[01:33] mrgoodcat: I'm curious to see where you're taking this tactic [01:43] it's a no-go [01:43] you had 2 choices and you chose correct [01:43] oh well, mistakes are just mistakes [01:46] brousch: i was hoping to invade since you don't have 2 eyes [01:46] but its just not a good idea [01:47] heh [01:47] I saw 2 choices but they ended up mostly the same [01:48] it would have required a pretty bad slip upp [01:59] brousch: i keep missing those simple vulnerabilities [02:09] a lot of foam makes for a lot of places to look [02:14] apparently [04:31] brousch: great game [04:32] Yeah, ended up close [04:33] you just took a huge chunk of the bottom right [04:34] and the middle wasn't decisive enough. I wish i had won the bottom left or been able to hold you in the top right. that would have been the differnece [04:35] I was quite happy with my top right [04:36] i thought i could hold it [04:38] Ok, bedtime [04:39] alright. night [11:50] My fame spreads http://www.blog.pythonlibrary.org/2014/10/13/pydev-of-the-week-ben-rousch/ [11:50] http://goo.gl/FG5xPl - PyDev of the Week: Ben Rousch « The Mouse Vs. The Python [12:09] Excellent article. And a fellow UM alum. GO BLUE! [12:16] PhillyMelt02: Are you near Detroit? [12:17] Yeah, just north of Mount Clemens in Chesterfield Township [12:22] Going to MUG tonight? [12:23] wheee party [12:28] Yep, going to MUG. It will be my first meeting [12:32] Excellent. Another ubuntu-mi person to meet [12:33] I guess this is a silly question to you veterans, but is there anything I need to bring? [12:37] today will be my first MUG too :) [12:40] I've never been to MUG, but I'm told they have wifi [12:43] i think every public library has wifi [12:43] how late does MUG usually go? [12:44] the site lists the meeting going until 8:45 [12:50] sounds good to me === _stink__ is now known as _stink_ === smoser` is now known as smoser [13:54] Good morning [13:55] party [13:55] save me, I'm in marketing/sales hell [13:55] rick_h_: Welcome to the other side. :) [13:56] * rick_h_ dives on the floor looking for a dropped pistol [13:59] heh [14:34] brousch: Congrats on being the dev of the week. :) [14:40] Now if i could get the rpi to actually play a video it makes ... [14:40] heh [14:40] Damn 700MHz CPU [14:40] yeah, it's unfortunately a bit underpowered as a "desktop" computer. [14:43] web browsing is painful [14:50] put arch and i3 on mine [14:50] runs just fine [15:04] you are using the wrong video player. [15:04] oh god damnit [15:04] brousch: me-- [15:04] I playback 1080p h264 with rpi. [15:05] jrwren: same here [15:05] no problems [15:05] hardware assist h264 rules. [15:05] now we just need hardware assist browser rendering. [15:05] avi drooles? [15:06] avi is just a container. can put h264 in there. [15:06] idk anything about video codecs/containers/formats [15:06] mrgoodcat: now you do. :p [15:07] i just know I play 1080p h264 since thats the settings i use for transcoding [15:07] i actually use 720 most of the time though [15:23] python requests vulnerability http://www.ubuntu.com/usn/usn-2382-1/ [15:23] http://goo.gl/agZIAT - USN-2382-1: Requests vulnerabilities | Ubuntu [15:34] also an oxide vuln. a slightly bigger deal since chromium (and chrome?) uses it http://www.ubuntu.com/usn/usn-2345-1/ [15:34] http://goo.gl/vkqs60 - USN-2345-1: Oxide vulnerabilities | Ubuntu [15:37] whelp, upon further reading i was wrong. chromium does not use oxide but oxide uses chromium. Oxide is a library that allows you to embed a Chromium-powered webview in QML applications. still should probably update though :) [16:09] jrwren: The codec and container selection is limited. I can generate avi files pretty well, but they're not h264. The built-in efficient RPi player will not play them. However VLC will play them if they are small enough not to use 100% of the CPU (240x180) [16:09] brousch: i'm not really sure what you just said :) [16:09] I have not succeeded in generating h264 videos from the webcam, but I could from the official RPi cam [16:10] brousch: ah. I see. You just need a better encoder :) [16:11] Yes, and on-the-fly h264 encorder for rpi [16:12] The videos from the official cam were quite nice, but something broke in the latest firmware or in my camera and it no longer works at all [16:12] The good news is the solution for a generic webcam are more useful generally, and on laptops and such [16:16] does the pri cam encode to h264 by default or something? [16:16] I guess I shouldn't be surprised. That is how cell phones do it. [16:57] jrwren: the raspicam supports raw and accellerated h.264 natively [16:57] that's actually a property of the software though, so you could theoretically output in other formats with enough effort [17:42] I love that Caribou sent me a survey about their new breakfast / lunch entrees. [17:43] Save for Caribou isn't in this state anymore I'm sure I'll be the best target audience. [17:46] I don't know what they were thinking. [17:55] anybody have any experience in stripping down a linux so that it only runs a single program? [17:57] no. why would you want to? [17:59] i'm not sure i do yet [17:59] in fact i'm sure i dont [18:00] but it was just the first thing that came to my head when i was brainstorming ideas [18:00] i want to make a yubikey door lock [18:00] the problem is, in order to do that I have to expose a usb port [18:00] so nothing is stopping someone from plugging in a usb keyboard and hitting ctrl+c [18:00] or ctrl+z [18:00] or ctrl+\ [18:01] or any number of keyboard interrupts i'm sure exist but i'm not yet aware of [18:01] pretty easy to disable those. [18:01] so i'm trying to find a way to disable ALL of the possible interrupts [18:01] you don't even have to do that. [18:01] what do i have to do then? [18:02] write your program to detach from term and start on system start. Then only interrupt it ctrl-alt-del, just disabled that in inittab or modern equiv [18:02] but i need keyboard input in the program. can i do that detached? [18:03] oh, right, its just yubi. [18:03] actually i suppose thats a stupid question [18:03] how about... don't use yubi :) [18:03] since keyloggers have to work somehow [18:10] keyloggers run in bg as root and "sniff" the device. [18:11] your original idea to deal with signals might be easiest. [18:11] just noop handle sigterm and sigpipe [18:11] yea [18:11] thats what i have so far [18:11] err, rather sigint, not sigterm. [18:11] i've ignored both [18:11] and sigquit [18:11] i don't think term or quit can be triggered from KB. [18:12] probably not a great idea to noop them. [18:12] oh, quit can be. ctrl-\ [18:12] it is [18:12] LEARN SOMETHING NEW EVERYDAY! [18:13] i want to noop anything that could possibly be signaled [18:13] no, you really don't [18:13] signals exist for a reason. [18:13] you don't want to un-unixify your process. [18:13] sorry [18:14] anything that could close the program [18:14] you just want to stop the KB from doing things to your process. [18:14] yes [18:14] i want keyboard signals ignored [18:15] ctrl+y also sends sigquit [18:15] nope wrong [18:15] ignore that [18:15] stop [18:16] stop what? [18:16] it sent sigstop. [18:16] oh yea [18:18] mrgoodcat: you doing this in python [18:18] found a simple way to list all signals that can be triggered by kb stty -a| grep intr [18:19] yes i am [18:19] because a lot of what we just talked about are shellisms which may not be true in python [18:19] mrgoodcat: http://stackoverflow.com/questions/5475456/python-built-in-keyboard-signal-interrupts [18:19] http://goo.gl/7ql0FI - linux - Python: Built-in Keyboard Signal/Interrupts - Stack Overflow [18:31] SIGINT and SIGQUIT are the only 2 that can kill python programs from the keyboard. Here is a much simpler solution: http://hastebin.com/ezufitutif.py [18:31] http://goo.gl/fnEAQt - hastebin [18:31] it will print the pid on start so you can kill -9 $PID from another terminal [18:33] would be interesting to toggle the disable of quit, because you really do want the nice cleanup of quit. [18:33] at_exit is your friend. [18:34] you could use USR to turn QUIT disable on/off [18:40] i was thinking of overriding the handler for one of them, and putting it into a sort of 'command' mode [18:40] ctrl+\ then a valid yubikey [18:40] then i could program new keys/terminate the program/anything else [18:41] the program should never quit so i dont really need at_exit [18:42] hehe, *should* [18:43] you going to log to disk? [18:43] probably [18:44] not that i think anybody is likely to try to break into my usb door lock, but it would be nice to have notifications of unauthorized attempts [18:44] i've already got a twilio account set up [18:44] .sms mrgoodcat hey there from twilio :) [18:44] Message sent [18:49] mrgoodcat: any disk writes is a good reason to allow propery quit instead of kill. [18:54] yea i'll probably enable quit in command mode or something. after you're already authenticated. it's very easy to toggle ignoring the signals [18:57] mrgoodcat: You could also make your thing a daemon [18:57] that way it won't be subject to foreground signals [18:57] cmaloney: it needs keyboard input [18:57] though I'd question the use of Linux for this. :) [18:58] it doesn't need to be professional grade security. i've still got a key for the back door and we all know what a joke keys are [18:58] i think it's highly unlikely anybody skilled enough to worry about will be trying to break into my house [18:59] WEll, you'll want it so if something does happen the default state is locked. [18:59] Though again, if there's a fire or something similar you'll want something that can be easily defeated from the inside so you can escape [19:00] eg: don't make it so you'll need ssh in order to get out of your house. [19:00] lol [19:00] my house has multiple doors [19:01] Right, but I'm cautioning you that you don't want the "no wait, one sec" between life and death. [19:01] lol right [19:02] thats the trade-off between fail-safe and fail-secure magnetic locks [19:02] i have a fail-secure one in my closet though so that's more likely to be the one used. I'm not even sure i'm putting it on the front door though. Might use it for a locking cabinet or something instead [19:03] right now I just want to do it for fun. I'm not actually all that worried about the security aspect [19:05] You'll probably want to try it on a non-outward-facing door first [19:07] lol yes [19:07] i'm not putting an untested product on my front door. it may eventually end up on an outside door, but even that isn't guaranteed [19:31] wow. https://github.com/rminnich/u-root [19:31] http://goo.gl/GWqp2c - rminnich/u-root · GitHub [19:47] jrwren: what is that used for? [19:48] mrgoodcat: i don't know, but it is a cool hack. [19:48] yea it is lol [19:57] i can't get it to work :< [20:01] woah i got it working [20:01] it's pretty wild watching it compile the commands as they are used [20:01] ha! nice! [20:01] I didn't try it. [20:03] not sure what use this is though... [20:03] maybe super tiny linux [20:03] build only the tools you use [20:03] right [20:04] AND a dev environment [20:04] its the start of an all Go linux. [20:04] what are the 5 bins by default? [20:05] http://www.ubuntu.com/usn/usn-2372-1/ http://www.ubuntu.com/usn/usn-2383-1/ [20:05] http://goo.gl/4LONqH - USN-2372-1: Firefox vulnerabilities | Ubuntu [20:05] hmm interesting... he only found 1 [20:06] there are no bins by default [20:07] must be the go compilers and linker then. [20:10] cmaloney: I'm heading out. See you around 6-6:30 [20:12] jrwren: just created a new root and ls'd all the directories in the path [20:12] sh and ls are the only 2 there [20:13] and it had to build sh on start, and ls the first time i used it [20:15] i'd suggest NOT running this on a machine you really care about [20:15] it sort of borked my session and i had to reboot [20:16] now i don't know what else might be screwed up :< [20:16] mrgoodcat: OH MY! [20:18] oh no it was just my path [20:18] that would have been my guess. [20:21] jrwren: where did you find that? [20:21] twitter [20:22] friend or someone well known? [20:25] brousch: Awesome. Thanks again! [20:30] I'm not sure I understand that code [20:30] for the all go Linux. [20:30] what don't you understand about it [20:32] Point? Setup? :) [20:32] http://humblebundle.com [20:32] http://goo.gl/ng1UK - Humble Mozilla Bundle: Powered by asm.js (pay what you want and help charity) [20:33] That. Is. Cool. [20:36] cmaloney: it doesn't seem to have a point... the setup is pretty simple though. it requires your go install to be at /go [20:36] then you run ./scripts/getgo [20:36] then you run ./README [20:36] and it will boot the example in a chroot [20:36] it can also be booted as a KVM image though [20:37] ok time to go home [20:37] see you at MUG [20:49] Have fun! [21:13] party [21:20] Evening [21:25] ugh. [21:25] rick_h_: isn't it like midnight there? :) [22:35] exactly, party time [22:38] cmaloney: that accident wasn't you was it? [22:55] mrgoodcat: No, just slow driving over here [22:55] Rain + Michigan driving = slowmofo [22:59] MUG - Michigan!/usr/group (www.mug.org) Live Meeting - Raspberry Pi and Owncloud http://www.youtube.com/watch?v=3v_M6OmuOBU [22:59] http://goo.gl/sHCTUe - October 14th 2014 - Raspberry Pi and OwnCloud - YouTube