What's good today? I need a distraction.

@ajroach42 I've been lurking in Freenode #gentoo-hardened, #musl, #libressl, and ##linux-hardened just trying to soak in the knowledge about security and mitigation techniques.

@uranther Anything worth knowing come out of it?

@ajroach42 glibc and the software that depends on it rely on a lot of undefined, non-standard, and undocumented behavior.

I think we knew this already but it can be painful to get into the grit of it when trying to provide #POSIX standards conformance in #musl.

Also, #LibreSSL had (has?) some strange 'alternative' behavior that would do sketchy entropy collection instead of returning an error when /dev/urandom is not available.

@uranther IIRC, that SSL problem has been mitigated??? Dunno, I don't spend enough time in security right now.

glibc honestly scares me though.