00:22:41 [illumos-gate] 8679 failed to attach AMD IOMMU -- Gordon Ross 01:42:57 Thanks alanc ... about what I thought and a challenge for the single minded with the generalized language tools available and no reasonable explanation for supporting archaic system emulation 01:44:07 But I would incorporate it all into the java virtual machine just to add bloat to a tragedy yet to unfold for app designers. 08:48:27 dtrace.org cert is expired: Expired: Tuesday, 22. November 2022 at 19:20:50 Eastern European Standard Time 11:41:22 [illumos-gate] 15385 Update AMD microcode to 20230131 -- Andy Fiddaman 16:55:48 [illumos-gate] 15386 signalfd overzealous with clean-up -- Patrick Mooney 17:06:18 Has anybody gotten this to work on illumos? https://infosec.exchange/@hdm/109861299289142757 17:12:04 This makes it seem like it's trivial to crash sshd, but I can't make this example work against SmartOS with OpenSSH 9.1 20:39:14 [illumos-gate] 15387 snoop: buffer overflow in netbiosname2ascii() -- Toomas Soome 20:47:47 bahamat: The advisory gives a hint:... (full message at ) 20:48:10 * bahamat: The advisory gives a hint:... (full message at ) 21:00:25 toasterson: what irc client are you using? 21:01:38 matrix 21:01:42 is it spamming? 21:01:46 no 21:02:23 just somewhat amused that despite 20+year old text based irc clients figured out how to deal with ircd line limits, it decided to go it's own route 21:03:11 their developers must be part of the 'http(s) is a hammer to solve all ills' camp 21:03:18 :) 21:03:47 Ah, because it posts HTTP links? 21:04:02 yeah.. presumably for overly long lines 21:04:08 instead of just breaking them up 21:04:10 The message was Markdown formatted 21:04:36 I think they might render them on demand though 21:05:21 yeah, and when you edit stuff it just posts it over again. 21:06:01 Let's see what it does when I do bold or strikethrough ~~The world is flat.~~ 21:06:25 half there 21:06:49 I see bold, but just double-tilde-wrapped text for the strikethrough attempt. 21:06:56 H~2~O X^2^ 21:07:08 Hmm this markdown rendering does not seem complete not even for me 21:07:09 yeah.. irc's supported bold for a long time (ctrl-b) 21:07:58 Sub and superscript are not even supported in Matrix itself it seems. 21:10:53 but yeah-- that exploit seems to require malloc()/free() to act in a specific way (which it doesn't always do) 21:11:31 i'd imagine on illumos it might require adjustments 21:11:36 to work 21:12:28 i definitely wouldn't count on being immune.. at best (and i'd still have reservations) if linked against umem, it might just result in a DOS attack 21:49:20 [illumos-gate] 15388 clear_locks(8) needs resilience -- Dan McDonald 22:46:23 tsoome: https://www.illumos.org/issues/15387 more like byte-sized :-p 22:46:25 → BUG 15387: snoop: buffer overflow in netbiosname2ascii() (Closed) | https://code.illumos.org/c/illumos-gate/+/2649 22:51:23 jbk: Yeah, we've updated already. Just trying to figure out if this warrants a "you should upgrade immediately" advisory notice. 22:53:44 I mean, it can't hurt?