/srv/irclogs.ubuntu.com/2018/05/14/#ubuntu-discuss.txt

* tomreyn just learnt that ubuntu should actually mount /boot/efi (and any vfat FS) with the 'discard' option if this is on a storage which supports TRIM. that's because vfat supports TRIM only in this immediate way, and (the weekly cron job which runs) fstrim -a will not handle vfat at all.00:28
tomreynhttps://askubuntu.com/questions/391101/does-trim-work-with-fat3200:29
=== JanC_ is now known as JanC
oerheks.. and HFS+ .. amazing ..00:35
tomreyni dont see discard / trim listed at https://www.kernel.org/doc/Documentation/filesystems/hfsplus.txt00:43
oerheksyes, amazing00:45
oerheks:_D00:45
tomreynoh, ok :)00:45
tomreynntfs doesn't mention discard / trim either00:46
oerheksi am not sure fat32 is a good idea, as it can contain that special UEFI part00:46
tomreynhow do you mean "that special uefi part"?00:47
oerheksan UEFI partition to enable secure boot, on newer systems00:48
tomreyni think you're referring to the ESP00:49
MenzadorYeah, the ESP (EFI System Partition)00:50
oerheksjups, and that would be fat3200:51
Menzadortomreyn, actually that's a good tip as my next machine will have an SSD, thanks00:51
tomreynit's just a fat file system, which uefi supposedly reads in a similar way as linux00:51
tomreynthe ESP is usually tiny and doesn't get a lot of writes, so it's not too important. but still nice to have.00:51
MenzadorI mean the recommended size is a quarter of a gig00:53
tomreyn> nothing01:08
tomreynon a side note, i just ran into /usr/share/doc/util-linux/examples/fstrim.{timer,service}01:09
tomreyndebian lacks the weekly fstrim cron job, so i enabled it there.01:09
nicomachusBashing-om: rutorrent is a torrent website, not a program.02:50
Bashing-omnicomachus: Well, thanks .. brenster23 is not to knowledgeable, and I sure did not know :)02:53
nicomachusnp :)02:54
lotuspsychjegood morning to all03:47
Bashing-omlotuspsychje: is back ! Hide all the women :D03:52
lotuspsychjelol hey Bashing-om03:54
Bashing-omlotuspsychje: Been too long - I sleep while you are on ?03:57
lotuspsychjebeen on weekend Bashing-om04:20
Bashing-omlotuspsychje: weekends are good things :)04:21
ducassegood morning06:03
lordievaderGood morning06:06
ducassehi lordievader - how are you today?06:14
lordievaderHey ducasse , doing good here. How are you?06:15
ducasseall good so far, thanks06:18
lordievader๐Ÿ˜06:21
lotuspsychjehey ducasse lordievader08:04
lordievaderHey lotuspsychje08:04
lordievaderHow are you doing?08:05
lotuspsychjefine tnx lordievader and you?08:05
lordievaderDoing okay here08:05
* oerheks feels sad, just ran out of coffee-creamer08:18
lotuspsychje:p08:19
lotuspsychjesomething broken, lotus computers repairs08:20
oerheksyay08:30
oerheksbroken08:30
oerhekshttps://www.eff.org/deeplinks/2018/05/attention-pgp-users-new-vulnerabilities-require-you-take-action-now08:31
oerhekshttps://twitter.com/seecurity/status/99590657617005363308:31
oerheksLoLz, some have knowledge of this for abot 4 years, i guess08:31
lordievaderFrom a different channel: https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060315.html08:32
BluesKajHowdy folks10:40
oerheksheya BluesKaj10:42
BluesKajHey oerheks10:43
JimBuntuGood morning my fellow non-bots.10:49
oerheksbliep10:50
BluesKaj'Morning JimBuntu....grok10:52
oerheksmore about gpg.. https://efail.de/efail-attack-paper.pdf10:52
oerheksfddasdf-dude ignores the wiki, so i have warned him 3 times..10:58
BluesKajhe's an idiot10:58
oerheksgood ol' apt10:59
oerheksnoooo... i think he is blind10:59
lordievaderAbout the gpg flaw, if your client doesn't actively do things with the html (load images, for example) you should be fine.10:59
BluesKajseems there's no more access to akonadi-server in kubuntu to change settings for the file indexer baloo11:01
BluesKajfile indexer/search11:01
BluesKajusers complained about akonadi's bugs and now that they are solved access to GUI settings is no longer available. How does that make sense?11:06
leftyfbjmgb4: and by "get around" , that would imply they are actively ON the same local network and have access to all services services on that network13:20
leftyfbservices/served13:21
jmgb4Its not that hard... It depends on how you footprint and scan with nmap (or whatever tools you use)13:21
leftyfbfootprint? scan with nmap?13:22
leftyfbplease explain13:22
jmgb4So how experienced are you?13:22
jmgb4If you dont know what footprinting and nmap is I am not sure where to go to even begin13:22
leftyfbsysadmin/devops for over 20 years, built multiple datacenters from the ground up and had to manage over 3000 servers running Debian/Ubuntu 24/7 for the largest shared hosting company in the world13:23
leftyfbI am well aware of nmap. Never heard of it being used to "get around" NAT, nor am I familiar with the term footprinting13:24
jmgb4It is just doing a thorough scan. Seeing where they are going, whats coming to it, what protocols are being used, what ports..13:25
leftyfbyup, I just read about it ... I get a basic understanding13:25
leftyfbyou're building a profile of security measures in use13:25
jmgb4How well you can footprint will usually give you an idea of what their internal network looks like. How well you can read that traffic and set metasploit packages to each and every port / protocol you think is going on is what will eventually leak their internal network ip / range / cidr / whatever13:27
leftyfblets say you've got a typical home network with a ISP's modem in bridge mode and an off the shelf router using NAT. No ports are open/forwarding. No UPNP. No DMZ. How does a script kiddie go about "getting around" the NAT. How does that script kiddie get onto the local network and are now able to browse Windows share for instance.13:27
jmgb4Theres always something open.13:28
leftyfbnegative13:28
leftyfbAnd even so, just because someone has SSH or a VPN port open, does not make it easy for a script kiddie to get onto the local network13:29
jmgb4Lets back up one more step here. Do I know a network lives at X ip or am I scanning randomly13:29
leftyfbyou're targeting a public IP13:30
jmgb4That I know exists?13:30
leftyfbno ports are open, get around NAT13:30
jmgb4You wait. A port will open13:30
leftyfbUPNP is off. Grandma doesn't know how to open ports13:30
jmgb4There will be a session up eventually. If you konw the network you will know the natted ip. All you have to do is wait for a session to open and hijack it13:32
leftyfbIf your assumption is that some port is always going to be open/forwarding and you have an exploit for the protocol listening on that port that allows you root/local control, then to say that NAT is inherently insecure by itself is false.13:32
JimBuntuif there is a service listening on an open port (on the target) and you have a metasploit vuln, and you use it... you didn't get in due to some issue with NAT, you got in due to the sploit/vuln.13:32
jmgb4Its all about the footpting. I have yet to see a network (still learning here) that doesnt leak or give hints at if it is behind a nat or not13:33
JimBuntuAgain, how does the use of NAT add to the vulnerability?13:33
leftyfbthat does alone not open the door for script kiddies13:33
leftyfbboy, bad English there ... just woke up :)13:34
JimBuntujmgb4, I don't want you to feal like you are being attacked or jumped, but this is an interesting discussion and I simply don't see any real danger coming from the use of NAT itself.13:34
jmgb4It doesnt "add" to a vulnerability. I said before its like closing your blinds and pretending you are not there. There will be signs you are.13:35
JimBuntuOh, I thought you said something like "closing the blinds and now we are safe"13:36
leftyfbjmgb4: I encourage your path to knowledge and understanding, especially around infoSEC, as long as it's for the greater good. But to post in a public support channel that NAT as a security method is insecure and easily circumvented is just plain false and can cause undo confusion and concern.13:36
leftyfbjmgb4: It would have been better to say NAT can be easily circumvented if you are forwarding ports to protocols that are easily exploited.13:37
jmgb4leftyfb, So you are saying a  nat is all yo uneed?13:37
JimBuntuAre there people who use NAT (alone) for security?13:38
leftyfbjmgb4: If you are grandma with nothing but an ISP's modem, off the shelf router with NAT an UPNP disabled and tablet or chromebook then yes, that's all she needs to not have to worry about a script kiddies "getting around" NAT.13:38
jmgb4JimBuntu Yes. There are still people that hook up modems directly to the internet with no security enabled.13:39
leftyfbmost modems from ISP's these days have a router using NAT built in13:41
jmgb4My modem had NAT and forwarding enabled. I was able to scan myself and figure out my internal / external ips.13:42
leftyfbok?13:43
leftyfbThat is not "getting around" NAT13:43
leftyfbknowing a local ip does very little13:43
leftyfbjmgb4: Also, I assume you did this scan from an external location. Not scanning your public ip from within the network for traffic13:45
JimBuntujmgb4, What forwarding was enabled? Were they basically putting your machine in the DMZ?13:45
jmgb4leftyfb, Yes... I scanned from outside the network.13:46
jmgb4JimBuntu Yes13:46
leftyfbjmgb4: using what tool?13:46
leftyfboh, it's a DMZ.13:46
JimBuntujmgb4, that's hilarious. I presume this was a situation where you were only allowed to have a single NIC/computer connected.13:47
leftyfbDMZ != NAT (not in the security sense)13:47
leftyfbyou basically turned off NAT13:47
jmgb4I didnt touch it. Thats the way it come "out of the box"13:47
JimBuntuIn this case, again, the use of NAT didn't contribute anything to the security issue... it was actually being used the way it was originally intended... IP translation and nothing else.13:47
daftykinsmost browsers give up the internal subnet via most website queries btw, so it's not a surprise13:48
daftykinsalso hi all \o13:48
JimBuntuI remember ISPs that told us we could only connect one computer to the modem... and it had to be our computer, no routing. Internet Connection Sharing (TM) became very popular for a while.13:49
daftykinsheh many moons ago back in Uni we were only allowed the one, too - they explicitly banned routers and WAPs13:49
leftyfbjmgb4: if you had DMZ turned on by default, that completely nullifies any benfits of NAT.13:49
leftyfbagain, to say NAT is insecure is false .... in all cases discussed so far13:50
daftykinsi highly doubt that it would've been13:50
leftyfb^13:50
leftyfbjmgb4: I encourage route path to knowledge though. Keep going.13:51
jmgb4This is the way the modem was out of the box.13:51
leftyfber13:51
leftyfbroute/your13:51
JimBuntuperhaps it was a previously used modem, or some major fail in mass-configuration13:51
daftykinsa 'modem' doesn't have such settings :>13:51
jmgb4It was an all in one I should say. Not a "modem".13:51
leftyfbdaftykins: The ones with routers built in do ... which these days is most of the ones provided by ISP's13:52
jmgb4^13:52
jmgb4If one was given to me, you cant say there arent others out there but we also got off the discussion of NAT and why I thought / think its not a very good defense but I guess I was proven wrong.13:53
daftykinsyes i know that leftyfb - i'm pointing out using the wrong term for the device, is all13:53
daftykinsin fact i'm pretty sure 'modem' in general is one of those words that's been hung onto for far too long, think they're really transceivers that we use over here where both send and receive are on the same chip/board :)13:53
daftykins(but we likely use a different technology here to what you guys use to get online)13:54
jmgb4daftykins, What would you rather it be called? An all in one? Router / modem combo?13:54
leftyfbyep13:54
leftyfbISP provided router13:54
daftykinsis it cable? 'cable modem/router' would explain it well in lieu of a make and model13:54
jmgb4I have no idea what make and model it was. I no longer use it.13:55
leftyfbjmgb4: it was a productive discussion13:55
daftykinsoh so we're talking about the past as well? bit pointless13:57
daftykinsmarginally worse than the support seeking folks who come online and say "i'm at work now, but can you tell me what to do to solve x?" :D13:57
leftyfbitโ€™s ok. It was a productive discussion.13:57
jmgb4How is it pointless? daftykins, thats kind of like saying devices on the internet are upgraded as soon as a new model is released. I am trying to find that website that looks for old devices now.14:00
jmgb4I cant think of the name14:00
JimBuntulooks for old devices? Not exactly the same, but I like Shodan14:01
daftykinsjmgb4: just that you can't confirm anything or speak of the model etc, is what i mean14:02
daftykinsi'm sure you had some interesting chat regardless, i just think it a bit odd when folk are like "i had this thing once, it was bad"14:02
daftykinsanyway, nevermind14:03
leftyfbyou upset him :)14:20
leftyfbIt was ok daftykins, that was one of the good ones. They learned a thing.14:20
daftykinsleftyfb: this is still conversation, there's no need to act like the police in here, it's kind of annoying14:21
leftyfbhuh?14:22
daftykinsi'm just saying there's no conflict here :)14:22
leftyfbYou were being a bit hostile toward him. And I'm just trying to say, no need for the hostility, he learned a thing and didn't keep on about it. That's productive and exactly what discussions should be like.14:23
daftykinswell since we're going to keep beating a dead horse, i didn't mean to invalidate the entire conversation - i just think it's dumb bringing up a device that's no longer owned14:24
daftykinsi do have a tendency to be short that people see as hostility, but it's never intended as such - try to bear that in mind14:25
daftykinsunless it's a troll :P14:25
leftyfbI can verymuch be the same ... but this one was open to learning so I try to help them along as much as I can14:26
BluesKajheh, nertworking is an arcane subject from the get go...I find it to be so..tried a an online course (coursera) and the presenter just crammed waaay too much info into each session for these old brain cells to absorb properly , and his high squeaky voice did not help matters any14:40
JimBuntubut, come on, any script kiddie can get around NAT ( if by that you mean a wide-open machine in the DMZ of a router)14:40
leftyfb:)14:40
daftykinsi still laugh thinking of the days over here when our broadband first came out - routers weren't a thing yet, so it was just these nasty USB ADSL transceivers14:41
daftykinsthen the msblast flaw in Windows XP came out - and no joke you could be online without a firewall (as one wasn't added to XP until SP1 or SP2?) for 14 seconds before you'd get hit by it - and a forced reboot dialogue came up14:42
daftykinsi tested it one day for fun, to come up with that time :)14:42
pragmaticenigmaSP2 enabled the firewall by default14:42
pragmaticenigmaand blaster is still rampant on the open web14:43
daftykinsmmhmm, i was leaning more that way but i'm happy to purge my memory of all XP related things now14:43
daftykinsi highly doubt they're scanning for it as regularly as that, as at a later point i tried the same and nothing happened overnight14:43
daftykinser, *as regularly as then14:43
pragmaticenigmaNo one really is scanning for it... it's all the dummy machines that never got fixed that still spew it out14:44
pragmaticenigmaI still get Code RED hitting my apache server14:44
daftykinshmm that name doesn't ring a bell14:44
pragmaticenigmaCode Red was a worm that infected IIS web servers14:45
pragmaticenigmahttps://en.wikipedia.org/wiki/Code_Red_worm14:45
daftykinsah, i'd almost say i feel sorry for someone using IIS - but i don't :D14:45
BluesKajmy W7 to W10 upgrade a few yrs ago was a total loss for me, the cheapest W10 version is as fugly as it gets ...yuk14:45
BluesKajno more windows for this guy14:46
pragmaticenigmaI still have windows for a few select applications that just run better in their windows home land. (and I get tired of Wine with the circular references in symbolic link littering up my home directory)14:47
BluesKajI've managed to live without Windows for a while now..really don't miss anything windows at all14:48
daftykinsworks for me :)14:49
daftykinsa lot of my clients willingly choose to be stuck with Microsoft products for no good reason, can't really help them from that14:49
BluesKajI don't hate windows, it just doesn't do anything that i need anymore14:49
pragmaticenigmaI just wish customizations of any OS were a lot easier than having to either install a theme pack (which often hides criticle features) or hack away at stuff in hopes of achieve the desired effect.14:50
pragmaticenigmaI strongly dislike the default font sizes, they're always way to big for me14:51
pragmaticenigmathat's all I want to change, yet my options are to hunt down a theme, build my own, or hack14:51
daftykinswhich desktop is that with?14:52
pragmaticenigmaI run defaults, so right now I'm on Unity + Ubuntu 16.0414:52
pragmaticenigmaEven windows 10 the fonts are stupid huge... I don't personally need size 12 fonts for window titles14:52
daftykinsguess it depends on the display, on my laptop which is a 1920x1080 LCD... 10's default is to enable scaling, whereas i prefer 1:1 or '100%'14:53
daftykinsif you go too small you start seeing the subpixel rendered edges that are a bit offputting imo14:53
BluesKajdaftykins, some people don't understand the concept of an "operating system". It's just a computer to them, press this, click that and that's all hey worry or think about14:54
pragmaticenigmaI'm not referring to scaling14:54
daftykinsno but i have...14:54
daftykinshmm does 16.04 unity still have the keyboard shortcut underlines to the alt+space menu? 18.04 ditched those and i find it a mistake14:55
daftykinsnot that i use it14:55
pragmaticenigmathat's a rather strong generalization there BluesKaj14:55
JimBuntudaftykins, 16.04, yes.14:55
BluesKajI always have to increase fonts on this setup no matter which OS I use14:55
daftykinsJimBuntu: amazing they dropped it, what a foolish move14:56
daftykinsdumbing down the desktop to the mouse bandits :)14:56
BluesKajpragmaticenigma, the qualifier in my comment was "some people" :-)14:56
JimBuntudaftykins, I know, I don't understand it either... things like from within Terminal, you can't ALT+F to bring up the file menu/etc. I like those underscore-shortcuts, especially if I have to do the same few things to a bunch of files/etc.14:57
daftykinsreminds me, i was gonna snag an 18.04 xu to see if it's still there, don't see why it wouldn't be14:58
pragmaticenigmaBluesKaj: Exactly15:01
pragmaticenigmaI think the loss of the underlines is a design decision in Gnome-Shell than Ubuntu15:02
daftykinsyep there they are, still in xu :>15:09
pragmaticenigmaIs Xubuntu any easier to customize now? I remember my struggle was getting apps added to the app drawer15:09
daftykinsi'm not the right person to ask, i don't use desktop15:11
daftykinslast i tried it (on a laptop) i fell over laughing at desktop Linux in general for the fact that if i had firefox playing a youtube video fullscreen on battery, it STILL blanked the screen in the middle of said video15:12
daftykinstalk about foolish defaults15:12
pragmaticenigmaI don't think it still does that... but then again, might be a good thing the webbrowser can't disable system functions?15:13
daftykinsthat was probably 14.04 yeah, so no idea of the current state - and whilst i can see what you're saying, i don't think it's a very practical concern15:14
pragmaticenigmaI do most my media watching via LibreElec, Nexus Player, or Roku15:14
pragmaticenigmano powersaving shinanigans there15:14
daftykinswell Kodi does have a screensaver that dims by default :) so i might marginally challenge that15:15
daftykinsbut yeah it's not gonna turn off the display mid video xD15:15
pragmaticenigmaKodi is smart enough to do that only when not active playback of video. Unless you pause said video, it does dim15:16
pragmaticenigmaThough I don't know if Kodi talks to a desktop to prevent it's screensaver/power saving functions15:16
daftykinsyou really need to dial back on the explanations :) i've used it since the original xbox days15:17
pragmaticenigmaI wish I were able to telepathically see what's in your head, but I can't (and probably don't want to) so I have no idea your experience with the application or it's history15:18
daftykinsi get the sarcasm :) but you don't see how annoying it is to keep explaining stuff like it's everyone elses first day? :)15:19
daftykinsi think a lot of 'normal' users are likely to play videos in youtube in the browser, as originally mentioned anyway15:19
* pragmaticenigma changes room the #ubuntu-explainations15:20
daftykinsmaybe minus the typo15:20
pragmaticenigmanah...15:20
daftykinspragmaticenigma: something the matter today? you seem to be trying awfully hard to disagree with everyone on everything!15:20
pragmaticenigmaI'm really worried about the PGP vulnerability :-)15:21
pragmaticenigmahttps://efail.de/15:21
daftykinsfrom what i skim-read it sounded like it's fine if you don't send and receive in HTML15:22
daftykinswhich i always thought was something most tech folk did who didn't want all kinds of rubbish enabled15:23
BluesKajsome are looking for a debate ...seen it many times ...I don't bother wasting my energy when I know I'm right :-)15:23
pragmaticenigmaoh? haven't gotten that far in the article... only gleaned as much to see that plugins that autodecrypt were the primary target15:23
SlidingHornIt's SO funny how hard this guy was trying to make this his 15 minutes of fame15:24
daftykinswhat a time to be alive, everything folks use to be safe in open source land seems to have been blown open this year so far15:25
SlidingHorn??  It's not a GPG vulnerability.15:25
pragmaticenigmaThis one looks pretty benign... and yeah... mislabeled... it's the tool kits, not the actual algorithm15:25
JimBuntuSlidingHorn, not to my understaning, it's a failure of mail programs/etc in (pre)processing the HTML in the emails.15:25
pragmaticenigmait also seems to be really elaborate15:26
SlidingHornand this guy has been prepping and hyping it to make it his "big moment"15:26
SlidingHornhe's still patting himself on the back on Twitter and trying to pass it off as something it's not15:26
JimBuntuThe community will likely shun him, he didn't even send the details to GPG/etc first.15:28
SlidingHornthey should (in my opinion)15:29
daftykinsi heard some German rag leaked it early15:29
EriC^^a new vulnerability?15:29
daftykinskinda15:29
EriC^^what are they calling it?15:29
daftykinsno fancy name yet afaik xD15:30
EriC^^the names are always fun :D15:30
SlidingHorntrying to essentially blindside GPG for fame...went through the trouble of creating a website, hashtag, and logo though... :/15:30
SlidingHorn"eFail"15:30
JimBuntuEriC^^, This just in, mail clients and tools using GPG (some of them anyway) will obey the user and (pre)process HTML15:30
daftykinsoh yeah, there was i just have a sieve-like memory :>15:30
EriC^^!ping15:33
ubot5pong!15:33
daftykinsJimBuntu: so even still not everything gets a shortcut key assignment - http://i.imgur.com/BuJmg9f.png15:35
JimBuntudaftykins, That one might be due to the developers. When I was making GUIs, I had to assign the latters manually.15:36
JimBuntus/latters/letters15:36
BluesKajI see those "root action" services in the file manager/dolphin no longer work or at least they don't appear in the context menu when righjt clicking in dirs owned by root15:37
BluesKajit was a handy feature that i started using when kdesudo was no longer working15:38
daftykinsroot action? as in stuff to do as root? maybe due to the death of gksudo? (at least i think i heard that)15:38
BluesKajdaftykins,  yup15:39
BluesKajwell, stuff to do for an hr or 2 ...bbl15:41
daftykinsthink i tend to just go straight to a terminal :)15:41
daftykinsoh this might amuse someone besides myself, i offered to fix up the PCs of a friends girlfriends kids... but she mentioned that they don't get much use out of them, instead preferring to use the various Apple products...15:42
daftykinsi can just imagine what a conversation might go like there, "hey kid, why don't you run x?" - "huh? is that on the app store? how much does it cost?" - "no, it's free!"15:42
daftykinsgenerations hamstrung by the decision to use walled garden ecosystem devices that don't foster huge possibility15:43
daftykinsmadness! :)15:43
daftykinsat least i subscribe to the thinking that use of such devices stops them exploring and learning as much as they could, does anyone else feel the same way?15:45
JimBuntuYeah, somewhat. On the tablets, my kids don't have access to a browser or YouTube/etc... they do have a laptop with no restrictions on it (Ubuntu), but they have to use it in the living room.15:46
daftykinsinteresting, what's blocking the browser on the tablet?15:47
daftykins+s15:47
JimBuntuThey get to see both worlds play out. I think that between the drastic improvements with CPU/etc of mobile devices, and the fact they are so mobile... has led to people going to them first.15:47
JimBuntudaftykins, We use Amazon KidTime15:47
JimBuntuBasically, we pick what apps work under their profile and can do all kinds of time-based controls/etc.15:48
JimBuntuAt 5 years old, one of them had found a way to break out, but it seems to have been patched as they can't do it any more.15:48
daftykinsJimBuntu: ah we got one of those amazon Kindle Fire tablets for a clients son, i saw all the rubbish about setting up a childrens account, then the ability to choose content they could run but it looked like too much work, so they just use it under the mums account15:50
daftykinsthen saw that when they go on holiday to Spain, amazon content mostly doesn't work down there - and it kept wanting to be online to authorise the DRM - so it was nigh-on useless15:50
JimBuntudaftykins, it's really not that bad. There are oddities we have encountered where a kids program basically wasn't compatible if you had started the program from the adult account first, that's about it. What's really nice is that it's all auto-backed up too... so, when we had to replace one of their devices, all we had to do was sign in, then sign them in and it downloaded everything.15:51
JimBuntuyeah, Amazon services can be tricky outside the country of origin. For example, eBooks from you area wont work when you try to use them in the U.S.A. and vice-versa. I know someone who has a U.S. registered Kindle exactly for this reason.15:52
daftykinshmm maybe it has grown up since i last saw it, their son is about 4.5 now so i'm not sure how much time he gets with the thing15:52
daftykinsmmm i know all that fun all too well, typically this island is geoIP detected as being 'other' and not applicable for most online services15:53
daftykinsGoogle and Microsoft even refuse to sell devices to us typically :)15:53
JimBuntuwow, that's ridiculous, imho15:53
daftykinsit's because we don't have tax on goods and they won't do the paperwork to sell to us, so they just blanket refuse instead15:54
JimBuntuStill seems silly to me, but... if they only care about the bottom line... that's on them.15:55
daftykinshrmm i should be working on my 18.04 VPS with digitalocean to move off the old 14.04 one16:03
pragmaticenigmawhy not 16.04 :-P16:03
daftykins'cause it's already old16:03
daftykinsthose folks are great, i mentioned the tax status we have and they developed a new feature to subtract it so the lowest tier at $5/mo is about $4.xx/mo for me i think o016:04
pragmaticenigmaisland of misfit toys?16:07
daftykinsgiven the fact i often get brought computers that aren't working right, that may be quite fitting :D16:08
pragmaticenigmahehe16:09
daftykinsbut yeah if i'm gonna take the time to move all my servers to a newer release, i would rather make the bigger step to current - even if 18.04 sounds many alarm bells for me16:10
pragmaticenigmatrue that16:10
pragmaticenigmarunning server edition should be more stable than the desktops... no?16:10
daftykinsEriC^^: did you get on top of your data usage problem?16:11
daftykinspragmaticenigma: you'd hope, i cringed when i saw the default image they have for 18.04 still installed 3GB though...16:11
daftykinsand removing some stuff somehow made it increase o016:11
pragmaticenigmawhat about the minimal install?16:12
daftykinsthat's not how VPSs work, you don't install the OS yourself16:12
pragmaticenigmaoh16:13
daftykinsthey have sort of one click templates that get spun up once you click through the choices, then you get sent login credentials16:13
daftykinsor you import an SSH key to use, yada yada16:14
pragmaticenigmacool... I learned something new :-)16:19
daftykinsif you ever have need of running services online for folks, they're really neat - paying that little to keep a simple little machine going works out really nicely, i host 3 or so websites these days along with an OpenVPN endpoint so i can tunnel to safety if i'm out on some nasty public connection16:22
daftykinseven for the bottom tier which i use - https://www.digitalocean.com/pricing/16:22
EriC^^daftykins: yeah, it turned out to be windows updating, making d: very small solved it16:48
daftykinsheh or broke it intentionally ;D i suppose that beats constantly updating to the new builds manually though16:48
EriC^^yeah those pc's are what i'd like to sit and work on, i just want them running and barely ever have to fix anything16:49
EriC^^especially now in summer, it's a sona in that room16:50
EriC^^*aren't what i'd16:50
daftykinshehe i'll bet16:50
daftykinskinda surprised Windows is the choice for the mining stuff, seems like the worst OS choice for uptime16:51
EriC^^i'm loving it for the mining tbh, drivers come out immediately and there's a lot of support for hardware stuff16:51
EriC^^i also loved the tasksch thing it's pretty much window's cron16:52
EriC^^i'm using it to run a sync command every 1 minute to avoid fs failures on the constant powercuts we have :D it's held pretty steady16:52
EriC^^also all the clocking software and bios modding stuff is in windows16:53
daftykinsthat's true, though i wouldn't touch any of that :>16:53
daftykinsspotted them in your pics ^_^16:53
daftykinsi doubt newer driver releases really change mining speeds much though?16:54
EriC^^sometimes they do a little, but i've had to use a new 'block chain driver' because the 'dag' became larger and that caused the miners to drop like 9mh/s each16:55
daftykinsah har16:56
EriC^^amd actually released a blockchain specific driver that optimizes mining, it was released beta and they were like this is it, there wont be any official release later16:56
EriC^^they are kinda supporting the miners i guess, it's a good profit for them $$ %%16:56
lotuspsychjegood evening to all17:44
lotuspsychjehey krytarik17:52
lotuspsychjehey pragmaticenigma17:53
=== oerheks_ is now known as oerheks
krytarikHowdy.17:53
daftykins\o17:53
pragmaticenigmaalo17:53
lotuspsychje!info chromium-browser bionic17:57
ubot5chromium-browser (source: chromium-browser): Chromium web browser, open-source version of Chrome. In component universe, is optional. Version 66.0.3359.139-0ubuntu0.18.04.3 (bionic), package size 52374 kB, installed size 186497 kB17:57
lotuspsychjeseems im up to date17:58
pragmaticenigmaoh boy... here we go in main chat18:02
SlidingHornupcoming troll in main18:03
leftyfbsaw that coming18:03
* daftykins raises an eyebrow18:03
SlidingHornsame18:03
pragmaticenigmado we tell them and encourage more yammering... or blindly let them stay as to not draw more attention18:04
leftyfbthey'll bring it upon themselves18:04
leftyfbjust wait18:04
lotuspsychjeim not an ignore fan myself18:04
lotuspsychjethats like sticking head in the sand :p18:05
daftykinsi didn't used to be, but damn is it good (:18:05
leftyfbneither am I, but the ops have strict requirements before any action is taken, if ever18:05
SlidingHornI assume an op will have them change the nick or (hopefully) see that this is a troll waiting to happen & kick18:05
lotuspsychjefreenode policy url is dead on !guidelines18:09
lotuspsychjehttps://wiki.ubuntu.com/IRC/Guidelines18:10
SlidingHornthey still haven't kicked that guy?18:10
pragmaticenigmaThat's the ubuntu guidelines lotuspsychje ... freenode are on their site18:10
pragmaticenigmahttps://freenode.net/policies18:11
lotuspsychjepragmaticenigma: i know, but there is a section mentioning freenode policy on tab language & subject18:11
pragmaticenigmasometimes the best course of action isn't to give anymore attention than what is already been given. that's what they want, and they'll keep doing it so long as it keep sworking18:11
pragmaticenigmaI did ask ops about the /remove instead of /kick... I was satisfied with their answer, though I don't feel it's very effective18:12
pragmaticenigmaI think they know what they're doing, and best let them figure it out18:12
leftyfbheh18:13
lotuspsychjeleftyfb: didnt you apply for ops?18:13
lotuspsychjei hear they need some18:13
leftyfbyep18:13
leftyfbI assume they won't take me though. I actually plan to do things about trolls. Looks like that goes against their unwritten policies :)18:14
lotuspsychjelol18:14
daftykinsnooo, that's just doing 'anything'18:15
daftykins:)18:15
SlidingHornwish there was a way to ignore parts unless they're kicks18:16
SlidingHornlol18:16
daftykinsthey're still useful if you're giving advice and the person leaves, you know how patient most helpees are :)18:18
pragmaticenigmahaha... looks like op just missed the window... ping timeout18:18
pragmaticenigmaalways amazes me how someone can cuss so much18:27
lotuspsychjelike in the movies pragmaticenigma :p18:28
* SlidingHorn curses like a sailor, but I keep it cool in chat18:28
lotuspsychjelol18:28
pragmaticenigmaI rarely cuss, so when I do, people know I'm very disturbed/upset/angry/in pain about something18:29
SlidingHornI rarely finish a sentence *without* cussing :P18:30
lotuspsychjetv time here guys18:30
lotuspsychjecya tomorrows18:30
daftykinso/18:30
lotuspsychjegonna watch some cursing lol18:31
lotuspsychjecheers18:31
JimBuntulotuspsychje, have fun18:31
lotuspsychjetnx18:31
leftyfbhttps://pastebin.ubuntu.com/p/DVD7DRCqN2/18:50
leftyfbit's the same troll18:50
leftyfbel: ^18:50
leftyfbhe's not actually looking for help18:50
pragmaticenigmasend a note to the ops with that information18:53
elapparently humoring them rather than confronting them gets them to go away18:54
leftyfbel: they play the long game18:55
leftyfbthey are only looking for fill the chat with their offensive nicks and pointless banter18:56
leftyfbfor/to18:56
leftyfbthey'll be back18:56
elthey'll be back even if i ban that vpn node too. they just have to refresh the app18:56
leftyfbit's an ADSL, I doubt it's a VPN endpoint18:58
elvpngate is all consumer internet18:58
leftyfbwhere you do see vpngate?18:59
ela lot18:59
leftyfbhttps://pastebin.ubuntu.com/p/D8VwpSNTXz/18:59
leftyfbthe ip is coming from an ADSL account with "superonline.net" / Tellcom Ankara ADSL Pool19:00
leftyfbI see nothing about a VPN19:00
elit's not going to be listing "vpngate" in their whois19:00
leftyfbhow do you know it's vpngate?19:00
leftyfbNot that I doubt you, I'm genuinely curious to know if there's some identifying tool I should be using going forward that I'm not aware of19:01
eli cannot know with any guarantee, but vpngate.net is commonly used by these kinds of trolls and frequently doesn't list all their current in use addresses19:02
leftyfbhe's back19:02
leftyfbdifferent ip19:02
leftyfboh wait, nevermind19:02
leftyfbflipping windows too quickly :)19:02
leftyfbok, so you're making an assumption on the ip origin19:03
eland the behaviour19:03
elan educated assumption.19:03
elwhich also tells me he'll be back no matter what i do with bans and it's better to make him bored of us19:04
leftyfbI see the past joins that backs up your assumptions19:05
pragmaticenigmaand luck talking with the ops leftyfb19:14

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!