Notices by headcrack (headcrack@headcrack.cf), page 9
-
headcrack (headcrack@headcrack.cf)'s status on Wednesday, 12-Jul-2017 02:25:42 CEST headcrack @lattera As long as factor two uses encrypted communication and free software. -
headcrack (headcrack@headcrack.cf)'s status on Wednesday, 12-Jul-2017 00:41:28 CEST headcrack Jarre... https://headcrack.cf/attachment/2482 -
headcrack (headcrack@headcrack.cf)'s status on Wednesday, 12-Jul-2017 00:23:09 CEST headcrack Jarre & Edwards Snowden: "Exit" https://headcrack.cf/attachment/2481 -
headcrack (headcrack@headcrack.cf)'s status on Wednesday, 12-Jul-2017 00:23:06 CEST headcrack livepic... /me @ Jean Michel Jarre in Berlin https://headcrack.cf/attachment/2480 -
headcrack (headcrack@headcrack.cf)'s status on Tuesday, 11-Jul-2017 16:02:23 CEST headcrack @muto Oder gleich Iridium-Flares vorhersagen. "Schatz, ich hab dir eine Sternschnuppe für 9:22 Uhr bestellt, hat mich ein Vermögen gekostet;-)" http://heavens-above.com/IridiumFlares.aspx (Geokoordinaten angeben) -
headcrack (headcrack@headcrack.cf)'s status on Tuesday, 11-Jul-2017 01:37:44 CEST headcrack Taking Control of All .io Domains With a Targeted Registration: https://thehackerblog.com/the-io-error-taking-control-of-all-io-domains-with-a-targeted-registration/ -
headcrack (headcrack@headcrack.cf)'s status on Tuesday, 11-Jul-2017 00:58:28 CEST headcrack Kann mir bitte jemand helfen? Das ist ein Anfänger-Ding! -
headcrack (headcrack@headcrack.cf)'s status on Tuesday, 11-Jul-2017 00:34:29 CEST headcrack This is not a bug within PEAR. Even in that Gnusocial case, socket timeout is a timeout for sockets: The time since a socket disappeared. But that did not happen. There are a some additional, other durations that have been no attention paid before. We need to identify and define them by ourself as timeout. -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 22:20:53 CEST headcrack blocking vs. non-blocking.
But PHP's stream functions are *all* for non-blocking streams, to my knowledge, but it begins to become unclear to remember, I am not shure.
That is kind of a dirty corner and should be *very* carefully cleaned.
And let me hereby tell you, I appreciate your efforts a lot - thank you for your great work. -
Hiker (hikerus@social.bitcast.info)'s status on Monday, 10-Jul-2017 21:45:04 CEST Hiker @vinzv Ich bekomme nichts mehr von gnusocial.de -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 21:56:21 CEST headcrack I can see the problem in line 186 in extlib/HTTP/Request2/SocketWrapper.php, but that timeout is just for socket timeout. There is no socket timeout, the socket is considered alive if it sends a char every x seconds.
We cannot - only- rely on stream_set_timeout. That is a different ball game for handling bad connections.
We need timeouts for the time until there is a reply we can consider valid and the time between now and the last valid reply. Btw a counter for non valid relies seems useful for me, too. -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 21:19:21 CEST headcrack But thats what I'm talking about. Not timing out is correct behaviour. The socket is alive, since it delivers a char every x seconds.
There is no socket timeout.
Could you please tell me, where the pipe code resides, iomaster.php connects to? Please hurry, my name is no joke, I cannot rely on my memory for longer periods, that dissociation is not stable. -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 21:07:04 CEST headcrack http://php.net/manual/en/function.stream-select.php :
"If tv_sec is NULL stream_select() can block indefinitely, returning only when an event on one of the watched streams occurs (or if a signal interrupts the system call)."
lib/iomaster.php: $ready = stream_select($read, $write, $except, $timeout, 0); -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 20:52:23 CEST headcrack It is reported, a server claiming to be a Gnusocial instance slows down communication via https the same way, spamd does it for spammers, just returning one char every x seconds. Thats why I cannot consider it a PEAR bug, since PEAR works correct, even if there is no timeout after 1 year. The socket is clearly alive.
If stream_select connects to pipes to local processes, maybe these pipes are non blocking, but what about the streams being delivered by these local processes? Are these non-blocking, too? -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 20:15:13 CEST headcrack Ist doch zielgruppengerechter... 45+ -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 20:09:14 CEST headcrack Dear Gnusocial developers, please have a look at
lib/iomaster.php, line 136.
stream_select for https.
But whether http nor https are non-blocking streams.
The problem ist known for 13 years: http://php.net/manual/de/function.stream-select.php -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 19:56:02 CEST headcrack Und Bingo!
lib/iomaster.php, Zeile 136.
stream_select für https.
Das ist aber kein non-blocking stream. -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 19:27:00 CEST headcrack Mal angenommen, ich würde mir so etwas wie spamd für mail, bloss für https für port 443 bauen. Und dann leite ich alle Anfragen, die fail2ban sonst via iptables blockt auf dieses socket um.
Ich fände das übrigens praktisch und würde es einsetzen.
-Wenn- ich das machen würde, würde logischerweise der socket_timeout nicht greifen, das Socket liefert ja alle 20 (oder so) Sekunden einen Buchstaben. -Wenn- die daemons zusätzlich zum socket_timeout da keinen "globalen" timeout für den Austausch haben, ist das kein Bug von PEAR, sondern in den daemons. Glaskugel Ende. -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 19:11:11 CEST headcrack Du schreibst, dass du das BIOS vom Thinkpad gemoddet hast, hast du da vll. eine Empfehlung für einen EPROM-Programmer? Würde auch gern zwei Thinkpads befreien. -
headcrack (headcrack@headcrack.cf)'s status on Monday, 10-Jul-2017 18:52:54 CEST headcrack Seit hundert Jahren verlassenes Gehöft: Ein ganzer Hektar Pestwurz. Kurios. Wurde der mal richtig angebaut? In echt sieht das noch viel absonderlicher aus. https://headcrack.cf/attachment/2351