[07:05] howdy all [08:37] morning boys and girls. [08:38] good morning [08:41] Morning all [08:41] morning [08:48] morning all [08:48] howdy howdy [08:54] o/ [09:04] has anyone used a smartphone habits tracking app like moment or qualitytime? [09:05] What are they supposed to do? [09:05] (if it's not obvious, my answer is no) [09:05] tell you what apps you use and for how long, screen time per day etc [09:06] Oh, I see [09:06] I don't think I want to be told I'm an addict [09:06] ok found one called space. seems to have a better privacy policy and they are in the uk https://phonelifebalance.com/privacy-policy/ [09:08] https://play.google.com/store/apps/details?id=mrigapps.andriod.breakfree.deux&hl=en&rdid=mrigapps.andriod.breakfree.deux === sproctor is now known as scimon [10:15] This Security Alert addresses CVE-2017-10269 and four other vulnerabilities affecting the Jolt server within Oracle Tuxedo. These vulnerabilities have a maximum CVSS score of 10.0 and may be exploited over a network without the need for a valid username and password. The Oracle Jolt client is not impacted. [10:15] maximum CVSS score of 10 :| [10:17] Oracle do love their CSEs [10:17] *CVEs [10:17] My CVEs go to 11. [13:37] Any of you guys use OpenWRT ? [13:37] Just tring to find a way to do portforwarding via the web admin [13:40] I am [13:40] diplo: I am, let me open the web admin gubbins..... [13:41] ta fanx, got this Witi board thing about 2 years ago, just about to start using it :) [13:41] I can see how to do it via the cli if it comes to it [13:42] diplo: Services/Firewall, then the "Port Forwards" tab [13:42] yeah don't have it [13:42] Ah [13:42] Don't have Firewall? [13:42] I'm guessing I need to install a package... but can't find what package to install [13:42] What version? [13:42] yeah installed that... which is the only package i found referenced, still didn't show up [13:42] Unless it needs a reboot I guess [13:43] I'm using 15.05 Chaos Calmer; keep in mind that the advice now is to switch to LEDE. [13:45] Not sure if my device is supported, I'll look later on the device [13:45] Tried installing "luci-app-firewall"? [13:46] That'll give you the web interface for the firewall. Well, it should do..... [13:46] But the version i used from openwrt packages is out of trunk, so guess whatever the newest version is there. [13:46] I'll try when I get home, can't get in atm as no port forwards :D [13:46] Heh [13:49] With openwrt do you need to reboot after package installations, didn't have any prompts tbh, but that could have been me learning new stuff [13:56] I thought LEDE was supposed to be merging back into openwrt.. or did that fall-through again? [13:58] No idea, will look at lede to see if there is a way of using it [14:00] Hmm it's listed there :) so good start [14:00] 17.0.4 [14:00] 17.0.1.4 even [14:17] diddledan: In short - OpenWRT is a dead project. 15.05 is the final release. LEDE now has all the active development and will re-brand as OpenWRT. [14:18] diplo: You might be able to get away with restarting the web service; but I think I've always just rebooted [14:23] I'll reboot tonight, also see what version I'm on and may upgrade to 17.01.4 - might as well be on latest and greatest before not otuching it again for a while :) [14:23] 17.01.4 is the one that has the KRACK fix in it as well IIRC [14:23] When we move house, I'll be upgrading. Too risky for me to try it now [14:30] heh, I've got old Draytek there in case, but thought Krack was client side issue anyhoo ? [14:30] Both [14:30] I've not followed up on krack at all, apart from seeing that Motorola aren't patching it yet [14:30] Nor has Google AIUI [14:31] Well, I don't think I've gotten an update (could be wrong) [16:45] weird. git apply isn't applying the changes yet it is exiting with code 0 indicating success [16:51] maybe it doesn't like that I edited the diff [17:06] reacreated the diff and it still isn't working. but ONLY in my xenial vm (snapcraft) [18:23] hey peeps [18:23] \o [18:24] hi [18:26] Muddling around here :) running IRSSI in Brew on my mac , using my ipad pro as a secundary screen [18:26] pretty cool actually :) [18:28] Ubuntu in a vm on the main screen of my laptop , [18:29] irssi in a terminal on the ipad pro [18:29] and osx on the main screen :) [18:30] each to their own ;) [18:32] nice experiment , but it think 17.10 is just a little 'raw" these days [18:35] irssi on a pi usually and use tmux to access it fron any device at home. but am in hospital so atomic irc client on android... i miss my pi... [18:35] zmoylan-pixi: what happened to it ? [18:36] well i didn't want to constantly worry about extwrnal threats so it's not accessible from outside house [18:37] and the wifi ap it's connected to needs a reboot once a week so it's fallen offline [18:38] zmoylan-pixi: all ok with you? [18:38] they amputated a toe 6 weeks ago and an now twiddling my thumbs (still have both of those) waiting to be released [18:39] zmoylan-pixi: ah is that a sign of larger woes, or unrelated? sounds like quirky circulation [18:42] i have health issues. but this one came out of left field. [18:44] mm funky [18:45] as i headed to a+e i thought 'chuck the netbook and charger in the bag' but no.... so been on android and dumb nokia for 6 weeks [18:46] i really really miss symbian.... [18:46] i'll post you my Psion - you can pinch alcohol swabs and clean off the gunky rubber for me ;) [18:47] * zmoylan-pixi casts inflict piles on elop [18:47] i've toyed with idea of buying a psion or even a palm os device... might still do it [18:48] new psion looks shiny... [18:49] new psion? umm, do you own a tardis? [18:50] nah there's some new project [18:51] https://www.theregister.co.uk/2017/02/27/the_psions_is_back_meet_gemini/ [18:51] first time i have heard about that one. [18:52] 9 months ago, ok. [18:52] there's later story of them showing current breadboard prototype to journalists. soynded good [18:53] i'd rathee they took time and do it right than rush out junk [18:53] psions were rolls royce of pda market [18:55] https://www.theregister.co.uk/2017/09/11/gemini_psion_alike_pre_production_prototype_handson/ [19:06] Don't ask... but I need to enable sshv1 on a server on an internal network [19:07] Created keys, allowed Protocol 2,1 [19:07] Anything else to why it may not work ? [19:07] SELinux is disabled, firewall is off [19:08] [root@localhost ssh]# ssh -1 localhost [19:08] Protocol major versions differ: 1 vs. 2 [19:45] diplo: sorted it? config pointing to the v1 keys? daemon restarted? === dontbeadick is now known as kennyloggins [20:01] daftykins [20:02] daftykins: Nope, sorry.. screen locked up :) the sshd_config is pointing at /etc/ssh/ssh_hosts_key [20:02] If that's what you mean, restarteddaemon, even rebooted now [20:03] Last thing I need to sort till I can sign off, been working 13 hours [20:03] D: [20:04] Any other suggestions I'm all ears [20:05] when you tested to localhost, it said the versions differed - i wonder if you gain anything by forcing v1 on the client side with /etc/ssh/ssh_config too? [20:05] i see a line "# Protocol 2" in there so maybe you can have "Protocol 1" to force [20:06] I think I did that already on the client side [20:06] trying now anyhoo [20:07] yeah i'd have a go on the same host to see if that message changes at least [20:07] Still the same :/ [20:08] -vvv gives me this debug1: key_load_public: No such file or directory [20:08] sounds like it's going out for a key file and not finding it [20:08] apparently its normal output in vvv [20:09] hmm [20:09] anything crop up in the server logs on that fail too? [20:10] https://pastebin.com/tNBPmcWD [20:10] Output from -vvv and I'll get that a mo [20:11] https://pastebin.com/PCRs7Gn0 [20:11] That's it, can't find anything else [20:12] Exactly the same setup on their VM, all we did is add Protocol 2,1 and add ssh keys and restarted teh daemon [20:17] hmm earlier when you said you allowed Protocol 2,1 - does that mean that exact statement is in the config, so 2 is taking precedence? [20:19] yeah its how all the examples show it [20:20] It's also how the working machine looks as well [20:20] I've even copied keys/config over from the working server [20:21] So really don't think it's config related... tried permissions.. must be something else.. maybe need to install something [20:22] * daftykins asks some folks in -discuss if they know [20:22] https://www.openssh.com/releasenotes.html [20:22] Think I've found the issue [20:23] Wonder if it's compiled without support... [20:23] ah-ha [20:24] Can't work out how to find that out.. with nginx and such things it lists it [20:24] * diplo googles some more [20:24] 6.6 worked, wonder if I can pin it for now [20:25] Bashing-om: \o [20:26] daftykins: Maybe of no help .. but I can watch for errors :) [20:27] :D diplo reckons the compile options to v7 of sshd may be to blame now [20:33] Well stupid people wanting to use old versions of ssh are to blame! [20:35] hehe damn right [20:36] dadasq [20:37] Can't reconnect to my byobu session [20:37] All I need is network problems here as well :D [20:38] sounds like a work day from hell [20:38] that guys nick isn't nice ^ [20:38] Hasn't been great no, text my boss and he's going out :) [20:39] diplo_: what's the distro on each host? working and non-working [20:39] I have joins/parts so miss most things [20:39] I know ubuntu channel, but both hosts are CentOS :) [20:40] ah, one of the guys just pointed out ubuntu has a separate package for a v1 client - openssh-client-ssh1 [20:40] Hate centos channel, and most answers are generic for me, I'm trying to search out where they do there compile stuff [20:40] ooh, I'll see if cent does too [20:40] I rpm -qa | grep ssh and had same packages [20:43] openssh.x86_64 : An open source implementation of SSH protocol versions 1 and 2 [20:44] hmm single package for both client and server eh? [20:44] openssh-server is the server package, doesn't mention 1/2 on there though [20:45] Just running yum info on it now, see what description says [20:49] I'd assume if I set protocol 2,1 it would error out if it wasn't an option [20:49] i reckon it's fine but i reckon it's changing what is tried first [20:49] back it up and try 1,2 or even 1 on its' own just for fun [20:50] may be on the wrong lines but it'll rule it out [20:52] Just tried that, failed [20:52] weird, still with the 2 and 1 error? [20:52] Specifying ssh -1 or ssh -2 allows that [20:53] mmm i suppose if the client is picking the server doesn't have a say [20:55] Can't install older packages either [20:55] Basically, think the client needs to spend some money, as I don't know how to do it :D [20:56] Or I'm being stupid, but it appears to be very simple [20:56] is your testing VM on the same major version and have the same package versions as their host? [20:56] 7.3 and new server 7.4 [20:56] 7.3 is the VM [20:57] and that's where it worked fine? (your VM) [20:57] Jumps from 6.6 to 7.4 version of ssh between the two [20:57] Yeah [20:57] hrmm [20:57] I may see if I can find a iso with both versions and create some local VM's [20:57] *nod* sounds like a good way to go [21:00] just don't follow someone blindly... :-P https://i.imgur.com/ZSdlAjX.gifv [21:01] diplo_: A thought 7.4 - netplan ? then we got a learning curve ; ls -al /etc/netplan/ ' . [21:01] O_O [21:02] hmm did your 7.x relate to how their site has v7 17.08 as current? [21:03] No /etc/netplan on this box [21:04] I just upgraded/insatlled new server, customers tech people were in charge of old one, ie installed it and never touched it [21:04] 3mins for the first 7.3 iso, 15mins for 7.4 :/ [21:05] i can't see those version numbers at centos.org [21:08] They don't display it anymore, newest always [21:08] http://mirror.nsc.liu.se/centos-store/ [21:08] Installing 7.3 now, if this works, I'm quitting [21:09] cool [21:09] ah yeah so the 1708 i'm seeing is 7.4, ok [21:09] ta fanx for help btw.. at least I don't feel stupid as I don't think I've missed anything [21:09] Ah that's the release date from Redhat [21:10] *nod* no worries, hate to see someone working late suffering that fate alone [21:10] mmm them and MS using the same year.month bit now [21:11] Had to google it to work out, as we use CentOS, they release a month or so after sometimes, confused me at first [21:20] taking forever for the post-install on the vm... cmon! :P [21:21] mechanical VM storage? :) [21:21] Running on my 6 year old work laptop :/ upgraded to ssd which has much improved things... but its old.. work sucks :) [21:22] :) [21:22] Spec'd a new PC, just over 1k, said it was a bit expensive.. I said no, you're just tight! MD's laptop is £1500 [21:22] :( [21:23] and the higher they are the less they do i'm sure [21:25] Worked first time! [21:31] sheesh [21:31] so it's that newer version ruining your evening [21:33] is that the laptop the md never uses and the most difficult thing it does is activate a pretty scrensaver? [21:33] :D [21:35] did i tell you the one were md had 486 and secretary who did all the accounts had 286? so so slow. so we swapped the cases to speed things up ;-) [21:36] XD genius [21:37] he had a new shiby box that said 486 on his desk. that's all he cared about [21:40] zmoylan-samj3: Yup, pretty much yes ref the use of it. I have my personal screen at work and an old PC to run some VM's [21:40] Keep saying I'll take them home and not use it, but I like playing.. [21:40] Second VM is installing, 7.4 [21:41] you need to start stuffing rasp pi into calculators, desk lamp, radio on your desk and off load the cpu heavy tasks to them... :-) [21:45] I want a standing desk, and a led light.. said yeah no problem 4 months ago, chased 5 times [21:45] Going to order it myself soon [21:52] So CONFIRMED - doesn't work [21:53] Bah mother ********* - wasted hours [22:01] :| [22:01] must be the compile options as you say in the 7.4 then? [22:02] Waiting on customer to text back now - I reckon so, not sure how to find that out with CentOS, told the customer.. I can't do anything tonight, if they want to go live in the morning they'll have to have newer clients, lots of pennies or carry on with old box and I see if I can downgrade the ssh version package - but do that tomorrow daytime [22:03] :) [22:03] :> [22:04] Electrical wholesalers are skin flints tbh [22:10] =] [22:11] kennyloggins: sort out your connection [22:12] joins/quits being removed [22:12] is great [22:13] yeah, need to keep when you do chat support though [22:14] I guess yeah, I haven't been on IRC much outside of work really, I rarely boot my machine up anymore, had enough or PC's recently :) [22:15] :) [22:15] Used to live on it, just cba anymore - maybe when I get my new PC / laptop for home [22:15] what do you fill evenings with instead? [22:16] Have 2 young boys with me half the week, so quite busy with them now. Free time I leave the house and see friends or tidy etc and recently, work! [22:18] ah-ha [22:19] i'm still in the midst of insurance repair work here, so should have plenty of painting to keep me occupied again soon enough [22:19] i've let this house work stuff stunt my social goings on the whole year really [22:19] I have to do my whole house too, what caused the insurance work ? Flooding ? [22:20] You're IoW aren't you ? [22:20] almost, Guernsey [22:20] water leaks, bathroom + roof [22:21] Ah, had the same thing myself. Sucks [22:22] brand new bathroom has been ace :D £11k of work for only £350 spend of my own [22:25] Nice! my issue was I had was stuff in the paint that I'm having a blank.. [22:27] Can't think what it's called. Tired, but basically had to have people in, sealed the house off and ripped it out and dumped it properly [22:27] I wish I'd just done it myself, load of fuss [22:27] asbestos? [22:28] yay, thanks! I was struggling :D [22:28] I even googled it and failed... defo time for bed I think [22:28] :D [22:29] i hadn't considered it could be in paint, they reckoned i was a bit lucky not having such a discovery in my place - but then mine is ancient, listed building for being a 16th/17th century cottage [22:31] It's miniscule amounts though, I'd have been happy to do it myself, I think it's more to make money [22:35] yeah no doubt, one of the apprentices has been telling me how little the building firm i'm using spends on facemasks for them when they're removing old questionable stuff [22:37] byobu won't let me scroll up with putty, wouldn't do me a favour, I was advised to use luci-admin something on here about 10am, wouldn't take a look for me would you ? [22:38] 13:45 < diplo> Not sure if my device is supported, I'll look later on the device [22:38] 13:45 < TwistedLucidity> Tried installing "luci-app-firewall"? [22:38] 13:46 < TwistedLucidity> That'll give you the web interface for the firewall. Well, it should do..... [22:38] that all you need? [22:39] yay thank you! [22:39] And it has worked! Must remember to say thanks tomorrow :) [22:40] hehe [22:44] Website and ssh re-opened [23:20] Thanks again daftykins - bed time now