Email sent to the Alpine Linux security address:
Subject: URGENT: Sensitive information disclosure.
The actual 5 digit codes they mention? References to gitlab merge requests 🤦♂️
Remote
Kevin
@ikke@ipv6.social
mastodon 4.7.2I help maintain the Alpine Linux infrastructure.
134 Followers
114 Following
15 Posts
Joined November 19, 2022
Alpine Linux:
Github:
> crypto/tls bug: where's my session ticket?
I have no clue, where have you searched?
Replying to
@filippo Interesting, I just cam across https://infosec.exchange/@mttaggart/116163107290977793 the other day, basically saying that it won't be feasible any time soon.
Replying to on fosstodon.org
@freedosproject@fosstodon.org alpinelinux is struggling with documentation and could use help.
https://alpinelinux.org
https://docs.alpinelinux.org
Self overheard:
"I'm trying to slim down my bike, so I've removed the saddle, but now it hurts to bike"
Replying to
@waldi@chaos.social @ncopa@fosstodon.org no, musl already bit the bullet and uses 64bit time_t
Replying to
@Codeberg@social.anoxinon.de ouch. This remains a cat-and-mouse game.
At least having them solve the Anubis challenge does cost them extra resources, but if they can do that at scale, it doesn't promise a lot of good.