jwilk

25 ms·

181.
by jwilk 2y ago
Today's histogram of commit abbreviation lengths: $ git rev-list --all --abbrev=0 --abbrev-commit | awk '{ a[length] += 1 } END { for (len in a) print len, a[len] }' 5 84 6 692222 7 527029 8 43802 9 2791 10 18
182.
by jwilk 2y ago
2010: https://news.ycombinator.com/item?id=1272975 (28 comments)
183.
by jwilk 2y ago
It's certainly a useless use of /dev/stdin.
184.
by jwilk 2y ago
Relevant XKCD: https://xkcd.com/605/
185.
Gentoo bans AI-created contributions(lwn.net)
51 points by jwilk 2y ago|40 comments
186.
by jwilk 3y ago
https://news.ycombinator.com/item?id=40044665 (over 200 comments)
187.
Make your own backdoor: CFLAGS code injection, Makefile injection, pkg-config(openwall.com)
6 points by jwilk 3y ago|0 comments
188.
by jwilk 3y ago
https://www.chiark.greenend.org.uk/~sgtatham/putty/faq.html#... > What does ‘PuTTY’ mean? > It's the name of a popular SSH and Telnet client. Any other meaning is in the eye of the beholder. It'
189.
by jwilk 3y ago
Sure, it happens by chance, but the attacker doesn't know when it happens.
190.
by jwilk 3y ago
1984-01-21 is "sixth anniversary of introduction to Liz". Doesn't sound like sister.
191.
by jwilk 3y ago
They are doing dlopen() wrong. Instead of dlopen()ing libfoo.so.7, you should build a private wrapper library, normally linked with -lfoo, and then dlopen() that private wrapper. Then you get dependency tracking for free.
192.
by jwilk 3y ago
Where is this discussion happening?
193.
by jwilk 3y ago
It was a joke.
194.
by jwilk 3y ago
> username has to be part of SSH URLs No? Usernames are optional in SSH URLs.
195.
by jwilk 3y ago
The SSH username is always "git".
196.
by jwilk 3y ago
The command would still need to print millions of SSH keys on stdout, so this doesn't really help.
197.
by jwilk 3y ago
This is incorrect. OpenSSL seeded its RNG also with data read from /dev/urandom.
198.
by jwilk 3y ago
No, it wasn't fine. From the advisory ( https://news.ycombinator.com/item?id=39865810 ): > With the backdoored liblzma installed, logins via ssh become a lot slower.
199.
by jwilk 3y ago
I don't think joeyh wanted to imply that PNG uses liblzma. PNG is just a convenient place to put opaque binary stuff that'd trigger an xz compression bug.
200.
by jwilk 3y ago
Yikes. I've poked HN staff to get it fixed.
201.
Free software's not-so-eXZellent adventure(lwn.net)
7 points by jwilk 3y ago|3 comments
202.
by jwilk 3y ago
The initial advisory ( https://news.ycombinator.com/item?id=39865810 ) said it was: test "x$RPM_ARCH" = "xx86_64"
203.
by jwilk 3y ago
https://news.ycombinator.com/item?id=39877604
204.
by jwilk 3y ago
No. OpenSSH doesn't use Landlock, and even if it did, this patch wouldn't affect it.
205.
by jwilk 3y ago
AC_COMPILE_IFELSE indeed only compiles, so there's no need for main(). There's AC_LINK_IFELSE if you want to test linking too.
206.
by jwilk 3y ago
That's not autotools.
207.
by jwilk 3y ago
Or if you can't stand the lkml.org UI: https://lore.kernel.org/lkml/20240330144848.102a1e8c@kaneli/
208.
by jwilk 3y ago
> do you see anything suspicious No. > libunistring could also be affected as that has also been pushed there What do you mean by "that"?
209.
by jwilk 3y ago
https://news.ycombinator.com/item?id=39865810 (over 1300 comments)
210.
by jwilk 3y ago
https://news.ycombinator.com/item?id=39865810 (over 1300 comments)

More ›