*** tilman_ has joined #crux | 03:20 | |
*** _________mavric6 has joined #crux | 03:38 | |
*** saptech has joined #crux | 04:18 | |
*** saptech has quit IRC | 06:32 | |
*** crash_ has joined #crux | 06:54 | |
*** workodera___ has quit IRC | 08:20 | |
*** workodera has joined #crux | 08:20 | |
*** elderK has joined #crux | 08:24 | |
*** crash_ has joined #crux | 09:09 | |
*** john_cephalopoda has joined #crux | 09:40 | |
*** parity11 has joined #crux | 10:37 | |
*** saptech has joined #crux | 13:05 | |
*** john_cephalopoda has quit IRC | 13:18 | |
*** john_cephalopoda has joined #crux | 13:48 | |
*** john_cephalopoda has quit IRC | 14:16 | |
*** john_cephalopoda has joined #crux | 14:16 | |
*** parity11 has quit IRC | 15:16 | |
mayfrost | anybody with crux on their laptop? I installed mine on an old thinkpad | 17:18 |
---|---|---|
john_cephalopoda | mayfrost: Yup, got CRUX on my DELL laptop. | 17:19 |
joacim | i run crux on mine | 17:19 |
frinnst | laptops are evil | 17:19 |
frinnst | now get off my lawn! | 17:20 |
mayfrost | the thinkpad has its wifi roasted so can't use wifi though | 17:20 |
mayfrost | using ethernet only is painful | 17:20 |
joacim | if just the card, can probably find a replacement | 17:21 |
joacim | which thinkpad is it? | 17:21 |
mayfrost | t500 | 17:21 |
joacim | is that the one with the blacklist? | 17:21 |
joacim | t500 can be librebooted tho, i think | 17:21 |
mayfrost | not sure | 17:21 |
mayfrost | yeah | 17:21 |
joacim | my t420 has a blacklist, so i have to pay attention to which card i get | 17:22 |
mayfrost | I might be me the one breaking the card though | 17:22 |
mayfrost | been cleaning the machine | 17:22 |
mayfrost | too bad because I was rushing to make some ports and this slows me down | 17:23 |
mayfrost | btw I need to make Perl modules | 17:24 |
joacim | been meaning to encrypt my root, and make it so i have to use a password when waking from hibernate or sleep | 17:25 |
mayfrost | sounds like filesystem encrytion | 17:26 |
mayfrost | not sure how to make it promt for a password | 17:27 |
*** elderK has quit IRC | 17:29 | |
joacim | lockers / screensavers can do that i think | 17:36 |
joacim | but to make that run as a regular user instead so i dont have to type in the root password | 17:36 |
pedja | hack something up with pam/yubikey, perhaps :) | 17:55 |
joacim | could use the fingerprint reader | 18:11 |
frinnst | gotta love scewed snmp measurements: disk space threshold: 1634.5% used (-21.7GB free) | 18:26 |
frinnst | silly quotas | 18:26 |
john_cephalopoda | Fingerprint readers aren't good security | 18:34 |
joacim | toeprint then | 18:34 |
john_cephalopoda | Most of them can be easily tricked with a fake fingerprint (e.g. one taken from a glass you touched during a conference). | 18:34 |
john_cephalopoda | Also it's really easy for law enforcement to just unlock your phone without your collaboration. | 18:35 |
john_cephalopoda | Or a thief. | 18:35 |
john_cephalopoda | Force the person to press their finger against the device, done. | 18:35 |
joacim | all theyll find is my weeb shit | 18:35 |
john_cephalopoda | joacim: Maybe they're into it. | 18:35 |
joacim | then we have something to talk about =) | 18:35 |
john_cephalopoda | Well, if you want to encrypt your root but unlock it with fingerprint, you could as well just rot13 all your files. | 18:38 |
joacim | could use does not mean I will use | 18:38 |
joacim | i dont want to discuss how weak fingerprints are | 18:38 |
joacim | i dont care | 18:38 |
john_cephalopoda | Just saying that encrypting and then using such a weak method for securing it would kinda beat the purpose of encrypting. | 18:46 |
joacim | there is no strong security like that | 18:46 |
joacim | you can lose your authenticator, people can see your password, people can harvest your thumb | 18:47 |
joacim | a physical key can be replicated from a photo too | 18:47 |
john_cephalopoda | Thumbs are just not really good at authenticating people because you leave perfect reproductions of that pattern literally everywhere, and forcing you to give it to somebody against your will is trivial. | 18:48 |
joacim | same for passwords and authenticators | 18:48 |
john_cephalopoda | Of course people can read your PIN or password, but they have to be close by or install a camera in a place where you enter the password. | 18:49 |
john_cephalopoda | Also forcing you to give them your password against your will is hard. | 18:49 |
joacim | if they really want in, theyll do that | 18:50 |
joacim | or just wait until you unlock it then run off with your laptop | 18:50 |
john_cephalopoda | Holding the phone into your face or against your finger can happen against your will and leaves no real traces. But getting a password is more complicated. You can just say "no" and they will have to use very illegal methods to get it. | 18:50 |
john_cephalopoda | That might be relevant when you are controlled at the border. | 18:51 |
joacim | which law enforcement have been known to do when dealing with criminals. harvest evidence from an unlocked device so they dont have to bother about the password | 18:51 |
john_cephalopoda | Heard many horror stories from the US border. | 18:51 |
joacim | dont travel with illegal stuff on your body | 18:51 |
joacim | if you cared, could also get a disposable laptop for travel | 18:52 |
john_cephalopoda | ACTION . o O ( USA makes boobs illegal, 120000 women arrested for carrying illegal stuff on their body ) | 18:52 |
joacim | in australia, no boobs is illegal | 18:52 |
john_cephalopoda | In Australia, everything is illegal. | 18:53 |
john_cephalopoda | There is a show about Australian customs on TV from time to time. They are super-concerned about their super-dangerous wildlife. | 18:53 |
john_cephalopoda | "No! Orchids! They could kill all our adorable blue-ringed octopi!" | 18:53 |
joacim | i dont like it when people bring in fancy spicy food here | 18:58 |
joacim | those swedish ideas dont belong here | 18:58 |
*** onodera has joined #crux | 19:30 | |
*** saptech has quit IRC | 20:23 | |
mayfrost | I've got a warning during compilation | 20:27 |
mayfrost | it says "bsdtar: *: Cannot stat: No such file or directory" | 20:27 |
mayfrost | it compiles but I would like to eliminate this warning | 20:27 |
*** saptech has joined #crux | 20:27 | |
*** elderK has joined #crux | 20:51 | |
stratact | What's the difference between refreshing the signature and updating it? | 20:51 |
tilman | mayfrost: you didn't install your stuff to $PKG | 20:52 |
mayfrost | oh | 20:54 |
mayfrost | I have DESTDIR=$PGK | 20:55 |
mayfrost | where else do I set $PKG | 20:55 |
jaeger | did you spell it $PGK? that would be the problem | 20:55 |
jaeger | stratact: what do you mean by refreshing? | 20:56 |
mayfrost | sorry, it is $PKG | 20:56 |
jaeger | check the Makefile, then, make sure it actually supports DESTDIR | 20:57 |
stratact | jaeger: pkgmk -rs vs pkgmk -us | 20:57 |
jaeger | according to the man page, it updates the signature but not the sha256sums. never used that one before | 20:58 |
stratact | Hmm, I see, so I'll use -us instead then | 21:16 |
mayfrost | ok, BINDIR replaces DESTDIR in Elvis | 21:19 |
mayfrost | thanks jaeger | 21:19 |
jaeger | np | 21:21 |
pedja | it's getting crowded on Mars :) | 21:23 |
pedja | <insert the usual 'humanity should spend more money on space exploration than on inventing yet another way to kill people' rant> | 21:27 |
pedja | how much money has sunk into f-35? 30 billion $? | 21:27 |
pedja | sorry about OT :) | 21:31 |
john_cephalopoda | pedja: I'd pay 30 billion $ to shoot Trump to Venus. | 21:35 |
saptech | :) | 21:36 |
john_cephalopoda | Would be totally worth it. | 21:36 |
saptech | hello all | 21:36 |
saptech | I'll donate to the shoot trump to anyplace | 21:37 |
saptech | I have my Mate running smoothly now, but I must be missing some themes or something | 21:39 |
saptech | when using openbox, and if I run some Mate apps, such as Pluma editor, the icons for the menu at the top of window is not displayed | 21:40 |
saptech | any idea how to have that showing? | 21:41 |
joacim | could be a gtk setting. if only labels show | 21:41 |
saptech | yes, just labels with a square box for the icons | 21:42 |
saptech | one of those gtk engines I guess | 21:44 |
*** onodera has quit IRC | 22:54 | |
pedja | https://www.ghacks.net/2018/11/23/german-federal-office-bsi-publishes-telemetry-analysis/ | 23:07 |
pedja | interesting read | 23:08 |
pedja | if you know German, that is :) | 23:09 |
*** john_cephalopoda has quit IRC | 23:13 | |
saptech | I'm having a hard time with this signature mismatch error: How to solve it? | 23:16 |
saptech | https://bpaste.net/show/399da9cff57a | 23:16 |
saptech | can't open /etc/ports/mate.sec for reading. No such file | 23:23 |
frinnst | you cant sign a port with someone elses key | 23:28 |
frinnst | regarding your issue it seems like an maintainer oversight | 23:28 |
frinnst | just use -is to ignore the signature - since it's only .footprint and has nothing to do with security | 23:29 |
frinnst | poke jaeger to fix it | 23:29 |
mayfrost | how to create a signature if I am the mantainer? | 23:29 |
mayfrost | tried pkgmk -us | 23:29 |
ryuo | ACTION pokes jaeger with a *long* stick. | 23:29 |
ryuo | I poked the ogre. | 23:29 |
frinnst | https://crux.nu/Wiki/SignedPorts | 23:29 |
ryuo | ACTION runs. | 23:30 |
frinnst | check the "Key Handling" part | 23:30 |
mayfrost | thanks | 23:30 |
saptech | frinnst, ok, thanks | 23:34 |
jaeger | The signature looks ok here, I'm assuming that was post-local-edit | 23:36 |
saptech | yes | 23:39 |
jaeger | ok | 23:42 |
mayfrost | first script in the wiki worked but not second | 23:53 |
mayfrost | had to go under each port tree to generate signature | 23:54 |
mayfrost | oh, the second script is for updating not creating | 23:55 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!