2009-08-04 GnuCash IRC logs
00:37:13 *** gasull has quit IRC
03:07:43 *** bentob0x has joined #gnucash
04:04:42 *** puck has quit IRC
04:05:23 *** puck has joined #gnucash
04:45:51 *** SethDeBlade has joined #gnucash
04:46:44 <SethDeBlade> hi @all
05:20:44 <SethDeBlade> nobody active in this chatroom? Kaspersky tells me that there is a trojan horse in 2.3.2 and 2.3.3 windows binaries. exploit.win32.sqlshell.i
05:22:37 *** paulproteus_____ has quit IRC
05:26:23 *** ErKa has joined #gnucash
05:27:07 *** paulproteus_____ has joined #gnucash
06:20:33 *** ErKa has quit IRC
07:56:23 *** SethDeBlade has quit IRC
08:01:46 *** warlord-afk is now known as warlord
08:06:08 *** Jimraehl has left #gnucash
08:34:52 *** JimRaehl2 has joined #gnucash
08:39:33 *** JimRaehl2 has left #gnucash
08:48:26 *** JimRaehl2 has joined #gnucash
08:55:24 *** Demitar has quit IRC
11:56:57 *** bzt has quit IRC
11:57:43 *** jwshen has joined #gnucash
12:19:07 *** message144 has joined #gnucash
12:30:42 *** Demitar has joined #gnucash
12:54:42 *** jwshen has quit IRC
13:29:18 *** andyt has joined #gnucash
13:32:43 *** goodger has joined #gnucash
13:35:49 *** cortana has joined #gnucash
13:58:59 *** machtfuernacht has joined #gnucash
13:59:38 *** message144 has quit IRC
14:01:01 *** hvx has joined #gnucash
14:19:16 *** SethDeBlade has joined #gnucash
14:19:36 <SethDeBlade> hi @all
14:25:57 <jsled> hello
14:26:41 <SethDeBlade> are you part of the gnucash devteam?
14:26:57 <warlord> do you have a question?
14:27:05 <warlord> Oh, the MySQL thing.
14:27:18 <SethDeBlade> yes exactly
14:27:19 <warlord> If there is a virus it's from MySQL upstream..
14:27:28 <warlord> We just pull down their library
14:27:56 <SethDeBlade> have posted it already earlier today in this channel
14:29:20 <warlord> We pull it from http://mirror.csclub.uwaterloo.ca/mysql/Downloads/Connector-C/mysql-connector-c-noinstall-6.0.1-win32.zip
14:29:23 <warlord> SethDeBlade: you did.
14:29:28 <SethDeBlade> i get this waring from kaspersky in setupfiles for 2.3.2 and 2.3.3. it is in setup.exe//file0324. whatever this will tell me ;-)
14:29:33 <warlord> ... at 5:23am
14:31:34 <warlord> I'm happy to reset the build server to pull down the dep again tonight...
14:31:48 <warlord> But check that URL and see if it's "infected"?
14:32:09 <warlord> I have no idea what it's really complaining about, or if it's a real bug or a broken virus check.
14:32:54 <machtfuernacht> Avira finds no virus
14:32:56 <SethDeBlade> kaspersky classifies this as trojan horse. because i dont know much about programing the mysql connector you just posted tell me nothing...
14:33:34 <SethDeBlade> i used the downloadlinks in the announcement on gnucash.org
14:34:54 <machtfuernacht> Ah SethDeBlade da geht auch Deutsch oder?
14:35:03 <machtfuernacht> Mein Avira findet da keinen Virus
14:35:08 <machtfuernacht> Und Sophos auch nicht
14:35:22 <jsled> SethDeBlade: fwiw, this was reporting on the -devel mailing list, too.
14:35:31 <SethDeBlade> and used the downloads -> Source code, Windows binary links which leads to sourceforge having used different mirrors as well
14:36:17 <machtfuernacht> Anything new about the Onlinenaking bug on windows?
14:36:29 <SethDeBlade> jsled: i have no access to that mailing list and i didn#t want to register only for this issue
14:36:33 <machtfuernacht> s/bug/bugs
14:37:01 <warlord> I'm trying to find info on exploit.win32.sqlshell.i but can't. I know the build system is NOT infected with .a
14:37:07 <machtfuernacht> SethDeBlade then post a bug in bugzilla, but I tested the file with Avira and Sophos. No result
14:37:09 <SethDeBlade> machtfuernacht: ich habe nur kaspersky und selbst mit aktuellem update meckert der rum
14:38:22 <machtfuernacht> Wie groß ist die Datei?
14:38:59 <SethDeBlade> i just wanted to tell you guys that kaslersky is "finding" a trojan horse in your files. perhaps you can contact kaspersky. have read that they are giving help to gevelopers to find out why something is found
14:39:23 <SethDeBlade> der angebliche find ist in der setup-datei selber. installiert habe ich es deswegen noch nicht
14:39:43 <SethDeBlade> -find +fund
14:39:56 <machtfuernacht> Na wie groß das Setup is
14:40:31 <SethDeBlade> setup 2.3.3 ist 77.236.530 Bytes groß
14:41:44 <SethDeBlade> setup 2.3.2 ist 77.206.821 Bytes groß
14:42:03 <machtfuernacht> Und du hast die von Sourceforge runtergeladen?
14:42:08 <SethDeBlade> keine probleme mit 2.2.9
14:42:12 <SethDeBlade> jo
14:42:35 <warlord> I can't find any information on the exploit to even know where to look.
14:43:00 <machtfuernacht> 2.2.9 ist clean?
14:43:08 <SethDeBlade> @macht ja
14:43:08 <gncbot> SethDeBlade: Error: "macht" is not a valid command.
14:44:22 <SethDeBlade> warlord: i had the same problem. really strange
14:44:26 <SethDeBlade> macht: ja
14:45:17 <warlord> 2.2.9 doesn't include mysql
14:45:28 <warlord> could you guys please keep the german chatter to PMs?
14:45:40 <machtfuernacht> and libdbi and ogsql driver and.....
14:45:55 <machtfuernacht> ans sqlite...
14:45:56 <SethDeBlade> sorry warlord
14:46:24 <warlord> True..
14:46:32 <machtfuernacht> There are a lot of changes.
14:47:02 <warlord> Yeah but if 2.3.1 doesn't have an issue the main change into 2.3.2 and 2.3.3 were MySQL.
14:47:04 <warlord> (and PG)
14:48:55 <machtfuernacht> I don't think that there are trojans in MySQL or PG *g*
14:49:58 <warlord> Well, according to VirusTotal there is.
14:50:14 <warlord> http://mirror.csclub.uwaterloo.ca/mysql/Downloads/Connector-C/mysql-connector-c-noinstall-6.0.1-win32.zip reports "infected"
14:51:47 <warlord> anyways, followups to the list, please.
14:51:52 <warlord> We'll be discussing it on -devel
14:51:54 <jsled> hrm.
14:52:17 *** hvx has quit IRC
14:52:27 * jsled will try to followup with the connectors folks.
14:54:29 <machtfuernacht> war it reports as Exploit.Win32.SqlShell.i
14:54:34 <machtfuernacht> or something like this
14:55:44 <jsled> machtfuernacht: you know, your irc client might support nickname tab completion.
14:55:59 <machtfuernacht> I know forgot Tab.
14:56:21 <warlord> machtfuernacht: right. Well, that's not our file. So someone needs to report this issue to MySQL.
14:56:34 <jsled> Considering I work for mysql, I guess I should.
14:56:35 <jsled> :)
14:57:55 * jsled checking the mirrored and officed distributions
14:58:47 <SethDeBlade> ok. i hope you can find the problem and solve it
14:58:55 <warlord> jsled: see my mail. The MD5 matches what's on dev.mysql.org
14:59:11 <jsled> ah. :(
15:02:43 <warlord> yeah.
15:05:07 <SethDeBlade> i am afk now. cu and good luck
15:05:26 *** SethDeBlade is now known as SethDeBlade-afk
15:12:34 *** shahsag has joined #gnucash
15:16:57 <jsled> warlord: how long did the VirusTotal scan take for you?
15:17:39 * jsled is just waiting for it to complete so I can pass the url along to the connectors devs …
15:17:54 <warlord> Umm.. 5-10 minutes?
15:19:04 <warlord> jsled: there's my URL
15:19:07 <jsled> thanks
15:19:28 <warlord> Save you some time. :)
15:23:07 *** KaiForce has joined #gnucash
15:30:04 *** shahsag has quit IRC
15:46:09 *** sjc has joined #gnucash
15:56:35 *** ErKa has joined #gnucash
16:32:52 *** SethDeBlade-afk is now known as SethDeBlade
16:33:02 <SethDeBlade> gn8 and cu
16:33:06 *** SethDeBlade has quit IRC
17:09:38 *** bentob0x has quit IRC
17:23:59 *** KaiForce has quit IRC
17:46:52 *** machtfuernacht has quit IRC
18:34:00 *** andyt has quit IRC
18:46:37 *** RobotCow has joined #gnucash
18:48:00 *** RobotCow has joined #gnucash
18:59:04 *** ErKa has quit IRC
19:28:38 *** Jimraehl has joined #gnucash
19:30:54 *** Jimraehl has left #gnucash
19:33:55 *** sjc has quit IRC
19:41:53 *** sjc has joined #gnucash
19:54:57 *** cortana has quit IRC
20:56:00 *** sjc has quit IRC
21:16:57 *** JimRaehl2 has left #gnucash
21:21:45 *** Jimraehl has joined #gnucash
21:31:06 <Jimraehl> I see that the Windows nightly build last night (early August 4) had several compile errors in /src/gnome-utils/gnc-date-edit.c. Quite likely due to Changeset 18237. My compile later that morning aborted due to those errors. Probably the nightly build is setup to ignore those errors.
21:36:42 <warlord> I dont know if it's set up to --enable-error-on-warning or not..
21:43:39 <Jimraehl> Anyway, someone might want to check the error messages and probably tweak the changeset. I don't think Error 1 and Error 2 conditions should persist for long.
21:45:42 <warlord> I dont think anyone regularly monitors the builds per se, but yes, they should be corrected. You should send mail to -devel to make sure Phil knows.
21:45:42 <Jimraehl> Bedtime again ...
21:46:05 <Jimraehl> Will do tomorrow.
21:47:20 <warlord> ok
23:31:29 *** RobotCow has quit IRC
23:36:46 *** kfo_ has joined #gnucash
23:44:48 *** kfo has quit IRC
23:44:49 *** kfo_ is now known as kfo