From Newsgroup: alt.comp.software.firefox


Are there multiple bogus Mozilla FTP server websites?
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...

--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:

Are there multiple bogus Mozilla FTP server websites?

More than likely, yes.

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/3/2026 8:44 PM, aer wrote:

On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:

Are there multiple bogus Mozilla FTP server websites?

More than likely, yes.

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

And I hope our access to that official
website is NOT redirected to bogus ones.

Trust is hard to tell.
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/3/2026 8:44 PM, aer wrote:

On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:

Are there multiple bogus Mozilla FTP server websites?

More than likely, yes.

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

And I hope our access to that official
website is NOT redirected to bogus ones.

Trust is hard to trust. :)
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On Fri, 3 Jul 2026 08:44:42 -0400, aer wrote:

On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:

Are there multiple bogus Mozilla FTP server websites?

More than likely, yes.

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

Is there really bogus Mozilla FTP server which is not obvious?
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/3/2026 11:06 PM, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

it's indeed possible. All you need is
to redirect/switch TCP/IP packet traffic.
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/4/2026 12:04 AM, Mr. Man-wai Chang wrote:

On 7/3/2026 11:06 PM, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

it's indeed possible. All you need is
to redirect/switch TCP/IP packet traffic.

And right now, my internet connection
is constantly on and off all the time
for no apparent reason.

I don't know whether it is science
or MAGIC. :)
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/3/2026 11:06 PM, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

And maybe... maybe... you are a bogus "JJ"!!

The real "JJ" never exists. :)

You called yourself "JJ" to do Dark Op.
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 2026-07-03 14:44, aer wrote:

On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:

Are there multiple bogus Mozilla FTP server websites?

More than likely, yes.

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

Which is https, not ftp.
--
Cheers,
Carlos E.R.
ESEfc-Efc+, EUEfc-Efc|;
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 03/07/2026 13:44, aer wrote:

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

It's not an FTP server. It's just a subdomain, like any other. Examples include:

https://mail.mozilla.org/
https://www.mozilla.org/
https://docs.mozilla.org/
https://xxxx.mozilla.org/.

You can use anything in place of 'xxxx'. Notice that I have included
'www' because that is what it is. The only generic top-level domain is mozilla.org, and that is what ICANN recognises.

/pub is the folder where files are stored. Again, it can be anything,
but 'pub' is generally known to users to signify 'public', and no login
is required to access the files in that folder. If you are running a
website hosted on your Linux server, the ownership might be something
like this:

www-data:www-data.

I could explain what this means, but that is not the point of this post.


--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

Does it matter?

Wherever you get it from, just verify the hash against a list like
this: <https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/4/2026 7:05 AM, Mozilla Products wrote:

It's not an FTP server. It's just a subdomain, like any other. Examples include:
....
I could explain what this means, but that is not the point of this post.

In an ancient or old terms, just an
written address on ab envelope. only
the address matter, not the names.
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/4/2026 4:50 AM, Carlos E. R. wrote:

On 2026-07-03 14:44, aer wrote:

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

Which is https, not ftp.

It was a FTP server. But FTP was declared
old, ulgy, bad, unsecured and deprecated.
So FTP became HTTPS (networking protocol
header and packet data).

Firefox also dropped its built-in FTP
function as well.

As a result, users who wanted FTP might
have switched to other browsers like
Microsoft Edge, or use standalone FTP
clients.
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 4/07/2026 2:04 am, Mr. Man-wai Chang wrote:

On 7/3/2026 11:06 PM, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

it's indeed possible. All you need is
to redirect/switch TCP/IP packet traffic.

.... but can you redirect JJ's request to the ACTUAL Moz FTP server so
that JJ ends up somewhere else??

Maybe, Perhaps, if some server BETWEEN JJ's computer and the MOZ Site
were corrupted, Maybe, Perhaps ..... but that would only effect a
(possibly) small amount of connections, wouldn't it??
--
Daniel70
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/4/2026 9:05 PM, Daniel70 wrote:

.... but can you redirect JJ's request to the ACTUAL Moz FTP server so
that JJ ends up somewhere else??

Maybe, Perhaps, if some server BETWEEN JJ's computer and the MOZ Site
were corrupted, Maybe, Perhaps ..... but that would only effect a
(possibly) small amount of connections, wouldn't it??

The ulgy, old, bad, ancient middle-man thing... :)
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On Sat, 4 Jul 2026 00:07:10 +0800, "Mr. Man-wai Chang" <toylet.toylet@gmail.com> wrote:

And right now, my internet connection
is constantly on and off all the time
for no apparent reason.

I don't know whether it is science
or MAGIC. :)

Look in the mirror. Do you see a fairy? That confirms it's
probably magic.
Still does not justify the multiple cross-posting.
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012
Google Fuchsia - 2021
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/4/2026 10:21 PM, Shadow wrote:

On Sat, 4 Jul 2026 00:07:10 +0800, "Mr. Man-wai Chang" <toylet.toylet@gmail.com> wrote:

And right now, my internet connection
is constantly on and off all the time
for no apparent reason.

I don't know whether it is science
or MAGIC. :)

Look in the mirror. Do you see a fairy?
That confirms it's probably magic.
Still does not justify the multiple cross-posting.

As I said before, you won't believe in what
I am hunting. :)

And no, there was no fairy tales behind me.

BUT a bunch of plastic models (Gundam, Star
Wars, aircraft carrier flight deck).

BTW, did you notice a ghost behind you?
Meow... ;)
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence DoOliveiro wrote:

On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

Does it matter?

Wherever you get it from, just verify the hash against a list like
this: <https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>

You're pointing to an official server. Not bogus server.
So, yes. It does matter.
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

JJ wrote:

On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence DoOliveiro wrote:

On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

Does it matter?

Wherever you get it from, just verify the hash against a list like
this: <https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>

You're pointing to an official server. Not bogus server.
So, yes. It does matter.

Back around Summer 2014, Windows 8.1 was relatively new and Windows XP
had just gone out of support. A friend of mine bought a new PC running
8.1 and with some software pre-loaded, in particular a McAfee virus
scanner (free for the first month, the usual).
She entered something like "firefox download" into the browser's search
engine (presumably Bing) and it came up with something plausible.
At that point McAfee started screaming. Thus warned she called up
Google and it came up with a different server, one McAfee was completely
happy with. Bing's number one choice was a fake-Mozilla malware site.
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 03/07/2026 13:44, aer wrote:

On 6/30/26 6:09 AM, Mr. Man-wai Chang wrote:

Are there multiple bogus Mozilla FTP server websites?

More than likely, yes.

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

You couldn't be more wrong :)

<https://download-installer.cdn.mozilla.net/pub/firefox/releases/> <https://download-installer.cdn.mozilla.net/pub/thunderbird/releases/>


--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On Sat, 4 Jul 2026 22:57:48 +0700, JJ wrote:

On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence DrCOOliveiro wrote:

On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

Does it matter?

Wherever you get it from, just verify the hash against a list like
this:
<https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>

You're pointing to an official server. Not bogus server.

Precisely.

So, yes. It does matter.

The actual download does not matter, just as long as you get the
verification hashes from a trusted source.
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/5/2026 6:01 AM, John Smith wrote:

On 03/07/2026 13:44, aer wrote:

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

You couldn't be more wrong :)

<https://download-installer.cdn.mozilla.net/pub/firefox/releases/> <https://download-installer.cdn.mozilla.net/pub/thunderbird/releases/>

Are these official Mozilla FTP mirror sites?

Shadow, Shadow, did you see anything strange
in these FTP mirrors or FTP shadows? :)

Shadow... Shadow... do you read me?

On 7/4/2026 10:21 PM, Shadow wrote:

Look in the mirror. Do you see a fairy?
That confirms it's probably magic.

--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On Sun, 7/5/2026 1:08 AM, Mr. Man-wai Chang wrote:

On 7/5/2026 6:01 AM, John Smith wrote:

On 03/07/2026 13:44, aer wrote:

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

You couldn't be more wrong :)

<https://download-installer.cdn.mozilla.net/pub/firefox/releases/>
<https://download-installer.cdn.mozilla.net/pub/thunderbird/releases/>

Are these official Mozilla FTP mirror sites?

Using Wikipedia, you can type the name of some noteworthy software
and it will list the trusted URL for it. That's as close as we can
get to guiding you.

thunderbird (software)

firefox (software)

Using a direct link to a server, it's a matter of *you* (not Shadow)
figuring it out. *You* are the only person who suffers, when
a mistake is made downloading software.

https://en.wikipedia.org/wiki/Mozilla_Thunderbird

Website: www.thunderbird.net

https://en.wikipedia.org/wiki/Firefox

Website: firefox.com

Paul
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On Sat, 4 Jul 2026 23:15:37 -0000 (UTC), Lawrence DoOliveiro wrote:

On Sat, 4 Jul 2026 22:57:48 +0700, JJ wrote:

On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence DoOliveiro wrote:

On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

Does it matter?

Wherever you get it from, just verify the hash against a list like
this:
<https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>

You're pointing to an official server. Not bogus server.

Precisely.

So, yes. It does matter.

The actual download does not matter, just as long as you get the
verification hashes from a trusted source.

Except that, if from a bogus server, you can get a hash which is generated
from a fake or an already compromised download.

The download is not the only one which can be modified.
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/5/2026 10:54 PM, JJ wrote:

Except that, if from a bogus server, you can get a hash which is generated from a fake or an already compromised download.

The download is not the only one which can be modified.

Hashes just some convolute mathematics, more
complicate than check-digits or checksums.

I always wonder whether a hash for a very large
file could be duplicated or faked. :)
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 2026-07-05 16:57, Mr. Man-wai Chang wrote:

On 7/5/2026 10:54 PM, JJ wrote:

Except that, if from a bogus server, you can get a hash which is
generated
from a fake or an already compromised download.

The download is not the only one which can be modified.

Hashes just some convolute mathematics, more
complicate than check-digits or checksums.

I always wonder whether a hash for a very large
file could be duplicated or faked. :)

No. Ask an AI to summarize it for you.
--
Cheers,
Carlos E.R.
ESEfc-Efc+, EUEfc-Efc|;
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 2026-07-05 16:54, JJ wrote:

On Sat, 4 Jul 2026 23:15:37 -0000 (UTC), Lawrence DrCOOliveiro wrote:

On Sat, 4 Jul 2026 22:57:48 +0700, JJ wrote:

On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence DrCOOliveiro wrote:

On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:

Is there really bogus Mozilla FTP server which is not obvious?

Does it matter?

Wherever you get it from, just verify the hash against a list like
this:
<https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>

You're pointing to an official server. Not bogus server.

Precisely.

So, yes. It does matter.

The actual download does not matter, just as long as you get the
verification hashes from a trusted source.

Except that, if from a bogus server, you can get a hash which is generated from a fake or an already compromised download.

The download is not the only one which can be modified.

Just read the hash from the true site, then download from anywhere and
check the hash. If it matches, the file is good.
--
Cheers,
Carlos E.R.
ESEfc-Efc+, EUEfc-Efc|;
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On Sun, 5 Jul 2026 13:08:05 +0800, "Mr. Man-wai Chang" <toylet.toylet@gmail.com> wrote:

On 7/5/2026 6:01 AM, John Smith wrote:

On 03/07/2026 13:44, aer wrote:

The only official one I'm aware of is:
https://ftp.mozilla.org/pub/

You couldn't be more wrong :)

<https://download-installer.cdn.mozilla.net/pub/firefox/releases/>
<https://download-installer.cdn.mozilla.net/pub/thunderbird/releases/>

Are these official Mozilla FTP mirror sites?

They are Mozilla sites

Alternate names for download-installer.cdn.mozilla.net:

archive.mozilla-backup.org
archive.mozilla.org
download-installer.cdn.mozilla.net
download.cdn.mozilla.net
ftp-ssl.mozilla.org
ftp.eu.mozilla.org
ftp.mozilla.org
ftp.prod.mozilla.org
productdelivery.mozilla-backup.org
releases.mozilla.com
releases.mozilla.org

all use the same cert

Shadow, Shadow, did you see anything strange
in these FTP mirrors or FTP shadows? :)

Shadow... Shadow... do you read me?

On 7/4/2026 10:21 PM, Shadow wrote:

Look in the mirror. Do you see a fairy?
That confirms it's probably magic.

No fairies in my mirror.
Off-topic groups removed.
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012
Google Fuchsia - 2021
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On Sun, 5 Jul 2026 21:54:16 +0700, JJ wrote:

On Sat, 4 Jul 2026 23:15:37 -0000 (UTC), Lawrence DrCOOliveiro wrote:

The actual download does not matter, just as long as you get the
verification hashes from a trusted source.

Except that, if from a bogus server, you can get a hash which is
generated from a fake or an already compromised download.

So, donrCOt get the hash from a mirror server, get it from a trusted
source.

The download is not the only one which can be modified.

It is the big one, that puts a significant load on the server yourCOre
getting it from. Which is why we have mirrors.

A SHA-256 hash, on the other hand, is just a 64-character hex string.
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: alt.comp.software.firefox

On 7/6/2026 3:27 AM, Shadow wrote:

Off-topic groups removed.

The biggest off-topic group is possibly

alt.privacy.anon-server

Eveyrthing can be related to privacy. And
privacy and cellphones are related.

misc.phone.mobile.iphone

Then expensive cellphones are related to
the rich and famous, which attracts
attention span.
--

@~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
/ v \ May the Force and farces be with you! Live long and prosper!!
/( _ )\ https://sites.google.com/site/changmw/
^ ^ https://github.com/changmw/changmw
The game is afoot... Meow...
--- Synchronet 3.22a-Linux NewsLink 1.2