GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Notices by hannes (hannesm@mastodon.social)

  1. Embed this notice
    hannes (hannesm@mastodon.social)'s status on Friday, 25-Oct-2024 03:08:43 JST hannes hannes

    Today I learned that GNU tar does network connections if you say "foo:bar", it tries to resolve "foo". FFS, wasn't the Unix philosophy to do one thing and do it well? Luckily there's a "--force-local" option to GNU tar to avoid it doing remote connections.

    Sorry if you're in trouble now, either reviewing your tar calls in your application and whether they can take user input as filename -- or if this was part of your exfiltration or attack on a system.

    In conversation about 7 months ago from mastodon.social permalink
  2. Embed this notice
    hannes (hannesm@mastodon.social)'s status on Wednesday, 10-Jan-2024 00:35:09 JST hannes hannes
    in reply to
    • clacke

    @clacke https://nlnet.nl/project/OWI/ and also https://nlnet.nl/project/AVantGaRDe/ as I heard

    In conversation Wednesday, 10-Jan-2024 00:35:09 JST from mastodon.social permalink

    Attachments

    1. No result found on File_thumbnail lookup.
      NLnet; owi
    2. No result found on File_thumbnail lookup.
      NLnet; AVantGaRDe
  3. Embed this notice
    hannes (hannesm@mastodon.social)'s status on Tuesday, 09-Jan-2024 13:12:52 JST hannes hannes
    in reply to
    • Next Generation Internet
    • NGI Zero open source funding

    @NGIZero @EC_NGI great to see to have three #OCaml projects in that list :)

    In conversation Tuesday, 09-Jan-2024 13:12:52 JST from mastodon.social permalink
  4. Embed this notice
    hannes (hannesm@mastodon.social)'s status on Friday, 22-Dec-2023 03:06:24 JST hannes hannes
    in reply to
    • Damien Miller

    @djm agreed & there's https://datatracker.ietf.org/doc/html/rfc9413 :)

    looking back, unfortunately formal methods work does not always pick up to ietf - e.g. our work on tcp/ip and the sockets api didn't get much resonance in the engineering community http://www.cl.cam.ac.uk/~pes20/Netsem/paper3.pdf

    In conversation Friday, 22-Dec-2023 03:06:24 JST from mastodon.social permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: www.ietf.org
      RFC 9413: Maintaining Robust Protocols
      from David Schinazi
      The main goal of the networking standards process is to enable the long-term interoperability of protocols. This document describes active protocol maintenance, a means to accomplish that goal. By evolving specifications and implementations, it is possible to reduce ambiguity over time and create a healthy ecosystem. The robustness principle, often phrased as "be conservative in what you send, and liberal in what you accept", has long guided the design and implementation of Internet protocols. However, it has been interpreted in a variety of ways. While some interpretations help ensure the health of the Internet, others can negatively affect interoperability over time. When a protocol is actively maintained, protocol designers and implementers can avoid these pitfalls.

User actions

    hannes

    hannes

    hacker #OCaml #MirageOS #unikernel #FreeBSD #cycling #network #infrastructure #privacy #anarchism https://hannes.robur.coop

    Tags
    • (None)

    Following 0

      Followers 0

        Groups 0

          Statistics

          User ID
          225265
          Member since
          21 Dec 2023
          Notices
          4
          Daily average
          0

          Feeds

          • Atom
          • Help
          • About
          • FAQ
          • TOS
          • Privacy
          • Source
          • Version
          • Contact

          GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

          Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.