Re: [9front] patch your shit

[adventures in9 <adventuresin9@gmail.com>]

hjfs does have the "experimental" warning XD

On Sat, Aug 24, 2024 at 2:23 PM Jacob Moody <moody@posixcafe.org> wrote:
>
> hjfs is not the default install, our number of holes is fine.
>
> On 8/24/24 15:15, Willow Liquorice wrote:
> > e https://9front.org/
> > /Only three remote holes in the default install, in a heck of a long time!/
> > s/three/four
> > w https://9front.org/
> >
> >       - Willow
> >
> > On 24/08/2024 20:08, hiro wrote:
> >> some people did something that increases security apparently. so patch
> >> your shit.
> >>
> >> ref: 07aa9bfeef55ca987d411115adcfbbd4390ecf34
> >> parent: b05c74e7cb160f152e2f2cc2f6e0677763f8d57e
> >> author: Jacob Moody <moody@posixcafe.org>
> >> date: Sat Aug 24 12:58:31 EDT 2024
> >>
> >> lib9p: verify uname against returned AuthInfo from factotum (thanks humm)
> >>
> >> Before this it was possible to Tauth and Tattach with one
> >> user name and then authenticate with factotum using a different
> >> user name. To fix this we now ensure that the uname matches the returned
> >> cuid from AuthInfo.
> >>
> >> This security bug is still pending a cute mascot and theme song.
> >>
> >>
> >> mein name ist hase. bye.
>