Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
Neil Bothwick wrote: On Tue, 21 Jul 2015 12:35:27 -0500, Dale wrote: From what I recall about Lasspass, it does encrypt the data locally then uploads it. I recall reading that if you lose your master password, they can't get in it either. All they get is encrypted data. Unless the source is available, there is no evidence his is true.. One of the people from Lastpass discussed this a long time ago. I'm pretty sure it was on this mailing list. I archive this mailing list but I don't do it for that long. It's likely still archived on gmane or something tho. Dale :-) :-)
[gentoo-user] Re: [OT] Very recent change in behavior of gmail imap/smtp servers
On 2015-07-22, walt w41...@gmail.com wrote: Very soon after being invited to open a gmail account, I discovered that google offers non-web-browser access to their free (as in beer) email servers. Yep. Their IMAP implementation is pretty well done. Definitly better than courier and far better than MS exchange server. This puzzled me (still does) because it seems to violate google's basic business model, which is based on advertising revenue. (I never see an advertisement when sending/reading email via smtp/imap, obviously.) I think the theory is that you'll still use gmail via web some of the time [I do when I want to search] and probably calendar, and contacts, and other stuff [I certainly do]. Plus, they still get to trawl through all your email traffic. Google has just introduced a 120-second delay before allowing login to their email servers. Just in the last day or two, literally. I'm not seeing that with either of my gmail accounts. Same login times as always (1-2 seconds) on both IMAP and SMTP servers. -- Grant
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tue, Jul 21, 2015 at 10:05:57PM -0400, cov...@ccs.covici.com wrote: Neil Bothwick n...@digimed.co.uk wrote: Have you tried KeePass? It doe what you are doing but with a decent interface and the ability to type the details into web pages for you. But does it store the data on someone's server? Where they could have a data breech? As discussed in a related subthread (at least, it's inferred, though not explicitly stated) KeePass uses file-based storage on the local machine it's running on - passwords are stored in a *.kdb file - so you're not sharing your passwords, encrypted or otherwise, with any third party. This can be extended using some filesharing service - either commercial or personally run - to allow syncing of passwords between devices (or more accurately, syncing of KeePass databases between devices). KeePass is Qt based and has a client at least for Linux and Windows, as well as an Android app (DroidPass). I personally sync my .kdb using an ownCloud instance, whereas Neil uses SyncThing, a peer-to-peer sync service. Utilities available in Gentoo are: app-admin/keepassx dev-python/keepassx dev-perl/File-KeePass One I'm not certain of but, judging from the name may also be related, is: app-admin/keepass -- wraeth wra...@wraeth.id.au GnuPG Key: B2D9F759 signature.asc Description: Digital signature
[gentoo-user] Re: SDDM/KDE5: no sound card available?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2015-07-21 14:12, Nikos Chantziaras wrote: I upgraded to KDE 5 recently, and was using LightDM as the display manager. It seems that KDE 5 prefers SDDM though and offers a config module for it in System Settings. So I installed SDDM. However, when I log in with SDDM, I get no sound. My sound card just... disappears. alsamixer -c0 says: invalid card index: 0. aplay -l says: aplay: device_list:268: no soundcards found... Even if I disable pulseaudio, there's still no ALSA cards found. When I ctrl+alt+F1 to a console and log in there, there's no problem. My sound card is found. But in a KDE session started with SDDM, nope. No sound card (and thus, no sound.) Works just fine with LightDM. I'm on ~amd64 with gentoo-sources-4.1.2, pulseaudio-6.0. KDE 5 is installed from portage (kde-plasma/plasma-meta). Any help? Are you using systemd? If so, did you build sddm with USE=systemd? If not, did you build sddm with USE=consolekit and read the warning printed by portage? This display manager doesn't have native built-in ConsoleKit support. In order to use ConsoleKit pam module with this display manager, you should remove the nox11 parameter from pm_ck_connector.so line in /etc/pam.d/system-login Your issue is most likely that your X session is not being treated as a login session by logind/ConsoleKit, and therefore your user is not being added to the ACLs on the various devices under /dev, including all sound devices, certain input devices, any CD/DVD/BR devices you may have, and certain video devices. - -- Jonathan Callen -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCgAGBQJVrvMEAAoJEEIQbvYRB3mgJi8QALktjDzO32+5G349HzOPE/nw aJ2wM8wue8/x2VdIK0q9d/DqVQLqw36j4qZl9tC3cSWQLdetmsHz563MCETfAW9d GBsGCldWortdQkwAe7FX3yb0vJgqmVJ7CDjwZ/W3JGyX/ARwFPQIjdKW9MfIJcsS XgvyV1gpVBu4xol64M0xl87hUKE+o17Ng/JCo9shU0ioO03BW0w2aKSviqPHtQYA iKIz3q6xdi/g7aybPU8eqRmwWytlQXj8aZm3N9+Cx2dCe8a4/nLtZmfetxyTC+5O WYqeQVeITjCdT0e53w6ZXX2fqe+NjrMVtUHJYjV+XNhT2FoISE/HwqTiuG2DVMf6 avOqQXC/LAZARUICmKdqamWRlBpnO1kUElp6XaGqmtX1wVd3VyZr9AcFVMw+NZv5 uBW4kudaq19cLcXH6/VYawg+eWaUdJ34ILVokpZLAG6/HP6fD3m49rkx25o6Q1JO cl/NftK9TULGxjnHMfUnFnA53eA45qwBVe90IfdN6TRrlJt7EGqAYcMY6Ib1TUs3 XD/y+tMA8u7nuJqS0vujgtlyfjcqYMA9EEEQ8TT1aDiw/HT3vEFtbx/6pFOnCTZd LkDRkY//K706X4eagK9Alhqb44nRgI6frWAfEJRQnXCyNTDKyntseSDUVKCD9rwP TTc/MU34RvWrdaIyN27f =eO32 -END PGP SIGNATURE-
[gentoo-user] [OT] Very recent change in behavior of gmail imap/smtp servers
Very soon after being invited to open a gmail account, I discovered that google offers non-web-browser access to their free (as in beer) email servers. This puzzled me (still does) because it seems to violate google's basic business model, which is based on advertising revenue. (I never see an advertisement when sending/reading email via smtp/imap, obviously.) Google has just introduced a 120-second delay before allowing login to their email servers. Just in the last day or two, literally. I can understand the delay for sending email (spammers) but why the same delay for reading email? (My conspiracy theory has been suppressed to allow room for your own conspiracy theory ;)
[gentoo-user] Re: [OT] Very recent change in behavior of gmail imap/smtp servers
On Tue, 21 Jul 2015 21:45:23 -0500 Dale rdalek1...@gmail.com wrote: walt wrote: On Wed, 22 Jul 2015 02:11:48 + (UTC) Grant Edwards grant.b.edwa...@gmail.com wrote: Google has just introduced a 120-second delay before allowing login to their email servers. Just in the last day or two, literally. I'm not seeing that with either of my gmail accounts. Same login times as always (1-2 seconds) on both IMAP and SMTP servers. That info amazes me, but gives me even more evidence for a conspiracy theory :) My ISP (att.com) may be responsible for this new delay. att is involved with the ongoing net-neutrality battles here in the US with netflix et alia, so why not add yet another fuzz-factor to the mix. I hope my email still works when I wake up tomorrow morning... Makes me wonder. Sometimes when I go to facebook, it doesn't come up on first or second try. I've seen that with other sites as well. Hm. When I get a error, it is instant. It seems to be so instant that it doesn't even have time to do a DNS lookup much less hit the website. By the way, I use ATT too. DSL after many years of dial-up. I just tried entering the number of the beast ;) 8.8.8.8 into /etc/resolv.conf and that reduced my waiting time from 120 seconds to 30 seconds (actual measurement by stopwatch). I'm done playing now until morning...
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
Mick wrote: On Tuesday 21 Jul 2015 02:40:54 Dale wrote: I use the random generator too. Some older sites, forums or something that isn't really sensitive, may still have my old passwords but sites like banking and such each have their own random generated one. I also try to generate the longest and most complex password the site will allow. Some sites don't allow the characters above the number keys. Another thing, I was at my brothers once and needed to login to a site. I installed lastpass, typed in my email and master password and I could go anywhere I wanted just as if I was sitting at my own puter. If it wasn't for lastpass, I would have had to come home and do what needed doing. So far, this is the best solution I have found and I only use the free part. ;-) Dale :-) :-) A better, as in more secure, solution should involve local encryption and IMHO local air-gapped storage. A USB key will do nicely and you can have a second USB key stored in your brother's premises, for disaster recovery scenarios. This is because cloud storage: a) creates a honey pot which attracts attacks[1] and b) most of cloud storage is in the US. [1] https://en.wikipedia.org/wiki/LastPass#Security_issues From what I recall about Lasspass, it does encrypt the data locally then uploads it. I recall reading that if you lose your master password, they can't get in it either. All they get is encrypted data. Of all the things I read about when looking for a password manager, Lastpass was the only thing that came close to what I wanted. After using it a while, it is all I need. https://lastpass.com/how-it-works I've had USB sticks break before. They are also easy to lose. I'd prefer not to store something that important on a USB stick. Dale :-) :-)
Re: [gentoo-user] Packaging ASL
On Tue, 2015-07-21 at 07:18 -0600, Jc García wrote: 2015-07-21 5:41 GMT-06:00 Zeev Pekar zeev.pe...@avtechscientific.com: Dear Gentoo Developers, We have just released the version 0.1.4 of ASL - Advanced Simulation Library http://asl.org.il. May I ask somebody to volunteer to package it for Gentoo? Packaging efforts for other distros are underway and probably can be helpful for Gentoo [1]. Really interesting library, but I doubt you will get what you expect in this list, neither in the -dev list because as it is a library and AFAIK there's no applications requiring it, I doubt they'll want to add it to the main repository, but sure there's a place in gentoo for the library, the gentoo-science project[1], you can try create a github issue[2] requesting the add of the library there. You could also find more folks interested in it, this list I would say is mostly sysadmin/troubled-user stuff. If I find time I might try to make the ebuild and send pull request to the science repo, but I haven't learned much about CMake, so I would have to learn a bit more about it first. Regards, and thank you for the spread of such Important type software in a FOSS way. [1] https://wiki.gentoo.org/wiki/Project:Science [2] https://github.com/gentoo-science/sci (If you check the commits log you'll see that it is a very alive repo) I don't think CMake should be an issue, check our Quick Start guide: http://asl.org.il/documentation/ I also opened an issue, which might serve as central point to coordinate packaging efforts: https://github.com/gentoo-science/sci/issues/452 Thank you! Zeev
[gentoo-user] SDDM/KDE5: no sound card available?
I upgraded to KDE 5 recently, and was using LightDM as the display manager. It seems that KDE 5 prefers SDDM though and offers a config module for it in System Settings. So I installed SDDM. However, when I log in with SDDM, I get no sound. My sound card just... disappears. alsamixer -c0 says: invalid card index: 0. aplay -l says: aplay: device_list:268: no soundcards found... Even if I disable pulseaudio, there's still no ALSA cards found. When I ctrl+alt+F1 to a console and log in there, there's no problem. My sound card is found. But in a KDE session started with SDDM, nope. No sound card (and thus, no sound.) Works just fine with LightDM. I'm on ~amd64 with gentoo-sources-4.1.2, pulseaudio-6.0. KDE 5 is installed from portage (kde-plasma/plasma-meta). Any help?
Re: [gentoo-user] Packaging ASL
On Tue, 2015-07-21 at 16:55 +0300, Andrew Savchenko wrote: On Tue, 21 Jul 2015 07:18:58 -0600 Jc García wrote: 2015-07-21 5:41 GMT-06:00 Zeev Pekar zeev.pe...@avtechscientific.com: Dear Gentoo Developers, We have just released the version 0.1.4 of ASL - Advanced Simulation Library http://asl.org.il. May I ask somebody to volunteer to package it for Gentoo? Packaging efforts for other distros are underway and probably can be helpful for Gentoo [1]. Really interesting library, but I doubt you will get what you expect in this list, neither in the -dev list because as it is a library and AFAIK there's no applications requiring it, I doubt they'll want to add it to the main repository, There is no rule forbidding to have library with zero consumers in the main repository. As long, as someone maintains it. but sure there's a place in gentoo for the library, the gentoo-science project[1], you can try create a github issue[2] requesting the add of the library there. You could also find more folks interested in it, this list I would say is mostly sysadmin/troubled-user stuff. I agree, on science overlay there are more interested people. Mail to gentoo-science and gentoo-physics lists. I'm working on another branch of physics, so I'm not sure I'll be able to test this library thorough, though. Even just packaging will be great contribution. Thank you for tips - I'll mail also to the both lists. Note to Zeev: if you're interested in packaging by various distributions, try to make their job easier. A quick check shows that there are version constrains on dependencies, e.g. =vtk-6.1, but they're not mentioned in the documentation. Fixing this will save people from digging into cmake files. Fixed: http://asl.org.il/documentation/ Zeev
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
Am 21.07.2015 um 01:18 schrieb walt: I suspect most people don't even know firefox has a ProfileManager, but I'm here to warn you not to use it. It just cost me years of bookmarks and saved passwords. For testing purposes I invoked firefox-bin with the -ProfileManager flag (don't do this, it's broken!) and created a fresh firefox profile with the name temp as I've been doing for years. I ran the temp profile while doing my testing, quit firefox and then re-invoked firefox with the -ProfileManager flag and used it to delete the temp profile because I didn't need it any more. Unfortunately, deleting temp also deleted the default profile I've been using for years, which had all of my bookmarks and saved passwords and maybe other stuff I haven't even thought about yet. I'm copying an old firefox profile from another machine that's four years out of date. Maybe I can rescue an ort here or there. What a fscking disaster. Lesson learned: if you need to start firefox with a fresh profile, just move your ~/.mozilla directory out of the way and let firefox create a new one from scratch. you know, a simple cronjob copying your home directory every odd day would have prevented all that.
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
Mick wrote: On Tuesday 21 Jul 2015 18:35:27 Dale wrote: Mick wrote: On Tuesday 21 Jul 2015 02:40:54 Dale wrote: I use the random generator too. Some older sites, forums or something that isn't really sensitive, may still have my old passwords but sites like banking and such each have their own random generated one. I also try to generate the longest and most complex password the site will allow. Some sites don't allow the characters above the number keys. Another thing, I was at my brothers once and needed to login to a site. I installed lastpass, typed in my email and master password and I could go anywhere I wanted just as if I was sitting at my own puter. If it wasn't for lastpass, I would have had to come home and do what needed doing. So far, this is the best solution I have found and I only use the free part. ;-) Dale :-) :-) A better, as in more secure, solution should involve local encryption and IMHO local air-gapped storage. A USB key will do nicely and you can have a second USB key stored in your brother's premises, for disaster recovery scenarios. This is because cloud storage: a) creates a honey pot which attracts attacks[1] and b) most of cloud storage is in the US. [1] https://en.wikipedia.org/wiki/LastPass#Security_issues From what I recall about Lasspass, it does encrypt the data locally then uploads it. I recall reading that if you lose your master password, they can't get in it either. All they get is encrypted data. Of all the things I read about when looking for a password manager, Lastpass was the only thing that came close to what I wanted. After using it a while, it is all I need. https://lastpass.com/how-it-works Right, your data may be encrypted locally, but if you use a browser to decrypt it (after it is downloaded to your PC) then there are attack vectors (e.g. XSS) for the decrypted data to be leaked out of your machine. Well, couldn't the same be said if it is encrypted on a USB stick? Anytime you encrypt something, you have decrypt it to use it and that has to be done somewhere. I've had USB sticks break before. They are also easy to lose. I'd prefer not to store something that important on a USB stick. Dale :-) :-) I didn't clarify that you should use something like gpg to encrypt your file(s) on the USB stick, as I do this with all sensitive files not just passwords. I more or less assumed that it is the done thing. Broken USB sticks you can drive a drill through, or throw in a fire. Stolen USB sticks will at least be encrypted. If you are really paranoid you could also use dm-crypt to additionally encrypt the whole USB partition. My point is, if you put the info on a USB stick and lose it, you have now lost all your passwords. If it fails, same problem. The way Lastpass works, even if your computer dies from say a house fire, once you login to Lastpass with your new puter, you are back in business. Dale :-) :-)
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
Neil Bothwick n...@digimed.co.uk wrote: On Tue, 21 Jul 2015 16:31:52 -0400, cov...@ccs.covici.com wrote: I have owncloud working just fine, although I don't use it for passwords -- for those I just have a pgp key and individual files and I have an iphone app which can decrypt them. Have you tried KeePass? It doe what you are doing but with a decent interface and the ability to type the details into web pages for you. But does it store the data on someone's server? Where they could have a data breech? -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici cov...@ccs.covici.com
[gentoo-user] Re: [OT] Very recent change in behavior of gmail imap/smtp servers
On Wed, 22 Jul 2015 02:11:48 + (UTC) Grant Edwards grant.b.edwa...@gmail.com wrote: Google has just introduced a 120-second delay before allowing login to their email servers. Just in the last day or two, literally. I'm not seeing that with either of my gmail accounts. Same login times as always (1-2 seconds) on both IMAP and SMTP servers. That info amazes me, but gives me even more evidence for a conspiracy theory :) My ISP (att.com) may be responsible for this new delay. att is involved with the ongoing net-neutrality battles here in the US with netflix et alia, so why not add yet another fuzz-factor to the mix. I hope my email still works when I wake up tomorrow morning...
[gentoo-user] CLS install
Hello, Well I just read where some folks use Calculate Linux Scratch [1] to install gentoo. I guess you use the Calculate installer [2] and then just easily [3] convert to gentoo as part of a new installation. You can even customize your install [4]. Later on, you should only have to remove sys-apps/calculate*, switch profiles, and rebuild @system and @world. I think you also have to point to a gentoo mirror too. I'd be curious to hear about anyone using Calculate Linux for there installation. I'd be most curious about raid-1 (mirroring) stories with btrfs and calculate linux... James [1] http://www.calculate-linux.org/main/en/cld [2 ]http://www.calculate-linux.org/main/en/download [3] http://www.calculate-linux.org/boards/15/topics/25561 [4] http://www.calculate-linux.org/main/en/interactive_system_build
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On 2015/07/21 at 02:59pm, Neil Bothwick wrote: On Tue, 21 Jul 2015 21:09:38 +1000, wraeth wrote: Have you tried Syncthing - http://syncthing.net/ ? No I haven't, but one of the main reasons for that is because I mostly bypassed online (read: not controlled by myself) services for any sort of syncing - I eyed a couple, but my primary thought was to retain proper control of my data. Syncthing is peer-to-peer. You can use their discovery server (or run your own) for clients to find one another, but data always takes the direct route. However, it is only for syncing, if you need the extra features, ownCloud works well. I have been using Syncthing also, for maybe a year now. It works well once you get it set up. Recently, the Android app (in F-Droid) has also been working well - for a while it couldn't find any of my machines. Like Neil said, though, Syncthing has no extra features - it just syncs between devices. The machines have to be online at the same time or no syncing happens, because there is no server in the middle to keep the data. Maybe because of this, I have had far fewer issues with conflicting file versions with Syncthing than I had with Dropbox. FWIW, I tried ownCloud a couple of times and could never get it up and running properly. -- Chris Spackman GNU Terry Pratchett
Re: [gentoo-user] installing gentoo with a systemd profile
On Mon, Jul 20 2015, Canek Peláez Valdés wrote: On Mon, Jul 20, 2015 at 8:02 PM, gottl...@nyu.edu wrote: On Sat, Jul 18 2015, Canek Peláez Valdés wrote: On Sat, Jul 18, 2015 at 8:00 PM, gottl...@nyu.edu wrote: I am installing gentoo on a new laptop. I am a gnome, hence systemd, user. I also use lvm (I have / and /usr combined on a non-lvm partition). At the point where you choose a profile (// wiki.gentoo.org/wiki/Handbook:AMD64/Full/Installation#Choosing_the_right_profile ) I selected [5] default/linux/amd64/13.0/desktop/gnome/systemd * But now I get merge conflicts since I have sys-fs/udev installed. I can't depclean udev. Should I have just used the default/linux/amd64/13.0 profile and switched later after the installation is complete. Fortunately, I don't need to used the new machine immediately so I don't mind starting the installation over from the beginning In a similar vein, my systems have PORTDIR=/var/portage. Am I correct in now believing that it is better to do the install with the default PORTDIR=/usr/portage and then switching after the dust settles What I usually do is: 1. Extract the stage 3 tarball 2. Sync the portage tree 3. Switch to the systemd profile 4. emerge -uDNvp world (this usually solves the systemd/udev conflicts) 5. emerge --depclean 6. Switch to the GNOME/systemd profile 7. Emerge gnome-base/gnome In my experience, if you switch directly to the GNOME/systemd profile, you get many conflicts. I certainly did. I will try your indirect root to gnome/systemd. If it works (and given the source I strongly suspect it will), I will try to get it included in the systemd wiki. You'll probably still get some circular dependencies by USE flags, but those should be few and portage will tell you how to break the cycle. Right I and to add the following to package.use # First merge of gnome 21 Jul 15 =media-plugins/grilo-plugins-0.2.13 upnp-av =www-servers/apache-2.2.29 apache2_mpms_prefork thanks again, allan
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tuesday 21 Jul 2015 18:35:27 Dale wrote: Mick wrote: On Tuesday 21 Jul 2015 02:40:54 Dale wrote: I use the random generator too. Some older sites, forums or something that isn't really sensitive, may still have my old passwords but sites like banking and such each have their own random generated one. I also try to generate the longest and most complex password the site will allow. Some sites don't allow the characters above the number keys. Another thing, I was at my brothers once and needed to login to a site. I installed lastpass, typed in my email and master password and I could go anywhere I wanted just as if I was sitting at my own puter. If it wasn't for lastpass, I would have had to come home and do what needed doing. So far, this is the best solution I have found and I only use the free part. ;-) Dale :-) :-) A better, as in more secure, solution should involve local encryption and IMHO local air-gapped storage. A USB key will do nicely and you can have a second USB key stored in your brother's premises, for disaster recovery scenarios. This is because cloud storage: a) creates a honey pot which attracts attacks[1] and b) most of cloud storage is in the US. [1] https://en.wikipedia.org/wiki/LastPass#Security_issues From what I recall about Lasspass, it does encrypt the data locally then uploads it. I recall reading that if you lose your master password, they can't get in it either. All they get is encrypted data. Of all the things I read about when looking for a password manager, Lastpass was the only thing that came close to what I wanted. After using it a while, it is all I need. https://lastpass.com/how-it-works Right, your data may be encrypted locally, but if you use a browser to decrypt it (after it is downloaded to your PC) then there are attack vectors (e.g. XSS) for the decrypted data to be leaked out of your machine. I've had USB sticks break before. They are also easy to lose. I'd prefer not to store something that important on a USB stick. Dale :-) :-) I didn't clarify that you should use something like gpg to encrypt your file(s) on the USB stick, as I do this with all sensitive files not just passwords. I more or less assumed that it is the done thing. Broken USB sticks you can drive a drill through, or throw in a fire. Stolen USB sticks will at least be encrypted. If you are really paranoid you could also use dm-crypt to additionally encrypt the whole USB partition. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] installing gentoo with a systemd profile
2015-07-21 14:23 GMT-06:00 gottl...@nyu.edu: Probably the --unmerge would have worked. But I basically started over (untar of the stage3) and applied canek two-step recipe First switch to the systemd profile and emerge world Second switch to the gnome/system profile and emerge gnome It worked well. I guess It worked for you well, that's nice, I just want to add you shouldn't have taken Kanek's description as a full recipe, he didn't wrote it but, doing the systemd, and stardard install configuration before emerging gnome, is importat for many users, especially if en_US is not your native language[1], and you want to reduce the amount of to compile/install packages by settings like VIDEO_CARDS, INPUT_DEVICES, etc . Again nice you had the default configuration match want you wanted. [1] http://www.quickmeme.com/img/94/942b064a249d63afe19d3165a088d58ae1c9c5179d98b1fb9072db3dcf5115ed.jpg ( a fun meme of what I'm talking about)
Re: [gentoo-user] installing gentoo with a systemd profile
On Tue, Jul 21 2015, Neil Bothwick wrote: On Mon, 20 Jul 2015 21:13:19 -0400, gottl...@nyu.edu wrote: Did you read this part? https://wiki.gentoo.org/wiki/Handbook:AMD64/Full/Installation#Optional:_Using_systemd Yes I did and had the systemd wiki page on a chromium tab while installing. It's been some months since I last did this, but I don't recall any serious conflicts. Why not just unmerge udev to avoid the blockage? I tried via depclean. I wanted to ask here before actually trying --unmerge, which seems rather brutal. I actually had a tiny part in the systemd wiki and remember that you could switch from an openrc system to systemd without unmerging. Sometimes you need to be brutal. I suppose so. Remember that udev is part of systemd, which is why you cannot have both packages installed. After unmerging udev, emerging systemd brings it back anyway. Your only window of risk is something happening between those two operations, but since you are still working in a chroot at this point, even that wouldn't matter. Probably the --unmerge would have worked. But I basically started over (untar of the stage3) and applied canek two-step recipe First switch to the systemd profile and emerge world Second switch to the gnome/system profile and emerge gnome It worked well. thanks again, allan
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
Chris Spackman ch...@osugisakae.com wrote: On 2015/07/21 at 02:59pm, Neil Bothwick wrote: On Tue, 21 Jul 2015 21:09:38 +1000, wraeth wrote: Have you tried Syncthing - http://syncthing.net/ ? No I haven't, but one of the main reasons for that is because I mostly bypassed online (read: not controlled by myself) services for any sort of syncing - I eyed a couple, but my primary thought was to retain proper control of my data. Syncthing is peer-to-peer. You can use their discovery server (or run your own) for clients to find one another, but data always takes the direct route. However, it is only for syncing, if you need the extra features, ownCloud works well. I have been using Syncthing also, for maybe a year now. It works well once you get it set up. Recently, the Android app (in F-Droid) has also been working well - for a while it couldn't find any of my machines. Like Neil said, though, Syncthing has no extra features - it just syncs between devices. The machines have to be online at the same time or no syncing happens, because there is no server in the middle to keep the data. Maybe because of this, I have had far fewer issues with conflicting file versions with Syncthing than I had with Dropbox. FWIW, I tried ownCloud a couple of times and could never get it up and running properly. I have owncloud working just fine, although I don't use it for passwords -- for those I just have a pgp key and individual files and I have an iphone app which can decrypt them. -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici cov...@ccs.covici.com
Re: [gentoo-user] Re: [OT] Very recent change in behavior of gmail imap/smtp servers
walt wrote: On Wed, 22 Jul 2015 02:11:48 + (UTC) Grant Edwards grant.b.edwa...@gmail.com wrote: Google has just introduced a 120-second delay before allowing login to their email servers. Just in the last day or two, literally. I'm not seeing that with either of my gmail accounts. Same login times as always (1-2 seconds) on both IMAP and SMTP servers. That info amazes me, but gives me even more evidence for a conspiracy theory :) My ISP (att.com) may be responsible for this new delay. att is involved with the ongoing net-neutrality battles here in the US with netflix et alia, so why not add yet another fuzz-factor to the mix. I hope my email still works when I wake up tomorrow morning... Makes me wonder. Sometimes when I go to facebook, it doesn't come up on first or second try. I've seen that with other sites as well. Hm. When I get a error, it is instant. It seems to be so instant that it doesn't even have time to do a DNS lookup much less hit the website. By the way, I use ATT too. DSL after many years of dial-up. Dale :-) :-)
[gentoo-user] Re: Catastrophic bug in the firefox 'ProfileManager' function
On Tue, 21 Jul 2015 08:53:42 +0100 Mick michaelkintz...@gmail.com wrote: On Tuesday 21 Jul 2015 02:40:54 Dale wrote: This wouldn't help with some of the things you lost but it will with your passwords at least. For passwords, this will help and you can use it somewhere else as well since it is portable, sort of. https://lastpass.com/ snipped for brevity First, thanks to everyone who replied to this thread. As usual in this group, I learned something from every reply. I've actually been using lastpass for about two years, so I lost a lot less than I would have otherwise. I had another scary moment, though, when I couldn't remember my lastpass master password. After about twenty guesses I remembered that I just recently changed my lastpass password exactly because of the 'possible' data breach at lastpass (the security issues Mick mentions below). I asked lastpass to email me my password hint, which I made vague on purpose so bad guys would have trouble using it -- and that meant I had trouble using it too :) But after another ten guesses I finally got the new password right. Whew... A better, as in more secure, solution should involve local encryption and IMHO local air-gapped storage. A USB key will do nicely and you can have a second USB key stored in your brother's premises, for disaster recovery scenarios. This is because cloud storage: a) creates a honey pot which attracts attacks[1] and b) most of cloud storage is in the US. [1] https://en.wikipedia.org/wiki/LastPass#Security_issues
Re: [gentoo-user] installing gentoo with a systemd profile
On Tue, Jul 21 2015, Jc García wrote: 2015-07-21 14:23 GMT-06:00 gottl...@nyu.edu: Probably the --unmerge would have worked. But I basically started over (untar of the stage3) and applied canek two-step recipe First switch to the systemd profile and emerge world Second switch to the gnome/system profile and emerge gnome It worked well. I guess It worked for you well, that's nice, I just want to add you shouldn't have taken Kanek's description as a full recipe, he didn't wrote it but, doing the systemd, and stardard install configuration before emerging gnome, is importat for many users, especially if en_US is not your native language[1], and you want to reduce the amount of to compile/install packages by settings like VIDEO_CARDS, INPUT_DEVICES, etc . Again nice you had the default configuration match want you wanted. Canek didn't call it a full recipe; he just said it was what he usually does. Perhaps I should have chosen my words more carefully. Also I was only talking about the step in the installation guide where called choosing the right profile. Locales comes later. allan
Re: [gentoo-user] installing gentoo with a systemd profile
On Tuesday 21 July 2015 19:06:10 gottl...@nyu.edu wrote: On Tue, Jul 21 2015, Jc García wrote: 2015-07-21 14:23 GMT-06:00 gottl...@nyu.edu: Probably the --unmerge would have worked. But I basically started over (untar of the stage3) and applied canek two-step recipe First switch to the systemd profile and emerge world Second switch to the gnome/system profile and emerge gnome It worked well. I guess It worked for you well, that's nice, I just want to add you shouldn't have taken Kanek's description as a full recipe, he didn't wrote it but, doing the systemd, and stardard install configuration before emerging gnome, is importat for many users, especially if en_US is not your native language[1], and you want to reduce the amount of to compile/install packages by settings like VIDEO_CARDS, INPUT_DEVICES, etc . Again nice you had the default configuration match want you wanted. Canek didn't call it a full recipe; he just said it was what he usually does. Perhaps I should have chosen my words more carefully. I don't think so. It was clear enough to me. But this conversation touches on a more general point: which profile is best at each stage of an installation? I've had to rebuild my KDE system a few times recently (at least I thought I did at the time, but that's another story). I settled on a vanilla profile in the early stages, with USE=-X in make.conf, then changed it to +X and installed xorg-server. Then I switched to the KDE desktop profile and installed KDE, finally adding all the bits and pieces that go to make up a complete system. Last of all, an emerge -e world tidied everything up neatly. The installation handbook could be clearer on this. -- Rgds Peter
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tue, 21 Jul 2015 16:31:52 -0400, cov...@ccs.covici.com wrote: I have owncloud working just fine, although I don't use it for passwords -- for those I just have a pgp key and individual files and I have an iphone app which can decrypt them. Have you tried KeePass? It doe what you are doing but with a decent interface and the ability to type the details into web pages for you. -- Neil Bothwick We are upping our standards - so up yours. pgpXHzBJrbXEU.pgp Description: OpenPGP digital signature
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tue, 21 Jul 2015 12:35:27 -0500, Dale wrote: From what I recall about Lasspass, it does encrypt the data locally then uploads it. I recall reading that if you lose your master password, they can't get in it either. All they get is encrypted data. Unless the source is available, there is no evidence his is true.. -- Neil Bothwick Documentation: (n.) a novel sold with software, designed to entertain the operator during episodes of bugs or glitches. pgpQk7DGU5hyx.pgp Description: OpenPGP digital signature
Re: [gentoo-user] installing gentoo with a systemd profile
On Tue, 21 Jul 2015 16:23:56 -0400, gottl...@nyu.edu wrote: Remember that udev is part of systemd, which is why you cannot have both packages installed. After unmerging udev, emerging systemd brings it back anyway. Your only window of risk is something happening between those two operations, but since you are still working in a chroot at this point, even that wouldn't matter. Probably the --unmerge would have worked. But I basically started over (untar of the stage3) and applied canek two-step recipe First switch to the systemd profile and emerge world Second switch to the gnome/system profile and emerge gnome It worked well. Glad it worked for you. I don't use GNOME, so that was an extra layer of trouble I didn't have to deal with. -- Neil Bothwick When you finally buy enough memory, you will not have enough disk space. -- Murphy's Computer Laws n\xB03 pgpcP0oPmXhxI.pgp Description: OpenPGP digital signature
Re: [gentoo-user] installing gentoo with a systemd profile
2015-07-21 17:06 GMT-06:00 gottl...@nyu.edu: Also I was only talking about the step in the installation guide where called choosing the right profile. Locales comes later. LOCALE is one thing, LINGUAS and stuff that goes into make.conf is another, the result of not having linguas set almost imediatly, is when you set the locale, the applications will reset to LANG=C, because many of the translations are in e.g. *.po files processed optionally at compile time, thus not setting it would effectivelly mean a complete rebuild of gnome(and many other applications) in order to get the translations. this was my point, but as I said, good the default I what you needed.
Re: [gentoo-user] How can I check for haveing an ethernet device
Hello, On Mon, 20 Jul 2015, meino.cra...@gmx.de wrote: on an embedded system I want to check, whether I have an eth0 device (ok, I know, it is not an device in the usual way...), when I attach an USB2Ethernet gadget via OTG-cable to it and whether all needed drivers are already there... How can I do that with at least impact at possible ? LC_ALL=C ip link show eth0 | grep -q 'state UP' if it's there, but no link, it's 'state DOWN' in the output. Example output: # ip link show eth0 2: eth0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1492 qdisc pfifo_fast state UP qlen 1000 link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff # ip link show eth1 3: eth1: BROADCAST mtu 1492 qdisc pfifo_fast state DOWN qlen 1000 link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff and with the module for eth1 unloaded: # ip link show eth1 # [nothing] There's also other 'show' subcommands, most notably 'ip addr show', with which you could check if you got an ip assigned. Both commands show all devices if you omit the device argument (eth* above). 'ip' belongs to sys-apps/iproute2 and is the standard tool to set up networking stuff (besides wifi) and thus already installed. HTH, -dnh -- There is hopeful symbolism in the fact that flags do not wave in a vacuum. -- Arthur C. Clarke
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tue, Jul 21, 2015 at 10:38:50AM +0100, Neil Bothwick wrote: Something like KeePass. It has Linux, Windows and Android clients and because the file is encrypted locally, you can store it in a cloud service, although I now use Syncthing to keep it on all my devices, now that my life is free of Dropbox. I also use KeePass, including both GUI and Python (dev-python/keepassx) front-ends and sync it with a self-hosted ownCloud server - keeps my data _my_ data. Unfortunately it doesn't have the integration you get with something like LastPass, but it does mean it would take one heck of a catastrophic event to make me loose my passwords. That being said, not everyone wants or otherwise needs something like ownCloud, so you could also do it through scp and cron, etc. -- wraeth wra...@wraeth.id.au GnuPG Key: B2D9F759 signature.asc Description: Digital signature
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tue, 21 Jul 2015 20:27:32 +1000, wraeth wrote: Something like KeePass. It has Linux, Windows and Android clients and because the file is encrypted locally, you can store it in a cloud service, although I now use Syncthing to keep it on all my devices, now that my life is free of Dropbox. I also use KeePass, including both GUI and Python (dev-python/keepassx) front-ends and sync it with a self-hosted ownCloud server - keeps my data _my_ data. Unfortunately it doesn't have the integration you get with something like LastPass, but it does mean it would take one heck of a catastrophic event to make me loose my passwords. On the other hand, it does allow you to store extra information, like memorable words, and the auto-type feature gives enough integration for me. That being said, not everyone wants or otherwise needs something like ownCloud, so you could also do it through scp and cron, etc. Have you tried Syncthing - http://syncthing.net/ ? I only discovered it recently and it is a really nice syncing solution if you just want to keep files available in multiple locations without the complexity of ownCloud or the limitations of Dropbox. -- Neil Bothwick Evolution stops when stupidity is no longer fatal! pgpagETXQOWEH.pgp Description: OpenPGP digital signature
Re: [gentoo-user] installing gentoo with a systemd profile
On Mon, 20 Jul 2015 21:13:19 -0400, gottl...@nyu.edu wrote: Did you read this part? https://wiki.gentoo.org/wiki/Handbook:AMD64/Full/Installation#Optional:_Using_systemd Yes I did and had the systemd wiki page on a chromium tab while installing. It's been some months since I last did this, but I don't recall any serious conflicts. Why not just unmerge udev to avoid the blockage? I tried via depclean. I wanted to ask here before actually trying --unmerge, which seems rather brutal. I actually had a tiny part in the systemd wiki and remember that you could switch from an openrc system to systemd without unmerging. Sometimes you need to be brutal. Remember that udev is part of systemd, which is why you cannot have both packages installed. After unmerging udev, emerging systemd brings it back anyway. Your only window of risk is something happening between those two operations, but since you are still working in a chroot at this point, even that wouldn't matter. -- Neil Bothwick Adolescence, n.: The stage between puberty and adultery. pgpZumeTWN_Ji.pgp Description: OpenPGP digital signature
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tuesday 21 Jul 2015 02:40:54 Dale wrote: Rich Freeman wrote: On Mon, Jul 20, 2015 at 8:20 PM, Dale rdalek1...@gmail.com wrote: This wouldn't help with some of the things you lost but it will with your passwords at least. For passwords, this will help and you can use it somewhere else as well since it is portable, sort of. https://lastpass.com/ ++ I was chatting with somebody in my LUG about it and I described it as the most secure password solution people are likely to actually use. You can do better, but most don't. I now have separate random-generated passwords for virtually every service I use now, and when one gets compromised I just log in and change it to a new random-generated password. I periodically backup the list in a csv file to someplace safe. I use the random generator too. Some older sites, forums or something that isn't really sensitive, may still have my old passwords but sites like banking and such each have their own random generated one. I also try to generate the longest and most complex password the site will allow. Some sites don't allow the characters above the number keys. Another thing, I was at my brothers once and needed to login to a site. I installed lastpass, typed in my email and master password and I could go anywhere I wanted just as if I was sitting at my own puter. If it wasn't for lastpass, I would have had to come home and do what needed doing. So far, this is the best solution I have found and I only use the free part. ;-) Dale :-) :-) A better, as in more secure, solution should involve local encryption and IMHO local air-gapped storage. A USB key will do nicely and you can have a second USB key stored in your brother's premises, for disaster recovery scenarios. This is because cloud storage: a) creates a honey pot which attracts attacks[1] and b) most of cloud storage is in the US. [1] https://en.wikipedia.org/wiki/LastPass#Security_issues -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tue, Jul 21, 2015 at 11:41:03AM +0100, Neil Bothwick wrote: On Tue, 21 Jul 2015 20:27:32 +1000, wraeth wrote: Something like KeePass. It has Linux, Windows and Android clients and because the file is encrypted locally, you can store it in a cloud service, although I now use Syncthing to keep it on all my devices, now that my life is free of Dropbox. I also use KeePass, including both GUI and Python (dev-python/keepassx) front-ends and sync it with a self-hosted ownCloud server - keeps my data _my_ data. Unfortunately it doesn't have the integration you get with something like LastPass, but it does mean it would take one heck of a catastrophic event to make me loose my passwords. On the other hand, it does allow you to store extra information, like memorable words, and the auto-type feature gives enough integration for me. Yes, I didn't mean to imply that it was _lacking_ in features, just that the main feature mentioned so far has been browser integration (with fair reason, too). That being said, not everyone wants or otherwise needs something like ownCloud, so you could also do it through scp and cron, etc. Have you tried Syncthing - http://syncthing.net/ ? I only discovered it recently and it is a really nice syncing solution if you just want to keep files available in multiple locations without the complexity of ownCloud or the limitations of Dropbox. No I haven't, but one of the main reasons for that is because I mostly bypassed online (read: not controlled by myself) services for any sort of syncing - I eyed a couple, but my primary thought was to retain proper control of my data. Besides, I was setting up a host for a mail server anyway and was looking for online calendaring and contact management for syncing between devices, so it wasn't that far out of my way. -- wraeth wra...@wraeth.id.au GnuPG Key: B2D9F759 signature.asc Description: Digital signature
[gentoo-user] Packaging ASL
Dear Gentoo Developers, We have just released the version 0.1.4 of ASL - Advanced Simulation Library http://asl.org.il. May I ask somebody to volunteer to package it for Gentoo? Packaging efforts for other distros are underway and probably can be helpful for Gentoo [1]. Thank you, Zeev -- In short about the library: It is an OpenCL-based multiphysics simulation software that can be deployed (besides CPU) on different massively parallel architectures like GPUs, FPGAs, DSPs etc. and covers a variety of physical and chemical phenomena. It can be utilized in a number of fields: - CFD: http://asl.org.il/benchmarks/multicomponent_flow/ - image-guided surgery: http://avtechscientific.com/cryovision - crystal growth: https://github.com/AvtechScientific/ASL/blob/master/examples/levelSet/levelSetFacetedGrowth.cc - virtual sensing (i.a. medical): http://avtechscientific.com/brainshift - RD of biomed devices (i.a. microfluidics): http://avtechscientific.com/focus - etc., etc.. -- [1]: https://aur.archlinux.org/packages/libasl/ https://copr.fedoraproject.org/coprs/lupinix/ASL/ https://build.opensuse.org/package/show/home:ealin:physics/ASL http://anonscm.debian.org/cgit/debian-science/packages/asl.git/
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tue, 21 Jul 2015 08:53:42 +0100, Mick wrote: A better, as in more secure, solution should involve local encryption and IMHO local air-gapped storage. A USB key will do nicely and you can have a second USB key stored in your brother's premises, for disaster recovery scenarios. Something like KeePass. It has Linux, Windows and Android clients and because the file is encrypted locally, you can store it in a cloud service, although I now use Syncthing to keep it on all my devices, now that my life is free of Dropbox. -- Neil Bothwick If man ruled the world: Daisy Duke shorts would never go out of fashion. pgpvwaVbdKY7M.pgp Description: OpenPGP digital signature
Re: [gentoo-user] Packaging ASL
On Tue, 21 Jul 2015 07:18:58 -0600 Jc García wrote: 2015-07-21 5:41 GMT-06:00 Zeev Pekar zeev.pe...@avtechscientific.com: Dear Gentoo Developers, We have just released the version 0.1.4 of ASL - Advanced Simulation Library http://asl.org.il. May I ask somebody to volunteer to package it for Gentoo? Packaging efforts for other distros are underway and probably can be helpful for Gentoo [1]. Really interesting library, but I doubt you will get what you expect in this list, neither in the -dev list because as it is a library and AFAIK there's no applications requiring it, I doubt they'll want to add it to the main repository, There is no rule forbidding to have library with zero consumers in the main repository. As long, as someone maintains it. but sure there's a place in gentoo for the library, the gentoo-science project[1], you can try create a github issue[2] requesting the add of the library there. You could also find more folks interested in it, this list I would say is mostly sysadmin/troubled-user stuff. I agree, on science overlay there are more interested people. Mail to gentoo-science and gentoo-physics lists. I'm working on another branch of physics, so I'm not sure I'll be able to test this library thorough, though. Note to Zeev: if you're interested in packaging by various distributions, try to make their job easier. A quick check shows that there are version constrains on dependencies, e.g. =vtk-6.1, but they're not mentioned in the documentation. Fixing this will save people from digging into cmake files. Best regards, Andrew Savchenko pgpt687JWdJiO.pgp Description: PGP signature
Re: [gentoo-user] Catastrophic bug in the firefox 'ProfileManager' function
On Tue, 21 Jul 2015 21:09:38 +1000, wraeth wrote: Have you tried Syncthing - http://syncthing.net/ ? I only discovered it recently and it is a really nice syncing solution if you just want to keep files available in multiple locations without the complexity of ownCloud or the limitations of Dropbox. No I haven't, but one of the main reasons for that is because I mostly bypassed online (read: not controlled by myself) services for any sort of syncing - I eyed a couple, but my primary thought was to retain proper control of my data. Besides, I was setting up a host for a mail server anyway and was looking for online calendaring and contact management for syncing between devices, so it wasn't that far out of my way. Syncthing is peer-to-peer. You can use their discovery server (or run your own) for clients to find one another, but data always takes the direct route. However, it is only for syncing, if you need the extra features, ownCloud works well. -- Neil Bothwick Mosquito - designed to make houseflies look better. pgpz0IQfXVYsH.pgp Description: OpenPGP digital signature
Re: [gentoo-user] Packaging ASL
2015-07-21 5:41 GMT-06:00 Zeev Pekar zeev.pe...@avtechscientific.com: Dear Gentoo Developers, We have just released the version 0.1.4 of ASL - Advanced Simulation Library http://asl.org.il. May I ask somebody to volunteer to package it for Gentoo? Packaging efforts for other distros are underway and probably can be helpful for Gentoo [1]. Really interesting library, but I doubt you will get what you expect in this list, neither in the -dev list because as it is a library and AFAIK there's no applications requiring it, I doubt they'll want to add it to the main repository, but sure there's a place in gentoo for the library, the gentoo-science project[1], you can try create a github issue[2] requesting the add of the library there. You could also find more folks interested in it, this list I would say is mostly sysadmin/troubled-user stuff. If I find time I might try to make the ebuild and send pull request to the science repo, but I haven't learned much about CMake, so I would have to learn a bit more about it first. Regards, and thank you for the spread of such Important type software in a FOSS way. [1] https://wiki.gentoo.org/wiki/Project:Science [2] https://github.com/gentoo-science/sci (If you check the commits log you'll see that it is a very alive repo)
