[02:13] I need some help with a multiboot usb..I made it using multisystem and there is a grub4dos a grub2 and a syslinux menu [02:13] everything installs automatically and besides the windows 7 iso everything else installed on the grub2 menu ...How can I get the windows install iso to boot from the grub2 menu? these are the values under syslinux : [02:13] MENU LABEL Windows install kernel chan.c32 hd0 1 ntldr=/bootmgr [02:13] when I boot syslinux I get the argument [02:13] boot: [02:13] usage: chain.c32 (hd#:fd#:mbr:#) [partition] [06:02] tgm4883: now I know why I have not attended a PLUG meeting [06:02] get this they are having a entire clinic this sunday to show people how to install Gnome on Ubuntu 12.10 and how to turn off Amazon Results [06:02] * bkerensa facepalms [15:05] bkerensa, thats....... pretty easy to do? [16:45] bkerensa: in fairness, that's PLUG's "bring in your device that you're having linux problems with and we'll give you a whole bunch of new problems in addition to not fixing your existing problem" monthly clinic to help out less knowledgeable users, tarted up with a provocative advertising lede. [16:46] (that said, there's a bit of a reason that I haven't gone to a PLUG meeting in over a decade) [17:26] sbeattie: yeah I have heard that its a front for one or two peoples consulting businesses so idk they keep trying to get me to come [23:37] kees: Does the Security Team do any work with Unity? [23:37] I think the Unity-lens-shopping packages is still vulnerable to mitm [23:37] package* [23:40] bkerensa: well, they're ultimately responsible for seeing things fixed, but they will likely not be the ones writing the fixes [23:41] bkerensa: if it's vulnerable to MitM, it means that all of the Vala bindings are vulnerable. [23:41] kees: so my theory is this... the shoppings lens uses ssl [23:41] but there is no certificate validation [23:41] it's using the Soup binding in Vala, and uses an https address [23:42] yeah [23:42] bkerensa: that wouldn't surprise me at all [23:42] so [23:42] someone could intercept the traffic [23:42] yup [23:42] pretend to be productsearch [23:42] and get all the queries [23:42] and send back whatever they want to the clients [23:42] does that make sense? [23:42] yup, easily. [23:42] I mean I looked over the code and I see no validation at all [23:42] hmm [23:43] right, i did the same and was hoping that Soup was doing it by default. [23:43] ok maybe time to file a bug [23:43] somehow I doubt it. [23:43] it would be better to prove it's busted instead. [23:43] kees: heh [23:43] kees: I don't know how I would do a test case for that [23:44] I can help. I'm at a conference at the moment, but give me a second... [23:48] bkerensa: add this to your /etc/hosts file: 198.145.64.173 productsearch.ubuntu.com [23:49] and then restart your session, and see if you get amazon results [23:49] yeah I just thought of that [23:49] then check wireshark [23:49] :D [23:49] no need with wireshark [23:49] https://www.outflux.net/v1/search <- if you get those results in the lens, it's busted [23:51] bkerensa: any luck? [23:52] kees: no results [23:52] * kees has 4 minutes left of battery [23:52] bkerensa: good! :) [23:52] I wonder if it spews errors to ~/.xsession-errors or something [23:52] okay, battery dead, I'll check back in a few hours [23:54] only error I saw was ** (zeitgeist-datahub:3780): WARNING **: zeitgeist-datahub.vala:227: Unable to get name "org.gnome.zeitgeist.datahub" on the bus!