GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Eleanor Saitta (dymaxion@infosec.exchange)'s status on Tuesday, 10-Sep-2024 19:40:47 JSTEleanor SaittaEleanor Saitta

    Dynamic typing is a mistake, and a vulnerability waiting to happen, again: https://tmendez.dev/posts/rng-git-hash-bug/

    In conversationabout 2 months ago from infosec.exchangepermalink

    Attachments

    1. No result found on File_thumbnail lookup.
      Our RNG Git Hash Bug
      from Tim Mendez
      Background I work on the live services game Dragon Prince: Xadia. We have iOS/Android clients, hosted gameservers, and a platform. Our gameservers and clients need to be in sync, so we have a field in our platform’s YAML configuration: gameServerVersion: This way, we can tell clients when they are out of date and need to update. This value is set dynamically by a TeamCity deployment job. The Bug One day, a good long while after we put this system in place, our QA lead pings me in the #game-ops channel on Slack:
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.