Re: [DNG] Let's Encrypt (was: snapd in Devuan? Dependency on systemd...)

2020-12-03 Thread Rick Moen
I posted a wrong link, oops.

> Retrospective case studies of some of the latter from over the prior decade:
> https://lists.dyne.org/lurker/message/20201203.213847.8bf66630.en.html

I meant this one:
http://linuxmafia.com/pipermail/conspire/2020-December/011311.html

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Let's Encrypt (was: snapd in Devuan? Dependency on systemd...)

2020-12-03 Thread Rick Moen
Quoting Steve Litt (sl...@troubleshooters.com):

> What about the fact that Google gives higher rankings to secure
> accounts? For google togive that higher ranking, does self-signing
> suffice for enhanced rankings, or does one have to have a cert signed
> by a certification company like Let's Encrypt? This makes a big
> difference for business websites.

Obvious:  For my sites, I don't care.

If I were running IT operations at, say, my ex-employer Cadence Design
Systems, I would pay DigiCert for a relatively meaningful cert
attestation -- which, oddly enough, is exactly what they do, for obvious
business reasons (because oblivious people use the Web and have money
to spend.)  Business Web sites can justify the graft every 1-2 years to
get signatures that are not _quite_ as meaningless as those from Let's
Encrypt or one of the many low-end laugh factory CAs -- as Cadence does
in picking (apparently reputable, competent) DigiCert.[1]

Retrospective case studies of some of the latter from over the prior decade:
https://lists.dyne.org/lurker/message/20201203.213847.8bf66630.en.html


[1] I gave minor sideeye to DigiCert's acquisition in 2017 of
Symantec's gang-that-couldn't-shoot-straight CA/PKI division, but maybe 
they through out the rotten apples.  (Please note that nothing in this
post should be construed to endorse that or any other firm.)
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] samba/NAS box problem

2020-12-03 Thread Florian Zieboll via Dng
Am 4. Dezember 2020 02:19:42 MEZ schrieb Simon Walter :
> On 2020-12-02 02:18, Florian Zieboll via Dng wrote:
> ...
> > 
> > You can 'nmap --script smb-protocols ' for a list of supported 
> > versions.
> > 
> > libre Grüße,
> > Florian
> 
> Hi Florian,
> 
> What package holds said "smb-protocols" script?
> 
> I regularly troubleshoot in MS shops and that looks useful.


Hallo Simon,

it's in nmap-common

libre Grüße,
Florian


-- 

[message sent otg]

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Oldstable and Archive timing expectations?

2020-12-03 Thread golinux

On 2020-12-03 19:39, Simon Walter wrote:

Hi all,

First of all, sorry if I missed this in the docs somewhere. I had a 
look

around the website and particularly https://www.devuan.org/os/releases
has no info.

When can I expect oldstable to move to archived? I suppose I should 
keep
an eye out for a Chimaera BETA announcement and then change is 
imminent.


Thanks,

Simon
___



When chimaera stable 4.0 is released, ascii will become oldoldstable and 
archived. That won't be happening anytime soon afaik.  We do have a 
beowulf point release in the works.


golinux
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Oldstable and Archive timing expectations?

2020-12-03 Thread Simon Walter
Hi all,

First of all, sorry if I missed this in the docs somewhere. I had a look
around the website and particularly https://www.devuan.org/os/releases
has no info.

When can I expect oldstable to move to archived? I suppose I should keep
an eye out for a Chimaera BETA announcement and then change is imminent.

Thanks,

Simon
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] samba/NAS box problem

2020-12-03 Thread Simon Walter
On 2020-12-02 02:18, Florian Zieboll via Dng wrote:
...
> 
> You can 'nmap --script smb-protocols ' for a list of supported 
> versions.
> 
> libre Grüße,
> Florian

Hi Florian,

What package holds said "smb-protocols" script?

I regularly troubleshoot in MS shops and that looks useful.

Vielen Dank,

Simon
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Firefox and its forks are losing the power of add-ons.

2020-12-03 Thread Simon Walter
On 2020-12-04 08:59, John Crisp via Dng wrote:
> On 3 December 2020 09:12:07 CET, Edward Bartolo via Dng  
> wrote:
>> Dear All,
>>
>> If you have other solutions which I did not think of, please suggest
>> them. Thanks for taking the time to reply.
>>
> 
> "Firefox" has lost it. Hey ho.
> 

That they have. Maybe the rendering and JS engines can be of use to
someone. I want to block JS like with NoScript. So far it still works
with FF 78.

Oh thank you Devuan maintainers!
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Anybody successfully worked with an Nvidia GeForce gt 710 with Devuan?

2020-12-03 Thread Simon Walter
On 2020-11-29 21:26, Steve Litt wrote:
> Hi all,
> 
> Has anyone successfully worked with an Nvidia GeForce gt 710 with
> Devuan? As a bonus, has anyone gotten it to work without Pulseaudio?

I set up an old Dell XPS desktop for a friend's son with Manjaro. I
chose this because it was the only distro that came with the drivers
"out of the box". The Dell has a GTX 460. Not the same, though, I think
the drivers are the same. None of the recent drivers worked. I am not a
gamer nor am I familiar with Nvidia binary blobs. Though I vaguley
remember something about various open and closed source drivers that
varying levels of feature support. The old 460 works well, but not with
the recent drivers. I think those are for a different architecture - if
you can call it that. You could install Manjaro and see what drivers
they are using and install those on Devuan. For a bonus, check out
mgame. That was how I found out that Nvidia drivers are included in
Manjaro - amazing and a bit funny too.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] What I learned at Distrowatch

2020-12-03 Thread Simon Walter
On 2020-12-01 23:59, Mason Loring Bliss wrote:
> On Tue, Dec 01, 2020 at 03:33:41PM +0100, Antony Stone wrote:
> 
>> What, specifically, gets installed as part of Devuan which you don't want to 
>> see there?
> 
> As an exercise, try doing a minimal install via debootstrap, which is
> arguably the easiest way to tailor an install. I've thus far not managed to
> get an install through without elogind creeping in, even if I explicitly
> mark it as something to ignore. The Devuan live media I use for installs
> runs elogind. It sort of reminds me of the Agent Smith virus speech from
> The Matrix.
> 
> 
>> libsystemd0 is a stub library which contains none of the objectionable
>> code or "features" which people who don't want systemd are trying to keep
>> away from.
> 
> Unix libraries bundle related functionality together so that you can link
> just that which you need. Can you explain how libsystemd0 fits into this
> model? I'm unclear on what set of related functions it provides.
> 

Unfortunately for those who are scared of source code and perhaps those
who are scared in general, it is all too easy to become paranoid. After
all, you are at the mercy of those who are not scared. I'd say, pick up
programming as a hobby and conquer your fear. Walk with your head high.
Then maybe you'll understand what stub means. The people on this list
are very helpful and welcoming and will even feed trolls. If you are not
one, then educate yourself and stop acting like one.



signature.asc
Description: OpenPGP digital signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Firefox and its forks are losing the power of add-ons.

2020-12-03 Thread John Crisp via Dng


On 3 December 2020 09:12:07 CET, Edward Bartolo via Dng  
wrote:
>Dear All,
>
>If you have other solutions which I did not think of, please suggest
>them. Thanks for taking the time to reply.
>

"Firefox" has lost it. Hey ho.

For individual browsers:
Ublock Origin.
UMatrix if you want to be savage.

For networks:
Get a Raspberry Pi and PiHole (is there a Devuan version??). Just forward DNS 
queries through that.


-- 
Sent from my Android phone with K-9 Mail. Please excuse my brevity.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Let's Encrypt (was: snapd in Devuan? Dependency on systemd...)

2020-12-03 Thread Steve Litt
On Thu, 3 Dec 2020 13:38:47 -0800
Rick Moen  wrote:

> Quoting Arnt Karlsen (a...@iaksess.no):
> 
> > ..meanwhile, I too lean towards Ian's contrarianism:
> > http://michael.orlitzky.com/articles/lets_not_encrypt.xhtml  
> 
> I couldn't possibly agree more.  Let's Encrypt is a Potemkin Village
> approach to the SSL cert problem; it's pretend security that pretends
> as if a broken and unreliable CA infrastructure weren't that.
> 
> I continue to self-sign only, and if people want to know why they
> should trust it, I'll say 'Either (a) don't, or (b) verify the hash
> with me via any of a large variety of out-of-band methods, like any
> sensible person.' If they counter that they want an automated lock
> icon on their Web browsers so they are absolved of the need to think,
> I say 'Sounds like a personal problem.'
> 
> It makes me sad that this view is deemed 'contrarian'.  As a
> sysadmin, I consider it obvious common sense.
> 

What about the fact that Google gives higher rankings to secure
accounts? For google togive that higher ranking, does self-signing
suffice for enhanced rankings, or does one have to have a cert signed
by a certification company like Let's Encrypt? This makes a big
difference for business websites.

Thanks,

SteveT

Steve Litt 
Autumn 2020 featured book: Thriving in Tough Times
http://www.troubleshooters.com/thrive
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Let's Encrypt (was: snapd in Devuan? Dependency on systemd...)

2020-12-03 Thread Rick Moen
Quoting Arnt Karlsen (a...@iaksess.no):

> ..meanwhile, I too lean towards Ian's contrarianism:
> http://michael.orlitzky.com/articles/lets_not_encrypt.xhtml

I couldn't possibly agree more.  Let's Encrypt is a Potemkin Village
approach to the SSL cert problem; it's pretend security that pretends as
if a broken and unreliable CA infrastructure weren't that.

I continue to self-sign only, and if people want to know why they should
trust it, I'll say 'Either (a) don't, or (b) verify the hash with me via
any of a large variety of out-of-band methods, like any sensible person.'
If they counter that they want an automated lock icon on their Web
browsers so they are absolved of the need to think, I say 'Sounds like a
personal problem.'

It makes me sad that this view is deemed 'contrarian'.  As a sysadmin, I
consider it obvious common sense.

-- 
Cheers,   "2020 is pulling out more plot devices than 
Rick Moen a TV series on the brink of being canceled."
r...@linuxmafia.com  (Seen on Reddit, Oct. 2, 2020.)
McQ! (4x80)
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Anybody successfully worked with an Nvidia GeForce gt 710 with Devuan?

2020-12-03 Thread Arnt Karlsen
On Thu, 3 Dec 2020 02:54:44 -0500, Steve wrote in message 
<20201203025444.38d57...@mydesk.domain.cxm>:

> On Mon, 30 Nov 2020 12:43:23 -0500
> Hendrik Boom  wrote:
> 
> > From: Hendrik Boom 
> > To: dng@lists.dyne.org
> > Subject: Re: [DNG] Anybody successfully worked with an Nvidia
> > GeForce gt 710  with Devuan? Date: Mon, 30 Nov 2020 12:43:23 -0500
> > Sender: "Dng" 
> > User-Agent: NeoMutt/20170113 (1.7.2)
> > 
> > On Mon, Nov 30, 2020 at 12:26:05PM +0100, Arnt Karlsen wrote:  
> > > On Mon, 30 Nov 2020 05:10:29 -0500, Steve wrote in message 
> > > <20201130051029.510f1...@mydesk.domain.cxm>:
> > > 
> > > > On Sun, 29 Nov 2020 19:48:34 +0100
> > > > Riccardo Mottola via Dng  wrote:
> > > > 
> > > > > Hi,
> > > > > 
> > > > > Steve Litt wrote:  
> > > > > > Has anyone successfully worked with an Nvidia GeForce gt 710
> > > > > > with Devuan? As a bonus, has anyone gotten it to work
> > > > > > without Pulseaudio?
> > > > > 
> > > > > did you try nouveau? It is your only long-term hope, the short
> > > > > term being using binary drivers.  
> > > > 
> > > > Yes. Works fairly well, but intermittently X just
> > > > terminates.
> > > 
> > > ..doing what, like X freezing and hangs the whole machine?  
> > 
> > I have something like that happening when the system runs out of
> > memory. It becomes unresponsive to keyboard and mouse, and appears
> > to freeze.  
> 
> This computer has 64GB of ram tested through a whole 4 hour pass of
> memtest86, and htop shows it using next to none of that RAM.
> 
> I'll tell you what: If it weren't for the video, this would be a
> really kick ass machine. Its six cores map to 12 in htop and gkrellm.
> Running Chromium with several youtube movies playing uses up maybe
> 5%. On my current Daily Driver Desktop (DDD) such activities take
> about 70% of the CPU.

..right, that means you can afford running a debug kernel as your 
dayly driver kernel on those 6 cores and find out WTF is going on.

-- 
..med vennlig hilsen = with Kind Regards from Arnt Karlsen
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Firefox and its forks are losing the power of add-ons.

2020-12-03 Thread Edward Bartolo via Dng
Huh! Geekiness, in some circumstances, can mean lots of wealth! I has
happened to some: I cannot blame them for trying their luck.

Cheers.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Ubuntu without systemd?

2020-12-03 Thread Antony Stone
On Thursday 03 December 2020 at 12:11:11, aitor wrote:

> Hi again,
> 
> On 12/3/20 12:00 PM, Antony Stone wrote:
> >> I don't know, but sysvinit may have been removed entirely from ubuntu
> >> since the early days of upstart, due to its backward compatibility with
> >> sysV scripts.
> > 
> > That's a fair point, however in 18.04 and 20.04 there are no packages
> > with "upstart" in the name either:(
> 
> The most recent version of trisquel (a libre spin of ubuntu) does
> include sysvinit:
> 
> http://mirror.fsf.org/trisquel/dists/flidas/main/binary-amd64/Packages

Ooh, thanks - hadn't heard of that one, sounds like it could be just what's 
needed :)


Antony.

-- 
Schrödinger's rule of data integrity: the condition of any backup is unknown 
until a restore is attempted.

   Please reply to the list;
 please *don't* CC me.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Ubuntu without systemd?

2020-12-03 Thread aitor

Hi again,

On 12/3/20 12:00 PM, Antony Stone wrote:

I don't know, but sysvinit may have been removed entirely from ubuntu
since the early days of upstart, due to its backward compatibility with sysV
scripts.

That's a fair point, however in 18.04 and 20.04 there are no packages with
"upstart" in the name either:(


The most recent version of trisquel (a libre spin of ubuntu) does 
include sysvinit:


http://mirror.fsf.org/trisquel/dists/flidas/main/binary-amd64/Packages

Aitor.


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Ubuntu without systemd?

2020-12-03 Thread Antony Stone
On Thursday 03 December 2020 at 11:55:22, aitor wrote:

> Hi Antony,
> 
> On 12/3/20 10:32 AM, Antony Stone wrote:
> > I ask because I've looked at both Ubuntu 18.04 and 20.04 systems, and I
> > simply don't see the expected sysvinit packages available - I wonder if
> > they've been eliminated entirely, rather than just not installed by
> > default as Debian does.
> 
> I don't know, but sysvinit may have been removed entirely from ubuntu
> since the early days of upstart, due to its backward compatibility with sysV
> scripts.

That's a fair point, however in 18.04 and 20.04 there are no packages with 
"upstart" in the name either :(

> Cheers,
> 
> Aitor.

-- 
A few words to be cautious of between American and English:
 - momentarily
 - suspenders
 - chips
 - pants
 - jelly
 - pavement
 - vest
 - pint (and gallon)
 - pissed


   Please reply to the list;
 please *don't* CC me.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Ubuntu without systemd?

2020-12-03 Thread aitor

Hi Antony,

On 12/3/20 10:32 AM, Antony Stone wrote:

I ask because I've looked at both Ubuntu 18.04 and 20.04 systems, and I simply
don't see the expected sysvinit packages available - I wonder if they've been
eliminated entirely, rather than just not installed by default as Debian does.
I don't know, but sysvinit may have been removed entirely from ubuntu 
since the early days of upstart,

due to its backward compatibility with sysV scripts.

Cheers,

Aitor.


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Firefox and its forks are losing the power of add-ons.

2020-12-03 Thread terryc
On Thu, 3 Dec 2020 09:12:07 +0100
Edward Bartolo via Dng  wrote:

> Dear All,
> 
> Lately, I am noticing Waterfox has lost the ability to display my
> add-ons, which are AdGuard AdBlocker and NoScript. I had about two
> more in the past, but it is becoming increasingly difficult to have
> any that work. My preferences are an ad-free internet experience, or
> at least, if not entirely ad-free, with intrusive adds blocked, and a
> font rendering with a large than normal font size. The latter, is
> provided by Waterfox itself, but adds are favoured to intrude and
> steal bandwidth and processing power which I do not have much of.
> 
> I would like to ask whether a software proxy running on the same
> machine would be able to provide adequate ad filtering.

I thinkthis is an benefit of the package called squid, which has been
in repositries sinve Linux V0.? or similar. It is basically a web cache
oroxy and if I remember it correctly, it would also replace the block of
an add with a 'squid' block. Vague because I haven't used it since our
link was a dial-up lin and we had something doing that at the times.

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Firefox and its forks are losing the power of add-ons.

2020-12-03 Thread wirelessduck--- via Dng


> On 3 Dec 2020, at 19:12, Edward Bartolo via Dng  wrote:
> 
> Dear All,
> 
> Lately, I am noticing Waterfox has lost the ability to display my
> add-ons, which are AdGuard AdBlocker and NoScript. I had about two
> more in the past, but it is becoming increasingly difficult to have
> any that work. My preferences are an ad-free internet experience, or
> at least, if not entirely ad-free, with intrusive adds blocked, and a
> font rendering with a large than normal font size. The latter, is
> provided by Waterfox itself, but adds are favoured to intrude and
> steal bandwidth and processing power which I do not have much of.
> 
> I would like to ask whether a software proxy running on the same
> machine would be able to provide adequate ad filtering. I have
> iptables installed, but it is not configured and configuration
> requires some networking knowledge which unfortunately I do not have.
> I tried to find a GUI front end for iptables, but failed to find what
> is suitable for my very limited networking knowledge.
> 
> If you have other solutions which I did not think of, please suggest
> them. Thanks for taking the time to reply.
> 
> Edward.

I’ve never used it myself, but the privoxy website mentions it does ad blocking 
and is available from devuan/debian repositories.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Firefox and its forks are losing the power of add-ons.

2020-12-03 Thread Dimitris via Dng

Hey,

On 12/3/20 10:12 AM, Edward Bartolo via Dng wrote:

Dear All,

Lately, I am noticing Waterfox has lost the ability to display my

If you have other solutions which I did not think of, please suggest
them. Thanks for taking the time to reply.




Waterfox was sold to an advertising company last year..
probably not a good example for firefox forks & adblocking.. :)

don't know about adguard, but ublock origin works fine with :
firefox, firefox-esr, icecat, basilisk, waterfox, seamonkey, torbrowser.
some of those forks use latest versions of ublock origin, others use 
legacy versions : 
https://github.com/gorhill/uBlock/blob/master/dist/README.md#firefox-legacy

noscript has a "legacy" version too : https://noscript.net/getit

http/socks proxy, i know squid proxy can be set for adblocking, but 
maybe too heavy on resources..


there's the option of adblocking domains in /etc/hosts, or with a local 
dns resolver.



2c,
d.


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Ubuntu without systemd?

2020-12-03 Thread Antony Stone
Hi.

Before I started using Devuan as my standard distribution, I was converting 
Debian systems from systemd to sysvinit (Jessie and Stretch), and for servers 
without a graphical desktop environment, this worked perfectly well.

Does anyone know whether the same thing can be done starting from Ubuntu?

I ask because I've looked at both Ubuntu 18.04 and 20.04 systems, and I simply 
don't see the expected sysvinit packages available - I wonder if they've been 
eliminated entirely, rather than just not installed by default as Debian does.

Any suggestions / guidance / pointers?


Thanks,


Antony.

-- 
If I needed my own advice, I wouldn't give it to others.

   Please reply to the list;
 please *don't* CC me.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Firefox and its forks are losing the power of add-ons.

2020-12-03 Thread Edward Bartolo via Dng
Dear All,

Lately, I am noticing Waterfox has lost the ability to display my
add-ons, which are AdGuard AdBlocker and NoScript. I had about two
more in the past, but it is becoming increasingly difficult to have
any that work. My preferences are an ad-free internet experience, or
at least, if not entirely ad-free, with intrusive adds blocked, and a
font rendering with a large than normal font size. The latter, is
provided by Waterfox itself, but adds are favoured to intrude and
steal bandwidth and processing power which I do not have much of.

I would like to ask whether a software proxy running on the same
machine would be able to provide adequate ad filtering. I have
iptables installed, but it is not configured and configuration
requires some networking knowledge which unfortunately I do not have.
I tried to find a GUI front end for iptables, but failed to find what
is suitable for my very limited networking knowledge.

If you have other solutions which I did not think of, please suggest
them. Thanks for taking the time to reply.

Edward.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng