| 02:43.23 | *** join/#maemo-ssu DrCode (~DrCode@gateway/tor-sasl/drcode) |
| 07:14.50 | *** join/#maemo-ssu kolp (~quassel@brmn-4db7151c.pool.mediaWays.net) |
| 07:28.11 | *** join/#maemo-ssu _rd (~rd@p4FD1CC4D.dip0.t-ipconnect.de) |
| 09:20.56 | *** join/#maemo-ssu radekp (~radek@82.113.39.213) |
| 09:23.46 | *** join/#maemo-ssu arcean (~arcean@aacu134.neoplus.adsl.tpnet.pl) |
| 10:31.29 | *** join/#maemo-ssu xes (~xes@unaffiliated/xes) |
| 11:02.30 | *** join/#maemo-ssu lizardo (lizardo@nat/indt/x-dnutpcsgfcmaqoop) |
| 13:43.59 | *** join/#maemo-ssu futpib (~futpib@176.104.193.185) |
| 13:44.49 | *** join/#maemo-ssu NishanthMenon (~nmenon@nat/ti/x-jidjwapqqusucvgu) |
| 14:38.23 | *** join/#maemo-ssu anYc (anyc@home.hadiko.uni-karlsruhe.de) |
| 14:43.22 | *** join/#maemo-ssu LauRoman (~LauRoman@5-14-137-193.residential.rdsnet.ro) |
| 15:13.53 | *** join/#maemo-ssu sparetire_ (~sparetire@unaffiliated/sparetire) |
| 15:34.27 | *** join/#maemo-ssu anYc (anyc@home.hadiko.uni-karlsruhe.de) |
| 16:17.40 | *** join/#maemo-ssu sec (~sec@unaffiliated/sec) |
| 16:59.38 | *** join/#maemo-ssu dhbiker (~dhbiker@88.255.246.66) |
| 17:27.04 | freemangordon | kerio: bb-power is in the repo |
| 17:30.11 | kerio | yay |
| 17:37.45 | *** join/#maemo-ssu _rd (~rd@p4FD1CC4D.dip0.t-ipconnect.de) |
| 17:47.22 | *** join/#maemo-ssu anYc (anyc@home.hadiko.uni-karlsruhe.de) |
| 18:39.19 | kerio | ah shieeeeet |
| 18:39.23 | kerio | there's so many upgrades |
| 18:39.26 | kerio | upstart and system-services |
| 18:39.30 | kerio | from community-devel |
| 18:41.04 | kerio | Pali: do i yolo upgrade |
| 18:41.43 | Pali | it could fix problem reported on tmo |
| 18:42.04 | Pali | problem: etc default mount-opts was not updated with new version of package |
| 18:42.25 | kerio | i have my own fstab |
| 18:45.09 | kerio | whatever, YOLO |
| 18:45.15 | kerio | what's new in upstart? |
| 18:53.31 | sec | Thumb or normal as well? |
| 18:54.50 | kerio | holy shit my PowerOff ledd pattern is so fancy |
| 18:55.01 | kerio | *led |
| 18:55.07 | sec | kerio: Is this on thumb or normal as well? |
| 18:55.26 | kerio | thumb |
| 18:55.33 | kerio | i'm missing like two packages from -devel |
| 18:55.39 | sec | Aw, alright |
| 18:56.06 | kerio | why? |
| 18:57.16 | sec | I am not on thumb |
| 18:57.17 | sec | :/ |
| 18:57.21 | kerio | sucks to be you |
| 18:58.17 | sec | The last time I installed thumb, it seemed slower than normal |
| 19:00.51 | kerio | alright, i'm at community-devel minus calendar-backend,libhildon1,telepathy-gabble |
| 19:01.34 | Pali | kerio: in upstart nothing, only in system-services... but system-services package is part of upstart source |
| 19:02.04 | *** join/#maemo-ssu futpib (~futpib@176.104.193.185) |
| 19:02.12 | Pali | anyway I have some problems with LED too |
| 19:02.36 | Pali | it does not work until I restart mce... |
| 19:02.45 | Pali | freemangordon: ^^^^ |
| 19:02.47 | Pali | any idea? |
| 19:03.01 | Pali | problem is there after reboot or power on again |
| 19:03.11 | Pali | stop mce && start mce fix it |
| 19:07.27 | *** join/#maemo-ssu DrCode (~DrCode@gateway/tor-sasl/drcode) |
| 19:54.30 | *** join/#maemo-ssu LauRoman|Alt (~LauRoman@5-14-137-193.residential.rdsnet.ro) |
| 20:01.27 | *** join/#maemo-ssu sec (~sec@unaffiliated/sec) |
| 20:38.00 | *** join/#maemo-ssu dhbiker (~dhbiker@88.255.246.66) |
| 20:39.10 | kerio | freemangordon et al.: is there a good reason our libssl isn't upgraded? |
| 20:53.27 | Pali | kerio: yes, manpower |
| 20:53.51 | Pali | need to test if API/ABI was changed |
| 20:54.09 | Pali | or backport patches |
| 20:54.17 | Pali | nobody has time for it |
| 20:55.00 | kerio | holy fucking shit we're on 0.9.8n and the current 0.9.8 is 0.9.8zc |
| 20:55.39 | kerio | how fucking sad does your release schedule have to be to reach 28 patch releases |
| 20:55.50 | kerio | 29, actually |
| 20:55.54 | kerio | there was a plain 0.9.8 |
| 20:56.05 | kerio | TWENTY |
| 20:56.05 | kerio | FUCKING |
| 20:56.06 | kerio | NINE |
| 20:57.52 | kerio | well, if https://gitorious.org/community-ssu/openssl is the repo, we're currently vulnerable to POODLE |
| 20:58.00 | kerio | not sure if that's server or client, tho |
| 21:02.29 | sec | Both I think depending on the application using libssl |
| 21:02.46 | kerio | we should upgrade to 0.9.8zc |
| 21:02.52 | kerio | i wonder if the debian one would work |
| 21:03.21 | sec | It's not easy I think, there will be dependencies where the older libraries are required and can not be replaced |
| 21:04.29 | Pali | ~ping |
| 21:04.29 | infobot | ~pong |
| 21:04.57 | Pali | kerio: problem is that openssl does not have stable ABI |
| 21:05.06 | kerio | we're on 0.9.8 |
| 21:05.18 | kerio | upgrading to 0.9.8 will not require any other change |
| 21:05.25 | kerio | like, the latest 0.9.8 |
| 21:05.32 | Pali | even 0.9.8 do not have to have stable ABI |
| 21:05.51 | kerio | ...but it's literally the same .so file |
| 21:06.04 | Pali | kerio: do tests and prepare new update |
| 21:06.06 | kerio | if it's not abi-compatible, they fucked up |
| 21:06.33 | Pali | openssl is not ABI compatible |
| 21:06.40 | sec | ^ |
| 21:07.46 | Pali | kerio: can you look into openssl patches and prepare new release? |
| 21:10.23 | kerio | hold on i'm going to do something stupid first |
| 21:10.33 | kerio | how similar is fremantle to squeeze? |
| 21:10.59 | kerio | awww, needs too recent of a libc :( |
| 21:11.36 | sec | kerio: Try Lenny |
| 21:13.03 | bencoh | no, lenny is too young |
| 21:13.14 | bencoh | try etch&half |
| 21:13.34 | sec | I was thinking the same |
| 21:13.42 | kerio | is "arm" the same as "armel"? |
| 21:13.45 | bencoh | (actually it could work) |
| 21:13.48 | sec | But Etch's packages would be so far behind |
| 21:14.04 | bencoh | kerio: arm usually is little-endian, so most of the time in this context yeah |
| 21:14.34 | kerio | lenny's openssl is older than ours |
| 21:15.19 | sec | Hehe |
| 21:16.33 | bencoh | kerio: yeah, but what about libc ? :) |
| 21:17.10 | kerio | do you guys think anything bad will happen if i add the current debian repos and upgrade? |
| 21:17.41 | bencoh | POODLE is a protocol issue, so clients and servers try not to be exposed |
| 21:17.44 | kerio | like, yolo upgrade |
| 21:17.57 | bencoh | add the current debian repo to what ? maemo ? |
| 21:18.01 | kerio | yes :3 |
| 21:18.16 | bencoh | one way ticket to reflash |
| 21:18.36 | bencoh | unless you want to manually revert |
| 21:18.43 | bencoh | (from a chroot) |
| 21:18.50 | bencoh | (in rescueos :p) |
| 21:19.06 | kerio | from a chroot? :o |
| 21:19.12 | sec | It won't work kerio :P |
| 21:19.21 | sixwheeledbeast^ | http://talk.maemo.org/showthread.php?t=93296 |
| 21:20.31 | bencoh | I dont understand why they decided to break 0.9.8 ABI after n |
| 21:20.39 | bencoh | it sounds unreal |
| 21:20.39 | sec | You can avoid problems by configuring servers to reject SSL in its entirety and only use TLS |
| 21:20.48 | kerio | hahahah did we really avoid heartbleed just by being too old |
| 21:21.00 | kerio | sec: TLSv1 is also vulnerable |
| 21:21.02 | kerio | without patching |
| 21:21.28 | sec | Hm, that could probably be configured too in some cases |
| 21:21.43 | kerio | just needs a patch |
| 21:21.49 | kerio | or you just go "fuck it" and only allow tls 1.2 |
| 21:21.57 | sec | Even OpenSSH/Dropbear are super old |
| 21:22.00 | kerio | (and 1.1, but who the fuck supports 1.1 but not 1.2?) |
| 21:23.16 | bencoh | going "fuck it" would just prevent a non-negligeable amount of customers from accessing your services :) |
| 21:23.27 | bencoh | (I tried, and I reverted back to keeping tlsv1) |
| 21:23.38 | sec | Also, I doubt many people run servers on N900s |
| 21:24.04 | sec | Does anyone have newer OpenSSH/Dropbear packages? |
| 21:24.15 | bencoh | sec: 0.9.8n doesnt have tls1.2 |
| 21:24.24 | sec | What ._. |
| 21:24.29 | bencoh | I'm not even sure it has proper support for tls1.1 |
| 21:24.36 | bencoh | well, unless I'm mistaken |
| 21:24.49 | kerio | the cipher support is ass |
| 21:24.55 | sec | Well we're screwed then aye |
| 21:24.59 | bencoh | yeah ;) |
| 21:25.02 | bencoh | 22:23 < bencoh> going "fuck it" would just prevent a non-negligeable amount of customers from accessing your services :) |
| 21:25.07 | bencoh | I forgot to tell "including n900" ;) |
| 21:25.10 | kerio | xchat can't connect to my znc \_o_/ |
| 21:25.15 | bencoh | yay |
| 21:25.27 | sec | Lol |
| 21:25.28 | kerio | although it could be a configuration issue |
| 21:25.43 | kerio | like, on xchat side |
| 21:26.20 | sec | Also, it's only going to get worse with OpenSSL refactoring code and weeding out bugs now that they're getting funded. I am assuming this za will be xyz in another few months |
| 21:26.35 | kerio | rofl |
| 21:26.40 | kerio | no way |
| 21:26.46 | bencoh | :)) |
| 21:26.47 | kerio | you mean zza |
| 21:26.53 | kerio | xyz < za |
| 21:27.28 | sec | That doesn't sound right |
| 21:27.58 | sec | http://talk.maemo.org/showpost.php?p=1428683&postcount=13 |
| 21:28.04 | bencoh | anyawy, what brought openssl here tonight ? :) |
| 21:28.29 | Pali | my happy new year message :D |
| 21:28.41 | Pali | eh, no it was on #neo900 |
| 21:28.45 | Pali | not here |
| 21:32.21 | sec | waits for the day maemo sources are leaked somehow |
| 21:32.52 | bencoh | http://upstream.rosalinux.ru/compat_reports/openssl/0.9.8o_to_0.9.8p/abi_compat_report.html |
| 21:33.19 | bencoh | sec: we could still patch/revert ABI changes, but meh |
| 21:33.24 | bencoh | last time debian played with ssl ... |
| 21:33.58 | sec | bencoh: http://talk.maemo.org/showpost.php?p=1430524&postcount=21 |
| 21:34.26 | sec | Is there a #openssl? |
| 21:34.31 | bencoh | prolly |
| 21:34.54 | sec | <PROTECTED> |
| 21:34.58 | sec | What did I say |
| 21:35.37 | bencoh | sec: pure luck, considering http://upstream.rosalinux.ru/versions/openssl.html :] |
| 21:36.25 | bencoh | I guess maemo/the software he has installed doesnt use the impacted symbols/structures |
| 21:37.00 | bencoh | but still .... "struct dtls1_bitmap_st (1) Size of this type has been changed from 44 bytes to 20 bytes." |
| 21:37.08 | bencoh | and "struct dtls1_state_st (1) Size of this type has been changed from 808 bytes to 760 bytes." |
| 21:37.32 | sec | I don't know what to think of it. I don't want to believe it's pure luck at this point xD |
| 21:37.34 | Pali | revert those changes |
| 21:39.14 | bencoh | I think it all comes from the changes in BIGNUM / PQ_64BIT |
| 21:40.51 | bencoh | hmm, maybe this has no impact on arm (bignum on arm ... meh) |
| 21:43.45 | sec | Can't wait for 10" phones and 4" tablets at CES this year |
| 21:45.17 | sec | Pali: http://talk.maemo.org/showthread.php?t=94426 |
| 21:47.05 | bencoh | sec: cant wait for qualcomm MSM stuff everywhere ? :> |
| 21:47.16 | sec | xD |
| 21:47.53 | sec | Alright, guys: #openssl says: |
| 21:47.54 | sec | <PROTECTED> |
| 21:47.57 | sec | <PROTECTED> |
| 21:48.00 | sec | <PROTECTED> |
| 21:53.55 | kerio | LOL |
| 21:54.07 | kerio | hold on, why zb and not zc |
| 22:06.32 | kerio | anyway, https://bugs.launchpad.net/ubuntu/+source/xchat/+bug/1381777 |
| 22:06.37 | kerio | this would fix my xchat woes |
| 22:21.30 | kerio | hold on why does that guy have thumby builds of openssl and doesn't share them |
| 23:21.21 | *** join/#maemo-ssu dos1 (~dos1@unaffiliated/dos1) |
| 23:21.21 | *** join/#maemo-ssu Sc0rpius (~naikel@ec2-54-89-119-43.compute-1.amazonaws.com) |
| 23:21.35 | *** join/#maemo-ssu APic (apic@apic.name) |
| 23:21.57 | bencoh | yeah, 1.1, sure |
| 23:22.19 | bencoh | sec: did you tell them we were stuck with 2009-ish closed-source blobs ? :] |
| 23:22.57 | *** join/#maemo-ssu pigeons (~pigeons@titan.sysevolve.com) |
| 23:22.57 | *** join/#maemo-ssu Gizmokid2005 (~Gizmokid2@dedi1.gizmokid2005.com) |
| 23:22.57 | *** join/#maemo-ssu g3kk3r (~torrkull@far.torrkulla.net) |
| 23:30.33 | *** join/#maemo-ssu kerio (znc@acehack.de) |
| 23:34.15 | *** join/#maemo-ssu sixwheeledbeast (~zem@lagrange.cloud-7.de) |
| 23:39.11 | *** join/#maemo-ssu kerio (kerio@acehack.de) |
| 23:52.13 | *** join/#maemo-ssu DrCode (~DrCode@gateway/tor-sasl/drcode) |