/srv/irclogs.ubuntu.com/2013/12/30/#ubuntu-uk.txt

=== Lcawte is now known as Lcawte|Away
=== nshchawmp is now known as nsh
=== Guest71069 is now known as mapps
dwatkins_morning all08:36
=== dwatkins_ is now known as dwatkins
sam___hi10:06
dwatkinslo10:34
brobostigongood morning everyone.10:37
popeypip pip11:40
bigcalmHowdy11:41
TwistedLuciditygordonjcp shauno: Got the PC audio -> mobile thing working two ways. 1) Rygel & PulseAudio/DLNA; 2) VLC. There a short (2 sec delay) but it works.12:03
gordonjcpTwistedLucidity: cool12:04
=== xnox_ is now known as xnox
x98server-adminHi i was wondering if ubuntu was secure, but it is not from a thief as he could go into recovery mode and drop into a root shell13:34
MartijnVdSx98server-admin: that won't help the thief if you encrypted the system (you can select that as an option during installation)13:35
dwatkinsif someone has physical access to your PC, consider it compromised13:35
MartijnVdSand that13:35
MartijnVdSIf Ubuntu didn't have recovery mode, booting the machine from an USB stick would give him full access to all files *anyway* (unless encrypted, again)13:36
x98server-adminBut is there a way of preventing unfriendly access13:36
dwatkinsif the disk is encrypted, it's feasible someone with enough [super]computing power at their fingertips could decrypt it, but I don't consider myself "important" enough to warrant that kind of attention.13:36
dwatkinsx98server-admin: what kind of access, physical or via the network or via the internet?13:37
MartijnVdSx98server-admin: Encrypt the machine, lock the BIOS (boot order), and don't let people near it when you can't see it13:37
MartijnVdSdwatkins: AES256 is feasible now?13:37
dwatkinsMartijnVdS: no idea, 1024-bit keys are considered "alien-level encryption" but that doesn't mean they're impossible to break given enough time and power.13:37
dwatkinsFor the curious, see http://distributed.net/ ;)13:38
MartijnVdSdwatkins: every cipher has its own "recommended" key length, and asymmetric encryption tends to need longer keys than symmetric crypto13:38
x98server-adminBut if my drive is encrypted he/it could still drop into a root shell right?13:39
MartijnVdSx98server-admin: not without rebooting (or unless you left it open ;))13:39
MartijnVdSx98server-admin: and with a reboot, you need to re-enter the encryption key13:39
x98server-adminkk13:39
MartijnVdSx98server-admin: there's an attack where they freeze the machine in liquid nitrogen before shutting down (or something) so they can recover the key from desoldered RAM chips.. but you'd notice that.13:40
dwatkinsso we're talking about someone having physical access to a desktop PC?13:40
MartijnVdSalso, are you *that* important a target? :)13:40
dwatkinsor a laptop which is left powered up when stolen, perhaps13:40
dwatkinsI lock my screen when I walk away from my desk at work, despite trusting my colleagues.13:41
x98server-adminEthier one13:41
dwatkinsIt's not just about someone taking the PC away, they might simply write something using your Facebook account.13:41
x98server-adminNo13:41
dwatkinsIf your browser stores your login/cookie, and you don't need to enter your password every time etc.13:41
dwatkinsNo to which part, x98server-admin?13:41
MartijnVdSx98server-admin: let's take a step back: what do you want to do, and what do you want to prevent? :)13:41
x98server-adminAbout taking valued data13:42
x98server-adminAfk13:42
=== Lcawte|Away is now known as Lcawte
MartijnVdShttp://i.imgur.com/auzrtP5.jpg14:11
TwistedLucidityWell, encrypting the drives is easy and that implies encrypted swap and tmp as well. Which mean no hibernate unless to "fix" the swap crypt passphrase and that means two passwords to log in (the first, for swap, must be known to all machine users).14:13
TwistedLucidityIf you want to control just some files, then you need to worry about managing keys/passpharses and I am in no way qualified to talk about that, not having done it beyond something simple like a TrueCrypt volume for personal use.14:15
MartijnVdSI have encrypted my /home only, using ecryptfs14:16
MartijnVdSjust make sure to not store sensitive data *outside* of /home :)14:17
TwistedLucidityI store all my sensitive data in the cloud. That's safe, right? :-)14:17
MartijnVdS8-)14:18
TwistedLucidityI just wish there was some clever way to get around needing to enter the crypt passphrase on boot...if stolen, I *want* someone to be able to boot my laptop.14:18
=== roht is now known as dottx
popeyditto14:29
popeywhich is why i only encrypt home14:29
MartijnVdSit breaks the nfs exports vagrant uses though14:29
TwistedLuciditypopey: So you don't encrypt swap?14:30
nigelbwell, what happens when you change the password?14:31
popeyi do14:31
popeyby "only" I meant "I don't encrypt /"14:31
nigelbor rather, does changing user password, automatically change ecryptfs password?14:31
TwistedLuciditypopey: Nor do I, but for hibernate to work you have to be able to decrypt swap - when means having a "pre-boot" password so swap can mount14:32
popeyi dont hibernate14:32
TwistedLucidityBy default the password grabbed from dev/random will be lost and swap can no longer be mounted14:32
popeyever14:32
TwistedLuciditypopey: Ah. I see. Thought I was going to learn some cunning trick.14:32
popeyi dont see the point in hibernate, it takes too long to wake14:33
TwistedLucidityDon't notice any real issue with it myself. I mostly set it up to learn, then discovered how "awkward" Linux hibernation is.14:36
NET||abusehi folks,,, i'm in a fun position today, choosing a laptop to buy out of my own money :P for going on as a contractor developer rather than full time.14:36
NET||abuseI've seen the new xps15 after having a look through the new linux xps13, but that step up is 450 more :( but so nice... want14:37
TwistedLucidityAvoid the Lenovo T540.14:37
NET||abuseyet, the M3800 has similar specs i think.14:37
popeyI like the look of the xps1314:37
popeyespecially the screen, it's a very nice device14:37
popeya few friends have bought them14:38
NET||abuseand both have touch 3800x1800 screens14:38
NET||abusethe xps 13 only has fhd, 1080p :(14:38
NET||abusethe m3800 and new xps15 are the big resolution ones, i think they both have the nvidia geforece gtx 564M14:39
NET||abuseumm, 565M not 56414:39
NET||abusei dont think that exists.14:39
NET||abuseno, the 3800 uses the quadro K1100M,, no idea how that shapes up against the gtx 565M14:41
TwistedLucidityRemember to consider support. You will be relying on this laptop, so you will probably want next day on-site repairs.14:41
NET||abusehmm, true14:42
TwistedLucidityThere's various sites where you can look-up GPU performance. For coding though, a Quadro should be fine.14:42
NET||abuse:) I wouldn't mind being able to play a bit of TF2 or Dota on teh QHD+ screen resolutoin though :)14:43
NET||abusebut yeh, i just love the idea of having full height half screen editor and two browser windows stacked on theother half of hte screen and have it all right there eon the laptop .. amazing really14:44
popey3800x1080?14:45
MartijnVdSx180014:46
NET||abuseyes14:46
NET||abusehigh resolutoin14:46
MartijnVdS"4k"14:47
NET||abuse:)14:47
NET||abusei'm on a 1366x900 right now,, amazing how that feels constricted14:47
popeyheh14:47
MartijnVdSyeah, I have that on my own laptop as well14:48
popeyyeah, me too14:48
NET||abuseI was on a 1660x1080 up till a month ago, it was alot better14:48
MartijnVdSwork laptop is 108014:48
MartijnVdS+ a 1920x1200 screen.14:48
MartijnVdSAt home I have 2560x108014:49
MartijnVdSyou get used to that ultra-wide screen as well.. I miss it at work :)14:49
NET||abuseyeh, those 27" dell monitors are 2560x108014:49
popeyI've yet to outgrow 1080p14:49
popeyalthough if I had a higher res screen I surely would ☻14:50
MartijnVdSpopey: I didn't think that much width would be useful, but (surprisingly) it is :)14:50
=== Mez_ is now known as Mez
=== daftykin1 is now known as daftykins
popeyheh14:58
popeyI cant see myself changing my displays anytime soon, my philps 234el's are fine14:58
popeyI'm not due a work laptop refresh until november14:58
popeyhttp://www.engadget.com/2013/12/29/hackers-reverse-engineer-wii-u-gamepad is fascinating to watch15:06
MartijnVdSpopey: Radio hacking as well: http://media.ccc.de/browse/congress/2013/30C3_-_5588_-_en_-_saal_g_-_201312281600_-_my_journey_into_fm-rds_-_oona_raisanen.html15:09
xnoxTwistedLucidity: encrypted hybernate works, out of the box on Ubuntu. As long as one doesn't change swap partition UUID. It wakes up, you type a passwords once and it all resumes just fine.15:09
xnoxpopey: MartijnVdS: ^15:10
popeynice15:10
xnoxwith home folder only or with full disk encryption.15:10
TwistedLucidityxnox: Not for me it didn't; it could never mount the saved swap15:10
TwistedLucidityTo I had to move the swap to a fixed password to make it work15:11
xnoxTwistedLucidity: please file a bug report with details and logs on launchpad against ecryptfs-tool and I can look into it.15:11
TwistedLucidityxnox: From everything I read, I simply understood that "That's how it is". There's loads of blog posts about the problem.15:11
xnoxTwistedLucidity: well, duh, one can't use random swap =) the key is destroyed & is unknown before going to sleep.....15:11
TwistedLucidityxnox: Exaclty, which is what Ubuntu uses by default15:12
xnoxTwistedLucidity: it does not =)15:12
xnoxnot, in the full disk encryption case.15:12
TwistedLucidityxnox: It does, it's what it did for me when I told it to encrypt home15:12
xnoxif ramdon swap is used with ecryptfs-home, that needs fixing.15:12
xnoxTwistedLucidity: can you file a bug against ecryptfstools then and point me to it?15:13
xnoxi'll get in touch with ecryptfs upstream to discuss this.15:13
TwistedLucidityFor full disc encryption require the entry of a "pre-boot" password?15:13
TwistedLucidityI guess it would15:14
TwistedLucidityxnox: Are you 100% sure this should be filed as a bug? Fixing the swap password is part of of the offical Ubuntu docs. https://help.ubuntu.com/community/EnableHibernateWithEncryptedSwap15:21
x98server-adminWhich needs more resources win 7 or ubuntu 12.04 & should i get 13.1015:56
x98server-adminAlso what is the alternate for webmin15:58
gordonjcpx98server-admin: is this for desktop or serveR?16:08
x98server-adminServer16:08
gordonjcpx98server-admin: for a server, I'd go for 12.04, for desktop it's 50/5016:08
gordonjcpthere's no alternate for webmin16:08
gordonjcpx98server-admin: instead of using webmin, post the IP address of the server and your username and password on reddit16:08
gordonjcpyou'll get 0wned *far* quicker16:09
x98server-adminWhy post my ip ?16:09
dwatkinsI think gordonjcp is joking, x98server-admin16:09
gordonjcpso that people who want to log in as you know what to log into16:09
gordonjcp... and that's what happens when you use webmin16:14
TwistedLuciditygordonjcp: LOL16:14
TwistedLuciditySurely it only happens if the site is visible on the public t'tinernet?16:15
gordonjcpno idea16:18
gordonjcpI wouldn't touch webmin with a stolen ten-foot shitty stick, and if I find machines with it installed I just assume they're 0wned16:18
dwatkinsI assume webmin runs (ran) on a different standard port to a normal apache installation, I hope so.16:18
dwatkinsIndeed, it was canned for reasons.16:18
mappsgonna have to take my pesky old dell laptop apart =[16:28
mappsthe noise is just too loud to ignore16:28
diddledanI don't think webmin is as bad as you give it credit16:39
* TwistedLucidity offers mapps a hammer16:39
mapps:D16:39
diddledanhulk smash16:39
TwistedLucidityI periodically give the PCs a blast of compressed air and a going over with the vacuum. The filth that comes out of the filters and fans....yowzah.16:40
diddledanI need to invest in a can of air16:40
mappsya i usedthat stuff once16:41
mappsgot it from staples16:41
TwistedLucidityCheap(ish) on Amazon. Other web-based tat vendors are available.16:41
MyrttiStanstead has changed a lot in six months, didn't believe my eyes this morning17:21
Myrttiand for typos I blame my tiredness17:21
popeyWelcome back17:21
Myrttiwrong way around :-(17:21
popeyor.. welcome uh to there17:21
popey17:22
Myrttiyeah... it's quite gloomy here17:22
Myrttieven worse than UK17:22
Myrttiit might not have rained as much, atleast the soil isn't totally waterlogged here17:22
Myrttibut darkness and no snow isn't good combination17:23
Myrttianywhoo17:23
popeywhen are you back to work?17:23
MyrttiI suppose I could start tomorrow to tinker with stuff17:23
popeyI've been avoiding my work mailbox17:23
Myrttiwe have a two day all hands in a ski resort on Thursday17:24
Myrttiwith no snow.17:24
popeyhah17:24
MyrttiI flew in today because my sister has a x5th birthday tomorrow, and thought that she might want me there, but apparently no. Well, I can sit on their Christmas presents few more days more17:25
Myrtticould've flewn on the 1st instead had I known17:25
mappswow18:04
mappsyou're next was good18:04
daftykinsa film?18:06
mappsyea18:06
mapps2013 horror18:06
DJonesI wish somebody had told me about 'autoawesome' pictures on google earlier, you get some brilliant results18:06
mappsautoawesome?18:07
DJonesmapps: https://support.google.com/plus/answer/3113884?hl=en-GB Basically, if you take 1/2 dozen photo's quickly, it automatically turns them into an animated gif18:08
DJonesEnded up with a brilliant one of two cousins 4 month old babies lying next to each other but the gif shows them both flinging their arms & legs around18:10
DJonesmapps: https://plus.google.com/u/0/photos/112215944099951911045/albums/5961778849013809473/596177884658498033818:13
mappsnice will check in bit..gotta gpo to next18:13
mappsbefore they close18:13
mappsneed some new jeans for tomorrow ..all my jeans have managed to get holes in the pockets and ahem worse than that the crotch area18:14
mappshttp://www.imdb.com/title/tt1853739/?ref_=fn_al_tt_518:15
mappssays 2011 but didnt get released till 2013 hm18:15
* penguin42 has the same problem in his trousers pockets - but I won't even guess about how you get the other problems18:17
mappslol18:18
mappsmust be how i sit18:18
mappsi wore them wiith holes in the crotch few times but then it ends up getting worse lol18:18
mappssick of only having 6mbot18:20
mapps*6mbit18:20
mappsi want faster;/18:20
penguin42yeh it's a hard life, either new trousers or faster broadband18:21
mappsi cant get faster where i am18:21
mappsbut it irritates me i had faster 7years ago when i was in portsmouth18:21
penguin42yeh I know others in that mess, I moved to cable a few months ago because I couldn't get more than about 7.5 DSL18:21
mappsya i can get cable 5mins down the road but not here18:22
mappsin portsmouth had 20mbit cable years and years back when i wasnt on resnet18:23
mappsand back at my dads he has like 75mbit FTC from bt and 100mbit from vm18:23
mappsand im stuck with no choice at all;/ FTC just says 'coming soon'18:23
penguin42you need to find someone 5 mins away who you can pay for a wireless access point18:23
penguin42FTTC here they've said our cabinet isn't getting it because there aren't enough people on the cab, even though the exchange has it18:24
mappsah that sucks18:24
mappsfor me it says 'accepting orders' but that means from isps18:24
mappsso its not ready for customers to be setup yet18:24
popeyfoobarry: saw this and thought of you https://plus.google.com/u/0/103092123223427025792/posts/j2nwM3Xpxwp18:24
mappscables decent enough for the price though18:25
mappsgot a leaflet today too about virgin mobile 15quid/month with unlimited 3g - which seems decent..I pay something like 50/month with ee for unlimited everything - mainly concerned about unlimited 3g:)18:25
mappshm19:41
mappsamerican hustle sounds good from imdb19:41
BigRedSdoes nautilus now not show previews of files intentionally or have I somehow configured it to not?19:45
DJonesFrom memory, I thought the file preview facility had been removed a couple of releases ago19:47
BigRedSyeah it sounds like the sort of damaging feature that needed purging19:48
DJonesLooks like it was an upstream decision19:49
ali1234what is "preview"?19:49
ali1234thumbnails?19:49
BigRedSyeah, part of the reason I switched to Ubuntu was to get away from gnome 3's relentless removal of features19:49
BigRedSwhen you click on an image a pane is created on the right showing the image in reduced-but-not-as-small-as-thumbnail size19:49
DJonesI can see comments saying the change affected Debian & Fedora as well19:49
BigRedSit's mostly useful in the Open file dialog when uploading photos19:50
BigRedSDJones: yeah - I understood that *some* of this was going to be shielded from me by Canonical :)19:50
BigRedSand I hoped this would be19:50
ali1234canonical basically don't have the resources to fight against gnome19:51
BigRedSyeah, I was afraid of that19:51
ali1234plus they've their own brand of crazy19:51
BigRedSI'd find the current state of the modern linux desktop amusing if I didn't have to use it...19:52
ali1234nobody has to use linux19:54
ali1234it's not like there's some killer piece of software you can't get anywhere else19:55
ali1234i was looking at fedora the other day. is it right they don't have a multiarch system?19:56
BigRedSwell, it's sort-of mandated by work19:57
BigRedSThey were definitely working on multiarch some time ago; I'd assume they had it by now19:57
ali1234the most up to date information i can find that meant compiling an ia32-libs style package19:59
BigRedSoh right20:01
ali1234i kind of want to try a systemd distro, but i need one that actually cares about security20:04
ali1234and also has proper multiarch20:04
ali1234seems like opensuse is my only option here20:04
ali1234but then i have to deal with yast20:05
foobarrypopey: thanks :) i was planning on making a trip to tottenham aldi as i heard they were selling off kits for £2.50 and £3.5020:06
BigRedSwell, at least you've discovered that suse apparently does have a plus-side20:13
gordonjcpthought recent Ubuntus were systemd20:15
gordonjcp<shrug>20:15
gordonjcpand who on earth bothers with multiarch these days20:16
penguin42gordonjcp: multiarch is still useful in a lot of corporate messes20:16
Laneypeople who use skype20:18
ali1234anyone who uses steam20:18
penguin42there are some interesting cases on ARM20:18
ali1234ubuntu is just about the only holdout against systemd... debian is still undecided20:19
penguin42ali1234: Thing is it seems to work20:19
ali1234what does?20:19
penguin42systemd20:19
ali1234well i haven't tried it but it seems that way20:19
ali1234trouble is if i want to try it then i have to go to an RPM distro, or a distro run by kids with no regard for security20:20
ali1234neither is an appealing choice20:20
gordonjcpI don't get why people are so obsessed with getting Skype working20:20
penguin42ali1234: Yeh I've used it on Arch (kids), OpenSUSE, Fedora (RPM)20:21
gordonjcp#ubuntu is full of them20:21
penguin42gordonjcp: Because they need to talk to family20:21
gordonjcppenguin42: use a phone?20:21
penguin42gordonjcp: Some people don't have them, they don't need to - they've got skype20:21
penguin42gordonjcp: And it costs a lot less20:21
gordonjcpless than what?20:21
penguin42gordonjcp: International phone calls20:21
ali1234less than 1p20:21
gordonjcpoh, who pays for those?20:22
ali1234ie nothing20:22
gordonjcppeople with crappy phone packages, presumably20:22
penguin42gordonjcp: Well there's no good reason they're currently expensive20:22
ali1234you know who doesn't pay for them? me20:22
BigRedSpenguin42: that's not really the same as them being free20:22
penguin42BigRedS: Well you're paying your ISP for the data20:22
BigRedSI don't pay per-byte20:23
penguin42BigRedS: Me neither, but in the end that's where the cost has disappeared to20:23
penguin42oh, and the NSA probably paying to make it cheap for stuff to go through things they can monitor20:23
BigRedSyeah, so rather than paying extortionate per-minute costs I pay low per-month costs and use what the buys to send voice data across the world20:23
ali1234not really, there isn't much difference between an ISP contract and a phone contract, except for the additional per-minute fees on the phone contract20:23
BigRedSand I can't walk into a cafe and use the phone for the cost of a double espreso20:25
penguin42BigRedS: Although double espressos are somewhat more expensive than most phone calls20:25
MartijnVdSpenguin42: depends on your provider20:25
MartijnVdS(of either)20:25
BigRedS most phone calls don't include a coffee20:25
BigRedSI've no idea how much international calls cost any more, I've not made one for years20:25
MartijnVdSBigRedS: "Hey, you gave me your number last night, want to get some coffee?"20:26
MartijnVdSBigRedS: Those calls? ;)20:26
penguin42BigRedS: Me neither, but the cost of coffee in coffee shops these days....20:26
BigRedSMartijnVdS: :)20:26
MartijnVdSbrilliant video from Computerphile: http://www.youtube.com/watch?v=-5wpm-gesOY20:41
Laneyis he building up to talking about tzdata?20:47
MartijnVdSLaney: maybe :)20:48
penguin42MartijnVdS: Yeh one of my other G+ contacts forwarded that to me as well20:48
MartijnVdSpenguin42: you should also watch http://www.youtube.com/watch?v=IlRTcIK1aGo :)20:51
penguin42MartijnVdS: Time in VMs is even hardware20:51
MartijnVdShardware? :)20:52
penguin42harder!20:52
* penguin42 recalibratesfingers20:52
penguin42MartijnVdS: KVM/QEMU/VMWare etc all have to emulate the timers in the guests, and that's tricky20:53
MartijnVdSyeah.. and then you have ntpds running in guests who want to tickle the timers as well20:53
penguin42MartijnVdS: and then you migrate them to another host with a slightly different clock rate20:54
MartijnVdSooooh :)20:54
ali1234what do you call it when someone offers you a gift that turns out not to be a gift? ie someone buy you a lawn mower and then 6 months later starts casually dropping hints that their grass is really long21:29
ali1234there is a name for this and i can't remember it21:29
DJonesIndian giver (I think)21:30
ali1234i think your right21:30
ali1234that sounds kinda racist21:30
DJoneshttp://en.wikipedia.org/wiki/Indian_giver21:30
DJonesIt probably does get heard as racist, I'd never thought of it like that, but now you mention it, I can see why21:33
brobostigondigged something great out of my dvds, pink floyd live at pompeii.22:06
Constaaahow do i update my video player for chromium ? its being real funny with me.22:16

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!