SpringTank | yes, i am live | 00:15 |
---|---|---|
SpringTank | but where were you when club penguin die? | 00:15 |
SpringTank | i was at home eating chip | 00:15 |
SpringTank | phone ring | 00:16 |
SpringTank | "club penguin is kill" | 00:16 |
SpringTank | no | 00:16 |
BZNotify | feature/site-updates @ bzflag.org: allejo force pushed 1 commit (https://github.com/BZFlag-Dev/bzflag.org/compare/4dc578c12f90...bc4db5ed0b74): | 02:21 |
BZNotify | feature/site-updates @ bzflag.org: allejo bc4db5: Add tabs component styled as manila folder (https://github.com/BZFlag-Dev/bzflag.org/commit/bc4db5ed0b7458ee599f651833949404266804de) | 02:21 |
*** Zehra <Zehra!~Yukari@user/yukari> has joined #bzflag | 02:27 | |
*** Tobbi is now away: Auto away at Tue Dec 3 02:34:12 2024 UTC | 02:34 | |
*** nitroxis <nitroxis!~n@nxs.re> has quit IRC (Ping timeout: 248 seconds) | 04:02 | |
*** nitroxis <nitroxis!~n@nxs.re> has joined #bzflag | 04:18 | |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-98-219-34-189.hsd1.ga.comcast.net> has quit IRC (Read error: Connection reset by peer) | 04:37 | |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-98-219-34-189.hsd1.ga.comcast.net> has joined #bzflag | 04:40 | |
*** Zehra <Zehra!~Yukari@user/yukari> has quit IRC (Quit: Leaving) | 04:43 | |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-98-219-34-189.hsd1.ga.comcast.net> has quit IRC (Ping timeout: 248 seconds) | 05:25 | |
*** dngor <dngor!abuse@syn-104-136-128-209.biz.spectrum.com> has quit IRC (Ping timeout: 248 seconds) | 05:37 | |
*** Sgeo <Sgeo!~Sgeo@user/sgeo> has quit IRC (Read error: Connection reset by peer) | 06:30 | |
*** Tobbi is back | 07:35 | |
*** dngor <dngor!abuse@syn-104-136-128-209.biz.spectrum.com> has joined #bzflag | 07:44 | |
*** FastLizard4 is back | 07:49 | |
*** FastLizard4 is now away: AWAY from keyboard | 07:59 | |
*** FastLizard4 is back | 08:27 | |
*** FastLizard4 is now away: AWAY from keyboard | 08:47 | |
*** dngor <dngor!abuse@syn-104-136-128-209.biz.spectrum.com> has quit IRC (Ping timeout: 260 seconds) | 09:13 | |
*** FastLizard4 is now away: GONE - Screen Detached and Disconnected from IRC (I'm probably asleep, at work, or doing something in real life) | 09:24 | |
*** dngor <dngor!abuse@syn-104-136-128-209.biz.spectrum.com> has joined #bzflag | 09:56 | |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-98-219-34-189.hsd1.ga.comcast.net> has joined #bzflag | 12:01 | |
*** Tobbi is now away: Auto away at Tue Dec 3 12:51:08 2024 UTC | 12:51 | |
*** Tobbi is back | 12:52 | |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-98-219-34-189.hsd1.ga.comcast.net> has quit IRC (Remote host closed the connection) | 12:58 | |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-98-219-34-189.hsd1.ga.comcast.net> has joined #bzflag | 13:00 | |
*** Cobra_Fast is now away: offline | 15:39 | |
*** Cobra_Fast is back | 15:45 | |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-98-219-34-189.hsd1.ga.comcast.net> has quit IRC (Quit: Leaving) | 18:27 | |
BZNotify | feature/site-updates @ bzflag.org: allejo pushed 3 commits (https://github.com/BZFlag-Dev/bzflag.org/compare/bc4db5ed0b74...1f575ba3724c): | 18:33 |
BZNotify | feature/site-updates @ bzflag.org: allejo 74b9f2: Fix several bugs related to tabs component (https://github.com/BZFlag-Dev/bzflag.org/commit/74b9f28f9fec4d05da765c12112b7da5f272e80d) | 18:33 |
BZNotify | feature/site-updates @ bzflag.org: allejo 1fce95: Rewrite Downloads section for each OS (https://github.com/BZFlag-Dev/bzflag.org/commit/1fce959639c6de17c57a1438c74c35adf052eee5) | 18:33 |
BZNotify | feature/site-updates @ bzflag.org: allejo 1f575b: Make buttons a bit more 3D-ish (https://github.com/BZFlag-Dev/bzflag.org/commit/1f575ba3724cba09eff3f888385af4150f4abc43) | 18:33 |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-98-219-34-189.hsd1.ga.comcast.net> has joined #bzflag | 18:34 | |
allejo | blast007: yes, I was intending on using those new Replay server functions and events in a plugin I wanted to build to make sure it all worked and I had everything I needed. lemme review where I left off over the weekend and I'll update the PR | 18:42 |
allejo | last I remember, it was stable in my minimal testing but I can't say that confidently without some more testing | 18:42 |
allejo | also. before I forget, blast007, what's the process of "installing" bz on Windows? do you need to bypass anything like gatekeeper on macos? do you drag and drop the exe somewhere special? etc. | 18:45 |
blast007 | double click and you might have to get past SmartScreen, which usually is just clicking more info and run anyway | 18:45 |
blast007 | I can get more specific info | 18:46 |
blast007 | I'll be looking into some ways to make it trusted | 18:46 |
allejo | any details and screenshots would be appreciated :D i'm working on the downloads page and am adding instructions for each OS on how to install | 18:46 |
blast007 | Sounds like using a Yubikey HSM for EV code signing isn't a good option anymore since it doesn't support 3072-bit RSA, which means it doesn't automatically get trusted by Microsoft SmartScreen. And HSMs that *do* support 3072-bit RSA are around $30,000. :P | 18:47 |
blast007 | (or at least the ones that Sectigo supports) | 18:47 |
allejo | I hear gofundme is good for raising money ;D | 18:48 |
blast007 | there's this now as well: https://techcommunity.microsoft.com/blog/microsoftsecurityandcompliance/trusted-signing-is-in-public-preview/4103457 | 18:48 |
blast007 | so for $10/month, that *might* be all we need | 18:48 |
blast007 | I don't know if it requires any kind of business registration verification for that though. | 18:49 |
allejo | don't we have a business registered already? | 18:54 |
blast007 | ah, from that article "I tried having my identify verified but they are asking for company formation documents, which are not necessary for sole proprietors!" | 18:54 |
blast007 | yes, but there's some other steps needed | 18:54 |
allejo | that's right, more needed to be done for that | 18:55 |
*** FastLizard4 is back | 18:56 | |
blast007 | I'll probably pay the $100 for the Apple dev account and see if I can get that working for 2.4.28. | 18:59 |
allejo | we can split that cost | 18:59 |
blast007 | that's okay. that's far cheaper than an EV certificate was going to be. Those are like $350/year | 19:01 |
allejo | is the apple dev account an annual cost? | 19:01 |
blast007 | yep | 19:01 |
allejo | figured | 19:02 |
blast007 | and double that if you want to do both desktop *and* mobile | 19:02 |
allejo | why don't we qualify for an OSS account? licensing? | 19:02 |
blast007 | oh, do they have that? | 19:02 |
allejo | i could have sworn they had something. but i may be thinking of something else | 19:02 |
blast007 | "Your nonprofit, educational institution, or government entity may be eligible for a fee waiver." | 19:02 |
allejo | https://developer.apple.com/support/fee-waiver/ | 19:03 |
allejo | ah yea, you found it. that's what i was thinking about | 19:04 |
allejo | boo | 19:04 |
blast007 | oh, and I guess I have the YubiKey FIPS version, not the HSM, so I need to check on that further. | 19:20 |
blast007 | maybe that's even *less* useful than I thought. There was one EV cert vendor that had mentioned the FIPS one though | 19:21 |
blast007 | YubiKey 5 FIPS* | 19:22 |
allejo | I really should learn about the different yubikeys at some point. i looked to see what existed for black friday and there were similar variants and I'm like, "nahhhh that's for another day" | 19:23 |
blast007 | fun thing with them is some of them had some firmware issues, and the fix is to just replace them | 19:24 |
allejo | lol | 19:24 |
blast007 | (and I believe they were still selling the ones with issues, so you couldn't be sure you'd get one with the fix) | 19:24 |
blast007 | https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/ | 19:25 |
allejo | lmao | 19:25 |
allejo | love it | 19:25 |
blast007 | I feel like there was another one from a year or two ago at least | 19:25 |
blast007 | https://news.ycombinator.com/item?id=42110901 | 19:26 |
allejo | > The attacks require about $11,000 worth of equipment and a sophisticated understanding of electrical and cryptographic engineering. The difficulty of the attack means it would likely be carried out only by nation-states or other entities with comparable resources and then only in highly targeted scenarios. The likelihood of such an attack being used widely in the wild is extremely low. | 19:27 |
allejo | lol basically, "highly unlikely. so glhf" | 19:27 |
blast007 | Russia, if you're listening... | 19:28 |
allejo | hehe | 19:28 |
*** FastLizard4 is now away: AWAY from keyboard | 19:39 | |
*** FastLizard4 is back | 20:43 | |
*** FastLizard4 is now away: AWAY from keyboard | 20:44 | |
*** dngor <dngor!abuse@syn-104-136-128-209.biz.spectrum.com> has quit IRC (Ping timeout: 248 seconds) | 21:05 | |
*** dngor <dngor!abuse@syn-104-136-128-209.biz.spectrum.com> has joined #bzflag | 21:07 | |
*** FastLizard4 is back | 21:10 | |
*** FastLizard4 is now away: AWAY from keyboard | 21:13 | |
*** dngor <dngor!abuse@syn-104-136-128-209.biz.spectrum.com> has quit IRC (Ping timeout: 276 seconds) | 21:13 | |
*** dngor <dngor!abuse@syn-104-136-128-209.biz.spectrum.com> has joined #bzflag | 21:13 | |
*** Sgeo <Sgeo!~Sgeo@user/sgeo> has joined #bzflag | 22:27 | |
Juest | huh? | 22:44 |
Juest | oh yeah, the different yubikeys are because as a hardening measure the firmware cant be touched once out | 22:45 |
Juest | sup allejo | 22:45 |
Juest | hey good progress blast007 ! | 22:47 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!