/srv/irclogs.ubuntu.com/2020/03/05/#ubuntu-discuss.txt

guivercIs a MUA/mail-client good for handling gmail, and what would anyone recommend   (I did it years ago, but stopped as it felt slow, I'm sick of browser now though)00:09
sarnoldwith gmail I think their imap implementation is going to be the weak part00:11
sarnoldI don't think gmail maps onto imap great00:12
sarnoldmutt's the only mua I've used in the last twenty years, and funny enough never tried it with my gmail account; I only ever do gmail on my android phone, and that's read-mostly00:12
pragmaticenigmasorry to come in midconversation, but I see Gmail + Imap... what's the discussion?00:12
sarnoldThu 05 00:09:56 < guiverc> Is a MUA/mail-client good for handling gmail, and what would anyone recommend   (I did it years ago, but stopped as it felt slow, I'm sick of browser now though)00:12
Bashing-omguiverc: Sylpheed works well for me with Google.00:13
pragmaticenigmaI use IMAP for accessing my Gmail, been doing so for years. Never had any issues. Gmail labels become folders00:14
guivercThanks sarnold, Bashing-om, I've not used mutt but have wanted to try for years, so to prevent me never getting there, I'll likely try sylpheed first (it's most launchpad mail), what client do you use pragmaticenigma00:15
pragmaticenigmaThunderbird00:16
pragmaticenigmaI've also used 9mail on my android before00:16
guivercthanks, nah I hate my phone so won't touch that (I want a real keyboard; mechanical too)00:17
jeremy31like an old typewriter?00:18
pragmaticenigmaIBM Model-M for life!00:18
sarnoldwhich is why gmail on my phone is read-mostly :)00:18
guiverc(mutt would be the best choice I bet, but I'm used to gui)... yeah like the old ibm selectric ... never minded that noise in the background (maybe a different response if I was close)00:19
guiverc:)  with Model M - my keyboard too00:20
Bashing-omOld Compaq mechanical keyboard here - goes clitty clack - wife knows I am still awake :P00:30
daftykinsor the cat is about? ;)00:31
sarnold"are you okay honey? your keyboard has been silent for four minutes and I got worried"00:31
Bashing-omsarnold: :D - Yeah I hear that too :P00:33
sarnoldhehe00:33
hggdhI remember the old IBM selectric keyboard (yes, it was a real typewriter was well). The end-of-line bell was used to wake op the computer operators (we would submit a program to be run late at night and, in an intermediate step we would force a bell)01:23
* pragmaticenigma puts the bell character in my programs for kicks and giggles01:32
guiverc:) I was thinking of selectric typewriters (I didn't work in DP operations, and all the early keyboards I used on 3270/5250/etc terms I used I don't remember, fell in love with Model M, and gleefully was allowed to keep a number when they were replaced)03:05
lordievader Good morning07:10
ducassegood morning07:15
lotuspsychjegood morning10:26
oerhekspopey, great vid ! https://www.youtube.com/watch?v=gVZOBgTDJWc11:46
oerheksIntel CPU bug patched last year is worse than previously thought15:12
oerheks- Bug is CVE-2019-0090- Researchers say the bug can allow attackers to retrieve the Chipset Key, the root of trust of the entire CPU - Researchers recommend replacing CPUs15:12
marcoagpintooerheks: what?!15:15
lotuspsychjesure, if they refund our buys15:15
oerhekshttps://www.zdnet.com/article/intel-csme-bug-is-worse-than-previously-thought/15:16
marcoagpintowill it affect 9th generation?15:16
oerheksall with CSME, so yes?15:16
marcoagpintoi don't know what a CSME is15:16
oerheksthe 9th was already broken i guess15:17
oerheksit is a trust root thingy, for UEFI.15:17
marcoagpintoBuaaaaaaaaaaaaaaaaaaaaa15:17
marcoagpintooerheks: am I safe in my VM with Tor?15:19
marcoagpinto:)15:19
oerheksno, TOR is not safe at all :-D15:19
marcoagpintowhat?15:19
* pizzaiolo stares at his new 9th-gen intel laptop15:20
pizzaiologuess i need a new laptop with 10th gen *shrug*15:20
marcoagpintopizzaiolo: yes, at 1 GHz15:20
daftykinsa VM isn't safe if the virt tech it runs on is exploited xD15:26
oerhekscool15:26
=== kostkon__ is now known as kostkon
oerhekscool18:15
marcoagpintowhat?18:25
marcoagpintooerheks?18:25
oerhekscool man18:25
* oerheks turns up the heater18:25
TJ-This new Intel CSME vulnerabilty looks like a death shot for them. trust keys revealed for millions of CPUs/chipsets at some point soon20:56
daftykinsruh roh20:59
TJ-AMD, here we (all) come !21:00
TJ-I've just ordered 6 Ryzen 2 Lenovo E495s21:00
daftykinsfor now they're saying physical access is needed still for all this one, hmm21:02
daftykinsi've gained a new client recently where the whole place needs redoing, firmware updates are high on the list21:02
TJ-no, it isn't21:04
daftykinswell there's zdnet for you ;D21:05
TJ-the problem with this one is million's of CPUs are affected, but only *one* has to be attacked (one the attacker owns) to get the master keys. Those apply to millions of CPUs, burned into the CSME boot ROMs (the silicon). Then all the attacker needs is to plant malware on a target system to use those keys to decrypt data21:05
daftykinsfair enough, hadn't found the time to read a piece yet21:06
TJ-the problem here is, once the keys are extracted (at some point in the future) and if they are made public (as they will) then every similar system with same CPU series is exposed21:06
ducassetime for a class action against intel?21:07
TJ-I was talking to some collegues (CIOs/CTOs) this afternoon and they're already worried about the data protection liabilities this causes21:07
daftykinsah they didn't get it wrong, i just didn't read enough21:07
TJ-it's now predictable that systems using the TPM on Intel will, at some point soon, be compromised21:08
TJ-it's rather like the original Firewire vulnerability, but at the CSME level21:08
daftykinskinda funny that i was just buying systems with TPMs for this client :D21:08
daftykinsi'm not really sure what a sensible course of action is in light of this21:09
TJ-daftykins: wait for others to decide and copy them!21:12
TJ-I'm sure there's going to be some statements from the big cloud providers for example21:12
daftykinsyeah21:12
daftykinsTJ-: new client is in finance so i was going down the route of BitLocker on all their desktops etc, Synology NASs though with (i think ecryptfs) encrypted volumes21:13
TJ-daftykins: could you use external hardware modules (yubikey maybe?)21:14
daftykinsnever looked into those21:14
TJ-I would strongly advise against ecryptfs - very deprecated. File-systems are growing native encryption support via a generic kernel layer now21:14
daftykinswell if the synology doesn't offer it, then it's not an option21:15
TJ-https://www.kernel.org/doc/html/latest/filesystems/fscrypt.html21:18
ducasseTJ-: is ext4 encryption ready for usage?21:19
TJ-Well, it's what is used in Android on rather a lot of devices21:30
JanCI wonder if various DRM companies will now blacklist all Intel hardware...  ;-)21:31
TJ-JanC: oh that'd be Karma!21:32
TJ-hmmm, HDMI HDCP ?21:33
ducasseno netflix for intel owners!21:33
JanCobviously that would be commercial suicide for Netflix (& similar)21:35
TJ-It must be terrible being an Intel CPU engineer/support bod recently21:35
TJ-Reeling from AMD's Zen/2 rollout, the constant faults in Intel kit around SMT, and now this21:36
ducassemight be time to save up for power9 kit21:39
daftykinssome really good ones might be telling management "i told you so"21:40

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!