home bbs files messages ]

Just a sample of the Echomail archive

Cooperative anarchy at its finest, still active today. Darkrealms is the Zone 1 Hub.

   SYNC_SYSOPS      Synchronet Multinode BBS Software Suppor      33,243 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 30,322 of 33,243   
   Rick Parrish to GitLab note in main/sbbs   
   Shroedinger's Variable?   
   09 Sep 24 20:38:22   
   
   TZUTC: -0700   
   MSGID: 56302.sync_sys@1:103/705 2b45d11c   
   PID: Synchronet 3.20a-Linux master/e93b6dfa6 Aug 22 202 GCC 12.2.0   
   TID: SBBSecho 3.20-Linux master/d84b8e3d6 Sep 09 2024 18:29 GCC 12.2.0   
   BBSID: VERT   
   CHRS: ASCII 1   
   https://gitlab.synchro.net/main/sbbs/-/issues/782#note_5610   
      
   > That's interesting - I guess it solved the immediate problem for the sysop   
   and appeared fixed, even if the string wasn't what I intended to generate.   
      
   The generated csrf_token was significantly shorter than the fully-broken   
   version, so likely it didn't exceed whatever limit the fully-broken version   
   was hitting.   
      
   > The problem now is ... how many scripts in our codebase have similar   
   "problems"   
      
   I'm actually leaning towards NOT merging the input garbage workaround into   
   master, because as you said it probably leaves other hidden problems that   
   could do who knows what damage.  Leaving it un-worked-around means it could   
   act as a litmus test for future js-related bug reports that only seem to   
   affect pis.  @rswindell any thoughts on whether to merge the workaround or not?   
      
   Also, I found a cloud provider that rents pis, and things work great there   
   without any workarounds.  I noticed it was a 32bit install vs my qemu install   
   being a 64bit install, and as far as I can tell Armbian (what the sysop who   
   reported the bug is running) only comes in 64bit.  Not a big enough sample   
   size to say anything for sure, but it does make me wonder if 64bit is the   
   problem, and the solution to future js-on-pi bug reports is "install a 32bit   
   os instead".   
   --- SBBSecho 3.20-Linux   
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)   
   SEEN-BY: 10/0 1 90/1 102/401 103/1 17 705 105/81 106/201 124/5016   
   SEEN-BY: 153/7715 214/22 218/0 1 215 601 700 720 840 860 870 880 930   
   SEEN-BY: 226/30 227/114 229/110 114 206 317 400 426 428 470 550 700   
   SEEN-BY: 229/705 266/512 280/464 282/1038 291/111 301/1 320/219 322/757   
   SEEN-BY: 342/200 396/45 460/58 633/280 712/848 5075/35   
   PATH: 103/705 218/700 229/426   
      

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca