
https://nitter.gq/t.co/2dUlzrpKbb @VoidLinux
Köln, Deutschland
Joined February 2011
- Tweets513
- Following266
- Followers128
- Likes400
Just noticed the uid/gid of "nobody" on Mac OS X is -2. This reminded me of the sudo bug with negative UIDs and... the bug was found by someone working for Apple Information Security.
Also UID_MAX is useless...
Duncan retweeted
dhcpcd Linux users should upgrade to the newly released dhcpcd-8.1.5 as it fixes a serious issue introduced in dhcpcd-8.1.1 (made even worse in dhcpcd-8.1.3) with regards to IPv6 DaD timers :(
Please upgrade!
roy.marples.name/blog/dhcpcd…
Re sudo; you shouldn't switch to a random doas port just because there was an issue with sudo. There are ports from maintainers that have no idea what they are doing and its not more secure because the code base is smaller if they add exploitable issues while porting.
Duncan retweeted
musl 1.1.24 release has been posted. openwall.com/lists/musl/2019…
This one doas port maintainer won't agree that replacing setusercontext(LOGIN_SETUSER|LOGIN_SETGROUP) with just setuid() is a security issue. "Having the group of the calling user is arguably expected, or at least certainly useful."
And now they sneaked in a fix for another issue I reported with a misleading commit message so users don't see why this was reaaaaally bad.
github.com/slicer69/doas/com…
Duncan retweeted
I'm excited to share a project that I've been working on: a brand-new version of @Mozilla's SSL Configuration Generator:
ssl-config.mozilla.org/
Configuring TLS is perhaps the most complicated and error-prone of all IT tasks, and this tries to make it as easy as possible.
Duncan retweeted
I care about making good, portable software without compromises: I already ported it every system I could get my hands on. It's deceptively simple with a small makefile, a .c file, and a man page. I just don't have time to learn the packaging process for every OS vendor.
Duncan retweeted
I've just released version 1.0 of rw(1), my replacement for dd(1) improved with useful dashed options and good defaults. It's portable to DragonFly, Haiku, Hurd, Illumos, Linux, macOS, Midipix, Minix, NetBSD, OpenBSD, Sortix, and WSL.
You can get rw(1) at sortix.org/rw/
Duncan retweeted
News: The Advent of Void: Day 18: mblaze ift.tt/2BwxYEK
Updated @VoidLinux's Chromium to 63, the builds are running for nearly 4 hours...
Duncan retweeted
News: The Advent of Void: Day 11: fatrace ift.tt/2jtH28R
Wrote todays Void Linux advent blog post about `containers` nitter.gq/VoidLinux/status/93774…. Its time to contribute man pages for it and maybe some changes to use the latest namespace features. Something for seccomp rules for containers would be great too.
News: The Advent of Void: Day 4: containers voidlinux.eu/news/2017/12/ad…
Duncan retweeted
News: The Advent of Void: Day 3: ministat voidlinux.eu/news/2017/12/ad…
Duncan retweeted
News: The Advent of Void: Day 2: taskwarrior voidlinux.eu/news/2017/12/ad…
Duncan retweeted
News: The Advent of Void: Day 1: gcal ift.tt/2ixZD2S









