[18:02] <mdeslaur> jjohansen, sbeattie, tyhicks, micahg, sarnold, jdstrand: meeting?
[18:02] <jjohansen> \o
[18:02] <tyhicks> Hello
[18:03] <sarnold> ack
[18:03]  * sbeattie waves
[18:04] <mdeslaur> #startmeeting
[18:04] <meetingology> Meeting started Mon Nov  5 18:04:03 2012 UTC.  The chair is mdeslaur. Information about MeetBot at http://wiki.ubuntu.com/meetingology.
[18:04] <meetingology> Available commands: #accept #accepted #action #agree #agreed #chair #commands #endmeeting #endvote #halp #help #idea #info #link #lurk #meetingname #meetingtopic #nick #progress #rejected #replay #restrictlogs #save #startmeeting #subtopic #topic #unchair #undo #unlurk #vote #voters #votesrequired
[18:04] <mdeslaur> The meeting agenda can be found at:
[18:04] <mdeslaur> [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting
[18:04] <mdeslaur> [TOPIC] Announcements
[18:04] <mdeslaur> Natty is now EoL. jdstrand did the process for retiring it, so if you have not done it already, please do the checklist for removing natty from your security tools configuration.
[18:05] <mdeslaur> [TOPIC] Weekly stand-up report
[18:05] <mdeslaur> I'll go first I guess
[18:05] <mdeslaur> This week, I'm in the happy place
[18:05] <mdeslaur> I just released mysql, munin and mesa
[18:05] <mdeslaur> and I have some other things to start working on
[18:05] <mdeslaur> and I'll be gong down the list
[18:05] <mdeslaur> that's pretty much it from me
[18:06] <mdeslaur> sbeattie: you're up
[18:06] <sbeattie> I'm trying to recover from UDS
[18:06] <mdeslaur> sbeattie: did you get the Ubuflu?
[18:06] <sbeattie> mdeslaur: no, but my inbox did
[18:06] <mdeslaur> oh, haha
[18:06] <mdeslaur> canonimailplague
[18:07] <sbeattie> (I pre-fetched UbuFlu for myself)
[18:07] <sbeattie> I'll be looking at the display manager notes and stuff that jjohansen handed off to me.
[18:07] <sbeattie> which is pretty much it for me
[18:08] <mdeslaur> I've been popping vitamin C like candy as a placebo preventative measure
[18:08] <sbeattie> heh, yeah, me too
[18:08]  * jjohansen wishes he had some of that placebo
[18:08] <sarnold> mm, something to do at lunch time..
[18:08] <sbeattie> I don't think micahg is here, so tyhicks, I think you're up.
[18:09] <tyhicks> Sorry, too busy laughing at your weak immune systems
[18:09] <tyhicks> ;)
[18:09] <mdeslaur> lol
[18:09] <tyhicks> arges asked me to SRU the fix for bug 1052038
[18:10] <tyhicks> The fix already exists and a test case already exists, so it shouldn't be bad
[18:10]  * jjohansen coughs in tyhicks direction
[18:10] <tyhicks> I want to wrap up things (from my end, at least) for the audit MIR this week
[18:10] <mdeslaur> \o/
[18:10] <tyhicks> sgrubb merged my patch upstream this morning
[18:11] <mdeslaur> oh, nice
[18:11] <sarnold> nice
[18:11] <tyhicks> I've got a little inbox backlog to take care of
[18:11] <tyhicks> and then I'm back on the apparmor dbus work
[18:11] <tyhicks> that's it for me
[18:11] <tyhicks> jjohansen: you're up
[18:12] <jjohansen> I am going to get the dbus kernel up and then I'm am diving back into the stacking work this week
[18:12] <tyhicks> thanks jjohansen
[18:12] <mdeslaur> jjohansen: is that like the big jenga game at UDS?
[18:12] <jjohansen> mdeslaur: nah, much less stable
[18:12] <mdeslaur> hehe
[18:12] <tyhicks> oof
[18:12] <jjohansen> :)
[18:13] <jjohansen> I think that is it for /me sarnold your up
[18:13] <sarnold> good think you're a talented swordsman...
[18:13] <sarnold> I'm on triage this week.
[18:13] <jjohansen> sarnold: sadly only when my opponent is two feet tall
[18:13] <sarnold> I'm pretty sure I've got the udsflu, you guys never mentioned that uds lasts another week...
[18:14] <mdeslaur> sarnold: oh, let me know when you do bug triage if you want me to ride along
[18:14] <sarnold> mdeslaur: thanks
[18:15] <sarnold> before uds flights, I made sure qt4-x11 update worked well enough in natty, but didn't get around to the other distros in time to get the qt4-x11 update out the door for natty's goodbye party
[18:15] <jjohansen> sarnold: ha yes, uds does seem to have a way of chewing up 2 weeks of your time
[18:15] <sarnold> but it does help provide overall credibility to the reliability of the patch,  and the time spent with qrt feels well-spent.
[18:16] <sarnold> I thikn that's it, but maybe that's just the sinuses thinking...
[18:16] <mdeslaur> sarnold: ok, you can remove the natty update from the secppa before publishing
[18:16] <sarnold> mdeslaur: back to you?
[18:16] <mdeslaur> sarnold: so you'll be testing the other releases this week, and hopefully publish it?
[18:16] <sarnold> mdeslaur: can I ask for your hlep for that later today?
[18:16] <sarnold> mdeslaur: yes.
[18:16] <mdeslaur> sarnold: certainly
[18:16] <sarnold> thanks
[18:17] <mdeslaur> [TOPIC] Highlighted packages
[18:17] <mdeslaur> The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so.
[18:17] <mdeslaur> See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved.
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/sun-javadb.html
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/msmtp.html
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/libparallel-forkmanager-perl.html
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/libsdp.html
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/geshi.html
[18:17] <mdeslaur> [TOPIC] Miscellaneous and Questions
[18:17] <mdeslaur> Does anyone have any other questions or items to discuss?
[18:18] <sarnold> one thing, probably long-term discussion point..
[18:18] <sarnold> we get our entropy from keyboard timing and hard drive timing data; but ssds are on the rise. are they still a reasonable source of entropy data?
[18:19] <mdeslaur> hrm, interesting question
[18:19] <mdeslaur> probably should be asked upstream
[18:19] <sarnold> one hopes ssds are going into systems with good cpu-provided rngs but that may only be true on server-scale machinery.
[18:20] <mdeslaur> yeah, it's a good question
[18:21] <tyhicks> sarnold: FYI, Ted Ts'o made some changes to the kernel's entropy gathering code over the last month or two. I don't recall what all the changes were atm.
[18:22] <sarnold> tyhicks: ah :) thanks
[18:23] <mdeslaur> ok, thanks everyone!
[18:23] <mdeslaur> #endmeeting
[18:23] <meetingology> Meeting ended Mon Nov  5 18:23:21 2012 UTC.
[18:23] <meetingology> Minutes (wiki):        http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-11-05-18.04.moin.txt
[18:23] <meetingology> Minutes (html):        http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-11-05-18.04.html
[18:23] <jjohansen> thanks mdeslaur
[18:23] <sarnold> thanks mdeslaur
[18:23] <tyhicks> thanks!


[03:59] <lotuspsychje> good morning to all
[04:03] <lotuspsychje> http://news.softpedia.com/news/will-i-have-the-latest-software-versions-in-ubuntu-with-snappy-485490.shtml
[06:03] <ObrienDave> *waves*
[08:57] <lotuspsychje> EriC^^: good morning
[08:57] <EriC^^> morning lotuspsychje
[08:58] <lotuspsychje> how r u mate
[08:58] <EriC^^> great you?
[08:58] <lotuspsychje> fine tnx, sunny weather
[08:58] <EriC^^> cool
[08:58] <lotuspsychje> and later on coffee chat with friends n pies
[08:58] <EriC^^> yummy
[08:59] <EriC^^> pies.. *homer simpson drool*
[08:59] <lotuspsychje> lol
[08:59] <EriC^^> :P
[09:05] <lotuspsychje> seems like #ubuntu-women is filled with mostly men :p
[09:08] <EriC^^> lol
[09:09] <TJ-> Morning (belatedly)
[09:09] <lotuspsychje> TJ-: good day sir
[09:09] <lotuspsychje> TJ-: hows your project going?
[09:09] <TJ-> Are you sure ... could be Madam :D
[09:09] <lotuspsychje> TJ-: excuse me mylady :p
[09:10] <TJ-> It worked last night on top of Linux v4.1 ... then this morning I noticed that the v4.2 merge window has moved the loop device workqueue from the driver to per-loop ... which stopped my patches doing anything useful... refactoring them now :)
[09:10] <lotuspsychje> TJ-: never saw a girl, that trying to 4K sectors before :p
[09:10]  * TJ- tuts
[09:12] <lotuspsychje> http://news.softpedia.com/news/will-i-have-the-latest-software-versions-in-ubuntu-with-snappy-485490.shtml
[09:12] <lotuspsychje> i wonder how that will turn out
[09:14] <lotuspsychje> tintedwindows: welcome
[09:15] <tintedwindows> thanks good to be here, Ubuntu is my fave
[09:15] <lotuspsychje> tintedwindows: what do you like about ubuntu?
[09:15] <TJ-> If snappy requires Unity 8, Canonical are going to loose developer input
[09:16] <tintedwindows> i love the control of ubuntu and the configuration you have is just so much better than main stream operating systems.
[09:16] <lotuspsychje> tintedwindows: wich version are you on?
[09:17] <TJ-> Over my time working with Ubuntu (since 2005) I've come to distrust the way Canonical internalise supposedly 'community' development teams and stands, locking out any input from developers. Very walled garden, take-it-or-leave-it
[09:17] <tintedwindows> 15.04, you?
[09:18] <lotuspsychje> TJ-: the same way shuttleworth had to appologize that unity was a mistake?
[09:18] <TJ-> EriC^^: can you remind me of that pipe you use to termbin ?
[09:18] <lotuspsychje> tintedwindows: 14.04.2 64bit
[09:18] <EriC^^> TJ-: nc termbin.com 9999
[09:19] <TJ-> lotuspsychje: Across so many key parts... it always struck me as Shuttleworth's frustration with the community approach. I know it makes it uncomfortable for many Debian developers who are employed by Canonical and find themselves compromised by it
[09:19] <TJ-> EriC^^: ha! yeah, it is so simple I couldn't recall it :)
[09:21] <lotuspsychje> TJ-: my first unity frustration was the dock at left side, always loved gnome bottom dock
[09:21] <TJ-> Canonical's attitude is in many ways similar to Google's ... very touchy about keeping things private and internal
[09:21] <tintedwindows> i would like to know who isn't 64 bit here?  lol is anyone running some old stack 32 bit?
[09:21] <lotuspsychje> tintedwindows: your on 32bit?
[09:22] <TJ-> I gave up on mainstream Ubuntu GUI when it switched to Unity and Gnome messed up v2 - switched to KDE here and it is the only GUI that works for my requirements
[09:22] <tintedwindows> you can get unity-tweak-tool
[09:22] <Hobbet1> i am running a xpc pentium 4 with 2 gigs of memory
[09:22] <lotuspsychje> Hobbet1: wich ubuntu on it?
[09:22] <Hobbet1> lubuntu
[09:22] <lotuspsychje> cool
[09:22] <tintedwindows> that is cool
[09:23] <tintedwindows> you should put a rambo sticker on the side of it
[09:23] <Hobbet1> and it runs just fin i am on opera with 7 tabs open
[09:23] <Hobbet1> lol
[09:23] <tintedwindows> gtg nice chatting
[09:24] <lotuspsychje> Hobbet1: i like chromium better then opera
[09:25] <Hobbet1> i only use opera for the  irc chat, i can adjust the text to make it bigger easier on my eyes
[09:25] <TJ-> I have notebooks I bought in 2002 still in use with 384MB of RAM
[09:26] <lotuspsychje> TJ-: running ubuntu on them also
[09:26] <TJ-> Yes, with my own kernel builds (non-PAE) and stripped down to the essentials
[09:27] <lotuspsychje> cool
[09:29] <lotuspsychje> !info gdisk
[09:36] <lordievader> Good morning.
[09:36] <lotuspsychje> lordievader: hi mate
[09:36] <lotuspsychje> all ok?
[09:37] <lordievader> Hey lotuspsychje, doing ok here. How are you?
[09:37] <lotuspsychje> fine tnx, sunny outside
[09:38] <lotuspsychje> and a heated week comming upon us
[09:38] <lotuspsychje> 30+
[09:38] <lordievader> Yeah.... -.-
[09:45] <lordievader> Time to mistreat a VM with Java.
[09:54] <lotuspsychje> scary silent in #ubuntu on sundays
[09:54] <Hobbet1> is this room pretty active?
[09:55] <lotuspsychje> Hobbet1: at some times very, its timzeone related i guess
[09:55] <Hobbet1> well i am in phx, az its 3am here lol
[09:55] <lotuspsychje> 11h55 here
[09:57] <Hobbet1> how long have you been using ubuntu
[10:01] <lordievader> What is the bare minimum of packages you need to run X?
[10:01] <lordievader> Meh, nevermind...
[10:02] <lordievader> xserver-xorg selects a bunch.
[10:02] <TJ-> lordievader: You want to support headless Java?
[10:03] <lordievader> Headless Java works, but this thing I'm trying to do requires a gui...
[10:03] <lotuspsychje> Hobbet1: replaced windows for ubuntu years ago
[10:03] <lordievader> I'm messing with MaryTTS again, to install extra voices you need X -.-
[10:03] <TJ-> lordievader: OK ... when you mentioned VM I wondered if you were creating a headless install
[10:06] <Hobbet1> lotuspsychje I still havent complete stepped away from windows because there are something i cant do without it, i just found out how to get amazon instant video to work on ubuntu
[10:07] <lordievader> TJ-: It should be headless. Using VNC for the moment to get this done.
[10:10] <Johnny_Linux> shoot
[10:11] <lotuspsychje> Johnny_Linux: welcome
[10:11] <Johnny_Linux> mornin
[10:11] <lotuspsychje> Johnny_Linux: we have gathered most active supporters here
[10:11] <Johnny_Linux> cool, thanks
[10:11] <lotuspsychje> Johnny_Linux: we do alot of support, and never have the chance to talk 2 each other
[10:11] <Johnny_Linux> i see that
[10:12] <Johnny_Linux> i just booted, going for  coffee
[10:12] <lotuspsychje> Johnny_Linux: okay cheers!
[10:13] <lotuspsychje> !cookie | Johnny_Linux to dip in your coffee
[10:13] <Hobbet1> i wish i drank coffee, i guess my soda will have to do lol
[10:13] <lotuspsychje> Hobbet1: what do you still need in windows?
[10:13] <TJ-> Everyone still needs Windows
[10:13] <lotuspsychje> i dont :p
[10:14] <TJ-> ... to remind them how good Linux is
[10:14] <lotuspsychje> haha
[10:14] <lotuspsychje> +1
[10:14] <TJ-> Gotchya! :)
[10:14] <lordievader> I use it for Lightroom.
[10:14] <lotuspsychje> lordievader: wasnt there a linux alternative for that yet?
[10:15] <lordievader> There was, but I never checked it out. I quite like Lightroom.
[10:15] <Hobbet1> work stuff for the fiancee she needs it so i dual boot the laptop but for myself since i found that amazon thing i dont really need windows and we can do netflix on ubuntu i hear with google chrome
[10:17] <lotuspsychje> !info darktable
[10:20] <TJ-> I only use Windows in VM, and that's to use Internet Explorer to manage some so-called 'intelligent' managed switches that have web interfaces that break with all modern HTML/ECMAscript-compliant browsers, such as my Netgear GS748TP.
[10:23] <Hobbet1> i told my better half that i was going to challenge her , i was going to make her use ubuntu for a week without windows and see how she likes it
[10:24] <lotuspsychje> Hobbet1: give her cool packages to make her life easy
[10:24] <lotuspsychje> !info cycle | Hobbet1
[10:26] <Hobbet1> cool any other recommendations i just installed cycle
[10:28] <lordievader> My Windows can be used as a VM is performance isn't critical. It can also be dual booted :D
[10:28] <lotuspsychje> Hobbet1: telegram for ubuntu desktop can be interesting aswell
[10:29] <lotuspsychje> Hobbet1: to chat from ubuntu to your wife on smartphone example
[10:33] <Hobbet1> sorry lotuspsychje that was an accident honest
[10:33] <lotuspsychje> Hobbet1: http://www.omgubuntu.co.uk/2014/05/telegram-whatsapp-rival-web-app-ubuntu
[10:38] <TJ-> Telegrams are *so* 19th century ... personally I prefer hand delivery :)
[10:39] <lotuspsychje> lol
[10:40] <Hobbet1> cool thank you
[10:41] <lotuspsychje> Hobbet1: what else does your wife use windows for?
[10:41] <Hobbet1> she uses familytree maker but i am going to have her try gramps
[10:42] <lotuspsychje> !info gramps
[10:42] <lotuspsychje> nice
[10:42] <lotuspsychje> never heard of this one b4
[10:43] <Hobbet1> she watches hulu, but since i figured out how to watch amazon that is taken care of
[10:45] <Hobbet1> she playes games on facebook so that is taken care of with google chrome, i will probably install like mahjong and tetris games for her
[10:47] <EriC^^> TJ-: this works /usr/bin/dbus-send --system --print-reply --dest="org.freedesktop.ConsoleKit" /org/freedesktop/ConsoleKit/Manager org.freedesktop.ConsoleKit.Manager.Stop
[10:47] <EriC^^> i don't remember it being that command though
[10:48] <TJ-> EriC^^: bloody 'ell !!
[10:48] <TJ-> Good luck giving that to someone :D
[10:48] <EriC^^> lol
[10:48] <TJ-> EriC^^: this works: *flips big OFF button*
[10:49] <EriC^^> lol
[10:49] <EriC^^> he wants it for a script though
[10:49] <Hobbet1> lotuspsychje i personally dont like  unity that much so i will probably install cairo dock for her to make transition a little easier
[10:50] <EriC^^> so i guess he won't mind it being so long
[10:50] <lotuspsychje> Hobbet1: you can use docky too for lightweight feeling
[10:50] <lotuspsychje> !info docky | Hobbet1
[10:51] <TJ-> I very much prefer KDE to Gnome or Unity
[10:51] <Hobbet1> hmm didnt know about that one
[10:52] <lotuspsychje> im pretty used to unity myself now
[10:52] <lordievader> TJ-: KDE \o/
[10:52] <lotuspsychje> its pretty intuitive even for older users
[10:52] <TJ-> You should try Unity (or Gnome) on 6 HD monitors!
[10:52] <TJ-> It's more than anightmare
[10:53] <lotuspsychje> TJ-: the average user, is not like you multitasking 4K :p
[10:54] <TJ-> That's not the point; the point is, if as a developer you change a key part of the stack (the GUI) then you do *not* introduce major regressions. That's what Unity and Gnome 3 did
[10:55] <TJ-> I'd sack any of my dev's if they did that. Rather like Linus's "You do NOT break userspace" mantra
[10:55] <lotuspsychje> TJ-: will mir fix that in the future?
[10:56] <TJ-> wayland is a step back for multi GPU multi monitor styup so far.
[10:56] <TJ-> Mir is the same ... targeted at the phone/tablet brigade
[10:56] <lotuspsychje> right
[10:57] <TJ-> Canonical's projects are driven by the need to find money-pots to fund the company and that is in the ODM/OEM/Cloud space, not in workstations
[10:58] <Hobbet1> can somebody please tell me the transitioning to a tablet from a leptop is, if your just going to add a keyboard to it
[10:58] <TJ-> And that is why many key developers have left of backed off their involvement in Ubuntu as a project. The recent issue between the CC and Jonathan Riddell made a lot of devs sit up and reevaluate supporting Ubuntu
[11:11] <lotuspsychje> TJ-: this is reall all getting complicated.. i wish they left the choice to the end user
[11:11]  * TJ- nods
[11:11] <TJ-> I'm moving more towards Debian now
[11:12] <lotuspsychje> more freedom?
[11:12] <TJ-> Openness
[11:13] <TJ-> I don't like decisions made in private without consultation that change project objectives ... Ubuntu has a Dictator... that's not really compatible with the ethos
[11:13] <lotuspsychje> i agree on that for sure
[11:14] <lotuspsychje> but still i like ubuntu's ease to install/use
[11:14] <TJ-> The reason upstart failed was it was an internal Canonical project imposed, rather than seeking design input and developers across the Linux community
[11:14] <lotuspsychje> and now all moving to systemd again..
[11:14] <TJ-> I don't see much difference in ease-of-use ... I like Debian for its packaging system
[11:14] <lotuspsychje> well its been long ive tested debian
[11:15] <TJ-> I chose to develop for Ubuntu originally because its development and release tempo was more suited to my aims
[11:16] <lotuspsychje> TJ-: so whats your 'feeling' about ubuntu touch conker the world with smartphones?
[11:17] <TJ-> lotuspsychje: It'll pass away the same as other Canonical money-making projects. Without critical mass these projects lose money
[11:17] <TJ-> The release tempo on smartphones is even more intense than for 'regular' Linux distros; that requires costly engineering resources permanently assigned
[11:18] <lotuspsychje> well i rather have ubuntu on a device, then malware nightmare android..
[11:18] <TJ-> What malware? I mainly use Cyanogen mod which I can build from source if needed
[11:19] <TJ-> Android's security model is very good in terms of applications isolation
[11:19] <lotuspsychje> TJ-: android is very unsecure
[11:19] <lotuspsychje> and play store full of dangerous apps
[11:19] <Hobbet1> thanks for letting me know i have android phones lol
[11:19] <TJ-> lotuspsychje: I diagree. Android uses SELinux MAC
[11:20] <TJ-> lotuspsychje: An app isn't dangerous if you don't install it!
[11:20] <TJ-> https://source.android.com/devices/tech/security/selinux/index.html
[11:20] <lotuspsychje> TJ-: yeah but this is the real world mate, everyone uses pc banking on android
[11:20] <lotuspsychje> and its a danger!
[11:21] <TJ-> lotuspsychje: Show me technical evidence not inuendo.
[11:21] <lotuspsychje> TJ-: the internet leaks with android security/malware issues
[11:22] <lotuspsychje> TJ-: same for Ios
[11:22] <lordievader> What?
[11:22] <lordievader> Where did you get that idea?
[11:23] <Daekdroom> They are app security issues.
[11:23] <lotuspsychje> anyone wants stolen pics from iphones/android?
[11:23] <lotuspsychje> =insecure
[11:23] <Daekdroom> They can plague whatever mobile OS lets 3rd party develop apps.
[11:24] <lotuspsychje> Daekdroom: try to break security on ubuntu touch
[11:25] <Daekdroom> lotuspsychje, whatever issues there were with Android apps that allowed people to sniff website passwords through WiFi wasn't an Android security breach at all, but poor app design
[11:25] <Daekdroom> The same thing can happen with Ubuntu Touch once it develops an app ecosystem
[11:25] <lordievader> lotuspsychje: An application can only get acces to photos when the user permitted the application to do so. If the application cannot handle that privilege how is the OS then insecure?
[11:25] <lotuspsychje> if poor apps can infiltrate an Os..
[11:25] <lordievader> It is the user trusting the application.
[11:25] <Daekdroom> It's not infiltration.
[11:26] <Daekdroom> You install an app, you guarantee certain permissions to it.
[11:26] <Daekdroom> But some people never bother with what the permissions might mean in the first place.
[11:26] <Daekdroom> And transmitting passwords over insecure HTTP is something that can happen in any platform.
[11:26] <Daekdroom> (i.e. it's a danger to internet usage, plain and simple)
[11:27] <lordievader> lotuspsychje: Does Ubuntu touch use apparmor too?
[11:27] <lotuspsychje> lordievader: not sure
[11:28] <Johnny_Linux> just a side note, selinux was created by our loving NSA
[11:28] <lordievader> True, and from what I have heared they done a good job.
[11:29] <Johnny_Linux> especially with the windows back doors
[11:29] <TJ-> You have to remember also that SDCard storage, where many large-data applications store user data, is not protected by application separation
[11:29] <lordievader> The only reason I am not using it is the stories I heared about SELinux made me feel like it was a PITA.
[11:30] <TJ-> Johnny_Linux: And has had very extensive workouts over a long period, and is one of several alternative MACs in the Linux kernel
[11:31] <lotuspsychje> the whole world is one big botnet of androids, pc's, servers
[11:31] <lotuspsychje> security is a big joke
[11:32] <Johnny_Linux> agreed
[11:32] <lordievader> What are you talking about? O.o
[11:32] <lordievader> lotuspsychje: Are you trolling?
[11:32] <lotuspsychje> many admins have no idea their servers are h4cked and are to proud to investigate
[11:33] <lotuspsychje> lordievader: im not, its the truth
[11:33] <lordievader> Right...
[11:33]  * lordievader goes back to coding
[11:33] <TJ-> I'd take SELinux over AppArmor any day. AppArmor is path-based whereas SE can attach to processes as well as files
[11:34] <lotuspsychje> rbots,sqlscanners,vnc,webstores,drupal,windows servers,rootkits..the whole world
[11:34] <lotuspsychje> and mobiles
[11:35] <Johnny_Linux> and smart meters
[11:35] <lotuspsychje> and all the 0day exploits, nobody still know..
[11:35] <TJ-> Better turn the PC off now, then!
[11:35] <Johnny_Linux> mine is solar powered
[11:35] <lotuspsychje> haha
[11:35] <TJ-> Or simply stop using insecure network connected programs
[11:36] <lotuspsychje> TJ-: can we tell that to the average user?
[11:36] <TJ-> Sure
[11:36] <lotuspsychje> using unsecure windows and android
[11:37] <TJ-> They have free choice ... and convenience usually wins out... just look at how people have flocked to Facebook
[11:37] <lotuspsychje> true
[11:37] <Johnny_Linux> and mark caled them all suckers
[11:37] <lotuspsychje> another exploit nightmare Fb
[11:38] <Johnny_Linux> facebook is a cia exploit
[11:38] <lotuspsychje> fb, skype,..
[11:38] <Johnny_Linux> magically thier stocked bloomed with no product, over nite
[11:38] <Johnny_Linux> stock
[11:38] <TJ-> People generally are not interested in preventative measures over convenience... until they get bitten by, for example, their personal identity data being compromised, or their PC getting locked by ransomware
[11:39] <lotuspsychje> how many ppl got money stolen over pc banking by romanian hackers?
[11:39] <lotuspsychje> millions
[11:40] <TJ-> Please, they're CRACKERS not Hackers. I'm a hacker, and I take exception to the misuse of the term for journalistic hype
[11:40] <lotuspsychje> under the hood of internet its a warzone, you all have to admit right
[11:40]  * lotuspsychje gives TJ- a whitehat :p
[11:41] <TJ-> lotuspsychje: All technology has been weaponised, since the invention of the flint knife
[11:41] <lotuspsychje> true
[11:41] <lotuspsychje> anyway ill rest my case and go into the sun :p
[11:41] <lotuspsychje> see you next debate lol
[11:42] <lotuspsychje> have a good sunday!
[11:44] <lordievader> TJ-: Do you watch Hak5?
[11:44] <TJ-> What's that?
[11:45] <lordievader> A tech show for hackers: http://hak5.org/
[11:45] <lordievader> I quite like it.
[11:45] <TJ-> I rarely touch TV or video ... too low a Shannon information content :)
[11:46] <TJ-> I prefer short succinct accurate text ... video just makes me want to get up and go do something useful :)
[11:46] <lordievader> Hehe, to each his own ;)
[11:51] <Hobbet1> Hak5 is a cool show, alsow category5 is a linux show also
[11:51] <Hobbet1> same with linux action show
[13:03] <BluesKaj> Hi folks
[14:29] <daftykins> o/
[14:37] <BluesKaj> hi daftykins
[14:37] <daftykins> g'day
[14:38] <daftykins> sad times for spacex, seems a lauch just blew up
[14:38] <BluesKaj> not again :/
[15:07] <daftykins> mmhmm
[19:14] <TJ-> Earlier I was helping a user that had managed to delete all the system shell packages from the system and was stuck with just the running BASH instance. As a result most commands could not be executed and I spent some time trying to find a way using only BASH internals to execute a command. There were 2 problems: 1) being able to list files in directories in the absence of 'ls' and 2) being able to execute a binary
[19:16] <TJ-> oh, and 3) not being able to use 'cat' to view file internals
[19:17] <TJ-> 1) is solved with the simple "for f in /some/path/*; do echo $f; done"
[19:17] <TJ-> 3) is solved with "while read line; do echo "$line"; done </path/to/file"
[19:17] <TJ-> 2) is solved by using 3) to find ld-linux.so, the library that executes commands
[19:19] <TJ-> It involves reading the contents of "/proc/self/maps" and parsing out the entries for ld-<version>*.so
[19:20] <TJ-> reduced into a single line that sets a variable it is:
[19:20] <TJ-> export EXEC=$(while read line; do A=${line/#*  /}; B=${A/#*ld-*\.so/YES}; [ "$B" == "YES" ] && echo $A && break; done </proc/self/maps)
[19:20] <TJ-> now any system executable can be launched with: $EXEC /absolute/path/to/executable
[19:22] <Bashing-om> TJ-: Now that shows such a deep comprehension of the operating system . I just love it .
[19:22] <TJ-> necessity is the mother of invention... and the father of "man bash" !!!
[19:23] <TJ-> maybe something to add to your emergency toolkit
[19:28] <daftykins> see i'd have just had them boot a live session and chroot
[19:28] <daftykins> why waste effort ;)
[19:28] <BluesKaj_> hmm, looks like greek to me :-) , but most of those commands containing non alphabet characters might as well be a foreign language
[19:28] <daftykins> impressive, though
[19:31] <TJ-> daftykins: not always possible
[19:31] <daftykins> maybe, but if someone's doing this stuff in a server context (only one where they couldn't that i can think of) then they're grade A fools :)
[19:32] <TJ-> daftykins: if files have been unlinked (e.g. with rm -rf *) but some running process is maintaining an open file handle to them, then the only way to save those files is to access the owner-process's /proc/$PID/fd/<number> and copy it back into the file
[19:33] <TJ-> daftykins: Think: database files for example :)
[19:33] <daftykins> you didn't mention them having open data
[19:34] <daftykins> i don't really follow that though
[19:34] <daftykins> so how did this user manage to screw up so badly?
[19:34] <TJ-> I'm generalising as to how this kind of tooling can save the day
[19:34] <daftykins> ah, yeah but that just stretches to justify your point
[19:35] <TJ-> The user was using Slackware and somehow the package manager somehow got its dependency graph wrong and decided to remove many key packages during what was supposed to be a routine package upgrade
[19:35] <daftykins> ouch
[19:35] <daftykins> that's a BAD package manager *smacks*
[19:37] <TJ-> daftykins: No it doesn't, I've used this construct in the distant past to save servers. They didn't lose the shells, but I had to use ld-linux.so to execute due to some corruption in the file-systems, and of course ld-linux.so was in-memory and therefor could be relied on when launching any further shells couldn't be
[19:41] <daftykins> maybe i just don't understand well enough :) seems an awful lot of hassle
[19:43] <TJ-> It can be but sometimes knowing this is possible can save the day. I was intrigued as to whether it was possible to achieve it from a single in-memory shell without recourse to any external utilities
[19:46] <daftykins> :D
[19:46] <TJ-> mentioning it here, I know I can always find it again via the IRC logs :)
[20:28] <daftykins> you mean you don't keep an engineers log book? :D
[20:37] <TJ-> I keep a Wiki but I forget where in it I save things :)
[20:59] <JanC> hehe
[21:00] <JanC> wiki's search not working well?  :)


 just remembered to register for Akademy! 🤭
 Where is the registration Rik, I can't find on the Akademy site
 @Sick_Rimmit, https://akademy.kde.org/2020/register
[19:02] <valorie> hmm, you are the second person to say they don't see it on the website
[19:02] <valorie> it's right up on the top bar
[19:23] <yofel> TBH it's fairly unintuitive... you open the Academy page > need to realize you're supposed to open "2020" at the top > then you need to realize that the navigation got completely replaced and open "Register" where you finally find the actual button
[19:23] <yofel> hi btw.
[19:24] <valorie> hi yofel
[19:24] <valorie> how's life?
[19:27] <yofel> okayish. At least I got through this mess so far without getting ill which is good, but it's getting tiring. And while I like working from home, doing so for almost half a year is starting to feel... weird.
[19:28] <valorie> yeah -- although I've always worked from home, more or less
[19:29] <valorie> I do miss family, friends and others though
[19:29] <valorie> and eating out!
[19:29] <valorie> we eat well because both of us cook
[19:29] <valorie> but ugh
[19:29] <yofel> that's the thing. I am getting used ot it bit by bit, but from September I'll have to go back to the office again - which will then be weird all over again ^^"
[19:29] <valorie> another meal at home....
[19:29] <valorie> yeah
[19:30] <valorie> so you're coming to Akademy?
[19:32] <yofel> I'll probably listen in to some sessions over the weekend. But as I'm on vacation after the 10th and have a vacation block before that, that's all I'll be able to do.
[19:33] <yofel> curious a bit what's happend while I was not paying attention
[19:36] <valorie> and LTS and the release of the Kubuntu Focus
[19:37] <valorie> I can't be there for all of it either, because the weekend is Labor Day weekend here, and I'll be up at the cabin for much of it
[19:37] <valorie> if the world doesn't blow up first....
[19:38] <valorie> my state is one of the more sane ones, but our count of infected rate keeps going up anyway
[19:41] <RikMills> I thought it was "under control" and "99% of cases are harmless"?
[19:41] <valorie> rofl
[19:41]  * RikMills runs and hides
[19:41]  * yofel stamps "politician" on RikMills
[19:41]  * valorie sends a Bolsinaro after RikMills
[19:42] <yofel> though ours here don't say it's harmless. Here things never got bad so far, but people are splitting into "tired" and "nervous". Especially with vacation at the door
[19:43] <valorie> yeah
[19:44] <RikMills> oh, someone needs to do the emails for KC elections!
[19:44] <valorie> this month?
[19:44] <valorie> or next month
[19:44] <yofel> now that's a familiar sentence ^^"
[19:45] <RikMills> people expire 2md Sept, and strictly call for nominations should be 2 months before
[19:45] <RikMills> *2nd
[19:46] <RikMills> though we have been later than this last few times and git away with it
[19:46] <RikMills> *got
[19:47]  * RikMills blames typing on last glass of wine
[19:50] <valorie> good call
[19:50] <valorie> it's only 1 in the afternoon here though
[19:50] <valorie> still finishing my coffee
[19:52] <valorie> but I'll send the panicked email OMG we need elections!!!!
[19:52] <valorie> and see who steps up
[19:56] <RikMills> I will if no-one else fancies it. it is not much work
 https://twitter.com/kubuntu/status/1284587862273515523
[20:45] <valorie> excellent image, RikMills
[20:46] <valorie> rt'd


[07:01] <RAOF> Urgh, that's annoying.
[07:02] <RAOF> Okaaaay, I'll do the bit fiddling then...
[07:22] <Saviq> Morn \o
[08:34] <RAOF> Today:... (full message at <https://libera.ems.host/_matrix/media/v3/download/libera.chat/a2eb962020c410a764f0007797f1b6db4fcf636d>)
[08:34] <RAOF>  * Today:... (full message at <https://libera.ems.host/_matrix/media/v3/download/libera.chat/02dc5ebfc26d28d1b3ab4400348460da53a764dc>)
[08:34] <RAOF>  * Today:... (full message at <https://libera.ems.host/_matrix/media/v3/download/libera.chat/69f41b437f56d864808e17cb788016f858509fdc>)
[15:44] <Saviq> sophie hey, so one of the problems I have with the bandwidth tests is that the gtk client app for for the dragged test seems to do nothing on slower hardware, any idea how to debug? I've used `cursor=software` to show that the tests works as expected, but it draggs nothingness :)
[15:44]  * Saviq uploaded a video: (37KiB) < https://libera.ems.host/_matrix/media/v3/download/matrix.org/mssmDvlMWbDLblSuwMVIDxMd/recording.mp4 >
[15:46] <Saviq> The app itself is silent:... (full message at <https://libera.ems.host/_matrix/media/v3/download/libera.chat/54519c13c5fdd65e50e983a2f1ab869b59986cd7>)
[15:47] <Saviq>  * The app itself is silent:... (full message at <https://libera.ems.host/_matrix/media/v3/download/libera.chat/16f733cd2983bd6fa47498b350c4adb583a77cad>)
[15:48] <Saviq> Looks stuck in some init phase...
 "Looks stuck in some init phase..." <- Here's `WAYLAND_DEBUG=1`: https://pastebin.ubuntu.com/p/Gkr9wgJM3T/, maybe it sheds a light
[16:49] <sophie-w> Will take a look
[16:52] <Saviq> sophie-w: I have a system handy that I can give you access to
[16:53] <alan_g[m]> Today:
[16:53] <alan_g[m]> * extending the DnD spike
[16:53] <Saviq> Saviq<EMAIL_ADDRESS>has your SSH key, but it's likely to go away in a bit - let me know and I can re-provision it for you for a longer debugging session
<EMAIL_ADDRESS>has..." <- I can't get in, also `ping <IP_ADDRESS>` doesn't work
[17:04] <Saviq> sophie-w: VPN?
[17:05] <sophie-w> I'm not on a VPN, do I need to be on the company VPN or something?
[17:05] <Saviq> Yes, company VPN. 10.* are intranet :)
[17:18] <Saviq> sophie if that still didn't work: `ssh<EMAIL_ADDRESS>[17:18] <Saviq>  * sophie if that still didn't work:
[17:18] <Saviq> ```
[17:18] <Saviq> ssh<EMAIL_ADDRESS>[17:18] <Saviq> ```
[17:19] <sophie-w> Thanks, I was half way through figuring out how to get on the VPN, but that's easier
[17:21] <sophie-w> Do I need to install deps to make it work? Or is there something I'm missing?
[17:23] <Saviq> You're set. Need to run from mir-ci/frame so it picks up conftest.py
[17:24] <Saviq> sophie it only has deps for `mir_test_tools`
[17:24] <sophie-w> Saviq: Ah, thanks, that's the trick
[17:24] <Saviq> Best run -k 'dragged and tools', that gives you the failing test alone
[17:26] <Saviq> sophie  ?
[17:35] <Saviq> Let me try and disconnect, it's probably messing up with your terminal... let me know if that kills the session
[17:38] <Saviq>  * @sophie let me try and disconnect, it's probably messing up with your terminal... let me know if that kills the session
[17:38] <sophie-w> It was working but that killed my session
[17:39] <Saviq> Here's another one:
[17:39] <Saviq> ```
[17:39] <Saviq> ssh<EMAIL_ADDRESS>[17:39] <Saviq> ```
[17:39] <Saviq> Not sure how the multiplexing works ?
[17:43] <sophie-w> > std::exception::what: Failed to find any platforms for current system
[17:44] <sophie-w> Do I need to install and use XVFB?
[17:44] <sophie-w> Didn't seem to have this problem before the reset
[17:49] <Saviq> That's because there's a server stuck in the bg
[17:49] <Saviq> It's running on GBM there, no xvfb
[17:50] <sophie-w> Cool, fixed
[18:44] <Saviq> sophie to see what's on screen, I used ubuntu-frame-vnc and mir_demo_server as host, then nest the tests inside. But with that tests you'll see black, unless you `--cursor=software`
[18:44] <Saviq> Did the session die?
[18:45] <sophie-w> Yep, died again.
[18:45] <sophie-w> I suspect the issue was with d-bus again, and I was trying to repro locally
[18:46] <sophie-w> Saviq: I've been using `WAYLAND_DISPLAY=wayland-88 grim ~/a.png && cacaview ~/a.png`
[18:46] <Saviq> Oh. That could explain indeed
[18:46] <sophie-w> (which displays the contents of the screen within the terminal using text lol)
[19:07] <Saviq> I can't reproduce locally, no session dbus running for my user and it completes fine. Unless a system-wide daemon placates it. But I'd think the GitHub runners don't have DBus either (and that's where we saw the gedit timeout, but not this issue)
[19:08] <sophie-w> Oh, hmm, my hunch might be wrong then
[19:10] <Saviq> (reprovisioning the thing); I'll try extending the timeout in the test, to see if the app ever pops up
[19:13] <Saviq> Didn't succeed in getting a session DBus on the remote machine, snap refused to start the server because of a changed cgroup... and I lost the machine before I was able to try with mir_demo_server from deb...
[19:46] <Saviq> sophie your hunch was right
[19:46] <Saviq> dbus-run-session pytest... makes it go with mir_demo_server, so now just have to solve the snap cgroup complaint
[19:47] <Saviq> Thanks for pointing at that, I'll take it from here