Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.software.thunderbird > #21172 > unrolled thread

Bogus Mozilla FTP server websites?

Back to article view | Back to alt.comp.software.thunderbird

Contents

  Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-06-30 18:09 +0800
    Re: Bogus Mozilla FTP server websites? aer <aer@no-email.xxx.invalid> - 2026-07-03 08:44 -0400
      Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-03 20:51 +0800
      Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-03 20:51 +0800
      Re: Bogus Mozilla FTP server websites? JJ <jj4public@gmail.com> - 2026-07-03 22:06 +0700
        Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 00:04 +0800
          Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 00:07 +0800
          Re: Bogus Mozilla FTP server websites? Daniel70 <daniel47@nomail.afraid.org> - 2026-07-04 23:05 +1000
            Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 21:40 +0800
        Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 00:08 +0800
        Re: Bogus Mozilla FTP server websites? Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-07-04 03:49 +0000
          Re: Bogus Mozilla FTP server websites? JJ <jj4public@gmail.com> - 2026-07-04 22:57 +0700
            Re: Bogus Mozilla FTP server websites? Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-07-04 23:15 +0000
              Re: Bogus Mozilla FTP server websites? JJ <jj4public@gmail.com> - 2026-07-05 21:54 +0700
                Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-05 22:57 +0800
                  Re: Bogus Mozilla FTP server websites? "Carlos E. R." <robin_listas@es.invalid> - 2026-07-05 19:57 +0200
                Re: Bogus Mozilla FTP server websites? "Carlos E. R." <robin_listas@es.invalid> - 2026-07-05 19:58 +0200
                Re: Bogus Mozilla FTP server websites? Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-07-05 21:51 +0000
      Re: Bogus Mozilla FTP server websites? "Carlos E. R." <robin_listas@es.invalid> - 2026-07-03 22:50 +0200
        Re: Bogus Mozilla FTP server websites? FTP? HTTPS? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 12:27 +0800
      Re: Bogus Mozilla FTP server websites? Mozilla Products <invalid@invalid.invalid> - 2026-07-04 00:05 +0100
        Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 12:00 +0800
      Re: Bogus Mozilla FTP server websites? John Smith <invalid@invalid.invalid> - 2026-07-04 23:01 +0100
        Re: Bogus Mozilla FTP server websites? Mirror? Shadow? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-05 13:08 +0800
          Re: Bogus Mozilla FTP server websites? Mirror? Shadow? Paul <nospam@needed.invalid> - 2026-07-05 03:12 -0400
          Re: Bogus Mozilla FTP server websites? Mirror? Shadow? Shadow <Sh@dowbr.invalid> - 2026-07-05 16:27 -0300
            Re: Bogus Mozilla ... Usenet spam and noise "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-06 09:59 +0800

Page 1 of 2  [1] 2  Next page →

#21172 — Bogus Mozilla FTP server websites?

Are there multiple bogus Mozilla FTP server websites?

-- 

    @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
   / v \  May the Force and farces be with you! Live long and prosper!!
  /( _ )\ https://sites.google.com/site/changmw/
    ^ ^   https://github.com/changmw/changmw
          The game is afoot... Meow...

[toc] | [next] | [standalone]

#21211

On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:
> 
> Are there multiple bogus Mozilla FTP server websites?
> 
More than likely, yes.

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

[toc] | [prev] | [next] | [standalone]

#21212

On 7/3/2026 8:44 PM, aer wrote:
> On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:
>>
>> Are there multiple bogus Mozilla FTP server websites?
>>
> More than likely, yes.
> 
> The only official one I'm aware of is:
> https://ftp.mozilla.org/pub/


And I hope our access to that official
website is NOT redirected to bogus ones.

Trust is hard to tell.

-- 

    @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
   / v \  May the Force and farces be with you! Live long and prosper!!
  /( _ )\ https://sites.google.com/site/changmw/
    ^ ^   https://github.com/changmw/changmw
          The game is afoot... Meow...

[toc] | [prev] | [next] | [standalone]

#21213

On 7/3/2026 8:44 PM, aer wrote:
> On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:
>>
>> Are there multiple bogus Mozilla FTP server websites?
>>
> More than likely, yes.
> 
> The only official one I'm aware of is:
> https://ftp.mozilla.org/pub/


And I hope our access to that official
website is NOT redirected to bogus ones.

Trust is hard to trust. :)

-- 

    @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
   / v \  May the Force and farces be with you! Live long and prosper!!
  /( _ )\ https://sites.google.com/site/changmw/
    ^ ^   https://github.com/changmw/changmw
          The game is afoot... Meow...

[toc] | [prev] | [next] | [standalone]

#21214

On Fri, 3 Jul 2026 08:44:42 -0400, aer wrote:
> On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:
>> 
>> Are there multiple bogus Mozilla FTP server websites?
>> 
> More than likely, yes.
> 
> The only official one I'm aware of is:
> https://ftp.mozilla.org/pub/

Is there really bogus Mozilla FTP server which is not obvious?

[toc] | [prev] | [next] | [standalone]

#21216

On 7/3/2026 11:06 PM, JJ wrote:
> 
> Is there really bogus Mozilla FTP server which is not obvious?


it's indeed possible. All you need is
to redirect/switch TCP/IP packet traffic.


-- 

    @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
   / v \  May the Force and farces be with you! Live long and prosper!!
  /( _ )\ https://sites.google.com/site/changmw/
    ^ ^   https://github.com/changmw/changmw
          The game is afoot... Meow...

[toc] | [prev] | [next] | [standalone]

#21217

On 7/4/2026 12:04 AM, Mr. Man-wai Chang wrote:
> On 7/3/2026 11:06 PM, JJ wrote:
>>
>> Is there really bogus Mozilla FTP server which is not obvious?
> 
> it's indeed possible. All you need is
> to redirect/switch TCP/IP packet traffic.

And right now, my internet connection
is constantly on and off all the time
for no apparent reason.

I don't know whether it is science
or MAGIC. :)

-- 

    @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
   / v \  May the Force and farces be with you! Live long and prosper!!
  /( _ )\ https://sites.google.com/site/changmw/
    ^ ^   https://github.com/changmw/changmw
          The game is afoot... Meow...

[toc] | [prev] | [next] | [standalone]

#21242

On 4/07/2026 2:04 am, Mr. Man-wai Chang wrote:
> On 7/3/2026 11:06 PM, JJ wrote:
>>
>> Is there really bogus Mozilla FTP server which is not obvious?
> 
> it's indeed possible. All you need is
> to redirect/switch TCP/IP packet traffic.
> 
.... but can you redirect JJ's request to the ACTUAL Moz FTP server so 
that JJ ends up somewhere else??

Maybe, Perhaps, if some server BETWEEN JJ's computer and the MOZ Site 
were corrupted, Maybe, Perhaps ..... but that would only effect a 
(possibly) small amount of connections, wouldn't it??
-- 
Daniel70

[toc] | [prev] | [next] | [standalone]

#21244

On 7/4/2026 9:05 PM, Daniel70 wrote:
> .... but can you redirect JJ's request to the ACTUAL Moz FTP server so
> that JJ ends up somewhere else??
> 
> Maybe, Perhaps, if some server BETWEEN JJ's computer and the MOZ Site
> were corrupted, Maybe, Perhaps ..... but that would only effect a
> (possibly) small amount of connections, wouldn't it??


The ulgy, old, bad, ancient middle-man thing... :)

-- 

    @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
   / v \  May the Force and farces be with you! Live long and prosper!!
  /( _ )\ https://sites.google.com/site/changmw/
    ^ ^   https://github.com/changmw/changmw
          The game is afoot... Meow...

[toc] | [prev] | [next] | [standalone]

#21218

On 7/3/2026 11:06 PM, JJ wrote:
> 
> Is there really bogus Mozilla FTP server which is not obvious?


And maybe... maybe... you are a bogus "JJ"!!

The real "JJ" never exists. :)

You called yourself "JJ" to do Dark Op.

-- 

    @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
   / v \  May the Force and farces be with you! Live long and prosper!!
  /( _ )\ https://sites.google.com/site/changmw/
    ^ ^   https://github.com/changmw/changmw
          The game is afoot... Meow...

[toc] | [prev] | [next] | [standalone]

#21232

On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:

> Is there really bogus Mozilla FTP server which is not obvious?

Does it matter?

Wherever you get it from, just verify the hash against a list like
this: <https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>

[toc] | [prev] | [next] | [standalone]

#21245

On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence D’Oliveiro wrote:
> On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:
> 
>> Is there really bogus Mozilla FTP server which is not obvious?
> 
> Does it matter?
> 
> Wherever you get it from, just verify the hash against a list like
> this: <https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>

You're pointing to an official server. Not bogus server.
So, yes. It does matter.

[toc] | [prev] | [next] | [standalone]

#21256

On Sat, 4 Jul 2026 22:57:48 +0700, JJ wrote:

> On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence D’Oliveiro wrote:
>>
>> On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:
>>
>>> Is there really bogus Mozilla FTP server which is not obvious?
>>
>> Does it matter?
>>
>> Wherever you get it from, just verify the hash against a list like
>> this:
>> <https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>
>
> You're pointing to an official server. Not bogus server.

Precisely.

> So, yes. It does matter.

The actual download does not matter, just as long as you get the
verification hashes from a trusted source.

[toc] | [prev] | [next] | [standalone]

#21266

On Sat, 4 Jul 2026 23:15:37 -0000 (UTC), Lawrence D’Oliveiro wrote:
> On Sat, 4 Jul 2026 22:57:48 +0700, JJ wrote:
> 
>> On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence D’Oliveiro wrote:
>>>
>>> On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:
>>>
>>>> Is there really bogus Mozilla FTP server which is not obvious?
>>>
>>> Does it matter?
>>>
>>> Wherever you get it from, just verify the hash against a list like
>>> this:
>>> <https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>
>>
>> You're pointing to an official server. Not bogus server.
> 
> Precisely.
> 
>> So, yes. It does matter.
> 
> The actual download does not matter, just as long as you get the
> verification hashes from a trusted source.

Except that, if from a bogus server, you can get a hash which is generated
from a fake or an already compromised download.

The download is not the only one which can be modified.

[toc] | [prev] | [next] | [standalone]

#21267

On 7/5/2026 10:54 PM, JJ wrote:
> 
> Except that, if from a bogus server, you can get a hash which is generated
> from a fake or an already compromised download.
> 
> The download is not the only one which can be modified.

Hashes just some convolute mathematics, more
complicate than check-digits or checksums.

I always wonder whether a hash for a very large
file could be duplicated or faked. :)

-- 

    @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
   / v \  May the Force and farces be with you! Live long and prosper!!
  /( _ )\ https://sites.google.com/site/changmw/
    ^ ^   https://github.com/changmw/changmw
          The game is afoot... Meow...

[toc] | [prev] | [next] | [standalone]

#21272

On 2026-07-05 16:57, Mr. Man-wai Chang wrote:
> On 7/5/2026 10:54 PM, JJ wrote:
>>
>> Except that, if from a bogus server, you can get a hash which is 
>> generated
>> from a fake or an already compromised download.
>>
>> The download is not the only one which can be modified.
> 
> Hashes just some convolute mathematics, more
> complicate than check-digits or checksums.
> 
> I always wonder whether a hash for a very large
> file could be duplicated or faked. :)
> 

No. Ask an AI to summarize it for you.

-- 
Cheers,
        Carlos E.R.
        ES🇪🇸, EU🇪🇺;

[toc] | [prev] | [next] | [standalone]

#21273

On 2026-07-05 16:54, JJ wrote:
> On Sat, 4 Jul 2026 23:15:37 -0000 (UTC), Lawrence D’Oliveiro wrote:
>> On Sat, 4 Jul 2026 22:57:48 +0700, JJ wrote:
>>
>>> On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence D’Oliveiro wrote:
>>>>
>>>> On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:
>>>>
>>>>> Is there really bogus Mozilla FTP server which is not obvious?
>>>>
>>>> Does it matter?
>>>>
>>>> Wherever you get it from, just verify the hash against a list like
>>>> this:
>>>> <https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>
>>>
>>> You're pointing to an official server. Not bogus server.
>>
>> Precisely.
>>
>>> So, yes. It does matter.
>>
>> The actual download does not matter, just as long as you get the
>> verification hashes from a trusted source.
> 
> Except that, if from a bogus server, you can get a hash which is generated
> from a fake or an already compromised download.
> 
> The download is not the only one which can be modified.

Just read the hash from the true site, then download from anywhere and 
check the hash. If it matches, the file is good.


-- 
Cheers,
        Carlos E.R.
        ES🇪🇸, EU🇪🇺;

[toc] | [prev] | [next] | [standalone]

#21277

On Sun, 5 Jul 2026 21:54:16 +0700, JJ wrote:

> On Sat, 4 Jul 2026 23:15:37 -0000 (UTC), Lawrence D’Oliveiro wrote:
>>
>> The actual download does not matter, just as long as you get the
>> verification hashes from a trusted source.
>
> Except that, if from a bogus server, you can get a hash which is
> generated from a fake or an already compromised download.

So, don’t get the hash from a mirror server, get it from a trusted
source.

> The download is not the only one which can be modified.

It is the big one, that puts a significant load on the server you’re
getting it from. Which is why we have mirrors.

A SHA-256 hash, on the other hand, is just a 64-character hex string.

[toc] | [prev] | [next] | [standalone]

#21226

On 2026-07-03 14:44, aer wrote:
> On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:
>>
>> Are there multiple bogus Mozilla FTP server websites?
>>
> More than likely, yes.
> 
> The only official one I'm aware of is:
> https://ftp.mozilla.org/pub/

Which is https, not ftp.

-- 
Cheers,
        Carlos E.R.
        ES🇪🇸, EU🇪🇺;

[toc] | [prev] | [next] | [standalone]

#21237 — Re: Bogus Mozilla FTP server websites? FTP? HTTPS?

On 7/4/2026 4:50 AM, Carlos E. R. wrote:
> On 2026-07-03 14:44, aer wrote:
>>
>> The only official one I'm aware of is:
>> https://ftp.mozilla.org/pub/
> 
> Which is https, not ftp.


It was a FTP server. But FTP was declared
old, ulgy, bad, unsecured and deprecated.
So FTP became HTTPS (networking protocol
header and packet data).

Firefox also dropped its built-in FTP
function as well.

As a result, users who wanted FTP might
have switched to other browsers like
Microsoft Edge, or use standalone FTP
clients.

-- 

    @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
   / v \  May the Force and farces be with you! Live long and prosper!!
  /( _ )\ https://sites.google.com/site/changmw/
    ^ ^   https://github.com/changmw/changmw
          The game is afoot... Meow...

[toc] | [prev] | [next] | [standalone]

Page 1 of 2  [1] 2  Next page →

Back to top | Article view | alt.comp.software.thunderbird

csiph-web