Re: how do you use the biometric id with a generic card reader with FF / chromium on linux ?

[borissh1983]

Hi , 

Sorry for the delay . and thank you for your answer, she had the card but she 
didn't open the account yet. 


She tried with the card reader without the exe,  with OpenSC and libccid 
already installed but couldn't continue past the download exe file.

I know the card can read rav kav data , installing rav-kav-online does allow 
https://ravkavonline.co.il[1] to read the content of the card .

There must be some way to go to the next stage after download the exe file I 
could to continue the registration.

I'll try some wine tricks before a windows machine :) hopefull I would be able 
to overcome it.

p.s. I did get that card reader for rav kav ages ago for something like 10 NIS. 
and as you say it's 08e6:3438 Gemalto (was Gemplus) GemPC Key SmartCard Reader
https://supportportal.gemalto.com/csm?id=kb_article_view_kb_id=375e92804f750700873b69d18110c72c_article=KB0016526[2]

On Friday, 31 May 2024 20:17:59 IDT sara fink wrote:
> Hi
> 
> The card you gave her is supposed to work.
> GemPC Key SmartCard Readeris a gemalto card reader with the following
> parameters (see the ink below):
> 
> http://files.atlanty.ru/?id=usb:08e6-3438
> Device 'Gemalto (was Gemplus) GemPC Key SmartCard Reader'
> 
> *ID*
> 
> USB 08e6:3438
> 
> *Class*
> 
> 0b-00-00
> 
> *Type*
> 
> chipcard » 
> 
> *Vendor*
> 
> Gemalto (was Gemplus) »
> 
> 
> *Name*
> 
> GemPC Key SmartCard Reader
> 
> *Subsystem*
> 
> Gemplus
> 
> 
> If you search for קורא ת.ז. ביומטרית
> 
>  you will get a bunch of links that say they work with windows, linux
> 
> see this link:
> 
> https://www.kobil.co.il/p/%D7%A7%D7%95%D7%A8%D7%90_%D7%AA%D7%A2%D7%95%D7%93%D7%AA_%D7%96%D7%94%D7%95%D7%AA_%D7%91%D7%99%D7%95%D7%9E%D7%98%D7%A8%D7%99%D7%AA_%D7%9B%D7%A8%D7%98%D7%99%D7%A1_%D7%97%D7%9B%D7%9D_%D7%95%D7%9B%D7%A8%D7%98%D7%99%D7%A1%D7%99_%D7%A2%D7%95%D7%91%D7%93_Gemalto_IDBridge_CT30
> https://pc2.co.il/product/%D7%A7%D7%95%D7%A8%D7%90-%D7%9B%D7%A8%D7%98%D7%99%D7%A1%D7%99%D7%9D-%D7%97%D7%9B%D7%9E%D7%99%D7%9D-%D7%9C%D7%A7%D7%A8%D7%99%D7%90%D7%94-%D7%A9%D7%9C-%D7%9B%D7%A8%D7%98%D7%99%D7%A1%D7%99-%D7%90%D7%A9/
> 
> They offer gemalto IDBridge CT30 which they claim it works with gov.il. Now
> there are 2 secrets.
> IDBridge CT30 has the same ID USB 08e6:3438 (as your card reader) when you
> run lsusb.
> 
> The 2n secret, this card reader can be bought for 10nis from rav kav
> offices.  I worked with this card reader for rav kav in a virtual machine
> with windows.
> According to gov.il
> https://www.gov.il/he/pages/software_smartid  you have to install their exe
> program.
> 
> So, one path to go is to install a virtual machine for her with windows and
> use it.
> 
> Option 2 is to use a software from gemalto
> https://supportportal.gemalto.com/csm?sys_id=80303b92db852e00d298728dae96198b=sp=csm_product=sn_customerservice_product_name
> 
> You have there a version for linux too. Maybe it will work, and you need a
> bunch of packages. See this link.
> https://github.com/OpenSC/OpenSC/wiki/Smart-card-readers-(Linux-and-Mac-OS-X)
> 
> As a testing environment  you can try first with rav kav based on these
> programs.
> I hope these links are a starter to help her out. Simple browser without
> their exe file/gemalto software for linux won't work.
> I don't have a biometric id and made a gov.il account and worked with them
> quite well.
> She already created an account with biometric id?
> 
> 
> 
> 
> On Tue, May 28, 2024 at 11:46 AM  wrote:
> 
> > Hi,
> >
> > I'm trying to help to an elderly person which uses Debian stretch  to
> > access the gov.il interface,  she has the biometric id card and I have a
> > generic smart card reader (GemPC Key SmartCard Reader) that I wished to
> > give her so she could auth to the system.  I don't have a biometric id , so
> > I can't verify if we can even use the browser to access the web interface.
> >
> > Does anyone have a biometric id , and can check if they can login using FF
> > / chromium or stuff like that ?
> > ___
> > Linux-il mailing list -- linux-il@cs.huji.ac.il
> > To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
> >
> 




[1] https://ravkavonline.co.il
[2] 
https://supportportal.gemalto.com/csm?id=kb_article_view_kb_id=375e92804f750700873b69d18110c72c_article=KB0016526
___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

how do you use the biometric id with a generic card reader with FF / chromium on linux ?

[borissh1983]

Hi, 

I'm trying to help to an elderly person which uses Debian stretch  to access 
the gov.il interface,  she has the biometric id card and I have a generic smart 
card reader (GemPC Key SmartCard Reader) that I wished to give her so she could 
auth to the system.  I don't have a biometric id , so I can't verify if we can 
even use the browser to access the web interface. 

Does anyone have a biometric id , and can check if they can login using FF / 
chromium or stuff like that ? 
___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

Re: Are there any implication of using or supporting Debian now that the Project Leader shared a call for BDS on debian.social ?

[borissh1983]

Hi, 

As this question had been asked twice I had uploaded a screenshot 
https://ibb.co/hFcPrvB[1] of that action.

In order to see that on his page one need to scroll a bit down ,  The text 
start with "Israel just bombed a tent city full of #refugees[1] who fled North 
#Gaza[2] for #Rafah[3] on the #IDF[4]'s orders. Horrifying photos show families 
frantically rummaging through the carnage for the limbs of their family 
members. I won't reproduce them here, but they can be found on the bird site 
from @gazanotifications"  and you would need to click on "show more"


The direct link to the message is 
https://pleroma.debian.social/notice/AenLD9Ez2JCrSfrCsK[2] , however it would 
forward you directly to the original writer (highvoltage  shared it but did not 
write it himself).
if you would scroll inside 
https://functional.cafe/@rml/111916398704166807/reblogs[3] you would see  

   highvoltage@pleroma.debian.social
   highvoltage @highvoltage@pleroma.debian.social
   446 Followers
screenshot at https://ibb.co/HrSxsRP[4]

Which show that he shared that message.

On Sunday, 3 March 2024 11:31:02 IST Shachar Shemesh wrote:


I've gone over his feed and have not found any calls for BDS. Do
you have a direct link?






Shachar






On 02/03/2024 21:21,

borissh1...@gmail.com[5] wrote:






Hi, 




A bit clueless question , but are there any legal implication of
using or supporting Debian now that the Debian Project Leader
shared a call for BDS? ? 



The Debian Project Leader (highvoltage) had "repeated" (shared?)
a call for BDS on the debian social site 
(https://pleroma.debian.social/notice/AenLD9Ez2JCrSfrCsK[2])?
that can be seen on his admin account at? 
https://pleroma.debian.social/highvoltage[6]?(one
would need to scroll down to see this message).


?


Legally,
do we have a problem to train developers on using debian ,
provide services that install Debian, ti package a proprietary
code to run on Debian or even just contribute to Debian after
the call by the admin on debian.social ? or because it was not
listed? on https://lists.debian.org/debian-announce/[7]?we
should be safe ?


?


The
site where it was shared is debian.social which had been
described? as "The Debian social team aims to run a few services
under the debian.social domain. Our goal is to create a safe
space for Debian contributors (whether they are project members
or not) to share what they're doing in the project and to
showcase their work, collaborate with others and share
knowledge. If you tick any of those boxes, you may create an
account. Just like planet Debian, it's completely fine for these
platforms to have a personal touch, however, our goal is not to
create any kind of social network per s?. 


"

The debian.social was announced? a while ago 
https://lists.debian.org/debian-devel-announce/2020/03/msg8.html[8]



It was shared two weeks ago, but I only realized it might be a
problem as a user today.




___
Linux-il mailing list -- linux-il@cs.huji.ac.il[9]
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il[10]










[1] https://ibb.co/hFcPrvB
[2] https://pleroma.debian.social/notice/AenLD9Ez2JCrSfrCsK
[3] https://functional.cafe/@rml/111916398704166807/reblogs
[4] https://ibb.co/HrSxsRP
[5] mailto:borissh1...@gmail.com
[6] https://pleroma.debian.social/highvoltage
[7] https://lists.debian.org/debian-announce/
[8] https://lists.debian.org/debian-devel-announce/2020/03/msg8.html
[9] mailto:linux-il@cs.huji.ac.il
[10] mailto:linux-il-le...@cs.huji.ac.il
___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

Re: Are there any implication of using or supporting Debian now that the Project Leader shared a call for BDS on debian.social ?

[borissh1983]

Hi, 

While it is nice and fun to have a political discussion on how much the debian 
leader is wrong, and how it hurts FOSS in general.

I'm asking, if we as people who work with debian or contribute to it would have 
a problem now in  IL , US or DE.

I for example train new developers and it guys on Debian, provide services that 
use debian as the main OS, and even have done some work that auto-package 
software to run on Debian, given this announcements, it is not clear for me if 
I'm even it is safe to still do it now.

On Sunday, 3 March 2024 10:11:06 IST Marc Volovic (me) wrote:
> i suggest not starting down the route of the "who did more to whom" 
> measuring. This is a yardstick measurement comoetitio  that Israel will not 
> win, by any type of measurement.
> 
> The "right" response would be a protest for bringing political discourse into 
> the technical sphere (if this is indeed a technical sphere, something not 
> certain) or ignoring the rise. Remember the "wrestling in the mud" adage.

> 
> 3 Mar 2024 10:03:14 Omer Zak :
> 
> > OOPS, my mistake.
> > In this case, I suggest:
> > 
> > 1. Check if any Debian Developers (Israeli or non-Israeli) were killed
> > by the Hamas on Oct. 7th.
> > If yes, call for impeachment of Highvoltage on grounds of his betrayal
> > of some Debian Developers.
> > 
> > 2 Call out Highvoltage's ignoring of the atrocities advocated
> > by Hamas against Israel.
> > On Sun, 2024-03-03 at 09:49 +0200, Boris Shtrasman wrote:
> >> The person who shared that post is Highvoltage (the Debian Project
> >> Leader) , it's posteed on Debian Project Leader page (but originally
> >> written by someone else).
> >> 
> >> On Sunday, 3 March 2024 9:45:24 IST Omer Zak wrote:
> >>> I looked around the links and some Debian information.
> >>> I found no indication that the guy has any leadership role in
> >>> Debian.
> >>> He describes himself as "pro-Palestine, pro-Black, pro-Indigenous,
> >>> pro-
> >>> Queer, pro-létarian".
> >>> 
> >>> Seems to me that someone, who is so busy with those identities,
> >>> would
> >>> not have much time for real technical work.
> >>> 
> >>> I believe that the proper course of action is to complain against
> >>> his
> >>> ignoring (if he did ignore - I did not read carefully) the 1200
> >>> Israelis mutilated and murdered by Hamas as well as the Hamas
> >>> Charter,
> >>> and then just ignore him and do not let him affect our Debian
> >>> related
> >>> work.
> >>> 
> >>> --- Omer Zak
> >>> 
> >>> 
> >>> 
> >>> On Sat, 2024-03-02 at 21:21 +0200, borissh1...@gmail.com wrote:
>  Hi,
>  
>  A bit clueless question , but are there any legal implication of
>  using or supporting Debian now that the Debian Project Leader
>  shared
>  a call for BDS  ?
>  
>  The Debian Project Leader (highvoltage) had "repeated" (shared?)
>  a
>  call for BDS on the debian social site (
>  https://pleroma.debian.social/notice/AenLD9Ez2JCrSfrCsK)  that
>  can be
>  seen on his admin account at  
>  https://pleroma.debian.social/highvoltage (one would need to
>  scroll
>  down to see this message).
> >>> 
> >>> 
> >>> -- 
> >>> "Prior to capitalism, the way people amassed great wealth was by
> >>> looting, plundering and enslaving their fellow man. Capitalism made
> >>> it
> >>> possible to become wealthy by serving your fellow man." - Walter E.
> >>> Williams
> >>> My own blog is at https://tddpirate.zak.co.il/
> >>> 
> >>> My opinions, as expressed in this E-mail message, are mine alone.
> >>> They do not represent the official policy of any organization with
> >>> which I may be affiliated in any way.
> >>> WARNING TO SPAMMERS:  at https://www.zak.co.il/spamwarning.html
> > 
> > ___
> > Linux-il mailing list -- linux-il@cs.huji.ac.il
> > To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
> ___
> Linux-il mailing list -- linux-il@cs.huji.ac.il
> To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
> 




___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

Are there any implication of using or supporting Debian now that the Project Leader shared a call for BDS on debian.social ?

[borissh1983]

Hi, 

A bit clueless question , but are there any legal implication of using or 
supporting Debian now that the Debian Project Leader shared a call for BDS  ? 

The Debian Project Leader (highvoltage) had "repeated" (shared?) a call for BDS 
on the debian social site 
(https://pleroma.debian.social/notice/AenLD9Ez2JCrSfrCsK[1])  that can be seen 
on his admin account at  https://pleroma.debian.social/highvoltage[2] (one 
would need to scroll down to see this message).


Legally, do we have a problem to train developers on using debian , provide 
services that install Debian, ti package a proprietary code to run on Debian or 
even just contribute to Debian after the call by the admin on debian.social ? 
or because it was not listed  on https://lists.debian.org/debian-announce/[3] 
we should be safe ?


The site where it was shared is debian.social which had been described  as "The 
Debian social team aims to run a few services under the debian.social domain. 
Our goal is to create a safe space for Debian contributors (whether they are 
project members or not) to share what they're doing in the project and to 
showcase their work, collaborate with others and share knowledge. If you tick 
any of those boxes, you may create an account. Just like planet Debian, it's 
completely fine for these platforms to have a personal touch, however, our goal 
is not to create any kind of social network per sé. 
"
The debian.social was announced  a while ago 
https://lists.debian.org/debian-devel-announce/2020/03/msg8.html[4]

It was shared two weeks ago, but I only realized it might be a problem as a 
user today.


[1] https://pleroma.debian.social/notice/AenLD9Ez2JCrSfrCsK
[2] https://pleroma.debian.social/highvoltage
[3] https://lists.debian.org/debian-announce/
[4] https://lists.debian.org/debian-devel-announce/2020/03/msg8.html
___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

Re: IPv6 routing issue with Telegram

[borissh1983]

Hi, 

Can you check the offered cipher using openssl s_client ? 

It could be that there is no suggested cipher or changing suggested cipher 
between ipv4 vs ipv6, (something that can happen with some farms and other load 
balancing systems) . 


On Thursday, 11 January 2024 12:18:24 IST Rabin Yasharzadehe wrote:
> Nice catch,
> 
> IPv4 works, as the moment I remove the address from my interface, I can
> connect to the site.
> From what I can see, it does able to complete the TLS handshake, and I can
> see the certificate.
> And I see the same behavior from inside a container.
> 
> Ping to the address seems to be working, and I don't see any routing issue
> to the destination.
> 
> Issue with telegram service?
> 
> 
> 
> --
> Rabin
> 
> 
> On Wed, 10 Jan 2024 at 07:52, Lior Okman  wrote:
> 
> >
> > Looking at the curl output, it manages to connect using IPv6 and is timing
> > out on the SSL negotiation.
> >
> >
> > Few things to check:
> >
> > - Does this work for you with IPv4?
> > - Can you use "openssl s_client" to see if your environment manages to
> > finish the SSL handshake?
> > - Can you try to connect from inside a Docker container that is using a
> > different base distro?
> >
> >
> > --
> > Lior
> >
> >
> >
> >  On Tue, 09 Jan 2024 13:17:23 +0200 *Rabin Yasharzadehe
> > >* wrote ---
> >
> > Hi list,
> >
> > Can you please help me identify if the issue, is in my end / ISP (Bezeq)
> > and not the service it self.
> >
> > When I try to load telegram web, with IPv6 address, the connection will
> > hang for me.
> >
> >
> > ❯ curl --connect-timeout 3 -Iv6 https://web.telegram.org/
> > * processing: https://web.telegram.org/
> > *   Trying [2001:67c:4e8:f004::9]:443...
> > * Connected to web.telegram.org (2001:67c:4e8:f004::9) port 443
> > * ALPN: offers h2,http/1.1
> > * TLSv1.3 (OUT), TLS handshake, Client hello (1):
> > *  CAfile: /etc/pki/tls/certs/ca-bundle.crt
> > *  CApath: none
> > * SSL connection timeout
> > * Closing connection
> > curl: (28) SSL connection timeout
> >
> >
> > But I don't have this issue with other IPv6 services, like google.com
> >
> > Can you please check on your side? and which ISP are you using?
> >
> > Thanks. Regards
> >
> > --
> > Rabin
> > ___
> > Linux-il mailing list -- linux-il@cs.huji.ac.il
> > To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
> >
> >
> >
> 




___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

Re: HP OfficeJet Pro 8023

[borissh1983]

Air Print is a proprietary solution , which have Open specification and 
implementation. 

Recent OpenPrinting Cups support AirPrint   
https://github.com/OpenPrinting/cups/issues/105[1] , so you could use "Air 
Print" even for devices that do not have Air Print for them (yes, your good old 
dot matrix printer should be able to do Air Print with the proper config on 
cups)
Cups (pre fork) does not support it (I don't think it even maintained now). 

Cups (all versions) support driver-less  printing c.f. 
https://wiki.debian.org/CUPSDriverlessPrinting[2]


On Wednesday, 27 December 2023 8:32:42 IST Shachar Shemesh wrote:






On 27/12/2023 0:25, Oron Peled wrote:






On a separate note, if you buy a printer in the last two years --
look for the "*AirPrint*" logo (and "*AirScan*"
if it has a scanner):



 *  These are Apple brands for "*Driverless*"
printing (and scanning, respectively)


 *  Like some other Apple technologies, these proprietary
implementation has an open specification.





Are you sure it's proprietary? Apple are the ones who developed
CUPS, after all.






[1] https://github.com/OpenPrinting/cups/issues/105
[2] https://wiki.debian.org/CUPSDriverlessPrinting
___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

Re: HP OfficeJet Pro 8023

[borissh1983]

Hi, 

Before getting rid of the printer, if you are sure it's dead , try mechanically 
cleaning the printhead (never use it on a device that have warranty or can be 
fixed on other options ) . when you clean it do not use hot water or solvents, 
this might damage the printhead, ofc it wold kill your warranty. A cloged print 
head could be the source for the failure.

When dealing with HP , One should only use original ink (I think they even had 
expiration date on them).
New HP printers would outright block non genuine ink (I think since 2021 )  .

p.s.

1. Please , no matter which printer you buy , only use Offline printers , and 
never connect them to the internet if you would like you printer to avoid 
useless firmware updates like 
https://kevin.deldycke.com/2020/11/revert-hp-printer-ban-on-third-party-ink-cartridges/
 The best option I found so far was to connect HP printers to rpi , that way 
you always have a network printer (via cups) but you are safe from automatic 
upgrades and security holes.

2. 
https://www.techpowerup.com/237048/been-there-done-that-hp-new-firmware-update-locks-non-original-ink-cartridges

On Sunday, 24 December 2023 1:16:51 IST Shlomo Solomon wrote:
> Original ink which costs more than the printer (!!!) is not an option.
> On my existing HP 8610, I used compatible ink for 8 years, so 
> 
> 
> On Sun, 24 Dec 2023 01:11:22 +0200
> אורי  wrote:
> 
> > If you use HP printer I strongly recommend using HP original ink,
> > which is more expensive but it's the only ink they officially support.
> > 
> > אורי
> > u...@speedy.net
> > 
> > 
> > On Sun, Dec 24, 2023 at 12:23 AM Shlomo Solomon
> >  wrote:
> > 
> > > My existing HP printer (8610) died after 8 years - does not
> > > recognize the Magenta ink.
> > >
> > > I'm looking at the HP OfficeJet Pro 8023
> > >
> > > 2 questions:
> > >
> > > 1 - Has anyone had good (or bad) experience with this on Linux? I
> > > know that HP supports this printer on Linux, but I'm looking for
> > > first hand experience.
> > >
> > > 2 - Any comments about the availability of compatible ink? I found
> > > ink on several sites, but from experience, know that HP printers are
> > > sometimes fussy about non-original ink.
> > >
> > >
> > >
> > >
> > >
> > > --
> > > Shlomo Solomon
> > > http://the-solomons.net
> > > Claws Mail 3.17.5 - KDE Plasma 5.18.5 - Kubuntu 20.04
> > > ___
> > > Linux-il mailing list -- linux-il@cs.huji.ac.il
> > > To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
> > >
> 
> 
> 
> -- 
> Shlomo Solomon
> http://the-solomons.net
> Claws Mail 3.17.5 - KDE Plasma 5.18.5 - Kubuntu 20.04
> ___
> Linux-il mailing list -- linux-il@cs.huji.ac.il
> To unsubscribe send an email to linux-il-le...@cs.huji.ac.il
> 




___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

Re: RMS

[borissh1983]

On Wednesday, 13 December 2023 14:30:37 IST Eli Zaretskii wrote:
> > In the view of Lifnei iver,
> > 
> > Recently RMS had shared an alleged PFLP affiliated  organization calls to 
> > prevent arms deals to Israel, PFLP  participated in the Simhat torah 
> > massacre.  
> > https://www.stallman.org/archives/2023-sep-dec.html#9_December_2023_(Legal_challenges_over_arms_exports)
> > The organisation had excused the perpetrators of the Simhat Torah  
> > massacre.  https://www.alhaq.org/advocacy/21800.html . 
> > 
> > For my understanding RMS is actively assisting to the other side during the 
> > war against Israel.
> 
> I suggest to write to him 

That would be a second Lifnei iver case in the same thread.

IANAL, and because of that at this stage, I believe  it is better to speak with 
someone who is well versed with the Israeli criminal law before suggestion such 
kind of action or following this advice. 


___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

Re: RMS

[borissh1983]

In the view of Lifnei iver,

Recently RMS had shared an alleged PFLP affiliated  organization calls to 
prevent arms deals to Israel, PFLP  participated in the Simhat torah massacre.  
https://www.stallman.org/archives/2023-sep-dec.html#9_December_2023_(Legal_challenges_over_arms_exports)
The organisation had excused the perpetrators of the Simhat Torah  massacre.  
https://www.alhaq.org/advocacy/21800.html . 

For my understanding RMS is actively assisting to the other side during the war 
against Israel.

People should do with that information what they like. 

> On Wed, May 18, 2022, 15:31  wrote:
> 
> > Hi Julian.
> >
> > On Wednesday, 18 May 2022 17:43:47 IDT Julian Daich wrote:
> > > Hi,
> > >RMS is coming to Tel Aviv. I am receving him. He is looking for a place to
> > >give  a prentation in a mayor university on Msy 31 st or June 1st. Is
> > there
> > >here somebody from TAU or HUJI that can help to organize it? He will no
> > >chsrge for his talk.
> >
> > Given RMS's actions in recent years,  I would have checked  with  someone
> > who is familiar with the local law, if having direct connection, or
> > assisting  RMS is not a liability or against the law.
> >
> > IANAL.
> >
> >
> >
> > ___
> > Linux-il mailing list
> > Linux-il@cs.huji.ac.il
> > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> >
> 




___
Linux-il mailing list -- linux-il@cs.huji.ac.il
To unsubscribe send an email to linux-il-le...@cs.huji.ac.il

Debian Release party at Dominik , Tuval 11, Ramat Gan

[borissh1983]

Hi,

I didn't see any mail about it, so there would be a release party at "Dominik" 
Tuval 11 , Ramat Gan.

https://wiki.debian.org/ReleasePartyBookworm/Israel/Tel%20Aviv



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: ISP recommendation in Israel - geek-friendly & IPv6

[borissh1983]

On Sunday, 16 April 2023 9:07:10 IDT Erez D wrote:
> You look for a Fixed ipv4 IP, Note that some ISPs do not give you even a
> real IP but you are already behind NAT and can't even use Dynamic DNS.
> 

Carrier grade NAT or something else ? 





___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Help ! /lib64/libglib-2.0.so.0: file too short

[borissh1983]

On Wednesday, 1 March 2023 9:36:33 IST Aharon Schkolnik wrote:
> Pretty sure was corrupted file system (maybe connected to electrical
> issues).
> 
> Managed to save /home.
> 
> Reinstalled Fedora.
> 
> Long night.
> 
> Most everything seems to be working.
> 
> Only issue so far is that GRUB doesn't find my Windows installation.
> 

does osprober able to find it ? if not , perhaps that fs had been also 
corrupted, you may be able to fix it via 

ntfsfix /dev/xxx
and then mount -o remove_hibernatefile -t ntfs-3g /dev/xxx

I strongly recommend you to check your smart logs.




___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Help ! /lib64/libglib-2.0.so.0: file too short

[borissh1983]

On Tuesday, 28 February 2023 18:09:53 IST Aharon Schkolnik wrote:
> Don't know what happened, but my system fails to boot with the above error
> message.
> 
> I am clueless.
> 
> Anyone have any ideas?
> 

You got  either a bad installation ,  corrupted package, corrupted filesystem 
or hardware error.

What you can and should do , disconnect the drive and rescue all what you can 
by copying the data out.
chroot to it , and reinstall libglib2.0-0. hopefully it was just a flash error 
(and not a hardware error).



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

hamakor.org.il planet is down , and impossible to reach the team

[borissh1983]

Hi, 

Since early June , the planet  is broken, updated storied are not shown.

I had tried e-mailing to website [at] hamakor.org.il but got a 550.


** Address not found **

Your message wasn't delivered to websites  [at] hamakor.org.il because the 
address couldn't be found, or is unable to receive mail.



The response from the remote server was:
550 5.1.1 : Recipient address rejected: User 
unknown in virtual mailbox table



Some people at whatsup had complained :  
https://whatsup.org.il/index.php?name=PNphpBB2=viewtopic=64817[1]  and 
https://whatsup.org.il/index.php?name=PNphpBB2=viewtopic=432379[2]  

p.s. Some people had been BCCed (who I think may know someone who may know one 
of the admins)



[1] https://whatsup.org.il/index.php?name=PNphpBB2=viewtopic=64817
[2] https://whatsup.org.il/index.php?name=PNphpBB2=viewtopic=432379
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Venue for RMS

[borissh1983]

Hi Julian.

On Wednesday, 18 May 2022 17:43:47 IDT Julian Daich wrote:
> Hi,
>RMS is coming to Tel Aviv. I am receving him. He is looking for a place to
>give  a prentation in a mayor university on Msy 31 st or June 1st. Is there
>here somebody from TAU or HUJI that can help to organize it? He will no
>chsrge for his talk.

Given RMS's actions in recent years,  I would have checked  with  someone who 
is familiar with the local law, if having direct connection, or assisting  RMS 
is not a liability or against the law.

IANAL.



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: A mailto link with RTL body

[borissh1983]

On Friday, 4 February 2022 10:45:35 IST Dimid Duchovny wrote:
> Hi,
> 
> Is it possible to add some unicode characters so that the body of the email
> will be displayed right-to-left?
> I've tried the answer here with both Thunderbird and Gmail, and it didn't
> work.
> https://stackoverflow.com/a/7556801
> 

Only if the client will support it, you need to add RTL unicode character 
\u200F , that work on a line level flow.




___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Anyone have a working open source pidgin/irc bridge for Office 365 Teams chat service ?

[borissh1983]

Hi, 

I'm searching for  an open source plugin or an open source bridge that would 
support getting messages and sending them for Microsoft teams ? 

The good old SIPE protocol plugin does not suppert teams. 



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Does anyone have information about an API to the public early earth quake system ?

[borissh1983]

Hi, 

I used the standard PWS for years, but after the last quakes, I see that there 
was no alert on the public api 
https://www.oref.org.il/WarningMessages/Alert/alerts.json
 for the earthquake.

I know that roar system (תרועה) did alert the day before about the earthquake 
(a recording that says "earthquake" was played in a loop), but I couldn't find 
any public api for it.

In the past we had a CB service that would had delivered it , but I didn't get 
any message on any of the CBs I'm subscribed  to.

fyi 


https://www.gov.il/he/departments/topics/earthquake-trua-alert-system/govil-landing-page[1]
 


[1] 
https://www.gov.il/he/departments/topics/earthquake-trua-alert-system/govil-landing-page
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: English Interface (Instead of Hebrew) [Solved] - Best Solution ?

[borissh1983]

Hi, 

Please avoid erasing plasma config files (fyi it should had been reseted post 
re login), if you are really using plasma on your pc:
Open system settings, go to regional settings ->formats->  uncheck detailed 
settings and set your preferred region there (it would be a good idea to set 
"No Change" in each one of them prior to unchecking).
Under Language set American English (or what ever dialect you prefer).


I also suggest you to  install SGJ^1  either as a package or one that you had 
compiled from source  in a local container or directly into the system (just 
remember to use an a official repository) .

FYI someone already had configured a proper LANG=en_IL.UTF-8 locale which might 
be useful  for you.

On Sunday, 16 January 2022 15:15:32 IST Aharon Schkolnik wrote:
> So, I deleted ~/.config/plasma-localerc which contained:
> 
> bash-5.1$ cat  plasma-localerc.sav
> [Formats]
> LANG=en_US.UTF-8
> LC_MEASUREMENT=en_GB.UTF-8
> LC_TIME=en_GB.UTF-8
> useDetailed=true
> 
> [Translations]
> LANGUAGE=en_US:he
> 
> 
> A new plasma-localerc was (apparently) automatically generated somehow
> which now contains:
> 
> bash-5.1$ cat plasma-localerc
> [Formats]
> LANG=C
> 
> /etc/locale.conf contains:
> 
> bash-5.1$ cat  locale.conf
> LANG=C
> 
> __
> 
> 
> Things seem to be working as desired, but I was wondering if this is the
> best way to set things up so I get English interfaces, but I don't screw
> anything else (Hebrew support in applications, etc).
> 
> 
> On Sun, 16 Jan 2022 at 09:22, Aharon Schkolnik  wrote:
> 
> > Hi.
> >
> > When I run  commands like gnome-disks I get a Hebrew interface.
> >
> > I would prefer English.
> >
> > If I run LANG=C gnome-disks, I get the English interface I want.
> >
> > So, I edited /etc/locale.conf and put in the line LANG=C
> >
> > if I source /etc/locale.conf, I get my English interface.
> >
> > However when I login, I still get the Hebrew interface
> >
> > env gives me:
> >
> > $env|grep -i lang
> > LANGUAGE=en_US:he
> > LANG=en_US.UTF-8
> >
> > How can I get LANG to be C when I login?
> >
> > I am running Fedora 35
> >
> > TIA
> >
> >
> >
> 

1: sparkling grape juice

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: OT: strange network problem

[borissh1983]

On Tuesday, 11 January 2022 9:18:47 IST Erez D wrote:
> The windows 169.25. ip is from APIPA and not from any DHCP server (ipconfig
> does not specify a dhcp server).

Thank you for your enhancement, and more specific explanation.  I was wrong 
,it's APIPA which implement it and not the bonjour service.

> to be on the safe side I verified udp port 67 is unused on my mac (via
> netstat, fuser and socat)
> 
> what boggles me is why can't the window machine access the router and get
> an ip when the mac is sleeping
> 


He may be getting the ip and routing *from* the mac itself (mac running dhcp 
server).

> as the AP switch is layer 2, i would susspect the switch disables the
> windows machin for some reason,
> e.g. it sees the same mac address from another port or detects abuse of
> somewhat from the windows eth port
> however i do not understand how is this related to the mac sleeping
> 
> I thought the AP switch maybe defective but puting another GB switch
> instead causes the same results ...
> 
> why do you thing HOMEGROUP is related ? it is a higher layer protocol when
> the problems seems to me on layer 2
> 

homegroup is effectively a vpn , it's easy to make mistake there (speaking from 
experience) and lock yourself from the local network at home.

> Thanks,
> Erez
> 
> 
> 



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: OT: strange network problem

[borissh1983]

On Monday, 10 January 2022 19:30:55 IST Erez D wrote:
> I've encountered a network problem
> 
> i have a mac and a win10 machine connected to a 4 port Gbit wifi6 AP
> (switch mode).
> a third eth from the AP goes to the router which is also a DHCP server
> 
> everything works well until the mac goes to sleep.
> when the mac goes to sleep, the win10 machine looses it's ip address
> which becomes a 169. address
> 
> as soon as i wake the mac up, the win machine regain a valid 10.0.0.x ip
> 
> i tried to replace the AP with a 4 port switch and got same results
> 
> 
> any idea ?
> 

IP in the  169.254.0.0/16 range is related to bonjour protocol , it is a link 
local communication.

your windows would move to a bonjur ip in many cases but most common that can 
happen if your machine has a bonjour service enabled and an Ethernet card with 
dhcp that can not get an ip from the router.

1. Check if when the mac is running your windows machine got it's ip from the 
mac and not from the router. in some cases mac can have dhcpd running on it, if 
that is the case you should disable it if you do not need it.
2. Check if homegroup is enabled on win10, if it is disable it (by version 1803 
it is no longer active by default, but you could have hacked to enable it).



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: saving files on the network

[borissh1983]

On Monday, 27 December 2021 18:01:14 IST Shlomo Solomon wrote:
> I have a shared disk on my Raspberry Pi accessed on my several
> computers as PI-PUBLIC. I access the drive using smb:// or fish://
> or directly from the /mnt defined in /etc/fstab and can read, write,
> delete files from KDE programs - for example Kwrite, Okular, etc.
> 
> I have 2 related(??) problems saving files to the share from a non-KDE
> program.
> 
> Problem #1
> In LibreOffice (for example) , I get: 
> "Error saving the document Untitled 1: Object not accessible. The
> object cannot be accessed due to insufficient user rights."
> 

cifs/smb is a BAD idea to use for file update , better work locally and 
overwrite it. 
fish is a wrapper , try using sshfs (still bad idea , but safer) as it will 
fail in more clear way.

In practise I found the safest way to collaborate over network  was git-svn  
(keep your pitchforks aside git is great but don't have per file locks that are 
so needed for binary files), or just to work locally and then overwrite the 
original file.
Multi connection edits over the network is a guarantee for a headache later.


> But I DO have user rights since KDE programs DO work. 
> 

Both fish and cifs/smb have an underlying protocols, which errors are 
translated, so some type of errors in ssh/filesystem would be translated to no 
permission  in KIO level (your ui) where the original problem was no access for 
example (I personally fixed such case in one of the cifs versions many years 
ago).
There was a set of errors that can happen due to many problems , but you use a 
standard errno to bring it up, sometimes we (developers) make bugs and choose 
not the best option (sorry in advance).

> Some programs don't even "warn" that the file has not been saved.
> 
> 
> 
> Problem #2
> If I save to (for example) the Desktop, I can then drag-and-drop the
> file to the network drive, but if I later open it and want to make
> changes, when I try to save, I get a message box saying: 
> "The file smb://solomon@pi/PI-PUBLIC/Documents/tst.odt has been
> modified. Do you want to upload the changes?" 

This can happen if file modif date is changed between your file and networked 
drive file, to verify you can check the modif date on the network file and 
compare it to your original modif date.


> If I click un the "Upload" button, the change IS saved, but the extra
> step (and the fact that I cannot save a new document to the drive) are
> driving me crazy.
> 
> I read somewhere that this is a known problem when using non-KDE
> programs in KDE Plasma - something to do with the kioslave, but have
> not found a solution. 
> 
> Any way to get around this?
> 
> 
> 
> 
> 
> 





___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Floppy disks at 2021?!

[borissh1983]

On Sunday, 26 December 2021 18:43:58 IST Steve Litt wrote:
> borissh1...@gmail.com said on Sun, 26 Dec 2021 10:58:11 +0200
> 
> >working long term backup that you do not need to update is a myth,
> 
> That's for sure. I have Qic tapes with proprietary format, Zip disks
> with no Zip drive, and Kaypro floppies to prove it. The hot tip is to
> move to the next *widely used and open* backup technology when the old
> one starts becoming scarce.
> 

We can still get zip drives , you just need the usb to parallel converter and 
get a replacement zip drive (if you used zip drives you know why ;-) ) .

> 
> >both hard drives and cds die with time 
> 
> This hasn't been my experience with CDs or DVDs. See
> 
> http://troubleshooters.com/lpm/201408/201408.htm#he_who_laughs_last
> 

Different people , different life experience. 

I can't pin the degradation on  a brand or a cd type: I had cd's from 1999 that 
worked but cdrs from 2009  had failed.

My sample size is also quite small. In my last restore session I  had no more 
than 120 cdrs, and maybe 40 DVDs tops, previous restore  was in the 200 cdrs 
range.

My cdrs had been both hybrid and regular ones (but vast majority was just 
data), I normally went with CD and not CD-RWs.


> for details.
> 
> I also wrote about my objections to cloud backup. See
> 
> http://troubleshooters.com/lpm/201408/201408.htm#cloud_backup
> 

> for details.
> 
> SteveT
> 
> Steve Litt 
> Spring 2021 featured book: Troubleshooting Techniques of the Successful
> Technologist http://www.troubleshooters.com/techniques
> 
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> 





___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Floppy disks at 2021?!

[borissh1983]

On Saturday, 25 December 2021 3:22:22 IST Steve Litt wrote:
> said on Sat, 25 Dec 2021 03:13:54 +0200
> 
> >Until this thread I didn't even know there was such a thing as 8"
> >diskettes. My first computer was an Apple IIe with 5.25" diskettes
> >(from 1983). I used 3.5" diskettes too and disk on key but today I
> >hardly use even disk on keys, although I used one last week after more
> >than a year of not using it. And of course CDs I don't use any more.
> >My parents have stories of using punched cards when studying in the
> >Technion (around 1970). But I still use hard disks, and I assume that
> >everything we use today will be obsolete in the next 50 years or so.
> 
> And this is one of the greatest challenges to long term backup and
> archiving.
> 

working long term backup that you do not need to update is a myth, both hard 
drives and cds die with time ( I had seen it few years ago when I was updating 
my archives to a newer media types).
I had special db cases (bags?) and even then some of the cds had perished.



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Floppy disks at 2021?!

[borissh1983]

On Wednesday, 22 December 2021 22:48:16 IST Daniel Shahaf wrote:
> If it's IDE you might be able to connect a CF card to the old computer
> with a CF<->IDE adapter?  Not sure if a 1997 vintage IDE controller
> would be up to this.
> 

If I remember correctly I had an  IDE2CF device that used to work^tm with 
Pentium (2/3?) and VIA chipsets , circa 1998-1999, I do remember it had a via 
chipset because it was locking down during heatup, I'm not sure about the cpu.

I do remember that there are several types of IDE2CF  I had to replace until I 
found one that worked for me , and that not all media could be used there with 
the IDE2CF.

(*) I remember I had to change several different ide2cf because they had been 
failing (Probably was using Red Hat Linux at the time, but I'm not sure).

> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> 





___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Floppy disks at 2021?!

[borissh1983]

On Wednesday, 22 December 2021 21:27:01 IST Omer Zak wrote:
> I have a friend who has a PC, which got stuck in the late 1990's. This
> Ethernet-less and Internet-less PC has old (circa 1997) RedHat Linux
> installed on it and it uses floppy disks (diskettes) for backups.
> 
> Now the floppy disk drive seems to have gone out of order and my friend
> will need to read his diskettes in a modern PC as well as transfer to
> it the contents of his hard disk (presumably connected via IDE or
> whatever was available in the antediluvian period before the Big Dotcom
> Crash of 2000.
> 
> 1. Are there any floppy disk drives with USB connection for reading
> those diskettes?

There are usb floppy drives  (3 1/4 ") ones you can buy in stores, they however 
 use usb connectivity and soon to be out of major stores. 
Be advised that modern kernels no longer support IDE floppy drives .

Also finding media for it can be a pain in the tuchs.

> 2. If one needs to temporarily connect an old hard disk (not having a
> modern SATA interface) to a modern PC, what solutions are there?
> 

You would need IDE 2 USB connector , look at 
https://www.amazon.com/AGPtek-Drive-Adapter-Converter-External/dp/B00BIE996S/ref=sr_1_5?keywords=Ide+To+Usb+Adapter=1640252981=8-5[1]
  for examples. 

fyi , as he probably still have a working sound card, he can use a modem 
connection with a modern pc using https://bellard.org/linmodem/[2]  or a 
similar tool (I didn't check bellard's work for a while , but he is the go-to 
place for such actions).
sound card -> two cables -> into a usb sound card . it's 33.1 kbps but it 
should be a fun experience.



[1] 
https://www.amazon.com/AGPtek-Drive-Adapter-Converter-External/dp/B00BIE996S/ref=sr_1_5?keywords=Ide+To+Usb+Adapter=1640252981=8-5
[2] https://bellard.org/linmodem/
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Whatsup.org.il is questioning it's future

[borissh1983]

whatsup.org.il , the last relic of an amazing era,  is contemplating the future 
of http://whatsup.org.il[1] [Hebrew]: https://whatsup.org.il/article/7366[2]



[1] https://t.co/y8gITsRyps
[2] https://t.co/KFAX2IHmpV
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Telegram - locale error

[borissh1983]

1. KDE (and qt) has another level of language config that is loaded (system 
settings -> Regional settings -> Format) , try disabling it.
2. your error look like a seccomp violation error. 



On Thursday, 2 December 2021 13:37:12 IST Shlomo Solomon wrote:
> I installed telegram from snap
> - sudo snap install telegram-desktop
> 
> When I try running telegram from the KDE menu, nothing happens, but
> running dmesg shows:
> 
> [2416340.605905] audit: type=1326 audit(1638444718.942:4956): auid=500
> uid=500 gid=500 ses=1 pid=1860346 comm="telegram-deskto"
> exe="/snap/telegram-desktop/3343/usr/bin/telegram-desktop" sig=0
> arch=c03e syscall=314 compat=0 ip=0x7f599ed3189d code=0x5
> 
> 
> when I try running from a terminal, I see the same thing in dmesg
> and also get the following in the terminal:
> 
> /bin/bash: warning: setlocale: LC_ALL: cannot change locale
> (en_US.UTF-8)
> 
> 
> I don't see any problems with my locale, but maybe I'm missing
> something:
> 
> solomon@shlomo1:~$ locale
> LANG=en_US.UTF-8
> LANGUAGE=en_US.UTF-8
> LC_CTYPE="en_US.UTF-8"
> LC_NUMERIC="en_US.UTF-8"
> LC_TIME="en_US.UTF-8"
> LC_COLLATE="en_US.UTF-8"
> LC_MONETARY="en_US.UTF-8"
> LC_MESSAGES="en_US.UTF-8"
> LC_PAPER="en_US.UTF-8"
> LC_NAME="en_US.UTF-8"
> LC_ADDRESS="en_US.UTF-8"
> LC_TELEPHONE="en_US.UTF-8"
> LC_MEASUREMENT="en_US.UTF-8"
> LC_IDENTIFICATION="en_US.UTF-8"
> LC_ALL=en_US.UTF-8
> 
> Any help would be appreciated.
> 
> 
> 
> 
> 





___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: disabling ipv6

[borissh1983]

Hi Erez, 

You should be able to disable DHCP on the router, and pass all logic to a 
secondary DHCP server. 

You can prepend your DNS server as first among DNS servers on each client (also 
make sure that your DNS server can answer for ), you can add one line in 
/etc/dhcp/dhclient.conf (for dhcp clients)

You should not trust NAT as a security mechanism, specifically when you have a 
foreign device inside your network .  

You should be able  on your router to pass only ULA and not the public prefix 
you get.

It is EXTREMELY important to separate your ISP router and your own one, it is 
better to run your own pfsense / openwrt with full control than to trust a 
third party device.  

You can disable ipv6 on client level via /etc/sysctl.d/XX_disable_ipv6.conf 
(just add one line net.ipv6.conf.all.disable_ipv6 = 1 it will disable ipv6 on 
all interfaces )- this is a VERY bad approach, but it is what you are asking 
for.

You should enable per client router, do you really trust provider router not to 
attack your pc ? 

On Sunday, 7 November 2021 10:27:03 IST Erez D wrote:
Hello

I've swapped isp (hot/hotnet) and now i have ipv6 support which i can't turn 
off.
I have a few issues with ipv6:


1. no NAT so all my devices are accessible from outside


2. can't redirect DNS traffic to my DNS server



I thought about adding a firewall, but this way i need a small fast-enough HW 
for this which is expensive, as well as disable HOT's router wifi so i actually 
need a wifi router ...



can't i just install a dhcpv6 server on an RPi, which will hijack the default 
route and DNS servers, and so actually disable ipv6 ?


Thanks,
Erez.


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: odd alert nvme error "The transport type is not indicated or the error is not transport related"

[borissh1983]

Hi Ariel Bar David. 


I don't know why I had failed to answer to you before :-(

On Monday, 10 May 2021 12:03:05 IDT Ariel Bar David wrote:
> Perhaps checking the output of `smartctl -x /dev/nvme0`, specifically under
> "Vendor Specific SMART Attributes with Thresholds:" can give you more
> information.


Unfortunately nothing useful found there (as you can see I already attached 
similar output from the low level tool).
 
[snip]


After tinkering little bit more I had found that there are similar bugs about 
this issue like (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900244[1]  ) 
and at least at least for Transcend drives they say : 


"Why does the Number of Error Information Log Entries in the SMART values 
increase along with the number of times the computer is turned on and off?"


"Due to the fact that some platforms send non-NVMe command signals to the SSD, 
the Number of Error Information Log Entries in the SMART values of the SSD 
continues to increase. Error notification messages even appear on the screen 
when booting.
The counting of this value will not cause any impact on the use of the SSD. 
Customers may use it with peace of mind. "
 
Unfortunately I don't have coreboot, but rather a standard UEFI that at least 
for now don't have new versions for their system (checked via LVFS).


[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900244
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

odd alert nvme error "The transport type is not indicated or the error is not transport related"

[borissh1983]

Hi, 

I'm struggling to get what could mean this odd "The transport type is not 
indicated or the error is not transport related" error inside nvme error-log 
which is filling my error log.
I also get smart warning of increasing num_err_log_entries , it look like it 
could correspond to one error for each boot but I do not grasp what could that 
mean.

I don't see any noticeable problems for now other than this alert. 

output form error-log have errors like this  : 
sudo nvme error-log /dev/nvme0

. 
Entry[63]
. 
error_count : 0 
sqid: 0 
cmdid   : 0 
status_field: 0(SUCCESS: The command completed successfully) 
parm_err_loc: 0 
lba : 0 
nsid: 0 
vs  : 0 
trtype  : The transport type is not indicated or the error is not 
transport related. 
cs  : 0 
trtype_spec_info: 0 
.


This type of error is the same and fill each error entry.

my smart log for it is : 


sudo nvme smart-log /dev/nvme0  
Smart Log for NVME device:nvme0 namespace-id: 
critical_warning: 0 
temperature : 41 C 
available_spare : 100% 
available_spare_threshold   : 10% 
percentage_used : 1% 
endurance group critical warning summary: 0 
data_units_read : 20,408,448 
data_units_written  : 15,672,597 
host_read_commands  : 165,820,725 
host_write_commands : 197,378,842 
controller_busy_time: 963 
power_cycles: 1,666 
power_on_hours  : 1,865 
unsafe_shutdowns: 135 
media_errors: 0 
num_err_log_entries : 967 
Warning Temperature Time: 0 
Critical Composite Temperature Time : 0 
Temperature Sensor 1   : 41 C 
Temperature Sensor 2   : 59 C 
Thermal Management T1 Trans Count   : 0 
Thermal Management T2 Trans Count   : 0 
Thermal Management T1 Total Time: 0 
Thermal Management T2 Total Time: 0
sudo nvme list 
Node SN   Model
Namespace Usage  Format   FW Rev   
   
- --   
/dev/nvme0n1 XXX   SAMSUNG MZVLB512HAJQ-000L7   
1 398.24  GB / 512.11  GB512   B +  0 B   5L2QEXA7


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Riddle me this: unsolicited orderly shutdown

[borissh1983]

On Friday, 12 March 2021 12:17:26 IST Shachar Shemesh wrote:


Allow me, if I may, to set up the stage for you. 
I don't know the precise scenario that causes this to happen, but one thing 
that triggers it reliably is starting up X-Plane 11 and taking off. A few 
second and up to a minute into the flight, my KDE "shutting down" screen comes 
up. If I cancel the shutdown, the screen comes up one more time on its own, and 
then the computer just shuts down. 
Now, I know what you're all thinking. So I ran X-Plane while monitoring the 
CPU's and GPU's temperatures. Sure enough, they get hot. I opened up the laptop 
(Dell XPS 15, a gamer's laptop), cleaned the fans, and ran the game again. 
Temperatures were much more reasonable. But the shutdown screen popped up 
again. 
I ran it with dmesg running. While there are some temperature throttling 
messages, not a lot, and none that claim I *have* to shut down. 
I am looking for a way to debug this. Obviously, something in the hardware 
gives the command to shut down the computer. I have, however, not been able to 
find out what and why. 
Does anyone have any idea which system might be issuing this command, and where 
it might be writing its logs? 
Shachar




Would it be possible to monitor both dbus messages (system and user) AND 
Xsession errors while you do so ? 

It could be that you have some tool (something like TLP that might trigger a 
shutdown script when you hit a threashold ) .

If I were you I would also check for messages such as "temperature reached" in 
syslog, the temp values may be set both in the UEFI and on kernel level. 
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: problem mounting a share

[borissh1983]

Hi Shlomo , 

Please Remember that smb has a different model of perms that Gnu/Linux, so does 
the uid assigned by the OS - in fact if you will try to assign Windows 
permissions to a Samba share you are guaranteed to have a bad time.  I found 
that the best practise when doing smb/cifs share (even windows to windows) is 
ALWAYS have a password. 

When you share between a pi and Gnu/Linux machines , sometimes it is easier to 
just use sshfs and nfs to share data than using SMB. 

On Sunday, 3 January 2021 14:14:18 IST Shlomo Solomon wrote:

> After mounting with either of the above, all files "seem" to be owned
> by root, even though that is not true. And obviously I cannot update or
> delete files.
> 

By default when you mount cifs you would get that ,you can force a local user 
to mount with. 
use the uid argument with mount. 

example : 

sudo mount -t cifs //pi/shared_with_username  /media/MYUSER/rpi -o 
uid=1000,user=MYUSER,pass=PSWD

remember to mount it on a folder that your user have read/write permissions on 
it. 

> If I do  smb://solomon@pi/PI-PUBLIC/  in Dolpin file manager, I'm also
> asked for a password, but then something strange happens. I CAN read
> and write files, but Dolphin does not show any permissions.
> 

It could be that you have both guest AND authentication setup in samba (which 
might trigger such issue).

Would it be possible to share your smb conf please ? 

Would it be possible to open traces from your client machine so we could help 
you debug this issue ? 

> And finally, the only solution that DOES work "correctly" in Dolphin is:
> fish://pi/media/PUBLIC/
> 
> BUT, I do have one "serious problem" with not being able to properly
> mount the share. Libreoffice and KIO slave do not "play well together"
> - a known issue - so the fish:// solution does not work.
> 
> What am I missing here? I know using samba to communicate between a PI
> and Kubuntu is not the best way, but in the past, it did work for me
> and I don't know what I screwed up. smb.conf on the PI has not changed
> for MANY years, but I have done countless changes, updates and upgrades
> to the Kubuntu (and before that Mandriva) machines.
> 







___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: sound problem on Kubuntu 20.04

[borissh1983]

On Thursday, 10 December 2020 9:02:48 IST Shlomo Solomon wrote:
> On Thu, 10 Dec 2020 08:55:42 +0200
> borissh1...@gmail.com wrote:
> 
> I think you're right, but I have no idea how to fix it, or why it was
> not setup automatically. As I wrote earlier, in the LiveDVD I had sound.
> 

I hope that would be ok to ask, these questions are just for the debugging 
steps . I understand you may have done them already but I do not know the 
answers yet. 

Would you mind checking if it does happen to a brand new unix user ?  sometimes 
we modify our config files in home dir (and sometimes there would be software 
that would that behind our back) . 

Would it be possible to give us the output of  pacmd list-cards - these will 
provide us the list of cards pulse audio sees ("hardware").

Check if any program holds the sound cards : fuser -v /dev/snd/* 

Do you have timtidy installed ? if so can you try removing it and restarting 
the server and see if that unblock you ? timtidy is known to have issues with 
pulseaudio in debian , so there could be a similar problem with Ubuntu.

Do you use fluidsynth ? can you try removing it ? 

Can you open the Pulse Audio control box , go to output devices and there check 
if you have your analog output , if it is there try to set it's port. If there 
are no hardware devices listed there (we would also know that based on the 
command of pacmd list-cards) we would need to check why it's missing and how we 
can add it.

Have you configured manually pulse audio config (/etc/pulse/default.pa ,  
/etc/pulse/daemon.conf)   ?

Do you have the same pulseaudio packages installed - you can compare lists on 
the existing OS and the live machine if both are running the same OS (you can 
using dpkg --get-selections | grep pulse | grep -vvv deinstall | cut -f1 to get 
the list on both sides). 

For your debugging you can try running : pulseaudio -k; pulseaudio -v 





___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: sound problem on Kubuntu 20.04

[borissh1983]

On Thursday, 10 December 2020 8:50:53 IST borissh1...@gmail.com wrote:
> On Thursday, 10 December 2020 8:36:35 IST Shlomo Solomon wrote:
> > seems OK, but I'm sending the output - maybe I'm missing something:
> > 
> > pacmd list-sinks
> > 1 sink(s) available.
> >   * index: 2
> > name: 
> > driver: 
> > flags: DECIBEL_VOLUME LATENCY DYNAMIC_LATENCY
> > state: SUSPENDED
> > suspend cause: IDLE
> > priority: 1000
> > volume: front-left: 65536 / 100% / 0.00 dB,   front-right:
> > 65536 / 100% / 0.00 dB balance 0.00
> > base volume: 65536 / 100% / 0.00 dB
> > volume steps: 65537
> > muted: no
> > current latency: 0.00 ms
> > max request: 344 KiB
> > max rewind: 344 KiB
> > monitor source: 2
> > sample spec: s16le 2ch 44100Hz
> > channel map: front-left,front-right
> >  Stereo
> > used by: 0
> > linked by: 0
> > configured latency: 0.00 ms; range is 0.50 .. 2000.00 ms
> > module: 29
> > properties:
> > device.description = "Dummy Output"
> > device.class = "abstract"
> > device.icon_name = "audio-card"
> > 
> > 
> 
> I think that it is set to a dummy output (meaning no sound would be played 
> from your speakers/ headset) , it should be set to a port with something like 
> "analog-output-speaker"  . 
>

And there is no card definition too , I think pulseaudio did not select your 
audio card at all. 




___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: sound problem on Kubuntu 20.04

[borissh1983]

On Thursday, 10 December 2020 8:36:35 IST Shlomo Solomon wrote:
> seems OK, but I'm sending the output - maybe I'm missing something:
> 
> pacmd list-sinks
> 1 sink(s) available.
>   * index: 2
> name: 
> driver: 
> flags: DECIBEL_VOLUME LATENCY DYNAMIC_LATENCY
> state: SUSPENDED
> suspend cause: IDLE
> priority: 1000
> volume: front-left: 65536 / 100% / 0.00 dB,   front-right:
> 65536 / 100% / 0.00 dB balance 0.00
> base volume: 65536 / 100% / 0.00 dB
> volume steps: 65537
> muted: no
> current latency: 0.00 ms
> max request: 344 KiB
> max rewind: 344 KiB
> monitor source: 2
> sample spec: s16le 2ch 44100Hz
> channel map: front-left,front-right
>  Stereo
> used by: 0
> linked by: 0
> configured latency: 0.00 ms; range is 0.50 .. 2000.00 ms
> module: 29
> properties:
> device.description = "Dummy Output"
> device.class = "abstract"
> device.icon_name = "audio-card"
> 
> 

I think that it is set to a dummy output (meaning no sound would be played from 
your speakers/ headset) , it should be set to a port with something like 
"analog-output-speaker"  . 



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: sound problem on Kubuntu 20.04

[borissh1983]

On Thursday, 10 December 2020 7:56:23 IST Shlomo Solomon wrote:
> I feel really stupid, but after hours of searching, I'm really lost. No
> idea what I'm missing. 
> 

I had a nasty PBCAK bug with debian recently that might be the same case for 
you, the default sink was sent to an inactive sink (muted). 

You can get your sinks by running pacmd list-sinks 

Check if that sink is set correctly to you, and is not muted (and enabled ! ).






___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: USB TV capture card

[borissh1983]

On Thursday, 9 July 2020 14:06:24 IDT Shlomo Solomon wrote:
> I've asked this before, but I'm hoping that maybe I'll finally get an
> answer :-)
> 
> I have a **VERY** old PCI TV card (SAA7130 chip). Each time I consider
> getting a new PC, I run up against the problem of today's motherboards
> not having PCI slots.
> 
> Can anyone suggest a USB device to replace what I have? Of course, THE
> criteria is that it work with Linux :-)
> 
> To be clear, I'm NOT looking for over-the-air TV or DVB-T or even a
> tuner. All I want to do is to be able to connect to a YES "MEMIR" and
> get video+audio in TVtime, Xawtv or whatever.

little bit off but :

In the past I had a USB to pci adapter (~$10-$15), it did not support all the 
pci cards I had at home, but it worked with my tv card I used to record from 
VCR.





___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: moving Kubuntu to a new drive

[borissh1983]

On Wednesday, 1 May 2019 7:29:37 IDT Shlomo Solomon wrote:
> The subject says it all. But a few more details. My 1Tb drive is
> about to die and I'm moving to a new 3Tb drive. The drive
> (/dev/sda) includes 5 partitions -  / ,  /home ,  /boot/efi , /data  ,
> swap.  Most of the bad blocks seem to be in the /data partition.
> Needless to say, I have good backups of everything on an external
> drive.
> 
> There are many ways to do this and I'm not looking for instructions,
> but "opinions" about what would be most efficient. I've considered a
> few options - but each seem to have advantages and dis-advantages:
> 
> 1 - A fresh install and then update configurations and copy whatever
> else I need from the old drive or from my backup drive. (Advantage - get
> rid of old junk, Dis-advantage - seems like a lot of work)
> 
> 2 - dd - and then, of course enlarge the partitions and/or add new
> partitions to use the added 2Tb. (Advantage - safe, Dis-advantage -
> there are many bad blocks on the old drive so ...)

Opinon Against DDing into a new disk, I had done that and apperntly that 
shorten the life of some SSDs (dd on disk level and not partiton level). 

In addition  - 
I also had witnessed several (HDD) disks die when they had been connected over 
SATA to USB.  beware of the cheap adaptors. 



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Why MTA-STS is so rarely used with local e-mail servers ?

[borissh1983]

Hi,

In the last few days I was trying to figure how many ("home run" , "small 
businesses" or academic ) domains had setup MTA-STS .

Out of 20 domains on this and other mailing lists; only two had MTA-STS. I 
have seen that gmail, outlook and gmx have it, but they 
are not small nor home run. 

As for domains that use  providers with MTA-STS,  I may be wrong, but It does 
not seem 
that the domains 
that use such providers had setup delegation. ( https://tools.ietf.org/html/
rfc8461#section-8.2 ) .

Why is it so rarely used ? 

Why customers of providers that provide MTA-STS do not setup it for their own
domain ?

Test for domain.seclvl.cctld  done by : 

1.Check if there for txt record for _mta-sts.domain.seclvl.cctld
dig +short -t txt _mta-sts.domain.seclvl.cctld

positive result : 
"v=STSv1; id=20190101T020202;"

negative result: 
no result.

2. fetching .well-known/mta-sts.txt 
Good result : 

version: STSv1
mode: testing
mx: smtp.domain.seclvl.cctld
max_age: 86400

bad result: 
HTTP 404, 403 etc ..

p.s. the RFC itself https://tools.ietf.org/html/rfc8461



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: bank statement import and analysis

[borissh1983]

On Sunday, 31 March 2019 14:26:21 IDT borissh1...@gmail.com wrote:
> On Sunday, 31 March 2019 14:13:17 IDT Constantine Shulyupin wrote:
> > Hi all,
> > 
> > Is there an utility (preferable on python) for importing and analyzing
> > Israel banks statements in formats Bankin.dat, csv, xls/xml ?
> > 
> > Thanks
> 
> You need to be more specfic :
> 
> There is the clearing house protocol (inner bank) that is used for automated
> bank transfers, but it is Bank specific format for the enum values
> interpretation.
> 
> There is the  MASAV data ( https://www.boi.org.il/en/PaymentSystem/
> ActiveClearingHousesInIsrael/Pages/ClearingHouse.aspx ).
> 
> There is customer level output (bank specific) which include CSV (example
> baruch.ev-en.org/proj/gnucash.html )
> 

TBH I didn't use Baruch's script. I just found it while I was searching for a 
convertion to QIF which gnucash can handle.



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: bank statement import and analysis

[borissh1983]

On Sunday, 31 March 2019 14:13:17 IDT Constantine Shulyupin wrote:
> Hi all,
> 
> Is there an utility (preferable on python) for importing and analyzing
> Israel banks statements in formats Bankin.dat, csv, xls/xml ?
> 
> Thanks

You need to be more specfic : 

There is the clearing house protocol (inner bank) that is used for automated 
bank transfers, but it is Bank specific format for the enum values 
interpretation.

There is the  MASAV data ( https://www.boi.org.il/en/PaymentSystem/
ActiveClearingHousesInIsrael/Pages/ClearingHouse.aspx ). 

There is customer level output (bank specific) which include CSV (example 
baruch.ev-en.org/proj/gnucash.html ) 

There is the  QIF format and friends



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: What would be a proper way to shutdown a sata disk connect with a usb interface ?

[borissh1983]

On Sunday, 16 December 2018 10:13:17 IST shimi wrote:

> umount (assuming -l is not used), by definition, cleanly un-mounts the
> filesystem - it makes sure all pending writes are written and all metadata
> is cleanly committed, then completes. This makes 'sync' unnecessary - the
> filesystem would not be considered unmounted before all blocks were already
> reported written by the disk. So your 'sync', IMHO, does nothing. I assume
> it returns immediately (assuming no dirty data exists on other fs's...).
> You would see the umount waiting the way you would expect sync to wait (if
> you reversed the order...)
> 
> see also
> https://unix.stackexchange.com/questions/345917/does-umount-calls-sync-to-co
> mplete-any-pending-writes
> 

It must be a relic or a cargo cult action on my side, I was always calling 
sync AFTER unmounting drives. and wait little bit.

> sdpram -S 30  /dev/sdX (I'm not sure if does anything honestly)
> 
> > Wait for ~20 minutes
> > physically touch the disk if I feel any movement , if not unplug the power
> > the
> > usb cord and then unplug the power plug.
> 
> To what end?

The sata to usb interface from the laptop.
it should had say : 

1. unplug usb cable from the laptop
2. unplug power cable from the wall socket

> Why do you believe this is different from a normal shutdown of
> your computer with your internal HDDs where the filesystems get unmounted
> (the rootfs being re-mounted read-only) and then power off of the ATX power
> supply?
> 

I do not have the slightest idea how the sata to usb interface works, and if 
it behave the same as a direct sata to motherboard and atx power cut work. 

In a pc I would never unplug a sata cable while the power was still in, in 
fact I will never disconnect ANY cable inside a pc while the pc was still on. 

A sata to usb interface has it's own power source (I forgot to mention it). 

> I have both SSD and plain old HDDs plugged this way.
> 
> > I'm feeling that I'm working in an unsafe manner, does any of you have a
> > better suggestion how to shutdown the devices correctly to prolong the
> > disk
> > life ?
> 
> What is unsafe in your opinion? Can you please elaborate? How does it
> relate to prolonging disk life? Clean unmount is (so I believe...) for
> filesystem integrity more than anything else...
> 

"When in doubt, stop it's wrong" is a good line for any technical field, I do 
not know enough so I ask.
 
I had a disk die recently (it was only three and a half year old disk). which 
was no longer recognized or even show any indication of starting up. I even 
tried to plug the sata disk into a pc and the bios there did not recognize  
it. 

I have  replaced the sata to usb interface and the power block to a new one 
(just in case it was the interface who killed the drive).







___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

What would be a proper way to shutdown a sata disk connect with a usb interface ?

[borissh1983]

I'm using sata to usb interface to extract data and to work with end user hard 
drives connected to  a laptop.

I'm using that for a periodic offline backups to HDD and an SSD (I know 
unreliable but that is the best I have for now). 

What I do today when I need to shutdown it are the next steps :

unmount everything
sync
sdpram -S 30  /dev/sdX (I'm not sure if does anything honestly)
Wait for ~20 minutes 
physically touch the disk if I feel any movement , if not unplug the power the 
usb cord and then unplug the power plug.

I have both SSD and plain old HDDs plugged this way. 

I'm feeling that I'm working in an unsafe manner, does any of you have a 
better suggestion how to shutdown the devices correctly to prolong the disk 
life ?



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: raspberry PI - no X11

[Borissh1983]

Server side :

Please make sure you have free disk space for the user to use, and that the
current user is owning ~/.Xauthority.

Make sure that you didn't touch ForwardX11Timeout setting for sshd.conf.
This can also be caused by selinux

To verify it is not a user restriction, add a brand new user with a home
dir under /home  and see if you can do ssh -X

Client side:

make sure you can ssh -X to other hosts.

On Sun, Feb 4, 2018 at 1:20 PM, Shlomo Solomon 
wrote:

> On Sun, 4 Feb 2018 12:26:41 +0200
> shimi  wrote:
>
> > On Sun, Feb 4, 2018 at 11:54 AM, Shlomo Solomon
> >  wrote:
> >
> > > I really don't know how I screwed this up, but I've been "playing"
> > > with this for hours with no success.
> > >
> > > I have a raspberry PI file server. I rarely use the GUI and when I
> > > do it's usually over VNC (I use KRDC) or with ssh -X.
> > >
> > > As of today:
> > > 1 - KRDC won't connect
> > >
> > > 2 - ssh -X pi@pi   (pi is defined in /etc/hosts) gives only a
> > > console login and says:
> > > X11 connection rejected because of wrong authentication.
> > >
> > > 3 - I connected a monitor directly to the PI and it will not accept
> > > the pi password when I try to login to X11 - but DOES accept the
> > > root password. So X11 is OK, but only for root - not the regular pi
> > > user.
> > >
> > >
> > >
> > Not a Pi expert so I'll answer this as if it was a generic Linux
> > question...
> >
> > 1. You didn't mention if you tried to simply reset the pi user
> > password from root by invoking 'passwd pi'?
> >
> > 2. Assuming SSH authentication via public key (I have to assume
> > because I couldn't find the authentication method in the
> > question...), one has to make sure that the home directory of the
> > user authenticating to is with not-too-open permissions (for starters
> > the safest bet is chmod 700), likewise for all all ancestor
> > directories of said home directory, because if they're too open,
> > another user might be able to simply replace your homedir with
> > another homedir, and then log in as you; To discourage such
> > possibility, SSH blocks authentication whenever the permissions are
> > too wide.
> >
> > 3. If all the above fails (or you already tried and everything is in
> > order), I would look at /var/log/messages (or Pi equivalent) while
> > attempting to login to the user, to see if any hint is available
> > there. Also, over ssh, using 'ssh -v' might output something useful.
> >
> > HTH,
> >
> > -- Shimi
>
> Thanks, but the problem is not the pi password or ssh. I CAN login over
> ssh, but do not get X11. And this is exactly what happens when I
> connect a monitor and keyboard directly to the PI.
>
> Just in case, I added -v to the ssh command as you suggested and here
> are the last few lines of the output:
>
> debug1: Next authentication method: password
> pi@pi's password:
> debug1: Authentication succeeded (password).
> Authenticated to pi ([10.0.0.51]:22).
> debug1: channel 0: new [client-session]
> debug1: Requesting no-more-sessi...@openssh.com
> debug1: Entering interactive session.
> debug1: Requesting X11 forwarding with authentication spoofing.
>
> The programs included with the Debian GNU/Linux system are free
> software; the exact distribution terms for each program are described
> in the individual files in /usr/share/doc/*/copyright.
>
> Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
> permitted by applicable law.
> Last login: Sun Feb  4 11:25:07 2018
> debug1: client_input_channel_open: ctype x11 rchan 3 win 65536 max 16384
> debug1: client_request_x11: request from ::1 36814
> debug1: channel 1: new [x11]
> debug1: confirm x11
> X11 connection rejected because of wrong authentication.
> debug1: channel 1: free: x11, nchannels 2
>
>
>
>
>
> --
> Shlomo Solomon
> http://the-solomons.net
> Claws Mail 3.11.1 - KDE 4.14.30 - Dolphin 4.14.3 - LINUX Mageia 5
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Anyone know a place to get a linux friendly SDR ?

[borissh1983]

Thank you that does  looks promising , I'll try to contact them if they have 
it  in stock and go grab it. 

And that is not that urgent and will be running from my good old pc or a pi 
with a powered hub, I can try to wait some time to get it.


On Tuesday, 10 October 2017 16:18:37 IDT Geoffrey Mendelson wrote:
> this looks like the one I have.
> 
> http://grafpc.co.il/pl_product~1589~21~8.htm
> 
> 
> They dont say the chipset. I expect it is the newer r820t which is not very
> sensitive.
> 
> 
> If it works on a desktop/laptop it also can be used on android.
> 
> If you need one right away and are in Jerusalem, I can lend you one until a
> mail order one arrives.
> 
> Geoff.
> 
> On Tue, Oct 10, 2017, 18:43  wrote:
> > Anyone know a place to get a linux friendly SDR that allow pay and take ?
> > 
> > I need to get my hand on a RTL 2832U (or any other linux friendly SDR). I
> > need
> > to pay in cash and get a tax receipt and allow me to take the device from
> > the
> > store.
> > 
> > Unfortunately getting stuff over the mail is not an option for me now (the
> > post office is as reliable as a candidate  promise before the elections).
> > 
> > Checked with KSP , Ivory , Bug and a few local shops they didn't sell
> > that.
> > 
> > If anyone is aware of SDR groups around please share :)
> > 
> > ___
> > Linux-il mailing list
> > Linux-il@cs.huji.ac.il
> > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Anyone know a place to get a linux friendly SDR ?

[borissh1983]

Anyone know a place to get a linux friendly SDR that allow pay and take ?

I need to get my hand on a RTL 2832U (or any other linux friendly SDR). I need 
to pay in cash and get a tax receipt and allow me to take the device from the 
store.

Unfortunately getting stuff over the mail is not an option for me now (the 
post office is as reliable as a candidate  promise before the elections).

Checked with KSP , Ivory , Bug and a few local shops they didn't sell that.

If anyone is aware of SDR groups around please share :)

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Corrupt file system: Replace hard disk or not?

[Borissh1983]

I'm assuming you atcually had run smart scan to do set the counters
(few hours per scan), what you describe sounds like something caused
by an X issue - there had been several different bugs both in X itself
and in some DE's that made your "screen freeze" (the workaround was to
switch to a different VT and back) while the apps themselvs continue
to run.

Check your dmesg and other logs for any messages containting stuff
such as  link_down, exception Emask , failed command,SError  If
nothing like that exist (and you did run smart scan) you should be ok.

If any message such that exist, it could be either the drive or the cables.

On 9/22/17, Eli Billauer  wrote:
> Hello all,
>
> TL;DR: My hard disk's filesystem was corrupt, but the SMART statistics
> is perfect. Should I replace the hard disk?
>
> Full version:
>
> It seems like one of my hard disks has passed its own premature Yom
> Kippur verdict. Rebooting my computer this morning, it failed to mount,
> saying "Group descriptor 32768 checksum is invalid" and forced me into a
> shell.
>
> I made the mistake (?) of running fsck and then aborting it with a
> (proper CTRL-ALT-DEL) reboot, as it took ages. This is a 3 TB disk,
> which isn't necessary for booting, so I removed it from /etc/fstab, and
> brought up the computer fine.
>
> Then I ran fsck on that disk, which generated a log of 125 MB, and
> basically threw everything into /lost+found, leaving nothing in the root
> directory. Hurray.
>
> It's a Western Digital WDC WD30EZRX-00DC0B0, with one big ext4 over LUKS
> over LVM, 4 years in service, containing stuff that doesn't deserve a
> backup. So the damage is limited, but I wonder if I should replace the
> disk.
>
> Despite its age, this disk's SMART status is perfect: No bad sectors, no
> reallocated sectors, nothing. No parameter can be better. I know there's
> a "don't trust SMART" word around, but had a sector failed, I would
> expect that to appear in the statistics. I mean, I do understand that
> SMART can't predict a failure, but doesn't it mean anything?
>
> And there's another thing: The reason a rebooted the computer was that I
> found the screen frozen, but the mouse pointer moved. The time stood
> still at 3:01 (AM). This is highly unusual on my computer, which usually
> runs of months with zero issues.
>
> So I connected with ssh, and saw nothing suspicious: Not in
> /var/log/messages, not in dmesg, not in .xsession-errors. No process was
> busy in particular. From the remote terminal, I couldn't have guessed
> something was wrong. So I issued a reboot from remote, which failed as I
> mentioned above.
>
> Bottom line: The panic instinct is to replace the disk, even though the
> whole computer is due for replacement within a year or so. Money left
> aside, it's a bit of an effort, and involves a lot of scary commands as
> root, which are a risk factor by themselves. I'm not implying that I'm
> stupid enough to mke2fs the wrong disk. Not me. I never err. ;)
>
> Insights are welcome.
>
> Shana Tova,
> Eli
>
> --
> Web: http://www.billauer.co.il
>
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Arduino on Mageia linux

[borissh1983]

Hi , 

I had a similar issue when I checked the wrong board in the IDE (few years ago 
things may have changed). 

Unplug the device , close the IDE , plug it in again and : 

dmesg
ls /dev/serial/by-*

start the IDE again and make sure you choose the correct board. 

On Tuesday, 20 June 2017 13:32:28 IDT Shlomo Solomon wrote:
> I installed the Arduino IDE from Mageia RPMs and added my user to the
> lock group as instructed.
> 
> In the tools >> serial port menu, there is no  /dev/ttyUSB0 -
> only /dev/ttyS0 and  /dev/ttyS1. I tried both of them but could not
> upload a program. I read that sometimes Arduino needs to be run as
> root, so I tried that too with no success. Here's what I get when I try
> to upload:
> 
> Binary sketch size: 1,056 bytes (of a 32,256 byte maximum)
> Binary sketch size: 1,056 bytes (of a 32,256 byte maximum)
> avrdude: stk500_recv(): programmer is not responding
> avrdude: stk500_getsync() attempt 1 of 10: not in sync: resp=0x00
> avrdude: stk500_recv(): programmer is not responding
> avrdude: stk500_getsync() attempt 2 of 10: not in sync: resp=0x00
> avrdude: stk500_recv(): programmer is not responding



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: iba.org.il programs

[borissh1983]

On Sunday, 11 December 2016 8:56:46 IST Geoffrey Mendelson wrote:
> On 12/11/2016 8:23 AM, Tzafrir Cohen wrote:
> > I have failed to find any combination of Firefox/Chromium and plugin to
> > make the site work. I'm not really sure where the problem lies.
> > 
> > Anyway, for now I use https://tzafrir.org.il/~tzafrir/play_iba .
> > 
> > On initial tests the live stream gives me 403, but I decided to include
> > it just in case.
> > 
> > In KDE you can also include it as a klipper action, with the regex to
> > 
> > match the URLs:
> >http://www\.iba\.org\.il/(program|liveProgram)\.aspx?scode=[0-9]+
> > 
> > Not perfect, but works for now.
> 
> There are Kodi addons that are updated often. You can get Channel 1, 2
> and 10 live streams.

I do not think you are allowed  to use Mako resources over kodi ( 
i...@mako.co.il ) : 


>>אני לא מתכוון שאדם מקליט שידור או מפיץ אלא מתחבר וצופה בשידורים שניתן לקבל 
>>דרך האתר.

>>האם לדעתכם זה שימוש מקובל או לחילופין הפרת זכויות יוצרים  או שימוש אסור ?


>שלום,
>מדובר בהפרת זכויות יוצרים.
>בברכה,
>Info mako

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Interop with Windows zeroconf/LLMNR

[borissh1983]

On Tuesday, 29 November 2016 15:23:11 IST Elazar Leibovich wrote:
> Thanks,
> 
> Even if it's up by default, which seems to be the case at least for some
> Windows versions, I still want to know from people's experience, how common
> it is to have someone shut it down

In more than one office I have seen that disabled, along with other sharing 
options ( using group policy). 

> Is it a good practice?

We have done that because of  windows eagerness to share credentials, along 
with  too much link spam. 

Check Responder (github.com/SpiderLab/Responder) for testing your own system.



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: single threaded web servers

[borissh1983]

On Tuesday 28 June 2016 11:04:49 Erez D wrote:
> i tried searching the web but got no result
> 
> what web servers other than node.js are single threaded ?
> anyone has experience with one ?
> is there one in which the cgi is in c++ ?

for the the joy of serving HTML+JS via sprintfs :)

I can suggest taking a look over gSOAP (single threaded by default, can be  
either in C or C++ ), Just remember that  you need to know what you are doing 
and it's default approach is XML based (you will  need to work to enable non 
xml responses) . 

gSOAP is good if you need a small  binary and you are not afraid to get your 
hands dirty. 




___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Hamakor calendar

[borissh1983]

Hi all,

I don't know if many know or not , but there is a FOSS related calendar at 
https://calendar.google.com/calendar/ical/board%40hamakor.org.il/public/basic.ics
I think it could be good place to share FOSS events in addition to whatever one 
used before.

It's an vcalendar without any auth so you can simply include it in your own 
Google calendar,  download it via wget or use it from your favorite calendar 
app.  

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Fwd: קריאה להרצאות - אוגוסט פנגווין

[borissh1983]

Apologies for cross posting , but I didn't see it here . 

--  Forwarded Message  --

Subject: קריאה להרצאות - אוגוסט פנגווין
Date: Monday 16 May 2016, 14:47:09
From: Tomer Brisker 
To: Hamakor Discussions List

שלום לכולם,

רוצים להרצות באוגוסט פינגווין? הקריאה למרצים נפתחה!

כדי להציע הצעות, אנא מלאו את הטופס באתר הכנס: http://ap.hamakor.org.il/2016/
שימו לב: ניתן להגיש הצעות עד ה-25 ביוני.

נשמח אם תפרסמו את הכנס והקריאה להרצאות בקבוצות רלוונטיות שונות בהם אתם
חברים.

כמו כן, במידה ואתם קשורים לחברה שמעוניינת לתת חסות לכנס, נודה לכם אם תיצרו
איתנו קשר.

-- 
יום טוב,
תומר בריסקר
-
-
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Re: Did anyone able to use hangouts without a google account vs xmpp accounts ?

[borissh1983]

Hi , 

On Monday 25 April 2016 12:41:09 Yehuda Deutsch wrote:
> Hi,
> 
> I am not sure I understood your description of user B.
> Are you talking about a user having an XMPP account not from google
> interacting with google XMPP accounts, or, a user with a non-gmail google
> account interacting within gmail xmpp network?

first option. 

User can be either an XMPP account not from google which can interact with 
Google XMPP services, or a user with a non Google account that interact thru 
hangouts to Gmail XMPP network. 

* Google XMPP federation to jabber.org is dead for a while, but maybe there is 
another one less known.


> Yehuda
> 
> --
> *Yehuda Deutsch | IT Developer*
> 
> On Mon, Apr 25, 2016 at 10:26 AM, Boris shtrasman 
> wrote:
> 
> > Following a chat with a Hangouts plugin developer and noticing that some
> > users under hangouts had walla and sfr accounts, we come to conclusion that
> > maybe there is some kind of federation in place.
> >
> > Did anyone was able to use hangouts IM (*) without a google account,
> > If yes have you been able to interact with XMPP (Google Talk) and can you
> > share how your JID is formed ?
> >
> > With google it would be :
> >
> > u...@gmail.com/resource or u...@googlemail.com/resource
> >
> > The test consist the following :
> >
> > Option A:
> > User A : With pidgin + *XMPP* with a google account.
> > User B : Any mainline hangouts app *without* a google account.
> > User B : initiate a chat (send a messge) to user A.
> >
> > User A - should recieve a message in pidgin.
> > User A - click on get info on the nick of user B in the message box.
> >
> > Option B:
> >
> > Feel free to try to join this email, from hangouts without a google
> > account.
> >
> > (*) - I know a user can join a talk without Google Account via a link ,
> > but I'm talking about initating and ussing the mainline apps.
> >
> > ___
> > Linux-il mailing list
> > Linux-il@cs.huji.ac.il
> > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> >
> >


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

[SUMMARY] Does anyone know how to solve "Too many login attempts" with smtp.gmail.com?

[borissh1983]

> On Mon, Apr 18, 2016 at 5:52 PM, Oleg Goldshmidt <p...@goldshmidt.org> wrote:
> 
> > borissh1983  writes:
> >
> > > Thank you Oleg,
> > > Unfurtunatly I wasn't using that account as a smarthost (I have
> > > dedicated account to be used for smarthost). The blocked account is a
> > > free account.
> >
> > Sorry for the noise then. Was worth a shot...

I followed Oleg's advise and contacted support , 10 minutes didn't pass and the 
issue had  been resolved (without any changes locally).

No answers or replies just started to work.

For the next person who get into this problem open a bug on their forum.

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: [SUMMARY] Re: How to access installation logfiles? - a failed attempt to install Debian Stretch in a virtual machine

[borissh1983]

On Sunday 17 April 2016 11:37:43 Omer Zak wrote:
> Two people replied (thanks!).
> 
> borissh1983 suggested to mount the raw image and copy files directly
> from there, using tools like: qemu-nbd, vfuse/vdfuse.
> As an alternative, he suggested to convert using:
> "VBoxManage clonehd --format RAW input.vfi output.img"
> (disclaimer: the command was not checked)
> and then mount directly the image.
> 

I forgot to add, if the vm is in a working state you may be able to access it 
via ssh or cifs (remember to install vbox tools).

You would do that by  using the vbox network interface  (or any other network 
interface that had been setup to fwd traffic) if ssh is working inside the vm , 
don't forgot to setup up port forwarding.
Regarding the mount : input.vfi is just a name of your file (it should actually 
be input.vdi )  - never mount a live machine and if you do it will eat your cat 
and install win10 on your laptop. 

To get the actual name from the  VM_NAME use  VBoxManage showvminfo VM_NAME | 
grep vdi
Don't know your OS but , the names are case sensitive and you need to work with 
the actual file used for the latest snapshot . 


> shlomif suggested to reboot the VM using a LiveDVD/LiveCD, mount the
> installation virtual disk and copy the relevant files outside using
> scp/rsync/sftp/lftp/etc
> 
> I am saving the suggestions for future reference.
> 
> For now, I ended up installing Debian Jessie (Stable) and then upgrading
> to Testing and to Unstable.
> 
> --- Omer
> 
> 
> 
> On Sun, 2016-04-17 at 09:25 +0300, Omer Zak wrote:
> > I found that there are layout problems in the Hebrew PDF file in the
> > debian-refcard package.
> > 
> > To fix the problems, I am building a virtual machine (using VirtualBox)
> > for a Debian Stretch (Unstable) installation.
> > 
> > I tried to install using debian-stretch-DI-alpha5-amd64-netinst.iso
> > but in middle, there was a message that installation failed.
> > 
> > I was offered the possibility to access the installation logfiles from
> > http://10.0.2.15/
> > I tried but it did not work. Apparently installation was not
> > sufficiently complete to make it possible.
> > 
> > Is there another way to access the installation logfiles, so that I can
> > file a proper bug report?
> > 
> > For now, I am installing Debian Jessie (Stable) with intention to update
> > later to Debian Unstable.
> > 
> > --- Omer Zak
> 
> 
> 


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: How to access installation logfiles? - a failed attempt to install Debian Stretch in a virtual machine

[borissh1983]

Hi ,

On Sunday 17 April 2016 09:25:10 Omer Zak wrote:
> I found that there are layout problems in the Hebrew PDF file in the
> debian-refcard package.
> 
> To fix the problems, I am building a virtual machine (using VirtualBox)
> for a Debian Stretch (Unstable) installation.
> 
> I tried to install using debian-stretch-DI-alpha5-amd64-netinst.iso
> but in middle, there was a message that installation failed.
> 
> I was offered the possibility to access the installation logfiles from
> http://10.0.2.15/

That seems like a vbox default installation ip, I think what you can do is to 
mount the raw image and copy the files directly from there. 
depending on the block device you used : qemu-nbd , vfuse/vdfuse

if you don't have them on your system you can convert (via clone) and directly 
mount  "VBoxManage clonehd --format RAW input.vfi output.img " --didn't check 
the command

> I tried but it did not work. Apparently installation was not
> sufficiently complete to make it possible.
> 
> Is there another way to access the installation logfiles, so that I can
> file a proper bug report?
> 
> For now, I am installing Debian Jessie (Stable) with intention to update
> later to Debian Unstable.
> 
> --- Omer Zak
> 
> 
> 
> 


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il