ashleyk_ | icarious, nice.. | 00:01 |
---|---|---|
_abc_ | Hi. Has anyone else had the DST change hour pass with no change in the clock? I have that. | 01:25 |
sleepingkirby | _abc_: check your locale on your machine. That's the last time I had that happen | 01:27 |
sleepingkirby | either the user's locale (time zone) was set incorrectly or the system's | 01:27 |
_abc_ | The locale is okay. TZ is okay. | 01:27 |
_abc_ | There should be a script run by cron which does this, no? | 01:28 |
sleepingkirby | what is the TZ? | 01:28 |
_abc_ | That script is not installedon ascii. | 01:28 |
_abc_ | sleepingkirby: does it matter? It was 30 minutes ago here. | 01:28 |
sleepingkirby | _abc_: it's not by cron, last I checked (someone feel free to correct me) | 01:28 |
_abc_ | Interesting. Then what? | 01:28 |
sleepingkirby | it's calculated by time and timezone set | 01:28 |
sleepingkirby | so like UTC + timezone +/- dst consideration | 01:29 |
sleepingkirby | _abc_: https://www.unix.com/linux/252289-how-does-linux-handle-dst-daylight-saving-time.html | 01:32 |
_abc_ | I know. The problem is, the systemd people rely on timedatectl for this, and we don't. And they tend to cripple systems which are "not like theirs", meaning, it is likely devuan suystems won't step time when it's needed. | 01:32 |
sleepingkirby | _abc_: I'm using devuan and it ticked right for me at DST prior to me moving out of the country | 01:33 |
sleepingkirby | now that I'm out of a DST timezone, it didn't ticked, which is also correct. | 01:33 |
sleepingkirby | you can also check by having the clock report to you the +- UTC | 01:35 |
sleepingkirby | so if you're in PST/PDT, it should read either -7 or -8 | 01:35 |
sleepingkirby | which, I think right now should be -7 | 01:35 |
sleepingkirby | _abc_: oh, also keep in mind that were you picked you are (which city) matters too | 01:36 |
sleepingkirby | I think arizona doesn't observe DST? | 01:36 |
sleepingkirby | yeah, just changed my timezone (running jessie here) got 5:43pm, which is correct | 01:38 |
DonkeyHotei | do people still keep their hardware clocks on non-UTC? | 01:40 |
sleepingkirby | DonkeyHotei: I think a lot of window users? | 01:40 |
DonkeyHotei | w10 has an option to keep it UTC | 01:41 |
* sleepingkirby was just guessing | 01:41 | |
sleepingkirby | Besides, if it has an option, that means people have an option not to. | 01:42 |
_abc_ | So anyone on ascii and past dst shift time in Europe? | 01:43 |
_abc_ | Where this is happening now? Did it shift? ascii? | 01:43 |
sleepingkirby | europe observer DST? | 01:45 |
sleepingkirby | *observes | 01:45 |
_abc_ | yes | 01:45 |
sleepingkirby | which countries? | 01:46 |
_abc_ | all | 01:46 |
_abc_ | Will become elective per country from next year or 2021 | 01:46 |
sleepingkirby | sorry, let me rephrase that what timezone are you in? | 01:47 |
sleepingkirby | and that's the tz offset from UTC? | 01:47 |
_abc_ | UTC+2 Eastern Europe. Actually +3 for DST | 01:47 |
sleepingkirby | (running ascii here) | 01:47 |
sleepingkirby | give me a city that I can set? | 01:48 |
sleepingkirby | _abc_ like moscow? vienna? | 01:49 |
_abc_ | bucharest | 01:50 |
_abc_ | DocScrutinizer05: you on devuan ascii? | 01:51 |
* _abc_ knows DocScrutinizer05 was last seen in a pub but I had to ask | 01:51 | |
_abc_ | DocScrutinizer05: my dst clock was not updated at 0200AM, am curious if yours works. ascii here. | 01:52 |
sleepingkirby | _abc_: yep, I don't see it correctly. It says 2:58am on my clock | 01:53 |
_abc_ | So they crippled it. systemd people cripple everything they touch in the kernel and user land libs. | 01:54 |
_abc_ | Will have to read source to find the problem, don't know where to begin. | 01:54 |
sleepingkirby | yeah, sorry, can't help you there. It's weird that they would only for europe though | 01:55 |
sleepingkirby | still works find in the US timezones | 01:55 |
* sleepingkirby is glad to not be in a DST timezone | 01:55 | |
plasma41 | What version of the tzdata package is installed? | 03:00 |
_abc_ | Ok the time jumped at 02:59 -> 0400 | 03:01 |
_abc_ | So the programming is off by one hour, the data in the tzfile is correct (jump at 0200) but the jump occurred one hour later | 03:01 |
specing | looks correct to me | 03:02 |
sleepingkirby | _abc_: Just asked my wife (American) she says that, in the US, the change happens at 3am. So if you're leaping forward, it skips 3am. If you're falling back, it becomes 2am on 2:59 | 03:06 |
sleepingkirby | so... blame the americans? >.< | 03:06 |
_abc_ | I am not in murica! :) | 03:06 |
* sleepingkirby still glad he doesn't live in a DST country | 03:07 | |
sleepingkirby | though changing my timezone wiped out my custom datetme format string on my clock >.< | 03:08 |
* sleepingkirby tries to remember what it was... | 03:08 | |
sleepingkirby | _abc_: honestly, I just remembered that in one of my jobs, someone from europe had the same complaint. About systems updating DST incorrectly in Europe... | 03:11 |
sleepingkirby | and this was back before systemd took a hold of debian >.< | 03:11 |
_abc_ | So the update occurred and now I know in which library to look for it. | 03:13 |
sleepingkirby | which library? I'm curious now. | 03:15 |
DonkeyHotei | sleepingkirby: it has never been at 3am anywhere in the usa | 03:20 |
DonkeyHotei | 2am is the hour that gets skipped, and 1am is the hour that gets repeated | 03:20 |
DonkeyHotei | always was | 03:21 |
sleepingkirby | Ahh, then my wife is wrong. Then the mystery continues, why did _abc_'s clock skip/fall back at 3am? | 03:21 |
_abc_ | sleepingkirby: glibc which is called by strftime etc | 03:28 |
sleepingkirby | _abc_: wow, it's in the c library. Didn't think it ran that deep. Thank you | 03:29 |
DocScrutinizer05 | _abc_: 02:59 -> 0400 ??? That's utterly wrong | 03:32 |
DocScrutinizer05 | it's 1:59:59 ->3:00:00 and 2A:59:59 ->2:00:00 | 03:33 |
DocScrutinizer05 | afaik | 03:34 |
_abc_ | yes. And yet. Tell me how it goes in .de tomorrow. I want to sleep a little. | 03:36 |
_abc_ | One thing: I'm on localtime clock. Maybe that's why. | 03:36 |
DocScrutinizer05 | .oO(???) | 04:59 |
gnarface | i'm thinking the problem was localtime settings for _abc_ | 10:01 |
gnarface | that's just a guess | 10:01 |
gnarface | but usually people doing that are dual-booting | 10:01 |
gnarface | so that introduces the opportunity for both operating systems to change the clock in conflicting ways between reboots | 10:01 |
gnarface | there is a way to set tzdata to assume the hardware clock is localtime, but windows or osx might both still mangle it in some cases (they used to anyway) | 10:02 |
gnarface | with later versions of windows though, there is some way to make it play nice with hardware clocks stored in utc | 10:03 |
gnarface | at least, i've heard that. i don't know how to make it do it | 10:03 |
gnarface | either way, if you set the bios time to localtime and tzdata is assuming it is utc, things might still get weird ... | 10:03 |
_abc_ | Hi. Reading refracta2usb docs, I see it says it will NOT copy mods to a running live system to the target. This is for 2.3.6 . Is this true? I remember it copes WITH the mods? Is there a flag for this or an option? Still reading. | 13:42 |
_abc_ | fsmithred: hi. Take a look when you can, please. I'll be around several times today. | 13:48 |
_abc_ | Around here. | 13:48 |
_abc_ | I found 2.4.1 references on the site. The old readme is still valid? I'll dig deeper as I read myself into the matter. | 14:15 |
fsmithred | _abc_, correct. It copies filesystem.squashfs, not the running system. | 14:26 |
fsmithred | also note, if you make a live-usb from a live-usb, the paths in the boot menu will need to be edited. | 14:26 |
_abc_ | Hi. | 14:26 |
fsmithred | Either add or remove a directory level. I forget which. | 14:27 |
fsmithred | hi | 14:27 |
_abc_ | Say again, the paths in the boot menu will not be correct? Good to know. | 14:27 |
_abc_ | Is there a way to copy the set up live system with all settings? I | 14:27 |
fsmithred | yeah, they're close | 14:27 |
_abc_ | assume one can "fake" it with some loop mount? It is dangerous and | 14:28 |
fsmithred | not an intended way to do it | 14:28 |
_abc_ | will copy in running files etc which need manual cleaning but I think | 14:28 |
_abc_ | I can wing it? | 14:28 |
fsmithred | not fully awake here, but maybe create a new snapshot to a loop mount and then use that??? | 14:28 |
_abc_ | fsmithred: no problem, get some sleep, I'll be here tonight my time, that's in like 5+ hours. | 14:29 |
fsmithred | since it's set up to copy from fielsystem.squashfs, there no need to exclude anything | 14:29 |
fsmithred | if you copy from running system, you'll need to exclude the things that should not exist in a system that's not running. | 14:29 |
_abc_ | Yes, I can see how that can backfire. I've copied systems by hand before, no problem, I think I know what to omit. Most of the time. | 14:29 |
_abc_ | Also manually cleaned out run files and all the usual things one does not want in the new syste, | 14:30 |
fsmithred | sys proc dev tmp mnt... | 14:30 |
_abc_ | *m | 14:30 |
_abc_ | Yes | 14:30 |
fsmithred | look at the rsync commands in refractasnapshot or refractainstaller | 14:30 |
_abc_ | Have the guys from linuxcnc.org and #linuxcnc contacted you about making a live distro using refracta2usb? | 14:30 |
fsmithred | sorry, exclude lists | 14:30 |
fsmithred | no | 14:31 |
_abc_ | fsmithred: yes I will. I have planned to get much more familiar with rsync since we last talked like last year? | 14:31 |
_abc_ | rsync can do mirroring and reverse mirroring over ftp, right? | 14:31 |
fsmithred | I don't know anything about rsync over ftp | 14:32 |
fsmithred | rsync can go in both directions (push or pull) by itself | 14:32 |
fsmithred | or over ssh | 14:32 |
_abc_ | Yeah I'll find out. I use lftp for mirroring now, been doing that for nearly 10 years. | 14:32 |
_abc_ | It sometimes drops the ball with recursion and such. | 14:32 |
_abc_ | Will try to switch to rsync or another mainline tool soon | 14:33 |
_abc_ | fsmithred: encryped loop boots are okay usually with r2u? | 14:33 |
_abc_ | Also is there a more recent readme than 2.3.6 ? | 14:33 |
fsmithred | boots? | 14:33 |
_abc_ | Encrypted loop fs debian/devuan etc | 14:33 |
fsmithred | r2u can create encrypted loopback file for persistence | 14:34 |
_abc_ | used with r2u. I read the readme, there's an example setup there I might use as template, we'll see. But I would like to know if there are snags or problems with this at all? | 14:34 |
_abc_ | fsmithred: sure, but does it work cleanly at present? | 14:34 |
_abc_ | In 2.4.1 ? | 14:34 |
fsmithred | that does | 14:34 |
_abc_ | This is not a priority but I will try one system like that, use it later. | 14:35 |
fsmithred | encrypted loopback file has been working for a few years | 14:35 |
_abc_ | I have to do with some locusts who steal everything they can lay hands on in IP. | 14:35 |
fsmithred | and I haven't messed with that for a long time, so it should still be good | 14:35 |
_abc_ | Good to know. I knew this but sometimes certain versions are known to have little bugs and snags, so I asked. | 14:35 |
_abc_ | Thanks. | 14:35 |
fsmithred | yw | 14:35 |
_abc_ | So no contact from linuxcnc? | 14:36 |
fsmithred | no | 14:36 |
fsmithred | maybe they looked at the code and changed their minds | 14:36 |
_abc_ | I dropped a hint there several times about the advantages of using r2u for a live boot / installable linuxcnc release. | 14:36 |
_abc_ | Did not "catch" so far, apparently. | 14:36 |
_abc_ | Okay. So 2.4.1 is latest and 2.3.6 is the most recent readme, and applies to 2.4.1 ? Or should I read the source for extra options? The release notes seem to imply nothing massive changed from 2.3.6 to 2.4.1. in the options and menus areas. Correct? | 14:37 |
fsmithred | yeah, lemme check the changelog for the latest. Not a lot changed. | 14:38 |
fsmithred | * Set root's path to include sbins for Buster/Beowulf. | 14:39 |
fsmithred | and updated files for patch_initrd | 14:39 |
fsmithred | which is for making the first partition read/write for user | 14:40 |
fsmithred | and allowing the persistent loopback file to be on the first partition (I think it still does that) | 14:40 |
_abc_ | Yes. I need it on another partition though. Are all versions of windows "unable" to see a second or higher partition even if that is vfat32? | 14:41 |
_abc_ | Vista and XP at least cannot see the extra partition(s) if there's an ext2 or anything like that in between. | 14:41 |
fsmithred | don't know. | 14:41 |
_abc_ | Also they are chronically unable to see multiple partitions on usb sticks. Is there a registry hack for this perhaps? | 14:41 |
fsmithred | maybe. I haven't used it since XP was still supported. | 14:42 |
_abc_ | Basically a r2u made stick with N partitions on it, will have a fat32 1st partition, visible to windows, and all the others not | 14:42 |
fsmithred | yeah, that's been my experience | 14:42 |
_abc_ | I'd like the 1st visible partition to NOT be the r2u one, but a dummy one. | 14:42 |
_abc_ | So what's the business of putting in an extra boot loader? | 14:42 |
fsmithred | change it to grub and you can do that | 14:43 |
_abc_ | Change it how? Instead of syslinux? | 14:43 |
_abc_ | I mean there's an option called ALTERNATE BOOT LOADER in the docs | 14:43 |
_abc_ | this then uses a chain b/l where one manually selects what to boot? | 14:44 |
_abc_ | Or does it honor the set bootable flag on a non -1st partition? | 14:44 |
fsmithred | it's not in the script | 14:44 |
fsmithred | have to do it manually | 14:44 |
_abc_ | You mean add grub2 ? | 14:44 |
fsmithred | first, make sure to leave 2mb free space at beginning of usb | 14:44 |
fsmithred | yeah | 14:44 |
fsmithred | alternate uses install-mbr | 14:44 |
fsmithred | I don't think that can do what you want | 14:45 |
_abc_ | How do I make sure I have 2mb free? create partition then delete it? | 14:45 |
fsmithred | if your snapshot has uefi support, you'll already have a grub menu that will work | 14:45 |
fsmithred | start the first partition 2mb in | 14:45 |
_abc_ | I do not use uefi, legacy systems with hardware hanging off of hw ports. | 14:45 |
_abc_ | fsmithred: ah, and still call it "1st" right? | 14:46 |
fsmithred | then you'll need to create /boot/grub/grub.cfg in first partition | 14:46 |
fsmithred | oh, not necessarily first | 14:46 |
_abc_ | Hm looks like I'll need to read more on grub | 14:46 |
fsmithred | grub can deal with config to be anywhere | 14:46 |
_abc_ | So how about this partition plan: 1st_part: 2mb in, as dummy, vfat32, visible to windows; 2nd: vfat32, bootable, root for r2u install; 3rd: ext2, data and loopfs images | 14:48 |
_abc_ | Will r2u work if the 1st partition is not the "root"? Or should I fake the name and then edit it and edit the boot scripts. | 14:48 |
fsmithred | not sure if syslinux needs to use first partition or not. I know it needs vfat and needs boot flag. | 14:49 |
_abc_ | Ok, more testing to be done. I will do this, I will dedicate one evening/night to it. | 14:49 |
fsmithred | to install grub: grub-install --boot-directory=/boot /dev/sdX | 14:50 |
fsmithred | with /boot/grub/grub.cfg on same partition as the system | 14:50 |
_abc_ | Yeah I get it. Okay, maybe talk to you in a couple of hours. I am just collecting information and setting up the plan and the time to allot now, won't be doing real work today. | 14:53 |
* _abc_ had a flu like thing and needs some r&r | 14:54 | |
fsmithred | ok. let me know what you find out. | 14:54 |
fsmithred | oh, I've got it now | 14:54 |
_abc_ | Hm? | 14:54 |
fsmithred | trying to get well before I fly to AMS on tuesday | 14:54 |
fsmithred | head cold | 14:54 |
_abc_ | Oh the flu? Be careful and do not hesitate to go for antivirals like acyclovir if needed, the flu is nasty and can leave you witl months of headaches and low stamina plus muscle pain and so on. | 14:55 |
_abc_ | *with. | 14:55 |
fsmithred | acyclovir won't help with flu | 14:55 |
_abc_ | I do not know. I think one of the antivirals does help. To prevent too much damage, not to make it shorter. | 14:55 |
fsmithred | well, it might keep you from getting a cold sore | 14:56 |
_abc_ | I am not into self medication. | 14:56 |
fsmithred | tamiflu or something like that | 14:56 |
_abc_ | fsmithred: avoiding nerve damage and encephalitis is more of a priority. | 14:56 |
_abc_ | Yes tamiflu maybe. | 14:56 |
ErRandir | _abc_: you'll probably want a partition for swap as well. | 15:04 |
_abc_ | No. | 15:04 |
ErRandir | ok, your choice :) | 15:05 |
_abc_ | Why would you swap on a usb stick?! ErRandir have you done this before?! | 15:06 |
ErRandir | Yes I have done this. If you have a swap partition and don't need it that's fine. The other way around and you're suddenly in a bad position. | 15:07 |
_abc_ | One can put in a new stick in another hole and use it as swap if needed. | 15:07 |
_abc_ | Swap is a really bad idea for speed reasons and also for security. | 15:08 |
_abc_ | Unless encrypted swap. | 15:08 |
_abc_ | Why would anyone use ext3fs on a crypto loopfs?! ext2 is not preferred? | 15:10 |
gnarface | _abc_: did you figure out the issue with your clock? | 15:16 |
_abc_ | gnarface: yes, it stepped one hour too late. instead of 0200am->0300 it stepped at 0259->0400 | 15:16 |
_abc_ | gnarface: I spent one hour looking for solutions, to no avail | 15:16 |
_abc_ | the tzfile dump shows it is to step at 0200 | 15:17 |
gnarface | i just figured it might have been a complication with localtime in the bios and some other os you might have been dual-bootin | 15:17 |
gnarface | dual-booting | 15:17 |
_abc_ | This reminds me I now need to set about 10 devices. One by one as I find them. | 15:17 |
_abc_ | gnarface: the other os was not dual booted into for about half a year | 15:18 |
gnarface | oh | 15:18 |
_abc_ | gnarface: also this system is in sleep when off, so not even it has rebooted in a long long time | 15:18 |
gnarface | well it was just a theory | 15:18 |
_abc_ | okay | 15:18 |
gnarface | tzdata should specifically ask, i thought, whether your bios is in localtime or utc | 15:18 |
gnarface | or maybe that was ntp | 15:19 |
gnarface | but either way, if you tell it one but do the other, that could cause weird issues too | 15:19 |
gnarface | newer versions of windows i've heard can support utc now, but it might require a registry change | 15:19 |
_abc_ | I read some BSD source for strformat iirc and it made several mentions to hacks in the glibc version at option %Z which is the tz related one. | 15:21 |
_abc_ | It is easily possible that something odd is going on there. | 15:21 |
_abc_ | In my version of glibc and in combination with running on local time. | 15:21 |
asbesto | \o/ | 18:06 |
KatolaZ | asbesto: back on IRC? | 18:19 |
KatolaZ | o_O | 18:19 |
asbesto | back? I never left, BIATCH | 18:20 |
asbesto | :D | 18:20 |
Ji-eF[m] | Can anyone point me to the package that contains certtool, please ? | 18:54 |
mns` | Ji-eF[m]: gnutls-bin | 18:55 |
Ji-eF[m] | woot, thanks mns` | 18:56 |
mns` | Ji-eF[m]: no problem :) | 18:56 |
Ji-eF[m] | wow, the backtick in your nickname made my Matrix client to display things in some unusual manner :D | 18:58 |
gnarface | that seems dangerous | 19:02 |
_abc_ | What the HELL http://www.devuan.org/pwned.html | 19:33 |
KatolaZ | _abc_: we are working on it :( | 19:35 |
buZz | april fools? | 19:35 |
KatolaZ | buZz: I bad one, since none of the devs knows about it... | 19:35 |
_abc_ | KatolaZ: got it. Again: ascii tracks stretch? | 19:35 |
KatolaZ | _abc_: do you think this is the moment to ask such a question? | 19:35 |
KatolaZ | o_O | 19:35 |
_abc_ | Yes, I keep forgetting. Is it stretch or wheezy? Idiotic release names should contain a number too. | 19:36 |
_abc_ | Sorry, doing things now, can't help you, don't know how, about the site. | 19:36 |
gnarface | it is stretch | 19:36 |
_abc_ | thanks. | 19:36 |
helios21 | Best of luck regarding the pwning. | 19:45 |
* helios21 is sad about the attack | 19:45 | |
_abc_ | I would be sadder if they pwned the repos for a while before putting up the crap logo, and someone got a trojaned iso | 19:45 |
specing | _abc_: maybe they did | 19:55 |
_abc_ | yes. | 19:56 |
specing | security update for ssh, now with backdoor :) | 19:56 |
_abc_ | People should make a HABIT out of putting the sha256 sums file on ANOTHER server than where the images are. | 19:56 |
_abc_ | I've yet to see someone implementing this. Even as a howto text, one line in the file. "check the sha256sums using the sha256sums file downloaded from ANOTHER mirror than this one" | 19:57 |
_abc_ | Placing the sums file in the same place with the items to be downloaded is completely useless. The http/ftp etc transports already check for file size, checking "integrity" with sha sums is completely useless, sum(1) is much faster | 19:58 |
* _abc_ awards a -1 points for security on a scale from 0 to 11 | 19:58 | |
KatolaZ | _abc_: your reasoning is totally borked | 19:58 |
_abc_ | Is it now? | 19:58 |
KatolaZ | the security of SHASUMS is guaranteed by the signature | 19:58 |
KatolaZ | done with gPG | 19:58 |
KatolaZ | and checked with the corresponding key | 19:59 |
_abc_ | Oh god. Yes, and what if they changed those too since they're on the same server? | 19:59 |
KatolaZ | changed what? | 19:59 |
KatolaZ | my own key? | 19:59 |
KatolaZ | jaromil's one? | 19:59 |
_abc_ | Average user downloads, checks sha256 against file provided, installs | 19:59 |
KatolaZ | o_O | 19:59 |
specing | _abc_ is correct | 19:59 |
_abc_ | Nobody cares about your key, the user will be reassured the sum matches what he just got from the same site | 19:59 |
specing | and _abc_ is also correct that the gpg public keys are not accessible in multiple locations | 20:00 |
_abc_ | Plus no-one bothers usually | 20:00 |
KatolaZ | specing: they are on public key servers... | 20:00 |
specing | KatolaZ: anyone can upload there | 20:00 |
KatolaZ | o_O | 20:00 |
KatolaZ | anyone can use the same key to sign my emails as well? | 20:00 |
KatolaZ | or jaromil's? | 20:00 |
KatolaZ | o_O | 20:00 |
KatolaZ | ok, got better things to do | 20:01 |
KatolaZ | will leave you to your murmurations | 20:01 |
KatolaZ | o/ | 20:01 |
specing | there are hundreds of key servers, have you uploaded devuan signing key to each and every one? | 20:02 |
gnarface | gpg doesn't work like that | 20:03 |
gnarface | there are two keys | 20:03 |
gnarface | a public and a private one | 20:03 |
specing | gnarface: the public part | 20:03 |
specing | of course | 20:03 |
gnarface | you sign with the private one, and you upload the public one | 20:03 |
specing | one person raised the issue of building all packages on the same server | 20:03 |
specing | I have not looked into this issue, yet | 20:03 |
KatolaZ | specing: on which server exactly? | 20:03 |
gnarface | it would be pretty difficult to make a forged public key that would match anyone's locally stored copy visually | 20:03 |
gnarface | my suggestion is to find an example | 20:03 |
MinceR | lol @ deface | 20:08 |
MinceR | (april fools?) | 20:12 |
bluemarlin | i sure hope so | 20:13 |
skyroveRR | So when is the site getting restored? | 20:13 |
MinceR | maybe on the second | 20:13 |
skyroveRR | Where's the server located? | 20:13 |
skyroveRR | MinceR: ? | 20:16 |
MinceR | i don't know | 20:16 |
MinceR | but if it's an april fools joke, i'm guessing it would be gone on april 2nd | 20:17 |
_abc_ | whois 1.2.3.4 will tell you where the server is located | 20:19 |
_abc_ | Paris, France, OVH nets | 20:19 |
_abc_ | No, belongs to Sistemi Domotici from IT | 20:20 |
_abc_ | The block | 20:20 |
_abc_ | 46.105.191.76 that is, which is what devuan.org resolves to now | 20:21 |
bluemarlin | MinceR: if this is april fools joke and that email from Jaromil on mailing list is part of it - i consider this a really bad taste. | 20:21 |
ashleyk_ | lol | 20:21 |
_abc_ | Oh I missed the fact today is April 1st | 20:21 |
* _abc_ feels fooled. | 20:21 | |
mns` | It's not a nice prank :( | 20:23 |
gnarface | i dunno either way i think the gopher theme is funny anyway | 20:23 |
Ji-eF[m] | Anyone knowledgeable with ngircd and SSL (and services stop/start)? Without SSL, the command `service ngircd start` starts the server OK. Enabling SSL, starting the service fails, but manually starting (ngircd --nodaemon) works. | 20:23 |
ashleyk_ | try it with a gopher client :) | 20:23 |
Ji-eF[m] | ngircd Devuan package is compiled with GNUtls support if that helps | 20:25 |
_abc_ | ashleyk_: it's a trap! | 20:27 |
asbesto | what | 20:31 |
asbesto | the HELL | 20:31 |
asbesto | http://www.devuan.org/pwned.html <--- that's MADNESS | 21:36 |
roo^y | i was sent that link. it's the reason this channel has my attention. Now i've just been sent a twitter link that @DevuanOrg posted | 21:39 |
sodastab | https://twitter.com/DevuanOrg/status/1112437646666711046 | 21:40 |
sodastab | lol | 21:40 |
Wonka | April Fool's Joke? | 21:40 |
sodastab | *checks date* yeah probably | 21:40 |
sodastab | hope they keep the gopher site up | 21:40 |
roo^y | :D | 21:41 |
asbesto | problem is - we can't acces to GIT anymore | 21:42 |
asbesto | so it's more than an april's fool :( | 21:42 |
Tom-_ | oh so it's not just me that can't access github.com | 21:42 |
Tom-_ | firefox wouldn't load it, but chromium did.... i missed youtube-dl.org | 21:42 |
sodastab | ? | 21:44 |
roo^y | why'd you lose all the pre-2016 data on your myspace site? | 21:44 |
va7lnx | Tom-_: you looking to download youtube videos? | 21:44 |
Tom-_ | yeah, i got youtube-dl working though, thanks :) | 21:44 |
DonkeyHotei | roo^y: https://www.theverge.com/2019/3/18/18271023/myspace-music-videos-deleted-2003-2015-server-migration | 21:46 |
va7lnx | I use a firefox plugin for that | 21:46 |
va7lnx | and the web does suck. | 21:46 |
roo^y | en.savefrom.net is somewhat alright for grabbing vids | 21:48 |
va7lnx | https://technologyto.com/extractor.html | 21:50 |
Jookia | Hi, when will the main site be restored? | 22:30 |
KatolaZ | Jookia: we are working on it | 22:31 |
Jookia | It's an april fools thing isn't it? | 22:31 |
va7lnx | gopher site works :) | 22:34 |
Jookia | it's a lot less accessible | 22:34 |
va7lnx | that is true | 22:35 |
va7lnx | does gopher have an equivalent to "post" or is it just a one-way medium? | 22:35 |
KatolaZ | va7lnx: gopher://pkginfo.devuan.org | 22:35 |
KatolaZ | they also put there a search engine for devuan packages :\ | 22:36 |
Jookia | Who made it that way? | 22:36 |
va7lnx | neat | 22:36 |
va7lnx | someone really put some thought into that. | 22:36 |
tuxd3v | Green Hat... they mean greed RedHat | 22:37 |
watchcat | i like the new look. i vote keep it. | 22:37 |
Jookia | Please no | 22:38 |
watchcat | at least the gopher. | 22:38 |
Jookia | Is there a mail list or repo or something for whoever did this? | 22:38 |
Jookia | I want to email them | 22:38 |
va7lnx | does gopher had SSL capabilities? | 22:39 |
Jookia | no | 22:39 |
va7lnx | mind you, I guess you could just use stunnel | 22:39 |
tuxd3v | Does any one knows the real address of devuan.com? | 22:40 |
tuxd3v | ould this be a dns attack and not on the site? | 22:40 |
KatolaZ | tuxd3v: devuan.com is not devuan.org | 22:40 |
tuxd3v | yeah sorry | 22:40 |
Jookia | Who runs the website? | 22:41 |
tuxd3v | 5.196.38.18? | 22:41 |
KatolaZ | Jookia: that's Devuan's server | 22:42 |
KatolaZ | -_- | 22:42 |
Jookia | KatolaZ: Aren't you involved in the website hosting? | 22:43 |
watchcat | i guess i'll just call devuan 'green hat' from now on. has a nice irish sound. | 22:45 |
roo^y | "all publicity's good publicity" :P | 22:45 |
va7lnx | KatolaZ: so they got to the domain registrar, not the web server? | 22:45 |
KatolaZ | va7lnx: no way | 22:45 |
KatolaZ | the DNS is fine | 22:45 |
va7lnx | oh. okay. | 22:45 |
KatolaZ | and it's pointing to all the correct servers | 22:45 |
va7lnx | www.devuan.org.600INA46.105.191.76 | 22:46 |
watchcat | guys, puhleeze. no doubt in my mind this is a joke. | 22:46 |
va7lnx | just in case, that's what I'm getting back | 22:46 |
va7lnx | watchcat: I think you are right. :) | 22:46 |
KatolaZ | that;s correct | 22:47 |
va7lnx | nobody would put that much effort in to pown a website. | 22:47 |
KatolaZ | watchcat: if it's a joke, it's a bad one :\ | 22:47 |
tuxd3v | humm | 22:48 |
Jookia | it's a meta joke done by katolaz probably | 22:49 |
redrick | By an odd coincidence, I've been trying to plant the rumour that EFF will replace HTTPS Everywhere with new codebase Gopher Everywhere in early April, thanks to their chief computer scientist Lirpa Loof. | 22:49 |
MinceR | :) | 22:49 |
watchcat | lirpa loof :D | 22:49 |
Jookia | it would just be nice to get an ETA when the main site gets back | 22:50 |
redrick | I got an enter local-to-me mailing list convinced that I was serious. | 22:50 |
tuxd3v | www.devuan.org. 600 IN A 46.105.191.76 | 22:52 |
tuxd3v | ok | 22:52 |
tuxd3v | and the repos? | 22:52 |
tuxd3v | are this one? | 22:52 |
tuxd3v | 5.196.38.18 | 22:52 |
KatolaZ | tuxd3v: repos are not affected | 22:53 |
KatolaZ | the machine was not compromised | 22:53 |
redrick | s/enter/entire/ (need more coffee) | 22:53 |
Jookia | was this done with consensus or just by katolaz | 22:53 |
roo^y | some say these guys https://i.imgur.com/zenFToY.jpg | 22:54 |
tuxd3v | probabloy they entered with 'nobody' user.. | 22:54 |
fsmithred | Jookia I think anything that's been done so far has been done by whoever could get hands on it first, and that behavior is by consensus. | 22:57 |
Jookia | fsmithred: what do you mean? | 22:57 |
KatolaZ | fsmithred: jaromil knows nothing, Centurion_Dan knows nothing, rrq just woke up and known nothing, Evilham is still booting up his computer :( | 22:57 |
KatolaZ | none of us can access any of the machines | 22:58 |
KatolaZ | except from d1galaxy, pkgmaster, and amprolla | 22:58 |
KatolaZ | :( | 22:58 |
Jookia | KatolaZ: So are you saying you didn't do this | 22:58 |
ralpheeee | is the website down? | 22:58 |
fsmithred | yeah, I just answered Jookia because it sounded like he thought you were acting on your own. | 22:58 |
fsmithred | oh | 22:58 |
fsmithred | I misunderstood | 22:58 |
fsmithred | no, Jookia, KatolaZ would not sabotage his own project | 22:59 |
fsmithred | he's one of the main devs | 22:59 |
KatolaZ | yeah, I would kick myself out of the infra *just for fun*... | 22:59 |
Jookia | So, you didn't do this? | 22:59 |
KatolaZ | gotta go, we are trying to talk to the provider now | 22:59 |
tuxd3v | from d1galaxy you have no access to those server? | 22:59 |
fsmithred | 'cause you're just sitting around with nothing to do | 22:59 |
KatolaZ | will update you | 22:59 |
fsmithred | thanks | 22:59 |
redrick | KatolaZ: Courage and thanks. Trying to think of ways I can help without running afoul of Brooks's Law. | 23:00 |
Venker | hi people | 23:00 |
tuxd3v | can any one access from: | 23:01 |
tuxd3v | d1galaxy, pkgmaster, and amprolla | 23:01 |
tuxd3v | to the afected sites? | 23:01 |
KatolaZ | no tuxd3v | 23:01 |
tuxd3v | in anny way | 23:01 |
tuxd3v | possible? | 23:01 |
tuxd3v | database users | 23:02 |
Jookia | KatolaZ: It really looks like you did this as an april fool's joke considering you're big in to gopher | 23:02 |
KatolaZ | tuxd3v: what do you think I have been trying to do in the last 5 hours? | 23:02 |
KatolaZ | :\ | 23:02 |
tuxd3v | I think you are trying anything possible | 23:02 |
tuxd3v | I am just giving Ideas | 23:03 |
tuxd3v | and I know its frustrating | 23:03 |
KatolaZ | thanks tuxd3v | 23:03 |
KatolaZ | I appreciate that | 23:03 |
KatolaZ | :) | 23:03 |
tuxd3v | does you have access do managment console of those servers? | 23:04 |
tuxd3v | idracs, hilos | 23:04 |
KatolaZ | we are trying to get hold of that | 23:04 |
tuxd3v | you welcome bro! | 23:04 |
Venker | is this a joke? | 23:05 |
Jookia | KatolaZ: can you just say 'No I didn't do this' | 23:05 |
tuxd3v | guys | 23:05 |
KatolaZ | Jookia: how many times should I say that? | 23:05 |
KatolaZ | o_O | 23:05 |
tuxd3v | C'mon | 23:05 |
Jookia | KatolaZ: I didn't see you say it at all, so just once to me would be fine | 23:05 |
tuxd3v | KatolaZ is a respectable person | 23:05 |
KatolaZ | -_- | 23:05 |
Jookia | Can you link me to a log of you saying it | 23:06 |
tuxd3v | you can't even access the repos | 23:06 |
KatolaZ | Jookia: No I didn't do it | 23:06 |
KatolaZ | are you happy now? | 23:06 |
KatolaZ | :\ | 23:06 |
Jjp137 | isn't that basically implied by what's being going on here in the past few hours and what's said on the DNG mailing list | 23:06 |
KatolaZ | bbl | 23:06 |
watchcat | we will all know on april 2. | 23:08 |
_abc_ | Well they timed it right, for Sunday April 1st | 23:08 |
tuxd3v | <Jjp137>, What do you mean | 23:08 |
_abc_ | Nobody reachable to take it down. | 23:08 |
redrick | Back when I was first in IT in the 1980s, if $FIRM had server downtime, the junior department member got posted to the server room door to intercept the parade of people walking up and wanting briefings -- so that other IT staffers could fix the problem. | 23:09 |
ralpheeee | wanted to finally try devuan ...tbh joke or no joke ...confidence has totally tanked from my perspective | 23:09 |
_abc_ | Translated: they had the door open before, and just made this happen today imo. Translation2: if you downloaded ANY isos from the main webpage check them again. | 23:09 |
_abc_ | redrick: nice job | 23:09 |
KatolaZ | redrick: devuan servers are not in my living room.... | 23:09 |
_abc_ | ralpheeee: lol? The website is related to the distro how? | 23:09 |
KatolaZ | :\ | 23:10 |
_abc_ | ralpheeee: you are so funny. Some isp/web hosting related problem occurred. Patience till tomorrow. | 23:10 |
redrick | KatolaZ: Bien sur. | 23:10 |
ralpheeee | this is "basic" infra structure | 23:10 |
tuxd3v | <Jjp137>, What do you mean, by the mailing lists? | 23:10 |
_abc_ | Monday things will be restored, humans will be around etc | 23:10 |
_abc_ | ralpheeee: it does not run on devuan. | 23:10 |
redrick | KatolaZ: I was basically trying to indirectly say 'Hey, give our esteemed Devuan folks some breathing room and enough with the questions.' | 23:11 |
Jjp137 | tuxd3v, here: https://lists.dyne.org/lurker/message/20190331.191104.169aaf9a.en.html | 23:11 |
Jjp137 | and so on and so forth | 23:11 |
* roo^y screams "EVERYONE PANIC!!", *runs next door & kills his neighbor's cat* | 23:12 | |
ralpheeee | well if you folks can take devuan seriously hats off to you folks | 23:12 |
roo^y | s/devuan/systemd/ | 23:13 |
watchcat | thank, ralpheeee u 2 | 23:13 |
redrick | ralpheeee: Are you going to keep trying until you get a rise out of someone? Asking for a friend. | 23:13 |
roo^y | maybe narcissist day falls on another date | 23:14 |
unixman_home | Why would one lose confidence in a distribution over a web site crack? That sort of thing happens all the time. Heck, I'd be more worried about a repository crack in, which has happened to other distributions over the years. :) | 23:16 |
watchcat | cough mint cough | 23:17 |
redrick | In Mint's case, the distro itself was compromised. | 23:17 |
tuxd3v | roo^y: find a girl, or a good porn movie to entertain yourself.. | 23:17 |
* roo^y doesn't want to take his unnecessary commentary to the #devuan_april-fools channel | 23:17 | |
roo^y | gaslighter left | 23:18 |
Jookia | sha1 fingerprint of website TLS is AC:59:5A:2D:37:C6:8E:10:18:F8:DC:CD:D5:01:3A:D2:7D:AA:C8:0B | 23:19 |
redrick | These sorts of Web-site incidents do underline the importance of, among other things, gpg-signed checksums for ISOs. | 23:19 |
redrick | Which Devuan is good about, and many distros are not. | 23:19 |
redrick | https://pastebin.com/1dX5XG7W | 23:23 |
se7en | Nice april fools joke guys | 23:26 |
se7en | You should keep gopher up tho | 23:26 |
redrick | watchcat: In Linux Mint's case, the www.linuxmint.com host got rooted for several hours, during which trojaned ISOs with matching md5sume files were posted by the intruder. After the incident postmortem, Mint finally starting gpg-signing the ISO checksums, but hadn't until then. | 23:29 |
redrick | That was 2016-02-20. Partial disclosure here: https://blog.linuxmint.com/?p=2994 | 23:30 |
tuxd3v | yeah I remember very well that, with Clem been very patient and working 2 days or so without sleep | 23:30 |
redrick | Never heard what the vector for site compromise was, but the cynic in me says 'Well, WordPress....' | 23:31 |
watchcat | yep. i'll just pass on discussion of mint, since i have low regard for the entire organization. 'nuff said. | 23:32 |
tuxd3v | Guys does the SSL certificate on the Site is valid? | 23:33 |
tuxd3v | I mean if its from devuan | 23:33 |
Venker | Hang on, admins! :-) | 23:33 |
Venker | I believe in this project | 23:34 |
redrick | watchcat: The fun one to go through was this, and I didn't want to say at the time that the embarrassed firm was my employer VA Linux Systems: http://linuxmafia.com/faq/Security/breakin-without-remote-vulnerability.html | 23:34 |
tuxd3v | Everybody with good intentions and been a lover for Free software and respect believe in the project | 23:34 |
tuxd3v | :) | 23:34 |
redrick | watchcat: In that case, a kid stole a developer ssh password at a university site for access to shells.sourceforge.net, cracked root there, replaced /usr/bin/ssh with a trojaned copy, and waited to see if VA Linux sysadmins were dumb, which they were: | 23:36 |
redrick | Some yob on the staff ssh'd from corporate into the host (harmless), but then scp'ed a file back into corporate (stupid). | 23:37 |
redrick | Moral of story: Mustn't expose your ssh credentials on a host you don't have full confidence in. shells.sourceforge.net, being a public shared host, was risky. | 23:38 |
watchcat | they shouldn't have been using passwords anyway. | 23:40 |
redrick | watchcat: Stolen private key and passphrase is not any less stolen. | 23:40 |
redrick | There's always someone who claims using keypairs fixes credential theft, when it just doesn't. | 23:42 |
redrick | I'll hasten to add that I was not the yob in question. I worked in a different department. | 23:42 |
Venker | Are backups affected, too? | 23:49 |
tuxd3v | -help | 23:52 |
_abc_ | So the answer is yes? I can't help but notice that GREEN HATS RHYMES WITH RED HATS | 23:54 |
_abc_ | Which may point at who was behind this. | 23:55 |
_abc_ | Or just be more smoke. | 23:56 |
tuxd3v | I think you are in the right track.. | 23:56 |
tuxd3v | the same criminals has ususal.. | 23:56 |
_abc_ | No way to know. False flag is very likely. | 23:56 |
tuxd3v | don't believe in false flag, when that only damage foes you do it.. | 23:57 |
tuxd3v | A false flag pretends to get something | 23:58 |
tuxd3v | which is not the case.. | 23:58 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!