*** clb has joined #crux-devel | 00:23 | |
Romster | jaeger, no but i would like it to be. | 00:49 |
---|---|---|
Romster | how far have you got on multilib tool chain? | 00:49 |
jue | teK_: it's not possible to create a new file that has the same md5sum of an existing one, but it's possible to create two files with different content but identical md5sum | 01:15 |
jaeger | Romster: still in progress, been pretty busy with work | 01:16 |
jaeger | now off to bed, 1:16 here | 01:16 |
jue | good night jaeger | 01:16 |
jue | rmull: don't think so ;) | 01:18 |
Romster | g'night jaeger | 01:35 |
Romster | yeah pretty busy here too got some time now to mess with stuff. got work tomorrow then i got the weekend off. | 01:35 |
teK_ | jue: so it's *really* theoretical | 02:56 |
*** tilman has quit IRC | 03:08 | |
*** tilman has joined #crux-devel | 03:08 | |
Romster | Eduardo Diaz has described a scheme by which two programs could be packed into two archives with identical MD5 hash. A special "extractor" program turn one archive into a "good" program and the other into an "evil" one. http://www.codeproject.com/KB/security/HackingMd5.aspx | 03:13 |
Romster | http://www.mscs.dal.ca/~selinger/md5collision/ | 03:13 |
Romster | and sha1 is broken too | 03:17 |
Romster | http://www.schneier.com/blog/archives/2005/02/sha1_broken.html | 03:17 |
Romster | that's why predatorfreak and i've been suggesting sha256 since 2008 or so. but let it rest, i'm tired of "flogging a dead horse". http://en.wikipedia.org/wiki/Flogging_a_dead_horse | 03:19 |
frinnst | :> | 03:23 |
frinnst | iirc, the argument for remaining with md5 was that it did the job of verifying that the download was complete and not corrupt "good enough" | 03:37 |
Romster | she'll be right... in aussie slang. | 03:55 |
Romster | meaning at some point it will fail spectacularly. | 03:56 |
Romster | now back to code stuff. | 03:56 |
jue | Romster: as I said, it's possible for a malicious packager to create two different files with the same md5sum, but not create one new file that has the same md5sum as an already existing file | 04:16 |
jue | but I wrote that in FS#223 already ... | 04:17 |
teK_ | that's afine but important difference to what I thought earlier ;) | 04:17 |
jue | yeah, indeed | 04:17 |
teK_ | I did not follow the agrument too close thinking we could switch to shaX without too much hassle .. so why not :-) | 04:20 |
teK_ | *argument | 04:21 |
frinnst | +1 | 04:21 |
*** mike_k has joined #crux-devel | 04:21 | |
jue | sure, I'm not against it, but the arguments of FS#223 are not really a reason for it | 04:22 |
jue | for our usage at least | 04:23 |
Romster | jeu, yes i read it, i don't mind you know more detains than i do about it. plus you do one heck of a job maintaining crux | 04:24 |
Romster | jue* | 04:24 |
Romster | s/detains/details | 04:24 |
Romster | i've noticed it's mostly jue that's looking after core | 04:25 |
Romster | are we that low on active devs now? | 04:25 |
teK_ | as long as jue/tilman and the users won't complain :-) | 04:26 |
jue | well, we got a new opt maintainer lately ;) | 04:27 |
teK_ | :> | 04:27 |
jue | btw, if we are talking on new features | 04:28 |
teK_ | not listed at http://crux.nu/Main/About | 04:28 |
jue | oops, could you fix that, please? | 04:28 |
teK_ | sure | 04:28 |
teK_ | + I did not forget the pmwiki update.. | 04:29 |
jue | anyone brave enough to test Michal's rc-ng? | 04:29 |
teK_ | maybe next week | 04:30 |
jue | I've prepared a rc port in my privat repo, so the update should be pretty painless | 04:30 |
jue | one thing is very important though: | 04:30 |
jue | run rejmerge after the update | 04:30 |
jue | ! | 04:30 |
teK_ | I will try to remember that one ;) | 04:32 |
jue | would be very helpfull if we have a test from someone who is using raid/lvm stuff | 04:33 |
* jue looks at Romster | 04:33 | |
teK_ | done + moved the profile page to http://crux.nu/Profiles/DannyRawlins | 04:34 |
mike_k | was there an agreement to repost rc-stuff summary message to the general ML? | 04:35 |
Romster | indeed i need to do more in opt too. | 04:35 |
Romster | i'm currently looking over my contrib ports an fixing a few things. | 04:36 |
jue | mike_k: yep, there was | 04:36 |
jue | but looks like tilman forgot to do it | 04:36 |
teK_ | Han Boetes is not listed at http://crux.nu/Main/RetiredMembers :D | 04:37 |
Romster | i'm using raid and lvm but i got runit i'd had to do major surgery to try that rc-ng | 04:37 |
jue | teK_: he was never a CRUX member | 04:37 |
Romster | i could however install on a fresh root disk and access my raid/lvm stuff that way. | 04:37 |
teK_ | oh ok | 04:37 |
Romster | i do have quote a bit of lvm and some mdadm knowledge. | 04:38 |
jue | Romster: maybe time to switch to more standard CRUX ;) | 04:38 |
Romster | i'm also quite good at ddrescue/testdisk and recovering data off faulty clients disks. | 04:38 |
Romster | but i like runit's speed :/ | 04:39 |
teK_ | I never felt /etc/rc to be slow | 04:39 |
Romster | though i have been considering the effort involved in what i've been doing the past few years. | 04:39 |
Romster | i did redo my firewall with standard crux this time however. | 04:39 |
jue | on improvement of rc-ng is that you can start services parallel :) | 04:40 |
Romster | load a few more services then it is slow. | 04:40 |
Romster | hmm and watchdog restarting? | 04:40 |
jue | no | 04:40 |
Romster | that and parallel starting of services might get me away from runit. | 04:40 |
teK_ | jue: I did that by appending '&' :P | 04:41 |
teK_ | Romster: for this laptop there are 11 services to start | 04:41 |
Romster | i do notice that my system does some head thrashing at startup i'm getting a SSD later that will migrate that. | 04:42 |
Romster | though i don't reboot that much either. | 04:42 |
Romster | honestly why do i want to pursue runit... is it that too complicated for crux to consider it's use too? | 04:43 |
Romster | i should look at rc-ng at least too see what the fuss is about it. | 04:43 |
Romster | jue, on another note any chance of this making it into crux 2.8 http://romster.dyndns.org/linux/ports/hvlinux/core/binutils/enable-relro-new-dtags-and-optimise-by-default.patch i've been using that for a couple of years now with no issues. other than it requires everything to be rebuilt. | 04:52 |
jue | Romster: sure, we can consider that, best would be to have a feature request in our FS | 04:55 |
Romster | i'll add one. it's a bit quicker and i've had zero issues from it. | 04:55 |
Romster | done't know if it's ok on 64bit though | 04:56 |
Romster | looking over rc off crux as it is and the one in jues repo now | 04:57 |
jue | I've just made FS#233 a CRUX 2.8 task, so we should finally decide what to do | 05:01 |
Romster | 223 or 233 i can't see a 233 | 05:05 |
jue | sorry, was 223 | 05:10 |
jue | Romster: wrt watchdog, I'm using contrib/monit on my server, it's quite nice and simple to use | 05:16 |
Romster | ah | 05:19 |
Romster | i guess that would do the job though what happens if monit itself crashes. where in my case it's the init system. | 05:22 |
Romster | though pretty rare case there. | 05:23 |
Romster | it's more tempting ot move back to crux bar having that binutils patch and gcc 4.6.2 | 05:24 |
Romster | hmm i need to check over anything else i did modify and submit FS feature requests if it's in crux's interest to consider them. | 05:24 |
jue | it's explained in the README how to setup monit within inittab | 05:24 |
Romster | k i might look into that on the weekend. | 05:25 |
Romster | not sure what i'm doing yet. | 05:25 |
*** jaeger has quit IRC | 08:21 | |
*** clb has joined #crux-devel | 08:23 | |
*** clb has joined #crux-devel | 08:35 | |
*** clb has joined #crux-devel | 08:45 | |
*** jaeger has joined #crux-devel | 08:46 | |
*** clb has joined #crux-devel | 08:55 | |
*** clb has joined #crux-devel | 09:07 |
Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!