[00:02] never fly without them [00:11] * diddledan_ slaps daftykins with a lemon napkin [00:11] "oof" [00:11] so, Juniper trouble [00:11] ? [00:12] have they figured out who did it yet? [00:12] only just heard of the situation in another channel, nasty stuff! [00:13] yeh, the question is how did someone manage to get code into their system [00:14] I mean most likely is they compromised one of their devs laptops/desktops, but then somehow managed to push that change throughm, unless they managed to compromise someone in the release chains dev system [00:16] *nod* [00:17] but it feels nation state level, either that or someone paid off one of the devs [00:18] one of those times when proactive admins patching early have ruined things for themselves [00:18] I mean even if you compromised a devs laptop, and realised you had, you still wouldn't understand their development processes or their codebase [00:19] how old is the version that first had the problem? [00:21] so, a more important -uk question; Russians drink Tea a lot don't they? So the Russian cosmonauts drink tea? So why did Tim have to figure out how to make Tea in orbit? [00:35] lol [00:35] :> [00:35] so what happened at juniper? I've not seen that one yet [00:36] diddledan_: They found a couple of backdoors in their router code [00:36] eep [00:36] yay VM shutdown at last, now i can sleep :) nn \o [00:36] like someone actually inserted a back door? [00:36] diddledan_: They describe it as 'unauthorised code' [00:36] rather than just a mistake? [00:36] ouch [00:36] that's nassy [00:37] http://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554 [01:08] bouncy daftykins [01:08] (30 minutes later) [02:10] WEEE [02:10] bouncy bouncy me [03:30] homeland finale;D [06:28] morning [07:52] morning all === Lcawte|Away is now known as Lcawte [09:16] Morning all [09:18] morning davmor2 === ujjain- is now known as ujjain === john-mca` is now known as john-mcaleely [10:01] yoyo [10:05] yoyo that like a boomaring with a string [10:06] Righton ! [10:06] MOTD === _stowa_ is now known as _stowa === gh00st_ is now known as gh00st === geheimni1` is now known as geheimnis` [10:33] Good morning peeps :) [10:37] So guys when do you all break up [10:37] 23rd === foobarry_ is now known as foobarry [10:41] 22nd for me \o/ [10:41] bigcalm: 'ow am ya [10:43] About 3pm on the 24th :| [10:43] Better than nout [10:43] davmor2: wrist pain, good otherwise ta. Keeping well yourself? [10:44] davmor2: turning into a right yam-yam you are [10:45] bigcalm: dude what did you do wrong 24th buy the boss a copy of Christmas Carol for Christmas ;) [10:45] * davmor2 starts calling bigcalm cratchet [10:45] Boss has been off since Thursday last week [10:46] bigcalm: see definitely something wrong with that ;) [10:46] At least the office is closed until the 4th Jan [10:46] I'm good thanks, bad knee, back, neck and shoulder but other than that good :) [10:48] big and if you are calling someone a yam-yam at least say am instead of are at the end ;) [10:48] morning boys and girls. [10:48] bigcalm: missed the tab ^ === brobosti1on is now known as brobostigon [10:52] I finish 24th too [10:53] treated myself to a new nas at the weekend :D [10:57] which one MooDoo [11:06] Anybody wearing an xmasy jumper this week? I'm sporting some wonderful lines of rain deer and snow flakes [11:06] I went head to to Christmas on Saturday [11:06] s/to to/to toe/ [11:07] red shoes, red penguin leggings, red penguin jumper, red hairbow, red nails, jingly earrings [11:08] all i had for my last d&d game pre crimbo was a baseball cap with reindeer anthlers :-) [11:09] my gf likes big jungling earrings as well, you get the feeling sometimes you will get your eye poked out by them, lol. [11:09] zmoylan-pi: naked D&D? [11:09] jingling* [11:09] strip D&D [11:09] naked gamers, no no, you never get invited back... or so i hear... [11:10] gagh , doesn't look like the cyangoen bug plagueing my phone will be fixed anytime soon [11:10] whats the bug? [11:10] get reboots if using data/call while switching between wifi/mobile zones [11:10] Myrtti: there are some lovely Moomin prints in a local art shop on my way to work. Tempting but difficult to justify the £39 [11:10] walk out of building while receiving or sending hangouts message...reboot [11:10] * brobostigon makes a note. [11:11] bigcalm: mm. I'll just knit my own. [11:11] https://jira.cyanogenmod.org/browse/NIGHTLIES-1715 [11:11] Myrtti: next year I expect a picture of you in, gold shoes, brown leggins, green jumper complete with leds that flash and tree ornaments tinsel etc and an angel hat ;) [11:11] didn't get a full turnout so we played board games instead... small world was a fun game but takes a while to play... https://twitter.com/angryearthling/status/678722117442125824/photo/1 [11:11] foobarry: cm21.1 or cm13 ? [11:11] 12.1 [11:11] Myrtti: you knit Moomin artwork? [11:11] ok, [11:11] bigcalm: arduino/raspi controlled electronic knitting machine [11:11] foobarry: let me test it out here, i am curious. [11:11] Myrtti: :D [11:11] what device u have? [11:12] model: [11:12] falcon, hammerhead, hammerheadcaf, shamu, tomato, trltexx [11:12] Myrtti: man that sounds awesome to be fair :) [11:12] I'll take a photo of the shop window later, if I remember [11:12] foobarry: nexus 4 [11:12] mako [11:13] oh so maybe unaffeted [11:14] davmor2, bigcalm https://www.flickr.com/gp/myrtti/0246j6 [11:14] i dont know, hence i want to see. [11:15] Myrtti: magic :D [11:15] i get it while whatsapp/hangout or while making a call when leaving or arriving at teh office or home [11:15] foobarry: ok, let me make a note an test it, i am curious. [11:15] Myrtti: nice so that was done on an arduino/raspi knitting machine nice [11:15] did u see the link i posted/ [11:16] to teh bug? [11:16] foobarry: what link [11:16] was talking to brobostigon sorry https://jira.cyanogenmod.org/browse/NIGHTLIES-1715 [11:17] ty foobarry [11:21] talking of hacking and nerdy stuff https://www.indiegogo.com/projects/skrolli-a-printed-computer-culture-magazine#/story [12:04] I killed the convo :-( [12:05] :( [12:05] oh i do that all the time ::picks up nerf pistol and blows across tip of barrel:: :-) [12:05] * brobostigon also, [12:27] hmm it's wet out there [12:29] it's worse than that......he's dead jim, dead jim, dead jim :D [12:30] who, where? [12:30] wet-wipes onb the starboard bow, starboard bow, starboard bow, starboard bow... [12:32] mourns the loss of Jimmy Hill, I mean what happens to chinny raccoon now [12:32] pwd [12:32] living the dream [13:05] 8 days holiday left;D [13:06] going to use a week and go to Slovakia and then Prague :) [13:06] well if it carries on the way I've started it so far then I'll just be sitting here yawning for the next 2 weeks [13:06] * penguin42 should get dressed [13:06] no job? [13:06] hm [13:07] mapps: it's holiday! [13:07] ah [13:07] penguin42, penguins should always be wearing at least a waistcoat! [13:08] i still have to work [13:08] work xmas day/boxing day,off today and xmas eve [13:08] SuperEngineer: well we don't go out in public in our dressing gown :-) [13:08] lol [13:09] mapps: Not working until the new year [13:11] nice [13:11] doesnt count as holiday days? [13:13] only hassle is getting to Malaga at 430am [13:13] 6am flight to Bratilava [13:13] UGH [13:13] * knightwise still working [13:13] whilst everybody's relaxed; anybody fancy giving me a clue on the following from gpodder log [it's leaving me far from relaxed] [13:13] been trying to sort for days! [13:13] £48 Malaga -> Slovakia :D how cheap [13:14] [it refers to finding that gpodder, lifrea & rhytmbox all fail on an https rss feed [13:15] [linux voice is the only https feed used, both firefox & chromium reach this & all other https fully ok] [13:15] http://paste.ubuntu.com/14127494/ [13:16] doritos never seem to go stale [13:18] foobarry, they do if use leave you them out in the rain! [13:18] SuperEngineer: have you tried irc chan for it [13:18] * SuperEngineer lols at thought of doritos irc [13:18] WHICH VER of gpodder [13:18] woops [13:20] foobarry, was the one direct from repos [an old version] - now tried with 3.8.5, prpb persists [13:21] 3.8.5 proven normally okay by lv irc chan ...and u-mate version is 3.8.4 [which also works] [13:23] the problem is on this partition. not router if other distro has no prob, not version as newer proven versions fail [13:23] ...was suggested [here] a couple of days ago to be a python library problem [13:24] want me to try? [13:24] whichurl? [13:24] but.... still not tracked it down [13:24] foobarry, coming up [13:25] https://www.linuxvoice.com/podcast_mp3.rss [13:25] & https://www.linuxvoice.com/podcast_ogg.rss [13:25] both [13:25] same [13:26] perahps its not the https but a bad rss file? [13:26] foobarry, same fail? [13:26] HTTP request sent, awaiting response... 200 OK [13:27] same rsult yeah [13:27] wget the rss file and it says http [13:27] Connecting to www.linuxvoice.com (www.linuxvoice.com)|104.28.7.18|:443... connected. [13:27] which buntu are you on [13:27] HTTP request sent, awaiting response... 200 OK [13:27] elementary freya 0.3.1 which is the last LTS [13:27] so no fail! [13:27] of ubuntu [13:28] gpodder does fail [13:28] oooooo! [13:28] same as you [13:28] bug! [13:28] http://pastebin.com/3PEdkzcG [13:28] however [13:28] try hosting the rss file on a http server [13:28] and adding it [13:29] in case its another issue [13:30] [that log looks familiar btw!] [13:30] from an empty setup [13:30] hold on a sec [13:30] trying something else [13:31] doesn't work using vocal [13:31] another podcast app [13:31] please check that the feed is correct and that you have a network connection. [13:31] hmmmmmmm [13:31] i think the rss file is bad [13:31] can u give me a known good rss link? [13:31] but ok in other distros! [13:32] really? [13:32] [_LOG_LEVEL_WARN 13:32:01.230493] FeedParser.vala:291: Error opening file https://www.linuxvoice.com/podcast_mp3.rss [13:32] ubuntu mate 15.10 [13:32] [_LOG_LEVEL_INFO 13:32:01.230537] Library.vala:329: New podcast found to be null. [13:32] vocal uses different code. written in vala [13:33] or was it denied access and therefore found nothing? [13:34] if not, python & vala both failing [13:34] must be a different library needed somewhere is my current thought but at that point, I dead end [13:34] i copied the rss file to an http server [13:34] failed [13:35] so bad file, that some distro are able to parse? [13:35] velly interlestink!!! [13:36] thatidea ... a definite possibilty as this is now longer just my fail! [13:38] Could it be any thing to do with [lv's] switch to open https cert project me wonders... all ok immediately before [13:38] https://validator.w3.org/feed/check.cgi?url=https%3A%2F%2Fwww.linuxvoice.com%2Fpodcast_mp3.rss [13:38] thinks so. [13:39] also [13:39] see my pm [13:39] where i copied the file [13:39] just copying that link.. time to get back in touch with Wimpey! [13:40] looks bad for 2 reasons [13:40] 1) ssl [13:40] 2) doesn't parse v well [13:40] bullseye... the open cert! [13:41] ...only readable by some stuff, not all stuff? [or corrupt cert?] [13:42] well 2) might fail to parse. [13:42] try something like the linux action show rss and it parses fine [13:42] linuxvoice has multiple errors [13:42] raiders, bbc1, in a minute. [13:43] openssl s_client -ssl3 -connect www.linuxvoice.com:443 [13:44] also check bug 1475228 [13:44] bug 1475228 in openssl (Ubuntu) "openssl/curl error: SSL23_GET_SERVER_HELLO:tlsv1 alert internal error on TLS only configured server" [Undecided,Expired] https://launchpad.net/bugs/1475228 [13:47] https://www.ssllabs.com/ssltest/analyze.html?d=linuxvoice.com&hideResults=on is happy with the site [13:48] "I don't get this issue in wget, curl or openssl [13:48] But I do get this issue in python" [13:48] thats mentioned in bug 861137 [13:48] bug 861137 in openssl (Ubuntu) "Openssl TLS errors while connecting to SSLv3 sites" [Undecided,Confirmed] https://launchpad.net/bugs/861137 [16:03] 2 eps left on fargo; [16:03] :D === Lcawte is now known as Lcawte|Away [17:23] foobarry: do you happen to know which lib the app is using I've hit similar issues with software center and with epiphany (gnome web) which use the strict gnu ssl utils [17:42] why did I miss this around election time?! https://www.facebook.com/thegreenparty/videos/10152735542355785/ [17:44] you can feel free to ignore the promotion of the greens, it's the song that's awesome [17:52] diddledan, you missed it because you weren't eating your greens [17:52] he couldn't eat a whole politican... [17:52] lol [18:01] politicians vary a lot in how much meat they have [18:02] but green ones lean towards stringy... [18:03] zmoylan-pi: Yeh but healthier than eating red meat [18:03] they may vary in meat but not so much in how much content they have [18:04] i dunno tofu fed doesn't sound good... [18:04] [although they *do* seem to have the same type of content] [18:04] not saying what that content is. This is a family channel ;-) [18:05] moooooooooo [18:05] SuperEngineer: I just assumed the commons served a lot of beans [18:05] you got the idea penguin42 [18:15] Bacteria that resist the antibiotic of last resort colistin have been discovered in the UK. [18:15] but, they spelt "privacy" incorrectly! === directhex_ is now known as directhex [20:03] aarghh dedrm on ubuntu and kindle for windows is ridiculous [20:03] i've done it once before, unsure why it no longer works [20:03] "Could not retrieve Kindle for Mac/PC key. [20:17] Amazon might have changed things? [20:18] possibly [20:46] http://www.ebuyer.com/709697-sandisk-plus-120gb-sataiii-2-5inch-ssd-sdssda-120g-g25 [20:47] i got a £150 1T sandisk from dabs [20:47] i think sandisk are purging old ranges through the channel [20:47] nod, I got the ~£28 120 through dabs [20:48] ah, but ebuyer don't have any free shipping [20:50] oh but they do if you're over #50 and the discount code applies to multiple items [20:58] right, that's 2 of those ordered, one for this old core2duo, a 120GB SSD should speed it up a lot, and I'll try and persuade my dad to use one [20:58] just in case it wasn't obvious, Microsoft's System Center Virtual Machine Mangler (SCVMM) and Hyper-V are horrible :) [20:59] daftykins: Since I get paid for qemu/kvm dev (but not the management side of it) I would be interesting in knowing what in particular is so broken on them [21:00] well, requiring the host running SCVMM to be a domain controller, with SQL Server to even install the product is a real pain [21:00] after that, to have the Hyper-V host make use of a shared ISO required some permissions dancing that didn't seem to be necessary [21:01] the shared ISO one is a bit odd [21:01] and you'd expect it to be able to use an existing domain controller [21:01] well i don't have one as i'm just running this at home for testing [21:01] ah ok, so I guess they expect you to be 'enterprise' [21:02] pretty much! [21:02] also went down the SQL Express 2012 route before discovering express isn't allowed [21:02] not enterprise.... [21:03] ;) [21:03] well, standard editions of Windows Server and SQL Server are ok [21:04] i'm using evaluation copies of everything atm to test [21:04] and then put it into production and everything explodes in a few weeks? [21:05] basically my old College has had a Hyper-V host for the IT lecturing department to use for a few years now, though back in 2008 i said Hyper-V and SCVMM were so pants they weren't appropriate, however the IT support boss was pushing it in order to experiment in the teaching staffs' server before using it himself [21:05] *on the teaching... [21:05] i've been asked now, years later, to manage that server [21:06] err. so they want you to support something you told them you wouldn't support?! [21:06] i need to have a chat with my ol' lecturer colleague to find out where it's lacking and what he needs really, but thought i'd get a jump start [21:06] that's fun [21:07] well i was IT support myself back then, but i later quit [21:07] now it'd be a new role of a technician on the lecturing side, i think [21:07] the head of IT lecturing just simply doesn't have enough time to get to grips with all this i think [21:08] when i taught there myself 4 years back, i was trying to switch it to VMware instead, as i found a free educational license system [21:08] unfortunately bureaucracy and staff politics got in the way [21:11] it'll be interesting to see how they're running it now anyway, when i was teaching they had the VM storage on a single 1TB disk and the OS installed on a RAID10 array ;) totally backwards. [21:12] the head of IT support tried to blame me for when i was there in 2008, but server 2008 R2 didn't exist at that time - so it was impossible for me to have misconfigured a future OS :D [21:12] plus i know RAID just fine [21:26] and now, for food! [21:26] that's a good idea === Xack is now known as CaveJohnson === CaveJohnson is now known as Xack [22:41] penguin42: do you think a KVM setup is appropriate to regular spin-ups of a class-load of different OSs for kids to work on? [22:41] they kinda need their own control over start/stop really === Lcawte|Away is now known as Lcawte [22:47] daftykins: qemu/kvm can do that, the tricky bit is setting it up so that they each can't nuke each others VMs; there are loads of front ends to it; I'm not sure which is easiest to do that with [22:48] mmm, i feel like the user accounts on VMware would make this easiest [22:49] to my mind ESX would just be $client_program (on all users' systems) -> server ; done. [22:49] daftykins: I suspect proxmox can do it [22:50] daftykins: Or a one machine openstack setup, but I suspect that's possibly too complex [22:51] mmm, i don't even know how my fellow lecturer gets around licensing hassle for the OSs the students install [22:51] at best most Windows clients would give you that 30 day period then that'd be it (although some can be tricked to extend to 120 days) [23:03] * zmoylan-pi learned spreadsheets in 80s on illegal lotus 123 clone called vp planner :-) [23:05] Hey folks, question someone here may know about, I haven't been paid salary in 2 months so I'm going to find a new job, do I have to give notice to my current employer? [23:05] Was hoping to not give him notice in the hopes that he actually pays me. [23:07] the 'murican? :( hrmm not worth calling up first? [23:08] depends on your contract i guess [23:08] daftykins: calling up? I've been asking to be paid for months, over a week now I've been refusing to work until I get paid [23:09] Had partial payment for Sep-Oct, nothing for Oct-Nov and nothing for Nov-Dec. Left me penniless for christmas, so yea screw that :P [23:09] >_< [23:09] Azelphur: I think you need to ask a legal person; but I'd write a letter saying that they're in breach of contract and you therefor believe you don't need to give notice [23:10] Azelphur: And then file a small-claims court thing asking for the money [23:10] penguin42: well the idea was to find a new job and keep them in the dark, so that they think I'm still an employee and eventually pay me [23:10] (and then once I have everything they owe me, say goodbye and tell them I already have a new job) [23:11] Azelphur: No, I don't think that's a good idea; once you actually start a new job it would be very messy [23:11] I see [23:11] suppose that means giving notice then [23:11] Azelphur: if they've not paid you I say that you ask whether they're solvent and if not ask whether they should wind themselves up [23:11] Azelphur: Do they have money? [23:12] I see [23:12] amusingly my boss just sent me another message promising me payment tomorrow, don't trust it worth a light though, as I say been months of excuses :) [23:13] Azelphur: At the moment they're the only one whose done anything wrong, so if you keep it strictly like that you're in a much better position; if they don't pay you again though I don't see why you should have to give notice [23:13] Azelphur: But you must tell them if you stop working for them [23:13] Azelphur: still, IANAL [23:14] penguin42: again? they are 3 months behind, one was partially paid, two haven't been paid at all [23:14] how many times do they need to not pay me xD [23:14] does uk have a citizen advice bureau? might be a place to ask questions? [23:14] yes [23:14] yea good idea [23:16] you'd want to contact them sharpish before crimbo [23:16] Azelphur: But I'm just saying that you should make sure you look as spotless as possible, dont give anyone any reason to make you look like it's your fault [23:16] penguin42: yea fair enough [23:16] will do [23:17] and they might even have a website that has a decent faq [23:33] thought you all might find this fun: http://www.techworm.net/2015/12/microsoft-wants-you-to-train-using-its-rival-linux.html [23:35] this site is so poorly worded, ermagerd [23:35] something i found odd about Hyper-V, it doesn't support audio... you have to RDP into clients to get working sound.