Maintenance for the week of June 22:
· [IN PROGRESS] Xbox: NA and EU megaservers for maintenance – June 26, 6:00AM EDT (10:00 UTC) - 12:00PM EDT (16:00 UTC)
· [IN PROGRESS] PlayStation®: NA and EU megaservers for maintenance – June 26, 6:00AM EDT (10:00 UTC) - 12:00PM EDT (16:00 UTC)
· [IN PROGRESS] Xbox: NA and EU megaservers for maintenance – June 26, 6:00AM EDT (10:00 UTC) - 12:00PM EDT (16:00 UTC)
· [IN PROGRESS] PlayStation®: NA and EU megaservers for maintenance – June 26, 6:00AM EDT (10:00 UTC) - 12:00PM EDT (16:00 UTC)
PTS still uses obsolete security libraries and gets tagged by security software as dangerous
etchedpixels
✭✭✭✭✭
✭
✭
Security monitoring software like the Intel security scanner classifies both Live and PTS as pretty much hazardous waste because they still contain OpenSSL 1.1.0e from 2017 and which was obsolete and tagged with CVEs from 2019 or so onwards.
Even if the only ways you use the library are ones that this doesn't matter please upgrade it so it's not giving warnings.
Note - this has been publically discussed on twitter in the past but nothing seems to have happened. That's why I'm querying it here.
Even if the only ways you use the library are ones that this doesn't matter please upgrade it so it's not giving warnings.
Note - this has been publically discussed on twitter in the past but nothing seems to have happened. That's why I'm querying it here.
Too many toons not enough time
2
-
code65536✭✭✭✭✭
✭✭✭✭✭
Which CVEs worry you, specifically? Reading through the details of each CVE, I don't see any that would appear to be plausibly relevant for an application like ESO.etchedpixels wrote: »tagged with CVEs from 2019 or so onwards.
If ESO is using OpenSSL directly, then that should be easy. But if OpenSSL is a part of some other external component, then that might not be as easy.etchedpixels wrote: »Even if the only ways you use the library are ones that this doesn't matter please upgrade it so it's not giving warnings.
This is "security monitoring software" that doesn't understand the context in which something is used. It might be relevant, or, most likely, since I would imagine that the scope of usage here is very narrow, it is not.etchedpixels wrote: »Security monitoring software like the Intel security scanner classifies both Live and PTS as pretty much hazardous waste
In any case, this is the part that prompted me to reply to this thread: "hazardous waste" is a rather sensationalist and most likely misleading label, but of course, scaring the user is an integral part of the "security software" business model.Nightfighters ― PC/NA and PC/EU
Dungeons and Trials:Personal best scores:- Dragonstar Arena: 46817 (NA)
- Maelstrom Arena: 600526 (NA)
- Blackrose Prison: 99274 (EU) (Unchained)
- Maw of Lorkhaj: 165227 (EU)
- Halls of Fabrication: 220708 (NA) (Tick-Tock Tormentor #1, #2, #3, #4, #5, #6, #7, #8, #9, #10, #11, #12)
- Asylum Sanctorium: 114957 (NA) (Immortal Redeemer #1, #2, #3, #4, #5, #6, #7, #8, #9, #10)
- Cloudrest: 131256 (NA) (Gryphon Heart #1, #2, #3, #4, #5, #6, #7)
- Sunspire: 250866 (EU) (Godslayer #1, #2, #3, #4, #5, #6, #7)
- Kyne's Aegis: 235841 (EU) (Dawnbringer #1, #2, #3, #4, #5, #6, #7, #8)
Dungeon trifectas:- Mountain God and Leave No Bone Unbroken
- Apex Predator and Pure Lunacy
- Depths Defier and Relentless Raider
- Defanged the Devourer and Nature's Wrath
- In Defiance of Death and No Rest for the Wicked
- Bane of Thorns and True Genius
- Ardent Bibliophile and Subterranean Smasher
- Battlespire's Best and Bastion Breaker
- Zero Regrets and Land, Air, and Sea Supremacy
- Fist of Tava and Invader's Bane
- Curator's Champion (Valinna) and Temporal Tempest
- Unshakeable Fervor and Lighting the Embers
Extended Journal Add-Ons: Item Set Browser ― Loot Log ― Character Knowledge ― Collectibles Tracker ― RaidificatorPC/Console Add-Ons: Combat Alerts ― Group Buff PanelsOther Add-Ons: Deconstruction Junk Marker ― Purge Tracker ― Asylum Status Panel ― Smart Looter ― Improved Companion Rapport Information1 -
etchedpixels✭✭✭✭✭
✭I have no view on whether it's actually a security risk in this case. Just that it a) triggers security software and b) looks sloppy.
Too many toons not enough time0