[00:36] Evening [01:04] everyone here is from michigan? [01:10] yeah most of us are, but some are in other places... [01:13] cool [01:14] some have moved. :) [01:17] * greg-g looks around [01:18] greg-g you're still in CA, yes? [01:18] unless i'm wrong [01:18] yep! [01:18] in Petaluma, which is about 40 miles north of SF [01:18] ah yes [01:18] but you're still a Michigander at heart. [01:18] we'll keep ya [01:18] :) [01:19] northwoods, really [01:19] I'll take MN, WI, or MI [01:21] :) [03:19] t ls router [03:19] heh [10:57] morning [11:35] morning [12:11] <_stink_> yo [12:29] yo [13:04] update your bash again http://www.ubuntu.com/usn/usn-2364-1/ [13:04] http://goo.gl/jgzzjG - USN-2364-1: Bash vulnerabilities | Ubuntu [13:13] Morning [13:14] And lovely. [14:10] @sil: tempted to make a shellshock worm which only attacks those with zsh installed, just to marginally decrease the world's wrongly-smug quotient [14:11] lol [14:11] well it would only work if webservers used zsh as their default shell [14:11] which seems really unlikely [14:13] So basically we'd have complete ownership over bookie. ;) [14:15] does anybody know if it's possible to upgrade the kernel without rebooting? somebody who i generally consider pretty knowledgeable is saying he has 432 days of uptime but uname -r is saying his kernel is updated [14:26] I think we mentioned this at the past CHC. I've always associated kernel upgrade w/ reboot [14:26] Google search turned up ksplice. [14:27] as well as kgraft and kpatch [14:27] SO it appears possible [14:28] Though I'm of a mind that a reboot every now and again is a "good thing"TM [14:28] If nothing else it cleans out the cruft. [14:28] Also turning off the power for 10 secods to drain out the capacitors for memory [14:29] and give your power supplies a nice jolt to let them know it's time to fail [14:34] mrgoodcat: I think you, can but it involves some really deep voodoo [14:35] https://www.ksplice.com/ [14:35] http://goo.gl/AaNbO - Never Reboot Linux for Linux Security Updates | Ksplice [14:35] Or paying Oracle, it seems [14:35] he says he isn't using any magic things [14:36] he thinks you just don't need to reboot after a kernel update [14:36] So he's installing the new kernel but still running on the original [14:36] yea afaict [14:36] but he's on debian wheezy so the kernel version number isn't bumping on security updates. so i can't tell which package he is running [14:37] the kernel he booted with has the same version number as the current package version [14:37] so uname -r doesn't help [14:45] mrgoodcat: I think Arch has the magic voodoo baked in [14:45] but unaware of Debian packaging it [14:46] mrgoodcat: or rather unaware of Debian shipping with it by default [14:47] try searching for ksplice, kpatch, or kgraft in the packages list [14:48] It appears that ksplice is packaged for Ubuntu [14:52] Hah, I was thinking earlier that I should listen to some Ozric Tentacles this morinng [14:53] put the Squeezebox on random album shuffle and this came up: [14:53] .np squeekyhoho [14:53] squeekyhoho's current track - Cat DNA by Ozric Tentacles on Become The Other [14:53] Actually it's Spice Doubt [15:02] arch does not have the voodoo baked in. i just had to reboot my server this morning to get the new kernel running [15:21] debian and ubuntu don't use bash as their default shell. they use dash. It doesn't lessen the impact of shellshock. [15:21] or maybe it does lessen it, but it is still scary. [15:22] it is still scary [15:22] also, some services may explicitly use bash as their default shell in /etc/passwd [15:22] May, but don't by default AFAIK [15:22] hrm, seems the postgres account does. [15:23] nginx too iirc [18:02] mrgoodcat: i have nginx installed. it doesn't install a special account. [18:02] mrgoodcat: it uses www-data, just like apache. [18:03] mrgoodcat: nginx MIGHT be vulnerable if a cgi uses /bin/bash, just like apache. [18:03] http://www.dailymail.co.uk/news/article-2351881/Inside-Americas-worst-hotel-The-stomach-churning-reviews-guests-stayed-legendary-Detroit-dump-shut-down.html admit I've been in a room, but not slept. [18:03] http://goo.gl/hDnxZ - Inside America's worst hotel: The stomach-churning reviews from guests who stayed at legendary Detroit dump before it shut down | Daily Mail Online [19:16] I think I need someone to watch my butt because it feels like I'm dragging it behind me [19:17] I don't want to accidentally lose it. [19:18] <_stink_> you used to be able to put an ad for that on craigslist [19:18] <_stink_> no pun intended [19:19] seriously? [19:19] <_stink_> no it's a bad joke about adult services. [19:19] <_stink_> ColonelPanic001: please laugh [19:20] hah [19:20] <_stink_> thanks [19:20] * ColonelPanic001 bills _stink_ for services rendered [19:20] <_stink_> >:| [19:35] heh [19:36] I think I'm going to bill _stink_ for mental images rendered. [19:37] <_stink_> mail returned: recipient not at this address [19:38] I sent a bitcoin bill [19:39] <_stink_> damn! === mulka_ is now known as mulka [21:10] I think I'm going to stop subscribing to This Week in Tech [21:11] the last episode where Baratunde and the guy who wrote "Hatching Twitter" talked over Steve Gibson made me mad. [21:12] I think the words "what is the practical application of ..." should be a signal to anyone that they're being an idiotic pundit. [22:35] osx just updated bash [22:35] way to be on your game apple [22:52] anybody heard of vipe? [23:05] mrgoodcat: That means that someone out there is still using XServe. :) [23:05] what do you mean? [23:05] Apple updating bash. :) [23:06] http://en.wikipedia.org/wiki/Xserve [23:06] http://goo.gl/XuXRDG - Xserve - Wikipedia, the free encyclopedia [23:07] right i get that, why does apple updating bash have anything to do with xserve though? [23:07] clients are affected too [23:07] I'm just messing [23:07] ah [23:07] because DHCP clients are vulnerable if i'm understanding properly [23:07] Only on evil networks [23:09] right [23:09] well 'evil' is assumed when talking about vulns [23:10] I think you can still run xserve in a VM on OSX [23:11] probably [23:11] WMU still uses XServe [23:11] i had to administer it