#editorial | Logs for 2017-05-02
« return
[00:32:48] <TheMightyBuzzard> ~eds yall reckon we can get the intel story pushed out asap?
[00:32:50] <exec> editor ping for TheMightyBuzzard (reason: yall reckon we can get the intel story pushed out asap?): janrinok zz_janrinok n1 nick martyb Bytram cmn32480 coolhand takyon bytram|away Fnord666 charon GreatOutdoors FatPhil Snow goodie mrpg
[00:34:26] <Bytram> I'm already working on it! =)
[00:34:55] <Bytram> You may not be feeling entirely up to snuff... me neither. worked 8 days straight and am just a *little* bit tired... but am trying to get it out atm.
[00:39:03] <Bytram> TheMightyBuzzard: Intel firmware story now in the queue
[00:39:14] <Bytram> https://soylentnews.org
[00:39:16] <upstart> ^ 03Error
[00:39:17] <exec> └─ 13Error
[00:42:45] <TheMightyBuzzard> Bytram, you mind pushing it out immediately? i got some corporate folks i wanna send the link to ASAFP and ours is shorter.
[00:42:59] <Bytram> okay... give me a mnute
[00:43:48] <TheMightyBuzzard> appreciated. with the hundreds of millions of computers vulnerable, i think this qualifies as breaking news as well.
[00:44:11] <Bytram> current ts for story to be displaced: 2017-05-01 22:47:00
[00:44:44] <Bytram> the other ts to swap with: 2017-05-02 11:41:00
[00:47:20] <Bytram> bah... grabbed the wrong story to move
[00:47:56] <TheMightyBuzzard> just don't bother spacing them
[00:47:58] <chromas> What happens if two publish as the same time?
[00:47:58] <Bytram> here is the ts that will be superceded: 2017-05-02 00:32:00
[00:48:11] <TheMightyBuzzard> nothing, they both go out
[00:48:26] <Bytram> ~time x
[00:48:28] <exec> Tuesday, 2 May 2017 @ 12:48 am UTC - Coordinated Universal Time
[00:49:58] <TheMightyBuzzard> chromas, i expect they'll get ordered by sid if the ts matches exactly but both will hit the front page.
[00:50:38] <Bytram> hmmm, never used it before... "[x] Fastforward" checkbox
[00:50:46] <Bytram> does that mean ... release it now!
[00:50:46] <Bytram> ??
[00:50:58] <TheMightyBuzzard> dunno
[00:51:08] * Bytram clones tab,
[00:51:11] <Bytram> clicks checkbox
[00:51:13] <Bytram> hits update
[00:51:25] <chromas> yep
[00:51:39] <TheMightyBuzzard> cheers. i got fuckups to mitigate
[00:51:43] <TheMightyBuzzard> back later
[00:51:44] <Bytram> nope... made no change in the time stamp I had
[00:51:50] <chromas> it's live for me
[00:52:23] <Bytram> hey! NEAT!!!
[00:55:24] * Bytram cleans up story queue spacing
[00:56:20] <Bytram> okay, done.
[00:57:39] <chromas> Need a ripple-edit button
[01:00:17] <Bytram> I've coded something that runs on my system that takes two args: (1) an offset for the number of stories to skip and (2) number of minutes. It gets the selected story's date/time stamp, adds the number of minutes, creates a new date/time stamp, and copies it to the clipboard for me to paste into a story
[01:00:34] <Bytram> ripple edit sounds great, so long as it has absolutely NO bugs.
[01:01:08] <Bytram> otherwise, mayhem and woe would ensue
[01:01:29] <chromas> Should be pretty simple. select all stories after the current one, add $x to time
[01:01:40] <chromas> Maybe a couple options 'cause that makes it less simple :D
[01:03:58] <Bytram> well, part of the implementation is to *offer* me the date/time stamp... which I manually adjust as needed to provide some variety on spacing and avoiding releasing at :00, :15, :30, :45, and other such things
[01:05:37] <Bytram> yes, I *could* automagicate it... but accidentally fatfingering the number of stories to offset from, say, "33", instead of "3", would make life "interesting" to try and recover from...
[01:05:48] <Bytram> just run it again?
[01:06:01] <Bytram> save all pre-existing date/time stamps for resuscitation?
[01:07:03] <Bytram> atm, single story ts offset calc is sufficiently helpful and insufficiently dangerous
[01:07:03] <Bytram> =)
[01:07:03] <Bytram> and me is sufficiently tired that I need to call it an early night and hopefully reduce a week's worth of sleep deprivation.
[01:07:19] <TheMightyBuzzard> Bytram, no bugs? what kind of fun is that for us devs?
[01:07:23] <Bytram> though, that said, it WAS worth watching the SpaceX launch this AM.
[01:07:52] <Bytram> oh, I'm talking about writing my OWN bugs! You lot already have plenty of your own! ;)
[01:08:24] <TheMightyBuzzard> oh. i was thinking of just making a ripple stories button to keep them in the same order and space them as appropriate.
[01:08:36] <TheMightyBuzzard> those not yet displayed anyway.
[01:09:04] <Bytram> AND not release at a time divisible by 5 minutes.
[01:09:34] <TheMightyBuzzard> pshaw. that needs to happen at least every 10th story or you're just not stepping on cracks in a sidewalk.
[01:09:35] <Bytram> and offer a delta time input field to use as a base.
[01:09:39] <Bytram> I generally space stories every 93 minutes as a starting point.
[01:10:36] <Bytram> if a story would release a couple minutes after the hour, I'll move it up a few minutes before the hour so people will catch it between meetings, classes, whatever.
[01:11:38] * TheMightyBuzzard wanders off to smoke
[01:11:50] <Bytram> that said, it sure would be nice to ripple the story time stamps through...
[01:11:54] * Bytram ponders some more
[01:13:32] * Bytram decides to ponder sleeping, instead.
[01:13:39] <Bytram> ~gnight TheMightyBuzzard
[01:13:41] * exec proverbially blows a dash of windows registry keys at TheMightyBuzzard
[01:13:44] <Bytram> ~gnight chromas
[01:13:46] * exec literally reverse-engineers a cube of estrogen from chromas
[03:09:52] -!- nick has quit [Read error: Connection reset by peer]
[03:10:19] -!- nick [nick!~nick@Soylent/Staff/Editor/n1] has joined #editorial
[03:10:19] -!- mode/#editorial [+v nick] by Hephaestus
[06:33:40] -!- NotSanguine|beddybye [NotSanguine|beddybye!~notsangui@qzg770-090-642.nyc5.dsl.speakeasy.net] has joined #editorial
[06:33:52] NotSanguine|beddybye is now known as NotSanguine
[06:34:14] -!- NotSanguine has quit [Changing host]
[06:34:14] -!- NotSanguine [NotSanguine!~notsangui@Soylent/Staff/Editor/NotSanguine] has joined #editorial
[06:34:14] -!- mode/#editorial [+v NotSanguine] by Hephaestus
[06:55:53] NotSanguine is now known as NotSanguine|horizont
[11:16:01] <Bytram> Am moving two stories to hold:
[11:16:07] <Bytram> "SNMP Authentication Bypass Plagues Numerous Devices "
[11:16:09] <Bytram> and
[11:16:17] <Bytram> [Submission #19900 links to malware.]
[11:23:07] <Bytram> In the interests of an abundance of caution, I recommend deleting them. Thoughts?
[11:30:18] <TheMightyBuzzard> Bytram, what's wrong with the snmp story?
[11:30:51] <Bytram> do you see the titles above? 2nd one claims that it links to malware
[11:31:04] <TheMightyBuzzard> ahh. lemme check.
[11:31:20] <Bytram> check the "Notes" on that story, too.
[11:31:52] <Bytram> is outside my bailiwick to assess whether it does [not] link to malware (especially in my undercaffeinated state atm)
[11:33:03] <Bytram> Since the submission queue is visible to the general community, I wanted to reduce the risk that someone might accidentally get pwned
[11:33:11] <TheMightyBuzzard> knod knod
[11:34:58] <Bytram> http://newatlas.com
[11:35:00] <exec> └─ 13Lucid Motors' flagship Air to offer 200 mph+ performance
[11:35:05] <Bytram> good good
[11:35:25] * Bytram checked to make sure stripping all the tracking junk still workd
[11:35:39] <Bytram> was: http://newatlas.com
[11:35:41] <exec> └─ 13Lucid Motors' flagship Air to offer 200 mph+ performance
[11:36:56] <TheMightyBuzzard> two reports so far say no malware. waiting for a third to confirm.
[11:38:37] <Bytram> much obliged!
[11:41:36] <TheMightyBuzzard> Bytram, fucking hell. they're talking about linking to the github page of the malware. we don't give a shit about that safety-wise.
[11:42:04] <Bytram> okaaay...
[11:42:25] <TheMightyBuzzard> it'd be like linking to our github page and saying you're linking to news.
[11:42:26] <Bytram> so we just need a big "WARNING!" in there somewhere?
[11:42:31] <TheMightyBuzzard> not even that
[11:43:33] <TheMightyBuzzard> far as i know we have no editorial policy against linking to whitehat proof of concept exploit source code.
[11:44:04] <TheMightyBuzzard> and the github page is perfectly safe so that's not even an issue.
[11:44:13] <Bytram> agreed, though prudence would suggest we at least make an effort to suggest "here be dragons" or somesuch
[11:45:02] <TheMightyBuzzard> well i mean it says right in TFA that it's the github page containing the source of the exploit. there's no dragons there unless you download it, compile it, and use it on someone else.
[11:45:19] <Bytram> got it.
[11:45:27] <Bytram> TheMightyBuzzard++
[11:45:27] <Bender> karma - themightybuzzard: 8
[11:45:31] <Bytram> urg?
[11:45:50] <TheMightyBuzzard> s'okay. 8s look kinda like bewbs and i like bewbs.
[11:46:15] <TheMightyBuzzard> might check to see if we already covered stringbleed though.
[11:46:19] <Bytram> Orly? Hadn't noticed! ;)
[11:46:22] <TheMightyBuzzard> it's several days old
[11:46:28] <TheMightyBuzzard> maybe a week.
[11:46:31] * Bytram takes off shirt and takes selfie
[11:46:39] <Bytram> what's your addy again?
[11:46:40] <Bytram> ;)
[11:46:45] <Bytram> bin it?
[11:46:53] <TheMightyBuzzard> 1600 pennsylvania ave, washington dc
[11:47:07] <Bytram> touche'
[11:47:16] <TheMightyBuzzard> nah, just check to see if we've already run the story. s'possible we have and i forgot.
[11:47:48] <TheMightyBuzzard> quick search for snmp or stringbleed
[11:48:23] <Bytram> beware... search seems to be 'limited', esp wrt comments
[11:49:18] <TheMightyBuzzard> s'okay. we're not lookin for comments =P
[11:50:52] <Bytram> nod nod; but I noticed it when I was following up on the SPAM mod, and couldn't find a single comment mentioning "NASA" , or any other term. :/
[11:54:30] <TheMightyBuzzard> huh
[11:54:50] <Bytram> wuh?
[11:55:08] <TheMightyBuzzard> did you hit the comments radio button?
[11:55:40] <TheMightyBuzzard> yeah, looks like our comments searching is hosed
[11:55:54] <Bytram> yes I did, and that was my conclusion, too.
[11:56:37] <TheMightyBuzzard> such is life. i'm not currently up to fixing it just now.
[11:56:59] <Bytram> nod nod; you';ll noticed that I didn't mention it earlier, either.
[12:06:16] <Bytram> https://www.schneier.com
[12:06:17] <upstart> ^ 03Fitbit Evidence Used in Murder Investigation - Schneier on Security
[12:06:19] <Bytram> break time
[12:06:20] <exec> └─ 13Fitbit Evidence Used in Murder Investigation - Schneier on Security
[12:19:30] <Bytram> back
[12:19:30] <Bytram> http://hosted.ap.org
[12:19:32] <upstart> ^ 03News from The Associated Press
[12:19:35] <exec> └─ 13News from The Associated Press
[13:17:51] <Bytram> better story here: http://www.nbcnews.com
[13:17:52] <upstart> ^ 03Fitbit Murder Case: Richard Dabate Pleads Not Guilty in Wife's Death - NBC News
[13:17:54] <exec> └─ 13Fitbit Murder Case: Richard Dabate Pleads Not Guilty in Wife's Death - NBC News
[14:28:25] <Bytram> https://techcrunch.com
[14:28:26] <upstart> ^ 03Watch Microsoft unveil its Windows 10-based Chromebook competitor live right here | TechCrunch
[14:28:28] <exec> └─ 13Watch Microsoft unveil its Windows 10-based Chromebook competitor live right here | TechCrunch
[14:30:53] <Bytram> https://www.sciencedaily.com
[14:30:55] <exec> └─ 1325 is 'golden age' for the ability to make random choices: At their peak, humans outcompete many computer algorithms in generating seemingly random patterns -- ScienceDaily
[14:31:03] <Bytram> http://dx.doi.org
[14:31:05] <upstart> ^ 03Human behavioral complexity peaks at age 25 ( http://journals.plos.org )
[14:31:07] <exec> └─ 13Human behavioral complexity peaks at age 25
[14:31:08] <exec> └─ 13Human behavioral complexity peaks at age 25
[14:31:25] <Bytram> https://aeon.co
[14:31:28] <exec> └─ 13The hard problem of consciousness is a distraction from the real one | Aeon Essays
[14:51:05] -!- Deucalion has quit [Ping timeout: 276 seconds]
[14:52:50] -!- Deucalion [Deucalion!~Fluff@Soylent/Staff/IRC/juggs] has joined #editorial
[15:11:51] -!- nick has quit [Read error: Connection reset by peer]
[15:12:19] -!- nick [nick!~nick@Soylent/Staff/Editor/n1] has joined #editorial
[15:12:19] -!- mode/#editorial [+v nick] by Hephaestus
[16:42:56] NotSanguine|horizont is now known as NotSanguine
[16:43:32] <NotSanguine> TheMIghtyBuzzard: I'm a little late to the conversation, but the SNMP auth article link to github issue is a little more complicated than that.
[16:44:27] <NotSanguine> TheMightyBuzzard: The github repository does *not* contain an exploit for the SNMP auth issue, it contains a trojan that *claims* to be an exploit.
[16:45:20] <NotSanguine> TheMightBuzzard: cf. https://soylentnews.org
[16:45:22] <upstart> ^ 03Security Magazine Propagates Malware in Article Reporting Vulnerabilities - SoylentNews
[16:45:23] <exec> └─ 13Security Magazine Propagates Malware in Article Reporting Vulnerabilities - SoylentNews
[16:46:46] <NotSanguine> TheMightyBuzzard: I agree with you that there's no issue with posting the story, even though it links to malware. I'd only suggest adding the Mitre CVE database entry (which should go into every article that discusses a vulnerability anyway), as it points out the malware link.
[16:48:44] <NotSanguine> TheMightyBuzzard, bytram: I guess it doesn't matter as the submission has been deleted. In the words of the immortal Emily Litella, "Never mind."
[20:49:14] -!- nick has quit [Ping timeout: 276 seconds]
[21:41:47] -!- nick [nick!~nick@Soylent/Staff/Editor/n1] has joined #editorial
[21:41:47] -!- mode/#editorial [+v nick] by Hephaestus
[22:35:25] <Bytram> NotSanguine: not deleted... I moved it to the HOLD queue
[22:35:25] <Bytram> just found this story that would make Rube Goldberg proud: https://www.adn.com
[22:35:26] <upstart> ^ 03This antique engineering marvel records spring breakup in Alaska like clockwork - Alaska Dispatch News
[22:35:34] <exec> └─ 13This antique engineering marvel records spring breakup in Alaska like clockwork - Alaska Dispatch News
[22:35:38] <Bytram> and with that, I'm out for the evening... laters!
[22:35:43] <nick> take care Bytram