From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Nala Ginrut Newsgroups: gmane.lisp.guile.devel Subject: Re: Verifying Toolchain Semantics Date: Mon, 6 Oct 2014 16:25:04 +0800 Message-ID: References: <87mw9dfz8l.fsf@netris.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=001a11c3f8aadc35a10504bcd163 X-Trace: ger.gmane.org 1412583922 29623 80.91.229.3 (6 Oct 2014 08:25:22 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 6 Oct 2014 08:25:22 +0000 (UTC) Cc: guile-devel To: Ian Grant Original-X-From: guile-devel-bounces+guile-devel=m.gmane.org@gnu.org Mon Oct 06 10:25:15 2014 Return-path: Envelope-to: guile-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Xb3bU-0004A2-6z for guile-devel@m.gmane.org; Mon, 06 Oct 2014 10:25:12 +0200 Original-Received: from localhost ([::1]:50698 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xb3bT-0004u4-Mo for guile-devel@m.gmane.org; Mon, 06 Oct 2014 04:25:11 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:36629) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xb3bQ-0004sQ-6a for guile-devel@gnu.org; Mon, 06 Oct 2014 04:25:09 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Xb3bP-0000qM-6Z for guile-devel@gnu.org; Mon, 06 Oct 2014 04:25:08 -0400 Original-Received: from mail-lb0-x22f.google.com ([2a00:1450:4010:c04::22f]:50764) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xb3bO-0000hB-QZ for guile-devel@gnu.org; Mon, 06 Oct 2014 04:25:07 -0400 Original-Received: by mail-lb0-f175.google.com with SMTP id u10so3841680lbd.34 for ; Mon, 06 Oct 2014 01:25:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=jNsqlhgif2PSZs6lw9OKpKBDksk1h/Etw1dF/zlI10g=; b=KmWOl4XKosTZhQk4dOWz9Ehrz11H+sWH4FAF+3gqX+laUv/Aot7vqdhjLtMMNUqKZb 4gEnc2GFUjaFHcRMnYCrwDi+4UPaaiYjuFU5m9GIh8uXjHDjaTiIjnlVnS1FFSLbVDRa O29s8HVchAZcqOfubb7RpNvla8cgCHrhOln/73xUXbtUIkdZWihMTkGeUmoum//6WEcq 1MB0i8mAsc+Aq6a3y97ykBqY3B54FWr5lz6r8JKmMk9Eb19UF7f3dsGA5Xw8h5Br8g7b lMyjy+5MB1CMHTHGXfA3GcbKyLxVPXDIeRcdamgcJX29pR6wIa+ayDizTUIGfDvfVhz7 avVA== X-Received: by 10.112.52.74 with SMTP id r10mr13355196lbo.3.1412583904784; Mon, 06 Oct 2014 01:25:04 -0700 (PDT) Original-Received: by 10.152.28.105 with HTTP; Mon, 6 Oct 2014 01:25:04 -0700 (PDT) In-Reply-To: X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2a00:1450:4010:c04::22f X-BeenThere: guile-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Developers list for Guile, the GNU extensibility library" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guile-devel-bounces+guile-devel=m.gmane.org@gnu.org Original-Sender: guile-devel-bounces+guile-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.lisp.guile.devel:17557 Archived-At: --001a11c3f8aadc35a10504bcd163 Content-Type: text/plain; charset=UTF-8 On Mon, Oct 6, 2014 at 12:24 AM, Ian Grant wrote: > On Sun, Oct 5, 2014 at 11:15 AM, Nala Ginrut wrote: > > > > Alright, I changed a system and try it again with evince successfully. > > Anyway, I did't find any maths or special symbols in it, so it could be > > published on your blog as plain text. But you may insist on the opinion > of > > PDF. > > There is another reason why I use PDF. It's much nicer to read. I love > Garamond. Did you see the Jobs movie? Do you remember what he said > about Garamond? > > Well, I'm a naive font fan so I may understand you. I usually use my fav font on page according to the design with HTML5/CSS stuff. Forget about it, it's far from the topic. > What we really need to do is find out what software Mark was using to > pdf->png. If it segfaults then there is a good chance that that bug > can be turned into a working exploit. Because all binaries distributed > by the binary-distributors are identical, attackers can analyse the > file and work out how to turn a bad pointer dereference into an > exploitable "PDF attack vector" which executes binary code contained > in the PDF. > > Agreed. But I think the PDF is more complicated than TXT. One of my fav ezine, Phrack is plain txt, and it's cool. So my suggestion is to provide both TXT and PDF if the article is important. Anyway, the font is a big issue for whom loves it, so I don't involve such argue. ;-) --001a11c3f8aadc35a10504bcd163 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On M= on, Oct 6, 2014 at 12:24 AM, Ian Grant <ian.a.n.grant@googlemai= l.com> wrote:
On Sun, Oct 5, 2014 at 11:15 AM, Nala Ginrut <nalaginrut@gmail.com> wrote:
>
> Alright, I changed a system and try it again with evince successfully.=
> Anyway, I did't find any maths or special symbols in it, so it cou= ld be
> published on your blog as plain text. But you may insist on the opinio= n of
> PDF.

There is another reason why I use PDF. It's much nicer to read. = I love
Garamond. Did you see the Jobs movie? Do you remember what he said
about Garamond?


Well, I'm = a naive font fan so I may understand you. I usually use my fav font on page= according to the design with HTML5/CSS stuff.
Forget about it, i= t's far from the topic.

=C2=A0
What we really need to do is find out what software Mark was using to
pdf->png. If it segfaults then there is a good chance that that bug
can be turned into a working exploit. Because all binaries distributed
by the binary-distributors are identical, attackers can analyse the
file and work out how to turn a bad pointer dereference into an
exploitable "PDF attack vector" which executes binary code contai= ned
in the PDF.


Agreed. But I think the PDF is more complicated than= TXT. One of my fav ezine, Phrack is plain txt, and it's cool.=C2=A0
So my suggestion is to provide both TXT and PDF if the article is i= mportant.

Anyway, the font is a big issue for whom= loves it, so I don't involve such argue. ;-)


--001a11c3f8aadc35a10504bcd163--