mastodon.ie is one of the many independent Mastodon servers you can use to participate in the fediverse.
Irish Mastodon - run from Ireland, we welcome all who respect the community rules and members.

Administered by:

Server stats:

1.6K
active users

#busybox

1 post1 participant0 posts today

Nutzt hier wer #BusyBox? Eine Lücke in tar kann genutzt werden um Geräte zum Absturz zu bringen oder sich root-rechte zu verschaffen. BusyBox findet sich auf vielen Embedded-Geräten wie Routern (z.B. #OpenWRT), #SmartTV, Streaming-Sticks oder Containersystemen (z.B. #alpine

IMO aber eher theoretisch, da man dafür augenscheinlich erst mal (unpriviligiert) an das System rankommen muss.

mastodon.social/@campuscodi/11

Text that reads: A: n the context of security vulnerability disclosure, the term
"embargo" refers to an agreed-upon period of time during which details
of a discovered vulnerability are kept confidential. This allows
affected parties (such as software vendors, maintainers, or downstream
distributions) time to prepare and release patches or mitigations
before the vulnerability becomes public.

The list is public, hence agreed immediately to disclosure or the
30-days confidential period past invaine (or just a template). Anyway,
good time to list those systems that are impacted and those that are
not affected by this vulnerability.
MastodonCatalin Cimpanu (@campuscodi@mastodon.social)Attached: 1 image A security researcher has accidentally published the details of a BusyBox bug that can be abused to crash IoT devices, gain root privileges, or plant persistent backdoors https://lists.busybox.net/pipermail/busybox/2025-August/091665.html
Replied in thread

@blinry @b0rk

You really should tell the #BusyBox people about that C bug in the feature autodetection.

I recently had to update a whole lot of K&R code (written a decade after C89) for similar reasons. I even had a similar autodetection break.

C99 has and C23 is even more going to hit a lot of old codebases where people wrote things K&R style, sadly in the cases of many of them well after #StandardC came into existence.

Replied in thread

@katyswain I din't think that #CCSS is good either, but the demands of #GPLv3 are not compatible with the (adnitteldy shitty) reality of how #IP, #Licensing and #Patents work and thus it kneecaps a lot of things.

I chose #0BSD for _OS/1337 because as with any "intellectual labour", one cannot force others to collaborate and I'd rather have people join in out of the goodness of their hearts instead of just dumping some random git commit that is useless.

Future of OSU Open Source Lab in Jeopardy

"Over the past several years, we have been operating at a deficit due to a decline in corporate donations" ... "recent changes in university funding makes our current funding model no longer sustainable."

"Unless we secure $250,000 in committed funds, the OSL will shut down later this year."

osuosl.org/blog/osl-future/

OSL provides hosting for over 500 Free and Open Source Projects from all over the world.

osuosl.orgOSU Open Source LabA nonprofit organization working for the advancement of open source technologies.
Replied in thread

@burnoutqueen the problem is that #enforcing #copyleft doesn't get you a single line of code improvements.

In an ideal world it would, but we all know that's not the case.

  • Consider #BSD-licensed alternatives a competiton, which is more likely to get contributions back (again, Rob Landley can most likely attest to that) from corporations and see it as a motivation for copyleft-licensed projects to step up their game!
Replied in thread

@target

@cstross isn't even joking, I think.

Both BusyBox and ToyBox actually do have an init program, a getty program, and a login program.

BusyBox also has the Almquist shell. ToyBox has a Landley shell. BusyBox even has runit.

It is possible to have a system where even if you are doing various things in a shell you're just invoking the same program image over and over, using all of the same code that is there in process #1.

Continued thread

GOOOOD NEWS EVERYONE! (/ref)

#Bim (although not in #Kuroko fully but still uses Kuroko to an extent) and Kuroko itself work in #Musl on a bare kernel! I'm only using #BusyBox and util-linux (which are the only non-Kuroko tools)! Everything including the #Linux kernel is compiled to Musl.

I'm calling this Lunaris. Yes I reuse names from failed projects of mine a lot. This is very volatile. One wrong move and I need to remake the rootfs or the disk image or packages... I hate it.

Replied in thread

@AugierLe42e I assume that port is fixed to a specific USB Hub / Controller / Port and the button is similarly linked to some GPIO / I²C / PS/2 port...

  • What you can do is check lsusb for #USB devices and see if the specific port in question has a USB mass storage device or SATA bridge chip attached to it when said button is pressed.

If #QNAP used #Linux they should've provided those drivers / scripts as part of their #GPLv2 obligations to buyers/owners of said #NAS boxes.

  • Just don't expect any of that code to be useable, as @landley can attest from the #BusyBox license enforcement…

Either way if you can reliably identify the port & detect the button presses that should be sufficient to build like a #bash or #python script to basically detect the drive, mount it and cp -r /dev/$DRIVE/ /home/copied_drives/$LABEL/

  • It may need some fiddling and will most likely only work reliably on unencrypted drives with ext2-ext4, btrfs, ntfs, fat32, exfat filesystems...

Pretty shure you'll have to tweak a bit unless you want to use /dev/by-uuid/$UUID and the UUIDs of the partitions as name...

❤️ With all the installations on #GNU/#Linux (servers, vms, desktop, ... ), #BSD and #Unix systems, #MacOS, #Microsoft #Windows and WLS) I feel comfortable to claim there or way more than 1 billion installations of Vi*; often without people knowing about it.❤️

❤️ Thank you Bram Moolenaar, Christian Brabandt, the whole #Vim community, and all the people from projects like #NeoVIM, #Nvi, #Busybox #Vi, who develop and maintain their #vim flavour. ❤️

k7r.eu/thank-you-for-the-edito ❤️ #ilovefs ❤️

Hey #linux community, I wanna play around with more distros and stuff. Particularly ones that isn't #systemd but might use #busybox. Right now I have #voidlinux & #devuan in my head.

I mean I could just go to #distrowatch & use filters but I like hearing people's personal experience about these distros and I'll admit I'm really lazy browsing forums and discussions right now. 😅

I've already tried #gentoo, #alpine, and #slackware. Also no #linuxfromscratch #lfs. That's for waay later taters.