gchristensen changed the topic of #nixos-chat to: NixOS but much less topical || https://logs.nix.samueldr.com/nixos-chat
Synthetica has quit [Quit: Connection closed for inactivity]
fpletz has joined #nixos-chat
<fpletz> wtf, weechat kept segfaulting until I ran it in gdb, now it works without gdb -.-
<fpletz> heisenbug with autofix feature!
<fpletz> I hate software :/
<andi-> unstable weechat?
<andi-> aka v2.7?
drakonis has quit [Read error: Connection reset by peer]
drakonis has joined #nixos-chat
<fpletz> it worked with another config, so it's not broken in general
<fpletz> but it's from 19.09
<joepie91> gchristensen: we're in 2020 now, not 2019 ;)
<andi-> joepie91: fixed that for you :-)
<joepie91> hehe
* joepie91 still has to get used to the new year too
<andi-> it is not as bad as when I was still in school and had to write the date on each page..
fpletz has quit [Remote host closed the connection]
fpletz has joined #nixos-chat
<infinisil> Just got myself a super expensive DO droplet so I can benchmark nixos evaluations without having to not touch my computer
<infinisil> Like $0.5 per hour
<infinisil> Not expensive if i only use it for an hour though :)
nckx has quit [Remote host closed the connection]
nckx has joined #nixos-chat
<infinisil> Well if only nix-instantiate wouldn't crash now..
<infinisil> Ah, "Too many heap sections: Increase MAXHINCR or MAX_HEAP_SECTS"
<infinisil> Not entirely sure what to do about this, there's 64GB RAM..
<infinisil> Trying nix from unstable now..
<gchristensen> you have to set the initial heap size
<infinisil> Seemed to have worked with unstable nix :)
<infinisil> Well, stable nix from unstable channel
<gchristensen> interesting
<infinisil> This is an ubuntu machine and i installed nix through the default install script
<infinisil> Kind of weird this wouldn't work
<infinisil> Also weird: Eval is slower than on my pc! It's probably IO bound, and I got a RAM optimized droplet..
<infinisil> That is, 280s, compared to 200-240s on my pc
<drakonis> can you ramdisk it?
<infinisil> No idea what that is
<infinisil> Oh
<infinisil> Put it on a tmpfs
<drakonis> yes
<drakonis> that's a ramdisk
<drakonis> shove it into your ram
<infinisil> Yeah that might be something, though it might be CPU bound more actually
<infinisil> Won't hurt to try
<drakonis> on the other hand, it might distort your results
<infinisil> I'm benchmarking the old and the new commit after one another
<drakonis> it'll skew towards being faster due to running on ram
<infinisil> Ah
<infinisil> True..
<infinisil> Alright not doing that then :)
<drakonis> all i/o ops are sped up
<infinisil> Yeah, would'nt give a realistic benchmark
<infinisil> I'm using a droplet with a much better CPU now
<infinisil> Btw I'm benchmarking https://github.com/NixOS/nixpkgs/pull/76857
<{^_^}> #76857 (by Infinisil, 3 days ago, open): Apply `disabledModules` recursively
<infinisil> Wat
<infinisil> 373s..
<infinisil> Oh, is that like, CPU time?
<infinisil> Well whatever, as long as I use the same metric for all benchmarks it shouldn't matter
<gchristensen> "36c3"
<pie_[bnc]> oh wait sigh lol its not the real vatican
<pie_[bnc]> atleast it doesnt look like the real vatican
<pie_[bnc]> too bad
drakonis has quit [Quit: WeeChat 2.6]
<qyliss> infinisil: just tried out asciidoctor -> docbook -> texinfo (via pandoc) -> info with the few book sections I've written so far, and it works surprisingly well
<infinisil> Neat
<qyliss> long URLs are just shown, which can be unfortunate, because info doesn't really do web links I guess?
<infinisil> Unnamed long links?
<qyliss> named ones
<infinisil> Oh, so `https://foobar.com[Foobar]` is shown as a link instead of Foobar in info?
<infinisil> (iirc that's supposed to be like [Foobar](https://foobar.com) in markdown)
<qyliss> It shows as Foobar (https://foobar.com)
<qyliss> oh, Info can have named links
<qyliss> I wonder why Pandoc doesn't generate them
<qyliss> or
<qyliss> it does?
<qyliss> I guess this is just how info shows them
<qyliss> That's probably customisable, then. It's GNU after all.
<infinisil> Probably yeah
<infinisil> qyliss: That looks very promising though, nice work!
Diogenes- is now known as Church-
endformationage has quit [Ping timeout: 240 seconds]
drakonis has joined #nixos-chat
drakonis_ has quit [Ping timeout: 268 seconds]
drakonis_ has joined #nixos-chat
drakonis has quit [Ping timeout: 248 seconds]
Jackneill has joined #nixos-chat
globin has joined #nixos-chat
drakonis_ has quit [Ping timeout: 260 seconds]
drakonis_ has joined #nixos-chat
__monty__ has joined #nixos-chat
kenjis has joined #nixos-chat
veske has joined #nixos-chat
veske has quit [Quit: This computer has gone to sleep]
<gchristensen> ar: I'm sure that'll be used in the future as a talking point about how unreasonable he is, despite marking it for discussion
evanjs has quit [Quit: ZNC 1.7.4 - https://znc.in]
evanjs has joined #nixos-chat
jD91mZM2 has quit [Quit: ZNC 1.7.4 - https://znc.in]
jD91mZM2 has joined #nixos-chat
kenjis has quit [Remote host closed the connection]
waleee-cl has joined #nixos-chat
kenjis has joined #nixos-chat
<joepie91> PSA: SHA-1 is now Really Broken
<gchristensen> great
Synthetica has joined #nixos-chat
<gchristensen> "The attack unveiled on Tuesday also costs as little as $45,000 to carry out."
psyanticy has joined #nixos-chat
kenjis has quit [Remote host closed the connection]
kenjis has joined #nixos-chat
<__monty__> Chosen prefix? So not full collisions yet?
<averell> it's actually harder, they have it in their FAQ there
<__monty__> I think you're misunderstanding.
<__monty__> I'm not talking about generating *a* collision. I'm talking about generating a collision with a predetermined hash.
<averell> i still think that is an easier problem. but i'm no expert.
<__monty__> Maybe.
<__monty__> Allow me to rephrase my question. What does "prefix" refer to?
<averell> they can extend any prefix pair P,P' to have identical hashes
<{^_^}> #77238 (by grahamc, 22 seconds ago, open): Get rid of sha1 support for fixed-output derivations
<adisbladis> gchristensen: Many lock files (yarn, pnpm, etc) will use npmjs hashes which are sha-1
<adisbladis> By all means get rid of sha-1 usage from nixpkgs, but don't drop the support.
<gchristensen> we haven't even dropped md5 support
<gchristensen> if npmjs is providing those hashes, we should probably fetch the file, validate sha1, calculate a sha256 and use that
<adisbladis> gchristensen: That only works for tools that do codegen, not for directly using lock files.
<gchristensen> sure
<gchristensen> for those we should lobby upstream to use not broken hashes
<adisbladis> +1
<gchristensen> we're not dropping sha1 support
<gchristensen> I guess the title is misleading, I was copying domen's template for md5 :P
<adisbladis> :)
<averell> wonder how nervous github itself is now
<gchristensen> why, averell?
<averell> i remember there were some issues last time because someone checked in these PDFs with the same signature. I think a lot is based on unique commit hashes.
<__monty__> Ok, so chosen-prefix relates to a prefix of the message to be hashed, not the hash. And the attacker does not get to choose. So yes, it's way harder than a simple collision. (I was thinking bitcoin-esque hash prefix collisions.)
<gchristensen> the sh-ambles page says a classic collision costs $11k now
drakonis has joined #nixos-chat
drakonis_ has quit [Ping timeout: 246 seconds]
endformationage has joined #nixos-chat
evanjs has quit [Quit: ZNC 1.7.4 - https://znc.in]
evanjs has joined #nixos-chat
drakonis_ has joined #nixos-chat
drakonis has quit [Ping timeout: 260 seconds]
<qyliss> Modern Git is immune to the SHAttered attack (the one with the PDFs from 2017), fwiw.
<qyliss> those hash to different values in modern Git
<qyliss> I'm very curious about Git's "hardened" SHA1 that does this. I'd like to know more about it.
<__monty__> Sounds like not SHA1 : )
<joepie91> adisbladis: didn't npm/yarn/etc. switch to sha-512 a while ago
<gchristensen> qyliss: I believe it just does counter-cryptanalysis to determine that a document is specifically crafted to collide
<qyliss> __monty__: it's SHA1 for all other known inputs
<gchristensen> qyliss: I don't think it has actually changed the outcome of the hash, just thatit will consider the crafted version invalid
<qyliss> The thing I read in the Git documentation said it had
<qyliss> Let me find it.
<__monty__> gchristensen: How can it tell which is the crafted version?
<gchristensen> check https://shattered.io/
<gchristensen> ahh qyliss "In that case it adjusts the SHA-1 computation to result in a safe hash."
<qyliss> aha
<gchristensen> sounds shady though :P what if you have a valid document which comes to that same hash? :)
<__monty__> Looks like it pattern-matches on the specific attack. If they then shift the hash with a deterministic salt that turns collision back into the regular probability, doesn't it?
<adisbladis> joepie91: Possible :)
kenjis has quit [Ping timeout: 248 seconds]
kenjis has joined #nixos-chat
drakonis has joined #nixos-chat
drakonis1 has joined #nixos-chat
drakonis_ has quit [Ping timeout: 260 seconds]
drakonis2 has joined #nixos-chat
drakonis has quit [Ping timeout: 245 seconds]
drakonis2 is now known as drakonis
Jackneill has quit [Remote host closed the connection]
gspia has joined #nixos-chat
gspia has quit [Remote host closed the connection]
drakonis_ has joined #nixos-chat
drakonis2 has joined #nixos-chat
drakonis1 has quit [Ping timeout: 240 seconds]
drakonis_ has quit [Ping timeout: 248 seconds]
psyanticy has quit [Quit: Connection closed for inactivity]
drakonis_ has joined #nixos-chat
drakonis2 has quit [Ping timeout: 260 seconds]
drakonis1 has joined #nixos-chat
drakonis_ has quit [Ping timeout: 246 seconds]
kenjis has quit [Ping timeout: 245 seconds]
kenjis has joined #nixos-chat
drakonis_ has joined #nixos-chat
drakonis1 has quit [Ping timeout: 265 seconds]
kenjis has quit [Remote host closed the connection]
kenjis has joined #nixos-chat
Synthetica has quit [Quit: Connection closed for inactivity]
yorick has quit [Ping timeout: 246 seconds]
kenjis has quit [Remote host closed the connection]
kenjis has joined #nixos-chat
yorick has joined #nixos-chat
drakonis1 has joined #nixos-chat
drakonis1 has quit [Client Quit]
drakonis_ has quit [Ping timeout: 248 seconds]
infinisil has quit [Remote host closed the connection]
infinisil has joined #nixos-chat
yl has joined #nixos-chat
__monty__ has quit [Quit: leaving]
waleee-cl has quit [Quit: Connection closed for inactivity]
infinisil has quit [Quit: Configuring ZNC, sorry for the joins/quits!]
infinisil has joined #nixos-chat
ivan has quit [Quit: lp0 on fire]
drakonis has quit [Quit: WeeChat 2.6]
kenjis has quit [Remote host closed the connection]
kenjis has joined #nixos-chat
ivan has joined #nixos-chat
drakonis has joined #nixos-chat
bgamari has joined #nixos-chat
jared-w has joined #nixos-chat
vaibhavsagar has joined #nixos-chat
<bgamari> jared-w, at which location are you located?
<vaibhavsagar> congratulations jared-w!
<jared-w> bgmari: I'm at the main Portland office.
<jared-w> vaibhavsagar: thanks!
<vaibhavsagar> if you see Annie Cherkaev tell her I say hi :)
<bgamari> ahh, portland must be great
wildtrees has joined #nixos-chat
<jared-w> Portland is fantastic :) you'd definitely enjoy the scenery and hiking, bgamari; it's nice to be close to things despite the rarity in which I actually visit it lol
<bgamari> heh, I know how that goes
<Church-> I can hike in a concrete jungle
<Church-> Way better
<Church-> :V
Jackneill has joined #nixos-chat
<jared-w> Church-: the scenery is a bit grey though :p
<jared-w> vaibhavsagar: I will!
kenjis has quit [Remote host closed the connection]
<Church-> Heh
<Church-> jared-w: Better food though
<Church-> Man, I want a chili dog now.
kenjis has joined #nixos-chat
<jared-w> chili dogs are nice. What I really want is to rediscover my lost weechat configuration
kenjis has quit [Remote host closed the connection]
kenjis has joined #nixos-chat
yl has quit [Ping timeout: 268 seconds]
Jackneill has quit [Remote host closed the connection]
kenjis has quit [Remote host closed the connection]
kenjis has joined #nixos-chat
yl has joined #nixos-chat
kenjis has quit [Remote host closed the connection]
kenjis has joined #nixos-chat
<Church-> Heheheh