/prog/ - FLOSS dev being a rude, uneducated, dismissive lout

Name: Anonymous 2019-01-19 19:04

https://web.archive.org/web/20190119162021/https://trac.videolan.org/vlc/ticket/21737

Name: Anonymous 2019-01-19 20:49

Welcome to the world of Open Source.

Name: fgh 2019-01-19 21:11

hj

Name: fgh 2019-01-19 21:11

ghjkl

Name: fgh 2019-01-19 21:11

ghjkl

Name: Anonymous 2019-01-20 20:15

Not only dumb but also an asshole about it. Thanks, linux!

Name: Anonymous 2019-01-21 0:52

OP has no threat model

Name: Anonymous 2019-01-21 5:58

Imagine for a second Steve Jobs or Bill Gates weren't like this at all.

Name: Anonymous 2019-01-21 7:04

make your're are game

Name: THREAT MODEL 2019-01-21 9:09

The attack you suggest, if it is possible, is not trivial to describe judging by the size of the description.

An attack that takes 5 sentences of natural English is "not trivial"?
Double digit IQ detected.

Name: Anonymous 2019-01-21 9:12

>>10
check my double digits

Name: Anonymous 2019-01-21 9:17

>>10
The idea is so basic, it even has its own wiki article.
https://en.wikipedia.org/wiki/Session_hijacking#Prevention

Name: Anonymous 2019-01-21 9:19

It's the same guy! https://www.reddit.com/r/apple/comments/h6jmp/r%C3%A9mi_deniscourmont_the_asshole_who_got_vlc_off/

Name: Anonymous 2019-01-21 9:23

>>12
that's not session hijacking because there are no cookies/sessions here. it's DNS hijacking (which can also be used to perform session hijacking, but malicious update is a bigger threat than stealing cookies, because it gives you code execution as an already installed program that the victim trusts): https://en.wikipedia.org/wiki/DNS_hijacking

Name: Anonymous 2019-01-21 9:36

>>14
DNS hijacking, BGP highjacking, the server itself being compromised, etc

Name: Anonymous 2019-01-21 9:40

>>14
Fortunately this glaring flaw is being closed with DNS-over-HTTPS, its enabled on Firefox v62+

Name: Anonymous 2019-01-21 9:41

>>16
Firefox will surely fix bugs in VLC!

Name: Anonymous 2019-01-21 9:45

>>17
If you download updates manually, it will.

Name: Anonymous 2019-01-21 9:46

>>18
which is completely unrelated to a bug in auto-update, anus

Name: Anonymous 2019-01-21 9:59

>>16
Wrong, DNS-over-HTTPS will not help you if the incorrect DNS info is stored in the DNS server. Also, dnscrypt/dnscurve/dnsoverquic are faster, more popular, you can already use them globally for your whole os, and do not depend on TLS.

Name: Cudder !cXCudderUE 2019-01-21 13:01

More like "paranoid idiotic authoritarian security guard being a bully".

Name: Anonymous 2019-01-21 13:58

>>21
make your're are browser and check my dubs

Name: Anonymous 2019-01-21 20:05

>>1
The updates are signed, so this is a non-issue.

Name: Anonymous 2019-01-22 8:59

>>23
His hateful attitude is the issue.

Name: Anonymous 2019-01-22 17:20

Rémi Denis-Courmont, the hateful incel-programmer king.

Name: Anonymous 2019-01-23 9:27

Anyone enjoying https://justi.cz/security/2019/01/22/apt-rce.html ?

Name: Anonymous 2019-01-25 10:26

>>26
Russian link, don't click.

Name: Anonymous 2019-01-25 10:32

>>27
make your're are game

Name: Anonymous 2019-01-25 18:50

DUBS CLAIMED

Name: Anonymous 2019-01-25 19:49

Fork it then

Name: Anonymous 2019-02-04 11:11

proprietary devs being rude, uneducated, dissmissive louts on a more serious security bug: https://www.nbcnews.com/tech/security/how-teenage-fortnite-player-found-apple-s-facetime-bug-why-n963961

Name: Anonymous 2019-02-04 11:12

>>31

"I love Apple products and will continue to use them," Thompson said. "Obviously I am disappointed and concerned that this happened and hope they address the issue quickly."

stockholm syndrome is real

Name: Anonymous 2019-02-04 11:21

don't rudely dismiss my dubs

Name: Anonymous 2019-02-15 16:15

better than the systemd guy

Name: Anonymous 2019-02-15 16:16

better than the systemd guy

Name: Anonymous 2019-02-17 4:38

>>35

Poettering is a hero!!!!!!!

Name: Anonymous 2019-02-18 17:01

>>36
eternally buttblasted

FLOSS dev being a rude, uneducated, dismissive lout

1 Name: Anonymous 2019-01-19 19:04

2 Name: Anonymous 2019-01-19 20:49

3 Name: fgh 2019-01-19 21:11

4 Name: fgh 2019-01-19 21:11

5 Name: fgh 2019-01-19 21:11

6 Name: Anonymous 2019-01-20 20:15

7 Name: Anonymous 2019-01-21 0:52

8 Name: Anonymous 2019-01-21 5:58

9 Name: Anonymous 2019-01-21 7:04

10 Name: THREAT MODEL 2019-01-21 9:09

11 Name: Anonymous 2019-01-21 9:12

12 Name: Anonymous 2019-01-21 9:17

13 Name: Anonymous 2019-01-21 9:19

14 Name: Anonymous 2019-01-21 9:23

15 Name: Anonymous 2019-01-21 9:36

16 Name: Anonymous 2019-01-21 9:40

17 Name: Anonymous 2019-01-21 9:41

18 Name: Anonymous 2019-01-21 9:45

19 Name: Anonymous 2019-01-21 9:46

20 Name: Anonymous 2019-01-21 9:59

21 Name: Cudder !cXCudderUE 2019-01-21 13:01

22 Name: Anonymous 2019-01-21 13:58

23 Name: Anonymous 2019-01-21 20:05

24 Name: Anonymous 2019-01-22 8:59

25 Name: Anonymous 2019-01-22 17:20

26 Name: Anonymous 2019-01-23 9:27

27 Name: Anonymous 2019-01-25 10:26

28 Name: Anonymous 2019-01-25 10:32

29 Name: Anonymous 2019-01-25 18:50

30 Name: Anonymous 2019-01-25 19:49

31 Name: Anonymous 2019-02-04 11:11

32 Name: Anonymous 2019-02-04 11:12

33 Name: Anonymous 2019-02-04 11:21

34 Name: Anonymous 2019-02-15 16:15

35 Name: Anonymous 2019-02-15 16:16

36 Name: Anonymous 2019-02-17 4:38

37 Name: Anonymous 2019-02-18 17:01

Name: Anonymous 2019-01-19 19:04

Name: Anonymous 2019-01-19 20:49

Name: fgh 2019-01-19 21:11

Name: fgh 2019-01-19 21:11

Name: fgh 2019-01-19 21:11

Name: Anonymous 2019-01-20 20:15

Name: Anonymous 2019-01-21 0:52

Name: Anonymous 2019-01-21 5:58

Name: Anonymous 2019-01-21 7:04

Name: THREAT MODEL 2019-01-21 9:09

Name: Anonymous 2019-01-21 9:12

Name: Anonymous 2019-01-21 9:17

Name: Anonymous 2019-01-21 9:19

Name: Anonymous 2019-01-21 9:23

Name: Anonymous 2019-01-21 9:36

Name: Anonymous 2019-01-21 9:40

Name: Anonymous 2019-01-21 9:41

Name: Anonymous 2019-01-21 9:45

Name: Anonymous 2019-01-21 9:46

Name: Anonymous 2019-01-21 9:59

Name: Cudder !cXCudderUE 2019-01-21 13:01

Name: Anonymous 2019-01-21 13:58

Name: Anonymous 2019-01-21 20:05

Name: Anonymous 2019-01-22 8:59

Name: Anonymous 2019-01-22 17:20

Name: Anonymous 2019-01-23 9:27

Name: Anonymous 2019-01-25 10:26

Name: Anonymous 2019-01-25 10:32

Name: Anonymous 2019-01-25 18:50

Name: Anonymous 2019-01-25 19:49

Name: Anonymous 2019-02-04 11:11

Name: Anonymous 2019-02-04 11:12

Name: Anonymous 2019-02-04 11:21

Name: Anonymous 2019-02-15 16:15

Name: Anonymous 2019-02-15 16:16

Name: Anonymous 2019-02-17 4:38

Name: Anonymous 2019-02-18 17:01