collinfunk

7 ms·

31.
by collinfunk 6mo ago
Well the TOCTOU issues do not require you to run untrusted scripts to be exploited. Another user on your system can use a legitimate command that you may run to make changes to files they shouldn’t be able to, or further escalate privileges
32.
by collinfunk 6mo ago
I am one of them. The title of the substack seems fine since it mentions "if you use iTerm2". The tweet has no mention of iTerm2 which makes it sound like an issue in 'cat', which is mildly annoying [1]. [1] https:&#x2F
33.
by collinfunk 7mo ago
fileutils-1.0 was released in 1990 [1]. shellutils-1.0 was released in 1991 [2], and textutils-1.0 was released a month later in the same year [3]. Those three packages were combined into coreutils-5.0 in 2003 [4]. [1] https://gr
34.
by collinfunk 7mo ago
The bar for adding new options, especially short options, is quite high for coreutils. We have a (likely outdated) page of rejected requests [1]. Some of the changes people have strong feelings about... [1] https://www.gnu.org&#x
35.
by collinfunk 9mo ago
I don't think this addresses the main point of my question, though. Do you know any prominent Democrats, e.g., representatives, senators, or presidents, who have called for a Republican to be killed?
36.
by collinfunk 9mo ago
Even if one grants that it is a small minority, aren't they still voting for someone who advocates for jailing and killing political opponents?
37.
by collinfunk 9mo ago
Trump appointed him. Do you put not blame on him for choosing "uniparty birds" and "shades of grifters"? Or do you live in his colon.
38.
by collinfunk 9mo ago
It seems like they learned a lot from the Letitia James and James Comey cases, which are going great (not in the way they intended).
39.
by collinfunk 9mo ago
Haven't read it since it is down, but based on other comments, it seems to be an issue with cleartext signatures. I haven't seen those outside of old mailing list archives. Everyone uses detached signatures nowadays, e.g. PGP&#x2F
40.
by collinfunk 10mo ago
MacOS's utilities are really just FreeBSD's with some patches. https://github.com/apple-oss-distributions/text_cmds https://github.com/apple-oss-distributions/system_cmds https:/&#
41.
by collinfunk 10mo ago
FreeBSD 6.0 added 'env -S'. They have adopted a few different GNU inspired options recently, which I am happy about.
42.
by collinfunk 11mo ago
Yes, linking LLVM takes up a lot of memory. The documented guidance is to allow one link job per 15 GB of RAM [1]. [1] https://llvm.org/docs/CMake.html#frequently-used-llvm-relate...
43.
by collinfunk 11mo ago
A lot of the complexity is to handle localized date formats on systems that support them. Most other implementations of 'date' do not do this. The easiest way to see this is in US locales, which use 12-hour clocks in GNU 'dat
44.
by collinfunk 11mo ago
2 GNU coreutils maintainers, including myself, monitor the issues and PRs on a GitHub mirror that we have [1]. Generally the mailing list is preferred though, since more people follow it. [1] https://github.com/coreutils&#x2
45.
by collinfunk 1y ago
Yep. I was slightly incorrect in my original message, though. SUSv2 (1997) specified egrep and fgrep but marked them LEGACY. POSIX.1-2001 removed them. The only place that that doesn't support 'grep -E' and 'grep -F&#x27
46.
by collinfunk 1y ago
Minor correction, but that bug was never in any "official" coreutils release. The bug was in a multi-byte character patch that many distributions use (and still use). There have been other CVEs in that patch [1]. But the worst you
47.
by collinfunk 1y ago
> See also the recent insanity of GNU grep suddenly tossing an error when invoked as "fgrep". You just don't do that folks. The 'fgrep' and 'egrep' didn't throw errors, it would just send a warning
48.
by collinfunk 1y ago
> While half of the language design of C is questionable and outright dangerous, making its functions locale-sensitive by all popular OSes was an avoidable mistake. Yet everybody did that. Just the existence of this behavior is a reason
49.
by collinfunk 1y ago
Note that uutils does not work if the file does not fit into memory. With GNU coreutils: $ base64 /dev/zero | head -c 1 | wc -c 1 With uutils doing the same would exhaust your systems memory until either it freezes or o
50.
by collinfunk 1y ago
Ah, I should have guessed from the program name. :) I thought I remember Go having pretty optimized assembly for crypto routines. But I have not used the language much. If you have your source code uploaded somewhere I'd be interested
51.
by collinfunk 1y ago
Interesting, there must be something wrong here. Here is a benchmark using the same commit and default options other than adjusting '--with-openssl=[yes|no]': $ dd if=/dev/random of=input bs=1000 count=$(($(echo 10G
52.
by collinfunk 1y ago
Yep, from a Void Linux container it appears that they do not link to libcrypto: $ ldd /usr/bin/cksum linux-vdso.so.1 (0x00007fb354763000) libc.so.6 => /usr/lib64/libc.so.6 (0x00007fb354549000) &
53.
by collinfunk 1y ago
What distribution do you use? GNU Coreutils uses the OpenSSL implementation of hashes by default, but some distributions have disabled it using './configure --with-openssl=no'. Debian used to do this, but now links to OpenSSL
54.
by collinfunk 1y ago
You would not be able to find the first commit. The repositories for Fileutils, Shellutils, and Texutils do not exist, at least anywhere that I can find. They were merged as Coreutils in 2003 in a CVS repository. A few years later, it was m
55.
by collinfunk 1y ago
You can also hide it in the sidebar. I did that and forgot it existed for the most part.
56.
by collinfunk 1y ago
He also sued The Des Moines Register because they released a poll that he did not like [1]. It is sad that people defend this. [1] https://www.nytimes.com/2024/12/17/us/politics/trump-sues-de...
57.
by collinfunk 1y ago
FWIW, I am in my 20s and receive many phone calls. But maybe your theory is correct and I am an outlier.
58.
by collinfunk 1y ago
The guy who went through with the fake electors scheme does bad things, who could have guess it?
59.
by collinfunk 1y ago
And now updated for this change. https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=69a0...
60.
by collinfunk 1y ago
Yes, that part of Gnulib has caused some problems previously. It is mostly used to implement <stdio_ext.h> functions on non-glibc systems. However, it is also needed for some buggy implementations of ftello, fseeko, and fflush. P.S. H

More ›