!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

368 Members
Discussions around Security | Triaging happens in #security:nixos.org125 Servers

Load older messages


SenderMessageTime
7 Jul 2022
@dandellion:dodsorf.asDandellionand used to be the only way16:21:14
@dandellion:dodsorf.asDandellionI don't think it is a thing for the cross signing master key thing16:21:35
@dandellion:dodsorf.asDandellionyou can see it if you click on a device and then go manually verify by text16:22:29
8 Jul 2022
@eyjhb:eyjhb.dkeyJhb joined the room.07:48:50
@stigo:matrix.orgstigoif only it was possible to use signal without a mobile number..08:21:18
@sandro:supersandro.deSandro 🐧if it only was possible to get a mobile number without your id card...08:46:01
@hexa:lossy.networkhexasome european country (Malta?) still allows anonymous sim cards 08:53:01
@qyliss:fairydust.spaceAlyssa RossFinland too I heard the other day08:59:08
@eyjhb:eyjhb.dkeyJhbI think I have enough for my lifetime, have 400+ sim cards just sitting around.09:26:46
@qyliss:fairydust.spaceAlyssa Rossdon't they expire?10:40:10
@winterqt:nixos.devWinter (she/her) joined the room.15:43:15
@winterqt:nixos.devWinter (she/her) Wanja Hentze: I looked at previous EDK2 security releases and we've backported them, so I think coupled with not seeing any breaking changes in the backlog, we should be fine. 15:45:59
@whentze:matrix.orgWanja HentzeThat's great!15:47:07
@whentze:matrix.orgWanja HentzeThis all still feels a bit sisyphean though if we don't also add auto-updates for these packages somehow15:52:41
@k900:0upti.meK900 That's what updateScript is for 15:52:58
@k900:0upti.meK900It's not fully automated, but a bot will run it, submit a PR and ping the maintainer automatically15:53:11
@winterqt:nixos.devWinter (she/her)Don't we have a template for GitHub ones or something like that15:53:18
@whentze:matrix.orgWanja HentzeI've seen that before but I'm clueless how to write one15:53:20
@k900:0upti.meK900 If it works with nix-update, you can just passthru.updateScript = nix-update-script { attrName = "your-package" } or something like that 15:53:48
@winterqt:nixos.devWinter (she/her)could've sworn r-ryantm does gh without a script15:53:49
@whentze:matrix.orgWanja Hentzehow does it know what kinda tags to look for?15:54:15
@winterqt:nixos.devWinter (she/her)
In reply to @winterqt:nixos.dev
could've sworn r-ryantm does gh without a script
since i've gotten PRs without adding an update script manually
15:54:16
@whentze:matrix.orgWanja Hentzeor does it use the releases API?15:54:20
@k900:0upti.meK900Also you should probably not mention the name unless you want to tag Ryan :P15:54:30
@ryantm:matrix.orgryantmWhich package are we looking at?15:54:31
@whentze:matrix.orgWanja Hentze edk2 right now 15:54:39
@winterqt:nixos.devWinter (she/her)
In reply to @k900:0upti.me
Also you should probably not mention the name unless you want to tag Ryan :P
i realize that now, sorry Ryan
15:54:57
@ryantm:matrix.orgryantmhttps://r.ryantm.com/log/edk2/2022-07-07.log15:55:13
@ryantm:matrix.orgryantmI think it sees the hash from the patches part and gives up because of multiple hashes.15:56:21
@whentze:matrix.orgWanja Hentze 2022-07-07T11:41:44 [version] generic version rewriter does not support multiple hashes 15:56:25

Show newer messages


Back to Room ListRoom Version: 9