/srv/irclogs.ubuntu.com/2019/08/28/#ubuntu-discuss.txt

sarnoldBashing-om: I'm not sure he's in a graphics environment02:08
Bashing-omsarnold: I am only sure he is not all there :P running the Wayland protocol - maybe :D02:10
sarnoldBashing-om: hehehe02:10
Bashing-omdaftykins: Be aware I have so much I could learn :D02:10
lordievaderGood morning05:55
tomreyn!crosspost09:24
ubot5Please don't ask the same question in multiple Ubuntu channels at the same time. Many helpers are in more than one channel and it's not fair to them or the other people seeking support.09:24
BluesKajHey folks12:02
pragmaticenigma!bodhi12:53
EoflaOEHello BluesKaj14:01
lotuspsychjehey EoflaOE14:01
EoflaOEHello lotuspsychje. How are you?14:01
lotuspsychjeall good here14:01
BluesKajhi EoflaOE14:01
EoflaOEAll fine too, lotuspsychje14:02
EoflaOEBluesKaj, How are you14:02
BluesKajfine here too EoflaOE14:02
EoflaOEYes. All is fine.14:03
EoflaOEHave you seen the new changes about design and GNOME that Ubuntu made?14:04
lotuspsychjeurl EoflaOE ?14:04
EoflaOElotuspsychje: I will get links. In my blog.14:05
EoflaOEhttps://eofla.wordpress.com/2019/08/28/ubuntu-19-10-eoan-ermine-gets-new-beta-version-of-gnome-with-bug-fixes/14:06
EoflaOEhttps://eofla.wordpress.com/2019/08/26/ubuntu-19-10-eoan-ermine-is-updated-with-the-new-yaru-design-changes/14:07
EoflaOEHow is it lotuspsychje?14:18
lotuspsychjelooking nice EoflaOE14:18
EoflaOEThanks lotuspychje14:19
lordcirth_EoflaOE, the purple lines are on top of the text for me14:21
lordcirth_Or at least, they make it quite hard to read14:21
EoflaOElordcirth_: I will fix it soon.14:22
lordcirth_EoflaOE, ok. Also, "some users might not appeal it" is incorrect14:23
lordcirth_"might not find it appealing", perhaps?14:23
EoflaOElordcirth_: Sounds better.14:23
EoflaOElordcirth_: Fixed it. The incorrect "might not appeal it"14:25
lordcirth_cool15:00
EoflaOEThanks lordcirth_, and hello marcoagpinto15:04
marcoagpintohello EoflaOE!15:04
marcoagpinto:)15:04
marcoagpintoI had a date this morning and I updated the GB speller before heading for it15:05
EoflaOENice, so how are you? And how is the date?15:05
marcoagpintowell, my girlfriend arrived 30 minutes late but it's okay15:06
marcoagpinto:)15:06
marcoagpintoany news?15:06
EoflaOEmarcoagpinto: There has been recent design changes about Ubuntu, and I am finishing KS 0.0.7.15:06
marcoagpintoEoflaOE: what? For 19.10?15:06
marcoagpinto:)15:06
marcoagpintoare there any screenshots?15:07
EoflaOEmarcoagpinto: I had screenshots in my blog.15:07
marcoagpinto:)15:07
marcoagpintoI forgot the link15:07
EoflaOEmarcoagpinto: The first two blog posts should explain. It's https://eofla.wordpress.com15:08
marcoagpintolet me check15:08
marcoagpintoEoflaOE: It looks good. I am glad it went back to the old trash-bin image on the desktop :)15:12
marcoagpintoand why does the "key" image on authentication keeps changing in every version?15:13
EoflaOE? In my screenshots I have modified the icons in Tweaks, marcoagpinto. Unsure of why would they change the key icon15:13
marcoagpintowell, in the last few years the key image has changed15:14
marcoagpintobut always ugly15:14
marcoagpinto:)15:14
marcoagpintosorry for telling my opinion15:14
marcoagpintohttps://eofla.files.wordpress.com/2019/08/ubuntu1910_alpha_newlook9.png15:15
EoflaOEmarcoagpinto: OK. By the way, in my screenshots, I have changed the icon theme to the old one.15:15
marcoagpintoat least in 19.10 it will look nicer15:15
marcoagpintoohhhhhhhh15:15
EoflaOEYes, and have you seen the newest GDM style?15:16
marcoagpintoI don't know what a GMD is?15:16
marcoagpinto:)15:16
EoflaOEGMD? No, it's GDM3.15:17
marcoagpinto:)15:17
marcoagpintoI still don't know what it is15:17
marcoagpinto:p15:17
marcoagpintois it "Gnu something"?15:18
EoflaOEGDM3 is the GNOME display manager. It's a login screen. Ubuntu used it by default since the transition to GNOME 3.15:18
marcoagpintoahhhhhhhh15:18
marcoagpinto:)15:18
marcoagpintobasically I only use Ubuntu to compile my dictionary tool :)15:19
marcoagpintoI don't have deep knowledge of it15:19
EoflaOEOK.15:20
marcoagpintotalking about it, I was very stressed and copied to the shared folder the Windows version of PureBasic instead of the Linux version...15:21
marcoagpintowhen I ran Ubuntu to try it, it was an .exe file in the shared forlder15:21
marcoagpintofolder*15:21
marcoagpinto:(((((((((((15:21
marcoagpintoI have been so stressed15:21
marcoagpintoa new version of PureBasic was released last week15:22
marcoagpintoor was it two weeks ago? I can't really remember right now15:22
EoflaOENice. Can you copy the Linux version?15:22
marcoagpintoEoflaOE: copy? It is in my PureBasic account for Windows, Linux and Mac15:23
marcoagpinto:)15:23
marcoagpintoso, I copied to a pen drive, turned on the other machine, installed the Windows version and copied the Linux version to the shared folder15:24
marcoagpintothen, ran VirtualBox and when I tried to access the file, it was an .exe :(15:24
marcoagpinto(Windows)15:24
EoflaOEHow did you install the Windows version?15:25
marcoagpintoEoflaOE: with a double-click in the .exe file15:26
marcoagpinto:)15:26
marcoagpintoI copied both 32- and 64-bit to the desktop and clicked on them15:26
marcoagpinto:)15:26
marcoagpintobut I was so stressed that I didn't notice the pen drive had the "windows" folder open instead of "linux"15:27
marcoagpinto:)15:27
marcoagpintoso, I copied the wrong file to the shared folder :)15:27
EoflaOETry again but copy the correct file to the shared folder. Double check the Windows and Linux versions to ensure that you are copying the correct version.15:28
marcoagpintoI know :)15:28
marcoagpintothe Linux is a gzip15:29
marcoagpinto:)15:29
marcoagpintoI was stressed and didn't notice the file extension15:29
marcoagpinto:)15:29
marcoagpintoI mean: "tgz"15:30
marcoagpinto:)15:30
marcoagpintoI was just checking15:30
EoflaOEOK. Is it copying?15:30
marcoagpintoI have the 14'' laptop turned off15:30
marcoagpinto:)15:30
marcoagpintoso, right now it is not doing anything15:31
marcoagpinto:p15:31
marcoagpintoI will try it tomorrow or so15:31
marcoagpintoI only wanted to test the latest PureBasic to see if they fixed two Linux bugs:15:31
marcoagpinto1) using "&" in pop-up menus get a "_"15:31
marcoagpinto2) the emoji text are always displayed in black15:32
EoflaOEOK.15:32
marcoagpintothe damn emoji colour used to work in Ubuntu 16.0415:33
marcoagpintonow the emoji are always black15:33
EoflaOEAnd you can't change the color?15:34
marcoagpintoSetGadgetColour(#TEXT,#Red)15:34
marcoagpintoit changes the text colour but not the emojis that are in the text15:34
marcoagpintothe emojis are displayed in black15:35
EoflaOEOK. If you can, test the latest version, and if the problem is not fixed, tell me.15:36
marcoagpintoEoflaOE: thanks15:41
marcoagpinto:)15:41
EoflaOEmarcoagpinto: You are welcome15:41
marcoagpintoI am not sure if it is a GTK3 issue since I used GTK2 in the past15:41
marcoagpinto:)15:41
EoflaOEOK15:44
marcoagpintoEoflaOE: https://www.purebasic.fr/english/viewtopic.php?f=23&t=7251215:44
marcoagpintohere is my bug report15:44
marcoagpinto:)15:44
EoflaOEI saw it.15:46
marcoagpintobbl16:10
marcoagpinto:)16:10
OerHeksyay, https://cloudblogs.microsoft.com/opensource/2019/08/28/exfat-linux-kernel/20:48
OerHeksnow ext3/4 standard in ms windows ,,,20:49
tomreynhttps://docs.microsoft.com/en-us/windows/win32/fileio/exfat-specification#11-documentation-change-history 2010 -> 201921:00
tomreynso that's CC-BY-SA 4.0 Intl. apparently. now "just" someone needs to write the code and submit patches to linux.21:03
tomreyn+ maintain it.21:03
tomreynor maybe we can now use samsungs'21:06
OerHeksIf i could code, i would.21:10
leftyfbOerHeks: your 2nd comment above was meant to be "now we just need ext3/4 standard in ms windows" right? Because that's not what the article says21:13
tomreynhmm it doesn't even support hard or symbolic links, no block journalling. no FS encryption, no data checksumming21:25
tomreynalso no offline or online resizing, no sparse files21:28
OerHeksleftyfb, yes, that would make it coplete21:31
OerHeksc/complete21:31
tomreynbasically, exfat seems to lack any form of journalling (other than through the texfat extension, which is hardware specific, and was apparently only used in windows CE)21:34
tomreynso unless they drive the spec and code further i don't see how it helps much other than maybe for a scary data exchange platform with linux.21:36
OerHeksazure, kubernetes, lots in my mind for this21:36
tomreynin its current state it's useless for that.21:40
tomreynOerHeks: i guess it'd indeed be good to have ubuntu declare the signing key fingerprints for the default apt sources in sources.list.22:54
OerHeksfor each one a key?22:54
tomreyni.e.   deb [signed-by=F6ECB3762474EDA9D21B7022871920D1991BC93C] http://archive.ubuntu.com/ubuntu bionic main restricted22:56
tomreynthis would prevent any mirror servers from injecting packages22:57
tomreyn(which could be signed by keys your system also happens to trust)22:58
sarnoldbut they have complete root on your system22:58
sarnoldwith whatever package they *do* have22:59
tomreynsarnold: you mean a diffierent package you already have installed?23:00
OerHekshoi KOLANICH23:00
KOLANICH>the problem the script solves is the following. Let's assumme there are several repos added into sources.lists and several keys. Let's assume that some repos are accessed via an insecure channel and/or hosted on a rogue hosting (but signing InRelease is beyond adversary access because he doesn't know private key). Let's assume that adversary has managed to get access to private key of some other repo installed into system. If all the repâ23:01
OerHeksi was looking at debsums too23:01
sarnoldtomreyn: yeah; eg you install a repo for google to let you install hangouts.. the hangouts pre/post inst/rm scripts have full root. they can do anything. whoever controls that private key has complete control over your computer. you have to trust them. completely.23:01
KOLANICH>…os are not bound to public keys he can combine compromised key with compromised connection and get RCE. If they are bound, he cannot.23:01
KOLANICH>So I wonder why doesn't Ubuntu bind keys to sources by default. It is a trivial to do, I don't see any good reason not to do that.23:01
tomreynsarnold: yes, that's a systemic problem. and not one we can easily solve, i think.23:02
sarnoldtomreyn: definitely. :) I've thuoght for many years that it'd be nice to have something like apparmor confined apt/dpkg/rpm/zypper etc but .. it's just not the way those tools are written.23:02
sarnoldtomreyn: snap is close, it was designed with this problem in mind, so it doesn't have full unconfined root pre/post inst/rm scripts. (or at least it didn't, I hope it hasn't gained them since the last time I looked)23:03
tomreyni couldn't tell about snaps, i only know there is a concept of different 'trust' levels there, defaulting to confed, but unconfined is possible if allowed by snap shop operaters.23:05
tomreyns/confed/confined/23:05
tomreynsnaps and other similar concepts may be a solution to *this* problem (while introducing others) for 3rd party software repositories.23:06
tomreynKOLANICH: discussion here before you joined the channel https://paste.ubuntu.com/p/Mv84RfGPs2/23:08
sarnoldyes, unconfined snaps are available; I don't know much about the criteria we use when deciding to allow/forbid those23:08
OerHeksunconfined, for offline install?23:08
KOLANICHthe problem of all self-sufficient packages is overhead. I feel like we need something better, like fine-grained permissions to overwrite certain files. And we definitely should get rid of bash in apt packages and replace them with a declarative manifest.23:08
KOLANICHtomreyn: thank you23:09
tomreynhttps://snapcraft.io/docs/snap-confinement https://snapcraft.io/blog/demystifying-snap-confinement23:10
tomreynKOLANICH: if you're happy to help debian design apt v2, by all means, please do!23:11
KOLANICHBTW, Debian manual says to prefer key files over fingerprint. Probably as a mitigation against insecure hash functions.23:11
tomreynsarnold: indeed, documenting criteria for such pretty relevant decision making processes are not the snap ecosystems' strong part.23:15
tomreynthis specific part is described here, though: https://forum.snapcraft.io/t/process-for-reviewing-classic-confinement-snaps/146023:16

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!