!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

369 Members
Discussions around Security | Triaging happens in #security:nixos.org125 Servers

Load older messages


SenderMessageTime
1 Sep 2022
@sandro:supersandro.deSandro 🐧 * I don't have the time to do a ~~shity~~ seemingly never ending bikeshedding RFC13:55:10
@sandro:supersandro.deSandro 🐧 * I don't have the time to do a ~shity~ seemingly never ending bikeshedding RFC13:55:16
@sandro:supersandro.deSandro 🐧 * I don't have the time to do a shity seemingly never ending bikeshedding RFC 13:56:02
@sandro:supersandro.deSandro 🐧
In reply to @vcunat:matrix.org
I agree it's a bit unclear whether to even have this information in-tree, but doing it differently would be probably a very large change.
we would need to replace the entire current system with some kind of stateful data source from the web
13:56:46
@sandro:supersandro.deSandro 🐧could be very similar to the current command-not-found database which has no real support in nix-index13:57:14
@sandro:supersandro.deSandro 🐧well, you can download the old one from the channel or use nix-index which overloads the network when creating the database.13:57:44
@hexa:lossy.networkhexa
In reply to @sandro:supersandro.de
probably goes into a similar direction
then feel free to voice your concerns on the rfc
14:41:15
@hexa:lossy.networkhexathere will be a shepherd meeting around the 9th14:41:32
@sandro:supersandro.deSandro 🐧I am more concerned that the RFC did not move for ~2-3 months depending how you count and proposed and immediate solution to a problem I saw.14:59:10
2 Sep 2022
@kity:kity.wtfproblems changed their display name from ash (it/its) 🏳️‍⚧️ to problems.14:08:42
3 Sep 2022
@v0id:nltrix.net@v0id:nltrix.nethttps://www.thetechoutlook.com/news/current-affairs/peter-eckersley-the-founder-of-lets-encrypt-has-left-the-tech-industry-in-tears/17:23:31
@vcunat:matrix.orgvcunat Uh, from the title I wondered why he's crying. 17:31:20
@k900:0upti.meK900Yeah, probably should have said "The passing of Peter Eckersley" 17:36:39
@k900:0upti.meK900Fuck cancer, man 17:38:44
@pennae:matrix.eno.space@pennae:matrix.eno.spaceat least he won't have to deal with all this interminable bullshit anymore17:40:07
@k900:0upti.meK900You gotta respect people that when faced with bullshit just go and start slowly painfully unfucking it17:42:55
@k900:0upti.meK900Takes a lot of commitment17:43:19
@pennae:matrix.eno.space@pennae:matrix.eno.space(and disregard for own health, in many cases)17:44:27
5 Sep 2022
@delroth:delroth.net@delroth:delroth.nethttps://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/monitoring/grafana.nix#L494 this really looks like something which shouldn't be default-hardcoded19:57:47
@k900:0upti.meK900I'm pretty sure it's just used for, like, Prometheus passwords19:58:47
@k900:0upti.meK900So you need to get into the database for it to be useful19:59:02
@delroth:delroth.net@delroth:delroth.netahh, from its name this sounded like something which would be used for e.g. sessions and such20:05:39
@delroth:delroth.net@delroth:delroth.netnot sure why that's even useful...20:06:01
@hexa:lossy.networkhexahrm20:06:04
@hexa:lossy.networkhexait smells20:06:08
@hexa:lossy.networkhexahttps://github.com/grafana/grafana/blob/main/conf/defaults.ini#L25020:06:56
@zhaofeng:zhaofeng.liZhaofeng Li

This is worrying: https://github.com/grafana/grafana/issues/15348

The secret_key are used for encrypt/decrypt sensitive information stored in/read from the database. With #15303 implemented the secret_key is also used for hashing tokens stored in the database.

20:08:53
@zhaofeng:zhaofeng.liZhaofeng Li From the linked #15303 issue, looks like it's also used for the auth tokens 20:09:30
@k900:0upti.meK900https://github.com/grafana/grafana/blob/67ea2da57e0f0d47d98ed3ee8513f0277d9c1ba9/docs/sources/setup-grafana/configure-security/configure-database-encryption/_index.md#configure-database-encryption20:09:51
@badatnames:badat.devmae changed their display name from Bad to mae.22:37:03

Show newer messages


Back to Room ListRoom Version: 9