log☇︎
3518 entries in 0.498s
mircea_popescu: in fact, anyone with the werewithal to boycott as much as a donut stand can just as well patch out whatever.
bounce: it's a curious discussion. he gets to patch the gentoo bitcoind because he's a core dev? why isn't that patch in mainline then?
asciilifeform: incidentally, the postel crap reminds me of the fountain through which the bulk of modern pc retardation flows forth: the web browser. as in, literally the only reason one cannot use os setup circa, e.g., 2001 (with a patch here & there)
asciilifeform: actually atm not 100% sure if it's eudev, or patch to config of original (satanic) variant
mircea_popescu: dub how are you going to patch the fact that the microcontroler is a... microcontroler ?
dub: maybe s.nsa could release a patch
Luke-Jr: all a git repo is, is a patch set
Diablo-D3: you have to apply the patch
gribble: CVE-2014-7169: Bash Fix Incomplete, Still Exploitable | Hacker News: <https://news.ycombinator.com/item?id=8365158>; What is the CVE-2014-6271 bash vulnerability, and how do I fix it?: <http://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-and-how-do-i-fix-it>; (CVE-2014-6271) bug introduced, and what is the patch that fully: (1 more message)
mircea_popescu: ;;google debian 7169 patch
Naphex: mircea_popescu: gentoo has good patch out
mircea_popescu: Naphex wasn't the patch bad ?
Naphex: just patch it, and killall -TERM sh/ bash and you're set
nubbins`: so apparently they found a backdoor in the shellshock patch on github, hey?
assbot: Amazon forced to reboot EC2 to patch Xen bug - Storage - News - iTnews.com.au
asciilifeform: mircea_popescu: http://www.itnews.com.au/News/396180,amazon-forced-to-reboot-ec2-to-patch-xen-bug.aspx << possibly relevant to your latest item
BingoBoingo: asciilifeform: what would it take << beautiful question. let's say we find that chetty has, e.g., more efficient mitochondriae, that eat and shit less for given level of activity. and therefore require less cleanup. then we say 'can't fix this with aftermarket patch.' << I dunno mitochondral replacement might be an interesting experiment
asciilifeform: what would it take << beautiful question. let's say we find that chetty has, e.g., more efficient mitochondriae, that eat and shit less for given level of activity. and therefore require less cleanup. then we say 'can't fix this with aftermarket patch.'
xmj: then sends a PR (problem report) to bugzilla with a patch attached, and someone like me comes, takes that patch, commits it to ports and all are happy
fluffypony: xmj: I want compatability with fbsd from now and in a way that doesn't require a ports maintainer to patch stuff
justusranvier: I want Gentoo to ditch source tarballs entirely in favor of Git. It should be easy for a user to patch the source code of any package they run and have Portage handle merging changes from upstream
asciilifeform: decimation: of the patch
asciilifeform: decimation: 'kindle dx' with russian os patch will read djvu, but only really makes sense for very good, high-contrast b&w scans.
asciilifeform: (although the latest unofficial russian patch for 'kindle dx' mostly works, if a bit laggy)
dignork: nubbins`: last time I tried, i had to root the phone and patch the xcode to avoid dev license
mircea_popescu: and everything takes > 10 minutes to patch
mircea_popescu: turns out... everything downloads in a patch-needed state
mircea_popescu: cr_zoidberg so you fixed a bug in cryptonote, why not just submit a patch to them ? and if they fix it too, that point goes away ?
DreadKnight: Namworld, things would be better, more devs and patches, more testing; on windows you can't really patch, just complain
mircea_popescu: "I actually have been thrilled to see that finally there is movement to replace the straight access to /dev/random and /dev/urandom: Ted's patch to implement a getrandom() system call that can be made compatible with OpenBSD's own getentropy() in user space. And even more I'm happy to see that at least one of the OpenBSD/LibreSSL developers pitching in to help shape the interface.
assbot: linux-kernel - [PATCH, RFC] random: introduce getrandom(2) system call
asciilifeform: gotta love the 'bodge wire' (patch.) ~25 min. in film.
asciilifeform: mircea_popescu: nobody << not exactly. i have a proof-of-concept patch for the winblows client that does this.
pankkake: hm apparently OP_RETURN is by default not relayed. but if it ever is, I might patch my node :)
pankkake: the patch isn't harmful in the sense at it's just an user interface option. it always was possible, and pools are offering it already
assbot: Bitcoin miner TX-selection: "prioritisation as a business model encourages centralisation and is incompatible with p2pool. Very harmful patch" : Bitcoin
mircea_popescu: vendor to fix it but they said 6 to 8 weeks for a patch, and our project deadline is sooner than that. I need to interface with the legacy system because even though the DBAs have ported things over to Oracle, they're still sorting things out and it's not reliable enough for me to make any meaningful progress. Fortunately, I've thought this through and abstracted the data subsystem well enough that I can drop-in repla
unbalanced: Only using Seahorse because of user-friendliness for now. Though I might figure out git next and submit a patch to their pop-up message.
mircea_popescu: anyway, to try and patch things up with benkay
asciilifeform: patch is a joke
pankkake: no, you'd have to patch atc for that
Naphex: might just wait for a patch before trying it, very annoying
asciilifeform: mircea_popescu: wtf, how do you 'patch secret bug' in open source product ?!
asciilifeform: tesla's hammer is often said to be 'debunked' because, placed in an arbitrary patch of ground, it is unlikely to do much.
mod6: says that you could just: scrub in all fragment reassemble, but seems better to just patch and be done.
benkay: mind you, JorgePasada, i'm talking about a real community of humans who get together and derp on a patch of dirt for potatoes or tomatoes during the day and sing and drink at night
mircea_popescu: briar patch gazette
bounce: didn't ssl have a patch a while back that went snprintf(d,dlen,s) -> snprintf(d,dlen,"%s",s) ? something like that at any rate
KRS-1: mircea_popescu did you patch your ssl
kakobrekla: anyway i got a patch ready
bounce: hm. openssl and their own funky freelist thingy. doesn't work without it, which would've had a good chance exposing heartbleed. mitigation is a simple patch. been reported... four years back, nothing happened. (last paragraph) http://www.tedunangst.com/flak/post/analysis-of-openssl-freelist-reuse
pankkake: and if you want to experiment, you can patch gpg to generate keys >4K
punkman1: "This patch is setting OPENSSL_NO_HEARTBEAT, but openssl actually only disables heartbeats when you set OPENSSL_NO_HEARTBEATS (note trailing S)."
minersdidit: a bunch of tard developers to "patch" shit
bounce: that code looks familiar when comparing the attached patch to http://lists.freebsd.org/pipermail/freebsd-security/2014-April/007405.html
jurov: i don't connect it to switch, but with patch cable directly to notebook
asciilifeform: not to mention other interesting nuances (see herr orlov's blog, not me, for detail) - e.g. dry-docking regularly to patch/repaint the damn thing
bounce: git patch output over email to the mentor
mircea_popescu: hopefully they find someone in new york whose brain works and they patch it up.
tg2: i'll accept that patch if you want :D
Apocalyptic: but then kinda dubious why would some potential investors want to patch that hole
mircea_popescu: then two years later wynn hotels hit a slow patch, get sold for scrap
mircea_popescu: except i'm a fucking briar patch.
asciilifeform: mircea_popescu: in case this isn't obvious, it is trivial to patch a chump's ms-outlook to color a mal-signed message the requisite colour.
BingoBoingo: From stories it seems most of the enlisted drug tests now happen as an absorbent patch that collects sweat.
asciilifeform: (all the fat 'flying bus' machines are fly-by-wire, it's a mere firmware patch)
mircea_popescu: alternatively, "in briar patch, foot hurt ; in forest, head hurt" said the mongoloid.
BingoBoingo: http://arstechnica.com/security/2014/02/four-days-in-and-still-no-patch-for-os-x-critical-goto-fail-bug/
Luke-Jr: >_< that SubsidyAlgo patch broke it
Duffer1: that assumes a patch hasn't already been made
greenspan_fan: in the interim between breach, patch being devised and patch being promulgated, you'd have zero activity
greenspan_fan: I think you're underestimating how hard it would be to patch
mircea_popescu: "hi guise, here is problem, here is patch, pls install so and so"
herbijudlestoids: ThickAsThieves, Bunnyh just got email from Luke-Jr, patch seems good, hope it helps
herbijudlestoids: ok, well Luke-Jr i pantspledge to you that i will look unto the lambda business and try to make a useful patch, so that you dont feel like all of us people in the community are cunts who never contrib (altho iv never used eloipool)
herbijudlestoids: Luke-Jr: ill make you a deal, if you think my patch is correct for all cases where its int, then i will spend some time on the weekend and try to understand the lambda business
herbijudlestoids: Luke-Jr: let me finish this patch im attempting, if it sucks you can tell me what i did wrong :D
Luke-Jr: herbijudlestoids: a patch would be handy
herbijudlestoids: Luke-Jr: can we help with a patch? or its just a discrepancy for altcoins?
herbijudlestoids: Luke-Jr: give us a clue and we might be keen to contribute a patch? ;)
asciilifeform: (perhaps he'll patch the damn thing with his own hands. but others, less able, will not. and will go where the phoundation pushes them.)
pankkake: yes. clients like Armory, the Coin Control patch for bitcoin-qt…
jurov: i have multi-vag ..er.. multi-wallet patch for bitcoind pending
nubbins`: alts are like cabbage patch kids
herbijudlestoids: if it exploits only windows why did adobe release emergency patch for all OS, even including the unsupported linux version
herbijudlestoids: http://www.coindesk.com/namecoin-flaw-patch-needed/
ThickAsThieves: "OK guys, everyone processed these stellar news? Let's be optimistic that the driest patch is over, esp. communications-wise. Keep in mind though, the dividends won't rise until April and there still may be weeks of silence where friedcat fixes the last problems"
asciilifeform: pulse discharge welder won't patch your boat
BingoBoingo: The problem with any filler material for teeth is that the deal life span for such a patch is 90+ years.
Vexual: some a-hole put a box of empty bottle right in my gravity patch
pankkake: well, that json feeds would be nice. write a spec and patch software!
mikaeldice: Dual purpose: If nobody hacks it, this adds evidence of 'sufficiency' with the security, and if someone does hack it then I can patch the holes and reinit the prize until no more holes are found
Diablo-D3: and its a half way decent patch cord too
nubbins`: tying off with a patch cord
mircea_popescu: "o here's a cool patch of clean grass, let's vomit on it"
asciilifeform: as if joker can't patch gdb
jurov: (i deployed a patch yest that you can't register without doing that)
nubbins`: anyway, 5.5 hours later, all that's left is to patch up some drywall tomorrow
mod6: maybe gnupg needs a patch where this is translated to C and DSA/ElGamal are removed
mircea_popescu: so eve is pushing a 800mb patch what in the loving hell.