| Time |
Nick |
Message |
| 00:07 |
|
Thermoriax joined #luanti |
| 00:14 |
|
Jisk joined #luanti |
| 00:19 |
|
Jisk joined #luanti |
| 00:36 |
|
Jisk joined #luanti |
| 00:44 |
|
Elouin joined #luanti |
| 00:44 |
|
Jisk joined #luanti |
| 00:52 |
|
crabycowman123 joined #luanti |
| 01:00 |
|
Jisk joined #luanti |
| 01:06 |
|
Jisk joined #luanti |
| 01:14 |
|
Jisk joined #luanti |
| 01:21 |
|
Jisk joined #luanti |
| 01:27 |
|
Jisk joined #luanti |
| 01:32 |
|
SwissalpS joined #luanti |
| 01:32 |
|
Jisk joined #luanti |
| 01:44 |
|
Jisk joined #luanti |
| 01:49 |
|
Jisk joined #luanti |
| 01:54 |
|
Jisk joined #luanti |
| 01:58 |
|
Jisk joined #luanti |
| 02:09 |
|
Jisk joined #luanti |
| 02:26 |
|
Jisk joined #luanti |
| 02:31 |
|
Jisk joined #luanti |
| 02:42 |
|
Jisk joined #luanti |
| 02:48 |
|
Jisk joined #luanti |
| 02:50 |
|
bdju joined #luanti |
| 02:59 |
|
Jisk joined #luanti |
| 03:05 |
|
Spookan joined #luanti |
| 03:15 |
|
Jisk joined #luanti |
| 03:23 |
|
Jisk joined #luanti |
| 03:34 |
|
Jisk joined #luanti |
| 03:40 |
|
Jisk joined #luanti |
| 03:46 |
|
Jisk joined #luanti |
| 03:51 |
|
Jisk joined #luanti |
| 03:59 |
|
Jisk joined #luanti |
| 04:00 |
|
MTDiscord joined #luanti |
| 04:15 |
|
Jisk joined #luanti |
| 04:21 |
|
Jisk joined #luanti |
| 04:26 |
|
Jisk joined #luanti |
| 04:32 |
|
Jisk joined #luanti |
| 05:55 |
|
FeXoR joined #luanti |
| 06:41 |
|
mmww joined #luanti |
| 07:04 |
|
crabycowman123 joined #luanti |
| 07:08 |
|
dudz joined #luanti |
| 08:08 |
|
crabycowman123 joined #luanti |
| 09:02 |
|
vampirefrog joined #luanti |
| 09:24 |
|
vampirefrog joined #luanti |
| 09:42 |
|
vampirefrog joined #luanti |
| 10:06 |
|
Niklp2 joined #luanti |
| 10:06 |
|
Juri2 joined #luanti |
| 10:08 |
|
Meli-sama joined #luanti |
| 10:14 |
|
celeron55 joined #luanti |
| 10:17 |
|
mrkubax10 joined #luanti |
| 10:31 |
|
Pokey joined #luanti |
| 11:48 |
|
PoochInquisitor joined #luanti |
| 12:14 |
|
illwieckz joined #luanti |
| 12:51 |
|
GNUHacker joined #luanti |
| 13:19 |
|
illwieckz joined #luanti |
| 13:40 |
|
mrkubax10 joined #luanti |
| 14:59 |
|
bwarden joined #luanti |
| 16:41 |
cheapie |
One downside of playing around in Luanti too much: every time I go to configure something using meson, I mistype the command as "mesecon" the first time around |
| 16:52 |
heston76 |
lol |
| 17:06 |
|
squeaktoy joined #luanti |
| 17:09 |
cheapie |
Meanwhile, one of the fun parts about running Luanti on a riscv64 CPU - with careful programming, it's possible to write a program, assemble it, run it on the real hardware here and have it do something, then copy/paste the same binary into RVController in-game and have it still work and still do the same thing with no modification |
| 17:10 |
cheapie |
They have different word sizes, but it's possible for a program to be written such that it autodetects it and adjusts accordingly |
| 17:34 |
|
tzenfore joined #luanti |
| 17:56 |
|
mrkubax10 joined #luanti |
| 18:09 |
|
illwieckz joined #luanti |
| 18:12 |
MTDiscord |
<the4spaceconstants2181> running mesecon build should compile luanti for your riscv emulator |
| 18:14 |
cheapie |
TBH about all I'm really missing for something like that (aside from more memory) is interrupts, the privileged architecture, a suitable SBI, and paging |
| 18:24 |
|
badforum joined #luanti |
| 18:25 |
[MatrxMT] |
<repetitivestrain> celeron55: https://pentest-tools.com/research/phpbb-authentication-bypass |
| 18:25 |
[MatrxMT] |
<repetitivestrain> The Luanti forums are vulnerable to an authentication bypass and should be updated post haste |
| 18:25 |
[MatrxMT] |
<repetitivestrain> A friend of mine has already succeeded in signing in to celeron55's account |
| 18:27 |
badforum |
Hi, indeed I did, sorry for being invasive but usually this makes the admins far more likely to patch it ASAP: https://forum.luanti.org/viewtopic.php?p=3861#p3861 I only edited this post, haven't checked any other private things. https://www.phpbb.com/community/viewtopic.php?t=2672170 |
| 18:30 |
MTDiscord |
<rollerozxa> a critical vulnerability discovered in phpbb, what decade is this?? |
| 18:36 |
MTDiscord |
<wsor4035> quick, someone use it to improve the forum |
| 18:37 |
MTDiscord |
<rollerozxa> seems like the ACP is inaccessible since that requires another authentication step... |
| 18:37 |
MTDiscord |
<rollerozxa> also this REALLY should have been a private message to c55 rather than announcing "hey you can log into anyone's account on the forums", especially since you know how the forum is... well, maybe a bit neglected maintenance-wise |
| 18:38 |
badforum |
ACP is available through default phpBB functionality, the article is incorrect in that |
| 18:38 |
MTDiscord |
<rollerozxa> oh that's even worse |
| 18:38 |
MTDiscord |
<rollerozxa> well I guess that's the end of the forums |
| 18:38 |
badforum |
You can't know the admin password of the existing admin accounts so you can't login into ACP from that, but you can make a new account and make it an admin. |
| 18:38 |
badforum |
Then you know the password for ACP |
| 18:39 |
MTDiscord |
<wsor4035> so repetativestrain alt on irc? |
| 18:39 |
badforum |
no, i"m not him |
| 18:39 |
badforum |
im a completely unrelated person, we just chat with repetitivestrain sometimes on other platforms |
| 18:40 |
badforum |
the worst thing that I'm very saddened about is that phpBB is by choice keeping the vulnerability under the wraps, no public CVE yet, and the update announcement is very tame compared to what the vulnerability is |
| 18:40 |
badforum |
if anything they should be screaming about it loudly to at least make some of the somewhat-maintained phpBB forums upgrade before its too late |
| 18:41 |
MTDiscord |
<rollerozxa> yeah the release announcement forum post makes it sound like just a little bugfix release |
| 18:41 |
MTDiscord |
<rollerozxa> I would have expected big bold red text |
| 18:41 |
badforum |
its buried in "Furthermore, two separate improper checks in the previous OAuth implementation could have been used to hijack user accounts. One of these did not require OAuth to be configured or enabled. We’d like to thank Aikido Security (aikido.dev) for reporting to us via HackerOne, as well as Dan Stefan Alexandru of Pentest-Tools.com and |
| 18:41 |
badforum |
Himanshu Anand for reporting to us via email." |
| 18:42 |
MTDiscord |
<rollerozxa> github has an advisory for it but it's not even attached to the phpbb/phpbb repository: https://github.com/advisories/GHSA-24pr-8ggp-h88c |
| 18:43 |
badforum |
oh it was only published 12 hours ago, it wasn't there yesterday, nice |
| 19:41 |
|
Tirili joined #luanti |
| 21:25 |
|
mrkubax10 joined #luanti |
| 21:38 |
|
mrcheese joined #luanti |
| 22:33 |
|
panwolfram joined #luanti |
| 22:35 |
|
illwieckz joined #luanti |
| 22:40 |
|
dabbill joined #luanti |
| 23:01 |
tzenfore |
Does anyone here happen to have a Windows ARM device they could test a build on? I'm finally getting around to building 5.16.1 for Windows ARM, but I lack a Windows ARM laptop to test it on :/ |
| 23:03 |
[MatrxMT] |
<Blockhead256> btw the ACP isn't needed to wreck havoc, I use BanHammer regularly with no further auth needed |
