/srv/irclogs.ubuntu.com/2012/10/24/#ubuntu-us-or.txt

svrnmnd_ I need some help with a multiboot usb..I made it using multisystem and there is a grub4dos a grub2 and a syslinux menu02:13
svrnmnd_ everything installs automatically and besides the windows 7 iso everything else installed on the grub2 menu ...How can I get the windows install iso to boot from the grub2 menu? these are the values under syslinux :02:13
svrnmnd_ MENU LABEL Windows install kernel chan.c32 hd0 1 ntldr=/bootmgr02:13
svrnmnd_ when I boot syslinux I get the argument02:13
svrnmnd_ boot:02:13
svrnmnd_ usage: chain.c32 (hd#:fd#:mbr:#) [partition]02:13
bkerensatgm4883: now I know why I have not attended a PLUG meeting06:02
bkerensaget this they are having a entire clinic this sunday to show people how to install Gnome on Ubuntu 12.10 and how to turn off Amazon Results06:02
* bkerensa facepalms06:02
tgm4883bkerensa, thats....... pretty easy to do?15:05
sbeattiebkerensa: in fairness, that's PLUG's "bring in your device that you're having linux problems with and we'll give you a whole bunch of new problems in addition to not fixing your existing problem" monthly clinic to help out less knowledgeable users, tarted up with a provocative advertising lede.16:45
sbeattie(that said, there's a bit of a reason that I haven't gone to a PLUG meeting in over a decade)16:46
bkerensasbeattie: yeah I have heard that its a front for one or two peoples consulting businesses so idk they keep trying to get me to come17:26
bkerensakees: Does the Security Team do any work with Unity?23:37
bkerensaI think the Unity-lens-shopping packages is still vulnerable to mitm23:37
bkerensapackage*23:37
keesbkerensa: well, they're ultimately responsible for seeing things fixed, but they will likely not be the ones writing the fixes23:40
keesbkerensa: if it's vulnerable to MitM, it means that all of the Vala bindings are vulnerable.23:41
bkerensakees: so my theory is this... the shoppings lens uses ssl23:41
bkerensabut there is no certificate validation23:41
keesit's using the Soup binding in Vala, and uses an https address23:41
bkerensayeah23:42
keesbkerensa: that wouldn't surprise me at all23:42
bkerensaso23:42
bkerensasomeone could intercept the traffic23:42
keesyup23:42
bkerensapretend to be productsearch23:42
bkerensaand get all the queries23:42
bkerensaand send back whatever they want to the clients23:42
bkerensadoes that make sense?23:42
keesyup, easily.23:42
bkerensaI mean I looked over the code and I see no validation at all23:42
bkerensahmm23:42
keesright, i did the same and was hoping that Soup was doing it by default.23:43
bkerensaok maybe time to file a bug23:43
keessomehow I doubt it.23:43
keesit would be better to prove it's busted instead.23:43
bkerensakees: heh23:43
bkerensakees: I don't know how I would do a test case for that23:43
keesI can help. I'm at a conference at the moment, but give me a second...23:44
keesbkerensa: add this to your /etc/hosts file:  198.145.64.173 productsearch.ubuntu.com23:48
keesand then restart your session, and see if you get amazon results23:49
bkerensayeah I just thought of that23:49
bkerensathen check wireshark23:49
bkerensa:D23:49
keesno need with wireshark23:49
keeshttps://www.outflux.net/v1/search  <- if you get those results in the lens, it's busted23:49
keesbkerensa: any luck?23:51
bkerensakees: no results23:52
* kees has 4 minutes left of battery23:52
keesbkerensa: good! :)23:52
keesI wonder if it spews errors to ~/.xsession-errors or something23:52
keesokay, battery dead, I'll check back in a few hours23:52
bkerensaonly error I saw was ** (zeitgeist-datahub:3780): WARNING **: zeitgeist-datahub.vala:227: Unable to get name "org.gnome.zeitgeist.datahub" on the bus!23:54

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!