Friday, August 7th, 2015, 00:14 UTC | ||
[00:14:09] | kukks (kukks!~Guenter@samba/team/kukks) has joined #mythtv | |
[00:33:05] | letifosi_ (letifosi_!~letifosif@c-71-202-215-223.hsd1.ca.comcast.net) has joined #mythtv | |
[00:36:31] | letifosiferrari (letifosiferrari!~letifosif@216.207.42.140) has quit (Ping timeout: 246 seconds) | |
[01:13:55] | letifosi_ (letifosi_!~letifosif@c-71-202-215-223.hsd1.ca.comcast.net) has quit (Remote host closed the connection) | |
[01:21:16] | letifosiferrari (letifosiferrari!~letifosif@c-71-202-215-223.hsd1.ca.comcast.net) has joined #mythtv | |
[01:31:36] | letifosiferrari (letifosiferrari!~letifosif@c-71-202-215-223.hsd1.ca.comcast.net) has quit (Remote host closed the connection) | |
[01:36:50] | kukks (kukks!~Guenter@samba/team/kukks) has quit (Ping timeout: 244 seconds) | |
[02:21:53] | arescorpio (arescorpio!~arescorpi@13-136-16-190.fibertel.com.ar) has joined #mythtv | |
[02:27:59] | andreaz (andreaz!~andre_000@p5DD157C0.dip0.t-ipconnect.de) has quit (Read error: Connection reset by peer) | |
[02:41:28] | fetzerch_ (fetzerch_!~quassel@unaffiliated/fetzerch) has joined #mythtv | |
[02:45:21] | fetzerch (fetzerch!~quassel@unaffiliated/fetzerch) has quit (Ping timeout: 252 seconds) | |
[02:59:41] | letifosiferrari (letifosiferrari!~letifosif@c-71-202-215-223.hsd1.ca.comcast.net) has joined #mythtv | |
[03:00:59] | cody__ (cody__!~cody@c-73-160-204-16.hsd1.nj.comcast.net) has joined #mythtv | |
[03:11:24] | letifosiferrari (letifosiferrari!~letifosif@c-71-202-215-223.hsd1.ca.comcast.net) has quit (Remote host closed the connection) | |
[04:46:32] | letifosiferrari (letifosiferrari!~letifosif@c-71-202-215-223.hsd1.ca.comcast.net) has joined #mythtv | |
[04:47:01] | letifosiferrari (letifosiferrari!~letifosif@c-71-202-215-223.hsd1.ca.comcast.net) has quit (Remote host closed the connection) | |
[04:47:34] | letifosiferrari (letifosiferrari!~letifosif@216.207.42.140) has joined #mythtv | |
[05:07:44] | Roklobsta (Roklobsta!~Roklobsta@ppp118-209-74-215.lns20.mel4.internode.on.net) has joined #mythtv | |
[05:35:48] | arescorpio (arescorpio!~arescorpi@13-136-16-190.fibertel.com.ar) has quit (Quit: Leaving.) | |
[06:18:56] | letifosiferrari (letifosiferrari!~letifosif@216.207.42.140) has quit (Ping timeout: 244 seconds) | |
[06:57:43] | cody__ (cody__!~cody@c-73-160-204-16.hsd1.nj.comcast.net) has quit (Quit: Leaving) | |
[07:23:18] | stuarta: | morning all |
[07:48:13] | Roklobsta: | evening |
[07:51:27] | SteveGoodey (SteveGoodey!~steve@host109-159-41-37.range109-159.btcentralplus.com) has joined #mythtv | |
[07:52:20] | kukks (kukks!~Guenter@ip5b42d919.dynamic.kabel-deutschland.de) has joined #mythtv | |
[07:52:20] | kukks (kukks!~Guenter@ip5b42d919.dynamic.kabel-deutschland.de) has quit (Changing host) | |
[07:52:20] | kukks (kukks!~Guenter@samba/team/kukks) has joined #mythtv | |
[08:05:26] | Merlin83b (Merlin83b!~Daniel@office.34sp.com) has joined #mythtv | |
[08:27:55] | unforgiven512 (unforgiven512!~unforgive@23.92.22.124) has joined #mythtv | |
[09:33:58] | unforgiven512 (unforgiven512!~unforgive@23.92.22.124) has quit (Quit: ZNC - http://znc.in) | |
[09:57:44] | stuarta: | stuartm: is the backend status page working via the backend webserver for you? chrome dev tools is throwing "loadContent: URL(/Status/GetStatusHTML) JSURL(undefined)" |
[09:59:10] | stuartm: | looks like I broke the link when I re-factored |
[09:59:39] | stuartm: | I'll take a look tonight |
[10:14:01] | stuarta: | glad it wasn't me then ;-) |
[10:31:47] | unforgiven512 (unforgiven512!~unforgive@2600:3c03:e001:28c4:747:c0de:2600:1337) has joined #mythtv | |
[10:35:09] | Merlin83b2 (Merlin83b2!~Daniel@office.34sp.com) has joined #mythtv | |
[10:37:16] | Merlin83b (Merlin83b!~Daniel@office.34sp.com) has quit (Ping timeout: 244 seconds) | |
[10:45:04] | MythBuild (MythBuild!~MythBuild@alcor.mythtv.org) has quit (*.net *.split) | |
[10:45:04] | markspieth (markspieth!~markspiet@CPE-124-189-105-105.gziz1.win.bigpond.net.au) has quit (*.net *.split) | |
[10:45:04] | xris (xris!~xris@mythtv/developer/xris) has quit (*.net *.split) | |
[10:49:11] | MythBuild (MythBuild!~MythBuild@alcor.mythtv.org) has joined #mythtv | |
[10:49:12] | markspieth (markspieth!~markspiet@CPE-124-189-105-105.gziz1.win.bigpond.net.au) has joined #mythtv | |
[10:49:12] | xris (xris!~xris@mythtv/developer/xris) has joined #mythtv | |
[10:56:16] | c0ldfront (c0ldfront!coldfront@c-68-84-167-7.hsd1.mi.comcast.net) has quit (Read error: Connection reset by peer) | |
[10:56:25] | coldfront (coldfront!coldfront@c-68-84-167-7.hsd1.mi.comcast.net) has joined #mythtv | |
[10:56:39] | xris (xris!~xris@mythtv/developer/xris) has quit (Ping timeout: 255 seconds) | |
[10:57:18] | xris (xris!~xris@xris.forevermore.net) has joined #mythtv | |
[10:58:10] | Captain_Murdoch2 (Captain_Murdoch2!~cpinkham@c-73-221-209-49.hsd1.wa.comcast.net) has quit (Ping timeout: 240 seconds) | |
[11:05:33] | Captain_Murdoch2 (Captain_Murdoch2!~cpinkham@c-73-221-209-49.hsd1.wa.comcast.net) has joined #mythtv | |
[11:22:44] | kukks (kukks!~Guenter@samba/team/kukks) has quit (Ping timeout: 244 seconds) | |
[12:50:44] | kukks (kukks!~Guenter@ip5b42d919.dynamic.kabel-deutschland.de) has joined #mythtv | |
[12:50:45] | kukks (kukks!~Guenter@ip5b42d919.dynamic.kabel-deutschland.de) has quit (Changing host) | |
[12:50:45] | kukks (kukks!~Guenter@samba/team/kukks) has joined #mythtv | |
[13:17:43] | dekarl1 (dekarl1!~dekarl@mythtv/developer/dekarl) has joined #mythtv | |
[13:21:03] | dekarl (dekarl!~dekarl@mythtv/developer/dekarl) has quit (Ping timeout: 244 seconds) | |
[14:27:42] | kukks (kukks!~Guenter@samba/team/kukks) has quit (Ping timeout: 244 seconds) | |
[14:31:10] | rhpot1991 (rhpot1991!~rhpot1991@ubuntu/member/rhpot1991) has quit (Ping timeout: 246 seconds) | |
[14:32:27] | dekarl1 is now known as dekarl | |
[14:35:07] | rhpot1991 (rhpot1991!~rhpot1991@2001:4968:202:3:e8eb:c9c:1382:8131) has joined #mythtv | |
[14:35:09] | rhpot1991 (rhpot1991!~rhpot1991@2001:4968:202:3:e8eb:c9c:1382:8131) has quit (Changing host) | |
[14:35:09] | rhpot1991 (rhpot1991!~rhpot1991@ubuntu/member/rhpot1991) has joined #mythtv | |
[15:03:41] | stuartm: | https://blog.mozilla.org/security/2015/08/06/ . . . in-the-wild/ |
[15:03:46] | stuartm: | be afraid ... |
[15:04:54] | Jordack (Jordack!~Jordack@75-151-31-172-Michigan.hfc.comcastbusiness.net) has joined #mythtv | |
[15:05:44] | jheizer: | Wow. Crafty. |
[15:06:59] | stuartm: | specifically harvesting stuff like ssh keys ... |
[15:07:55] | jheizer: | When I read stuff like that I feel like such a dope of a programmer |
[15:11:05] | stuartm: | what really bugs me is how the javascript engine has unfettered access to the filesystem ... I mean wtf? Origin policy aside, this just shouldn't be possible, where's the sand boxing? |
[15:11:36] | letifosiferrari (letifosiferrari!~letifosif@216.207.42.132) has joined #mythtv | |
[15:21:05] | stuarta: | crafty? i call it scary |
[15:21:47] | jheizer: | I never realized pdfs could have embedded javascript. |
[15:22:08] | jheizer: | Oh yeah, definately scary. |
[15:23:09] | jheizer: | Crafty in that I am just impressed what people come up with some times. |
[15:23:38] | stuarta: | yeah, agreed |
[15:24:16] | dekarl: | I don't understand... is it an exploit with javascript inside the PDF breaking out, or is the PDF.js accessing the local files? https://mozilla.github.io/pdf.js/ |
[15:24:29] | dekarl: | or both... JS in PDF in JS in Firefox (ugh) |
[15:24:45] | stuarta: | i think, their pdf badger is written in js |
[15:25:52] | jheizer: | most of the details links were non-public yet so hard to tell exactly. |
[15:26:07] | jheizer: | I always expected something like this to come from the local storage |
[15:26:21] | stuarta: | it was embargoed until today |
[15:26:36] | jheizer: | Legit save a exploid and then find a way to execute it broken out. |
[15:26:48] | jheizer: | exploit |
[15:30:17] | stuarta: | anyway, who uses firefox by default? |
[15:32:05] | jheizer: | Right? We all use the new and amazing EDGE! |
[15:33:05] | stuartm: | jheizer: it's not the pdf that has javascript embedded, but that the pdf viewer in firefox is written in javascript, the exploit allows a script to be uploaded as executed as though it was the pdf viewer javascript |
[15:33:48] | stuartm: | or something like that |
[15:34:28] | stuarta: | stuartm: that's how i understand it too |
[15:35:38] | stuartm: | something like they gave their pdf.js a runtime environment outside the normal sand-boxing and restrictions |
[15:36:29] | stuartm: | probably applies to other things, are all firefox extensions written in javascript? |
[15:36:31] | jheizer: | Guessing so it could load the downloaded file from disk |
[15:37:24] | stuartm: | right, that shouldn't require unrestricted access to the filesystem though, just access to the cache directory |
[15:37:42] | jheizer: | details details |
[15:37:43] | jheizer: | lol |
[15:40:16] | stuarta: | MEH! |
[15:44:47] | stuartm: | I know it's easier to talk about it than it is to do it |
[15:51:51] | Roklobsta (Roklobsta!~Roklobsta@ppp118-209-74-215.lns20.mel4.internode.on.net) has quit (Ping timeout: 252 seconds) | |
[15:57:38] | Roklobsta (Roklobsta!~Roklobsta@ppp118-209-27-30.lns20.mel4.internode.on.net) has joined #mythtv | |
[16:06:26] | kukks (kukks!~Guenter@samba/team/kukks) has joined #mythtv | |
[16:13:33] | cody__ (cody__!~cody@c-73-160-204-16.hsd1.nj.comcast.net) has joined #mythtv | |
[16:38:50] | kukks (kukks!~Guenter@samba/team/kukks) has quit (Ping timeout: 240 seconds) | |
[16:50:57] | cody__ (cody__!~cody@c-73-160-204-16.hsd1.nj.comcast.net) has quit (Ping timeout: 260 seconds) | |
[16:56:54] | Merlin83b2 (Merlin83b2!~Daniel@office.34sp.com) has quit (Quit: Leaving) | |
[17:02:06] | cody__ (cody__!~cody@c-73-160-204-16.hsd1.nj.comcast.net) has joined #mythtv | |
[17:53:01] | joki- (joki-!~joki@p5B36C70E.dip0.t-ipconnect.de) has quit (Ping timeout: 260 seconds) | |
[17:57:32] | joki (joki!~joki@p5B36D72A.dip0.t-ipconnect.de) has joined #mythtv | |
[18:42:00] | joki (joki!~joki@p5B36D72A.dip0.t-ipconnect.de) has quit (Quit: c ya!) | |
[18:43:20] | joki (joki!~joki@p5B36D72A.dip0.t-ipconnect.de) has joined #mythtv | |
[19:26:03] | dekarl1 (dekarl1!~dekarl@mythtv/developer/dekarl) has joined #mythtv | |
[19:26:20] | dekarl (dekarl!~dekarl@mythtv/developer/dekarl) has quit (Ping timeout: 244 seconds) | |
[19:47:18] | dekarl1 is now known as dekarl | |
[19:57:56] | Jordack (Jordack!~Jordack@75-151-31-172-Michigan.hfc.comcastbusiness.net) has quit (Read error: Connection reset by peer) | |
[19:58:24] | Jordack (Jordack!~Jordack@fwci01.twp.ypsilanti.mi.us) has joined #mythtv | |
[20:02:52] | jpharvey (jpharvey!~jpharvey@host86-149-149-61.range86-149.btcentralplus.com) has quit (Quit: Ex-Chat) | |
[20:12:39] | joki (joki!~joki@p5B36D72A.dip0.t-ipconnect.de) has quit (Quit: c ya!) | |
[20:13:18] | joki (joki!~joki@p5B36D72A.dip0.t-ipconnect.de) has joined #mythtv | |
[20:34:50] | Jordack (Jordack!~Jordack@fwci01.twp.ypsilanti.mi.us) has quit () | |
[20:42:35] | cody__ (cody__!~cody@c-73-160-204-16.hsd1.nj.comcast.net) has quit (Quit: Leaving) | |
[20:54:44] | jpharvey (jpharvey!~jpharvey@host86-149-149-61.range86-149.btcentralplus.com) has joined #mythtv | |
[21:07:38] | joki (joki!~joki@p5B36D72A.dip0.t-ipconnect.de) has quit (Quit: c ya!) | |
[21:10:33] | joki (joki!~joki@p5B36D72A.dip0.t-ipconnect.de) has joined #mythtv | |
[21:52:03] | SteveGoodey (SteveGoodey!~steve@host109-159-41-37.range109-159.btcentralplus.com) has quit (Quit: Konversation terminated!) | |
[22:32:53] | Roklobsta (Roklobsta!~Roklobsta@ppp118-209-27-30.lns20.mel4.internode.on.net) has quit (Quit: KVIrc 4.2.0 Equilibrium http://www.kvirc.net/) | |
[22:45:00] | caelor_ (caelor_!~quassel@cpc72389-sotn14-2-0-cust277.15-1.cable.virginm.net) has joined #mythtv | |
[22:49:11] | joki (joki!~joki@p5B36D72A.dip0.t-ipconnect.de) has quit (*.net *.split) | |
[22:49:12] | kurre2 (kurre2!~tomimo@xdsl-83-150-88-111.nebulazone.fi) has quit (*.net *.split) | |
[22:49:13] | caelor (caelor!~quassel@cpc72389-sotn14-2-0-cust277.15-1.cable.virginm.net) has quit (*.net *.split) | |
[22:49:44] | joki (joki!~joki@p5B36D72A.dip0.t-ipconnect.de) has joined #mythtv | |
[23:17:53] | letifosi_ (letifosi_!~letifosif@216.207.42.134) has joined #mythtv | |
[23:18:51] | letifosi_ (letifosi_!~letifosif@216.207.42.134) has quit (Remote host closed the connection) | |
[23:21:24] | letifosiferrari (letifosiferrari!~letifosif@216.207.42.132) has quit (Ping timeout: 264 seconds) | |
[23:23:45] | dblain (dblain!~dblain@mythtv/developer/dblain) has quit (Read error: Connection reset by peer) | |
[23:24:05] | dblain (dblain!~dblain@c-73-186-115-133.hsd1.ma.comcast.net) has joined #mythtv | |
[23:24:06] | dblain (dblain!~dblain@mythtv/developer/dblain) has joined #mythtv | |
[23:24:06] | dblain (dblain!~dblain@c-73-186-115-133.hsd1.ma.comcast.net) has quit (Changing host) | |
[23:34:19] | kurre2 (kurre2!~tomimo@xdsl-83-150-88-111.nebulazone.fi) has joined #mythtv |
IRC Logs collected by
BeirdoBot.
Please use the above link to report any bugs.