Re: [cfarm-users] About incoming tcp for a buildbot for the Stellarium.org project

2018-01-06 Thread Hans via cfarm-users
Hi Babtiste, Baptiste Jonglez wrote on 20180106: > On 06-01-18, Hans via cfarm-users wrote: >> For the http://stellarium.org/ project I want to host a buildbot master that ... > Unfortunately, some of our hosts have firewall policies that we must mostly > cope with. That's wh

Re: [cfarm-users] OT: Spectre and Meltdown cpu bugs

2018-01-06 Thread Paul Hargrove via cfarm-users
We all login to the CFarm system using ssh keys. IF you use agent forwarding AND a key trusted elsewhere, you could be a target of ssh-agent hijacking. -Paul On Sat, Jan 6, 2018 at 2:30 AM, Stas Boukarev via cfarm-users < cfarm-users@lists.tetaneutral.net> wrote: > Do people really process sensi

Re: [cfarm-users] OT: Spectre and Meltdown cpu bugs

2018-01-06 Thread Stas Boukarev via cfarm-users
Well, don’t do that? You already have to trust the farm admins not to do that. I wouldn’t want a compiler farm to slow down because somebody is doing online banking on it. On Sat, 6 Jan 2018 at 21:07 Paul Hargrove wrote: > We all login to the CFarm system using ssh keys. > IF you use agent forwa

Re: [cfarm-users] OT: Spectre and Meltdown cpu bugs

2018-01-06 Thread Stas Boukarev via cfarm-users
Why would I care. They are already on the server, can already do these things. On Sat, 6 Jan 2018 at 19:42 Bart Van Assche wrote: > On 01/06/18 02:30, Stas Boukarev via cfarm-users wrote: > > Do people really process sensitive data on the compiler farm? > > Would you like it if a security bug w

Re: [cfarm-users] OT: Spectre and Meltdown cpu bugs

2018-01-06 Thread Bart Van Assche via cfarm-users
On 01/06/18 02:30, Stas Boukarev via cfarm-users wrote: Do people really process sensitive data on the compiler farm? Would you like it if a security bug would allow someone to log in under your account and abuse your account to perform e.g. a DOS attack or to attempt to hack another server?

Re: [cfarm-users] About incoming tcp for a buildbot for the Stellarium.org project

2018-01-06 Thread Baptiste Jonglez via cfarm-users
Hi, On 06-01-18, Hans via cfarm-users wrote: > It seems most (all?) cfarm machines no longer allow incoming tcp connections > (other than tcp/22 ;-) . And TCP/443 too, for most of them :) > For the http://stellarium.org/ project I want to host a buildbot master that > needs two incoming tcp conn

[cfarm-users] About incoming tcp for a buildbot for the Stellarium.org project

2018-01-06 Thread Hans via cfarm-users
Hi volunteers, It seems most (all?) cfarm machines no longer allow incoming tcp connections (other than tcp/22 ;-) . For the http://stellarium.org/ project I want to host a buildbot master that needs two incoming tcp connections, as well as 1 outgoing tcp connection. I ran this for years on gcc14

[cfarm-users] gcc10 Unreachable for 3 months now, will it come back ?

2018-01-06 Thread Hans via cfarm-users
Hi volunteers, gcc10 is unreachable for 3 months now [1], will it ever come back ? -- Hans [1] https://cfarm.tetaneutral.net/machines/list/ ___ cfarm-users mailing list cfarm-users@lists.tetaneutral.net https://lists.tetaneutral.net/listinfo/cfarm-user

Re: [cfarm-users] OT: Spectre and Meltdown cpu bugs

2018-01-06 Thread Segher Boessenkool via cfarm-users
On Fri, Jan 05, 2018 at 09:21:23PM -0500, Jeffrey Walton via cfarm-users wrote: > It looks like PoCs are starting to be released for the CPU bugs. Or > there's a PoC in the wild for ARM processors. The farm may want to > accelerate deployment of the fixes if it has not done so. We'll just do the d

Re: [cfarm-users] OT: Spectre and Meltdown cpu bugs

2018-01-06 Thread Stas Boukarev via cfarm-users
Do people really process sensitive data on the compiler farm? On Sat, Jan 6, 2018 at 5:21 AM Jeffrey Walton via cfarm-users < cfarm-users@lists.tetaneutral.net> wrote: > Hi Everyone, > > It looks like PoCs are starting to be released for the CPU bugs. Or > there's a PoC in the wild for ARM proces