LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 05-02-2021, 11:02 PM   #31
PROBLEMCHYLD
Senior Member
 
Registered: Apr 2015
Posts: 1,201

Rep: Reputation: Disabled

You guys are ruthless, but I can hang. Enjoy your rendezvous....
 
Old 05-02-2021, 11:24 PM   #32
drgibbon
Senior Member
 
Registered: Nov 2014
Distribution: Slackware64 15.0
Posts: 1,220

Rep: Reputation: 943Reputation: 943Reputation: 943Reputation: 943Reputation: 943Reputation: 943Reputation: 943Reputation: 943
I was just poking a bit of fun If there really is a serious vulnerability then I'd like to know about it (remote/local/which package/interim mitigations, etc), but there's got to be at least some details. As it stands, the thread contains no useful information.
 
4 members found this post helpful.
Old 05-03-2021, 01:07 AM   #33
RadicalDreamer
Senior Member
 
Registered: Jul 2016
Location: USA
Distribution: Slackware64-Current
Posts: 1,816

Rep: Reputation: 981Reputation: 981Reputation: 981Reputation: 981Reputation: 981Reputation: 981Reputation: 981Reputation: 981
Quote:
Originally Posted by drgibbon View Post
I was just poking a bit of fun If there really is a serious vulnerability then I'd like to know about it (remote/local/which package/interim mitigations, etc), but there's got to be at least some details. As it stands, the thread contains no useful information.
Yes, the OP probably should've just emailed Pat or got on IRC. I can understand why he'd not disclose what it is publicly. A status update would be nice.
 
Old 05-03-2021, 04:56 AM   #34
Slax-Dude
Member
 
Registered: Mar 2006
Location: Valadares, V.N.Gaia, Portugal
Distribution: Slackware
Posts: 528

Rep: Reputation: 272Reputation: 272Reputation: 272
"There is no spoon"
 
Old 05-03-2021, 05:01 AM   #35
marav
LQ Sage
 
Registered: Sep 2018
Location: Gironde
Distribution: Slackware
Posts: 5,358

Rep: Reputation: 4068Reputation: 4068Reputation: 4068Reputation: 4068Reputation: 4068Reputation: 4068Reputation: 4068Reputation: 4068Reputation: 4068Reputation: 4068Reputation: 4068
Quote:
Originally Posted by Slax-Dude View Post
"There is no spoon"
Do not try to bend the spoon
 
Old 05-03-2021, 06:35 AM   #36
chrisVV
Member
 
Registered: Aug 2010
Posts: 548

Rep: Reputation: 370Reputation: 370Reputation: 370Reputation: 370
Possibly the OP is concerned that the slackware installer by default starts sshd without a firewall and with password login enabled. It also used to do that without testing the strength of the password and (if of low strength) warning the user that she was likely to be open to crackers, but maybe the installer checks password strength now (the libpwqualify package is provided by slackware-current). I thought that poor practice, particularly now that the networks scripts start IPv6 which tends not to be NATed, but it seems to be a policy decision by those who make such decisions.

Or it could be something completely different. Dunno.

Last edited by chrisVV; 05-03-2021 at 06:38 AM.
 
Old 05-03-2021, 06:48 AM   #37
GazL
LQ Veteran
 
Registered: May 2008
Posts: 6,897

Rep: Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019
Yeah nothing to go on here.

Hopefully crts is talking to Pat. All else is noise.
 
2 members found this post helpful.
Old 05-03-2021, 07:51 AM   #38
jr_bob_dobbs
Member
 
Registered: Mar 2009
Distribution: Bedrock, Devuan, Slackware, Linux From Scratch, Void
Posts: 651
Blog Entries: 135

Rep: Reputation: 188Reputation: 188
Quote:
Originally Posted by crts View Post
A few weeks ago I found ways to infiltrate/compromise a Slackware system. I was not actively looking for weaknesses but stumbled upon it, by chance. I know you are all eagerly awaiting 15 to release but this issue should be addressed ASAP.

I am not going to disclose any details, yet, in order to minimize chances of exploitation of the vulnerability. I am, however, willing to work with anyone closely involved in the development of Slackware (except AlienBob) and provide instructions on how to confirm the vulnerability.
I am also willing to cooperate with any maintainer of a derivative of Slackware and check if those systems are affected, too.

I have patches ready for Slackware 14.2. With minor adjustments they should also work for other versions.
I found a biiiiiiiig scawwwwwy baaaaad thing but I won't tell you about it.

Just use my patch to fix a problem that doesn't exist because trust me I know better than you. I totally did not put my own back door in. I will only talk to my man Pat becuase I'm cool like that.
 
1 members found this post helpful.
Old 05-03-2021, 07:53 AM   #39
karlmag
Member
 
Registered: Apr 2014
Distribution: Slackware
Posts: 127

Rep: Reputation: Disabled
Quote:
Originally Posted by GazL View Post
Yeah nothing to go on here.

Hopefully crts is talking to Pat. All else is noise.

Yeah,

Before Pat gets involved there is nothing. Be it in private or out in the open.
And - as per how Pat seems to be doing stuff - he will check/test it and assess if there is any actual, real life problems going on.
If there is anything it'll be dealt with. If not, well...

But just announcing there is a problem and not telling anyone what it is is - on the best of days - Not Helpful!
(The words used in my head for describing this is much less safe for work than the squeaky-clean description above.)

Just my 0.02 <your local currency>

Thanks
--
KarlMag
 
1 members found this post helpful.
Old 05-03-2021, 11:00 PM   #40
Richard Cranium
Senior Member
 
Registered: Apr 2009
Location: McKinney, Texas
Distribution: Slackware64 15.0
Posts: 3,858

Rep: Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225
Quote:
Originally Posted by ZhaoLin1457 View Post
Ummm, what?
Ummm, what? back at you.

Tempting as it would be for me to make a political statement, there have been many cases where individuals in other contexts explicitly express which pronouns should be used to refer to said individuals.

Some of those pronouns appear to be (as far as I can tell) recent inventions. The non-recent English language pronoun that does not assume that you are either male or female is "it".

The OP may not care about such things at all. There are some countries in North America (and some political subdivisions in other countries in the Western Hemisphere) where not referring to an individual with said individual's preferred pronouns is grounds for the government to take you to court and find you guilty of a criminal act.
 
4 members found this post helpful.
Old 05-04-2021, 05:14 AM   #41
GazL
LQ Veteran
 
Registered: May 2008
Posts: 6,897

Rep: Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019Reputation: 5019
Quote:
Originally Posted by Richard Cranium View Post
Ummm, what? back at you.
... with bells on. Post #24 makes no sense at all.

Anyway, based on context, that "it'll" was referring back to the details of the vulnerability being hinted at, not "The OP".


And yes, we now have some absolutely OTT "Hate speech" laws here in the UK.

If some people object to the use of she/he/it, then lets just combine them into a new, singular non-specific pronoun: I'd suggest "sheit"!
 
8 members found this post helpful.
Old 05-04-2021, 06:05 AM   #42
LuckyCyborg
Senior Member
 
Registered: Mar 2010
Posts: 3,500

Rep: Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308
In all honesty, even on Russian (which itself is a genderfied language, just like the Spanish, Italian or French) when cannot be identified the gender of subject(s), it is used the neutral case: Оно, Они - in translation: it, they/them

http://www.russianlessons.net/grammar/pronouns.php

However, from what I heard, the Asian languages like Japanese, Korean, Thai, Chinese uses a particular case of neutral like in "unidentified person" which is different from the (common) neutral applied to non-humans and/or things.

So, probably an Asian may expect a similar grammatical construct even on the foreign languages. Just saying...

PS. I know some details about this because I watched some discussions between linguists who want to add this type of person neutral on Russian, as neologisms.

Last edited by LuckyCyborg; 05-04-2021 at 06:23 AM.
 
5 members found this post helpful.
Old 05-04-2021, 08:54 AM   #43
garpu
Senior Member
 
Registered: Oct 2009
Distribution: Slackware
Posts: 1,537

Rep: Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899
I know in Indonesian there's no grammatical gender, but there are words for man, woman, person. I'm not sure what modern usage is for someone who's nonbinary. "Orang?" Like "orang itu," person over there? I know sometimes "es" gets used in German, but it's not a standard thing, I don't think. It's definitely an ongoing discussion, namely because of the "es/it" connotation, although there are some gendered words, cf "das Mädchen," that are already neutral. (And again I'm out of practice with German, although I could probably opine over music easily.) If I were talking to a nonbinary German person, I'd probably try to sidestep pronouns, unless they told me which they prefer. Always best to err on the side of politeness in a language you don't speak natively.

Always wanted to learn Russian or Korean. Someday!
 
Old 05-04-2021, 06:08 PM   #44
ivandi
Member
 
Registered: Jul 2009
Location: Québec, Canada
Distribution: CRUX, Debian
Posts: 528

Rep: Reputation: 866Reputation: 866Reputation: 866Reputation: 866Reputation: 866Reputation: 866Reputation: 866
Quote:
Originally Posted by crts View Post
I am, however, willing to work with anyone closely involved in the development of Slackware (except AlienBob)
Because he writes perfect code ... I guess



Cheers
 
1 members found this post helpful.
Old 05-05-2021, 07:22 AM   #45
Didier Spaier
LQ Addict
 
Registered: Nov 2008
Location: Paris, France
Distribution: Slint64-15.0
Posts: 11,057

Rep: Reputation: Disabled
I suggested twice to the OP to email Patrick Volkerding if he wants that what he considers to be an issue be assessed. I don't know if he did, anyway I wouldn't mind that this thread be closed.
 
7 members found this post helpful.
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
gpg stalls key management, seahorse enigmail all affected galen Linux - Security 1 08-17-2019 03:00 PM
Slackware NOT affected: Memory corruption bug in systemd, no patches yet sombragris Slackware 61 03-16-2019 10:09 PM
Problem with copying files (not only Slackware affected) 3.1415... Slackware 37 06-22-2016 04:41 AM
What is glibc bug and who can get affected with it? BryanWalters Linux - Security 3 03-01-2016 10:41 PM
gcc versions compatibility with kernel versions.. mahesh_manthapuri SUSE / openSUSE 1 03-22-2006 12:28 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 12:40 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration