslookup my.secondlife.com' reports: > my.secondlife.com > canonical name = profiles-production-2-1922215598.us-west-2.elb.amazonaws.com. > Name: profiles-production-2-1922215598.us-west-2.elb.amazonaws.com > Address: 54.245.247.187 > Name: profiles-production-2-1922215598.us-west-2.elb.amazonaws.com > Address: 54.245.106.156 > Name: profiles-production-2-1922215598.us-west-2.elb.amazonaws.com > Address: 54.214.14.37 > > So, I'm apparently not hitting a CDN server when loading a web profile > (AFAIK, CDN is only for meshes and textures, in SL). > > Try configuring a proxy (outside your country) for the web connections > in the viewer, and see if it makes any difference. > > Oh... and do clear your viewer's web cache (in case a truncated/corrupted > CSS file is cached there and messes up everything). > > Henri. > ___ > Policies and (un)subscribe information available here: > http://wiki.secondlife.com/wiki/OpenSource-Dev > Please read the policies before posting to keep unmoderated posting privileges ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
On Sat, 08 Nov 2014 21:40:22 +0100, Lance Corrimal wrote: > screenshot: > https://cloud.eregion.de/public.php?service=files&t=cd651a235e7142b6eb7aa1e41c879285 There must be some issue at your ISP's, because I can't reach cloud.eregion.de from here (screenshot not loading, (tcp)traceroute not reaching the web server)... Henri. ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
ok interesting factoid here: I've set my viewer to go through the tor network for web pages... and blam, profiles load fine. now if someone please explain to me why the official viewer and the binary built from viewer-release load web profiles just fine without this... 0.o Cheers LC Am 08.11.2014 um 21:46 schrieb Lance Corrimal: > Hi, > > i get the same results from nslookup. > > Lets see how clearing cache does... I'm just wondering how the cache on > 5 different computers, using two different viewers with separate caches > on four of them, could get the same corrupted css file in it (without > the lab breaking the css file in the first place...) > > a moment later: cleared all caches, still broken. > > Cheers > LC > > Am 08.11.2014 um 21:38 schrieb Henri Beauchamp: >> On Sat, 08 Nov 2014 21:21:59 +0100, Lance Corrimal wrote: >> >>> Hi, >>> >>> is it just me, or did that new CDN break webprofiles for all viewers >>> that don't have some new code for it? >> Working fine here (France) in the Cool VL Viewer, including with a one >> year old release that didn't have the newest llqtwebkit library neither >> the new pipelining stuff (albeit the latter won't affect the built-in >> web browser used by the web profiles). >> >>> In Dolphin Viewer 3 Beta as well as in FS all I see is plaintext, links >>> in profiles don't work anymore, no graphics; as if the stylesheet is >>> missing. In the original viewer from get.secondlife.com and in a binary >>> built from the latest viewer-release export the profiles work just fine, >>> and if I go to someone's profile in firefox using >>> http://my.secondlife.com/lance.corrimal it loads fine, too. >>> >>> Any suggestions? >> Perhaps a problem with your local CDN cache... That is, if profiles do >> use CDN at your location. Here, 'nslookup my.secondlife.com' reports: >> my.secondlife.com >> canonical name = >> profiles-production-2-1922215598.us-west-2.elb.amazonaws.com. >> Name: profiles-production-2-1922215598.us-west-2.elb.amazonaws.com >> Address: 54.245.247.187 >> Name: profiles-production-2-1922215598.us-west-2.elb.amazonaws.com >> Address: 54.245.106.156 >> Name: profiles-production-2-1922215598.us-west-2.elb.amazonaws.com >> Address: 54.214.14.37 >> >> So, I'm apparently not hitting a CDN server when loading a web profile >> (AFAIK, CDN is only for meshes and textures, in SL). >> >> Try configuring a proxy (outside your country) for the web connections >> in the viewer, and see if it makes any difference. >> >> Oh... and do clear your viewer's web cache (in case a truncated/corrupted >> CSS file is cached there and messes up everything). >> >> Henri. >> ___ >> Policies and (un)subscribe information available here: >> http://wiki.secondlife.com/wiki/OpenSource-Dev >> Please read the policies before posting to keep unmoderated posting >> privileges > ___ > Policies and (un)subscribe information available here: > http://wiki.secondlife.com/wiki/OpenSource-Dev > Please read the policies before posting to keep unmoderated posting privileges ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
On Sat, 08 Nov 2014 21:51:41 +0100, Lance Corrimal wrote: > ok interesting factoid here: > > I've set my viewer to go through the tor network for web pages... and > blam, profiles load fine. > > now if someone please explain to me why the official viewer and the > binary built from viewer-release load web profiles just fine without this... Wild guess: a firewall/web cache on your ISP's side, filtering HTTP requests based off the user agent (the official viewer advertizes "Second Life", TPVs advertize their own name: if the web cache/firewall filters out "unknown" (rare/custom) user agents, then you are in trouble). To verify this, configure Firefox' user agent string with the same user agent string as a TPV (it should appear in the viewer log), and try loading a web profile in that TPV-impersonating Firefox configuration... Henri. ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
Hm, cloud.eregion.de and my internet connection at home are not on the same ISP... ...you're being blocked by the firewall. are you coming from the same net block as OVH? let's see if the list allows attachments. Cheers LC Am 08.11.2014 um 21:48 schrieb Henri Beauchamp: > On Sat, 08 Nov 2014 21:40:22 +0100, Lance Corrimal wrote: > >> screenshot: >> https://cloud.eregion.de/public.php?service=files&t=cd651a235e7142b6eb7aa1e41c879285 > There must be some issue at your ISP's, because I can't reach cloud.eregion.de > from here (screenshot not loading, (tcp)traceroute not reaching the web > server)... > > Henri. ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
I'll try that, but I'm not sure that's the cause... maps.secondlife.com loads like molasses when going there directly from firefox, but when I go through tor it loads instantaneously. Cheers LC Am 08.11.2014 um 22:01 schrieb Henri Beauchamp: > On Sat, 08 Nov 2014 21:51:41 +0100, Lance Corrimal wrote: > >> ok interesting factoid here: >> >> I've set my viewer to go through the tor network for web pages... and >> blam, profiles load fine. >> >> now if someone please explain to me why the official viewer and the >> binary built from viewer-release load web profiles just fine without this... > Wild guess: a firewall/web cache on your ISP's side, filtering HTTP > requests based off the user agent (the official viewer advertizes > "Second Life", TPVs advertize their own name: if the web cache/firewall > filters out "unknown" (rare/custom) user agents, then you are in trouble). > > To verify this, configure Firefox' user agent string with the same user > agent string as a TPV (it should appear in the viewer log), and try > loading a web profile in that TPV-impersonating Firefox configuration... > > Henri. > ___ > Policies and (un)subscribe information available here: > http://wiki.secondlife.com/wiki/OpenSource-Dev > Please read the policies before posting to keep unmoderated posting privileges ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
On Sat, 8 Nov 2014 22:01:25 +0100, Henri Beauchamp wrote: > Wild guess: a firewall/web cache on your ISP's side, filtering HTTP > requests based off the user agent Scratch that, because any request on http://my.Secondlife.com (i.e. any request on port 80) gets automatically redirected to https://my.Secondlife.com (SSL or TLS, port 443), so your ISP can't do a deep packet inspection to filter on the user agent (which is encrypted with the rest of the request in this case). However, your ISP's web proxy/firewall could prefectly refuse SSLv3 (and older) negociations on port 443: such a measure could have been put recently into place because of the POODLE vulnerability. In this event, older viewers not using the latest TLS v1.0-enabled llqtwebkit won't be able to pass through your ISP's filter. To verify whether it's the case or not, either try via Firefox after configuring the latter to refuse all TLS (v1.0, 1.1, 1.2) connections and accept SSL v3 only (Firefox would then fail to load a web profile), or use another TPV that got the newer llqtwebkit (the current releases of the Cool VL Viewer have it), which would then succeed. Henri. ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
Re: [opensource-dev] Did that new CDN break web profiles for all TPVs?
dude, you hit the nail squarely on the head. I've set firefox to do only SSLv3 and blam, my.secondlife.com/lance.corrimal looks just like in FF and DV3. One more point for getting the old compiler back to work. Am 08.11.2014 um 22:34 schrieb Henri Beauchamp: > On Sat, 8 Nov 2014 22:01:25 +0100, Henri Beauchamp wrote: > >> Wild guess: a firewall/web cache on your ISP's side, filtering HTTP >> requests based off the user agent > Scratch that, because any request on http://my.Secondlife.com (i.e. > any request on port 80) gets automatically redirected to > https://my.Secondlife.com (SSL or TLS, port 443), so your ISP can't > do a deep packet inspection to filter on the user agent (which is > encrypted with the rest of the request in this case). > > However, your ISP's web proxy/firewall could prefectly refuse SSLv3 > (and older) negociations on port 443: such a measure could have been > put recently into place because of the POODLE vulnerability. > In this event, older viewers not using the latest TLS v1.0-enabled > llqtwebkit won't be able to pass through your ISP's filter. > > To verify whether it's the case or not, either try via Firefox > after configuring the latter to refuse all TLS (v1.0, 1.1, 1.2) > connections and accept SSL v3 only (Firefox would then fail to > load a web profile), or use another TPV that got the newer llqtwebkit > (the current releases of the Cool VL Viewer have it), which would > then succeed. > > Henri. > ___ > Policies and (un)subscribe information available here: > http://wiki.secondlife.com/wiki/OpenSource-Dev > Please read the policies before posting to keep unmoderated posting privileges ___ Policies and (un)subscribe information available here: http://wiki.secondlife.com/wiki/OpenSource-Dev Please read the policies before posting to keep unmoderated posting privileges
