| 10 Aug 2022 |
 hexa | death by a thousand cuts probably | 18:47:17 |
| hexa | In reply to @v0id:nltrix.net
this one doesn't have any --with-openssl flag. https://github.com/randombit/botan/commit/b77e5a1b663a8cfa0cfa90fd052a23eb70e9e31d | 21:40:59 |
| hexa | thanks for looking it up | 21:41:04 |
| 11 Aug 2022 |
 Winter (she/her) | In reply to @hexa:lossy.network
death by a thousand cuts probably did they formally say they were leaving at all? | 00:30:49 |
| hexa | they left all rooms | 00:31:10 |
| hexa | so, no, not formally | 00:31:18 |
| Winter (she/her) | ah | 00:34:10 |
|  Solène Rapenne (she/her) joined the room. | 10:53:59 |
|  ar set a profile picture. | 20:54:12 |
| 12 Aug 2022 |
 @v0id:nltrix.net | https://github.com/issikebrokenyet | 20:34:53 |
 @delroth:delroth.net | https://ffmpeg.org/pipermail/ffmpeg-devel/2022-August/299924.html I'm tempted to say that's a security issue and ffmpeg_5 in nixpkgs should disable that protocol. Thoughts? | 21:22:28 |
| hexa | they encoded a fallback ipfs gateway? | 21:53:08 |
| @delroth:delroth.net | I've informally asked Arch and Alpine security folks about this and they generally agree and will look at patching it out on their side (Arch is not on 5.1 yet). Will send an RFC PR that disables the newly added ipfs:// and ipns:// support. | 21:53:13 |
| @delroth:delroth.net | correct | 21:53:16 |
| @delroth:delroth.net | because IFPS is too much of a pain to implement properly so they just translate to an HTTP fetch to a gateway... but they'll just use a random internet-hosted gateway if there isn't one on localhost or configured via environment | 21:54:24 |
| @delroth:delroth.net | (not really "random" but picked without much consideration into any privacy concerns, looking at the discussion) | 21:54:56 |
| hexa | users can always enable ipfs if they want to access that content | 21:56:01 |
| hexa | same goes for all other networks, that are not directly reachable | 21:56:09 |
| hexa | delroth: can you provide a PR? | 22:01:58 |
| @delroth:delroth.net | https://github.com/NixOS/nixpkgs/pull/186351 | 22:05:45 |
| hexa | uh, the proposed patch here still works with a local gateway | 22:08:58 |
| hexa | https://ffmpeg.org/pipermail/ffmpeg-devel/2022-August/299924.html | 22:08:59 |
| hexa | that looks preferable | 22:09:02 |
| @delroth:delroth.net | I'd rather not cherry pick an unmerged patch that developers are still discussing? especially since the feature is less than a month old | 22:09:42 |
| @delroth:delroth.net | could be convinced otherwise though | 22:09:53 |
| hexa | looks simple enough imo | 22:10:41 |
| hexa | at least with the patch the intention is clear and it makes sure we revisit the situation when the upstream situation changes | 22:11:30 |
| hexa | * at least with the patch the intention is absolutely clear and it makes sure we revisit the situation when the upstream situation changes | 22:11:38 |
| hexa | * at least with the patch the intention is absolutely clear and it makes sure we revisit the situation when the upstream situation changes (aka the patch stops applying) | 22:11:48 |
| @delroth:delroth.net | SGTM, I can do that | 22:11:57 |
