pie__ has joined #nixos-security
pie___ has quit [Ping timeout: 240 seconds]
biopandemic has quit [Quit: Quit.]
pie___ has joined #nixos-security
pie__ has quit [Ping timeout: 260 seconds]
LnL has quit [Ping timeout: 256 seconds]
LnL has joined #nixos-security
pie___ has quit [Ping timeout: 264 seconds]
pie_ has joined #nixos-security
pie_ has quit [Ping timeout: 265 seconds]
pie_ has joined #nixos-security
<gchristensen> jesus
<gchristensen> libxml2 contains an ftp client
<samueldr> oh no
<gchristensen> I don't say that here because I know of a specific vuln
<gchristensen> just that there is probably _A_ vuln :P
<samueldr> "A" is generous
<gchristensen> :D
<gchristensen> so
<gchristensen> "[my] absolute favourite [bug] was a CSS change that took down Etsy's site so hard that someone had to go into the datacentre and manually reboot servers."
<samueldr> https://twitter.com/indec/status/1006673067538558977 from the context, smells like server-side-includes
<gchristensen> how did you find that so fast??
<samueldr> I have powers
<samueldr> googled the bits that were verbatim quoted, first result was relevant
<gchristensen> :)
<gchristensen> https://twitter.com/yoz/status/1006636464350695424 this whole thing is a good thread
<gchristensen> the real wtf here imo is they didn't have remote power management or ipmi??
<samueldr> artisanal servers
pie_ has quit [Read error: Connection reset by peer]
pie__ has joined #nixos-security
<LnL> I basically broke our ci service today because of a 1 character typo
<gchristensen> :o
<pie__> oops
<LnL> variable scoping in python is bananas
<gchristensen> haha
<pie__> were you working on the code of the CI stuff though
<pie__> ive never used ci yet but it sounds bad if running something in ci breaks the ci itself
<LnL> no I work on the service itself
<gchristensen> I don't know why but I love working on CI tools
<samueldr> gchristensen: worked with gitlab-ci?
<gchristensen> never have!
<pie__> you can you love ci tools if you cant even eat her poop?
<pie__> ...errrr
<pie__> *if you havent ever worked with gitlab-ci!
<gchristensen> LnL: can you read a thing for me in a few minutes?
<LnL> euh, sure
<andi-> m( @ libxml... probably some stupid (ancient) DTD loading thingy? -.-
contrapumpkin has quit [Ping timeout: 240 seconds]
copumpkin has joined #nixos-security