/srv/irclogs.ubuntu.com/2016/03/14/#ubuntu-touch.txt

=== trfl is now known as edd
=== edd is now known as ene
=== xiinotulp is now known as plutoniix
=== chihchun_afk is now known as chihchun
=== chihchun is now known as chihchun_afk
=== chihchun_afk is now known as chihchun
=== ecloud_ is now known as ecloud
=== KathyReid_ is now known as KathyReid
=== Undertasker1 is now known as Undertasker
=== Saviq_ is now known as Saviq
=== Michaela is now known as Ciblia
=== marlinc_ is now known as marlinc
=== thelionroars1337 is now known as thelionroars
tbostonmoin09:31
tbostonI installed Android 5.1 on my Aquaris E5 HD Ubuntu Edition09:31
tbostonnow I was wondering how I could get back on Ubuntu Touch09:31
tbostonsince I can not unlock the Bootloader I guess09:32
=== shuduo is now known as shuduo-afk
oSoMoNSaviq, hey, can the milestone for bug #1433138 be updated please? it wasn’t fixed in ota9.109:50
ubot5bug 1433138 in Canonical Pocket Desktop "Under Mir, physical keyboard’s Return key does not work within web pages" [Critical,Fix committed] https://launchpad.net/bugs/143313809:50
lotuspsychjetboston: did you read the install guide from topic?10:00
tbostonlotuspsychje: yes I did, installing Ubuntu in a VM right now10:01
=== essembe is now known as sbeattie
lotuspsychjetboston: ok, good luck :p10:03
[tj]moin11:06
=== lilstevie_ is now known as lilstevie
abeatoogra_, hi, I have this MP for touch ramdisk: https://code.launchpad.net/~phablet-team/ubuntu/vivid/initramfs-tools-ubuntu-touch/support-adb-lollipop/+merge/28891711:49
abeatoogra_, mind taking a look?11:49
ogra_abeato, uuuh, why did you duplicate the adb upstart job code into the initrd ?11:50
ogra_oh, i see, its the panic function ...11:50
abeatoogra_, that is for the "panic" mode, which we enter before something else fails11:50
abeato*when11:50
abeatoyep11:50
ogra_that should actually be removed altogether instead of being made functional ... its a security hole11:51
abeatowell, to enter it you need to change one of the init scripts11:51
abeatoif you can do that you already have full control ;)11:52
ogra_(modify the rootfs in a way that it triggers the panic and you have 100% root control from initrd over all data, even if the bootloader and recovery are locked down)11:52
ogra_you dont need to change the init scripts but andything on the MMC ...11:53
ogra_*any11:53
ogra_(or the kernel cmdline or whatnot, there are many attack vectors here)11:53
ogra_this function should be in a developer initrd ... but not in production11:53
ogra_abeato, technically the code is indeed fine ... but conceptual you guys should probably discuss if that should be in a production intird at all ...11:55
ogra_john-mcaleely, ^^^11:55
ogra_(it was on a long standing list (together with dropping all vars from /etc/environment for example) for removal in the old phablet team)11:56
john-mcaleelyogra_, if you wish to veto some feature of the phone initrd, I'm not going to contradict you. However, we'll not be making a separate developer initrd as a maintained thing anytime soon11:57
john-mcaleelyso don't assume we will11:58
ogra_well, you guys make the decision, i can just give hints ;)11:58
john-mcaleely'no' is a very strong hint11:58
ogra_the panic function in the initrd is a known risk though11:58
abeatoogra_, ok, if you think it is a real security risk I can add a line to return as soon as the script starts. we can remove that line if we want to debug11:58
john-mcaleelyI'm not technically competent to make a call here11:58
ogra_perhaps someone from the security team, wants to chime in, perhaps i'm just over-cautious11:59
ogra_as i said, i think it should be discussed11:59
ogra_i'm fine with the code though11:59
abeatowhat I see is that we do a "panic" only when we cannot mount data or system partitions11:59
john-mcaleelyis this worth a mail on ubuntu-touch?11:59
ogra_yeah, perhaps12:00
ogra_abeato, right, the question is how hard or easy is to trigger that for an attacker i guess ... the point is that it works around all lockdowns that vendors could do *if* you can actually exploit it12:00
ogra_john-mcaleely, i'm pretty sure ondra actually maintains such an initrd (with an adjusted adbd inside that actually allows you to debug the initial boot)12:01
john-mcaleelywhat he does in private between consenting adults his his business ;-)12:02
=== chihchun is now known as chihchun_afk
ogra_lol12:02
ogra_k12:02
john-mcaleelywhat we support as an org, is another matter12:03
ogra_well, if you want to do a port you need such an initrd .... it is very ulikely that you make a phone boot on first attempt12:03
john-mcaleelyindeed12:03
john-mcaleelyand without such a thing, we have perpetual 'undo the hacks' work items in porting12:03
john-mcaleelynone of this is ideal12:04
ogra_in such an initrd the panic function is actually essential12:04
abeatocertainly12:04
ondraogra_ john-mcaleely abeato I understand all sides and kinda agree for both. We need it for bringup, and don't want it in production12:07
john-mcaleelyondra, I think you just picked up an action then - to document on a wiki how to hack the production initrd12:08
ondraanother view is that, if we don't change adb binary in there, it's all academical anyway. since adbd will fail12:08
ogra_yeah, that too12:08
john-mcaleelyand we remove this particular thing from the production initrd12:08
abeatocorrect, just keeping the hacked adbd out leaves us safe12:09
ondradespite all the efforts I did sneak into build options way to overlay initrd, for this exact reason12:10
ondraso I'd say, new git repo in phablet to host this "hacking" overlay for initrd, which we can trigger locally when building boot.img12:10
ondraand do not add anything to stock initrd, rather clean it from this half baked not working solution12:11
ogra_+112:11
abeatoondra, +1 too12:11
ogra_just have a re-pack script in the pahblet tree12:11
ondrathere are about 50 different ways to trigger panic in initrd, and this will open you whole front door to device,12:12
ogra_that pulls the right bits into the dev initrd you produce (here i'm totally in favour of re-packaing btw :) )12:12
ondraogra_ that is already there, I sneaked it in :P12:12
ogra_great ...12:12
=== kyrofa_ is now known as kyrofa
ondrawe just need some git repo to host those bringup overlay, rather than mine and abeato chinstrap12:13
ondraI will create that, and may be some easy way to build it12:16
ondrawho's gonna do a bit of cleaning on boot image then?12:16
ogra_i guess changing the panic() function to a "sleep 10; /sbin/reboot" or so would do12:17
tboston2016/03/14 13:15:48 Expecting the device to be in the bootloader... waiting12:17
tboston2016/03/14 13:15:49 Device is |VEGETAHD|12:17
tboston2016/03/14 13:15:49 Device VEGETAHD not found on server https://system-image.ubuntu.com channel ubuntu-touch/stable/bq-aquaris.en12:17
tbostonanyone?12:17
ogra_(or probably "/sbin/reboot recovery" so you dont end up with a boot loop that you need to intercept manually)12:18
tbostonI see that theres 'vegetahd' instead of 'VEGETAHD' if that matters12:18
=== alan_g is now known as alan_g|lunch
tboston2016/03/14 14:05:44 Cache formatting was not successful, flashing may fail, check your partitions on device13:07
tboston2016/03/14 14:05:44 Can't boot recovery image13:07
ogra_tboston, and that device was bought with ubuntu on it ?13:09
tbostonogra_: yup13:10
tbostonbtw found an article where there is a vegetahd recovery image13:10
tbostontrying that now13:10
tbostonhmm13:32
tbostonstill13:32
=== barry` is now known as barry_
=== barry_ is now known as barry
=== chihchun_afk is now known as chihchun
=== chihchun is now known as chihchun_afk
=== alan_g|lunch is now known as alan_g
=== dandrader_ is now known as dandrader|afk
=== dandrader|afk is now known as dandrader
=== chihchun_afk is now known as chihchun
peat-psuwitHave anyone experienced this: When connect to some bluetooth headset, the phone thinks there's a keyboard and won't show OSK.15:38
dobeypeat-psuwit: what headset is it btw?15:40
ogra_peat-psuwit, i think popey had a bug for "BT selfie buttons" (i.e. a single button that makes your camera take a pick), that likely the same issue (play/pause function on a headset)15:41
ogra_*pic15:42
popeybug 145172415:42
ubot5bug 1451724 in camera-app (Ubuntu) "Selfie stick not supported" [Medium,In progress] https://launchpad.net/bugs/145172415:42
ogra_they all register as input devices15:42
ogra_(of type "keyboard"15:42
ogra_)15:42
peat-psuwitogra_ popey: It's Remax RB-S315:43
popeydoesn't really matter what make/model it is15:44
popeythey're pretty much all the same15:44
ogra_yeah15:44
peat-psuwitpopey: The phone can't separate between actuall bluetooth keyboard and remote/headset with play/pause button?15:47
popeyindeed15:47
ogra_peat-psuwit, the device registers as input device of type keyboard15:48
ogra_even if it is just a one-key-kbd15:48
dobeyi guess the client side needs to handle multiple profiles on a device better15:48
=== rw is now known as dax
ogra_yeah15:49
ogra_or check for specific keys to exist that you definitely only have on a kbd or some such15:49
=== tyhicks` is now known as tyhicks
=== pstolowski is now known as pstolowski|bbl
=== dandrader is now known as dandrader|afk
mterrybfiller: can you or someone look at https://code.launchpad.net/~phablet-team/camera-app/convergence_fullscreen/+merge/288844 ?17:49
mterrysister MP to the approved gallery-app and mediaplayer-app ones17:49
=== jhodapp is now known as jhodapp|errand
mterryKaleo: ^ do you have someone in mind to review that18:02
=== joc_ is now known as joc|away
Kaleomterry, let me see18:37
Kaleomterry, did you write that?18:38
mterryKaleo: didn't you?18:38
mterryKaleo: well you wrote the commit (in a superceded MP)18:39
Kaleomterry, the code yes, that MR though it unknown to me18:39
mterryKaleo: Saviq just reproposed it under a team branch so he could merge in trunk18:39
mterryKaleo: but no one reviewed the original either (https://code.launchpad.net/~fboucault/camera-app/convergence_fullscreen/+merge/286340)18:39
Kaleomterry, it was reviewed anyway18:39
Kaleomterry, and the proper one is https://code.launchpad.net/~fboucault/camera-app/convergence_fullscreen_staging/+merge/28688518:40
Kaleomterry, we don't merge in trunk18:40
Kaleomterry, so, what do you need?18:40
Kaleomterry, or rather, what does Michal need?18:40
Kaleomterry, he was supposed to ping when the patch we require for that MR lands in the image18:40
Kaleomterry, then we could land that MR18:40
mterryKaleo: we're trying to land them at the same time in silo 4118:41
Kaleomterry, won't happen18:41
Kaleomterry, for 2 reasons:18:41
Kaleomterry, 1) the app is a click18:41
Kaleomterry, 2) we merge things in staging not in trunk18:41
mterryKaleo: we have some manual upload click in the silo too18:41
mterryPresumably built from that branch18:41
Kaleomterry, once the silo 41 is landed, I will make a camera release18:42
Kaleomterry, not to worry18:42
mterrymzanetti: ^18:42
bfillermterry, Kaleo: yes, gallery and camera should both land after that silo lands but seperately as they are clicks18:55
=== pstolowski|bbl is now known as pstolowski
=== jhodapp|errand is now known as jhodapp
=== trelane_ is now known as trelane
=== dandrader|afk is now known as dandrader
21WAAFX9XHello. Is GPS working yet at Nexus 4? I'm using mako image, not bq.19:36
dobeyGPS should work, yes19:41
mzanettibfiller, Kaleo, ack19:53
dobeyoh drive by question that was20:04
=== boiko_ is now known as boiko
matv1i was wondering when scopes showdown winners will be announced?21:41
popeymatv1: soon21:44
matv1popey nice. ever considered having all the devs that have an app in the store vote on it?21:46
popeymatv1: people can manipulate votes like that, it's tricky21:48
matv1popey ah right21:48
matv1people suck21:49
=== n1cky_ is now known as n1cky

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!