[00:05] what are ubuntuone's plans, if any, for file encryption? === ink_away is now known as CrazyShaman === CrazyShaman is now known as ink_away [15:15] hi. [15:17] any dev here? [15:23] hey gafton [15:23] i guess ATL wasn't stormy :) [15:23] hi leak [15:23] hello dobey [15:23] are you a dev? [15:23] yes [15:23] could you please tell me the current gnome dependencies [15:23] dobey: ATL was plenty stormy, but the pilot was dead-set on landing that plane at all costs, it seems ;-) [15:23] but you should just ask your question [15:24] gafton: and taking off i guess :) [15:24] leak: python-gnomekeyring and libnautilus-extension are the 2 big ones [15:25] you see my distro doesnt not have gnome [15:25] leak: they depend on various other pieces [15:25] or avoids its dep extremely [15:25] what distro? slackware? [15:25] is there a source available [15:25] no [15:25] kuki linux [15:25] users have been asking if we can give them ubuntuone [15:26] yes, the sources for the gnome pieces are all available on gnome.org [15:26] not the gnome pieces [15:26] for ubuntuone [15:26] and the ubuntuone client sources are on launchpad [15:26] ok perfect [15:26] let me check them out [15:26] we have tarball releases on the project download pages on launchpad [15:27] http://launchpad.net/ubuntuone-client/+download for example [15:27] i was there atm thnk you :) [15:28] sigh. pulseaudio :( [15:29] ? [15:29] pulseaudio? [15:29] * dobey really wishes it would a) remember volume levels properly and b) stop distorting audio [15:29] yes, it angers me :) [15:30] because it's screwing up my audio [15:30] lol :p [15:31] pygtk huh ;p [15:31] yes [15:31] i see this might require some dependencies and instalations. [15:31] or some code adaptation [15:32] what desktop env. does this distro use? [15:32] currently xfce 4.6 [15:32] but a new one is in thought [15:32] oh [15:32] we are a minimal distro [15:32] for netbooks [15:33] more specifically acer aspire one [15:33] so 8 gb ssd is really not much to work with [15:33] current netbooks have more [15:33] but support for the weaker versions of all of them is needed [15:34] well pygtk isn't too big [15:35] and we can fix the source to allow disabling building of the nautilus extension [15:35] now that is nice [15:36] that would be great [15:36] by not limiting the client for gnome users [15:36] the user range would increase [15:36] and so its usability [15:36] and i think it might be possible to build the python-gnome-desktop stuff with only the gnome-keyring piece [15:37] sweet :) [15:37] then dependencies from it would be a minimum [15:37] and there is some work going on to get an xdg keyring that would replace gnome-keyring, and that all the desktops would share usage of [15:39] so its a matter of waiting a bit for it [16:09] hi all [16:11] what depends do i need to run ubuntuone? [16:11] :) [16:11] samme: [16:11] i just asked that question [16:12] and dave answered on the channel [16:13] 'oh ok :) [16:13] ;) [16:13] dobey: samme is one of our users [16:13] hence the question. he wasnt at the channel when we were discussing dependencies :) [16:14] your project looks promissing. ill give it a run when i have my desktop fixed and aao back [16:14] and then maybe we can sort out something? :) [16:25] * dobey isn't dave [16:25] heh [16:26] leak: we welcome help with making the client work on more systems [16:27] dobey: i know you arent dave :) [16:27] dave is a user on our support channel ;) [16:27] ok ill give news. [16:29] ok, time for me to go get some lunch, and then come back and finish packing, and then off to the airport [16:30] oh good flight [16:33] i was curious if there are any plans to address file encryption? [16:39] like, having ubuntuone run some encryption before uploading? [16:54] well, files are encrypted for upload; they aren't stored encrypted though [16:55] guess i'd feel better if they were stored encrypted [16:55] at least, the non-shared files [16:56] I think you'd have to trade that off against e.g. being able to access your files from the web [16:57] i guess my use case it to primarily have a backup of files, especially if ubuntuone gets symlinks working [16:59] * tcole nods [16:59] in principle I think it is already possible to use with the ubuntu encrypted folder stuff [16:59] the tradeoff is that the web view won't make much sense [17:00] hmm. that may do the trick [17:01] call me paranoid. [17:37] pillarist: if you were paranoid, you'd be encrypting them yourself first [17:37] :) [17:38] dobey: i think password safe database are pre-encrypted [17:39] there are some very difficult usability issues with doing automatic encryption, which we haven't figured out yet [17:40] yeah, i would be foregoing web access and sharing documents. [17:41] if you encrypt locally with a key that we don't have, yes, mostly [17:41] though as long as you had the key, you could download the encrypted file from the web ui and decrypt it [17:41] so not entirely forgoing use of the web ui, but some features of it [17:43] well my little "run apport for dbus errors" hack seems to be giving some rather solid proof that dbus sucks :( [17:43] i was thinking the My Files could be encrypted, whereas Shared With Me wouldn't [17:43] kind of depends if you're using it for secure backup, or multi-site access [17:44] well, it depends [17:44] shared with me wouldn't be encrypted if the other user didn't encrypt it i guess [17:44] which sort of means that we can't do automatic encryption on the client side really [17:45] Since you're sharing by email address, could you not use the existing PGP keyservers to do the encryption? [17:47] netlore: that would only be encryption in transit, which we already do anyway [17:48] really what most people probably actually want is encryption in transit, and encrypted storage on the server, with unencrypted files locally (though with the ability to have the local storage be on an encrypted filesystem) [17:49] dobey: aye aye [17:50] Yeah, good point.... [17:50] although, i'm also not sure what the resource usage of encrypting 5M files for 200K users all simultaneously would be like [17:50] probably "not fun" [17:51] couldn't the client do that locally? [17:51] no [17:52] well it could, but then it would be just as secure as not encrypting, since we'd have to distribute the private key to the user's machine [17:52] granted we would probably have a different private key for each user [17:53] private key on server though, means we do a lot more stuff in the way of having it actually be usable [17:54] although, there is still this: http://identi.ca/notice/7674880 [17:54] :) [17:56] and this one too: http://identi.ca/notice/6594361 [17:56] right [17:56] yay, twitter seems to have faceplanted again :-/ [17:57] i'll get to work building my data center [17:59] it's sort of like how car alarms don't prevent car thieves from stealing cars. they prevent stupid regular thieves from screwing up your car too bad tyring to steal it. if a professional car thief wants to steal a car, he's going to steal it. [18:00] right [18:00] although, car alarms going off is a regular occurance because people also don't know how to install them properly, so even dumb thieves can get away with stealing cars or stuff out of them, with the alarm going off [18:01] but eh [18:02] "No pleasing some people." -- Brian [18:04] google services are convenient, but they're going to read your mail [18:07] well yes [18:07] google's entire business is data mining [18:07] and listen to your phone calls. and sift your calendar. [18:14] http://www.youtube.com/view_play_list?p=8C9E6213AEFC9E0B [18:14] nice [23:10] kenvandine, Hey! [23:11] kenvandine, Do we have a couchdb package that checks authentication? What I have in karmic doesn't seem to.