Skip to content
zit Today In History
Login

Today In History

This Day In History For 2027-09-24

1 Year Ago (more context)

2026-09-24
17:16 Note: A password is not a thing to send in the clear technote: [c2e5f91720] user: dmestas
17:16 • Changes to wiki page "Home" artifact: 4cc7c24b2a user: dmestas
16:44 • Edit [b637cbd37c]: Add tag "version-0.3.30". artifact: d9d44a559a user: dmestas
16:44
transport: refuse Basic over plain http to another host; drop it on a cross-host redirect

A Basic challenge was answered whatever the scheme, so over http the password crossed readable and the saved remote repeated it. It is now refused to non-loopback hosts, naming the https URL; a redirect to another host drops the credential; plain http to another host notes it on stderr. Release 0.3.30. check-in: b637cbd37c user: dmestas tags: trunk, version-0.3.30

01:02
soak: record a finding and keep sweeping; CI: cap the runners' zig cache

A failing fuzz target is abandoned and the sweep moves on, so one recurring crash no longer hides the targets after it; the exit lists every finding. Each workflow clears its zig-local cache whole at job start once it passes 8 GB, since Zig never prunes it. check-in: 8ebc3e4dd8 user: dmestas tags: trunk