[04:19] Maaz, what is the best shutdown command for Lubuntu? [04:19] Private_User: Erk, dunno [04:19] Maaz, :( [04:19] Private_User: Excuse me? [04:19] lol [04:20] Maaz, coffee [04:20] Private_User: coffee is liquid code [04:20] lol [04:23] I guess everybody is still asleep? [04:24] Wondering if anybody else has been experiencing an issue with in my case lubuntu not shutting down? [04:24] When I try to shutdown it reboots the machine [04:25] even tried the terminal [04:25] using sudo shutdown -P and -H [04:25] using sudo shutdown -P now and -H [04:57] ok cool no worries when you guys get a chance let me know how I can resolve this will ask again later when others have logged on [04:58] cheers for now [05:17] morning geek types , lurkers included [05:28] o/ morning oom Kilos :) [05:29] hello Xethron, Private_User, maaz [05:29] yo [05:29] Maaz: coffee please [05:29] nuvolari: There isn't a pot on [05:29] Maaz: coffee on [05:29] * Maaz starts grinding coffee [05:29] Maaz: coffee please [05:29] nuvolari: Now now, we don't want anyone getting caffeine overdoses [05:29] you don't know me [05:29] morning nuvolari and Kilos [05:30] lo nuvolari [05:30] hi Private_User [05:30] Maaz, coffee please [05:30] Kilos: Yessir [05:31] nuvolari, just ask for large or larger [05:32] yo Kilos, what was that command you told me to shut down ubuntu from terminal again? Sorry I forgot where I wrote it down or if I even wrote it down [05:32] sudo shutdown -h now [05:33] I have been having issues with shutting down cause when I try to shutdown it reboots the machine [05:33] yep try that [05:33] sudo reboot to reboot [05:33] Coffee's ready for nuvolari and Kilos! [05:33] oh my [05:33] wait [05:33] there was another thing that sorted that [05:34] sudo aptitude reinstall upstart [05:34] Maaz, gracias amigo [05:34] ¡de nada compadre [05:34] I even tried this solution http://netgator.blogspot.com/2012/07/ubuntu-lubuntu-1204-shutdown-doesnt.html [05:34] ok let me try the above quickly, thanks Kilos [05:35] yw [05:36] does Maaz make milo or hot chocolate as well? [05:36] :D [05:36] lol no just coffee [05:36] and half tea [05:36] Maaz, tea please [05:36] As soon as the kettle boils Kilos I will pour boiling water into your cup if you have the tea bag in already [05:38] :( Kilos, it did not resolve the issue still rebooting [05:39] i have that quiet splash removed evrything between the " " [05:39] and one more thing , lemme find it [05:42] you kinow to be honest most people would be frustrated having issues, for me I am actually a little glad cause each time I google I learn something new I can do with Ubuntu [05:42] :) [05:43] yeah but i had to ask here because i hate google [05:43] lol [05:43] everyone says google is your friend, but not mine [05:43] sec while i look for that boot splash thingie [05:43] why not? so which search engine do you use? [05:43] ok cool thanks [05:44] google but i hate getting 500 pages to search through [05:46] well in my case and many others I know Google is what makes them an "expert" at their job LOL [05:46] sudo nano /etc/default/grub [05:46] remove the "quiet splash" [05:46] sudo update-grub2 [05:46] i have an extra bit somewhere [05:47] you delete quiet splash there but leave the "" [05:48] what about acpi=force? [05:49] http://askubuntu.com/questions/129738/can-i-disable-the-ubuntu-splashscreen [05:49] i have it saved somewhere but forgot where [05:50] do you know how to use nano? [05:50] i think that sudo update-grub2 should be sudo update-grub [05:50] hi bd [05:50] ai! [05:51] bduk1, [05:56] whew where did i hide it?sigh [05:57] im sure there was something to uncomment as well [05:57] Private_User, can you use nano? [05:57] oops now it seems worse, not the screen goes off but the machine is still running [05:57] *now [05:58] now try sudo shutdown -h now [05:58] ok that was just for -H [05:58] small h [05:58] -P now reboots again [05:59] ah ok sorry let me try that [05:59] you reinstalled upstart? [05:59] ok stil the same it reboots [05:59] i see one place they say nvidia drivers are interfering [06:00] yep when you mentioned it earlier [06:00] do you have nvidia installed? [06:00] let me check [06:01] is it a lappy or desktop? [06:02] yep nvidia-common is ticked under Synaptic Package Manager [06:02] desktop [06:03] do you need nvidia? [06:03] try sudo aptitude install nvidia-current [06:04] and see if it sees errors anywhere [06:04] but I think that solved my screen resolution [06:04] I now have 1024x768 [06:04] ya it does [06:04] did not have that option before [06:04] mine is even bigger [06:04] dunno how to find it [06:05] oh in settings you can choose it where it shows 1024x768 [06:05] Morning everyone [06:07] yo bduk1 mazal siek al weer? [06:08] Nee net bietjie besig op ons ander site. Sal seker nou nou terug wees [06:08] a [06:20] Private_User, when did this start happening? [06:20] yesterday [06:21] after an upgrade? [06:21] man I hate these CRT monitors, thats what I am using for the desktop. you have to adjust the display manually on the actually screen [06:22] well I think it was after an update but I cannot remember doing an update the day before yesterday [06:22] I performed one on Sunday [06:22] and monday it shutdown fine [06:22] even Tuesday [06:22] eish [06:22] so I cannot be 100% sure what may have changed [06:23] i wish the clever peeps would jump in here [06:23] lol, thought you were one of them [06:23] nope im a noob because i forget what they teach me [06:24] hi ThatGraemeGuy [06:24] im supposed to be the greater bot here [06:24] lol [06:24] morning :) [06:25] lol [06:25] Private_User, whats happening? [06:26] still the same Shudown option just reboots the machine [06:26] oh and do you have a nvidia graphics card in there [06:27] type in the dash additional [06:27] maybe specific drivers will help [06:28] some guys can find errors if you run tail /var/lod/syslog but i dont understand it [06:29] ai! [06:29] tail /var/log/syslog [06:34] Private_User, how did you start the upgrade? [06:34] I went to system tools update manager [06:34] then clicked check [06:34] then Install updates [06:35] try running sudo apt-get update [06:35] then [06:35] sudo aptitude upgrade [06:35] aptitude should tell you if something is not lekker [06:36] ok its running lets see what happens [06:37] i had this prob when 12.04 just came out but who knows how i cured it [06:37] ok cool it completed does not seem like any errors are there [06:37] it says 0 needed to be upgraded or installed [06:37] and what does additional in dash show you? [06:38] this is very upsetting, 12.04 is supposed to just work [06:39] huh? [06:39] you know dash that top icon [06:39] type in additional [06:39] it should show additional drivers available [06:40] like an auto lookup whats needed in the pc [06:42] how do I run that? [06:43] do you know the dash [06:43] that top button on the launcher on the left [06:45] ok dude please remeber if you a noobie I am what ever is below a noobie LOL [06:45] I think you have lost me now [06:45] lol [06:45] you on unity hey? [06:46] with the lancher panel on the left [06:46] launcher [06:46] the very top button/icon thingie is called the dash [06:48] I am using Lubuntu? [06:50] oh my goodness [06:50] i forgot sorry [06:51] lemme see what google says [06:53] try sudo poweroff [06:54] ThatGraemeGuy, will tail /var/log/syslog show why pc reboots instead of shutting down [06:55] nope poweroff does the same reboots [06:57] ok lets look here [06:57] Preferences > Additional Drivers. [06:57] you have preferences hey? [07:05] I am there now [07:05] hang on its still busy searching [07:05] cool [07:05] i go let sheep out quick [07:06] ok it states No proprietary drivers are in use on this system [07:08] and no options of whats needed? [07:09] grrr [07:09] nope its blank [07:09] oh you using onboard graphics? [07:09] no graphics card in there? [07:09] hmm... [07:10] nope no graphics card [07:10] ok then we gotta find where that error is coming from [07:11] inetpro, help man [07:12] oh Private_User i found the boot splash stuff [07:12] great [07:12] on other pc [07:12] sigh [07:13] sudo nano /etc/default/grub [07:13] delete quiet splash in [07:13] GRUB_CMDLINE_LINUX_DEFAULT="quiet splash" [07:13] then uncomment [07:13] GRUB_TERMINAL=console [07:14] uncomment means delete the # [07:14] and do sudo update-grub [07:21] :( still no cigar [07:21] wb ThatGraemeGuy peer got you [07:21] rebooting again [07:21] ok lets go ask lubuntu Private_User [07:21] type in here /j #lubuntu [07:25] now we wait [07:25] you know Kilos I did ask them earlier but I think there was nobody around then a guy did try but he left asking another to assist but not sure what happen to him [07:25] lots of other channels take ages to help [07:26] this is the friendliest most helpful channel on irc [07:27] lol , I guess we will have to wait I will continue to google and I now understand what you were complaining about cause many of them are repeat solution from different sites and none of them working for me [07:27] you can join my channel too Private_User then we wont fill pages here [07:27] ##kilos [07:28] morning superfly [07:29] morning Kilos [07:58] good mornings [07:58] Private_User: what did you break? [07:58] hi inetpro lubuntu 12.04 dont shutdown keeps rebooting [07:59] tried lotsa stuffs [07:59] is it not a hardware problem? [07:59] sudo shutdown -h now reboots as well [07:59] we asking you man [07:59] if we knew we wouldnt ask [08:00] lol inetpro, yeah Kilos and I have been trying many options to try and resolve [08:00] we carrying on on my channel to save you scroll backs [08:00] doesn't sound like a software problem to me [08:01] so anything you install or re-install won't help [08:01] nope [08:01] but obviously you need to verify what I say [08:01] boot from life CD [08:02] ok [08:02] or usb [08:03] * Kilos looks on to see the master at work [08:03] uh [08:03] booted from USB [08:04] and what happens when you shutdown now? [08:04] probably still going to just reboot [08:05] ok let me check though I needed to do something else so I was still on the menu LOL another ID-10-T issue [08:05] LOL [08:05] ok waiting for it to boot from USB [08:08] you think its hardware inetpro ? [08:08] sjoe [08:08] Kilos: yep [08:09] but it worked till yesterday [08:10] the shutdown command is very simple, not much that can go wrong with that [08:10] ah i see the reasoning [08:10] yep inetpro does the same [08:11] and it's most likely exactly the same shutdown code/executable for every linux system out there [08:11] you see [08:11] but why would it suddenly stop working when it worked previously [08:11] * Kilos krap kop [08:11] hi SmilyBorg wb [08:11] Hey there [08:12] try this, as much as it sounds weird... disconnect your screen as it shuts down [08:12] ok let me try [08:13] do you have any other special peripherals connected to the PC? [08:14] SmilyBorg: hello and wb [08:15] Thanks guys. Been a bit bored and lonely so figured IRC would be a good place to hang out while I have time on my hands [08:16] nope that did not work inetpro [08:16] sorry to hear about the job issue SmilyBorg [08:16] Private_User: hmm... [08:16] yeah, being retrenched sucks [08:17] ok that just reminded me I plugged in a apple iPod to recharge on that machine could that have changed any settings? [08:17] but that has been unplugged [08:17] oh well, I have a 3rd round interview at a place on Friday. hopefully that will be fruitfull [08:17] Private_User: I doubt it's any settings [08:18] ok [08:18] but if it is settings then it would be in the BIOS [08:18] because it did work previously [08:18] ok let me have a look at the BIOS settings [08:19] good luck SmilyBorg [08:19] hmm.. power and battery out for 10 mins inetpro ? [08:21] thanks Kilos [08:21] any bios can be corrupt if there was win on there before [08:22] SmilyBorg: with Kilos in here you'll never be lonely :-) [08:22] cheeky [08:24] :-) [08:24] SmilyBorg: more serious, I hope you find something soon... just keep trying [08:26] ok reset BIOS to default settings no difference [08:26] Private_User: what happens when you press the power button for a few seconds, does it shutdown? [08:26] yep it does [08:26] thanks inetpro. I'm keeping a look out but not much happening in Durban. gonna have to start applying for things in JHbn and CPT, though I'm not particularly keen to move [08:28] SmilyBorg, you should maybe try some freelancing while you wait that could help, also PNET, CareerJunction, Jobmail, etc you can upload you CV there and apply online and I recently found that LinkedIn helps as well you just need to update you profile [08:28] Private_User, what bios you got? [08:28] award hopefully [08:29] Kilos, that is correct [08:29] Sup SmilyBorg! [08:30] Private_User: Yeah, gonna look at the freelancing. already had a few hits off of PNET [08:30] Hey Vince-0 [08:30] Kilos: I don't think it's the bios, must be hardware [08:30] Coffee tonight? There's something going on at the Factory [08:30] whew [08:30] SmilyBorg: maybe you have ideas for SmilyBorg [08:30] oops for Private_User [08:30] lol [08:31] Vince-0: maybe for a short while. Need to help Andrea pack for a trip to JHB [08:31] what I don't understand is, it was working then yesterday I noticed it was not and I cannot be 100% sure of what changed [08:31] inetpro: maybe, what's wrong? [08:32] Private_User: tell SmilyBorg [08:32] * inetpro has some work to be done [08:32] when ever I try to shut down in Lubuntu it reboots the machine [08:32] SmilyBorg, I'm checkin the event now. May be a yawn [08:32] tried both on the terminal and using the GUI [08:33] Private_User: so the system reboots rather than turning off? [08:34] SmilyBorg, btw LinkedIn, this one friend of mine got an offer for a job in Australia that is how I know it works as well and my friend did not even apply they recruited [08:34] SmilyBorg, that is correct [08:34] Private_User: interesting, I've update my details there so will see what happens. [08:35] Private_User: that is an odd one. never come across that happening before [08:36] brb [08:45] yeah, is there any log file where I can check what may have changed on the system including any hardware changes? [08:45] Private_User: could even be dust, I suggest opening the inside and re-seating components [08:45] SmilyBorg, http://www.pechakucha.org/cities/durban [08:45] inetpro, interesting I think I will try that as well [08:45] and blow the dust out if you can [08:45] garage airline [08:45] SmilyBorg: another thing I have learnt cause I was there where you are is that it can sometimes take up to 6 months before you can find something another option is to just hand you CV over to recruitment agencies [08:45] sometimes more [08:45] ok let me try cleaning the inside of the machine [08:45] Private_User, remove the battery as well [08:47] jeeps this connection drops [08:50] ohi deegee__ long time no see with this nick [08:57] wb drussell [08:59] hooray!!! [08:59] success [08:59] rofl fixed? [08:59] \what a business [08:59] removing the CMOS battery and re-inserting resolved the issue [08:59] :D [09:00] Maaz, inetpro ++ [09:00] who woulda thought it was hardware but the pro [09:00] nee man Kilos, dit was jy wat dit genoem het [09:00] nee man [09:01] i havent had to battery out for a long time [09:01] ek meen die battery storie [09:01] but I also did remove some of the dust or what ever I could remove [09:01] :) [09:01] Private_User: well done! [09:01] that was just an addon to your cleaning and reseating advice [09:02] yep shutdown now works perfectly via terminal and GUI options [09:02] Private_User, best way is with airline at garages with an old valve in the end of the wheel pumping pipe [09:02] yeah the net split is over... alo uncle Kilos and all :) [09:02] thanks inetpro and Kilos for all the help much appreciated [09:03] thats why we are here Private_User [09:03] Private_User: you're welcome [09:03] sorry it took so long [09:03] and as i said the most helpful irc channel [09:03] we a good team here [09:03] now I wondering what in the BIOS changed and how? (*scratches head*) [09:04] i used to have it often with old pc [09:04] many battery outs [09:04] what mobo is it? [09:05] hi psyatw [09:05] gigabyte has lekker bios upgrade from xp [09:05] hi Kilos [09:06] at least it wasnt ubuntu hey Private_User [09:06] makes me happy [09:06] yep same here [09:07] back [09:08] I looked into the setting of the BIOS again I cannot see anything very different and I even changed some setting back to what I saw it was before and it still shuts down [09:08] so it could just be another setting that I cannot see [09:09] ya somehow at times bios gets a bit corrupt and only battery out helps. the default settings keeps the bug there [09:09] you got dual core cpu? [09:10] then you can enable the threading thing for more speed [09:10] not sure hey [09:10] hmm... [09:10] ok hang i got commands somewhere to check [09:11] thanks [09:14] cat /proc/cpuinfo [09:14] thanks [09:15] yw [09:15] To count processor (including cores), enter: [09:15] grep -c processor /proc/cpuinfo [09:16] once google was quicker than hunting for where i saved the info [09:16] CPU Cores: 1 [09:17] ok then no threading needed [09:18] cool [09:18] so we know its a GenuineIntel, Pentium 4 CPU 3.00GHz [09:20] thats a good cpu that , i have it in other pc [09:21] will fly with 2g ram [09:21] yeah good CPU only issue I have is my RAM [09:21] only 512MB [09:22] and it has only 2 slots both with 256 each [09:22] ddr ram? [09:22] not ddr1 or 2 [09:23] thats scarce as rocking horse droppings [09:25] hi gwood [09:30] @ Kilos, LOL, its DDR I think [09:30] eina i hunted everywhere [09:30] got 2 ig cards but they clash so got one in each pc [09:31] 1g [09:32] and when you find they want more for secondhand cards than 2g ddr3 [09:32] swines [09:34] yeah I guess they know that it is rare [10:23] afternoon [10:46] hi Squirm [10:48] I have a memory card protected by a password, anyone know how to reset it using ubuntu? [10:49] hi adeebnqo [10:49] what memory card? [10:50] hello Kilos, its a micro sd card. I have an adapter so I can connect it directly to my pc --- I need way to mount it or smthng and reset the password [10:50] whew [10:51] i didnt know they put passwords om memory cards [10:51] does you system see it? [10:51] and the adapter is sd to what [10:52] Nope. However, when I insert it on a phone--it wants a password [10:52] what adapter [10:52] to usb? [10:53] the one that looks like a huge sd card but has a micro sd card slot [10:57] * Kilos has no idea what a sd card looks like huge or micro [12:31] hi guys [12:31] epic damage last night [12:31] sjoe did you have to chop up the tree? [12:31] tree dead [12:32] dstv dead [12:32] house the house [12:32] xbox, just the power brick [12:32] how is the house [12:32] 2 tv's dead [12:32] thats bad news hey [12:33] lightning hit the tree, split it in half, and hit the ground next to the tree [12:33] what do insurance peeps say [12:33] good afternoon [12:33] the ground sploded spraying mud on my walls, and rupturing a water pip from the municipal mains [12:33] Maaz: coffee on [12:33] * Maaz puts the kettle on [12:33] hi DarkSurferZA [12:33] hi Kilos [12:33] hi charl [12:34] insurance will pay (with hefty excess) [12:34] oh the tree didnt damage the roof? [12:34] ai1 them and their excesses [12:34] but could take up to 2 weeks to sort out the claim for electronics [12:34] yo charl [12:34] why [12:34] roof fine [12:35] assessor will come out in 2 days [12:35] 4 days to assess root cause of damage to electronics [12:35] insurance process claim and valuate goods [12:35] FUUUUUuu!!!!!!! [12:35] most likely no earth spike [12:36] anyway, hope these guys sort out plumbing today still [12:36] yeah [12:36] sounds terrible DarkSurferZA [12:36] how u guys doing? [12:36] http://i.imgur.com/cPJEgDt.jpg [12:37] much better than you, apparently :( [12:37] sorry to hear about your troubles [12:37] meh, such is life man. have days, and then have DAYS [12:37] Coffee's ready for charl! [12:37] Maaz: thanks [12:37] charl: Okay :-) [12:38] we fine. only got half a mil of rain though [12:38] but thanks for the concern. dunno where i am gonna play xbox for a while, but again, life right? [12:38] you play xbox lots? [12:38] eating japanese mochi now [12:38] with red bean paste inside [12:38] of all the problems i could have, these are good ones. [12:39] Kilos: love xbox man. playing tons of GTA V [12:39] eeek you have worse ones? [12:39] was playing tons of GTA V [12:39] GTA isn't so bad [12:39] ive never seen one [12:39] no, dont have worse problems, just think they could be worse. [12:40] Just gets a bad rep - kind of like Doom and funny enough, Night Trap [12:40] ie, no internet. [12:40] Night Trap is why games have a rating and age restrictions [12:40] or no electricity. [12:40] internet goes down, life stops [12:40] scary right? [12:40] "why live" and jump off a building [12:40] The funny part is that it doesn't feature anything of what it was accused [12:40] " i can't take it anymore " [12:41] None of the politicians or Media people actually played it to see [12:41] Trixar_za: agree, but it is just the themes i guess [12:41] Yeah, but you get worse things in real life [12:41] Hell, in SA we tend to LIVE GTA [12:41] :P [12:42] if ur kids are crap at life, blame music, games, internet, porn, government, schools, and just about everyone else [12:42] Except the parents, hey? :P [12:42] whhaaha, live gta [12:42] I heard the funniest warning yesterday [12:42] It was for an adult podcast on CCMixter [12:43] well, i havent seen anyone fly a crop duster in to the back of a bomber before [12:43] Trixar_za: yeah, what was it? [12:43] "This Podcast is indented for persons 18 years and older. If that is not you, then turn this off immediately, go find your parents and tell them they're doing a bad job parenting you." [12:44] Intended* [12:44] lol [12:44] sjoe [12:44] lol [12:44] so much lol [12:44] but the truth though. [12:45] you can't blame everything on the parents either though [12:45] It's even funnier if you hear how she says it [12:45] nope not everything [12:45] when kids get to school then parents know nothing and teach knows all [12:46] what? if they can blame everyone else, then everyone else should be able to blame them. [12:46] lol [12:46] Just kidding, [12:46] In what universe? Generally they disregard the teachers [12:46] DarkSurferZA: i was meaning to speak to you about something... you do pen testing right? [12:46] oh ya times have changed some hey [12:47] charl: maybe..... it depends [12:47] DarkSurferZA: i am busy designing a protocol for instant messaging / voip / file sharing with encryption as a base [12:47] Ok, sounds cool [12:48] DarkSurferZA: i use xmpp right now but the main two problems are that a) there must be some data retention on the server (e.g. user accounts) and there is no built-in redundancy [12:48] the second should be b) of course :) [12:48] what i have so far is: http://charl.eu/e2ee/ [12:48] Lemme have a look [12:48] if you happen to have some time to look it over and give me your thoughts, please do [12:48] thanks ! [12:49] http://ccmixter.org/files/RoseCaraway/36017 [12:49] That's the one with the warning [12:54] charl: only had a brief look, havent had time to process yet, but itsounds like an IM protocol built on tor and perspectives [12:54] no definitely nothing to do with tor [12:55] i want to stay the heck away from it [12:55] Yeah, i mean from a framework perspective. [12:55] Also have you seen the perspectives project? [12:55] it takes end-to-end encryption seriously though [12:55] can't say i have, although it does sound vaguely familiar [12:56] this one? http://perspectives-project.org/ [12:57] Couple of issuesmay arise with identity theft, and NSA snooping but it could work given some tinkering [12:58] Also doesnt allow for users to recover their identities because they own their identities. That is a problem for the typical end user [12:58] Let me apply my brain here properly and we can chat in a different forum [12:58] Sure other people here dont want to be bored by my ramblings. [12:58] identity theft? sorry i don't get it [12:59] and it's supposed to circumvent nsa snooping by keeping all the keys on the client only [12:59] no man [12:59] so even the server operators have the absolute minimum access to information [12:59] we all wanna see how clever you are [13:01] The problem with certificates, especially asmetric certs is that the public keysare [13:01] Crap [13:01] Keys a [13:01] Urgh!!! Gimme a sec. Keyboard fail [13:01] np :) [13:02] Try again [13:03] Public keys crypt messages in a static manner, right? So if you crypt "hi" 7 times with the same pub key [13:03] You get the same cipher text [13:03] Right? [13:04] charl, question [13:04] If the public key, is derived from the private key, and you have the cipher text as well as plain text, it is about filling in the blanks to get the private key [13:04] Right? [13:04] cant you build otr into it [13:04] so pcs encrypt to each other [13:04] Kilos: tor is a bad idea, but charl has a workable idea in here.just needs tweaking [13:05] oh is otr tor? [13:05] Most end users dont like tor. Except if ur buying on the silk road that is [13:05] Tor [13:05] The onion router [13:05] i dunno what that is [13:05] yeah tor is slow and it's very often abused [13:06] pidgin otr works well [13:06] is that also tor? [13:06] i was looking at having maximum two "servers" between the clients [13:06] also so that you can transfer for example large files [13:06] at a usable speed [13:07] Anyway, charl, there are some cool ideas here man. I aint putting it down. [13:07] Kilos: otr is another encryption technique, i didn't know about it at the time, but that is worth looking into [13:07] Kilos: i drafted this spec based on openpgp instead but otr seems to have some advantages above openpgp [13:08] But, if it were to work in a useable fashion, the client and the server would agree on a session key to be used in conjunction with the pgp keys [13:08] the otr function used on xchat is a setup pain but pidgin is very simple [13:08] the main advantage seems to be: http://en.wikipedia.org/wiki/Forward_secrecy [13:09] "In cryptography, forward secrecy (also known as perfect forward secrecy or PFS[1]) is a property of key-agreement protocols that ensures that a session key derived from a set of long-term keys will not be compromised if one of the long-term keys is compromised in the future." [13:09] DarkSurferZA: yes the connections between the client and server and between servers are all tls [13:09] DarkSurferZA: and then openpgp as an extra layer on top of tls for end-to-end encryption [13:09] Also, the client would determin a circuit for sending messages, and the server could use a different one for their responses. [13:09] Circuit = servers hops routing etc [13:10] DarkSurferZA: exactly! [13:10] so even if you can intercept a particuar path then you don't get the full communication [13:10] you only have part of it [13:10] so you could for example alternate between servers in different parts of the world [13:10] so even if the encryption can be broken that adds an extra layer of difficulty [13:11] you could even split up a single message and route parts of it through different servers [13:11] This requires each server to be able to route traffic on a session bassis, as well as for the client to open multiple circuits to a host [13:11] if you want to go full paranoia mode [13:11] yeah my idea is that the clients determine the route [13:11] and the client can do that in an ad-hoc fashion [13:11] the idea is that the server needs to know the absolute minimum [13:12] trust the client, not the server [13:12] The problem is that the redundancy componant has a fail aspect that the NSA would abuse to harvest messages [13:12] I.e. if the NSA controls1 host in a circuit, they could see the whole message. [13:12] if you *could* take certain servers down [13:13] hmmm not sure i understand [13:13] in a circuit yes but the idea would be to use different circuits [13:13] You dont need to take them down. Think water through some channels. [13:13] If i want more water to go through 1 channel, i just make the other channel appear more full. Get it? [13:14] yeah... but explain "more full" [13:14] tap half closed [13:15] Send it lots of work, so your client talks to other hosts [13:15] Kilos: exactly [13:15] decreasing flow in one pipe increases flow in other pipe [13:15] that is possible yesah [13:15] *yeah [13:15] that could indeed be used as one avenue of attack [13:15] however, the clients could also be "smart" about it [13:15] for example, if sending messages through certain servers persistently fails, warn the user for example [13:16] i don't think this is an issue you would very easily be able to work around actually, tough one [13:16] No, because it wouldnt fail [13:16] It would just process (successfully) fewer messages [13:16] And the wider channel gets more of your messages [13:16] but how would the client know the server is too "full" if no messages fail [13:17] unless the server tells the client "sorry i'm being overloaded right now" [13:17] The recipient acknowledges the message id right? [13:17] but in that case the client could once again warn the user "be careful" [13:17] yeah correct [13:17] after it's been decrypted as part of the message [13:17] So if i send 100 messages, and the first 10 go out [13:18] 5 through channel 1, and 5 through channel 2 [13:18] 5 responses arive from channel 1, and so far, 0 from channel 2 [13:18] Client sends another 5 to channel 1, still waiting for responses from channel 2 [13:19] 40 messages into channel 1 later, 5 responses are received from channel 2 [13:19] ah i see, so this is how you funnel [13:19] 90% of traffic is forces through a potentially bad gateway [13:19] yeah makes sense [13:20] but in a case like this, the client once again needs to be intelligent [13:20] to split messages up and where it can't be, warn the user [13:20] add more servers to create more paths [13:20] but this could also happen on the receiving end [13:20] Again, it is complicated. [13:20] so the client needs to know the exact path to the other client, and once again would need to be intelligent about it and warn the user [13:20] Because using this method, the NSA would "blacklist" all good servers [13:21] "something's up be careful the network is under attack" [13:21] yeah it's possible, you have a very good point, that definitely needs to be addressed [13:22] you are like the first person that i speak to about this that actually has some good feedback, this is what i'm looking for, thanks :) [13:22] Also, the client should never know the path of the message, as that requires a known circuit, somewhere in a readable message body [13:22] Np [13:22] I.e. meta data has more use to me on a large scale than data [13:23] So if i know who talks to who the most, and i can fingerprint messages by the circuit they travel on, then i can id users [13:23] i was thinking, the client selects a particular server it is connected to, and selects one of the servers the receiving end is connected to, and tells its server "here is the message, route it to this user on this server" [13:23] The best defense i can come up with is 2 fold [13:24] Ok, wait, let me hear more [13:24] but that is in plaintext (well, not plaintext, it's over tls of course) and then sends the end-to-end encrypted part of the message after that [13:24] so the most the servers could know is, this user is talking to that user [13:25] absolutely nothing more [13:25] So if a server can read the source, and destination, as well as the users desired next hop (to form a circuit), that must be clear text [13:25] Right? [13:25] the idea of course is that servers retain absolutely no data, but of course you can't force that down [13:25] yes that first part yes [13:25] it's almost like a packet with source and destination, but the data inside the packet is encrypted [13:26] so the only data you could read if you are sitting on one of the servers is who is talking to who, but you don't know what they are saying (unless you can crack the crypto of course) [13:26] and the end-to-end crypto is a transaction that is made between two clients, you could have the possiblity for multiple types of crypto, layered within each other [13:26] you could also negotiate session keys etc [13:27] Right. So the data inside is the message, but the metadata outside (user 1, talking to user 2, wants traffic to hop from me to server x to end user) is in a publicly readable format [13:27] Otherwise the serverr couldnt route the message, right [13:27] yes, well not publicly readable, but readable by both servers yes [13:27] exactly [13:28] that is unfortunately necessary at this point, i haven't managed to figure out anything better [13:28] Cool,so thats what i meant. The meta data, is of more value on a large scale, than the data. [13:28] Data forms part of a targeted attack,meta data falls at the drag net [13:29] yes, unfortunately [13:29] the idea is however that each client has a list of trusted servers [13:29] So, if i were looking for a terrorist for example (#noNSA) [13:29] And i busted 1 user [13:29] by trusted i mean only trust any server as far as absolutely necessary, no more [13:30] but the server also, by necessity again, has to know the client's ip address for example, no way around it [13:30] And my metadata said he spoke to 17 people. [13:30] 17 people are suspects [13:31] I can fingerprint those people based on the way they speak, even if they change ip addresses [13:32] I can then read how much they speak to each other [13:32] Then build a profile [13:32] Then follow ip addresses as their fingerprints come online. [13:32] Then have target attacks launched against each host [13:33] For example, i have disclosed a 0 day to MSFT last week which allows me to access any network / service using NTLM [13:34] Users always fail targeted attacks, so the idea is for a client to be anonymous, private, and untraceable. [13:35] If for whatever reason they are compromised, they client must be amneasiac [13:35] The only way this is possible is to design the solution from the ground up assumng that each server is compromised [13:36] I have some brain farts at the moment on how to mitigate most of what we mentioned, but i need to organise them into meaningful thoughts [13:38] I.e. broadcast your message with a random number of hops in the circuit (1-5), and use a raid 5 type arrangement where each message is broadcast to a random % of your server list [13:38] But never a meaningfull % to any 1 host [13:39] Also would need a notary principal, because signatures can be forged [13:40] charl: i lose you man? [13:42] he just changing gears [13:46] hi sorry [13:46] got interrupted [13:48] DarkSurferZA: sounds really interesting [13:48] i'm not trying to create another tor though, i'm trying to keep this relatively simple [13:48] but you have some very interesting ideas here above [13:58] DarkSurferZA: sorry i gotta get some work done on this end, shall we go off and do some more thinking, let it sink in and catch up in a couple of days? i really like your thinking [14:04] Afternoon everyone [14:05] Maaz: coffee on [14:05] * Maaz washes some mugs [14:05] Maaz: coffee please [14:05] Xethron: Now now, we don't want anyone getting caffeine overdoses [14:06] :( [14:06] But I haven't had one yet [14:06] Fine, I'll go make it myself [14:08] hi Xethron [14:08] Maaz, coffee please [14:08] Kilos: Alrighty [14:08] Maaz, large [14:08] In a beer mug just for you Kilos [14:08] DarkSurferZA: I'm trying to figure out the URL that a device is making a connection to over HTTPS - any ideas? (I'm playing around) [14:09] Coffee's ready for Xethron and Kilos! [14:09] Maaz, ty [14:09] You are welcome Kilos [14:12] Maaz: ty [14:12] You are welcome Xethron [14:13] all good Xethron ? [14:13] mostly yes [14:13] Just busy :) [14:13] good [14:14] * Kilos waits for next storm. saw a pic sis got from youtube of the lightening in sandton last night [14:14] sjoe [14:21] Yo superfly [14:21] Soz man, missed that [14:21] hey DarkSurferZA [14:21] What kind of device [14:21] no worries [14:22] an iPod [14:22] Download the free version of burp proxy online, then setup your proxy settings on the ipod [14:23] Make it point to your running version of burp proxy [14:24] Otherwise, if you want to catch alltraffic from your ipod, use a combination of wireshark, and an arp poison on the network [14:58] ! [15:51] hello [16:50] hello kbmonkey [16:56] hi. I go eat dinner - got black beans and brown rice. yum. [16:56] and hear thunder again. ai! [16:56] haha ok [17:13] how is this for lightening http://imageshack.com/i/2oqvdnj [17:13] ask DarkSurfer he felt the after effects and is still feeling it [17:58] thunder storm, gonna have to log off and shutdown cheers people [17:58] later [18:04] ja its hitting here now [18:04] lots of lightning [18:09] the heavens are angry with us [18:32] hi nlsthzn wb [18:32] night all. sleep tight [18:32] more is nog n dag [18:32] good night [19:21] good evening [19:30] hi inetpro [19:30] hi psychicist [19:31] hi charl [19:33] hi charl [19:33] hi inetpro [19:33] hello psychicist [19:52] evening. how goes alll? [19:54] looking at the cone mua, it seems nice so far. [20:03] hi kbmonkey [20:03] hello 0/