These are chat archives for pi-hole/AdminLTE

17th
Oct 2016
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:24
Is there any process in place for responsible disclosure of security bugs for this project?
Adam Warner
@PromoFaux
Oct 17 2016 17:31
Email to adblock@pi-hole.net if you think it's too sensitive to share publicly
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:36
thanks
Adam Warner
@PromoFaux
Oct 17 2016 17:37
Or just PM's like you did :)
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:38
:)
Adam Warner
@PromoFaux
Oct 17 2016 17:39
Also, neat 1 letter github name!
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:39
Thanks!
Adam Warner
@PromoFaux
Oct 17 2016 17:39
How often do people try and buy it from you?
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:40
Not often but I get added to repositories and organizations all the time. Also, any bug with @z in it notifies me, I reported that to github ~5 years ago.
I've been tempted to dickbutt a gh-page of an org but I'm not sure that will get the point across
Adam Warner
@PromoFaux
Oct 17 2016 17:41
By the way, we're completely open to suggestion on our repos.. you're more than welcome to submit pull requests!
:D
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:41
Do you have any sort of isolated development environment for this or do you guys work directly on the pi?
Adam Warner
@PromoFaux
Oct 17 2016 17:41
Probably just get you banned.
I personally just work on the pi
or a vm
I'm pretty sure the others do, too. Have my IDE set up with remote directory mirroring, so it's a pretty simple set up
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:42
Alright, I'd be happy to contribute, but that's just a minor barrier to entry at the moment as I don't want to install directly on an devices or on my current host, no offense ;)
Adam Warner
@PromoFaux
Oct 17 2016 17:42
Only stipulation is that all submissions must be branched off of the devel branch
Spin up a vm, isolate it from the rest of the network, job done!
I know of at least two others that work like that. Just SSHd into a vm/pi and working in vi
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:44
yep, will see currently on a live usb session with a USB stick no HD
Adam Warner
@PromoFaux
Oct 17 2016 17:44
Yeah, not a good environment!
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:44
:P
arguable ... :)
Adam Warner
@PromoFaux
Oct 17 2016 17:45
I guess it depends on definition of good!
And/or levels of tin foil ;)
Tyler "-z-" Mulligan
@z
Oct 17 2016 17:46
PSU died on my desktop, was taking it easy with computers, but saw pi-hole getting a lot of attention in /r/linux and I liked what you guys have done so far with AdminLTE, so I started looking into the code a little, that's what brought me here
alright, back to poking around, thanks for the help.
Adam Warner
@PromoFaux
Oct 17 2016 17:47
Yeah, project is really starting to pick up! It's come on in leaps and bounds since I first became aware of it in January
Dan Schaper
@dschaper
Oct 17 2016 18:33
There was a comment about submitting some possibly sensitive information? My GPG key hash is 0xbe81554549fc57c5 dschaper@ganymeade.com, feel free to contact me that way.
Tyler "-z-" Mulligan
@z
Oct 17 2016 18:51
I'll get that out to you in a bit
Dan Schaper
@dschaper
Oct 17 2016 19:56
Thanks, got the messages, my YubiKey and my biometrics are fighting at the moment, need to export my private key and then we'll get back to you.
Tyler "-z-" Mulligan
@z
Oct 17 2016 20:09
rgr