Notices by hannes (hannesm@mastodon.social)

Today I learned that GNU tar does network connections if you say "foo:bar", it tries to resolve "foo". FFS, wasn't the Unix philosophy to do one thing and do it well? Luckily there's a "--force-local" option to GNU tar to avoid it doing remote connections.

Sorry if you're in trouble now, either reviewing your tar calls in your application and whether they can take user input as filename -- or if this was part of your exfiltration or attack on a system.

@clacke https://nlnet.nl/project/OWI/ and also https://nlnet.nl/project/AVantGaRDe/ as I heard

@NGIZero @EC_NGI great to see to have three #OCaml projects in that list :)

@djm agreed & there's https://datatracker.ietf.org/doc/html/rfc9413 :)

looking back, unfortunately formal methods work does not always pick up to ietf - e.g. our work on tcp/ip and the sockets api didn't get much resonance in the engineering community http://www.cl.cam.ac.uk/~pes20/Netsem/paper3.pdf