From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTP id 78047A89 for ; Mon, 12 May 2014 17:50:28 +0000 (UTC) Received: from mail-qc0-f179.google.com (mail-qc0-f179.google.com [209.85.216.179]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id 03B4520398 for ; Mon, 12 May 2014 17:50:27 +0000 (UTC) Received: by mail-qc0-f179.google.com with SMTP id x3so8138177qcv.38 for ; Mon, 12 May 2014 10:50:27 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <53710053.4040100@zytor.com> References: <20140511041449.GP12708@titan.lakedaemon.net> <20140511162918.GA2527@linux.com> <1995824.rdvEX5SOIt@avalon> <20140511171824.GB2527@linux.com> <20140512155320.GW12708@titan.lakedaemon.net> <20140512164921.GB3509@linux.com> <53710053.4040100@zytor.com> Date: Mon, 12 May 2014 20:50:27 +0300 Message-ID: From: =?UTF-8?B?VGVvZG9yYSBCxINsdcWjxIM=?= To: "H. Peter Anvin" Content-Type: text/plain; charset=UTF-8 Cc: PJ Waskiewicz , Dirk Hohndel , ksummit-discuss@lists.linuxfoundation.org, Anton Arapov , Jason Cooper Subject: Re: [Ksummit-discuss] [TECH TOPIC] QR encoded oops for the kernel List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Mon, May 12, 2014 at 8:09 PM, H. Peter Anvin wrote: > On 05/12/2014 09:49 AM, Levente Kurusa wrote: >> >> What I wonder is how could we get the server back-end to not allow >> the same oopses from bad users. >> >> Having a link like: >> >> oops.kernel.org/submit_oops.php?qr=$ENTROPY$BASE64DATA >> >> would mean that malicious users could edit the $ENTROPY part and >> hence effectively report the same oops twice. Maybe some checksum? >> Or will it be too much for an already damaged kernel? >> > > What did the old kerneloops system do for these kinds of things? > > Again, I'm concerned that a KS session for this will turn into an > implementation discussion, which is better done by email. Well, the discussion got a bit technical, but as Josh said, I see no point in doing that sort of talk (for technical discussion there's always the RFC thread [0]). I think what would be of interest is the way the workflow changes and the infrastructure you need to maintain. For example, at the moment, can you actually send an Oops directly to kernel.org by posting it in a query? Thanks, Teodora [0] https://lkml.org/lkml/2014/3/17/525