| AJNpa80 | i know this probably isnt a tech support forum, i need to find someone who is pretty knowledgeable, and im guessing they dont hang out in the support channel troubleshooting 1300 users | 06:15 |
|---|---|---|
| AJNpa80 | ok Im gonna throw this out there. I'm doing a wubi install on an averatec 3200. I'm getting the b43 phy0 ucode5.fw error on the first reboot. i know how to fix it in 3 diferent ways. it goes to bash after sitting for a minute or 5, i fix it over and over and changes are lost after reboot. i need to find out why the changes aren't saved even when i sync and reboot, also it would help to know how to start ubuntu from the bash | 06:15 |
| AJNpa80 | the changes are in memory should it not be possible to have them written before i boot in and finish the install. if anyone knows what i need please message me or email me. by the way i am using 8.10 xubuntu wubi, figured id try that to minimixe the possibility of problems just until i get it running once. the only distro that has ever booted on this turd was goblinx although i didnt get wireless working,(didn't try either) | 06:15 |
| AJNpa80 | b43 firmware didnt send it for a loop. if i can figure this out im gonna ditch windows altogether (i'm a semi newbie but i've tried several distros and setup several installations, my little personal laptop is the only on thats ever given me any problems but its helped me learn alot) thanks | 06:15 |
| plusmo | . | 06:25 |
| \mSg | on front page of digg | 07:15 |
| maxb | window level all | 07:50 |
| emilien | Ubuntu-classroom just made digg front page. | 08:18 |
| korhojoa | lol wut | 08:23 |
| emilien | http://digg.com/linux_unix/Announcing_Ubuntu_Open_Week_2 | 08:27 |
| UbuntuNewb | Hello all! Is it too early to visit with some stupid questions? | 09:14 |
| UbuntuNewb | Sometimes when I try to launch the synaptic package manager, it asks me for a password. The problem is that sometimes it won't accept my root-password, and sometimes it does. Like, 30 minutes ago It worked fine, now not at all. I know from experience that if I reboot, it will again accept my root password as the correct password. What can I do to fix this? | 09:25 |
| Mamarok | UbuntuNewb: you mean root password or user password? | 09:27 |
| Mamarok | as there is not really a root password in X/K/Ubuntu | 09:27 |
| Mamarok | also, are you using Kubuntu or Ubuntu? | 09:28 |
| Mamarok | oh, and anyway, this is not a support channel, you should ask in #ubuntu :) | 09:30 |
| UbuntuNewb | sorry, I had to run an errand. It is probably my user password. Ok, i will ask in #ubuntu. Thank you! | 10:44 |
| lokesh | greetings earthlings... | 10:47 |
| UbuntuNewb | greetings | 10:50 |
| lokesh | sup dude how are you this fine morning? | 10:51 |
| UbuntuNewb | fine fine. and you? | 10:51 |
| lokesh | yeah all good, just thinking about shopping :D | 10:51 |
| UbuntuNewb | I got probably the worst keyboard ever today though | 10:52 |
| lokesh | Its the one time in two weeks where I have to be frugal.. :P | 10:52 |
| UbuntuNewb | hehe | 10:52 |
| UbuntuNewb | *googling frugal* | 10:52 |
| lokesh | why worst keyboard, you got a nano keyboard? | 10:52 |
| UbuntuNewb | Frugal... "suppressing instant gratification by means of fiscal self-restraint" | 10:53 |
| lokesh | penny pinching is probably what google will say.. ;) gotta look after the penies then the dollars take care of themselves ;) | 10:53 |
| UbuntuNewb | no, i got one of those silicone ones | 10:53 |
| UbuntuNewb | really bad... | 10:54 |
| lokesh | nice! Have you seen those lazer projected virtual ones, me wants :) | 10:54 |
| UbuntuNewb | that looks cool, but so did this... until i tried it... | 10:54 |
| lokesh | lol, I knw, they always make em look cool till you actually try one | 10:55 |
| * lokesh whispers "and then you think silently why the hell did I buy this" | 10:55 | |
| UbuntuNewb | Xactly | 10:56 |
| lokesh | I've got a nano one on a tiny 7" laptop, its hell trying to type on a 7" keypad | 10:56 |
| UbuntuNewb | haha... damn you ebay | 10:56 |
| === _Purple_ is now known as _Purple_away | ||
| UbuntuNewb | i can only imagine... | 10:56 |
| lokesh | lol, I love eBay if you want a laugh you should check out the handhelds, the CnM Mini Book on eBay for 169.00 or buy direct from the supplier for 109.00 | 10:57 |
| lokesh | its a no brainer | 10:57 |
| UbuntuNewb | so, lokesh, are you a seasoned linux user? | 10:57 |
| lokesh | 6 years of Debian, Slack and Ubuntu ;) | 10:57 |
| lokesh | not seasoned as such I am still getting to grips but got to admit its sweet | 10:58 |
| UbuntuNewb | ebay, is great. but it's a curse aswell, i buy too much crap... | 10:58 |
| lokesh | my mother is the same man, she buys nothing but Glass | 10:58 |
| UbuntuNewb | well... I'm pretty new... | 10:58 |
| UbuntuNewb | I love it... but some things are difficult to gasp right off the bat... | 10:59 |
| lokesh | they sell some nice stuff on eBay but you have to refine your searches | 10:59 |
| lokesh | I can help you out :) whats got you stuck? | 10:59 |
| UbuntuNewb | yeah... and i probably shoud efine my bain also... ;) | 11:00 |
| UbuntuNewb | well... | 11:00 |
| lokesh | explore the terminal app more, get into compiling packages without the aid of .deb files | 11:00 |
| UbuntuNewb | Sometimes when I try to launch the synaptic package manager, it asks me for a password. The problem is that sometimes it won't accept my root-password, and sometimes it does. Like, 30 minutes ago It worked fine, now not at all. I know from experience that if I reboot, it will again accept my root password as the correct password. What can I do to fix this? | 11:01 |
| UbuntuNewb | probably not my root pasw, but the user pasw... but still the same... | 11:01 |
| lokesh | have you checked the security of your setup lately, do this open terminal and type: nmap -a -V localhost | 11:01 |
| lokesh | if you see loads of ports open you may have a problem | 11:02 |
| UbuntuNewb | ok... | 11:02 |
| UbuntuNewb | hmmm... my terminal wont even launch... | 11:03 |
| lokesh | I got hacked a couple of months back and that pissed me off no end, all because I installed Wine-Doors | 11:03 |
| lokesh | and someone was deep inside my setup | 11:03 |
| UbuntuNewb | damn... | 11:03 |
| UbuntuNewb | don't likethe sound of that | 11:04 |
| lokesh | you have to be really careful what you allow to run on linux.. | 11:04 |
| lokesh | now when I do nmap -a -V localhost it says no ports open ;) | 11:04 |
| lokesh | I went sick with security after I caught the turd.. | 11:04 |
| UbuntuNewb | my terminal wont even stat | 11:04 |
| lokesh | bad sign | 11:05 |
| UbuntuNewb | yure scaring me... | 11:05 |
| lokesh | relax its probably nothing but no terminal is not good | 11:05 |
| UbuntuNewb | should i uninstall wine? | 11:06 |
| lokesh | if you have it installed.. then thats up to you, wine is a crutch because it allows active X and windows scripting host | 11:06 |
| lokesh | which means they can hack it as though it was windows | 11:07 |
| UbuntuNewb | well. i never got the damn thing to work properl anyway... | 11:07 |
| lokesh | hell yeah bin it. | 11:07 |
| UbuntuNewb | but my problem is, i cant acess either the synaptic or terminal... | 11:07 |
| lokesh | that sounds pretty shitty | 11:08 |
| UbuntuNewb | damnit | 11:08 |
| lokesh | considering you are the root user or the next best thing down on the wheel, it shouldnt say no | 11:08 |
| UbuntuNewb | ok. i feel a reboot coming on | 11:09 |
| lokesh | a complete re-install may fix that but you have to check all your settings with nmap to check you havent been hax0rs | 11:09 |
| lokesh | if you have launch tcpdump with tcpdump -i eth0 and see who and where | 11:09 |
| UbuntuNewb | ok... so even if i remove wine, it can still be hacked | 11:09 |
| UbuntuNewb | ? | 11:10 |
| lokesh | depends what services you have left running | 11:10 |
| lokesh | ssh is a bad one | 11:10 |
| UbuntuNewb | now i REALLY feel like a newb | 11:10 |
| lokesh | because no one remembers to disable root login on ssh, they should go into ssh config and set rootlogin=no | 11:10 |
| lokesh | how strong is your password? | 11:10 |
| UbuntuNewb | is there a guide for these things? | 11:11 |
| lokesh | could it be guessed with a password brute forcer? | 11:11 |
| lokesh | its not a word from the dictionary is it? | 11:11 |
| UbuntuNewb | not very stong... | 11:11 |
| lokesh | thats bad | 11:11 |
| UbuntuNewb | no... its more a made up word, upper and lower case | 11:11 |
| lokesh | you need strong, your mobile phone number mixed with upper and lower case letters and numbers | 11:11 |
| lokesh | if its guessable they can break it | 11:12 |
| UbuntuNewb | ok, didn't know it was such a hazard... | 11:12 |
| lokesh | it can be, it all depends on what services you allow and disallow. nmap -a -V will reveal what you have allowed inadvertantly to run | 11:12 |
| UbuntuNewb | ok, so m cheklist is, diasable root os ssh, remove wine, nmap localhost... | 11:13 |
| lokesh | yeap, and run rkhunter | 11:13 |
| lokesh | rootkit hunter | 11:13 |
| lokesh | rkhunter -c (-c = check) | 11:13 |
| UbuntuNewb | ok, i can get that via synaptic right? | 11:13 |
| lokesh | yeap | 11:13 |
| UbuntuNewb | how do i disable ssh root? | 11:14 |
| lokesh | k. hold on | 11:14 |
| UbuntuNewb | sorry, im really new to this. | 11:14 |
| lokesh | In command shell, use pico or vi to edit sshd_config file by typing one of the following commands: | 11:15 |
| lokesh | pico /etc/ssh/sshd_config | 11:15 |
| lokesh | vi /etc/ssh/sshd_config | 11:15 |
| UbuntuNewb | ok. | 11:15 |
| lokesh | Scroll down the SSH server configuration file and locate a line like below | 11:15 |
| lokesh | #PermitRootLogin yes | 11:16 |
| lokesh | Uncomment the line by removing the hash symbol (#), and then change the “yes” to “no” | 11:16 |
| lokesh | PermitRootLogin no | 11:16 |
| UbuntuNewb | ok... | 11:16 |
| lokesh | Save the config file. In pico, press Ctrl-o, follow by Ctrl-x. In vi, type :wq and press Enter. | 11:16 |
| lokesh | Restart SSH server by typing the following command in command line, and press Enter | 11:16 |
| lokesh | /etc/rc.d/init.d/sshd restart | 11:17 |
| lokesh | then if you need SSHd at root level you login and SU or SUDO to root | 11:17 |
| UbuntuNewb | ok... *taking notes* | 11:17 |
| lokesh | good security practice, ssh is a crutch if you leave it running without stuff like hostsdeny | 11:17 |
| UbuntuNewb | i have to reboot to be able to do this... since the terminal wont start | 11:18 |
| lokesh | you can also turn it and meny services off by installing BUM | 11:18 |
| UbuntuNewb | bum available on via synaptic? | 11:18 |
| lokesh | yeap | 11:18 |
| UbuntuNewb | cool... | 11:18 |
| UbuntuNewb | scary stuff... | 11:19 |
| lokesh | I knw, but I am an out of work pentester so I always think of the worst first :) | 11:19 |
| UbuntuNewb | I thought ubuntu came "secured" out of the box... | 11:19 |
| UbuntuNewb | hehe | 11:19 |
| lokesh | my mum uses windows vista shes got 486 trojans.. LOL I shit you not | 11:19 |
| UbuntuNewb | i believe you... | 11:20 |
| lokesh | and shes behind a VPN draytek secured router, how they got in, in my humble opinion, the browser is IE.. and even though shes protected, we de-militarised a zone for my brothers X-box | 11:21 |
| lokesh | x-Box pfft... | 11:21 |
| lokesh | microsoft shite | 11:21 |
| UbuntuNewb | lol | 11:21 |
| UbuntuNewb | true | 11:21 |
| UbuntuNewb | thank you for your help... I have to reboot to get access to the terminal... will you be here in 5 minutes? | 11:22 |
| lokesh | yeah I'll hang around ;) | 11:22 |
| UbuntuNewb | cool.... cya in a sec | 11:22 |
| lokesh | k | 11:22 |
| lokesh | wb ;) | 11:27 |
| UbuntuNewb | *back* | 11:27 |
| UbuntuNewb | ty | 11:27 |
| lokesh | yw :D | 11:27 |
| lokesh | how that terminal commin | 11:27 |
| UbuntuNewb | runnng | 11:27 |
| === _Purple_away is now known as _Purple_ | ||
| UbuntuNewb | pico... running | 11:27 |
| lokesh | ok nmap -a -V localhost | 11:27 |
| lokesh | do you see open ports if so which ones | 11:28 |
| UbuntuNewb | command nmap not found... | 11:28 |
| lokesh | ctrl-C to command line break and launch a new process | 11:28 |
| lokesh | ah you need to install it | 11:28 |
| UbuntuNewb | synaptic running | 11:29 |
| lokesh | ignore the LUA being unable to work, thats because the synapic packages are so out of date | 11:29 |
| UbuntuNewb | ok... | 11:30 |
| UbuntuNewb | adding nmap, removing wine | 11:30 |
| UbuntuNewb | sheit wine... | 11:30 |
| lokesh | cool.. nmap is the shit ;) | 11:30 |
| UbuntuNewb | when writing "pico /etc/ssh/sshd_config" | 11:31 |
| UbuntuNewb | it opens an empty file... | 11:31 |
| lokesh | ok, thats cool it means your not running SSH | 11:31 |
| UbuntuNewb | *happeh* | 11:32 |
| lokesh | maybe, remember to check with rkhunter | 11:32 |
| UbuntuNewb | ok... | 11:32 |
| lokesh | if it spits out one warning, thats cool, depending on what it is, if it spits out loads, you have a problem | 11:32 |
| UbuntuNewb | ok... installing rkhunter... | 11:33 |
| lokesh | rkhunter -c | 11:33 |
| lokesh | after .. ;) | 11:33 |
| UbuntuNewb | when i searched for bum in synaptic mgr. it foud some "editor" | 11:33 |
| UbuntuNewb | do i search for "BUM" like that? | 11:34 |
| lokesh | yes graphical run editor | 11:34 |
| lokesh | thats the one | 11:35 |
| UbuntuNewb | cool... I wasnt sure | 11:35 |
| lokesh | then to lauch it type bum in terminal | 11:35 |
| UbuntuNewb | excuse m writing... this keyb. is retarded | 11:35 |
| lokesh | lol all cool | 11:35 |
| UbuntuNewb | it skips every other letter | 11:35 |
| lokesh | what did nmap say about open ports? any of them open?? | 11:35 |
| UbuntuNewb | so, bum effectively closes services... or... | 11:36 |
| lokesh | allows you to control which services run at bot | 11:36 |
| lokesh | *boot | 11:36 |
| UbuntuNewb | checking | 11:36 |
| UbuntuNewb | "-a" is ambiguous... | 11:37 |
| UbuntuNewb | nmap: option '-a' is ambiguous | 11:37 |
| lokesh | just type nmap on its own and hit enter, it'll tell you the right way | 11:37 |
| lokesh | you cant use nmap, thts evn worse!!! | 11:37 |
| lokesh | speaking from a security stand point | 11:38 |
| lokesh | if its saying no, thats bad! | 11:38 |
| UbuntuNewb | it launches... but it wont diagnose... | 11:38 |
| lokesh | hold on I'll double check the commands | 11:38 |
| lokesh | ah my bad its nmap -v -A localhost | 11:39 |
| UbuntuNewb | ok | 11:39 |
| UbuntuNewb | running | 11:39 |
| lokesh | one of the cool things with running terminator in terminal I can split screens ;) | 11:39 |
| UbuntuNewb | cool | 11:39 |
| UbuntuNewb | 25 open | 11:39 |
| UbuntuNewb | 631 | 11:39 |
| UbuntuNewb | 5900 | 11:39 |
| lokesh | shit, thats not so good.. | 11:40 |
| UbuntuNewb | i ran azureuz vuze on 5900 i think... but its not running now | 11:40 |
| lokesh | observe.. and I run deluge | 11:41 |
| UbuntuNewb | ok... damnit | 11:41 |
| lokesh | All 1000 scanned ports on localhost (127.0.0.1) are closed | 11:41 |
| lokesh | thats with me being in IRC too.. port re-directs ;) | 11:42 |
| UbuntuNewb | how do i close them? | 11:42 |
| lokesh | google each one slowly, but double check what they are by searching on google | 11:42 |
| UbuntuNewb | ok | 11:42 |
| lokesh | if one comes up as a trojan port, then its re-install for you.. | 11:42 |
| lokesh | I locked mine down | 11:43 |
| UbuntuNewb | ok... | 11:44 |
| UbuntuNewb | googling | 11:44 |
| UbuntuNewb | http://ubuntuforums.org/showthread.php?t=337868 | 11:45 |
| UbuntuNewb | ipp, whats that, printer? | 11:45 |
| lokesh | no cups is printer | 11:45 |
| lokesh | point to point tunneling is my wild guess | 11:46 |
| lokesh | some spotty kid with zits is shafting you slowly going hahaha, newb | 11:46 |
| UbuntuNewb | well... im confusd... is there a firewall i could use... or something... | 11:47 |
| lokesh | dont feel bad about it tho, it happens to the best of us | 11:47 |
| UbuntuNewb | =( | 11:47 |
| UbuntuNewb | ok... | 11:47 |
| lokesh | install crunchbanglinux... say goodbye to ubuntu.. although technically crunch is ubuntu but more secure, when you install stuff you have to know what the pro's and cons are | 11:48 |
| UbuntuNewb | well, how do you use your computer if all ports are closed? | 11:48 |
| lokesh | always read the security into | 11:48 |
| lokesh | magic ;) | 11:48 |
| UbuntuNewb | hehe, ok | 11:48 |
| lokesh | thats why I am Uber Hacker :D | 11:48 |
| UbuntuNewb | ok... | 11:49 |
| UbuntuNewb | and im the uber newb | 11:49 |
| lokesh | lol, dont worry five years from now you'll be on par with me ;) | 11:49 |
| UbuntuNewb | by then you probably conqured the world | 11:50 |
| UbuntuNewb | :) | 11:50 |
| lokesh | If only.. :) | 11:50 |
| lokesh | hack teh gibson!! :D | 11:50 |
| UbuntuNewb | hehe | 11:50 |
| UbuntuNewb | im running bum. | 11:50 |
| UbuntuNewb | what should and should not be enabled? | 11:50 |
| lokesh | depends all the stuff you found with nmap, when you look up what each one is, you can choose to disable if its held in Bum | 11:51 |
| lokesh | rkhunter ftw ;) | 11:51 |
| UbuntuNewb | running rkhunter | 11:52 |
| lokesh | if it comes up in red, then you have a minor skiddie problem | 11:53 |
| lokesh | lol | 11:53 |
| UbuntuNewb | 2 warnings.... unhide | 11:53 |
| lokesh | thats ok | 11:53 |
| UbuntuNewb | /usr/bin/unhide | 11:53 |
| lokesh | you can ignore unhide | 11:53 |
| UbuntuNewb | well, then its green across the board | 11:53 |
| lokesh | that goes away when you update rkhunter.. | 11:53 |
| lokesh | then your all good! congrats | 11:54 |
| UbuntuNewb | ah...thanx.. sorr, was only half way | 11:54 |
| lokesh | loosing terminal sounds like an issue though, I would look into that | 11:54 |
| UbuntuNewb | still running | 11:54 |
| lokesh | and synaptic | 11:54 |
| lokesh | cool | 11:55 |
| lokesh | if it shits about anything else tell me what and where | 11:55 |
| UbuntuNewb | ok... 1 warning | 11:55 |
| UbuntuNewb | "/dev | 11:55 |
| lokesh | just unhide? | 11:55 |
| UbuntuNewb | no, suspisous filetype... | 11:56 |
| lokesh | ooh.. nah sounds ok, if your logs came up, syslog etc.. nah thats ok | 11:56 |
| UbuntuNewb | doesn't specify which one... | 11:56 |
| UbuntuNewb | total : 2 suspect files.... | 11:56 |
| lokesh | mines green across the board.. but research etc.. | 11:56 |
| UbuntuNewb | 0 rootkits | 11:56 |
| lokesh | thats cool, you seem to be clean | 11:57 |
| UbuntuNewb | *pheeeeeeeew* | 11:57 |
| UbuntuNewb | i got really scared there | 11:57 |
| lokesh | google at which service is what and use bum to turn off the ones you dont want open to the world ;) | 11:57 |
| UbuntuNewb | thank you vey much | 11:57 |
| lokesh | yw | 11:57 |
| UbuntuNewb | :) | 11:57 |
| lokesh | I am a securty nazi .. :)) | 11:58 |
| UbuntuNewb | cool, i wanna be one too | 11:58 |
| lokesh | lots of reading the man pages :) | 11:58 |
| UbuntuNewb | btw, is there somekind of firewall that i could use? | 11:58 |
| UbuntuNewb | lokesh? still there? | 12:01 |
| UbuntuNewb | I closed the 631 cups port with bum | 12:03 |
| UbuntuNewb | 5900 is VNC | 12:03 |
| UbuntuNewb | removing Krfb )VNC= | 12:04 |
| lokesh | yep still here sorry I got cut off | 12:04 |
| Crusher | UbuntuNewb: If you are looking for a simple firewall gui, try firestarter | 12:04 |
| lokesh | an its danny, you dont have to call me loki ;) | 12:05 |
| UbuntuNewb | np. I thought I n00bd you 2 death | 12:05 |
| lokesh | nah dude, heh | 12:05 |
| UbuntuNewb | oh Hai Danny, I'm Mac | 12:05 |
| lokesh | gufw or firestarter, depends if its gnome or kde | 12:05 |
| lokesh | I use OpenBox ftw | 12:05 |
| lokesh | pleased to meet you mac ;) | 12:05 |
| UbuntuNewb | the pleasure is all mine, I assure you... | 12:06 |
| UbuntuNewb | I'm learning tons here | 12:06 |
| lokesh | we should hook up and I could show you some crazy pentesting stuff ;) | 12:06 |
| UbuntuNewb | haha.. cool, And I could teach you the rubriks cube! =) | 12:07 |
| lokesh | w3af... the web application attack and audit framework, sorry ubuntu, but people need to learn how to defend themselves againt the onslaught of script kiddies | 12:07 |
| UbuntuNewb | (changed to a real kayb. now) WOW what a dofference | 12:07 |
| UbuntuNewb | true true | 12:08 |
| lokesh | firefox is the best most secure browser, google chrome reminds me of simon says.. LOL | 12:08 |
| UbuntuNewb | haha it does | 12:08 |
| UbuntuNewb | I thought that first time I saw it also | 12:08 |
| lokesh | simple simon, whats google trying to say we're all idiots.. pfft | 12:09 |
| UbuntuNewb | port 5900 was VNC... | 12:09 |
| lokesh | the client or the server if its the server shut that off | 12:09 |
| UbuntuNewb | Google says... Browse! | 12:09 |
| UbuntuNewb | it is... I uninstalled the whole Krfb | 12:09 |
| UbuntuNewb | but the port is still open | 12:09 |
| UbuntuNewb | cant find it in bum | 12:10 |
| lokesh | google close port 5900 | 12:10 |
| UbuntuNewb | ok | 12:10 |
| UbuntuNewb | Google says: close port 5900 | 12:10 |
| lokesh | when you really get into linux then you can start playing with dynamic honey pots.. honeyd.. :) I use it with snort | 12:11 |
| lokesh | they dont know which service is what and when they fu** up I am watching them going ahhh! | 12:12 |
| UbuntuNewb | whats that? | 12:12 |
| lokesh | honeyd.. oh man, thats so cool | 12:12 |
| lokesh | you have to read the wiki | 12:12 |
| UbuntuNewb | tell me | 12:12 |
| UbuntuNewb | ok | 12:12 |
| UbuntuNewb | wiki honeyd? | 12:12 |
| lokesh | you can set up a whole fake network of machines, and they connect, but when they do you know! | 12:13 |
| lokesh | and you can tempt them with fake stuff, here download this, fool | 12:13 |
| lokesh | lol | 12:13 |
| lokesh | it's uber pwnage, did you hear ubuntu servers got pwned, only because they where out of date Linux copies | 12:14 |
| UbuntuNewb | ok | 12:14 |
| UbuntuNewb | no | 12:15 |
| lokesh | I complained recently due to the fact a lot of the stuff in the synaptic packge tree is out of date | 12:15 |
| UbuntuNewb | that sound like fun, but a scary at the same time | 12:15 |
| lokesh | ie: aircrack-ng rc1 should be rc3 its been years since anyone has updated the tree | 12:15 |
| UbuntuNewb | whyś that? I mean, why so outdated? | 12:15 |
| lokesh | aircrack is for breaking security at the packet layer level, but still helps havng the current release to test security | 12:16 |
| lokesh | if its old then people fall into the negligent oh we know about that, yeah you did three years ago | 12:16 |
| darth10 | aircrack is 2 text book for real attacks | 12:16 |
| lokesh | karmetasploit, by metasploit LLC.. ftw | 12:17 |
| UbuntuNewb | cool | 12:17 |
| UbuntuNewb | I love that kind of stuff... | 12:17 |
| lokesh | me too, it makes me hungry for more | 12:17 |
| UbuntuNewb | recently WPA-PSK was cracked, wan it? | 12:17 |
| lokesh | yes it was thats cowpatty | 12:17 |
| Crusher | lokesh: aircrack-ng is rc3 http://packages.ubuntu.com/search?keywords=aircrack&searchon=names&suite=jaunty§ion=all | 12:17 |
| lokesh | thats jaunty | 12:18 |
| lokesh | not intrepid | 12:18 |
| Crusher | intrepid is a stable release - stable releases never have the latest | 12:18 |
| UbuntuNewb | ok, I try to understand.. interpd? | 12:18 |
| UbuntuNewb | aha | 12:18 |
| lokesh | clamAv on intrepid is still 0.94 oh are you enjoying 0.95 and what about the people with intrepid? | 12:19 |
| Crusher | UbuntuNewb: intrepid is the code name for the 8.10 release of ubuntu | 12:19 |
| UbuntuNewb | aha, stupid me, Iḿ just Jaunty! =) | 12:19 |
| lokesh | yes with no update to the anti-virus because we are unworthy | 12:19 |
| UbuntuNewb | 9.04 beta | 12:19 |
| Crusher | lokesh: it doesn't stop you from updating it yourself if you want | 12:20 |
| UbuntuNewb | hehe | 12:20 |
| lokesh | lol, compile it yourself, time and configure it all by hand, no I'll stick with 0.94 besides viruses on linux | 12:20 |
| lokesh | no likelly | 12:20 |
| Crusher | lokesh: whats wrong with using the ppa? | 12:21 |
| lokesh | it just pisses me off that when you go to get the update oh jaunty has it but intrepid dosnt as we dont support you anymore | 12:22 |
| Crusher | lokesh: intrepid does get support still... it will for another year or so I think | 12:22 |
| Crusher | but support means security and bug fixes, not latest versions. | 12:23 |
| lokesh | Crusher yeah but where is the AV update now, by the time all the intrepid users get it, it'll be out of date and version 0.96 | 12:23 |
| lokesh | bit like aircrack, why have it hinging at version rc1 when rc3 has been out for years.. so stale | 12:24 |
| Crusher | I dont use clamav, so im not an expert on it but I would expect that it downloads virus definitions etc. itself | 12:24 |
| lokesh | they need to update the package stream | 12:24 |
| Crusher | lokesh: rc3 came out in march this year... | 12:25 |
| lokesh | 95% of all bug complaints are due to broken dependancies | 12:25 |
| lokesh | wakey wakey ubuntu && debain | 12:25 |
| lokesh | stop playing with jaunty.. besides jaunty is a resource hog | 12:26 |
| lokesh | KDE 4.. woo | 12:26 |
| Crusher | broken dependancies usually happen when users run third party scripts, which is out of ubuntus control | 12:26 |
| lokesh | no nmap is broken at the moment because ubuntu repos are using 8.64 when 8.84 has been out for a while | 12:27 |
| lokesh | stale | 12:27 |
| Crusher | lokesh: Jaunty comes out in like a week | 12:27 |
| maxb | stale != broken | 12:27 |
| Crusher | exactly | 12:27 |
| lokesh | jaunty is nice but I'll stick with intrepid as I think intrepid on OpenBox is awsome | 12:28 |
| Crusher | lokesh: if you want the latest and greatest you should be using the development release | 12:28 |
| UbuntuNewb | Now, that was a quick shower | 12:28 |
| lokesh | everything worx the way I look for it too | 12:28 |
| lokesh | I doo @ crusher, you dont expect me to wait for their release LOL | 12:28 |
| lokesh | I patch my own stuff ;) | 12:29 |
| maxb | You are, of course, welcome to stick with an older release, but if so, don't complain about packages being a bit stale. | 12:29 |
| lokesh | lol @ max I knw, downstream, but its just a question of knowing what you can update without it humping the kernel and what you cant | 12:29 |
| UbuntuNewb | Is really 9.04 that much of a recource stealer? | 12:30 |
| lokesh | last week I discovered the merits of MIPS on the i386 under qemu along with AES-Loop | 12:31 |
| Crusher | UbuntuNewb: no | 12:31 |
| lokesh | not really but if your like me you go for the minimalist custom approach | 12:31 |
| UbuntuNewb | Works very well here... except for the fact that I have a low end computer | 12:31 |
| lokesh | everything goes faster | 12:31 |
| lokesh | mines a celeron | 12:31 |
| UbuntuNewb | ok | 12:31 |
| lokesh | lol | 12:31 |
| UbuntuNewb | well it's a settop box | 12:32 |
| lokesh | with only 412mb of ram | 12:32 |
| UbuntuNewb | 1.6 Ghz Atom | 12:32 |
| lokesh | 1.4 ghz here ;) | 12:32 |
| UbuntuNewb | damn.. | 12:32 |
| Crusher | linux is very resource friendly | 12:32 |
| UbuntuNewb | that IS shy | 12:32 |
| UbuntuNewb | yeah, especially compared to bloated Vista | 12:33 |
| lokesh | I knw, I need to buy more but I am skint ;) | 12:33 |
| lokesh | besides with my external SATA disk, I have 160G | 12:33 |
| lokesh | so far I've only used 11G | 12:33 |
| === john is now known as Guest41262 | ||
| UbuntuNewb | ok. lol | 12:34 |
| UbuntuNewb | then what's the rush! =) | 12:34 |
| UbuntuNewb | danny, where you located? The states? | 12:34 |
| lokesh | one of my best mates is running risk disc's.. I feel behind in the times..lol | 12:34 |
| lokesh | nah UK | 12:34 |
| UbuntuNewb | k, then we're neighbours... | 12:34 |
| UbuntuNewb | Sweden here | 12:35 |
| UbuntuNewb | *waving* | 12:35 |
| lokesh | cool, fancy a beer, I love sweden, girls in caloshes | 12:35 |
| UbuntuNewb | LOL! | 12:35 |
| lokesh | pigtails.. :D | 12:35 |
| lokesh | yah ich can unt beer.. | 12:35 |
| UbuntuNewb | hehe... thatś germany | 12:35 |
| lokesh | lol I knw | 12:35 |
| lokesh | but they get the gist | 12:35 |
| UbuntuNewb | fo sho! | 12:36 |
| UbuntuNewb | Installed firestarter, GUI for iptables | 12:36 |
| UbuntuNewb | gonna close that 5900 port | 12:36 |
| UbuntuNewb | somehow... | 12:37 |
| lokesh | lol, google is your friend, at the same time as being evil, google, google is evil | 12:38 |
| UbuntuNewb | evil friend | 12:38 |
| lokesh | they're cookie expires 2038 | 12:38 |
| lokesh | CIA + Google = tracker | 12:39 |
| lokesh | I love firefox... | 12:39 |
| lokesh | bye bye cookie | 12:39 |
| UbuntuNewb | lol | 12:40 |
| UbuntuNewb | CRTL + SHIFT + DEL | 12:40 |
| lokesh | have you got the better privacy addon for firefox? bet you didnt know flash content leaves an unremovable cookie | 12:41 |
| lokesh | **bas**rds | 12:41 |
| UbuntuNewb | really? | 12:41 |
| lokesh | yeap | 12:41 |
| UbuntuNewb | adding that now! | 12:41 |
| UbuntuNewb | I tried adding a while ago, but it only supported FF2.x | 12:42 |
| Crusher | lokesh: where did you read that? | 12:42 |
| lokesh | nah its 3 now along with noscript | 12:42 |
| UbuntuNewb | It was a while ago.. | 12:42 |
| lokesh | crusher 16 years of internet use makes you pick these things up ;) | 12:42 |
| Crusher | lokesh: Im pretty sure flash doesn't leave an unremovable cookie | 12:43 |
| UbuntuNewb | *counting the years* | 12:43 |
| lokesh | *LSO cookie, see for yourself | 12:43 |
| lokesh | its removable but you have to remove it with the addon | 12:44 |
| lokesh | otherwise you are being tracked | 12:44 |
| UbuntuNewb | *looking over shoulder* | 12:45 |
| lokesh | its all commercial the internet is advertising.. thats where 95% of all the revenue comes from | 12:45 |
| UbuntuNewb | added privacy addon | 12:45 |
| lokesh | install no script and no more advertising, you get to decide what is allowed and what is not | 12:45 |
| UbuntuNewb | cool | 12:45 |
| lokesh | along with flash block ;) | 12:45 |
| lokesh | it pisses off the advertisers no end, but I will thank them for keeping their XSS out of my browser | 12:46 |
| Crusher | lokesh: They are hardly unremovable... | 12:46 |
| UbuntuNewb | damnit, I can find any real guide on how to close port 5900 | 12:46 |
| lokesh | click here to ignore this add, thats pretty anoying when you didnt even agree to popup adverts in the first plqace | 12:47 |
| lokesh | and those are flash ads | 12:47 |
| lokesh | hijacking your browser.. damn you microsoft | 12:48 |
| UbuntuNewb | hate those | 12:48 |
| Crusher | noscript is a great addon, makes browsing much nicer IMO | 12:48 |
| lokesh | yeap and keeps you safe from some of the stuff ;) | 12:48 |
| lokesh | along with pref switch to hide your real browser ;) | 12:48 |
| lokesh | I am googlebot really honest !! LMFAO | 12:49 |
| UbuntuNewb | hehe | 12:50 |
| UbuntuNewb | hack teh gibs0n! | 12:50 |
| lokesh | lol | 12:50 |
| lokesh | or @ least hack googles CADIE.. :) | 12:50 |
| lokesh | sorry CADIE but you is windows whore, me linux.. asta la vista baby! | 12:51 |
| lokesh | ROFL | 12:51 |
| UbuntuNewb | hehe | 12:52 |
| * maxb is sceptical about the concept of an unremovable cookie | 12:53 | |
| lokesh | it's removable but not easily without the addon | 12:53 |
| lokesh | like the new chrome browser, did you notice the unique client ID attached? | 12:54 |
| lokesh | like I said free software nazi, plus security guru.. I dont let a lot slip past me.. | 12:54 |
| lokesh | google can go and shove their google analytics | 12:55 |
| UbuntuNewb | hehe. | 12:55 |
| maxb | A cookie is just a piece of data. How can you make a dumb piece of data unremovable? | 12:55 |
| UbuntuNewb | I closed the 5900 port now. was the remote desktop | 12:55 |
| lokesh | its the way its gets buried in the broswer | 12:56 |
| lokesh | its removable but the only reason its there is to spy | 12:56 |
| Crusher | lokesh: rm -r .macromedia seems pretty simple to me | 12:56 |
| lokesh | spyware.. god damn you adobe | 12:56 |
| lokesh | lol | 12:56 |
| Crusher | and its not there just to spy... it has a legitimate purpose | 12:57 |
| lokesh | yeah but you need adobe if your going to visit OvGuide# | 12:57 |
| Crusher | and they can be disabled completely if so desired | 12:57 |
| lokesh | I live my online video along with my online radio.. but if its flash watch out | 12:57 |
| lokesh | big brother is watching | 12:57 |
| lokesh | *love | 12:57 |
| lokesh | thats why I like deluge bit-torrent, you can download without the fear of some FBI agent turning up on your door, why, because its encrypted and has a block list | 12:58 |
| lokesh | MPAA, RIAA, bye! | 12:58 |
| lokesh | all you see is me getting an encrypted stream and you dont know what it is! | 12:59 |
| UbuntuNewb | but can you use youtube then? | 12:59 |
| UbuntuNewb | its flash | 12:59 |
| Crusher | if you were worried about that you wouldn't be using bitorrent | 12:59 |
| lokesh | if I support the artist heh, ill buy their product not because of advertising | 12:59 |
| Crusher | encryption + blocklist arent perfect | 12:59 |
| lokesh | but because I endorse what they're selling | 12:59 |
| lokesh | comedy central pwns | 13:00 |
| Crusher | UbuntuNewb: dont worry about the "flash cookies" | 13:00 |
| lokesh | crusher yeah but its encrypted so they know your downloading, but as to what it is they have no idea | 13:00 |
| lokesh | and on that note is it really any of their buisness? | 13:01 |
| Crusher | lokesh: all they need to do is connect to the same torrent as you and they can see your IP | 13:01 |
| lokesh | no, not with deluge, they cant :) | 13:01 |
| Crusher | ummm, yes they can... | 13:02 |
| Crusher | unless your going thru a VPN or something | 13:02 |
| UbuntuNewb | ip block tables are really not 100% | 13:02 |
| lokesh | ;) proxy chains | 13:02 |
| UbuntuNewb | aha. you rasqal you! | 13:02 |
| UbuntuNewb | TOR? | 13:02 |
| lokesh | ;)~ old devil with gray hair, no just proxy chains from synaptic | 13:03 |
| Crusher | proxy chains... not if you like to get your download anytime soon | 13:03 |
| lokesh | depends on the proxy | 13:03 |
| UbuntuNewb | where do you get proxies then? | 13:03 |
| lokesh | lol, anonymise me etc, google search anonymous proxies | 13:04 |
| lokesh | also used for hacking into something you shouldnt be in, when they check the logs "oh he was in taiwan!!" | 13:04 |
| Crusher | good luck finding one fast enough | 13:04 |
| UbuntuNewb | so you enter consecutive poroxies into proxychains? | 13:04 |
| lokesh | depends.. tor is ok, but I dont really endorse it as i THINK it blows | 13:05 |
| UbuntuNewb | TOR = really reeally slow | 13:06 |
| lokesh | meny is the time I went to watch a movie and its said, sorry your outside the US.. hello proxy and watch the flick | 13:06 |
| lokesh | finding one fast ennough on a 25mb line... not an issue | 13:07 |
| lokesh | if I was dial up then yeah that would pose a problem | 13:07 |
| Crusher | you mean the other way around? | 13:09 |
| Crusher | finding a free proxy for 25mb is near impossible | 13:09 |
| lokesh | the thing is, when you boil it all down the mentor last words hinge in your mind, you can stop one of us, but you cant stop us all... | 13:09 |
| lokesh | Hack'The'Planet!!!!! | 13:10 |
| lokesh | Bletchley park, colosus, yes but the NSA have echalon, carnivore, know what your exposed too, each day online, they want to build a profile.. dont let them | 13:12 |
| lokesh | network ninja's smoke my ass ... :) | 13:12 |
| soren | Yet here you are, on a publically logged channel... | 13:13 |
| lokesh | lol | 13:13 |
| lokesh | from an IP that is local but not at the same time | 13:13 |
| lokesh | over 100 other people use this access point | 13:13 |
| lokesh | and what's wrong with being a hacker and not a script kiide? | 13:14 |
| lokesh | I dont do illegal.. if you want me to hack your girlfriends email the answer is NO! | 13:14 |
| Crusher | you are mistaking hacking for cracking | 13:14 |
| lokesh | Blackhat 2 Whitehat | 13:15 |
| lokesh | I knw | 13:15 |
| lokesh | but I am enlightened none the less :) | 13:15 |
| Crusher | lokesh: http://catb.org/jargon/html/H/hacker.html | 13:15 |
| lokesh | oh not the jargon file.. fu** no | 13:15 |
| lokesh | @ Crusher have you looked at the hacker crackdown by bruce sterling | 13:17 |
| lokesh | awsome boook | 13:17 |
| Crusher | nope | 13:17 |
| lokesh | I have pwned meny of such books.. because reading them has expanded my mind | 13:17 |
| lokesh | its worth a read | 13:17 |
| lokesh | along side terry pratchett because his books just make me LOL | 13:18 |
| UbuntuNewb | whats the equvalent command of ipconfig in ubuntu? | 13:18 |
| lokesh | ifconfig | 13:18 |
| lokesh | eg: ifconfig -a | 13:19 |
| UbuntuNewb | k... thx | 13:19 |
| lokesh | np | 13:19 |
| UbuntuNewb | uhm... firestarter is warning me of a "hi" from my own ip?? | 13:20 |
| lokesh | did you google it ? | 13:20 |
| lokesh | lol, google is evil, but none the less if you dont know what it does, google it first | 13:21 |
| UbuntuNewb | ok | 13:21 |
| lokesh | I feel bad, I just had to lock someone out of my house... I know this kid.. but he always wants from me.. :P | 13:23 |
| lokesh | free tin of beans, not today | 13:23 |
| UbuntuNewb | eh... it seems like the whole internet is knocking on my door | 13:23 |
| lokesh | lol, thats because they all live in china or russia and they know where you are.. LMAO | 13:24 |
| UbuntuNewb | seriosly... im getting hundreds of hits per minute | 13:24 |
| lokesh | chinese and russians are the worst | 13:24 |
| lokesh | they are script kiddie central | 13:25 |
| lokesh | later, I must hide my whereabouts for a while, or at least whilst this idiot is ringning my doorbell.. | 13:26 |
| lokesh | bbl | 13:26 |
| UbuntuNewb | later | 13:27 |
| Crusher | lmao, that conversation was humerous | 13:28 |
| UbuntuNewb | lol... | 13:37 |
| UbuntuNewb | crushr... | 13:38 |
| UbuntuNewb | should i be worried if my firewall says i get a lot of "hits"? | 13:39 |
| Crusher | no, its quite common | 13:40 |
| Crusher | epecially if you use peer to peer programs etc. | 13:40 |
| Crusher | firestarter by default blocks everything I think, and will show lots of hits | 13:40 |
| Crusher | so you look at the logs and see if you want that port blocked or not, and open it up if you need to | 13:41 |
| lokesh | wb me.. :) | 13:41 |
| lokesh | I block them all, if you sniff me you get snort.. :) | 13:41 |
| UbuntuNewb | thx crusher | 13:42 |
| Crusher | np | 13:42 |
| lokesh | but I am also behind very out-dated MESH linux on boxen that has linux SSH.. more fool them | 13:43 |
| UbuntuNewb | ok.. but quie had and pointless to block he whole interne? | 13:43 |
| UbuntuNewb | internet | 13:43 |
| Crusher | you can still make connections out | 13:43 |
| lokesh | your not blocking the whole internet, your blocking whats allowed local | 13:43 |
| Crusher | it just stops them from connecting to your computer | 13:43 |
| * lokesh nods and agrees with crush | 13:44 | |
| Crusher | usually you block everything and then whitelist what you want to let through | 13:44 |
| UbuntuNewb | ok, how do i do that? | 13:45 |
| lokesh | crusher can I hax0r your IP? I have to ask, as your probably better than me but If I find a security hole you can love me... feel the love!! LOL | 13:45 |
| lokesh | P.S the guy on my door went away @ last | 13:46 |
| === pleia2 changed the topic of #ubuntu-classroom to: Ubuntu Classroom || https://wiki.ubuntu.com/Classroom || https://lists.ubuntu.com/mailman/listinfo/ubuntu-classroom | Upcoming: 16 Apr @ 18:00 UTC: How-to update a package; 23 Apr @ 00:00 UTC Package testing: piuparts and VMs | Run 'date -u' in a terminal to find out the UTC time | ||
| UbuntuNewb | you got strangers knocking on yyour door? | 13:47 |
| lokesh | no some kid, I helped him out once, that to his mind means I help you out all the time | 13:47 |
| lokesh | :P | 13:47 |
| Crusher | UbuntuNewb: https://help.ubuntu.com/community/Firestarter has some information on how to use firestarter | 13:47 |
| UbuntuNewb | thank you | 13:48 |
| lokesh | he can blow me.. with big hexadecimal chunks .. :) | 13:48 |
| lokesh | nice to see your going down the firewall path, but read the wiki on honeyd.. its worth it just to watch those idiots try to hack their way in | 13:49 |
| lokesh | from *china, russia! etc... blow me because I pwn yur lame PHP | 13:50 |
| Crusher | firestarter is fine for a simple setup | 13:50 |
| * lokesh nods | 13:50 | |
| lokesh | honeyd gets more complex ;) | 13:51 |
| lokesh | but its worth it just to watch those idiots try, then you can hit them with strong swan.. ec | 13:51 |
| lokesh | acid base etc | 13:52 |
| lokesh | welcome to acid, it will eat you alive.. :) | 13:52 |
| UbuntuNewb | anyone know anthing about oneswarm? | 13:52 |
| lokesh | stongswan, and aviod it if you can thats heavy | 13:52 |
| UbuntuNewb | as soon as I start it the events tab in firestater goes nus | 13:53 |
| UbuntuNewb | nuts | 13:53 |
| Crusher | UbuntuNewb: Thats normal at the start, once you idntify and whitelist the traffic you want to it stops going crazy | 13:53 |
| lokesh | its impossible to say, unless someone that knows looks at your set-up and says "why is that there?" | 13:53 |
| lokesh | RTFM.. | 13:54 |
| UbuntuNewb | ok... but i dont know all thse ip's... i haven't even added any friends yet... | 13:54 |
| UbuntuNewb | so if i whitelist it... then they g in... | 13:55 |
| lokesh | lol, your feeling out of your depth.. then back out and remove it | 13:55 |
| lokesh | its heavy stuff for sysman only | 13:55 |
| Crusher | UbuntuNewb: look more at the ports and work out what they are trying to connect to | 13:55 |
| Crusher | not individual IP's | 13:55 |
| UbuntuNewb | ok, thnx | 13:55 |
| * lokesh nods @ crush | 13:55 | |
| Crusher | most of them are probably legitimate | 13:55 |
| UbuntuNewb | its the same port as i have set up in he application | 13:56 |
| lokesh | but some wont be, you should see mine @ crush, I have a lot of local IP's that are skids and believe me its fun | 13:56 |
| UbuntuNewb | maybe it's trying to connet to update severs? | 13:56 |
| * lokesh laughs out load "welcome to ubuntu linux, the deep end on securing every desktop application!" | 13:58 | |
| UbuntuNewb | that's the way i feel right now | 13:58 |
| Crusher | UbuntuNewb: are they inbound events? | 13:58 |
| lokesh | tcp/ip | 13:59 |
| UbuntuNewb | it looks like they are | 13:59 |
| UbuntuNewb | inbound | 13:59 |
| lokesh | crush he'll get it, it takes time, linux and the magic of, dosnt happen over night ;) | 13:59 |
| Crusher | UbuntuNewb: Ok, and what port number? | 14:00 |
| UbuntuNewb | 44811 | 14:00 |
| UbuntuNewb | no sorry, thats outgoing | 14:01 |
| lokesh | are you still using nmap -a -V localhost? | 14:01 |
| UbuntuNewb | yes | 14:01 |
| lokesh | map those and mail them to enima@snakebite.com I'll mail you on how to close them one by one | 14:02 |
| Crusher | UbuntuNewb: basically, you want to try and find out what application/service it is and working out if you want to allow that service to talk to the internet | 14:02 |
| UbuntuNewb | well. right now only port 25 isopen | 14:02 |
| UbuntuNewb | ok. thnx. | 14:02 |
| UbuntuNewb | well. i know what application it is. it is "oneswarm" | 14:03 |
| lokesh | ah you've killed a lot of stuff then, port 25 is that SMTP or Telnet, I forget.. | 14:03 |
| UbuntuNewb | yeah, closed them all one by one | 14:03 |
| Crusher | UbuntuNewb: and do you want to allow oneswarm? | 14:04 |
| lokesh | I hope thats not send mail, sendmail will fudge the worls | 14:04 |
| UbuntuNewb | technically, i'd like hat. | 14:04 |
| UbuntuNewb | bt i want to let my family and friends in... not a bunch of strangers... | 14:04 |
| lokesh | which color, black, gray, white or blue? | 14:04 |
| UbuntuNewb | blue | 14:05 |
| Crusher | ok, if you want to only let family and friends in you need to find out each of their IP addresses and add them individually | 14:05 |
| Crusher | otherwise you add a rule to allow the service | 14:05 |
| UbuntuNewb | ok... | 14:05 |
| UbuntuNewb | that's a pain... | 14:06 |
| UbuntuNewb | sinse everyone got dynamic adresses... | 14:06 |
| UbuntuNewb | can i add a dyndns as a rle? | 14:06 |
| UbuntuNewb | rule | 14:06 |
| Crusher | yeh, you can add a host | 14:06 |
| UbuntuNewb | onw swarm uses a lot of connections to allow decentralised tacking... | 14:07 |
| UbuntuNewb | tracking | 14:08 |
| Crusher | yes, it will be quite difficult to add individual IP's | 14:08 |
| Crusher | if it were me, i would just allow the service | 14:08 |
| UbuntuNewb | since everybodys connctions are distributed through DHT | 14:08 |
| UbuntuNewb | ok... | 14:08 |
| UbuntuNewb | so i right click one of the "hits" | 14:08 |
| UbuntuNewb | allow connections form source? | 14:09 |
| Crusher | try right clicking on the service | 14:09 |
| Crusher | or the port | 14:10 |
| Crusher | been a while since ive used firestarter, lol | 14:10 |
| UbuntuNewb | ok, i've allowed the "unknown service" on port xxxx for everyone | 14:11 |
| Thawt | lol, wht.. oh noooo! | 14:11 |
| UbuntuNewb | ? | 14:12 |
| Crusher | ok, does that reduce the noise in the event log? | 14:12 |
| UbuntuNewb | yep. to zero | 14:12 |
| Crusher | :) | 14:12 |
| UbuntuNewb | thank you | 14:12 |
| Thawt | yw | 14:13 |
| Crusher | so over time you will notice things in the eventlog, and you will have to work out if you want to allow them or not | 14:13 |
| Thawt | or you can kill syslog and let snort handle it all | 14:13 |
| UbuntuNewb | ok. super... | 14:13 |
| UbuntuNewb | hank you... | 14:13 |
| UbuntuNewb | i just didn't like all those unknown ip's... | 14:13 |
| Crusher | you get that with p2p applications | 14:14 |
| Crusher | lol | 14:14 |
| Thawt | heh, I have millions of them... | 14:14 |
| UbuntuNewb | but I guess it's unavoidable with DHT | 14:14 |
| === Thawt is now known as lokesh | ||
| UbuntuNewb | yeah... | 14:14 |
| UbuntuNewb | thanks | 14:14 |
| UbuntuNewb | *sigh of relief* | 14:14 |
| lokesh | not so much of a newb now.. :) | 14:15 |
| lokesh | welcome to the deep end | 14:15 |
| UbuntuNewb | hehe | 14:15 |
| UbuntuNewb | crash course in ubuntu | 14:15 |
| Crusher | there is lots of documentation on the net to help you out | 14:15 |
| lokesh | not so much just ubuntu ist jus linus | 14:15 |
| UbuntuNewb | i've learned a lot last 24hrs | 14:16 |
| Crusher | and ubuntu is pretty secure by default, so you don't need to worry about it too much | 14:16 |
| Crusher | as long as you keep your system upto date | 14:16 |
| lokesh | one last thing for you to learn, bash shell is ghey, korn shell is the shit | 14:16 |
| lokesh | end off | 14:16 |
| lokesh | LOL :) | 14:16 |
| UbuntuNewb | ok,whats a shell | 14:16 |
| Crusher | lol | 14:17 |
| lokesh | terminal | 14:17 |
| UbuntuNewb | is it the command line? | 14:17 |
| lokesh | yes | 14:17 |
| Crusher | yes | 14:17 |
| Crusher | dont worry about it | 14:17 |
| UbuntuNewb | AH, AND i CAN CHANGE IT? | 14:17 |
| UbuntuNewb | srrycaps... | 14:17 |
| Crusher | lol, most people use bash, its an excellent shell | 14:17 |
| UbuntuNewb | (hae this keyboard) | 14:17 |
| Crusher | no need to change it | 14:17 |
| lokesh | no but you can choose which one you would like to run, my suggestion, go out and buy Unix for Dummies | 14:17 |
| UbuntuNewb | ok... seems to work fine for me as it is... | 14:18 |
| UbuntuNewb | i will | 14:18 |
| Crusher | you can do most stuff using a GUI now days | 14:18 |
| lokesh | its worth having ;) | 14:18 |
| UbuntuNewb | i gotta read up on the basics | 14:18 |
| lokesh | yeah except pwn a shell from gui ;) | 14:18 |
| lokesh | special tilde ^ | 14:19 |
| Pollywog | you folks have been talking for 5 hrs? | 14:19 |
| Pollywog | did I miss a class? | 14:20 |
| Crusher | no Pollywog | 14:20 |
| lokesh | welcome to class, you are late, you get detention, write 1000 times I must not be late for class | 14:20 |
| Pollywog | k | 14:20 |
| Crusher | class is in ~3 hours I think | 14:20 |
| Pollywog | k I thought so | 14:20 |
| Crusher | 4.5 hours | 14:21 |
| lokesh | and shrinking | 14:21 |
| Pollywog | not 3.5? | 14:21 |
| * Crusher shrugs | 14:21 | |
| Crusher | its late | 14:21 |
| Crusher | lol | 14:21 |
| UbuntuNewb | hehe | 14:21 |
| UbuntuNewb | 5 hours??? | 14:21 |
| UbuntuNewb | gdamn | 14:21 |
| lokesh | we've been at it all day explaining security to newb ;) | 14:22 |
| UbuntuNewb | And I was spposed to study... | 14:22 |
| Pollywog | oh that's right we have daylight saving time here, so it is more like 4.5 hrs | 14:22 |
| lokesh | study?? | 14:22 |
| UbuntuNewb | lol... hehe, im a student... | 14:22 |
| UbuntuNewb | I got an exam in java progamming soon | 14:22 |
| lokesh | what are you studing, dont tell me its VB or JS.. | 14:23 |
| UbuntuNewb | major in computer science | 14:23 |
| lokesh | ah heh, I have a GNVQ @ level 3, ++ a major in computer science.. suck it!! LOL | 14:24 |
| lokesh | the SQL teacher loved me, System Manager was the default login, he squiled, you shouldnt be in there.. but I was .. :D | 14:25 |
| lokesh | staff access to the whole college.. I bet that pissed them off | 14:26 |
| UbuntuNewb | lol | 14:26 |
| lokesh | some hacking tips, if your teacher logs in, shoulder surf his ID and Pass | 14:27 |
| lokesh | then you have the answers to all the exams :_ | 14:28 |
| UbuntuNewb | I wouldn't dare that | 14:28 |
| lokesh | I done it, they didnt even twitch, or know | 14:28 |
| lokesh | because their world is microsoft, but you come from a nix background, do it they never even notice, novel networks.. pfft | 14:29 |
| lokesh | they need a sticky note to remind them of their pads | 14:30 |
| lokesh | *pass | 14:30 |
| Pollywog | I guess they forget the name of their spouse or dog | 14:30 |
| UbuntuNewb | lol | 14:31 |
| lokesh | I got pulled up one day by the network admin, and told do it again and youll go to the dogs.. I was the only guy in the class that knew anything | 14:31 |
| lokesh | he was pissed at what I did.. oh they got what they deserved | 14:32 |
| UbuntuNewb | haha | 14:32 |
| UbuntuNewb | yu're crazy | 14:32 |
| lokesh | time + bomb + logic = duh | 14:32 |
| lokesh | nah just sick computer skillz :) | 14:32 |
| UbuntuNewb | I like turtles | 14:33 |
| lokesh | me too, they're vicious | 14:33 |
| lokesh | people make the mistake of thinking a turtle is slow, but no.. a turtle is vicious as hell... dont believe me offer it your finger!!! | 14:35 |
| include_pr | lol | 14:35 |
| Pollywog | frogs don't bite | 14:35 |
| Pollywog | unless you are a bug | 14:36 |
| lokesh | lol | 14:36 |
| UbuntuNewb | Im a bug | 14:36 |
| UbuntuNewb | :) | 14:36 |
| lokesh | I used to feed live bugs to my turtle.. oh yeah "jaws theme tune.. du duh!" it used to eat them alive.. | 14:37 |
| lokesh | big bath tub what was a terapin turned into a big sea water turtle | 14:38 |
| lokesh | it was funny you could throw the half stunned bug into the bath and watch the turtle go.. "ah... Dinner!!!" | 14:39 |
| lokesh | if you have a turtle, but him in a big space they need room to grow ++ give him rocks to climb on | 14:41 |
| lokesh | -- dont handle it with your hands unless your quick, they can steal a finger | 14:41 |
| UbuntuNewb | lol | 14:42 |
| lokesh | you wouldnt lol if one got a hold of your finger.. ;) | 14:43 |
| lokesh | **snap** | 14:43 |
| lokesh | ***gone*** LMAO | 14:43 |
| lokesh | the words F & U always follow.. LOL | 14:44 |
| lokesh | My dad had a crab in a sea water aqarium.. it pwned him | 14:46 |
| lokesh | he provoked it with a screw driver.. that was one piss crab | 14:46 |
| lokesh | *pissed | 14:46 |
| lokesh | it stole the screw driver and sat on the bottom of the tank, next day, the starfish was cut into four bits, the fish where all sliced.. etc, one piss*d crab | 14:49 |
| lokesh | and it escaped and ran around the house | 14:49 |
| lokesh | evil crab | 14:49 |
| lokesh | :P | 14:49 |
| UbuntuNewb | hehe | 14:49 |
| UbuntuNewb | i had crabs once... | 14:50 |
| lokesh | I fed it to the turtle.. LMAO | 14:50 |
| lokesh | so did I, but thats what happens when you visit a den of sin.. | 14:51 |
| lokesh | sucky, sucky, i | 14:52 |
| lokesh | five dollar... | 14:52 |
| lokesh | no, I'll stick to the turkish kebab from around the corner | 14:53 |
| lokesh | after all its both beef lips.. oh sorry ladies.. :P | 14:54 |
| Crusher | lokesh: I don't think what your talking about is appropriate here, please stop. | 14:55 |
| lokesh | you can label me as sick now.. :) | 14:55 |
| UbuntuNewb | ok, i gotta run. Big thanks for all the help! | 14:56 |
| lokesh | sick puppy, pwning windowz, hold on is that microshite IIS 6 ah good for you eh heh, here comes the pentest | 14:56 |
| lokesh | laters | 14:57 |
| lokesh | newb | 14:57 |
| UbuntuNewb | thanx Danny! | 14:58 |
| UbuntuNewb | l8r | 14:58 |
| === jaldarondo is now known as include_pr | ||
| === iaWeiP is now known as PieWai | ||
| include_pr | So the class is today at 18:00 UTC | 15:41 |
| include_pr | ? | 15:41 |
| Pollywog | yes | 15:41 |
| PieWai | nice | 15:41 |
| include_pr | cool thanks - looking forward to it | 15:42 |
| Merrlin | hello | 15:44 |
| Pollywog | hello | 15:46 |
| include_pr | hello | 15:52 |
| Xavi | Olaaa :D es mi primer vez aqui | 16:45 |
| Xavi | que hacen ? | 16:45 |
| MalMen | nao se passa nada | 16:47 |
| MalMen | lol | 16:47 |
| Xavi | Alguien es de Mexico ? | 16:48 |
| MalMen | portugal | 16:48 |
| Xavi | OK :) | 16:48 |
| Xavi | como te llamas ? | 16:49 |
| zee | hi | 17:09 |
| TheMadBeaver | hi | 17:12 |
| === k00011 is now known as k0001 | ||
| gtomy | QUESTION: When will it start?: How-to update a package | 18:13 |
| james_w | 45 minutes | 18:14 |
| didrocks | gtomy: you can install some packages and prepare your sources.list file during this time (http://blog.didrocks.fr/index.php/post/Packaging-training-session%3A-how-to-update-a-package) | 18:16 |
| james_w | go didrocks! | 18:16 |
| didrocks | hey james_w ;) | 18:17 |
| didrocks | james_w: I will not explain how to update a package with bzr, not enough time for that :) | 18:17 |
| james_w | heh :-) | 18:18 |
| didrocks | james_w: great talk last time (I read it today)! | 18:18 |
| james_w | thanks | 18:18 |
| didrocks | james_w: see, dholbach already prepared my page: https://wiki.ubuntu.com/Packaging/Training/Logs/2009-04-16 :) | 18:19 |
| huats | hello didrocks | 18:41 |
| didrocks | hey huats ;) | 18:41 |
| rafaelmf | didrocks: I have one question, may I ask before classrom? | 18:52 |
| didrocks | rafaelmf: of course :) | 18:52 |
| rafaelmf | i need to do one package that configure my ldap base | 18:53 |
| didrocks | a new package? | 18:53 |
| didrocks | just for configuring stuff? | 18:54 |
| rafaelmf | yes, so, when I ldapadd something that already exists i got a error | 18:54 |
| Pollywog | I will need ldap for this class? | 18:54 |
| Pollywog | I have not set it up | 18:54 |
| k-s | hey guys | 18:54 |
| rafaelmf | a error (68), that stop installation of package | 18:55 |
| didrocks | rafaelmf: because you erase files from other packages? | 18:55 |
| didrocks | hey k-s, Pollywog | 18:55 |
| Ryback_ | hi everybody | 18:55 |
| didrocks | welcome Ryback_ :) | 18:56 |
| Ryback_ | :-) | 18:56 |
| rafaelmf | didrocks: no, this error code is from ldapadd(inside my postinst) | 18:56 |
| padawan | [B[A | 18:56 |
| lfelipe | hey :) | 18:56 |
| didrocks | rafaelmf: you can launch your postinst file manually again, when the package has failed to install and try to set -x it | 18:56 |
| didrocks | rafaelmf: I don't know really well ldap related packages and configuration | 18:57 |
| didrocks | hi lfelipe! | 18:57 |
| rafaelmf | didrocks: humm... set -x does what? | 18:57 |
| padawan | \clear | 18:57 |
| didrocks | rafaelmf: it will open in debug mode your shell and write line by line shell expansion, return code, etc. | 18:58 |
| rafaelmf | didrocks: i think that is what i need to ignore return of error inside postinst script | 18:58 |
| padawan | >hello | 18:58 |
| didrocks | rafaelmf: also postinst files uses set -e to abort on error, if you just want to disable this, change the package in removing this set -e (even if postinst file, your package will be marked as being sucessfully installed) | 18:58 |
| didrocks | rafaelmf: is that clear? | 18:59 |
| rafaelmf | didrocks: ldap is a example, actually I need just ignore this error, if a haven't this line "set -e" it could break? | 18:59 |
| padawan | hi all | 18:59 |
| didrocks | rafaelmf: yes, the script can break, but will be ignored by dpkg | 18:59 |
| didrocks | hey padawan :) | 18:59 |
| blfgomes | hello everybody | 19:00 |
| padawan | lurking and listenig | 19:00 |
| rafaelmf | didrocks: I think is that what I need, thanks, and good class | 19:00 |
| didrocks | rafaelmf: thanks ;) | 19:00 |
| didrocks | DING DONG, it's classroom time :) | 19:00 |
| francescom | yep :-) | 19:01 |
| didrocks | just to know a little about the audience, who is ready to update some packages? :) | 19:01 |
| francescom | me | 19:01 |
| blfgomes | I am! | 19:01 |
| padawan | not yet still learning the basics | 19:01 |
| include_pr | For sure | 19:01 |
| TheMadBeaver | total package newbie | 19:01 |
| Pollywog | I am ready | 19:01 |
| gtomy | yes | 19:02 |
| Pollywog | I am on Intrepid but have Jaunty in virtualbox | 19:02 |
| Pollywog | will I need Jaunty for this? | 19:02 |
| didrocks | great, some people there! For those who don't know the basics/can't practice, there will be a lot of copy/paste in pastebin so that you can follow the lesson :) | 19:02 |
| didrocks | Pollywog: appart for last part, no, you can use your intrepid box | 19:02 |
| gtomy | I have hardy intalled | 19:02 |
| gtomy | installed | 19:03 |
| didrocks | hardy has well be fine :) | 19:03 |
| didrocks | as* | 19:03 |
| didrocks | First and before the introduction, if not done yet, install theses packages : | 19:03 |
| didrocks | sudo apt-get install build-essential devscripts ubuntu-dev-tools debhelper diff patch quilt fakeroot lintian libtool gnome-common gnome-doc-utils gtk-doc-tools. | 19:03 |
| didrocks | (without the final dot, of course) | 19:03 |
| francescom | didrocks: already done | 19:03 |
| didrocks | You should also have "deb-src http://archive.ubuntu.com/ubuntu/ jaunty main restricted" in your /etc/apt/sources.list (and then sudo apt-get update). | 19:03 |
| didrocks | tell me when I can begin my introduction during the download :) | 19:04 |
| gtomy | done | 19:04 |
| didrocks | (and yes, that's a bunch of packages ;)) | 19:04 |
| didrocks | I will begin with a very generalist introduction so that people can follow what will be in this lesson | 19:05 |
| didrocks | As most of user want to live on the edge about what best the Open Source community has to offer, we are going to see how to update a package to offer the very last release to all ubuntu users. | 19:05 |
| didrocks | First, be warned that once a release is out and for all supported releases (jaunty soon!), we never update a package to a new software version (appart from backports repository and ppa, when requested). | 19:05 |
| didrocks | We only cherrypick bug and security fixes from a new release to adapt it an older version. This is intended to have as little breakage as possible. | 19:06 |
| didrocks | So don't expect to have OpenOffice 3 in intrepid from the casual repositories, it will never happen. Jaunty, on the contrary, has it! | 19:06 |
| Pollywog | does this mean I should not report bugs in Intrepid's kmail? | 19:06 |
| didrocks | Pollywog: I'm more a GNOME packager than a KDE one. If a major bug in kmail happens, yes, report it | 19:07 |
| slytherin | Pollywog: you should provided it does not say "please update to latest version" | 19:07 |
| didrocks | (it's an extra bonus point if it's still happens in the last release) | 19:07 |
| blfgomes | didrocks: which bugs should be fixed and which should be left for the next release? | 19:07 |
| didrocks | but, it only concerns major crash/unusable version. If it's a major issue, no, it will not be updated | 19:08 |
| didrocks | blfgomes: minor issues | 19:08 |
| didrocks | for instance | 19:08 |
| didrocks | ICQ has changed its protocol recentely | 19:08 |
| didrocks | making it unusable fo pidgin | 19:08 |
| didrocks | with* | 19:08 |
| blfgomes | I see | 19:08 |
| didrocks | so, we reported the patch in pidgin for every supported version | 19:09 |
| didrocks | that is to say, dapper, gutsy, hardy, intrepid… and jaunty :) | 19:09 |
| didrocks | that's a lot of work, even for a minor patch | 19:09 |
| blfgomes | :) | 19:09 |
| didrocks | that's why only major bugs are handled for stable releases | 19:09 |
| didrocks | blfgomes: does this answer your question? | 19:09 |
| slytherin | didrocks: with jaunty release gutsy will have end of life | 19:10 |
| blfgomes | yes, it does! Thank you! | 19:10 |
| didrocks | slytherin: yes, but we will have one more unstable version, so, no change for us :) | 19:10 |
| didrocks | Today, we are going to update gnome-terminal. We will see quickly what are the different steps we have to handle generally to update packages, but the best is, of course, to practice! | 19:10 |
| slytherin | right | 19:10 |
| didrocks | Even if I use bzr-buildpackage now to work on, we will not use it today. The Unstoppable James Westby has given a great rocking introduction on this last week (https://wiki.ubuntu.com/BeginnersTeam/FocusGroups/Education/Events/01172009). | 19:10 |
| didrocks | Also, this lesson is not intended to teach you how to package. For this, see the corresponding courses in last developpers week session (https://wiki.ubuntu.com/UbuntuDeveloperWeek). Don't forget also the excellent packaginguide: https://wiki.ubuntu.com/PackagingGuide. | 19:11 |
| didrocks | Well, ready? Let's download the old version: mkdir gnome-terminal && cd gnome-terminal && apt-get source gnome-terminal | 19:11 |
| didrocks | This will download the last release present in jaunty, which is 2.26.0. | 19:12 |
| didrocks | tell me when it's ok :) | 19:12 |
| didrocks | Remember that you can interrupt the course at any level: even if you feel lost, we will find you! :-) | 19:12 |
| francescom | I'm ready | 19:12 |
| blfgomes | done | 19:13 |
| didrocks | (let's wait for few seconds too ;)) | 19:13 |
| didrocks | ok, let's say that the others are too shy :) Let's get into the source package: cd gnome-terminal-2.26.0 | 19:14 |
| Pollywog | k I am ready too | 19:14 |
| didrocks | To check if new release is available, if a debian/watch file is present, we just have to use: uscan --report --verbose. | 19:14 |
| didrocks | The output should be something like this: http://paste.ubuntu.com/151393/. You can see there that a new version is available and corresponds to 2.26.1. | 19:14 |
| didrocks | everyone has something similar to the pastebin? | 19:15 |
| Pollywog | y | 19:15 |
| Pollywog | yes | 19:15 |
| francescom | yes, me too | 19:16 |
| TheMadBeaver | yup | 19:16 |
| didrocks | Excited by this new version? \o/ Let's get the new upstream code using uscan! This command just download the new archive, and extract its contents, whith the debian/ubuntu changes applied! | 19:16 |
| didrocks | so, just executes uscan this time, with no option :) | 19:16 |
| Pollywog | it is getting it | 19:17 |
| didrocks | The output of the command is telling us that we have to do a "cd ../gnome-terminal-2.26.1" to get into the new package, let's do it (http://paste.ubuntu.com/151399/). | 19:17 |
| didrocks | (yes, you can see that I prepared most of the lesson yesterday ;)) | 19:18 |
| francescom | done | 19:18 |
| Pollywog | done | 19:18 |
| TheMadBeaver | done | 19:18 |
| didrocks | Easy, isn't it? Well, when the debian diff doesn't apply because of inline patch, it's getting more difficult, but most of packages are in good shape and every debian difference from vanilla version are in debian/ directory. | 19:18 |
| blfgomes | didrocks: what does it do under the hood to apply the diff? | 19:19 |
| didrocks | blfgomes: it's downloading the vanilla tar file, | 19:19 |
| didrocks | then, trying to apply ../gnome-terminal-2.26.0.diff.gz diff file | 19:19 |
| didrocks | (this file contains the debian diff) | 19:19 |
| blfgomes | and that's all? | 19:20 |
| didrocks | exactly :) | 19:20 |
| blfgomes | cool | 19:20 |
| didrocks | it's also adding a new entry to debian/changelog | 19:20 |
| didrocks | we will see that later :) | 19:20 |
| blfgomes | ok! | 19:20 |
| didrocks | Now begins the real packager work. We have to see what changed in upstream release reading the NEWS files (less NEWS and q to exit): http://paste.ubuntu.com/151409/ | 19:20 |
| Pollywog | do I need to apply a patch? | 19:20 |
| Pollywog | or was it done for me? | 19:20 |
| blfgomes | it was done for you | 19:21 |
| didrocks | Pollywog: it was done for you | 19:21 |
| Pollywog | k | 19:21 |
| didrocks | Pollywog: seing the debian/ directory? | 19:21 |
| didrocks | seeing* | 19:21 |
| Pollywog | yes | 19:21 |
| didrocks | this folder typically contains the changes from upstream to ubuntu :) | 19:21 |
| didrocks | This is mostly a bugfix release. We will see later what have been fixed. Now, let's discover what changed in configure.{ac,in} file: diff -Nup ../gnome-terminal-2.26.0/configure.ac configure.ac | 19:22 |
| didrocks | You will get http://paste.ubuntu.com/151411/ | 19:22 |
| didrocks | here are the changes from previous version to the last release | 19:22 |
| didrocks | What is important in it? m4_define([gt_version_micro] change from 0 to 1 is to tell that a new version is available (2.26.0 to 2.26.1). That's just tell that upstream does a good job. | 19:23 |
| didrocks | If it's not present, there is for librairies something like SHVER variable that you have to change in debian/rules. In every cases, it's good to give a look at debian/rules to see if the version number is present or not. | 19:23 |
| didrocks | Ok for everyone? | 19:23 |
| blfgomes | yes | 19:23 |
| francescom | didrocks: how do you know that only that file is changed? | 19:24 |
| didrocks | francescom: no, I didn't say that :) | 19:24 |
| didrocks | I just say that we have to look at this file, it's different :) | 19:24 |
| francescom | didrocks: ok thanks | 19:24 |
| didrocks | we will see why just after (all important changes for us are there) | 19:24 |
| didrocks | ok for everyone, can we go on? | 19:25 |
| Pollywog | yes | 19:25 |
| TheMadBeaver | ok | 19:25 |
| padawan | yes, following | 19:25 |
| didrocks | What is most important here is the GTK_REQUIRED and VTE_REQUIRED change. That means that we have to bump the dependencies version request of the package (it will request now 2.14.0 for gtk and 0.20.0 for vte librairies). This has to be changed in debian/control.in (or debian/control if there is not control.in file). | 19:25 |
| didrocks | You can edit it with your prefered tool (vim ROCKS \o/) and change libgtk2.0-dev (>= 2.13.6) and libvte-dev (>= 1:0.19.1) to libgtk2.0-dev (>= 2.14.0) and libvte-dev (>= 1:0.20.0). | 19:26 |
| blfgomes | didrocks: what's the difference between control.in and control? | 19:26 |
| didrocks | blfgomes: control.in will generate control file. It just contains some automatisation ($GNOME-TEAM is remplaced by the team in charge, it also list the last uploaders of the package…) | 19:27 |
| blfgomes | ok | 19:29 |
| didrocks | So then, as there is a debian/control.in file, we have to generate a new debian/control file from it. This is proceed by executing: DEB_AUTO_UPDATE_DEBIAN_CONTROL=yes fakeroot debian/rules clean | 19:29 |
| Pollywog | from which directory is that done? | 19:29 |
| didrocks | Pollywog: from the source package one. You should list the debian/ folder from it | 19:30 |
| slytherin | didrocks: won't control file generate automatically when you do debuild -S (I don't have source right now). | 19:30 |
| didrocks | Pollywog: basically gnome-terminal-2.26.1 | 19:30 |
| Pollywog | k | 19:30 |
| Pollywog | done | 19:30 |
| didrocks | slytherin: most of the time, yes, when using bzr, it's good to generate it before | 19:30 |
| didrocks | (because you will commit the previous revision) | 19:31 |
| didrocks | Finally, inform of your change! dch -a and add to the file so that it will look like: http://paste.ubuntu.com/151422/. You see that the so kind uscan command has automatically created "gnome-terminal (2.26.1-0ubuntu1) jaunty; urgency=low" for us. | 19:31 |
| didrocks | tell me when it's done :) | 19:32 |
| Pollywog | done | 19:32 |
| didrocks | (this diff files between old and new configure.in files can also tell us from added/removed dependencies btw. There is no black magic there :D) | 19:33 |
| didrocks | we lost everyone but Pollywog? :) | 19:34 |
| Rail | we are here :) | 19:34 |
| didrocks | great o/ | 19:34 |
| didrocks | Ok, now that build dependencies are ok, we have to see if ubuntu/debian patches still apply to the new version. The what-patch commands tells us that this package use cdbs. Let's try using cdbs-edit-patch debian/patches/99_autoreconf.patch (the last patch in the queue). | 19:34 |
| include_pr | were here | 19:34 |
| didrocks | We exited in error in the debian/patches/30_honour_point_pixel_sizes.patch (http://paste.ubuntu.com/151427/). | 19:35 |
| didrocks | That can means two things: either upstream has integrated the patch (or we took previously the patch from upstream svn), or that the code has been slightely modified and we can't apply it easily. | 19:35 |
| didrocks | mean* | 19:35 |
| didrocks | Looking at debian/changelog has to be the first thing to do: http://paste.ubuntu.com/151431/ | 19:36 |
| didrocks | In this case, we see a bug report LP: #345189 associated to the patch. Looking at it (https://bugs.launchpad.net/bugs/345189), we deduce that the change is present upstream, looking at the Fix Released next to "gnome-terminal" upstream task. | 19:36 |
| didrocks | Consequently, we can safely remove the patch, "rm debian/patches/30_honour_point_pixel_sizes.patch". | 19:36 |
| blfgomes | question: should we always apply the last patch first? | 19:37 |
| didrocks | blfgomes: no, but it's a good way to lost the less time as possible :) | 19:37 |
| didrocks | you can apply them one by one | 19:37 |
| Pollywog | I thought patches had to be applied in the order they were issued | 19:37 |
| didrocks | but if you apply the last one, it will try to apply all the others before, in alphabetical order (for cdbs, quilt is quite different) | 19:37 |
| Pollywog | issued > released | 19:38 |
| didrocks | so, you know if it crashed or not | 19:38 |
| blfgomes | oh, alright | 19:38 |
| didrocks | Pollywog: when you apply the last patch in alphanumerical order with cdbs, it applies every others patches before | 19:38 |
| Pollywog | oic | 19:38 |
| Pollywog | didn't know that | 19:38 |
| didrocks | that's why when applying 99_… it first failed on 30_… :) | 19:38 |
| didrocks | So, here, patch is integrated upstream. That's why we removed it. If it wasn't the case and the cause was that upstream changed slightely its code, we had to cdbs ....patch and adapt it to make it apply again. | 19:39 |
| didrocks | That's why we have always to report our patch upstream (appart from specific ubuntu ones) :) | 19:40 |
| didrocks | it's good for them, less work for us, everyone wins \o/ | 19:40 |
| didrocks | Ok, bring this information to debian/changelog: dch -a and report the change to make it look like that: http://paste.ubuntu.com/151442/ | 19:40 |
| didrocks | tell me when it's ok :) | 19:41 |
| Pollywog | I will have to come back to it later... ready | 19:41 |
| blfgomes | done | 19:41 |
| didrocks | Ok! Let's go on with next patch: $ cdbs-edit-patch debian/patches/99_autoreconf.patch again. | 19:42 |
| didrocks | The last patch doesn't apply /o\ | 19:42 |
| didrocks | That's pretty normal: autotools/autoconf/autoreconf patch are different from others patches. They basically consist of generating configure scripts from configure.in, makefile.in one (like debian/control.in that generates debian/control file) and have to use generally the last revision of libtool to generate them | 19:43 |
| didrocks | We have to exit first, without updating the patch: "exit 1" | 19:43 |
| Pollywog | are you in a chroot? | 19:44 |
| Pollywog | I do not understand the exit 1 | 19:44 |
| fenris- | 6 out of 478 hunks FAILED -- saving rejects to file configure.rej | 19:44 |
| didrocks | fenris-: yes, that's why I told it failed | 19:44 |
| didrocks | Pollywog: cdbs-edit-patch basically copy your files and drop you in a subshell | 19:45 |
| Pollywog | oh | 19:45 |
| didrocks | when exiting, it will diff /tmp/old /tmp/new > patch | 19:45 |
| Pollywog | ic | 19:45 |
| didrocks | (exiting with 0, if you exit in error, like exit 1, it will change nothing) | 19:46 |
| didrocks | let me seek for a good introduciton about | 19:46 |
| didrocks | introduction* | 19:46 |
| didrocks | patch system | 19:46 |
| fenris- | so : exit 1 ? | 19:46 |
| didrocks | Pollywog: https://wiki.ubuntu.com/MeetingLogs/devweek0809/PackagePatches | 19:46 |
| didrocks | fenris-: as just told previously, "exit 1" prevent from refreshing the patch | 19:47 |
| didrocks | as it failed | 19:47 |
| didrocks | we will regenerate the patch from scratch | 19:47 |
| didrocks | this only work for this package with a jaunty box unfortunately (you need to have the last libtool version) | 19:47 |
| Pollywog | ty | 19:47 |
| didrocks | but I pastebin the result, so, you can follow | 19:48 |
| didrocks | and as it is the last, but not least step, I have to show you this :) | 19:48 |
| didrocks | so, what you can do, is to remove the patch: "rm debian/patches/99_autoreconf.patch" | 19:48 |
| didrocks | Finally, $ "cdbs-edit-patch debian/patches/99_autoreconf.patch" | 19:48 |
| didrocks | (it again drop you to a subshell) | 19:48 |
| didrocks | and to generate the configure and makefiles: autoreconf | 19:49 |
| didrocks | so, this takes Makefile.in to create Makfile, configure.in to create configure, and so on… | 19:49 |
| didrocks | Once done (ignore the warnings), exit 0 to refresh the patch and document the change: dch -a to get http://paste.ubuntu.com/151449/ | 19:49 |
| didrocks | We have almost finished: every patches applies and build-dependencies are ok. Normally, you testbuild at this stage, but we won't do it as we are running out of time and not everybody has been abled to do the previous steps | 19:50 |
| Pollywog | k | 19:50 |
| didrocks | Once done, a good practice is to put changes from the upstream NEWS file in the changelog. So, get the changes following the given link in the NEWS file and report it to the changelog. Extra bonus point is given if you look at LP bugs corresponding to upstream correction and list them. | 19:51 |
| didrocks | If this time-consuming work is well done, you will get this: http://paste.ubuntu.com/151454/ | 19:51 |
| didrocks | You can take a breath now! You have your new package updated! Think about testing it throughly and everything will be all right. | 19:51 |
| didrocks | Now, rooms for remaining questions , just fire up! :) | 19:51 |
| e-jat | sorry .. dc .. | 19:51 |
| e-jat | didrocks: after exit 1 | 19:51 |
| didrocks | e-jat: yes ? | 19:51 |
| didrocks | e-jat: if you have a jaunty box, you can do: | 19:52 |
| didrocks | - rm debian/patches/99_autoreconf.patch | 19:52 |
| didrocks | - cdbs-edit-patch debian/patches/99_autoreconf.patch | 19:52 |
| didrocks | - autoreconf | 19:52 |
| didrocks | - exit 0 | 19:52 |
| padawan | I followed _some_ of this, thanks for your time and sharing wisdom Didier | 19:52 |
| didrocks | you will generate a new autoreconf patch | 19:52 |
| Pollywog | I have the logs to go over and the links you gave | 19:53 |
| didrocks | it was a please padawan. Take some time to look at basics for packaging first, hope you can refer to this afterwards :) | 19:53 |
| padawan | willdo, see you all soon, gnight | 19:53 |
| didrocks | pastebin are not removed generally | 19:53 |
| didrocks | but be aware that few times after jaunty is out, this update 2.26.1 for gnome-terminal will be available | 19:54 |
| blfgomes | didrocks: could you point us to a autoreconf/configuration files tutorial? | 19:54 |
| didrocks | so, apt-get source gnome-terminal will download 2.26.1 :) | 19:54 |
| didrocks | blfgomes: here is a great lesson about autools: http://www.lrde.epita.fr/~adl/autotools.html | 19:54 |
| Pollywog | I thought it downloaded an older version | 19:54 |
| didrocks | autotools* sorry | 19:54 |
| Rail | didrocks: updating from upstream is OK, what about syncing from Debian? | 19:55 |
| didrocks | Pollywog: yes, but when jaunty will be out, one of the first SRU will be this update :) | 19:55 |
| Pollywog | oic | 19:55 |
| e-jat | didrocks: after exit 0 ? | 19:55 |
| Pollywog | I understand now | 19:55 |
| didrocks | Rail: it all depends on the "project" | 19:55 |
| blfgomes | didrocks: thanks! | 19:55 |
| didrocks | e-jat: just update the changelog | 19:55 |
| didrocks | e-jat: logs will be available soon :) | 19:55 |
| didrocks | Rail: in desktop team, generally | 19:55 |
| didrocks | as we are in advance from debian, why pushed changes back to debian with alioth svn | 19:56 |
| didrocks | (removing specific ubuntu changes) | 19:56 |
| e-jat | changelog in which folder ? debian @ gnome-terminal ? | 19:56 |
| didrocks | e-jat: debian/changelog | 19:56 |
| Pollywog | is alioth a PPA for Debian? | 19:57 |
| didrocks | (one sec) | 19:57 |
| didrocks | e-jat: http://paste.ubuntu.com/152293/ | 19:57 |
| slytherin | Pollywog: nope, it is the service where many teams from Debian maintain the packaging bits in version control systems (svn). | 19:57 |
| Pollywog | oic | 19:58 |
| didrocks | thanks slytherin ;) | 19:58 |
| francescom | didrocks: thank you | 19:58 |
| didrocks | Pollywog: some non debian developper can gain commit access to this svn | 19:58 |
| Pollywog | ic | 19:58 |
| blfgomes | one last question: why hasn't gnome-terminal been frozen yet? | 19:58 |
| didrocks | blfgomes: gnome-terminal is frozen | 19:59 |
| didrocks | we are at 2.26.0 in jaunty | 19:59 |
| blfgomes | but you said there will be a 2.26.1 | 19:59 |
| blfgomes | in jaunty | 19:59 |
| didrocks | you can see my pending request there : https://bugs.edge.launchpad.net/ubuntu/+source/gnome-terminal/+bug/361053 | 19:59 |
| slytherin | blfgomes: most of the gnome packages have standing freeze exception. when I say gnome packages it means the ones identified as official modules of gnome. | 20:00 |
| didrocks | yes, once jaunty released, as GNOME 2.26.1 is mostly a bug fix, there is an exception for it | 20:00 |
| didrocks | we update it through SRU process | 20:00 |
| blfgomes | so, that would be a case of cherrypicking | 20:00 |
| didrocks | blfgomes: the changes between 2.26.0 and 2.26.1 is really tight | 20:00 |
| didrocks | most of packages have only translation update, for instance | 20:01 |
| didrocks | this one, bumping dependencies is really exceptional | 20:01 |
| didrocks | but as it was a real good example to see a lot of things, I choose it as a candidate for this lesson :) | 20:01 |
| didrocks | dependency changes, patches that doesn't apply \o/ | 20:02 |
| blfgomes | :) | 20:02 |
| didrocks | well, more questions or everything is clear in everyone's mind? :) | 20:02 |
| didrocks | (practice and you will learn :)) | 20:03 |
| Pollywog | didrocks: thanks for the presentation | 20:03 |
| e-jat | :) | 20:03 |
| e-jat | thanks didrocks | 20:03 |
| didrocks | again, thanks to all the attendees :) | 20:03 |
| blfgomes | didrocks: thank you, it was really great! | 20:03 |
| Rail | didrocks: tnanks! | 20:03 |
| didrocks | have a nice day/evening/night everyone ;) | 20:03 |
| e-jat | nite ... | 20:04 |
| didrocks | next session for those interested will be "Package testing: piuparts and VMs" by dtchen. The 23rd April, 00:00 UTC. | 20:06 |
| kklimonda | damn, so late? :/ | 20:07 |
| GunbladeIV | kklimonda, yup :) | 20:08 |
| didrocks | kklimonda: yes, for me it will be 2 AM :) | 20:08 |
| kklimonda | oh well, there are always logs :) | 20:10 |
| gtomy | didrocks: thank you for your time!:) | 20:11 |
| philip | date -u | 20:40 |
| AKIDA | f | 21:33 |
| === GunbladeIV is now known as GunbladeIV- | ||
| miles | evdzaa | 22:29 |
| * miles rawr | 22:30 | |
| thais | hi | 22:58 |
| \mSg | greetings | 23:04 |
| JC | que tal | 23:35 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!