[00:00] what benefit does the fence give you that the wall can't do on it's own? [00:00] none [00:00] bingo [00:00] so don't bother! [00:00] fences are unix users and walls are containers [00:00] it's extra work just to use the fancy shiny [00:00] no, walls are unix users. fences are sandboxes [00:00] lol no [00:01] unix user permissions don't cut it any more [00:01] and we're back where we came in [00:01] why? [00:01] why do you think unix users are crap? [00:02] [00:02] unix user permissions cannot stop some random fart app from deleting your ~ [00:02] what about them is unfit for purpose [00:02] yes they can [00:03] no, they can't [00:03] they just don't the way people use them [00:03] so you are suggesting that people should run eery app as a different user account? [00:03] I'm not advocating it [00:04] this has always been the scary gap in permissions for me [00:04] people say unix is malware-proof because random trash can't get root (usually) [00:04] the unix user model being unsuitable for modern computer users is not a controversial idea [00:04] which is completely back-to-front. I don't care if it gets root. I can reinstall my OS. [00:05] I care if it trashes my pictures. which are owned by my user, so are completely unprotected by 1970-style permissions [00:05] exactly [00:05] and once you've solved this problem, whatever way you do it, the new thing will obsolete unix users [00:05] no it won't [00:06] the new thing will isolate one app from another, not one user from another [00:06] unless you're suggesting everyone installs modern warfare in a separate sandbox just for them? [00:06] (hint. modern warfare is 55GB) [00:07] the binaries, sure [00:07] modern filesystems can deduplicate that stuff without needing to know about users [00:07] deduplication takes a LOT of RAM and CPU [00:09] I don't believe my phone has that much grunt [00:09] (and games on phones are often larger than 1GB each, so don't moan that the argument is moot) [00:10] wrong. all it takes is copy-on-write [00:10] and that takes only a tiny amount of resources [00:10] er. no. [00:10] download the game twice you have the game twice [00:11] right, why would you need to download it twice? [00:11] because I download it in my private app area which isn't a user account, and my brother downloads it in his private app area which isn't a user account [00:12] why would you do that? [00:12] you advocated containers earlier - inside a container my brother can't access the app I installed in my container [00:12] i mean you can do that with unix users, if you install stuff in ~, but why would you? [00:13] no [00:13] each container only runs ONE app [00:14] that's the whole point [00:14] in which case how do we both access the same app at the same time with different data?! [00:14] okay. [00:15] you know VMware appliances right? [00:15] each app is a VMware appliance. anyone can run it. when you run it, it saves the differences to a private file for you [00:15] your host OS has some concept of users, but it doesn't need unix users, or even a filesystem [00:16] the OS that runs inside the containers doesn't need to know about user accounts AT ALL [00:16] it only needs to know "this is the base image and this is the user's changes" [00:16] ie it's transparent to the guest [00:17] and for sharing files between containers you use something like ubuntu's content hub [00:17] which would be built into the host [00:19] and of course the containers can build on top of each other [00:20] so now lets ask the question again. in what way, are unix users not suitable for the host to separate the users? [00:20] they're fine for that [00:20] the point is that you don't need them in the guest. at all [00:20] and they just add unneccessary complexity that you don't need [00:21] also, they are actually MORE than you need on the host [00:21] because the host doesn't even need a traditional filesystem, let alone permissions [00:21] so on the host you would replace them with something simpler [00:21] simpler is better, less attack surface [00:22] new is worse, unproven [00:22] that is also true [00:22] however, we can't just end all progress because "new is worse" [00:23] no, but we're talking about things that can already be done with preexisting tech, so why reinvent the wheel [00:24] this is simply the logical conclusion of what happens when you container-ize everything [00:24] this stuff can't be entirely done with existing tech, that's the point [00:24] it's still being created as we speak [00:26] apparmor has existed for years. user-level separation has existed much longer. containers/vms have also been around for ages. the only thing that didn't until recently was content-hub but you don't need that, you _can_ do it with standard unix filesystems and permissions [00:27] for that last one. read, ACLs and/or judicious bind-mounting [00:27] yes, you can, if you don't mind the technical debt incurred by using 50 year old technology in a way it wasn't intended :P [00:28] at some point though you are going to have to refactor everything to not suck [00:28] I still don't get why you'd want users on a phone at all [00:28] shauno: in the most abstract sense, "guest" is a user [00:29] just because it's a feature you'd never use doesn't mean someone won't find it really useful [00:29] well, I mean I don't see much use for a 'guest' either [00:29] the point is you wouldn't expose these users to the... user [00:29] unless you were actually making a multiuser mainframe for some reason [00:32] I seriously hope you don't think that user-less is the way to go on the server [00:32] what kind of server? [00:32] that's probably the best example of where "container all the things" is already happening [00:32] for argument, a web serving host [00:32] exactly [00:33] okay, say you have a website which consists of one container running mysql, and one container running apache/php/wordpress [00:33] why do you need users? [00:33] given that each server is running exactly one process, how are you even going to make use of more than one user? [00:34] because I want the dba to be able to restart apache and I want the sysad to be able to restart apache and mysql and I want myself to be able to grant and revoke those permissions [00:34] dba - mysql, not apache [00:34] but you get the point [00:34] if you want to restart then, you just reboot the container [00:34] there is no need to ever even log into the containers [00:35] so you have users in your host/control node and nowhere else [00:35] but I want the dba to not be able to restart apache [00:35] bingo. you have users [00:35] yes [00:35] you still have users [00:35] just not inside any of the containers [00:36] where "container" implies an entire virtual machine running a totally isolated operating system which has no concept of users [00:38] so when my php app gets pwned the guy that now has access to the server is de-facto root and therefore can exploit any weaknesses in the lxc subsystem with impunity to elevate to host-root? [00:38] or otherwise access the kernel [00:39] if you have no users you have no root user [00:40] yes, you do, because the lxc host kernel has users [00:40] just because you choose not to assign uids doesn't mean the kernel doesn't track them [00:40] who said we're using lxc? [00:41] uml then? [00:41] chroot? [00:41] this weakness of lxc happens BECAUSE it re-uses unix users [00:41] we would be using a yet-to-be-written hypervisor and a yet-to-be-written single user guest kernel [00:42] specifically designed to be used this way [00:42] that's not a container. that's a vm [00:42] it's more like a hybrid [00:42] it isn't quite like anything that currently exists [00:42] semantics, yes, but container is a specific thing that reuses the host kernel [00:43] well okay, forget containers. what we're talking about is a specially designed system where the host and the guest and more tightly coupled than you expect with a VM, but less so than with a container [00:43] that is, the host and guest kernels are aware of each other but not the same [00:44] the guest kernel would be extremely simple, it would not need any device drivers for example [00:45] that would be provided by the host, where appropriate [00:46] it wouldn't need to know about block devices and such, the host would just say "this is your read-only root filesystem, and this is your read-write filesystem" [01:36] awesome, i have input now [01:47] \o/ [01:51] reconciling the iterative game loop with object oriented event input [01:55] ooh, ooei :-p [02:46] ^quit message as bad as brand-specific email signatures :( [02:47] related: hang on, let me find the email and figure out if there's an archive link for it - I received it a few days ago and it made me laugh [02:51] sent to ubuntu uk mailing list in reply to popey's attempt to reinvigorate the loco - referencing open source in general and how to get more people using ubuntu: https://lists.ubuntu.com/archives/ubuntu-uk/2014-December/038123.html [02:51] it was head-smacking time for me when I read it [02:52] "digital eagles" 0o [02:52] yeah I didn't get that one either [02:52] when you see it... [02:53] *nod* pretty amusing to be commenting like that then use hotmail :( [02:53] then possibly a Windows only client too [02:53] it's pretty explicit: Sent from Windows Mail [02:55] yeah i meant that for that part [03:23] http://www.nytimes.com/2014/12/18/world/asia/us-links-north-korea-to-sony-hacking.html [03:27] I like the last paragraph which alludes to an all-out cyberwar - that could be fun to watch.. I wonder if american GIs will be holed-up in a darkened bunker with the only illumination coming from the many computer screens showing the progress of their attacks and counter-attacks and the state of the nation's cyber defences [03:32] ;) [03:32] Wargames (1983) [04:18] for anyone who likes google play movies/tv - they're giving away a free movie right now - they gave me the first "sherlock holmes" movie with iron-man robert downey jr (I'm unsure whether they're giving everyone or whether it was just me)# [04:18] everyone that title** [04:20] I'm just about to watch "lucy" now [04:23] hrmm something new to the shaun the sheep thing last time :> [04:24] yeah, that shaun the sheep is sat in my account never to be watched [04:24] it was fun! [04:28] ah yesh sherlock holmes [04:28] but it won't let me buy a free item because my card has expired [04:35] hmm [04:35] that's weird - you can't get a freebie unless they have your balls? [04:36] sorry. family. [04:36] tsk tsk === Hornet- is now known as Hornet [06:12] popey: [06:12] popey:i have a problem with wifi. [06:13] and only popey knows how to fix it? [06:13] diddledan:you can help me. [06:14] I can? thanks. [06:14] morning [06:14] allo mapito [06:14] diddledan: wifi is not able to enable [06:14] mapito, have you gone italian? [06:14] no heh [06:14] just my alt nick [06:16] theoretically I don't need to do any work today - everyone else is heading off on the company xmas party, but for some reason there's a requirement for a passport, and I didn't get around to applying [06:16] my old one is out of date [06:16] why a passport [06:16] where you going [06:16] no idea [06:17] something they're getting up to requires it and the person who organised it hasn't let on what the plan is [06:18] diddledan:help me please... [06:18] bujji, I need more to go on than just "is not able to enable" [06:19] bujji, my suspicion is that you have a hardware switch which is in the wrong position [06:19] bujji, you're more likely to find someone who knows about these things in #ubuntu at 6:20am in the uk [06:21] diddledan: i click on network section-->there i cant be able on the wifi [06:22] that's not very descriptive [06:23] (or if you're using the MS Word spelling and grammar checker and you want to avoid receiving that damned passive voice alert on every single phrase, then "that's very undescriptive" [06:25] diddledan:I cant be able to enable the wifi in my ubuntu desktop.I tried to use fn+f2 for enable the wifi,but its not working...hope you got my point. [06:26] bujji, has it ever worked? [06:27] diddledan:yes,It worked before. [06:27] diddledan, sounds intriguing needing a passport. [06:28] bujji, what did you do differently this time that you didn't on previous occasions? e.g. pressing that fn+f2 combo you mentioned [06:29] also did you press fn+f2 before trying anything else expecting it to magicly work or did you use ubuntu's networking menu first and resort to the fn+f2 when you couldn't get it working? [06:30] diddledan: fn+f2 is for enable the wifi(short cut).I tried to check manually but its not working. [06:30] bujji, which did you do first [06:31] diddledan:fn+f2 [06:31] bujji, that'll be your problem then [06:31] you've told the hardware to turn off the wifi [06:32] i went to network options to enable the wifi,there i cant be able to enable. [06:32] gui [06:33] once you've done that no amount of ubuntu cleverness can work around it - you need to turn the chip back-on such as by rebooting (if that works), pressing fn+f2 again once (and praying) or cursing and swearing because neither of those two worked and you realise there's no other way to enable the chip without going into windows [06:35] i tried $ifconfig wlan0 up [06:36] fn+f2 is specific to your laptop and doesn't signal ubuntu at all - it completely sidesteps the operating system and tells the hardware to turn off in such a manner that the operating system cannot talk to it anymore [06:37] it is a shortcut specification to enable wifi. [06:38] no amount of fiddling with ifconfig or any other ubuntu utility will be able to do anything with the chip while it's turned off [06:39] you might be able to get one of the utilities to report that the hardware is turned off but I can't remember which utility or how to get that info [06:39] even though it can tell you the hardware is turned off the utility cannot turn it back on, nothing in ubuntu can [06:40] what card has he got [06:40] no idea, he said it worked previously and then he pressed the magic keycombo and it stopped working [06:41] or rather didn't enable. [06:41] his words^^ [06:42] what card bujji [06:42] afaict none of those magic keycombos ever signal the operating system with their implementation being either entirely hardware or bios driven [06:43] mapito:how can i found? [06:44] lspci i think\? [06:44] yes, `lspci` [06:45] might be [06:46] mapito:help me on this. [06:49] a random unnamed googler says that google is going to have a "disastrous" 2015 [06:49] https://www.linkedin.com/pulse/googles-very-rough-transition-nicholas [06:49] excuse my language, but I think that's a load of traffic cones! [06:49] (bollards) [06:50] ex googler at that [06:50] bujji, run lspci sheesh [06:51] mapito:what this command do. [06:53] mapito it gives me different options. [06:55] mapito:hey [06:57] https://fbcdn-sphotos-b-a.akamaihd.net/hphotos-ak-xfp1/v/t1.0-9/1510557_316261935243706_2025905013926039893_n.jpg?oh=729535754c86c0a45d45abc312b30dd3&oe=553934A0&__gda__=1430421819_0f33a99f581f80557f0f1c73261cc4a0 [06:58] diddledan:? [06:58] yes? [06:59] diddledan:whats that url. [06:59] it's an image [07:00] okey [07:04] mapito:https://www.youtube.com/watch?v=4VVosf9p5GM [07:04] diddledan:is this work for me. [07:04] so u fixed it? [07:04] cool [07:05] lspci wont give options but it will tell you what your wireless card is [07:05] so you can find out more etc [07:06] mapito:not yet [07:07] find out what the card is and look at the ubuntuforums [07:07] ubuntuforums.org v helpful [07:12] mapito:no luck [07:14] what card is it according to lspci output [07:14] put that and ubuntu into google:D [07:14] i dunno what card it is [07:15] what's the collective noun for a group of velociraptors? [07:15] I thought maybe a herd, flock, gaggle or murder [07:16] I came up with them in that order [07:19] mapito:how can i check that card and all [07:23] mapito:hey [07:33] mapito:my output of rfkill [07:33] mapito:rfkill list all [07:34] mapito: o/p 0:phy0:wireless LAN [07:34] soft blocked:no [07:34] hard blocked:yes [07:36] https://www.youtube.com/watch?v=YHIWcRU38ls I'm laughing hard [07:36] bujji, like I said 2 hours ago! [07:37] hard blocked:yes means you turned it off [07:39] :mapito:how can i turn it on. [07:41] diddledan:how can i turn on [07:41] I told you that ages ago [07:41] [06:33:51] once you've done that no amount of ubuntu cleverness can work around it - you need to turn the chip back-on such as by rebooting (if that works), pressing fn+f2 again once (and praying) or cursing and swearing because neither of those two worked and you realise there's no other way to enable the chip without going into windows [07:43] I reboot the system and did the same as fn+f2 [07:43] diddledan:but no luck [07:44] then I don't know [07:45] diddledan:chip back-on ?? [08:08] diddledan:success [08:09] diddledan:thanks for your help [08:09] how did you fix it? [08:09] diddledan:http://ubuntuforums.org/showthread.php?t=2220855&page=4 [08:12] diddledan: you are helpful-->http://ubuntuforums.org/showthread.php?t=2220855 [08:14] diddledan:happy christmas [08:16] diddledan:bye.see you again.)) === msm is now known as Guest89995 === Lcawte|Away is now known as Lcawte [09:34] Good morning peeps :) [09:37] morning [09:39] hi [09:57] morning all [09:57] bigcalm: how's life and have you built the super star destroyer yet or better still figured out where the hell you put something that big [09:58] Hi davmor2 [09:58] davmor2: you're more interested in the SSD than I am... [09:59] bigcalm: that's cause I was seriously tempted to buy till I realised I'd have to put it somewhere and you are the only person I know who has it :) [10:00] Good morning all; happy Free Shipping Day! :-D [10:00] bigcalm: I'm living my dream of building it though you ;) [10:02] * davmor2 wraps JamesTait and his family and sends them to South Africa with his free shipping......Good luck getting back but have a lovely family Christmas while you are there :) [10:02] * JamesTait tries to hug davmor2 but can't get past the packaging. [10:02] * davmor2 throws in JamesTait laptop so he has no excuse not to work [10:03] Hah! [10:03] JamesTait: I'm not getting you out of work and a free holiday [10:04] davmor2: https://twitter.com/bigcalm/status/545519810059436032/photo/1 [10:04] * JamesTait adds davmor2 to the Christmas card list. [10:04] My office isn't very large [10:05] bigcalm: suspend it from the ceiling is as far as I got trying to figure out where the hell to put it but when you realise it is 8KG that isn't the best option out there :) [10:06] That's a lot of plastic [10:07] bigcalm: the other option is get a bit of ply wood cut to the right length and width suspend that from the ceiling and then put the model onto that, that would work [10:08] bigcalm: how are you with measurements and a drill? [10:09] and finding joists preferably [10:11] bigcalm: also you seem to be overlooking the width of it :) [10:12] I thought it was long and thin [10:12] What's the width? [10:12] bigcalm: it is wedge shaped the widest bit will be your issue [10:13] Which is? :) [10:20] bigcalm: you know what nothing says only mentions it's length but I'm assuming about 40 cm's looking at the proportions in pictures [10:22] Kitchen table it is then [10:23] s/Kitchen/Dinningroom === zmoylan-1i is now known as zmoylan-pi [10:23] 1i? 1 x sqr(-1) ? [10:24] bigcalm: if I hear nothing from you in the new year I'll send flowers to the crem ;) [10:24] Heh [10:24] Might be best if I leave it boxed [10:25] http://www.nooooooooooooooo.com/ [10:25] seemed somehow appropriate [10:27] bigcalm: show that to Hayley and say I ask Lord Vader if I should leave it in the box this was his reaction :) [10:34] Cute [10:43] morning boys and girls. [10:45] bigcalm: davmor2: Azelphur: I think this may be for you https://www.facebook.com/video.php?v=10152383682505146 [10:47] Sorry, I lack flash [10:47] DJones: synopsis? [10:47] Christmas singing stormtroopers [10:48] Ah [10:48] Doing santa clause is coming to town with excerpts from the original star wars movies [10:48] Cute [10:49] bigcalm: try https://www.youtube.com/watch?v=rRSepEkYsMA [10:49] and you don't 'lack flash' you 'secured your os' :-P [10:50] Grr [10:50] ctrl-w with the wrong window having focus [10:51] use an irc client that doesn't allow ctrl-w to close the window? or remap the combo? [10:51] Never been much of a problem, just one of those things [10:59] bigcalm: did that one play for you? [11:10] davmor2: yes, youtube works for me. Facebook only uses flash for videos [11:17] bigcalm: you use chromium or chrome then right? [11:25] Chromium [11:30] Morning [11:42] bah, apache eating all the ram and swap again [11:42] Mem: 473624k total, 468804k used, 4820k free, 112k buffers [11:42] Swap: 262140k total, 262140k used, 0k free, 5232k cached [13:23] i miss wobbly windows :( [13:38] \o/ Sky have updated their SkyGo app to work with Android 5.0 === Lcawte is now known as Lcawte|Away [14:21] I still have wobbly windows [14:23] Only when the window blows VERY hard here [14:25] I'm on kubuntu. You can turn on wobbly windows under "desktop effects" === Lcawte|Away is now known as Lcawte [15:11] i miss kde 3.5 [15:13] last time i had wobby windows i found someone stuck a fridge magnet to my crt [15:23] Arrgh [15:23] I remember that [15:23] Magnetized CRT grille masks [15:24] Trying to degauss them with an electric razor === Lcawte is now known as Lcawte|Away [15:24] or pressing the degauss option on high end monitors. *bong* [15:24] *clangggggg* [15:24] *click* [15:24] *sproink* [15:24] That really did give you wobbly windows [15:26] Someone should do a "degauss" toy for modern desktops [15:26] Just makes a *donk* noise and makes the screen wobble and blur a bit [15:27] zoinnnnngggtick [15:27] "wobbly windows" is right about where I gave up on linux on the desktop [15:27] add it as option to screen savers options... [15:27] shauno: but beryl, and compiz...so much fun, so much breakage [15:29] diddledan, did that guy fix his wifi? [15:41] mapito, yeah, he didn't explain what he did but just pasted a link to an ubuntuforums page with many many many posts when I asked him how he did it [15:41] cool [15:43] so he didnt need popey:P [15:43] first thing he said when he came here heh [15:48] * popey isn't needed anymore [15:50] popey, it was six o'clock this morning - he was adament that you were the only guy who could help him and seemed to think you're at his beck and call 24/7 [15:50] hah [15:51] hm. gives me an idea. we need to start selling maint contracts [15:51] the real world has taught me that it doesn't actually matter if popey can't deliver what sales promise ;) [15:52] shauno, good idea [15:53] I just don't get why non-english speakers seem to find this room over either their own language room or the main #ubuntu [15:54] having a paywall may help in this regard, or at least give some relief from the pain [15:54] it's more active and turns up in more google searches? [15:54] I suspect it's something in a translation somewhere [15:54] eg, if xchat has -uk as the default for en_GB (vs C/en_US) [15:54] noobies should be asked for a 11 digit prime number before their questions are answered? :-) [15:55] well.. [15:55] there's google helpouts [15:55] which I keep meaning to try [15:55] I'm still waiting for my invite to that [15:55] https://helpouts.google.com/search?q=ubuntu [15:56] seems there are people offering help including SuperMatt ☻ [15:56] so the various countries that still prefer English over American English - if they opt to install their OS in English, they may get uk-leaning defaults? [15:57] * zmoylan-pi plans a hiberno english distro... for culchies AND jackeens... :-) [16:01] I'm still trying to figure out how to modify /etc in this lakka/openelec thing :( [16:02] I'm not doing that any more because work+dancing+social life = no time for anything else [16:03] if you could convince your bosses that you could work from a club you could work dance AND socialise more efficiently :-) [16:04] hahaha [16:04] well there aren't many dance clubs which run 9-5 [16:05] presentations at meetings via telecommuting would be neat :-) [16:05] 'dancing tech support' sounds like what Hangouts was meant for [16:05] pfft [16:16] where on earth have I picked up "cat directory/" from? afiak that only works on Hurd, but my fingers keep typing it [16:16] do you in fact *have* a cat? :-) [16:17] heh, no [16:17] iirc on hurd, cat against a folder will list the contents. I can't remember it working anywhere else though [16:18] for some reason I've tried to do this multiple times per day, and I can't figure out why [16:18] is it a subliminal desire to acquire a cat? :-P [16:18] lol, no. pets are only slightly less evil than children [16:21] Looks like Helpouts has been killed for the UK and EU by #VATMESS : "We've updated our Terms of Service. Providers from Ireland or the United Kingdom may only offer free Helpouts. Customers in the EU may only take free Helpouts." [16:25] I'd assume it's temporary, unless it was already a dying product? [16:28] Wouldn't be surprised if it was on purpose to cause a stink, they can certainly afford it [16:28] Hey, that's a point - doesn't this affect Ubuntu sales / donations from the download page? [16:28] i would think canonical are already vat registered? [16:29] In all of the EU countries? [16:29] you don't need to be vat registered in every country [16:29] right, that's the whole point [16:30] under the old rules you needed to be vat registered in every country [16:30] Presume they still need to keep track of where everyone comes from - will there be a "I [16:30] under the new rules you need to be vat registered in your home country if and only if you would be required to be vat registered in a country you sell to [16:30] am in this country" dropdown [16:30] ? [16:30] pretty sure donations aren't subject to vat [16:31] the new change is simply that you have to charge the vat rate for the buyer's country, rather than the seller's country [16:31] and the reason people are unhappy with this is because previously they just didn't bother being vat registered in other countries than their home country, and there was nothing those other countries could do about it [16:31]