IRC: #boycottnovell @ FreeNode: Wednesday, March 10, 2021

Techrights-sec

was not generated. Which script is supposed to do that?

Techrights-sec

I think it is /home/glr/update-index.sh

schestowitz

I am going to rerun that. I changed the workflow a bit due to the disconnection the night before, as it necessitated a merge of logs

https://bash.cyberciti.biz/guide/Here_documents

*asusbox (~rianne@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell

Mar 10 06:55

*asusbox2 has quit (Ping timeout: 246 seconds)

Mar 10 06:55

schestowitz

I have just rerun that script. The problem was, I think, partly due to the reboot. I'll need to study how to overcome some edge cases. Is that file there now and seems OK? It looks OK to me...

Mar 10 07:06

schestowitz

Oh, I think I see a but

Mar 10 07:23

schestowitz

Oh, I think I see a bug

Mar 10 07:23

schestowitz

bug fixes, details in irc logs, the file has been regenerated, this time correctly, I hope

Mar 10 07:55

schestowitz

I did not understand sed correctly

Mar 10 07:55

Techrights-sec

It would help to adjust the layout within the script, too

Mar 10 07:56

schestowitz

yes, remember it all started with a little hack for one person and I am always chasing articles, mail etc.

Mar 10 07:56

schestowitz

Bug fixed: "QmPeb68hZajfzsH3Q4qUXJUvdnZfzKS5txtgiqZbpHRBJd irc-log-techrights-090321 TEXT (daily bulletin/IRC log as plain text)" (notice "txt" inside the CID

Mar 10 08:05

Techrights-sec

https://tldp.org/LDP/abs/html/here-docs.html

Techrights-sec

-TechrightsBN/#boycottnovell-bash.cyberciti.biz | Here documents - Linux Shell Scripting Tutorial - A Beginner's handbook

-TechrightsBN/#boycottnovell-tldp.org | Here Documents

Techrights-sec

I'm still unfamiliar with IPFS

Mar 10 08:07

schestowitz

it is actually quite rudimentary and simple, not many option. ipns is more intimidating.

Mar 10 08:07

schestowitz

I will modify the irc blog posts to include the corrected ipfs section

Mar 10 08:09

Techrights-sec

THanks

Mar 10 08:10

schestowitz

https://ipfs.io/ipfs/QmPeb68hZajfzsH3Q4qUXJUvdnZfzKS5txtgiqZbpHRBJd - "txt" inside this CID, which is now listed correctly in all the lists

Mar 10 08:12

*rianne__ (~rianne@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell

Mar 10 08:56

*rianne_ has quit (Read error: Connection reset by peer)

Mar 10 08:56

*liberty_box has quit (Ping timeout: 264 seconds)

Mar 10 08:56

*liberty_box (~liberty@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell

Mar 10 08:57

schestowitz

<li>

schestowitz

<h5><a href="https://www.haiku-os.org/blog/pulkomandy/2021-03-08-haiku_activity_report_february_2021/">Haiku activity report - February 2021</a></h5>

-TechrightsBN/#boycottnovell- ( status 404 @ https://www.haiku-os.org/blog/pulkomandy/2021-03-08-haiku_activity_report_february_2021/">Haiku )

schestowitz

schestowitz

<p>This report covers revisions hrev54947-hrev54978 (that was a quiet month in Haiku)</p></blockquote></li>

schestowitz

<li>

schestowitz

<h5><a href="https://sylvestre.ledru.info/blog/2021/03/09/debian-running-on-rust-coreutils">Debian running on Rust coreutils</a></h5>

schestowitz

-TechrightsBN/#boycottnovell- ( status 404 @ https://sylvestre.ledru.info/blog/2021/03/09/debian-running-on-rust-coreutils">Debian )

schestowitz

<p>I started contributing to the alternative Coreutils developed in Rust. The project aims at proposing a drop-in replacement of the C-based GNU Coreutils, and I wanted to evaluate if this could be used to run a regular Debian. Similar to what I have done with clang.debian.net a few years ago (rebuilding the Debian archive using clang instead of gcc). </p>

schestowitz

<p> I expect that most of the readers know what is the Coreutils. It is a set of programs performing simple operations (copy/move file, change permissions/ownership, etc). Even if some commands are from the 70s, they are at the base of Linux, Unix and macOS. While different implementations can be found, they are trying to remain compatible in terms of arguments, options, etc. This implementation of Coreutils

schestowitz

isn’t different!</p></blockquote></li>

schestowitz

<li>

schestowitz

<h5><a href="https://daniel.haxx.se/blog/2021/03/09/half-of-curls-vulnerabilities-are-c-mistakes/">Half of Curl’s Vulnerabilities Are C Mistakes</a></h5>

schestowitz

-TechrightsBN/#boycottnovell-daniel.haxx.se | half of curl’s vulnerabilities are C mistakes | daniel.haxx.se

schestowitz

<p>Possibly due to the slightly different question, possibly because I’ve categorized one or two vulnerabilities differently, possibly because I’m biased as heck, but my count end up at: </p>

schestowitz

<p> 51 out of 98 security vulnerabilities are due to C mistakes </p>

schestowitz

<p> That’s still 52%. (you can inspect my analysis and submit issues/pull-requests against the vuln.pm file) and yes, 51 flaws that could’ve been avoided if curl had been written in a memory safe language. This contradicts what I’ve said in the past, but I will also show you below that the numbers have changed and I still was right back then! </p></blockquote></li>

*acer-box__ has quit (Remote host closed the connection)

Mar 10 21:36

*acer-box (~acer-box@2a00:23c4:c3aa:7d01:9ed2:1eff:feb6:a8e1) has joined #boycottnovell

*acer-box has quit (Changing host)

*acer-box (~acer-box@unaffiliated/schestowitz) has joined #boycottnovell

*ChanServ gives channel operator status to acer-box