| 1 May 2025 |
 hexa | https://www.mozilla.org/security/advisories/mfsa2025-14
https://www.mozilla.org/security/advisories/mfsa2025-20
https://www.mozilla.org/security/advisories/mfsa2025-28 | 15:28:58 |
| hexa | https://visio.numerique.gouv.fr/kia-pnru-czg | 15:54:38 |
| hexa | for the call | 15:54:41 |
|  Rosario Pulella changed their display name from Rosario Pulella to Rosuavio. | 20:08:07 |
|  oak 🏳️🌈♥️ changed their display name from oak - mikatammi.fi to oak 🫱⭕🫲. | 23:18:29 |
| 2 May 2025 |
 Ivan Mincik (imincik) | Anybody knows why we can't access Hydra web interface anymore. Since last week, https://hydra.nixos.org/job/nixpkgs/trunk/gdal.x86_64-darwin/all returns "403 Forbidden" . | 06:58:50 |
| Ivan Mincik (imincik) | Even https://hydra.nixos.org/ returns 403. | 06:59:23 |
| Ivan Mincik (imincik) | * Anybody knows why we can't access Hydra web interface anymore ? Since last week, https://hydra.nixos.org/job/nixpkgs/trunk/gdal.x86_64-darwin/all returns "403 Forbidden" . | 06:59:41 |
| Ivan Mincik (imincik) | What, I see now "2025-01-05 02:53:27 by Martin Weinelt Please set a proper User-Agent when scraping hydra.nixos.org" | 07:00:16 |
| Ivan Mincik (imincik) | * What ? I see now "2025-01-05 02:53:27 by Martin Weinelt Please set a proper User-Agent when scraping hydra.nixos.org" | 07:00:26 |
 Tom | In reply to @qyliss:fairydust.space
I'm getting 403 Forbidden from Hydra. JS is enabled. I would suggest reading the backlog starting around here. | 07:03:50 |
| Ivan Mincik (imincik) | hexa (signing key rotation when): how exactly should I set the User-Agent to get access to hydra.nixos.org ? I can't access it via Firefox and we are also using it to check the state of our packages . | 07:04:19 |
 Alyssa Ross | Update Firefox | 07:08:13 |
| Ivan Mincik (imincik) | I am using recent Firefox from nixos-24.11. How update can help ? | 07:11:01 |
| Alyssa Ross | Old versions are blocked. The rules were linked earlier. | 07:11:45 |
| Alyssa Ross | Oh actually I guess they weren't directly | 07:12:46 |
| Ivan Mincik (imincik) | I am on "Mozilla Firefox 137.0.1" . 138 is the latest in stable branch. | 07:13:30 |
| Alyssa Ross | https://github.com/NixOS/infra/blob/main/build/hydra-proxy.nix | 07:13:39 |
| Alyssa Ross | That does sound like it should be allowed | 07:14:04 |
| Ivan Mincik (imincik) | And also, as a Geospatial Team we depend on CI for getting status of our packages build. Is there any way to get it working again ? I use it for ZHF quite a lot. | 07:15:41 |
| Alyssa Ross | requests should also let you set a User-Agent value. It is good practice to do so any time you are making requests to somebody else. For automated requests it's good to include a URL so administrators can know what the purpose of the traffic is and why they shouldn't block it. | 07:16:56 |
| Ivan Mincik (imincik) | Sure, you are right. I can set the User-Agent. I just need to know what you want to see there. Also, what should I do with Firefox ? | 07:20:49 |
| Alyssa Ross | I think your Firefox being blocked is an accident. Wait for somebody from the infra team to see your report. | 07:22:17 |
 Jeremy Fleischman (jfly) | @imincik:matrix.org, here's the last tweak we made to the list of user agents: https://github.com/NixOS/infra/commit/bfafa677b1e9fc2289a1896b885d2818d9e5a738
Perhaps you could steal an allowed one from there? We should also update the list to play nicely with the latest version Firefox | 08:09:58 |
| Jeremy Fleischman (jfly) | We aren't planning to play whack-a-mole forever, I believe Hexa is packaging go-away which hopefully will work better for us | 08:11:10 |
| Ivan Mincik (imincik) | Thanks, is there any list of banned IP addresses as well ? | 08:14:14 |
| Jeremy Fleischman (jfly) | Not AFAIK | 08:15:04 |
| Ivan Mincik (imincik) | In reply to @jfly:matrix.org
Not AFAIK Thanks for help | 10:03:34 |
| Ivan Mincik (imincik) | It looks to me it must be some IP addresses filtering. I can access Hydra using Python script from my local computer, but the same script denied from Github actions. | 10:38:45 |
| hexa | I'm reaching out in private to get some details to identify the requests that get blocked | 11:09:35 |
