| === Lcawte is now known as Lcawte|Away | ||
| === lap_ is now known as Guest42206 | ||
| Guest42206 | join #ubuntu | 00:56 |
|---|---|---|
| diplo | Morning all | 08:12 |
| dwatkins | mornin' | 08:25 |
| christel | orning :) | 08:37 |
| christel | er morning perhaps | 08:37 |
| * dwatkins hands christel an 'm' | 08:37 | |
| christel | thank you! i've been looking for one of those! :D | 08:37 |
| dwatkins | I'd have put it on toast, but there's no bread here. | 08:38 |
| MartijnVdS | \o | 08:38 |
| dwatkins | o/ | 08:39 |
| MartijnVdS | \\o \o/ o// | 08:39 |
| christel | hehe | 08:39 |
| dwatkins | (" ) ( ") (" ) | 08:39 |
| MartijnVdS | dwatkins: gangnam style? | 08:39 |
| dwatkins | haha, never thought of that - I was thinking of arcade games, possibly Pengo. | 08:40 |
| danfish | morning | 08:45 |
| danfish | a bit cheesy, but as safety breifings go quite clever http://www.youtube.com/watch?v=cBlRbrB_Gnc | 08:45 |
| ZAKhan | I am form the ubuntu-loco ae , can someone help me with the wordpress theme that you have used on your loco site | 08:46 |
| danfish | ZAKhan: I think AlanBell is your man | 08:48 |
| ZAKhan | he is away i guess | 08:48 |
| danfish | ZAKhan: he's here most days | 08:50 |
| ZAKhan | danfish, I have messaged him.. i hoep when he is here he will get back to me | 08:51 |
| ZAKhan | danfish, thanks | 08:51 |
| AlanBell | hi ZAKhan | 08:51 |
| ZAKhan | oh there you are :) | 08:51 |
| AlanBell | where is ae then? | 08:51 |
| dwatkins | can anyone please tell me the website used to share specs of a PC being selected/built? | 08:51 |
| ZAKhan | United Arab Emirates | 08:52 |
| AlanBell | oh cool | 08:52 |
| ZAKhan | AlanBell, can you help me with the wordpress theme? | 08:52 |
| AlanBell | maybe, just looking for the theme on launchapd | 08:53 |
| === TheOpenSourcerer is now known as theopensourcerer | ||
| ZAKhan | I have installed the theme and its working , I am unable to find out how to set up the menus | 08:53 |
| ZAKhan | check http://ubuntu-loco.ae | 08:54 |
| popey | good morning | 08:54 |
| AlanBell | oh right, I am about to pop out ZAKhan, I will log on to our one later and get back to you | 08:54 |
| ZAKhan | ok i am onoine you can msg me anytime | 08:55 |
| ZAKhan | online | 08:55 |
| Laney | grurgh | 08:59 |
| Laney | blurgohgeoh | 08:59 |
| Laney | and other similar noises | 08:59 |
| popey | ugh | 09:02 |
| Laney | getting up. going into copenhagen to explore. | 09:03 |
| * Laney drags self around | 09:03 | |
| ali1234 | ZAKhan: menus are not in theme | 09:27 |
| czajkowski | poor Laney | 09:28 |
| DJones | \o/ Managed to connect a extra 5 port hub/switch to my router to give more ethernet connections in the office | 09:36 |
| MartijnVdS | Achievement unlocked? | 09:37 |
| DJones | Its amazing what you find in the loft after 10 years and moving into a house | 09:37 |
| DJones | Yep, I'd tried it once before & never got it to work, should bitthe bullet originally and read the manual | 09:38 |
| MartijnVdS | Connecting a switch isn't rocket surgery though | 09:38 |
| DJones | 2 achievements unlocked, bloke reads electronic manual and suceeded in getting it working | 09:38 |
| DJones | MartijnVdS: You tell that to the people running network commerical isps that keep going downm BT/virgin failures springs to mind :) | 09:40 |
| DJones | 3rd achievemnt unlocked, dog didn't like the noise of the loft ladder and was brave enough to come upstairs on his his own | 09:40 |
| DJones | Hmmh, maybe even 4th achievement unlocked, dog decides its bring yourself to owners work day | 09:41 |
| BigRedS | he has his own loft ladder? | 09:41 |
| DJones | I think he might start thinking about it | 09:41 |
| DJones | Did have his front paws on the 2nd rung | 09:42 |
| diplo | daubers: What are you building? ( Ref : G+ ) | 09:42 |
| BigRedS | My dad's cat used to use the loft ladder coming out as an excuse to shoot up into the loft and wee in a corner. I'm stull surprised every time I find myself in a loft that doesn't smell faintly of catt wee | 09:42 |
| brobostigon | good morning everyone. | 09:44 |
| DJones | BigRedS: Easily solved, get yourself a cat | 09:45 |
| === Lcawte|Away is now known as Lcawte | ||
| BigRedS | DJones: :) | 09:52 |
| daubers | diplo: RepRap Prusa | 09:52 |
| diplo | 3d printer ? | 09:54 |
| kvarley | I saw online that 12.10 is slower than 12.04. The articles fail to mention how much slower it actually is. Should I pick 12.04 or 12.10 to run on a 2.1 GHz dual core? | 09:58 |
| ali1234 | kvarley: it depends on your graphics mostly | 10:05 |
| kvarley | ali1234: It's an AMD A6-4455M APU so I have reasonable graphics performance | 10:06 |
| ali1234 | if you previously used unity-2d then it 12.10 will be much slower for you | 10:06 |
| kvarley | It's a new laptop so I haven't compared | 10:07 |
| ali1234 | should be fine then IF you can get the drivers working | 10:07 |
| kvarley | :) | 10:07 |
| ali1234 | i heard there's a lot of problems on 12.10 with that | 10:07 |
| kvarley | =/ | 10:07 |
| kvarley | I'll give it a go and see how it goes | 10:07 |
| ali1234 | i haven't bothered trying to upgrade yet because there's simply nothing of interest in it | 10:08 |
| kvarley | If all else fails I'll just fallback to 12.04. Thanks for the help :) | 10:08 |
| kvarley | ali1234: In which case I may just do 12.04. Only new features are previews and shopping lens? | 10:08 |
| ali1234 | and webapps but they don't work properly | 10:08 |
| ali1234 | also a load of third party indicators are broken too | 10:10 |
| daubers | diplo: Yup :) | 10:13 |
| livingdaylight | anyone remember from the gnome2 days being able to add time locations from the date/time dropdown menu in the top panel? | 10:18 |
| ali1234 | yes | 10:18 |
| livingdaylight | using gnome-shell and wondering whether there is an application I need to dl to regain that functionality | 10:18 |
| ali1234 | no. it's just gone | 10:19 |
| livingdaylight | dang | 10:19 |
| gord | you can still add times in other locations to that menu in unity | 10:19 |
| livingdaylight | but that was so cool | 10:19 |
| BigRedS | yeah, I spent a while trying to do that in Gnome | 10:19 |
| ali1234 | gord: how | 10:19 |
| gord | date time settings -> clock -> time in other locations | 10:20 |
| popey | yeah, i have multiple locations on my calendar in unity | 10:20 |
| gord | you can also set it to auto detect your current location | 10:20 |
| gord | which is awwweeesoome | 10:20 |
| ali1234 | when i click "time & date settings" it just opens "all settings" | 10:20 |
| ali1234 | there is no "clock" | 10:20 |
| BigRedS | the other tab | 10:20 |
| BigRedS | oh | 10:20 |
| gord | iruno whats going on with your system then | 10:21 |
| ali1234 | there are no tabs | 10:21 |
| BigRedS | You want 'time and date settings' then the 'clock' tab, then the 'choose locations' button on the right | 10:21 |
| ali1234 | doesn't unity use gnome control enter any more? | 10:21 |
| BigRedS | Certainly neither Gnome or Unity on my laptop appear to recognise the existence of the power button, but gnome under Debian does | 10:21 |
| BigRedS | so I've assumed that's some 'optimisation' somewhere in a common component, and I've presumed that extends to all the config | 10:22 |
| gord | it does use the gnome control centre | 10:23 |
| ali1234 | well my gnome control centre does not have a "clock" tab | 10:23 |
| gord | your system be funky, i suggest you defunkify it | 10:23 |
| livingdaylight | How about the calendar. Is it possible for that to link to google calendar - I have no use for evolution at all | 10:23 |
| ali1234 | can you show me a screenshot of what it is supposed to look like? | 10:23 |
| BigRedS | livingdaylight: as far as I know you can only do that with evolution, 'cause that's the gnome-sanctioned way of using calendars | 10:24 |
| popey | ali1234, its called time and date | 10:24 |
| gord | http://lotphelp.com/wp-content/uploads/2011/08/Time-Date_002.png | 10:24 |
| BigRedS | I keep meaning to do something with pal and /etc/profile... | 10:24 |
| ali1234 | no, not that window, the screenshot of gnome control center showing an icon labelled "time and date" | 10:25 |
| popey | i see it at the bottom under "system" | 10:25 |
| ali1234 | also that clearly isn't g-c-c because i doesn't have "all settings" button at the top | 10:26 |
| gord | i did a search for unity control centre on google images and just got back images of ccsm -_- | 10:26 |
| livingdaylight | BigRedS, that's disappointing. I'd like to integrate my calendar but don't use evolution or stand alone calendar. Presumably, lots of people use google's calendar to organize their schedule. Cloud computing and syncing over many apps is kinda way to go. Sounds like gnome devs are stuck in 20th century | 10:26 |
| ali1234 | popey: system has "date and time" not "time and date" | 10:27 |
| popey | not here | 10:27 |
| ali1234 | so what packages do you have installed which mess with gnome control center?? | 10:27 |
| gord | livingdaylight, http://www.my-guides.net/en/guides/linux/310-how-to-display-google-calendar-events-in-unity-without-evolution work for you? - if there is one thing i've learnt, its there is probably an indicator for everything by now | 10:27 |
| livingdaylight | I've got "Date and Time Settings" | 10:27 |
| BigRedS | livingdaylight: I thought "cloud" in that sense meant "In a web browser" | 10:27 |
| livingdaylight | gord, thx, will look at that | 10:28 |
| livingdaylight | BigRedS, you probably know better than me. I just mean in the sense that its stored in the cloud-space; hence synced over a lot of apps. i.e. I can schedule something on my desktop and be reminded about it, when I'm about through my Android phone | 10:29 |
| BigRedS | livingdaylight: haha, I was being facetious | 10:30 |
| ali1234 | ah here's the problem | 10:30 |
| livingdaylight | BigRedS, <doh> | 10:30 |
| BigRedS | :) | 10:30 |
| ali1234 | indicator-datetime doesn't work | 10:31 |
| ali1234 | so instead of displaying the configuration panel extension it just does nothing | 10:31 |
| ali1234 | ** (gnome-control-center:14468): WARNING **: Could not find settings panel "indicator-datetime" | 10:31 |
| BigRedS | livingdaylight: that's not really 'cloud'. That's just 'online' - calendars have done that for _years_ | 10:32 |
| BigRedS | (I know that's true of almost all of the 'cloud') | 10:32 |
| ali1234 | ah, if i remove the crappy broken indicator-datetime from my panel, and use the gnome one, locations is back | 10:32 |
| livingdaylight | ali1234, the gnome one? | 10:34 |
| livingdaylight | I've got indicator-datetime too | 10:34 |
| ali1234 | the gnome panel applet clock | 10:34 |
| livingdaylight | installed gworldclock but find it sux basically | 10:35 |
| ali1234 | right, fixed | 10:37 |
| livingdaylight | ali1234, are you in unity or gnome shell? | 10:38 |
| ali1234 | no | 10:38 |
| ali1234 | http://i.imm.io/K76r.png | 10:40 |
| === Hornet- is now known as Hornet | ||
| livingdaylight | ali1234, what DE are you in? | 10:44 |
| popey | ali1234, http://imgur.com/ZgHvn | 10:45 |
| livingdaylight | popey, nice | 10:46 |
| livingdaylight | is that only possible in Unity, still? | 10:47 |
| gord | anywhere you can use indicators | 10:47 |
| popey | no idea, it works for me | 10:52 |
| popey | i dont use any other desktops | 10:52 |
| ali1234 | you can use indicators under gnome panel however it does not work | 10:58 |
| ali1234 | so yeah this only works under unity | 10:59 |
| davmor2 | Morning all | 11:00 |
| ali1234 | livingdaylight: i use gnome classic | 11:00 |
| davmor2 | ali1234: what only works under unity? | 11:00 |
| ali1234 | indicator-datetime | 11:00 |
| davmor2 | ali1234: that should work under gnome classic all the indicators should | 11:01 |
| ali1234 | well it doesn't | 11:01 |
| ali1234 | if you are not running unity: ** (gnome-control-center:14468): WARNING **: Could not find settings panel "indicator-datetime" | 11:02 |
| davmor2 | ali1234: what version of Ubuntu is that on? | 11:04 |
| ali1234 | 12.04 | 11:04 |
| gord | and it works if you log into unity? | 11:06 |
| ali1234 | no. i cannot log in to unity because it is not installed | 11:07 |
| gord | then how can you say foo only works in unity, its likely your system is just misconfigured | 11:08 |
| gord | maybe an essential package didn't get brought in that is brought in with the ubuntu-desktop package | 11:08 |
| ali1234 | nope | 11:09 |
| ali1234 | in that case the dependencies on indicator-datetime are broken | 11:09 |
| gord | could be, ubuntu is a big and complicated system, but that doesn't mean omgeveryoneelseisterrible. just figure out what it is, install the package and file a bug against the packaging | 11:10 |
| ali1234 | considering that i have every package installed from ubuntu desktop except for ones that conflict with others | 11:11 |
| ali1234 | i cannot install any more packages to make indicator-datetime work | 11:11 |
| ali1234 | and it is highly unlikely that this is the problem | 11:11 |
| gord | ubuntu-desktop brings in unity | 11:11 |
| ali1234 | yes | 11:11 |
| ali1234 | so if indicator-datetime requires unity | 11:11 |
| ali1234 | then it requires unity and does not work under other desktops, and therefore my original statement was correct | 11:12 |
| gord | no, i'm saying log into unity, you said its not installed, so either your lying, or it conflicted with a gnome thing, which means who knows what else conflicted | 11:12 |
| ali1234 | yes, unity does conflict with compiz | 11:12 |
| ali1234 | because unity requires an incompatible fork of compiz which is not supported by upstrem | 11:12 |
| ali1234 | therefore in order to have a working version of compiz installed i cannot have unity installed | 11:13 |
| gord | okay you obviously have a crazyily configurated system, i'm just going to step outside this because its not worth my effort | 11:14 |
| ali1234 | like most things it seems | 11:14 |
| diplo | bug #1071001 | 11:15 |
| lubotu3 | Launchpad bug 1071001 in alsa-driver (Ubuntu) "Sound Card not detected NM10/ICH7 Intel HDA Internal" [Undecided,New] https://launchpad.net/bugs/1071001 | 11:15 |
| ali1234 | i love how you have plenty of time to argue with me, but fixing bugs is not worth your time | 11:15 |
| diplo | Sort of found a fix for the above | 11:15 |
| diplo | blacklist edac | 11:15 |
| diplo | Sound now works, but Output in Sound settings is still empty | 11:15 |
| AlanBell | ali1234: fwiw indicator-datetime works fine in gnome-classic session with unity installed | 11:17 |
| ali1234 | apt-get wants to install these packages for unity: compiz compiz-core compiz-gnome compiz-plugins-default compiz-plugins-main-default compizconfig-backend-gconf libcompizconfig0 unity | 11:19 |
| AlanBell | so yeah, probably is an unspecified dependency | 11:20 |
| popey | yup | 11:20 |
| ali1234 | so you're telling me it depends directly on unity or compiz? | 11:20 |
| popey | unity is a plugin for compiz 0.9 as you well know | 11:20 |
| ali1234 | indicator-datetime? | 11:20 |
| ali1234 | so that means indicator-datetime does depend on unity | 11:21 |
| AlanBell | well I don't know (and can't see why it should either) | 11:21 |
| ali1234 | so the assertion that it works "anywhere you can use indicators" is false | 11:21 |
| AlanBell | at some point I might try uninstalling unity in a vm to see if it breaks indicator-datetime | 11:21 |
| ali1234 | right i am in unity and it works now | 11:27 |
| AlanBell | ali1234: got a bug number? | 11:27 |
| ali1234 | for? | 11:27 |
| AlanBell | this issue? | 11:28 |
| ali1234 | no, i only just found it | 11:28 |
| ali1234 | reporting it nopw | 11:28 |
| AlanBell | ok | 11:28 |
| AlanBell | did unity start using the virtualbox passthrough driver or is it using llvmpipe still? | 11:31 |
| ali1234 | bug 751175 | 11:32 |
| lubotu3 | Launchpad bug 751175 in indicator-datetime (Ubuntu) "Time and Date Settings don't load" [Medium,Fix released] https://launchpad.net/bugs/751175 | 11:32 |
| ali1234 | bug 1074314 | 11:35 |
| lubotu3 | Launchpad bug 1074314 in indicator-datetime (Ubuntu) "indicator-datetime configuration panel does not work if unity/compiz is not installed" [Undecided,New] https://launchpad.net/bugs/1074314 | 11:35 |
| ali1234 | now testing exactly which package causes this | 11:35 |
| popey | AlanBell, virtualbox is broken | 11:37 |
| popey | well the virtualbox guest driver is | 11:37 |
| AlanBell | what do people at Canonical use then? | 11:37 |
| gord | i use vmware | 11:37 |
| popey | for what? | 11:37 |
| AlanBell | well, for VMs of ubuntu on an ubuntu host | 11:38 |
| AlanBell | for testing or whatever | 11:38 |
| popey | https://forums.virtualbox.org/viewtopic.php?f=3&t=51727&sid=36c95f58983d1295a120092fe6b8c85c&start=45 | 11:39 |
| popey | *sigh* | 11:39 |
| popey | Can't connect to MySQL server on '192.9.178.5' (110) [2003] | 11:39 |
| AlanBell | gord: does the host HUD grab the alt key from vmware guests? | 11:41 |
| popey | we have a known bug about the capture of alt/super in vms | 11:41 |
| gord | will do on ubuntu | 11:41 |
| gord | its not a vm issue, its, well really its an X issue | 11:42 |
| AlanBell | O.o | 11:42 |
| * czajkowski tickles gord you never came and said hi | 11:42 | |
| AlanBell | yeah Bug #741869 | 11:42 |
| lubotu3 | Launchpad bug 741869 in OEM Priority Project precise "Unity/compiz intercepts Super and Alt keypresses from grabbed windows like VMs." [High,Confirmed] https://launchpad.net/bugs/741869 | 11:42 |
| popey | thats the badger | 11:42 |
| gord | czajkowski, i was only in the same building ;) not really at uds | 11:43 |
| czajkowski | :( | 11:43 |
| AlanBell | gord: so I guess you turn off the shortcuts on the host or something to work in VMs? | 11:47 |
| gord | i just tend not to use them on hosts, i don't development "live", i built standalone versions of all the unity components that work outside of compiz | 11:48 |
| mungojerry | another month, another DE | 11:49 |
| popey | *boggle* | 11:49 |
| mungojerry | gnome shell was nice but suffered same problems | 11:49 |
| mungojerry | maybe the problem is the apps i use | 11:49 |
| mungojerry | it's certainly not my hardware | 11:49 |
| mungojerry | cos i've changed it compltely | 11:50 |
| AlanBell | sure, I am just puzzled how we managed to set a shortcut key for HUD that means you can't alt-tab in a guest | 11:50 |
| mungojerry | sometimes i think it's just me :( | 11:50 |
| SuperMatt | hurm, is there any kind of fake rootkit on the web I can use to check security software? | 11:51 |
| mungojerry | liek an eicar? | 11:51 |
| SuperMatt | yes, I guess | 11:52 |
| einonm | SuperMatt: I've heard of backtrack linux being used for that sort of thing | 11:55 |
| SuperMatt | oh right, I see how that works | 11:56 |
| SuperMatt | cool | 11:56 |
| * SuperMatt installs another vm | 11:56 | |
| MartijnVdS | \o/ vms | 11:58 |
| popey | LUNCH | 11:58 |
| * mungojerry is back to lxde | 11:58 | |
| mungojerry | + xcompmgr | 11:58 |
| SuperMatt | I have no idea how we managed to test the crap out of things until we had vms | 11:59 |
| mungojerry | 5 pcs | 11:59 |
| dwatkins | I was tempted to switch to xpde, but then I realised that development of it stopped years ago. | 11:59 |
| SuperMatt | the screenshots of xpde look remarkably like windows 8 | 12:00 |
| dwatkins | Perhaps I should just use fvwm95... | 12:00 |
| dwatkins | SuperMatt: heh, I think it's supposed to look like Windows 95 or 2000. | 12:00 |
| dwatkins | Possibly XP with the old-style theme enabled, considering the background. | 12:00 |
| davmor2 | AlanBell: I use Vbox but I need my vm's for very specific tasks so open them fullscreen, the only thing I have to worry about then is hitting enter before I type in the hud but the dash shortcuts work as expected because you can't see the main desktop one open. It is annoying though but not the end of the world | 12:02 |
| * BigRedS shudders at the thought of interacting with a gui vm | 12:03 | |
| dwatkins | BigRedS: likewise, I prefer using ssh/screen | 12:06 |
| AlanBell | ah, ok it does work a bit better fullscreened | 12:06 |
| BigRedS | I just don't know if my brain would manage | 12:06 |
| ali1234 | right, i have ubuntu-desktop^ installed and still exactly the same situation | 12:24 |
| ali1234 | the panel works in unity, does not work in gnome classic no effects, and i cannot test in gnome classic /w compiz because of the compiz bugs | 12:25 |
| ali1234 | (ie the reason i uninstalled compiz in the first place) | 12:26 |
| ali1234 | so it looks like compiz is the common factor here | 12:27 |
| ali1234 | i'm going to try fresh installs in VMs | 12:29 |
| ali1234 | will test 12.04 and 12.10 | 12:29 |
| ali1234 | hmm... 12.04.1 right? | 12:29 |
| davmor2 | ali1234: yeap | 12:34 |
| davmor2 | AlanBell: Glad I could partially help for a change :) | 12:35 |
| davmor2 | AlanBell: Of course now I need to be evil for a month to make up for it | 12:36 |
| AlanBell | naturally davmor2 | 12:49 |
| davmor2 | AlanBell: you in London at all from the 12-16? | 12:50 |
| AlanBell | erm, probably could be | 12:50 |
| AlanBell | no set plans, but could get there | 12:51 |
| davmor2 | I'm down for a canonical sprint that week :) | 12:51 |
| AlanBell | ok, so which type of sprint is that? | 12:51 |
| AlanBell | is it the "yay, lets party" type, or the "go away, we are busy" type | 12:52 |
| davmor2 | AlanBell: it's the impolite version of UFO this is stupidly mentally busy, but we are pretty much on our own for evening meals so I thought I might try and catch up with people in the Sowff rather than eating by myself :) | 12:55 |
| AlanBell | ok, cool we should do something then | 12:56 |
| AlanBell | I know there was a sprint in Dublin where a bunch went out for beers with the loco team | 12:56 |
| davmor2 | AlanBell: well I think there will be a couple of team meals one will be the Tuesday 13 iirc and there might be a second that is made up of what was our old team but that is a maybe | 12:59 |
| AlanBell | I can't do the wednesday | 13:00 |
| davmor2 | so Monday Thursday or Friday, I'm thinking Thursday might be best freeing up friday for you to go to a local pub :) | 13:03 |
| AlanBell | Thursday is good, so that is the 15th | 13:09 |
| davmor2 | AlanBell: Yeap looks like it | 13:10 |
| davmor2 | AlanBell: now to find out if Uncle popey will be free | 13:11 |
| AlanBell | yeah, just have to wait for him to sober up I guess ;) | 13:11 |
| davmor2 | AlanBell: Sober up, he has to stop being drunk recover from the hangover and get a new liver before he can sober up :D ahh UDS if the UBUFLU doesn't kill you the alcohol poisoning will :) | 13:13 |
| AlanBell | yeah, shocking. I think more people should follow the abstemious example set by czajkowski | 13:15 |
| Pendulum | Maybe the alcohol helps fight UBUFLU. It would explain why I got sickest at the UDS where I didn't drink at all | 13:17 |
| AlanBell | I suspect it does | 13:20 |
| bb15 | hi all! | 13:21 |
| AlanBell | hi bb15 | 13:23 |
| davmor2 | hello bb15 | 13:25 |
| ali1234 | ISOs downloaded and now installing the VMs... | 13:34 |
| ali1234 | wow, 12.10 is unbelivably slow in virtualbox | 13:43 |
| ali1234 | opening the dash takes over 10 seconds | 13:44 |
| ali1234 | ah i see you still get loads of adult content from the amazon search... i thought that was fixed | 13:45 |
| davmor2 | ali1234: what did you look up? | 13:46 |
| ali1234 | "fuc" | 13:46 |
| ali1234 | also, $swearword = no result, $swearword + ' ' = full results | 13:47 |
| ali1234 | just like how appending space completely changes HUD results. i guess both systems were implemented by the same person. | 13:47 |
| ali1234 | let's suppose i'm looking for a "cock soup" recipe | 13:49 |
| ali1234 | "coc" -> irrelevant but harmless results | 13:50 |
| ali1234 | "cock" -> nothing at all | 13:50 |
| ali1234 | "cock " -> lots of highly offensive content | 13:50 |
| mungojerry | cock a leekie | 13:50 |
| mungojerry | well known soup | 13:50 |
| ali1234 | basically this filter is implemented in the worst way possible | 13:51 |
| ali1234 | anyway that's a problem for another time. back to testing this panel thing | 13:52 |
| mungojerry | patches welcome | 13:52 |
| ali1234 | hahaha | 13:52 |
| ali1234 | why would i send a patch when this bug does not affect me since a) i don't use this software and b) i'm not offended by adult content | 13:52 |
| AlanBell | I don't think it is implemented in the worst way possible | 13:53 |
| AlanBell | I could do it much worse if I tried | 13:53 |
| ali1234 | how would you do it worse? | 13:53 |
| AlanBell | whatever you search for you get a Rick Astley CD | 13:53 |
| mungojerry | ali1234, you seem to care enough to try it and break it | 13:53 |
| ali1234 | accidentally reverse the test so it only returns potentially offensive content? | 13:53 |
| davmor2 | ali1234: well like it was before where it displayed anything no matter what was typed | 13:54 |
| ali1234 | davmor2: that would not be an implementation | 13:54 |
| AlanBell | so, puzzle for the day, if I write a lens to search your OpenERP server for stuff, should it honour the don't serve internet results privacy setting? | 13:55 |
| ali1234 | what does "dont serve internet results" mean? | 13:56 |
| ali1234 | i suspect it should do | 13:56 |
| AlanBell | it is an undocumented feature that was rushed in to fix complaints about the amazon search results in the dashs | 13:56 |
| ali1234 | Oh | 13:56 |
| AlanBell | it is epically broken in concept, however it is what it is | 13:57 |
| ali1234 | i thought it was a setting on the openerp server, like robots.txt kind of thing | 13:57 |
| AlanBell | no, in the privacy settings in system settings | 13:57 |
| ali1234 | yeah i know what you mean now | 13:57 |
| ali1234 | well | 13:57 |
| AlanBell | it sets a key somewhere and the shopping/photo/music/video lenses have been hacked to look for that setting and turn themselves off | 13:57 |
| ali1234 | does your lens integrate into the top level dash search, or does user have to click on the specific icon to get it? | 13:57 |
| AlanBell | could do both | 13:58 |
| ali1234 | well if the former then honour the setting. if the latter then don't | 13:58 |
| davmor2 | AlanBell: if you are writing a full lens then why not make it a toggle switch. IE at the office you can search everything, on a site you only search the stuff the internet sees | 13:58 |
| ali1234 | no, you have the same confusion i did | 13:59 |
| AlanBell | davmor2: this is about the thing in the privacy settings | 13:59 |
| ali1234 | it's not about the scope of the results it returns | 13:59 |
| ali1234 | it's about whether it works *at all* | 13:59 |
| ali1234 | i think the only sensible answer is to tell you not to bother writing lenses until they sort this stuff out | 14:00 |
| AlanBell | the shipping lenses turn themselves off altogether davmor2 | 14:00 |
| AlanBell | well turn off their internet searches | 14:00 |
| AlanBell | ali1234: that is a very fair point | 14:00 |
| davmor2 | AlanBell: ah right I have no idea then | 14:00 |
| AlanBell | tbh it isn't documented how one is supposed to comply with the privacy settings anyway | 14:02 |
| AlanBell | that is a feature that couldn't have been implemented any worse I feel | 14:02 |
| ali1234 | does the openerp search require a login? | 14:02 |
| AlanBell | yes, it does | 14:02 |
| ali1234 | like, on the server? if so then you agreed to privacy policy when making an account | 14:02 |
| AlanBell | and I need to figure out how to do that bit still | 14:02 |
| ali1234 | hmm | 14:03 |
| ali1234 | you know this could be real bad | 14:03 |
| ali1234 | if employer gives you a laptop with this lens | 14:03 |
| AlanBell | openerp is something you would install on your own infrastructure, kind of like owncloud etc | 14:03 |
| ali1234 | now they can see EVERYTHING you search for | 14:03 |
| ali1234 | AlanBell: it's something your eployer would install or have installed for them | 14:03 |
| AlanBell | heh, true | 14:03 |
| ali1234 | so now when you are searching monster.com in the dash your employer can see in the openerp log | 14:04 |
| ali1234 | that's HORRIBLE | 14:04 |
| ali1234 | so in this case, the lens must absolutely honour that setting | 14:04 |
| AlanBell | yeah, it is, but that is the lens infrastructure | 14:04 |
| ali1234 | at the very least when returning results from multiple lenses | 14:04 |
| gord | as we know, its impossible for them to know if you go to monster.com in your browser | 14:04 |
| ali1234 | if you can't distinguish where the search came from then disable it everywhere | 14:05 |
| ali1234 | gord: yes, it is | 14:05 |
| AlanBell | I am not too bothered by the OMG logs!!! stuff really | 14:05 |
| ali1234 | why are you even asking this question then? | 14:05 |
| AlanBell | because I am wondering what the behaviour should be when the checkbox is checked | 14:06 |
| ali1234 | the only sensible answer is the lens stops working | 14:06 |
| AlanBell | I suspect you are right | 14:06 |
| AlanBell | the shipping lenses only search local content when you have that checked | 14:07 |
| ali1234 | of course it isn't even just a problem of web browsing | 14:07 |
| ali1234 | they get logs of everything you search for not just websites | 14:07 |
| AlanBell | I was just wondering whether people thing that checkbox means "don't search on SaaS websites of companies that might be evil" | 14:08 |
| ali1234 | nope | 14:08 |
| AlanBell | or "don't search on anything that is an http request away" | 14:08 |
| ali1234 | it means don't perform any searches that go over the internet | 14:09 |
| AlanBell | technically it means *nothing whatsoever* | 14:09 |
| AlanBell | but I don't think anyone wants to know that right now | 14:09 |
| MartijnVdS | ali1234: but my local network != t'internet | 14:09 |
| ali1234 | it means "act as if all networks were disconnected" | 14:09 |
| AlanBell | MartijnVdS: that is exactly what I was pondering | 14:10 |
| MartijnVdS | AlanBell: It could search my mounted SMB shares.. that would rock | 14:10 |
| ali1234 | there is no way to distiguish the internet from any other lan | 14:10 |
| MartijnVdS | (gvfs-mounted) | 14:10 |
| AlanBell | the bottom line is that the checkbox is horrifically implemented and it should be a per-lens setting to say whether they can read global_search_change events or not | 14:11 |
| ali1234 | basically this type of confusion is what happens when you rush through unfinished features | 14:11 |
| ali1234 | and trying to figure out a workaround is just going to encourage more of the same | 14:11 |
| MartijnVdS | ali1234: Nah it wasn't rushed. You just weren't "in the loop"! | 14:11 |
| MartijnVdS | ;) | 14:12 |
| AlanBell | it was rushed | 14:12 |
| MartijnVdS | ali1234: you could use a link-local address to determine what's on-LAN and what's not on-LAN 8-) | 14:12 |
| ali1234 | so as a developer i recommend you say "no, i'm not implementing any lenses for this until it is fixed" | 14:12 |
| AlanBell | Amazon search was pushed out at feature freeze and this was written and put in after freeze | 14:12 |
| MartijnVdS | ali1234: it's not perfect. but better than nothing | 14:12 |
| AlanBell | https://lists.launchpad.net/unity-dev/msg00536.html | 14:13 |
| AlanBell | I have raised the issue itself | 14:13 |
| AlanBell | I think I am coming round to your way of thinking ali1234 | 14:14 |
| ali1234 | "If I want to buy stuff on Amazon I want to click on the shopping lens in the lens bar and use 100% of the dash for the shopping search results." | 14:14 |
| ali1234 | ... or even better just open a web browser and go to amazon.com | 14:14 |
| ali1234 | and not have to deal with poorly implemented profanity filters | 14:14 |
| AlanBell | I actually like the way the lens searches amazon | 14:15 |
| AlanBell | search as you type, plus it doesn't help amazon track me quite so much | 14:15 |
| AlanBell | but meh, it isn't that exciting, sure a browser to amazon.com works well too | 14:16 |
| AlanBell | I think the privacy thing is just a liability at the moment for lens writers | 14:16 |
| AlanBell | I can publish the lens written to the API and it won't comply with the checkbox (so I am "wrong" and probably "evil") | 14:17 |
| ali1234 | search as you type is super slow though | 14:18 |
| ali1234 | the only system that does it and isn't super slow is google | 14:18 |
| AlanBell | or I can read the source of a shipping lens and figure out how to comply with a feature I know to be a bad system | 14:18 |
| AlanBell | search as you type is fine for me, but I have 70Mbit broadband | 14:18 |
| AlanBell | that said, now that I have turned off internet results it is a fraction more responsive | 14:18 |
| ali1234 | it's not slow because of network speed, it's slow because it redraws the screen every time you press a key | 14:20 |
| === Kieran is now known as Guest18644 | ||
| AlanBell | quite impressed that the shopping lens is still working, I figured Amazon would blacklist products.ubuntu.com fairly quickly | 14:20 |
| ali1234 | and i can type faster than llvm-pipe can redraw the dash | 14:20 |
| AlanBell | oh, right | 14:20 |
| ali1234 | actually my mother can type faster than this | 14:22 |
| ali1234 | hmm 30mb of updates for Q and 220mb for P | 14:24 |
| ali1234 | hmm so the follow up makes the argument that "if you can run a program as a user..." | 14:26 |
| ali1234 | which is the same as the "we already have root" argument | 14:26 |
| ali1234 | that's a poor argument and here is why | 14:26 |
| ali1234 | if you can run any program as the user you can install some malware but that can be detected | 14:27 |
| ali1234 | however on ubuntu if you can run any program as a user you can install some malware right from the repositories and it looks legit, and nobody would ever know what you've done | 14:27 |
| ali1234 | for example if you release this openerp lens then mr bad guy doesn't need to write his own invisible lens, he can just use yours and it won't seem out of place | 14:28 |
| * mgdm is going to install OpenERP at the weekend and have a play | 14:29 | |
| mgdm | it might suit someone I know | 14:29 |
| AlanBell | yup | 14:29 |
| AlanBell | mgdm: cool, go for version 7 | 14:29 |
| mgdm | I shall, ta | 14:29 |
| AlanBell | not release yet, but is getting close now | 14:29 |
| AlanBell | mgdm: I can let you have a login on one of our dev boxes or something if you like | 14:29 |
| AlanBell | I have it with HUD integration now | 14:30 |
| mgdm | AlanBell: thanks, though I'll probably just put it on my laptop so I can have a poke around inside | 14:30 |
| einonm | Here's a good one - my 12.04 resume/suspend didn't work, and after 4 shutdown resets I still have no pointer control, not via the touchpad or even when plugging in an external mouse | 14:31 |
| AlanBell | mgdm: also there is the #openobject channel | 14:32 |
| mgdm | AlanBell: cool | 14:34 |
| einonm | ah that'll be my fault then, for using an rc1 kernel....works on 3.2. Panic over. | 14:46 |
| kvarley | Just installed proprietary drivers on 12.10 (Samsung 535U3C A02UK) and now it just shows me a flashing _ on the screen. Any ideas? | 14:58 |
| ali1234 | k, confirmed. indicator-datetime settings does not work in gnome classic or gnome classic no effects on a fresh fully updated install of 12.04.1 or 12.10 | 14:59 |
| ali1234 | also compiz still crashes when using gnome classic on 12.10 | 15:02 |
| kvarley | Ubuntu used to be rock solid | 15:06 |
| kvarley | A bit of a pain to setup right but then it'd just work | 15:06 |
| kvarley | Nowadays it seems to be the opposite | 15:06 |
| mungojerry | debian is still solid | 15:08 |
| kvarley | I'm having to use two scripts, one to get brightness control and one to get sound. It's like I'm using Ubuntu 8.04 again | 15:14 |
| kvarley | Do vendor graphics drivers handle brightness control? | 15:16 |
| SuperMatt | normally, yes | 15:16 |
| kvarley | I might manually install the graphics drivers then | 15:16 |
| mungojerry | which vide card | 15:17 |
| kvarley | AMD A6-4455M APU | 15:17 |
| ali1234 | kvarley: i told you not to use 12.10 :) | 15:19 |
| ali1234 | just revert to 12.04 it works much better | 15:19 |
| kvarley | ali1234: reckon this stuff will work on 12.04? | 15:19 |
| kvarley | Oh yeah, you mentioned driver issues lol | 15:19 |
| kvarley | Ok, reverting | 15:19 |
| ali1234 | try a live cd | 15:19 |
| kvarley | My SSD is not having a happy birth | 15:20 |
| kvarley | Been formatted twice already lol | 15:20 |
| ali1234 | is it pure SSD or SSD accelerator | 15:20 |
| kvarley | ? | 15:20 |
| kvarley | ali1234: It's a Crucial M4 | 15:20 |
| ali1234 | SSD accelerator = HDD with SSD cache | 15:20 |
| kvarley | Ah no, pure SSD | 15:20 |
| ali1234 | pure SSD then, should be ok | 15:20 |
| kvarley | I know the key probably won't work but I'd like the silent mode function key to work in ubuntu. If it did then it'd be perfect | 15:21 |
| kvarley | right now I'll settle for brightness control and sound tho | 15:21 |
| kvarley | ali1234: Does 1204 work with UEFI? | 15:29 |
| ali1234 | i dunno | 15:29 |
| kvarley | Just got invalid signature | 15:29 |
| kvarley | Might be bad usb installer | 15:29 |
| ali1234 | it won't work with secure boot | 15:29 |
| kvarley | Dammit | 15:29 |
| ali1234 | unless you whitelist it | 15:29 |
| ali1234 | or disable secure boot entirely | 15:29 |
| kvarley | Do I need secure boot? | 15:29 |
| ali1234 | no, it doesn't do anything useful | 15:30 |
| kvarley | Ok :) | 15:30 |
| ali1234 | actually that's not true | 15:30 |
| ali1234 | if you manually whitelist all the binaries you run then it does something useful | 15:30 |
| ali1234 | if you install without enabling setup mode using 12.10 which has been signed, you get virtually no benefits at all | 15:30 |
| ali1234 | basically under a securely configured UEFI system the 12.10 image wouldn't work either until you whitelisted it | 15:31 |
| kvarley | ali1234: It installs ok, but when I did graphics drivers it failed | 15:34 |
| kvarley | The bios settings are stupid | 15:34 |
| kvarley | "Standard" or "Custom" mode | 15:34 |
| kvarley | Why not just a disable? | 15:34 |
| kvarley | Will windows 7 install on a machine with UEFI on? | 15:34 |
| kvarley | Would be funny if it wouldn't | 15:34 |
| dwatkins | no fair, fvwm95 fails to compile on Ubuntu. | 15:34 |
| MartijnVdS | good, good. | 15:35 |
| MartijnVdS | dwatkins: fvwm1 - Old version of the F(?) Virtual Window Manager | 15:35 |
| ali1234 | kvarley: windows 7 won't install on a secure boot windows 8 system | 15:35 |
| kvarley | ali1234: hehe | 15:35 |
| dwatkins | MartijnVdS: I can use fvwm or fvwm2, but fvwm95 and fvwm98 fail to compile completely, the taskbar module gives an error compiling. | 15:36 |
| ali1234 | it will install if you whitelist it or turn off secure boot however | 15:36 |
| kvarley | Was it Microsoft who came up with secure boot? | 15:36 |
| ali1234 | yes | 15:36 |
| kvarley | I hate them even more now | 15:36 |
| ali1234 | and it is microsoft who decides which software is allowed to run | 15:36 |
| kvarley | The BIOS is confusing | 15:37 |
| ali1234 | in the default configuration that is | 15:37 |
| kvarley | No disable options | 15:37 |
| ali1234 | you don't do it in the bios | 15:37 |
| kvarley | Oh? | 15:37 |
| ali1234 | they dont even have a bios | 15:37 |
| kvarley | Oh | 15:37 |
| ali1234 | what does the screen you are on look like? | 15:37 |
| kvarley | I'm in the BIOS on the Security page which has an option for Secure Boot mode | 15:38 |
| ali1234 | ok? | 15:38 |
| kvarley | Secure Boot Mode - Standard or Custom | 15:38 |
| kvarley | When I select Custom loads of options come up | 15:38 |
| ali1234 | well yeah | 15:38 |
| ali1234 | i'm not going to attempt to tell you how to fix it | 15:38 |
| kvarley | lol | 15:38 |
| ali1234 | instead you should return the laptop and when they ask why say "because i can't install ubuntu" | 15:38 |
| ali1234 | then buy a laptop that is't windows 8 | 15:39 |
| kvarley | I installed ubuntu on it tho | 15:39 |
| ali1234 | and it didn't work | 15:39 |
| kvarley | And it ran | 15:39 |
| ali1234 | so say "because i can't install ubuntu LTS" | 15:39 |
| kvarley | Until I did proprietary drivers | 15:39 |
| kvarley | This is the 3rd laptop model I've had now | 15:39 |
| ali1234 | like i said before, if you figure out a workaround you just encourage more of this | 15:40 |
| kvarley | Bah :/ | 15:40 |
| ali1234 | the only thing they understand is "we lost $$$ because of secure boot" | 15:40 |
| kvarley | This is annoying as hell, installed an SSD in here today as well | 15:40 |
| ali1234 | btw i highly recommend lenovo ultrabook with windows 7 | 15:40 |
| ali1234 | they come with SSD already fit and no secure boot | 15:41 |
| kvarley | I spent £498 on this ultra thin laptop | 15:41 |
| kvarley | How much are the lenovos? | 15:41 |
| ali1234 | about the same | 15:41 |
| ali1234 | every single page on lenovo website is 404 except for the top index | 15:42 |
| kvarley | This is annoying | 15:42 |
| kvarley | I hate Microsoft | 15:43 |
| kvarley | And hate laptops | 15:43 |
| ali1234 | laptops are pretty rubbish when you think about it | 15:43 |
| kvarley | True | 15:43 |
| ali1234 | spending loads of money on one is pointless. i mean how much do you really use it? | 15:43 |
| ali1234 | if you only use it in the same place you should have got a desktop | 15:44 |
| BigRedS | I'm increasingly not using three different desktops, and just use my laptop | 15:44 |
| BigRedS | I don't think I'll bother getting another desktop in future, really, just get a laptop and, if I particularly fancy it, a couple of docking stations | 15:45 |
| kvarley | I don't understand what secure boot does | 15:45 |
| kvarley | If it's not in the BIOS | 15:45 |
| ali1234 | the trouble with that is that a laptop that is as powerful as a desktop costs about twice as much as a desktop and a cheap laptop | 15:45 |
| BigRedS | It prevents unsigned binaries being booted from | 15:45 |
| BigRedS | kvarley: it's only "not in the bios" because it's in EFI which replaces the bios | 15:46 |
| kvarley | So with secure boot on Ubuntu shouldn't run at all | 15:46 |
| BigRedS | it's in the same sort of place as the bios was/is | 15:46 |
| kvarley | Ah | 15:46 |
| kvarley | This is a headache | 15:46 |
| ali1234 | no, with secure boot on ubuntu 12.10 will run because it has been blessed by microsoft | 15:46 |
| BigRedS | ali1234: I don't remember the last time I needed more power out of my PC | 15:46 |
| kirrus | It's the first layer of interface between the hardware and the software of the operating system | 15:46 |
| ali1234 | but uubuntu 12.04 will not | 15:46 |
| BigRedS | Actually, I do, it was 2004 | 15:46 |
| ali1234 | fedora latests will run, windows 7 will not | 15:46 |
| ali1234 | but in the custom menu you can allow unsigned software to run | 15:47 |
| davmor2 | ali1234: if you are me, all day every week day ref how often do you use a laptop | 15:47 |
| kvarley | So I should technically be able to install 12.10? | 15:47 |
| BigRedS | kvarley: There's a good deal of explanations from at least Fedora and several kernel types about how it works and what it does | 15:47 |
| BigRedS | which are probably easier to follow than IRC | 15:47 |
| ali1234 | davmor2: is that a question? | 15:47 |
| ali1234 | kvarley: yes you can install 12.10. but it doesn't work because it is incredibly buggy | 15:48 |
| kvarley | I don't know what to do now then | 15:48 |
| einonm | kvarley: There should be a menu option to disable running signed bootloaders | 15:48 |
| davmor2 | <ali1234> spending loads of money on one is pointless. i mean how much do you really use it? my reply is <davmor2> ali1234: if you are me, all day every week day ref how often do you use a laptop | 15:48 |
| einonm | kvarley: Although the menu is vendor specific, so there's no real standard guide | 15:48 |
| BigRedS | yeah, and it's not *required* | 15:48 |
| ali1234 | davmor2: you use a laptop as a desktop replacement? | 15:48 |
| * BigRedS does/has done | 15:49 | |
| davmor2 | ali1234: I use 2 laptops and 4 desktops | 15:49 |
| kvarley | einonm: I see: Platform Key; Key Exchange Database; Authorized Signature Database; Forbidden Signature Database. | 15:49 |
| BigRedS | As soon as I find my third laptop power lead I'll be sticking my docking station at work | 15:49 |
| ali1234 | davmor2: so you use multiple computers at the same time? | 15:49 |
| BigRedS | and then, now that I've worked out how to make the network work under Windows, I'll basically not use desktops | 15:49 |
| einonm | kvarley: One way is to add your own key to the DB, but there should be a disable option too. Are there any super menus / sub menus? | 15:50 |
| davmor2 | ali1234: yeap but my 2 main are my main desktop and my main laptop the rest are basically test boxes for different scenarios that you can't properly replicate with a vm | 15:51 |
| ali1234 | personally i avoid using multiple computers at the same time by using virtual machines. something which is painful on a laptop because: tiny screen, not enough ram, not enough cpu cores, and probably no hardware vx | 15:51 |
| ali1234 | or you could buy a laptop that does all that, but it would cost about 4x an equivalent desktop | 15:51 |
| BigRedS | I have £1k of laptop | 15:51 |
| ali1234 | ^ exactly | 15:51 |
| BigRedS | and it does what I'd use 2 desktops a laptop and a machine somewhere on the interent for | 15:52 |
| davmor2 | ali1234: I do on this laptop, it's an I3 3 gig of ram more than enough | 15:52 |
| ali1234 | lol | 15:52 |
| BigRedS | since I can't boot up a VM on my work PC and then take it home | 15:52 |
| ali1234 | no, 3 gig is not even enough to run ONE copy of ubuntu these days | 15:52 |
| ali1234 | perhaps if you run the 32 bit version it might be | 15:52 |
| BigRedS | I have 4GB RAM and I frequently run a Ubuntu and a few VMs | 15:52 |
| BigRedS | Unity, to boot | 15:52 |
| BigRedS | I think it's only got a couple of cores, too | 15:53 |
| davmor2 | ali1234: I'm the same as BigRedS | 15:53 |
| ali1234 | what do you do in those VMs btw? | 15:53 |
| ali1234 | i'm guessing the answer is not "open firefox" | 15:53 |
| BigRedS | No | 15:53 |
| BigRedS | they don't have UIs | 15:53 |
| kvarley | einonm: These are my options http://kvarley.co.uk/tmp/secureboot.custom.menu.jpg | 15:54 |
| davmor2 | ali1234: I open Software Center a lot | 15:54 |
| BigRedS | I used to have a couple that did gui things, thinking about it. When it was a Debian machine and I wanted to confirm bugs under Ubuntus | 15:54 |
| BigRedS | But, no. Mostly it's for testing packages and scripts for installing/configuring things | 15:55 |
| BigRedS | I get that it's not enough for *you*, but I absolutely don't think it's the general case that a laptop can't work as a desktop replacement | 15:55 |
| ali1234 | i have a VM that i need to build a firmware image on fedora. it peaks out at about 4GB memory usage, with no UI | 15:55 |
| ali1234 | oh sure. a laptop can replace a desktop for most people. however most people do not hang around in this IRC channel | 15:56 |
| BigRedS | I'm not even going to begin to guess at this demographic, it keeps surprising me | 15:57 |
| shauno | I haven't had a desktop since 2004 | 15:57 |
| einonm | kvarley: Hmm, ok. What options are there for the 'Default Key Provisioning' option? | 15:57 |
| ali1234 | kvarley: "delete the PK" is the option you need | 15:57 |
| ali1234 | but if you do this and mess up the computer it isn't my fault, ok? | 15:58 |
| kvarley | einonm: "Enabled" or "Disabled" | 15:58 |
| kvarley | ali1234: I will get the key to file first :) | 15:58 |
| ali1234 | deleting the PK will disable secure boot entirely | 15:58 |
| einonm | kvarley: DONT delete any keys at this point | 15:58 |
| kvarley | einonm: Ok | 15:58 |
| einonm | you will at least need to back it up first | 15:58 |
| ali1234 | w/e. deleting the PK is the way you disable secure boot according to the spec | 15:58 |
| ali1234 | what you can also do is go to "authorized signature database" and "append signature to DB" and then add the signaure of ubuntu 12.04 | 15:59 |
| ali1234 | and then it will be allowed to run even though it isn't signed | 15:59 |
| kvarley | Where do I get that signature? | 15:59 |
| ali1234 | this is called whitelisting | 15:59 |
| ali1234 | well that's a good question | 16:00 |
| ali1234 | it might be able to calculate it for you | 16:00 |
| kvarley | Is it not easier to get the PK from file | 16:00 |
| kvarley | Save it to an SD card | 16:00 |
| kvarley | Then delete the PK all together | 16:00 |
| ali1234 | see that option "install default secure boot keys" | 16:00 |
| einonm | A signature is a hash of an image encrypted by a key | 16:00 |
| ali1234 | can you guess what that does? | 16:00 |
| kvarley | ali1234: Oh, Microsofts way of staying on your pc? | 16:01 |
| einonm | so you'll need to have the private and public parts of any key in order to create a signature | 16:01 |
| ali1234 | false | 16:01 |
| kvarley | ali1234: Wipes all keys? | 16:02 |
| ali1234 | kvarley: no, it puts back the microsoft key | 16:02 |
| kvarley | That's what I meant by microsofts way of staying on your pc ;) | 16:02 |
| ali1234 | einonm: you dn't need key pairs to whitelist a binary because it only checks the hash of the binary | 16:02 |
| ali1234 | if you had a key pair you could just enroll it as a KEK instead, and the authorized signature database would not be needed | 16:03 |
| kvarley | ali1234: I have got the PK file on my SD and now it's being backed up | 16:03 |
| kvarley | So am I *theoretically* safe to delete the PK file? | 16:03 |
| ali1234 | incidentally all of this is documented quite well in the UEFI spec, which is publicly available if you just enter any fake email address | 16:03 |
| ali1234 | http://www.uefi.org/specs/ | 16:04 |
| ali1234 | you can also play around with it in qemu by following the guides on my website | 16:04 |
| kvarley | Ok, thanks | 16:04 |
| ali1234 | http://al.robotfuzz.com/playing-with-uefi-secure-boot-part-1-ovmf/ | 16:04 |
| ali1234 | secure boot is only a tiny part of the UEFI spec | 16:05 |
| * BigRedS notes that down | 16:05 | |
| BigRedS | All my exposure to UEFI so far has been mjg ranting about it | 16:05 |
| ali1234 | yeah well his ranting inspired me to find out for myself | 16:05 |
| ali1234 | not just him | 16:05 |
| kvarley | But basically if I delete the Platform Key file I should be able to boot anything? | 16:05 |
| BigRedS | ah, it put me off ever going anywhere near it :) | 16:06 |
| ali1234 | basically nobody seemed to really know what they were talking about | 16:06 |
| ali1234 | kvarley: yes | 16:06 |
| ali1234 | kvarley: if you boot a windows setup disk it will probably lock down the machine again | 16:06 |
| kvarley | ali1234: Do I also need to delete the Key Exchange DB, Authorized Sig DB and Forbidden Sig DB? | 16:07 |
| ali1234 | no | 16:07 |
| kvarley | Ok | 16:07 |
| einonm | ali1234: How do you know deleting the PK will disable secure boot? | 16:07 |
| kvarley | I have no windows 8 disc to boot anyway | 16:07 |
| ali1234 | einonm: because the spec says it will | 16:07 |
| ali1234 | it doesn't actually disable it, it puts it into setup mode | 16:07 |
| ali1234 | that's effectively the same thing though | 16:07 |
| einonm | In my experience, there is both a hardware switch and a key required for secure boot. | 16:07 |
| einonm | Ah, ok. That makes more sense | 16:08 |
| ali1234 | in setup mode anything can run, anything can enroll keys, etc | 16:08 |
| einonm | A bit crap though, as physical access to the machine means that you can always circumvent it | 16:08 |
| kvarley | I didn't think it was possible but I actually hate Microsoft even more. They're killing one of the good things about PCs | 16:08 |
| ali1234 | yes, that's a requirement of UEFI | 16:08 |
| ali1234 | for windows 8 logo certification on x86 secure boot MUST be able to be circumvented if you have physical access | 16:08 |
| ali1234 | UEFI spec says that if secure boot may be circumvented the user must prove they have physical access ie by pressing a key on the physical keyboard... doesn't need to be a key switch. just the action f using the menus is enough. | 16:09 |
| einonm | That sounds like it could be easily hacked in software | 16:10 |
| ali1234 | however the spec doesn't define it it should be possible to disable it or not | 16:10 |
| ali1234 | not really | 16:10 |
| ali1234 | the whole point of UEFI is to prevent any usigned sofware running | 16:10 |
| kvarley | Surprised Microsoft just didn't lock it down totally | 16:10 |
| ali1234 | for ARM they have done. the logo requirements there require that secure boot cannot be disabled at all | 16:10 |
| kvarley | In theory I can see why they thought it was good | 16:10 |
| BigRedS | It's not really their spec to do that, is it? | 16:10 |
| ali1234 | wo's spec? | 16:10 |
| BigRedS | MS's | 16:10 |
| ali1234 | no | 16:10 |
| ali1234 | however logo certification for windows 8 is | 16:11 |
| BigRedS | I suppose the Windows logo is, but none of UEFI is | 16:11 |
| ali1234 | well MS did design large parts of UEFI | 16:11 |
| ali1234 | like the signature format | 16:11 |
| ali1234 | is MS authenticode | 16:11 |
| ali1234 | and UEFI executables are windows PE | 16:11 |
| ali1234 | on MAC UEFI the executables can also be mac binaries but nothing supports that but macs | 16:12 |
| ali1234 | and it's not in the spec | 16:12 |
| einonm | so are MS only allowing signed apps to run nowadays as well? | 16:16 |
| ali1234 | einonm: not apps. just drivers and anything that can run in kernel mode | 16:17 |
| ali1234 | kvarley: i think "default key provisioning" might be useful to you. i found a manual for your bios but it's in chinese | 16:17 |
| kvarley | What does that do? | 16:17 |
| einonm | that works provided that there's no security holes in your kernel. Which I doubt is true | 16:17 |
| ali1234 | kvarley: trying to find out. i *think* it might automatically add the hash of unsigned exes to the authorized database, thus allowing you to install any OS you want without disabling secure boot | 16:19 |
| ali1234 | kvarley: "This item enables or disables you to force OEM default secure boot keys if system is in setup mode." | 16:21 |
| ali1234 | that's not what you want at all :( | 16:21 |
| ali1234 | kvarley: so where are you up to? | 16:23 |
| einonm | It looks like the 'custom' secure boot mode allows you to add your own key to the KEK...which then allows you to add a signature to the DB (a hash of an executable signed by your key) | 16:31 |
| einonm | That's well tricky for your average user. | 16:31 |
| AlanBell | anyone know about the online accounts tool? | 16:32 |
| ali1234 | i've seen it. i have no idea what it does | 16:32 |
| ali1234 | though i think it is somehow related to webapps | 16:33 |
| AlanBell | well not entirely, but it does the oauth stuff with twitter/google/etc then desktop things can use that (like gwibber/empathy etc) | 16:33 |
| AlanBell | but they all seem to be consumer identity providors | 16:34 |
| ali1234 | einonm: not quite. the PK controls access to the KEK. any exe signed by a key in the KEK will run. the DB and DBX are whitelist/blacklist with exceptions/overrides and the physical user can edit them at any time. person who already has a key in KEK can edit the DB/DBX without physical presence, but if they've got a key in KEK already then they only really need this power to blacklist known bad exes that they've previously signed (ie revoke signatures) | 16:35 |
| ali1234 | einonm: or in other words, updates to the KEK must be signed by PK. updates to DB/DBX must be signed by KEK or PK, and exes must be signed by KEK or PK BUT if the user is physically present they can override all that on win8 certified x86 machines | 16:36 |
| einonm | ali1234: I read it as the custom mode disables the check of keys in the KEK - which I assume are signed by the PK | 16:36 |
| ali1234 | einonm: no, that's not right | 16:37 |
| ali1234 | custom mode doesn't do anything except let the user override everything iff they are physically present | 16:37 |
| * AlanBell likes the word iff | 16:37 | |
| ali1234 | whether secure boot is applied or not is controlled by the presence or not of a PK | 16:37 |
| ali1234 | yes it was not a typo :) | 16:38 |
| einonm | so what does custom mode entail? | 16:38 |
| ali1234 | nothing | 16:38 |
| ali1234 | it's just a menu where you can enroll your own keys | 16:38 |
| ali1234 | basically selecting the "custom mode" menu item is a way that the user proves they are physically present | 16:39 |
| ali1234 | then they can do whatever they want | 16:39 |
| einonm | That sounds suspect, as it looks like you can edit the DB and KEKs without removing the PK | 16:41 |
| ali1234 | you can if you are physically present | 16:41 |
| einonm | custom mode appears to disable the KEK hash checking using the PK, without removing the PK | 16:41 |
| ali1234 | yes | 16:42 |
| ali1234 | yes, it does | 16:42 |
| ali1234 | in fact that hash check does not exist | 16:42 |
| ali1234 | the KEK must be signed by the PK in order for it to be enrolled automatically by software updates | 16:42 |
| ali1234 | ie not physically present user | 16:42 |
| ali1234 | however, once the KEK is enrolled the hash is not checked | 16:42 |
| ali1234 | so if physical user manually enrolls their own KEK using custom mode, then can then exit custom mode and the KEK will still work | 16:43 |
| einonm | that's quite bad, and leaves the KEK DB open to abuse if so | 16:44 |
| ali1234 | but again this only applies to physically present users, who can override everything anyway, including removing or replacing the PK any time they want | 16:44 |
| ali1234 | it's open to abuse by physically present users | 16:44 |
| ali1234 | if you can call that abuse | 16:44 |
| kvarley | ali1234: I'm now booting from USB - Ubuntu 12.04 | 16:44 |
| kvarley | ali1234: No gui shown, just command prompt | 16:45 |
| kvarley | ali1234: A shell with ubuntu@ubuntu | 16:45 |
| ali1234 | kvarley: yeah sounds like it's working | 16:45 |
| kvarley | lol | 16:45 |
| ali1234 | no idea why it's dumped you at a shell | 16:45 |
| kvarley | I did live mode | 16:45 |
| kvarley | I'll try install | 16:45 |
| ali1234 | you need to check for specific instructions for UEFI installs | 16:46 |
| einonm | there is a chance that if the KEK is stored open and unhashed, it can be accessed remotely. Only a keyladde rwith root at the PK would be secure | 16:46 |
| ali1234 | like there's a special ISO for UEFI i think | 16:46 |
| ali1234 | einonm: reading from the KEK is not a problem it only contains public keys, as with the PK | 16:46 |
| ali1234 | since the KEK and the PK are stored in the same keystore, a chain of trust doesn't even help you, since if they can change the KEK they can change the PK | 16:47 |
| kvarley | ali1234: doing install instead of live got me a gui | 16:47 |
| einonm | ...but if you can put any public key, bare, in the KEK, you've won. | 16:47 |
| ali1234 | einonm: yes. that is true | 16:47 |
| einonm | the PK would be stored in on-chip storage, and never accessed directly once in | 16:48 |
| ali1234 | einonm: in order to do that you would have to break UEFI platform security | 16:48 |
| einonm | ..but it's an attack vector that you don;t need to have | 16:48 |
| ali1234 | the PK and the KEK are stored exactly the same way, and accessed at the same times (since either can be used to sign executables) | 16:48 |
| ali1234 | literally anything that applies to one applies to the other | 16:49 |
| ali1234 | also, how are you proposing to hack the keystore when the computer won't let you run any unsigned code in kernel mode? | 16:49 |
| einonm | I doubt that. There is a reason why there is only one PK, and that's because it's the root key and should only be used once. Generally, it's value is never seen outside of the chip | 16:49 |
| ali1234 | the reason there is only one PK is because you only need one PK | 16:50 |
| einonm | ?? | 16:50 |
| ali1234 | the PK is a public key | 16:51 |
| ali1234 | it's value is known everywhere | 16:51 |
| ali1234 | knowing the value gets you absolutely nothing | 16:51 |
| einonm | That's not the way MIPS or ARM chips work, AFAIK | 16:51 |
| ali1234 | MIPS and ARM chips do not use UEFI | 16:51 |
| einonm | no, but they do secure boot - and the theory is the same | 16:52 |
| ali1234 | they are not implemented the same way | 16:52 |
| ali1234 | but this is irrelevant | 16:52 |
| ali1234 | the spec makes all this very clear | 16:53 |
| ali1234 | the only things you put into the secure boot keystore are public keys and signatures | 16:53 |
| einonm | yes - with the signatures signed by the root key | 16:53 |
| ali1234 | yes, the root key which is stored in an extremely secure environment at microsoft | 16:54 |
| ali1234 | and absolutely does not go anywher near your computer | 16:54 |
| kvarley | ali1234: Ubuntu 12.04.1 installed. Landed me at a shell. | 16:54 |
| einonm | the root private key, sure. The root public key is this PK | 16:54 |
| ali1234 | yes | 16:54 |
| ali1234 | and the public key is public | 16:54 |
| ali1234 | in detail it works like this | 16:55 |
| AlanBell | "16:50 < ali1234> the reason there is only one PK is because you only need one PK" - the reason is because Microsoft only need one PK | 16:55 |
| ali1234 | that's also not true | 16:55 |
| ali1234 | microsoft only needs one KEK | 16:55 |
| ali1234 | anyway this is th way it works | 16:55 |
| ali1234 | UEFI has an API just like how the BIOS has an API | 16:56 |
| ali1234 | operating systems can access it | 16:56 |
| ali1234 | when an operating system wants to change what is in the KEK database it must use this API | 16:56 |
| ali1234 | any calls to this API must be signed by the PK private key or the UEFI will reject it | 16:56 |
| ali1234 | thus, only the holder of the PK may update the KEK remotely | 16:56 |
| ali1234 | if you want to modify the DB or DBX then your API calls can be signed by PK private key, or KEK private key | 16:57 |
| ali1234 | how ever, if the user can go into the custom menu they can do whatever they want, by design | 16:57 |
| ali1234 | none of this compromises the security of the device unless you are worried about physical theft etc | 16:58 |
| ali1234 | it's also worth noting that if the keystore is compromised this will compromise ANY system which uses code signing | 16:58 |
| ali1234 | where compromise = someone puts something in it that shouldnt be | 16:58 |
| ali1234 | reading the keystore is not a problem as it's all public keys | 16:59 |
| ali1234 | the whole thing actually works exactly the same way as SSL websites | 16:59 |
| ali1234 | your computer throws up an error if it does not recognise the certificate | 16:59 |
| ali1234 | (of the website) | 17:00 |
| ali1234 | if an attack could put the website certificate into your keystore then their attack site would not display that warning | 17:00 |
| ali1234 | but if they can do that you've already lost anyway | 17:00 |
| ali1234 | attacker can also compromise the certificate authority who holds the private key | 17:01 |
| ali1234 | so as i said, the UEFI has an API for accessing the databases, and the spec is quite clear that the DB must be stored in a secure manner. it's not just stored on the hard drive or anything like that | 17:02 |
| einonm | ali1234: there is a secret key in the chip as well, I guess that they don't need to tell you about this. That's the root key I was assuming that PK is. Makes more sense. | 17:03 |
| ali1234 | secret key in what chip? | 17:03 |
| einonm | any chip that needs to create a secure keychain. | 17:03 |
| ali1234 | not at all | 17:03 |
| ali1234 | that is absolutely not how public key cryptography works | 17:04 |
| ali1234 | there may be secret keys involved with the security of the keystore but that is not defined by the spec | 17:04 |
| AlanBell | there are crypto devices that have an on-chip key, but they are for signing things, not reading signatures | 17:05 |
| ali1234 | yes, private key smart card | 17:05 |
| ali1234 | those are the things that microsoft keeps in a locked safe in redmond | 17:05 |
| einonm | So how does the chip verify that the PK is correct? Are you assuming that in a particular place in flash mem, whatever number is there is the PK? | 17:06 |
| ali1234 | what do you mean? | 17:06 |
| ali1234 | "correct" | 17:06 |
| AlanBell | so how messed up is the world if Microsoft forget where they put the keys? | 17:06 |
| ali1234 | the hardware doesn't verify that PK is correct | 17:07 |
| ali1234 | it does not verify PK at all in fact | 17:07 |
| ali1234 | that's why the only way to change it is by a physically present user | 17:07 |
| ali1234 | it's the root of the chain of trust | 17:08 |
| ali1234 | in fact that's why you have to delete it to disable secure boot | 17:08 |
| celesteh | Hello, I've got a LaCie disk that is FAT fomratted that I know works with a mac. I'd like to use it with my ubuntu laptop (running GNOME 3), but when I plug it in, it doesn't mount and fdisk -l doesn't list it. Any ideas what I should do? | 17:08 |
| ali1234 | because it is only possible to load a PK if there is not aready a PK loaded | 17:08 |
| ali1234 | and only a physical present user can delete the PK | 17:09 |
| AlanBell | celesteh: how does it plug in? | 17:09 |
| ali1234 | and yeah it is stored in a piece of flash somewhere, but the CPU can't access it. only the UEFI bios chip can access it. the CPU must use UEFI API | 17:09 |
| celesteh | USB. I know the USB connection works, since I mounted it that way on a mac | 17:09 |
| ali1234 | and obviously that does not have "read PK" function | 17:10 |
| ali1234 | i mean "write PK" | 17:10 |
| AlanBell | celesteh: is there anything odd about LaCie disks or is it a regular USB hard drive? | 17:10 |
| AlanBell | celesteh: lsusb might show something interesting | 17:10 |
| AlanBell | celesteh: also dmesg should show it being added | 17:10 |
| celesteh | AlanBell lsusb does show it. I thought they were normal, but rugged hard drives. I have a different one and it works fine. | 17:10 |
| celesteh | AlanBell when I unplug it, it doesn't seem to get unlisted from lsusb | 17:11 |
| einonm | ali1234: Blimey. Not very secure then, is it? I assume the ARM version is different | 17:11 |
| ali1234 | einonm: it depends on your definition of "secure" | 17:12 |
| ali1234 | if your definition is "the owner of the device cannot ever modify anything in the keystore" then you need to buy windows 8 ARM to get that | 17:12 |
| SuperMatt | don't be silly | 17:13 |
| SuperMatt | Windows 8 ARM doesn't exist | 17:13 |
| SuperMatt | it lives under the less confusing name: Windows RT | 17:13 |
| AlanBell | celesteh: have a look at bug 875523 | 17:13 |
| lubotu3 | Launchpad bug 875523 in linux (Ubuntu) "LaCie usb storage doesn't mount" [Undecided,Fix released] https://launchpad.net/bugs/875523 | 17:13 |
| ali1234 | einonm: i'd be interested to hear how you think you will break UEFI secure boot on x86 without being physically present at the machine | 17:14 |
| AlanBell | how does it define physically present? | 17:15 |
| einonm | ali1234: Knowing that physical presence is all that's needed, I'd probably work on sorting that out without resorting to hacking the thing. | 17:16 |
| ali1234 | the user has to press a physical buttn on the device | 17:16 |
| celesteh | alanbell: thanks! I don't suppose there's a work around? I got this disk in order to backup my linux machine so I could go to the new LTS! | 17:16 |
| AlanBell | oh, I guess "able to type at the keyboard prior to any peripherals being turned on" | 17:16 |
| ali1234 | einonm: so in order to install some malware on user's machines, you are going to break into all the users houses and install it | 17:16 |
| AlanBell | celesteh: well apart from upgrading . . . | 17:16 |
| ali1234 | AlanBell: yes exactly | 17:16 |
| ali1234 | AlanBell: a physical sliding switch like chromebooks have is another possibility | 17:17 |
| celesteh | AlanBell: haha, I got this to enable the upgrade. lol. alas. | 17:17 |
| AlanBell | I think you will have to be brave then celesteh :) | 17:18 |
| einonm | I'm used to secure boot being a bit more...secure. On some systems, breaking into one is all you need to do. TV STB's for example - once you have the content or content encryption keys, you're free to broadcast on the internet and make lots of money. So physical access should not be a barrier to security. | 17:19 |
| celesteh | AlanBell: thanks for your help. I could not figure this out! | 17:19 |
| ali1234 | einonm: remember that UEFI spec does not specify whether physical user is allowed to override. MS win8 certification for x86 does | 17:20 |
| AlanBell | einonm: those are decryption keys, not encryption keys | 17:20 |
| ali1234 | MS win8 certification for ARM says exactly the opposite, physical user must NOT be allowed to override | 17:21 |
| einonm | AlanBell: yes, your point being...? If you have them from compromising a STB, you can broadcast them and allwo everyone to decrypt | 17:21 |
| ali1234 | and then you have your stb style locked down system | 17:21 |
| einonm | ali1234: my assumption was that x86 secure boot was as good. Obviously not. | 17:22 |
| AlanBell | so keys come in two halves, and can be used for encrypting, decrypting, signing and verifying signatures | 17:22 |
| ali1234 | you mean x86 windows 8 | 17:22 |
| AlanBell | and you need the right end of the key for the operation you are trying to perform | 17:22 |
| ali1234 | if the device isn't sold with windows 8 you can do whatever you want | 17:22 |
| ali1234 | including burning the PK in a mask ROM | 17:23 |
| einonm | AlanBell: only if it's asymmetric encryption | 17:23 |
| AlanBell | on secure boot the thing you are trying to do is verify signatures. The secret bit is in Microsoft, the public bit is everywhere and not a secret. | 17:23 |
| AlanBell | yeah, this is assuming public/private keys mostly | 17:23 |
| ali1234 | the bootloaders that run on UEFI are not even encrypted | 17:23 |
| AlanBell | so for broadcast it gets encrypted with a key and the decription key is widely distributed but is still kept secret by hardware so that other people can't decrypt stuff with it | 17:24 |
| ali1234 | the goal of secure boot is not to hide anything. it'snot to protect content with DRM | 17:24 |
| einonm | AlanBell: no sure, but an extra step that can be taken is to store a hash of your public key in the chip, and not allow boot unless presented by the right trusted PK | 17:24 |
| ali1234 | the goal is to allow the hardware to verify that the software is trustworthy | 17:24 |
| AlanBell | that would be tivoish, yes | 17:24 |
| ali1234 | einonm: you just described exactly what secure boot does | 17:25 |
| ali1234 | "hash of your public key" this makes no sense | 17:25 |
| ali1234 | but except for that, the rest is right | 17:26 |
| AlanBell | I know what you mean einonm, you are expecting the PK to be burned into the silicon | 17:27 |
| ali1234 | storing a hash of the public key doesn't add any security unless it is signed by another key | 17:27 |
| ali1234 | then that other key needs to be hashed and signed by another key | 17:27 |
| AlanBell | it just doesn't need to be burned in to perform the task of signature verification | 17:27 |
| ali1234 | and then it's just signatures all the way down | 17:27 |
| einonm | pfft..yes, anyway. Put at least the root key in the chip and everything goes from there | 17:28 |
| ali1234 | the root key is what the PK is | 17:29 |
| ali1234 | we are going in circles | 17:29 |
| einonm | that would explain the dizziness | 17:29 |
| einonm | I think the only difference to systems I've been used to is that the PK isn't in OTP flash, and can be removed. | 17:33 |
| einonm | which is then an obvious way to try and attack the system | 17:34 |
| AlanBell | http://ubingo.libertus.co.uk/cam/pad.html pumpkin \o/ | 17:35 |
| bootlkjgf | Someone's coming in the door Alan ! | 17:49 |
| AlanBell | bootlkjgf: yes, they are :) | 17:50 |
| AlanBell | there will be more turning up soon | 17:50 |
| bootlkjgf | Nice pumpkin anyway ! | 17:51 |
| ali1234 | einonm: nothing in UEFI spec says the PK cannot be in OTP | 17:52 |
| davmor2 | AlanBell: does the light stay light or only when the camera is being viewed? | 17:52 |
| * AlanBell files Bug #1074440 | 17:52 | |
| lubotu3 | Launchpad bug 1074440 in quickly-lens-templates (Ubuntu) "does not support the privacy preference for no online results " [Undecided,New] https://launchpad.net/bugs/1074440 | 17:52 |
| AlanBell | davmor2: what light? | 17:52 |
| davmor2 | AlanBell: did the camera not have a light on it? | 17:53 |
| AlanBell | it is infra red, and yes, they are on all the time in the dark | 17:53 |
| AlanBell | and they draw about 1w | 17:53 |
| AlanBell | so it is 3w during the day and 4w at night (measured at the plug) | 17:53 |
| davmor2 | AlanBell: nice | 17:53 |
| bootlkjgf | There's no way that car going past was doing 30 m.p.h. ! | 17:54 |
| einonm | ali1234: ok...but if it were, and you can't change the PK, would you be able to add any new exe signatures without the PK private key? | 17:54 |
| * bootlkjgf wonders why there is no 'donate' button on the webcam page ? | 17:55 | |
| AlanBell | einonm: http://mjg59.dreamwidth.org/ lots of info about secure boot | 17:55 |
| AlanBell | bootlkjgf: well because it is just my page for looking at my front door, nothing of interest there really | 17:56 |
| AlanBell | bootlkjgf: http://ubingo.libertus.co.uk/cam/ you can get your own camera using that amazon affiliate code if you want | 17:57 |
| bootlkjgf | 'my page' ... I've just bookmarked it, sorry. | 17:57 |
| bootlkjgf | will do | 17:57 |
| AlanBell | oh, look more people loitering | 17:57 |
| einonm | AlanBell: Thanks...I have scanned through that before. I think that talks about the bit of code that's booted once the sigs have all checkout out OK | 17:57 |
| AlanBell | knock knock | 17:58 |
| bootlkjgf | oh dear, looks like a sony phone (dunno) // definately not andriod afaik | 17:59 |
| AlanBell | zachary left the gate open | 17:59 |
| bootlkjgf | Must get *bill* to shut it for you ;) | 18:00 |
| bootlkjgf | That tree looks like the gnewsense tree .. you must put it on your google plus image page ! | 18:02 |
| davmor2 | AlanBell: You mean you haven't fitted the retractable arm to it yet | 18:02 |
| ali1234 | einonm: that is also not defined in the spec. on a windows 8 ARM certified machine the answer is no. | 18:04 |
| bootlkjgf | AlanBell, That dustybin looks full near the gate .. Do you get billed by the weight where you live, then ? | 18:04 |
| AlanBell | no, we have a regular bin, a full size one for recylable stuff and a small green bin for food waste | 18:05 |
| bootlkjgf | oh ok | 18:05 |
| AlanBell | and yeah, it is a pretty cool tree, it is a japanese maple with red leaves | 18:06 |
| AlanBell | so, given that I have this camera, which can pan/tilt and take videos and snapshots, what interesting things should I do with it? | 18:07 |
| bootlkjgf | v. cool BTW I tried to save an image of it on chrome ... and it wants to save in a .cgi file .. can i use ?program to view it ? | 18:08 |
| einonm | ali1234: So if PK is used to add new KEK keys only, and this mechanism can only be disabled by removing PK, we can't add any new KEK keys? Or does setting custom mode also crap over those checks? | 18:09 |
| ali1234 | einonm: you;ve missed the point. the custom menu is not required to be present | 18:09 |
| AlanBell | http://ubingo.libertus.co.uk:9090/snapshot.cgi is a single image (it is a jpeg) | 18:10 |
| bootlkjgf | interesting things to-do list ... No. 1 Where are the penguins ? Tell a story about their adventures . | 18:10 |
| AlanBell | the the video stream is mjpeg | 18:10 |
| ali1234 | the reason there have the database with different types of keys is for software like "ubuntu installer" | 18:10 |
| ali1234 | the idea is if the machine is in setup mode then the ubuntu installer enrolls the PK and the KEK (possibly locking the machine to only run ubuntu forever more, but that's implementation specific) | 18:11 |
| bootlkjgf | AlanBell, Can you do the same one of the tree in the day time and email me ? | 18:11 |
| ali1234 | the ubuntu installer being a normal piece of software like it is currently | 18:11 |
| ali1234 | it accesses UEFI through a hardware API | 18:11 |
| bootlkjgf | E: 3rdwiki@gmail.com | 18:11 |
| ali1234 | like ACPI, or BIOS etc | 18:11 |
| ali1234 | or UPNP or any of those | 18:11 |
| AlanBell | bootlkjgf: sure :) | 18:11 |
| ali1234 | the key checks apply when software is manipulating the key database | 18:12 |
| ali1234 | the custom menu trumps everything because it runs at a lower level | 18:12 |
| ali1234 | but nothing says that custom menu even has to exist | 18:12 |
| einonm | ali1234: Ok, but there is a signed hash of the installer/shim/exe that's signed using a key in the KEK? | 18:12 |
| ali1234 | if it does not exist and there is no way to delete the PK, then your machine is locked down in the way you're used to | 18:12 |
| ali1234 | einonm: yes and that signed hash is appended to the exe | 18:13 |
| ali1234 | it's signed using the private half of the KEK (which user does not have) and then verified using the public half (which is stored in the UEFI keystore on user's machine) | 18:13 |
| ali1234 | the signature, if not appended to the exe, can also be stored in the DB | 18:14 |
| ali1234 | the signature can also be put into the DBX to ban that exe from running even though it's signed | 18:14 |
| ali1234 | all this can be done from the operating system, provided all the API requests are signed with the PK or the KEK private half, ass appropriate | 18:14 |
| ali1234 | again, the custom menu ovverrides everything | 18:15 |
| AlanBell | so Microsoft has a remote kill switch for ubuntu (if you dual boot) | 18:15 |
| ali1234 | yeah pretty much | 18:15 |
| ali1234 | they have a remote killswitch for everythnig | 18:15 |
| AlanBell | lovely | 18:15 |
| einonm | ali1234: so if the PK is in OTP, and you don't have the private part of the PK, you can't add any KEK and therefore add any valid sigs in the DB...so no booting your exe's | 18:15 |
| ali1234 | einonm: as long as the UEFI menu system does not have that "custom" menu, which all windows 8 x86 machines are required to have in some form | 18:16 |
| ali1234 | but then, windows 8 x86 machines aren't allowd to have PK in OTP either | 18:16 |
| ali1234 | but the point is this is defined by microsoft, not UEFI spec | 18:16 |
| ali1234 | and even the way it's set up for x86 still prvides useful security if you self sign everything | 18:17 |
| einonm | ali1234: ok. But I'm confused now. I'm sure you said there's nothing in the spec about OTP PK's | 18:17 |
| ali1234 | einonm: there isn't | 18:17 |
| ali1234 | there's the UEFI spec, and there's the microsoft windows 8 certification program for x86 laptops. these are two entirely different documents | 18:17 |
| einonm | ali1234: contradicts "ali1234: but then, windows 8 x86 machines aren't allowd to have PK in OTP either"? | 18:17 |
| bootlkjgf | AlanBell, Oh Wait .. I've got it ::: Where are the Wombles ???????? | 18:18 |
| bootlkjgf | ;) | 18:18 |
| ali1234 | in order to achieve windows 8 logo certification, a x86 laptop must: 1. follow all of the UEFI spec. 2. allow the PK to be cleared by a physically present user | 18:18 |
| einonm | ah, right. | 18:19 |
| ali1234 | and a bunch of other conditions | 18:19 |
| ali1234 | for windows 8 ARM hardware it is exactly the opposite | 18:19 |
| ali1234 | it must 1. follow UEFI spec, 2. NOT allow user to clear the PK | 18:19 |
| einonm | that would do it. How to make a machine completely useless. | 18:20 |
| AlanBell | yeah, the ARM windows machines come pre-bricked | 18:20 |
| ali1234 | the point is UEFI isn't particularly bad | 18:21 |
| einonm | And you got to pay for the privilege :) | 18:21 |
| ali1234 | it's all about the implementation | 18:21 |
| ali1234 | the multi-signature issues are a bit bad but that could be fixed and can definitely be worked around in way that satisfy everyone | 18:22 |
| ali1234 | in particular the claim that everyne needs the MS key is not true on compliant x86 hardware | 18:23 |
| ali1234 | it's possible to self sign everything | 18:24 |
| ali1234 | it's a lot of work but if you need that kind of security it's not going to be a big problem for you | 18:24 |
| AlanBell | ali1234: would that mean you can't use graphics cards that are signed or something? | 18:24 |
| einonm | No, the only problem seem to be with those who want to run another OS on it. | 18:25 |
| ali1234 | no, that's precisely not the problem | 18:25 |
| ali1234 | some claim that you need the other OS signed by microsoft, or turn off security all together. neither is true | 18:25 |
| ali1234 | the third option of self signing everything with your own PK pair is entirely possible, but a lot of work | 18:25 |
| ali1234 | you have to self sign not just the OS software but also your video card bios etc (what AlanBell was talking about) but even these things are possible using the DB | 18:26 |
| einonm | I disagree. It is a problem if you don't understand computers, and just want to run another OS - having taken that particular decision. | 18:27 |
| ali1234 | you don't need this level of security unless you are the IT architect for a large banking institution or something | 18:27 |
| ali1234 | if you are that, and you "don't understand computers" then you have bigger problems | 18:28 |
| ali1234 | if you just want to run another OS you can run ubuntu signed by microsoft or turn off UEFI entirely | 18:28 |
| ali1234 | the point is that some people claimed these things would be impossible. but they are not. they are just hard. like all security. it is a tradeoff between security and convenience | 18:29 |
| dubac0 | i have a dicital recorderthat records sound in wma how to convert or transcode to one of the following formats .mp3, .aiff, .wav, .flac, .aac, or .ogg files? | 18:29 |
| ali1234 | dubac0: first step is to PLAY it on ubuntu. i suggest mplayer for that | 18:29 |
| dubac0 | i can play it | 18:29 |
| ali1234 | in what software? | 18:29 |
| AlanBell | dubac0: I would import it to audacity, chop it to length and export it from there | 18:30 |
| dubac0 | vlc | 18:30 |
| ali1234 | do you need a batch solution for mutiple files or a simple GUI for just a couple of files? | 18:30 |
| einonm | The scenario I'm talking about is the one where I give a Linux USB stick and tell someone to just try it. That's not possible anymore. People with 'problems' should be able to use Linux too | 18:30 |
| ali1234 | einonm: it's fine if you give them a ubuntu 12.10 stick it will work. or fedora. or opensuse | 18:31 |
| dubac0 | just one | 18:31 |
| dubac0 | AlanBell, tack | 18:31 |
| dubac0 | im doing a language course and so this is important (need feed back on my alfabet | 18:32 |
| ali1234 | yeah try audacity i guess | 18:33 |
| ali1234 | according to forums VLC has a menu option to "convert/save as" | 18:34 |
| dubac0 | AlanBell, http://soundcloud.com/sara-griffin-1/alphabetet-20121102 this can be seen by you? | 18:36 |
| AlanBell | yup | 18:37 |
| davmor2 | dubac0: you can use dir2ogg if you want ogg vorbis file which in turn uses vlc backend | 18:38 |
| Laney | why hello st pancras | 18:38 |
| dubac0 | AlanBell, thanks | 18:39 |
| einonm | it's Bond time! | 18:41 |
| ali1234 | interesting. so the indicator-datetime only shows in unity by design, and the limitation is set in the .desktop. and all those people who swore it worked for them earlier today were just confused. | 19:35 |
| AlanBell | http://people.ubuntu.com/~alanbell/screenshots/indicatorclassic.png | 19:40 |
| ali1234 | what does that prove? | 19:41 |
| ali1234 | click on time & date settings, notice that it doesn't work the way it does in unity... | 19:41 |
| AlanBell | takes you to the overall settings page, and if you go to time and date you don't get the controls for the indicator | 19:42 |
| ali1234 | exactly | 19:42 |
| AlanBell | but if you turn on the calendar when in a unity session it shows up in a classic session | 19:43 |
| AlanBell | in the indicator itself | 19:43 |
| ali1234 | yes, if you load up unity, run the settings panel, log out, log in to classic, the settings are preserved | 19:43 |
| ali1234 | you can also force the right settings panel by doing XDG_CURRENT_DESKTOP=Unity gnome-control-center | 19:44 |
| ali1234 | then you get Time & Date instead of Date and Time | 19:44 |
| AlanBell | so you do | 19:45 |
| AlanBell | so is this a gnome problem? | 19:45 |
| ali1234 | no | 19:45 |
| ali1234 | well, yes | 19:45 |
| AlanBell | as in a gnome saying "no we won't accept your code" | 19:46 |
| ali1234 | no | 19:46 |
| ali1234 | in as much as it's a problem of canonical doing exactly the same thing | 19:46 |
| AlanBell | it looks likely to be a political problem than a technical one | 19:46 |
| ali1234 | the problem is that nobody wants to see two time and date icons in the control panel | 19:46 |
| AlanBell | indeed, or two online account settings things | 19:47 |
| ali1234 | gnome shell uses Date and Time, Unity uses Time & Date, so they just hide the other one respectively | 19:47 |
| ali1234 | gnome panel, being the best desktop evar, lets you choose | 19:47 |
| AlanBell | or two desktop shells | 19:47 |
| ali1234 | but the .desktop way of hiding one or the other fails here | 19:47 |
| ali1234 | since it doesn't know which one yu've put on your panel (indeed you could have both) | 19:47 |
| AlanBell | gah | 19:47 |
| ali1234 | and they don't match in functionality | 19:48 |
| AlanBell | indeed | 19:48 |
| ali1234 | or store the settings in the same place | 19:48 |
| ali1234 | so basically i blame gnome shell and unity | 19:48 |
| AlanBell | yup, me too | 19:48 |
| ali1234 | then copy the .desktops into ~/.local/ and remove the stupid hacks, and have two icons | 19:48 |
| AlanBell | canonical announce they are doing something, gnome go off and develop the same thing but different and broken in different ways and we end up with two nearly OK results | 19:49 |
| ali1234 | the indicators are clearly better than the applets | 19:49 |
| ali1234 | of that there is no question | 19:49 |
| ali1234 | having two applets isn't the problem though | 19:52 |
| ali1234 | the problem is the way they are hidden | 19:52 |
| ali1234 | and that gnome shell and gnome classic both have the same name | 19:52 |
| AlanBell | yeah, so that should turn up in unity and gnome classic with indicators | 19:53 |
| AlanBell | but not gnome-shell because of NIH | 19:53 |
| ali1234 | "gnome classic with indicators" isn't a thing though | 19:53 |
| ali1234 | by default it has indicators but you can put the old applet back too | 19:53 |
| AlanBell | yup | 19:54 |
| ali1234 | turns out gnome-control-center doesn't respect overridden .desktop in .local so i have to edit the one in /usr | 20:04 |
| ali1234 | i'd just like to mention at this point that this is why people switch to entirely different distro rather than just install a different desktop from the repositories | 20:06 |
| ali1234 | this is a classic example where fixing a bug in one desktop will break something in another one | 20:07 |
| ali1234 | obviously on ubuntu unity is going to win that fight | 20:07 |
| ali1234 | so if i want to use the other desktop it's never going to work right for me unless i go to another distro | 20:08 |
| === nothingspecial is now known as angela-android | ||
| === angela-android is now known as nothingspecial | ||
| diplo | evening all | 20:45 |
| WillemTheMarxist | diplo: where's docus? | 21:40 |
| diplo | :) | 21:40 |
| MartijnVdS | woo, chromebook is here! :) | 22:05 |
| brobostigon | myself, i am somewhat sceptical, about a system, like chromiumos, which will basically only run cloud apps inside chrome, and basically, no real true client side apps. however the chromebook and chromiumos is not designed for that normal market, which doesnt require what i just described. so it would be somewhat pointless. | 22:10 |
| ali1234 | don't say cloud apps | 22:10 |
| ali1234 | say websites | 22:10 |
| ali1234 | that's what they are | 22:10 |
| ali1234 | don't play their game | 22:10 |
| brobostigon | ali1234: fair point. yes. | 22:10 |
| ali1234 | the chromebook is a nice hardware though | 22:11 |
| ali1234 | just put ubuntu on it | 22:11 |
| brobostigon | quite, yes. | 22:11 |
| ali1234 | there is a large market for a laptop that just does email websites chat and so on | 22:12 |
| AlanBell | yo dawg, I heard you liked writing cloud code so we put a code editor in the cloud so you can code while you cloud http://www.eclipse.org/orion/ | 22:13 |
| ali1234 | it won;t cut into windows market share but it will apple | 22:13 |
| brobostigon | ali1234: it always reminds me, after i first tried an ipad , many years ago, and thought, hmm, this would be so much better, with a more capable OS. | 22:13 |
| ali1234 | well yeah | 22:13 |
| ali1234 | AlanBell: it's not even the first one. github has a cloud IDE | 22:14 |
| ali1234 | and it's probably better than anything made by eclipse foundation | 22:14 |
| AlanBell | ali1234: true enough | 22:14 |
| ali1234 | https://c9.io/ | 22:14 |
| AlanBell | but this one can run locally and point at various back ends | 22:14 |
| ali1234 | well so can one that uses git | 22:14 |
| ali1234 | you can also edit your code in any other IDE you like | 22:15 |
| ali1234 | IDEs suck anyway | 22:16 |
| AlanBell | yeah, I never really got into eclipse, I use text editors | 22:16 |
| AlanBell | I do like geany, but I use it as a decent text editor rather than the full IDE stuff | 22:17 |
| brobostigon | although,i would be happier if android did c++, insted of java. java makes little sense to me, whereas c++, makes perfect sense. | 22:17 |
| brobostigon | geany is good, yes. | 22:17 |
| ali1234 | android NDK? | 22:17 |
| ali1234 | c++ makes more sense than java? | 22:18 |
| brobostigon | ali1234: to me, yes. | 22:18 |
| ali1234 | which part? | 22:19 |
| ali1234 | seriously. | 22:19 |
| ali1234 | i guess the build system is nicer for C++ | 22:19 |
| ali1234 | you can continue to use makefiles | 22:19 |
| brobostigon | ali1234: i read java, and feel clueless, it seems illogical. whereas c++ seems logical and makes more logical sense. | 22:19 |
| ali1234 | they read almost exactly the same | 22:20 |
| AlanBell | there are languages with semicolons at the end of the line and languages without. | 22:20 |
| ali1234 | true | 22:20 |
| brobostigon | ali1234: well, they dont to me. in all reason. | 22:20 |
| AlanBell | other than that, they are all much of a muchness | 22:20 |
| jacobw | i thought c++ was in now | 22:20 |
| jacobw | perhaps i missed a memo :( | 22:20 |
| AlanBell | oh except pointer arithmetic. That should die in a fire. | 22:21 |
| ali1234 | all the semicolon languages descend from BCPL | 22:21 |
| AlanBell | jacobw: the cool kids are using vala | 22:21 |
| jacobw | cool, they reinvented objective c 10 years too late :p | 22:21 |
| jacobw | python ftw | 22:21 |
| ali1234 | or not since BCPL doesn't have semicolons | 22:22 |
| ali1234 | so i guess C started that one | 22:22 |
| brobostigon | ohwell, my perception is inaccurate then. | 22:22 |
| ali1234 | maybe you are confusing C++ with C | 22:23 |
| ali1234 | maybe people do | 22:23 |
| brobostigon | ali1234: i have used both, yes, | 22:23 |
| ali1234 | a lot of people write basically C with classes | 22:23 |
| ali1234 | because it's a lesser evil | 22:23 |
| ali1234 | real C++ is much harder to read than real java | 22:23 |
| ali1234 | (a lot of of people write C with classes in java too) | 22:23 |
| brobostigon | ali1234: my first, was with c, doing basic electrical controls. when i went to college, | 22:24 |
| brobostigon | ali1234: it was maybe, the arduino's combination of both, which has confused my mind abit. | 22:25 |
| brobostigon | or blurred it. | 22:25 |
| ali1234 | arduino C++ is just... wrong | 22:26 |
| ali1234 | it's not C++ at all. it's not even C with classes | 22:26 |
| ali1234 | C++ standard lib would melt an AVR | 22:27 |
| ali1234 | did you look at the due stuff? | 22:27 |
| ali1234 | is it any different at all? | 22:27 |
| brobostigon | i havent looked at that yet, | 22:28 |
| brobostigon | thats arm, insted of avr. | 22:28 |
| ali1234 | doesn't matter if you're going to use C or higher level languages | 22:29 |
| brobostigon | agreed. | 22:29 |
| ali1234 | i like the simplicity of the AVR | 22:29 |
| brobostigon | i never looked at it that closely. | 22:29 |
| ali1234 | it's possibly to understand how every part of it works at the logic level | 22:30 |
| ali1234 | everything is documented | 22:30 |
| brobostigon | :) | 22:30 |
| brobostigon | good design there, yes. | 22:30 |
| ali1234 | you could take the docs and build a functionally equivalent design. in fact it has been done. | 22:30 |
| brobostigon | many times, yes. | 22:31 |
| ali1234 | it's a good platform for learning assembly language too, because the instruction set is so simple | 22:31 |
| brobostigon | i havent touched assembly, since college. 12 years. | 22:32 |
| mh0 | I completley forgot this channel even existed :P | 22:53 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!
