!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

369 Members
Discussions around Security | Triaging happens in #security:nixos.org125 Servers

Load older messages


SenderMessageTime
12 Jul 2022
@hexa:lossy.networkhexa * also our build uses their native binaries … so great (wpsoffice)11:42:10
@k900:0upti.meK900Isn't that thing proprietary anyway/11:42:31
@k900:0upti.meK900 * Isn't that thing proprietary anyway?11:42:32
@hexa:lossy.networkhexaI have no idea11:42:56
@hexa:lossy.networkhexait consumes steam11:43:03
@hexa:lossy.networkhexawhich has the best fhsenv wrapper11:43:17
@hexa:lossy.networkhexa

use steam-run to launch wps

11:43:28
@andreas.schraegle:helsinki-systems.de@andreas.schraegle:helsinki-systems.deiirc wpsoffice also still depends on qt411:47:41
@hexa:lossy.networkhexatwo somethings with one security issue!11:55:53
@sandro:supersandro.deSandro 🐧
In reply to @k900:0upti.me
It's been three months and exactly zero progress
Everything on plan
14:50:23
@hexa:lossy.networkhexahttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00707.html16:17:34
@hexa:lossy.networkhexasomething spectre v216:17:50
@k900:0upti.meK900Yay more side channels16:18:17
@k900:0upti.meK900Make all CPUs in-order16:18:29
@k900:0upti.meK900Return to monkey16:18:32
@k900:0upti.meK900 * Return to monke16:18:32
@k900:0upti.meK900image.png
Download image.png
17:05:20
@k900:0upti.meK900Huh17:05:22
@k900:0upti.meK900So looks like newer CPUs are actually unaffected for once17:06:12
16 Jul 2022
@k900:0upti.meK900https://github.com/NixOS/nixpkgs/issues/11237118:47:28
@k900:0upti.meK900Has everyone given up on this?18:47:32
@sandro:supersandro.deSandro 🐧better to ask: Is someone still working on this? Because most likely the priority of it was just below other things.18:58:13
@hexa:lossy.networkhexaI want it, but I wasn't planning on tackling this 19:03:43
@k900:0upti.meK900Same basically19:04:21
@k900:0upti.meK900It's going to have to happen either way when upstream drops libcrypt19:04:54
@hexa:lossy.networkhexahttps://github.com/NixOS/nixpkgs/issues/112371#issuecomment-118627466319:37:18
@hexa:lossy.networkhexathis drops libcrypt from glibc and adds the flag19:37:26
@hexa:lossy.networkhexahow do we find all packages that use libcrypt though?19:37:35
@k900:0upti.meK900Scream test?19:38:52
@sandro:supersandro.deSandro 🐧hydra jobset20:23:52

Show newer messages


Back to Room ListRoom Version: 9