Tanuki-Computing

Tanuki-loving Tanuki Shill

@Tanuki-Computing

♥Be the Freak you want to see♥

  • They/them

☙Mid twenties, 🇩🇪, White, Bi, Enby, English second language, autistic, actual Tanuki❧.

☛18+ Only☚. Will be horny on main.

If there’s a post of mine, that you think is missing a tag— don’t hesitate to ask 😊

Also running the account “SuperSonicoOfficial”

Pfp sprites taken from here♥.
“Pathetic Man lover” blinkie by @CosmicRot
“Twink Lover” blinkie by @pdf
Xenia button taken from here
Button sources— 1, 2, 3, 4, 5

♡♥♡
A red square. Xenia the Linux fox’s face is seen on the left, next to her is the text: “Powered by LINUX”A gif of a shark swimming quickly around a hamburger. The word “Borgor” is written at the topA red square with a smiling face on it. There’s text that says: “I’m gonna eat you”. The image is noticably compressed
··
A black square with a red, blinking outline. Written in the center is: “EVIL AUTISM”
A pink square with a red, blinking outline. Written in the center is: “twink lover”
☻☺☻☺
A gray square. On it is a skull and corssbones with the text: “Piracy Now!”A gray square. On it is the Quake logo spinning, with the text: “Get Quake Now!”A gray square. On it is a spinning cat face from the game Yume Nikki, and the text: “Dream Now!”A gray square. On it is the Copeland OS logo from Serial Experiments Lain, with the text: “copeland os Now!”
A gray square. On it is Hatsune Miku’s face, with the text: “Vocaloid Now!”A gray square. On it is Lilith, from the movie: “End of Evangelion”, with the text: “Third Impact Now!”A gray square. On it is a spinng floppy disk, with the text: “Pass the Shareware please”A gray square. On the right there’s an image of two connected computers, both having a heart on their screens. There’s also text that reads: “Sharing is caring... seed your torents!
A gray square. On it is a graphic of the letter E, with text that reads: “Eat me now!”A gray square. On it is a marijuana leaf, with the text: “Legalize now!”. The image is noticeably compressed.A gray square. On it is a German flag and the text: “This site contains German Blödsinn”.A gray square. On it is a rotating pentagram, to the left is the text: “Google Chrome is evil!”.
I like ComputerA black square. On it are the logos of several diffrent web broswer, with the text: “Best viewed with any Browser”A graphic of a smiley hittting an ape with a hammer. To the left is the text: “No Fucking Thanks”, the first letter of each word is highlighted in red.A gray square. On it is a blue paw print, with the text: “made with my own two paws”
Madotsuki from Yume Nikki, sitting in a field of white flowers. To the right of Madotsuki, the words Yume Nikki are written in hiragana.The words Death Grips, to the left is a figure in a white hoodie.A cat, with the word “Pingus” in the lower left.Bob from Animal Crossing spinning, a happy expression on his face. Next to him are the words: “Powered by Bob”.
A gif of Ralsei from Deltarune smokingA closeup of Lain, from Serial Experiments Lain’s eyes. A TV filter is put over the image.An animation of Kagamine Len rocking his head back and forth.Susie and Kirs from the game Deltarune. At the bottom text reads: “Kris, where tf are we?”
A rainbow flagA bisexuality flag“This User is a Pac-Man Lover”

⚠️This User has the kind of penis autism that causes delusions⚠️

log inask
Tanuki-Computing
@Tanuki-Computing
gabu
@gabu
DecayWTF
@DecayWTF

Since it seems like there's been a lack - real or perceived - of simple information about the SSH compromise:

  • An important system library, xz, was hacked recently by one of the maintainers of said library.
  • The compromised code has been out in some form since February 24th.
  • Most Linux operating systems should be updated as soon as possible; if you know you haven't updated anything since before February 24th, don't until your distro says it's safe.
  • SteamOS is not affected.
  • MacOS is not directly affected, but the compromised library is in Homebrew so if you use that, you should update as well.
  • Windows is not affected, but Linux running in WSL can be so update that too.

If none of this is anything that means anything to you, you probably don't have anything to worry about.

Footnote: If you want to check if you have a crocked version of xz, run xz -V at the command-line. Versions 5.6.0 and 5.6.1 are the versions with the compromise.

You must log in to comment.

in reply to @DecayWTF's post:

modulusshift
@modulusshift

Thanks for the quick info, and while I'm gonna go do my own research on this my first thought it: what does an admittedly fundamental compression library have to do with an SSL compromise?

login to reply
DecayWTF
@DecayWTF

Complex series of dependencies detailed in the CVE but the short version is that some distributions (Debian especially) build SSH to link against liblzma and the compromise appears to be targeted at that case. It seems like other distros are not really affected but the compromise is pretty deep and we still don't know if there's other activation vectors.

login to reply
nys
@nys

here’s the relevant part from the original report on openwall as sometimes the lack of formatting can make these big technical reports hard to parse:

openssh does not directly use liblzma. However debian and several other distributions patch openssh to support systemd notification, and libsystemd does depend on lzma.

login to reply
nys
@nys

the top comment on the ars technica article about this is like “using systemd was not the problem you troglodytes they would’ve just compromised a different library”

login to reply
M00se0nTheLoose
@M00se0nTheLoose

Is there a spot where I can check to see if/ when it's okay to update Ubuntu or raspbian? Both the computers I have running those seem to be in the clear when I run the xz- V command, but I'm not sure where info would be published by either Ubuntu or whoever makes Raspbian to know when it's safe to update again?

login to reply
Pinned Tags