Re: Roman Gelfand has invited you to open a Google mail account
It may be a new full on campaign they've started, or they may just be testing the waters to judge the level of outrage before starting a full on campaign of this crap. And it could also just be a bug in somebody's new UI code, or a misclick somewhere. I'd wait at least a little bit before breaking out the torches and pitchforks. Roman, you might want to see if anybody else on your contacts list has received a message like this. Or is it possible you might've clicked the 'invite button by mistake, maybe tabbed to the wrong button/link or something? On Tue, Jan 5, 2010 at 11:55 AM, Stan Hoeppner s...@hardwarefreak.com wrote: Roman Gelfand put forth on 1/5/2010 9:55 AM: I never sent this. Outrageous. This is real garbage. Did this ever happen to anyone before? This is the first I've seen of it. I just copied the spam-l list. I'm pretty shocked that Google would start spamming like this. It may be a new full on campaign they've started, or they may just be testing the waters to judge the level of outrage before starting a full on campaign of this crap. Expect this to be Slash dotted by the end of the day, tomorrow at the latest. This is total crap, and should be beneath a company of Google's stature. -- Stan -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: WRT54G WAN access failure
On Sat, Aug 8, 2009 at 11:31 AM, Ron Johnsonron.l.john...@cox.net wrote: On 2009-08-07 21:47, Joel Roth wrote: I'd like to ask for help setting up a used router for my brother. First of all, I get usual internet services without the router: Computer --- DSL modem I have problems with basic configuration: Computer --- Router --- DSL modem The panel LEDs display normally, and the router gets a pingable WAN address from the DSL modem. How are you pinging the WAN address? From a separate network? However ping google.com returns 'unknown host' ping 74.125.45.100 (google.com) returns 'destination unreachable' This is from your computer, right? The way I would go about this is to test pinging the router from your computer (192.168.1.1 for factory defaults), then test if your router itself can ping google. (With firmware from the last year or so, there is an option in the web configuration tool to have the router itself try pinging an IP). Like Ron said, check the PC's network connection settings (DHCP vs. static IP and all that). I would ensure that your computer is set to use the router's internal IP as the gateway, also; the PC won't know who to talk to if this isn't set up right. Hope that's helpful; let us know what you find next. Best, Jeff -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Little OT : Software for Active Noise Cancelling or Reduction
On Thu, Aug 6, 2009 at 6:08 AM, Mark Neidorffm...@neidorff.com wrote: Is it technically not feasable, meaning that a room is too large to do noise cancelling in, or not feasable from the linux software prespective? The former, I'd think. For that to work on the room level, you'd need to have sensors surrounding the room and speakers in all the walls. Sound waves inside a room aren't uniform enough for the a simple speaker setup to cancel them out. You've probably noticed how the way a room sounds can change substantially just from turning your head or shifting it a few inches one way or the other? The same would be true with a microphone assembly that you tried to use for noise cancellation. And if the noise cancellation weren't calibrated correctly, you'd wind up with spots that were noisier than they'd be without the setup. Really this is a job best suited to headphones. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Back up routines
On Tue, Jul 28, 2009 at 11:08 AM, Eric Gerlachegerl...@feds.uwaterloo.ca wrote: On Tue, Jul 28, 2009 at 10:02:06AM -0500, Ron Johnson wrote: My granfather and his accountant were alternately bringing home 13 disk packs 30 years ago. They've obviously got newer hardware now (tape drives), and he's passed on, but the blazingly simple task is still the same: bring your important data off-site every night. It's just Something You Do. s/do/used to do/ Sure, your grandfather did it, but give any small-business owner these two choices: 1. Every day, bring this drive in, plug it in, run this program, then take it home at night; or 2. Pay Amazon $3/mo and don't worry about it; and I bet over 80% of them choose #2. They'll say The time it takes me to do that for one week is worth more than $3, let alone for the whole month!. The ones who choose #1 don't value their time enough, IMO. It depends on the amount of data you have. If you're a decent-sized small business with a lot of databases to back up and you're pushing 10 GB nightly, then it's more like $33/mo, assuming you never actually have to use the backup. If you have to *use* the backup, your restore process will be constrained to the speed of your internet connection, which could result in some very significant downtime which may or may not be acceptable for your business. Each way has advantages and disadvantages; there isn't a one-size-fits-all for this. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: X11 without HAL: DontZap in /etc/X11/xorg.conf doesn't work anymore
Is that enough of an answer or is there any HAL fanboy left who want's to battle choice? I'm not a HAL fanboy. In fact, I couldn't care less. From the descriptions, it sounds like HAL (like every other piece of software ever written) solves some problems while potentially creating others. Such is life. But your argument against HAL is: Ok, let us assume I wouldn't be able to remove HAL from a installed Debian without breaking X11 permanently and I have a random problem [...snip...] The answers will very likely force(!) me(!) to learn to understand how to alter the HAL configuration Or basically: What if I have to use HAL, and then what if HAL breaks? I might have to learn how to fix it! ...so? Technology moves forward. You do have a choice; I mean, if you liked you could even just run XFree86 on a Potato box, or something. But did you start using Debian because you dislike learning new things? It's unpleasant to have your old tools taken away, but surely you have more concrete objections than what you've voiced so far? I'd love to agree with you. I don't have a dog in this fight; I'm ready to be convinced. But I'm afraid that right now you're coming across as yelling at HAL to get off your lawn, and that's probably not the strongest case you could make. On Thu, Jul 16, 2009 at 10:58 AM, Dirknoi...@gmx.net wrote: What is the 'best part of Linux' that HAL neglects? The complete absence of automation if I choose not to want/need it. The ability to mount devices myself, or not. The ability to do what I want. You've not yet explained what these negative effects are. Could you please do so without reference to Windows or Ubuntu? Ok, let us assume I wouldn't be able to remove HAL from a installed Debian without breaking X11 permanently and I have a random problem (pick one from this list: http://www.google.com/search?q=HAL+problem+linux). So I turn here and ask how to solve the problem. The answers will very likely force(!) me(!) to learn to understand how to alter the HAL configuration while it should be possible not to install HAL in the first place if it wasn't made a needlessly requirement(!) for running a Debian desktop. Is that enough of an answer or is there any HAL fanboy left who want's to battle choice? Dirk -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: X11 without HAL: DontZap in /etc/X11/xorg.conf doesn't work anymore
HAL is not technology moving forward. It is a project dedicated to taking away the right to do what you want. I'm sorry, your argument is HAL hates freedom? Seriously? You believe there is an entire team of malicious devs who've devoted their weekends to oppressing your choice of mouse buttons? And the persistance of not understanding this that I face here is just sad. You people don't seem to know what door you leave open here and how it could affect the future and usability of Linux in a negative way. All right, I'll bite. How specifically could it affect the future and usability of Linux in a negative way? What disasters might happen, what door are we leaving open here? What does HAL do that you don't like? You can't be too upset with us for not understanding that when you've made very little effort to explain it (beyond I might have to learn how to fix it). On Thu, Jul 16, 2009 at 11:57 AM, Dirknoi...@gmx.net wrote: Dirk wrote: Jeff Soules wrote: Is that enough of an answer or is there any HAL fanboy left who want's to battle choice? I'm not a HAL fanboy. In fact, I couldn't care less. From the descriptions, it sounds like HAL (like every other piece of software ever written) solves some problems while potentially creating others. Such is life. But your argument against HAL is: Ok, let us assume I wouldn't be able to remove HAL from a installed Debian without breaking X11 permanently and I have a random problem [...snip...] The answers will very likely force(!) me(!) to learn to understand how to alter the HAL configuration Or basically: What if I have to use HAL, and then what if HAL breaks? I might have to learn how to fix it! ...so? Technology moves forward. You do have a choice; I mean, if you liked you could even just run XFree86 on a Potato box, or something. But did you start using Debian because you dislike learning new things? It's unpleasant to have your old tools taken away, but surely you have more concrete objections than what you've voiced so far? I'd love to agree with you. I don't have a dog in this fight; I'm ready to be convinced. But I'm afraid that right now you're coming across as yelling at HAL to get off your lawn, and that's probably not the strongest case you could make. HAL is not technology moving forward. It is a project dedicated to taking away the right to do what you want. And the persistance of not understanding this that I face here is just sad. You people don't seem to know what door you leave open here and how it could affect the future and usability of Linux in a negative way. Isn't one trainwreck of an operating system enough? Do we really need to turn Linux into another trainwreck at all costs to attract more users from trainwreck #1? Dirk -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: is it possible to install a desktop-manager without python and perl?
2009/6/23 明覺 shi.min...@gmail.com: 2009/6/23 Jeff Soules sou...@gmail.com: A very good comparison -- human languages and programming languages. Then why we must have an official world language - English? What's the official language in the programming world? If you say you do not need an official programming language, then you are saying we do not need English to be the world official language, I believe no one will agree with you; if you say every programmer should learn many languages, then you are saying everyone should learn English, Chinese, French, oh, I believe everyone will hate you so much, I guess you are also a chinese, you should know how suffering we chinese have to learn English. Each (natural) language does things differently. Something very important would be lost if we did away with the differences. It's the same with programming languages--different languages exist for a reason, and while it's theoretically possible to do anything in any language, some languages are better than others for some tasks. Haiku in English usually sound silly; an install script in Assembly would be silly too. You really can't write a play in heroic alexandrine couplets in Chinese; just the same, there are probably better language choices than tcl to write real-time financial data analysis software. I do not think we need an official world language. I think that if you want to access Du Fu, Li Bai, Zhuangzi, you will need to learn Chinese; if you want to read Milton, Shakespeare, the Constitution, you'll need to learn English; if you want Apollinaire, Hugo, Rostand, you'll need to learn French. But not everybody needs access to all those things; and there are compatibility layers (in the form of translations) available for people who don't need direct access. People need to learn the languages that let them easily do the things they want to do, whether that's parse a text file or read Homer. What makes a natural language valuable is not just the sounds and the grammar, but the entire body of work that exists in the language. Consider Perl vs. C. Perl doesn't really add new concepts to C -- they're both procedural, you can achieve the same goals in each. Part of what makes Perl valuable is CPAN -- an enormous body of Perl code that exists to solve thousands of problems that other people have already had, and for which Perl users have written reusable solutions. It's not complete, and there are times when it's worthwhile to re-invent the wheel; but incorporating Perl syntax into C would not give you access to the best part of Perl. For that, you'd have to port all of CPAN. To incorporate the best part of Chinese into English, you need more than pinyin and tone markings; you would need to translate Confucius, Mencius, Laozi, Han Fei, Shijing, Daozang, Shiji.. which has been done, but people who really want to understand still have to learn Chinese! I value every good concept in every language, but please add that good concept to my familiar language, not force me to learn a new one; or, I can reference another language so that I can improve my language, but please do not force me to use a new one. What would it mean? A big part of the advantage of Perl, like I said, isn't new ideas or concepts. Perl has more compressed syntax, and easier access to built-in functionality, like integrated hashes and regular expressions. They aren't *new*, you can do them in C, but it takes work. To include Perl's *advantage* into C, you would either have to extend the C syntax, or rewrite your C compiler to understand Perl. To use it, you would have to learn either the new syntax, or learn actual Perl! In just the same way, you can write in English letters, Wu2 sheng1 ye3 you3 ya2, er3 zhi1 ye3 wu2 ya2. Yi3 you3 ya2 sui2 wu2 ya2, dai4 yi3; yi3 er3 wei2 zhi1 zhe3, dai4 er2 yi3 yi3! But to understand it (much less appreciate it) you'd need to actually learn classical Chinese. You can rewrite it in English (it means something sort of like My life has a limit, but knowledge has no limit. To use that which has a limit to pursue that which has no limit, is a disaster; to think it has [all] been learned, is still a disaster!), but it just isn't possible to take the best part of the language and graft it onto English. Even if you could, you'd be creating a specialized part of the language that requires specialized vocabulary and grammar. And the result wouldn't be familiar to everyone, and would definitely NOT be ANSI C. there isn't any difficulties to implement a good concept in one language to another. To implement, no. To take advantage of, yes. The problem is, if everyone of us use a different language, we cannot cooperate, so we must have an official language, and everyone learn and use it from the start to end. People have been cooperating (or not) without a universal language for a very long time. The English and the Russians cooperated against Germany in World War II
Re: is it possible to install a desktop-manager without python and perl?
I open this thread as a programmer, you can ignore my questions about programming in the future, but you should not ignore my questions as a debian user. Right now you are showing that you're a person who asks for advice, but does not listen to the response. People value their time and will not take the time to respond to someone like this, whether you're speaking as a programmer, a Debian user, an artist, or a fisherman. Don't waste people's time. Ever. You talk about how different languages are just different ways to do the same thing. Well... okay... but you're writing to this list in English. From your sig and your name you're obviously a native Chinese speaker. Aren't English and Chinese just different ways to say the same thing? If you don't understand them both well, you might think so. But some things are much easier to do in one language versus the other. 飄飄何所似， 天地一沙鷗 -- in English, is it 'just the same thing?' It's not that Chinese is just better, there are plenty of things that are more natural in English than in Chinese. Just the same, if all you see in Perl is wrappers around C functions--if you think none of them bring new concepts [or clarity or simplicity] to C/C++ -- then you don't understand Perl. And you need to. Without lots of different ways of thinking about problems, you're like a frog in a well, saying look how small the sky is! I'm perhaps a junior programmer myself. I can and have used C and Pascal. I've taught Java. I'm working on projects with JavaScript and I use Perl and SQL regularly in my career. I don't know ENOUGH different ways to do the same thing! I say this because I've realized that different languages do different things much more easily than others, and ultimately it's about getting the job done. Quick storytime: Several years back, I was writing some XML format converters in Perl. There are wonderful pre-written Perl modules to parse and output XML. But I wanted to learn more, so I insisted on doing it all myself. (Management wasn't watching me too closely.) It took me three times as long to write and the code wasn't flexible or maintainable... and honestly, I didn't learn anything worthwhile, but I wanted to learn. Now, whenever I find myself doing this, I look back at that: do I *really* want to spend my time inventing inferior ways to parse XML? Is it so interesting to write string parsers? What am I learning? How much better it is just to learn the common tools! If I want to learn, I'm better off reading someone else's great code than writing my own bad code. It's not the waste of time those scripts languages bring to us programmers -- they exist to SAVE time. If you doubt it, challenge a perl programmer to a race sometime. There are problems for which it would be faster to *learn perl well enough to write a perl solution* than to write the solution in C. You keep coming back to this argument that I hope one day I will be able to take full control of my system, and modify [it] as i like. An admirable goal -- but what does it actually *mean*? What are you going to do with this system? You're going to give up most of the functionality of a good Linux distro so you can... mess around with the way your personal hardware handles filesystem journaling, or memory allocation, or something? That's really the most interesting problem you can think of solving with computers? You really need to rethink your priorities. A mature person would accept that when a solution has been endorsed by thousands of people over decades, there might be something worthwhile to it, even if it is unfamiliar at first. The majority isn't always right, but their ideas are at least worth considering. Good luck. ~Jeff Soules 2009/6/22 明覺 shi.min...@gmail.com: On Mon, Jun 22, 2009 at 10:18 PM, John Haslerjhas...@debian.org wrote: 明覺 writes: yes, currently it's true, but I hope one day I will be able to take full control of my system, and modify them as i like, if I have those other language programmed softwares installed in my system, it will be hard to maintain for me. If learning enough of another language to do maintainence is hard for you you aren't much of a programmer. Programming is not about knowing a language. Yes, language is just a tool, so I want to keep my tool simple and powerful, I do not want so many similar tools with the same functions. -- John Hasler -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org -- Gnu.Linux.(Debian|gNewSense).Gnome.(Mozilla|Gmail|Evolution|Scim|Flashplayer|Codeblocks) Microsoft.Windows.(Vista|XP).(QQ|Game|Notepad++) Gcc.Gtkmm.Opengl 初禪言語寂滅，二禪覺觀寂滅，三禪喜心寂滅，四禪出入息寂滅于貪欲心、嗔恚心、愚痴心不樂、解脫，是為無上禪。 -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org -- To UNSUBSCRIBE, email to debian-user-requ
Re: Program for quoting text like in email?
While it's not terribly good code, the attached perl script should do what you want. It will expect file names as the input, and will output to stdout; you will need to redirect to a file if you want to save it. So do something like: $ perl quoter.pl Guy_On_The_Internet.txt quoted-GOTI.txt where Guy_On_The_Internet.txt is the text you want to quote, in a file. You can change the quote character and the number of columns by editing the values at the top of the script. I assume that input paragraphs come in blocks (i.e. a blank line between paragraphs) and that you want to keep paragraphs together, but don't care about how lines are wrapped. Output will have block paragraphs, too. I hope I'm not helping perpetuate some facebook flame war... best, Jeff p.s. I'm stuck on a windows machine right now, so please ignore the weird carriage returns in the script text. On Mon, Jun 8, 2009 at 9:55 AM, Thomas Andersonandersontho...@gmail.com wrote: Can anyone recommend a program/shell script/editor plugin etc, that can take arbitrary text as input and quote it like email programs quote emails with a preceding character? I'm about to reply to a very long facebook message and want to quote it and make inline replies. But facebook only supports top-posting. I'd like to cut-n-paste the text I wish to reply, quote it with and then cut-n-paste it back into my facebook reply message. I'd also like line breaks to be put in once every 80 characters (email standard?). I use Debian Lenny. -- Regards, Thomas Anderson Quidquid latine dictum sit, altum sonatur quoter.pl Description: Binary data
Re: sudo
(and making sure that it does not allow sudo - a server should not be allowd to be stuffed up by a user, inadvertently or deliberately) I just want to clarify something (not criticizing the preference for su - root over sudo necessarily) but if sudo is set up so that any user can use it, then it isn't configured right. Sudoing privileges shouldn't be given to anybody who wouldn't otherwise have root (unless you have very precisely limited the commands they're allowed to run). Best, Jeff On Sat, May 2, 2009 at 5:51 AM, Bret Busby b...@busby.net wrote: On Sat, 25 Apr 2009, prad wrote: we use (and support) both, but i'd like to establish a rationale for using one or the other. are there situations where debian is preferable (eg older hardware)? are there situations where ubuntu is preferable (eg picking up newer hardware)? what's better for use on a server? ubuntu has a server edition (with an excellent guide), but is it any different from debian? i personally like debian's slow cycle - i don't like to upgrade if i can help it. my son, on the otherhand, likes to try the new stuff whenever possible. i would like to see some opinions and personal experiences regarding these 2 excellent systems! -- In friendship, prad In the responses that I have seen so far in this thread, the thread has apparently degenerated into a one-upmanship battle; where the main response sems to be I know better and more than anyone else. Well, I do not know better and more than anyone else. I am a Linux User, and I will not pretend to be an expert (Definition: An expert is a drip under pressure). I use both Ubuntu 8.04 and Debian 4.0. I have been using Debian 3.0, 3.1, and 4.0. I have also got Debian 5.0 installed on my laptop. I have tried Ubuntu 8.10, then upgraded it to 8.04 (yes, 8.04, not 9.04). I have been using Linux since Red Hat 4.0 (I think it was, and I definitely remember having 5.0 and later that I was using, until Red hat went the same way as Microsoft, and ended up putting out a version that simply would not run on the software that its said it would run on (version 9.0, I think), and that version of Slackware that was current at that time. When I started using Linux, it was the first derivative of UNIX that I had used, with a GUI. before that, I had used BSD v4.2, and SCO UNIX VR2 (or R3). With the question above, that involves Debian and Ubuntu, we have a LAN that uses Debian on the servers (a gateway firewall server, and, a mailserver), and Debian and Ubuntu on the nodes, which include this desktop, and some laptops. The gateway/firewall server runs a Smoothwall (Express, I think) installation which has its underlying OS as Debian 3.0 or Debian 3.1 . Due to the way that it is, I do not know how to properly upgrade it - it is a blackbox kind of thing, and is basically left alone, as it is neither clear nor simple, how to update and upgrade it to the latest version of Debian stable, if it can be so upgraded. The mailserver runs Debian 4.0. That runs fetchmail and postfix. Updating that, is easy and simple, using apt-get update, and apt-get dist-upgrade. On this computer, a desktop, I usually run Debian 4.0. I find it more convenient, for most things, and I do not like the sudo that Ubuntu uses; I prefer su - root. Before people start criticising that preference, it it my preference, and, it is up to each individual, to choose the person's preference, for whatever reasons that person makes the choice. That is one reason for preferring Debian for the servers; the requirement of a root password, for sysadmin, rather than being able to do sysadmin using a user password is preferable, for me. On this desktop computer, I also dual boot into Ubuntu 8.04. Ubuntu 8.04 can do things that I have been unable to do with Debian 4.0, such as viewing .wmv files. Each of the two distributions has its advantages on a desktop computer. On my laptop computer, I multi-boot, between Windows XP, Ubuntu 8.04, and now Debian 5.0 (previously Debian 4.0). My laptop computer is an HP NX5000. It has a wireless network card (a\nasty things - I would get rid of it, if I knew how). When we initially installed Debian 3.1 on that laptop, which was purchased with Windows XP installed, we had to use Mandriva to repartion it (Mandriva had a dynamic (?) partitioning utility), then install Ubuntu on it, then unistall Ubuntu and install Debian, as the wireless network card had an interrupt conflict with the wired network card, and it was a problem that was automatically (or, easily) resolved with Ubuntu, whereas Debian simply would not work with it. I think that was done with Ubuntu 7.04. When Debian 4.0 was installed on that laptop, it would not resolve the interrupt conflict, and Ubuntu had to be used again, to solve the interrupt conflict. With installing Ubuntu on that laptop, having a 10GB partition free, I
Re: Bash Session
The CL really shines with complex tasks, and this is where people's eyes glaze over. For example, I convert a directory of .wav files to .mp3 files on a I think of it more that the cl shines when doing multi-step tasks. Find all the .odt files on the hard drive is just as easy through gui or cl. Move all the .odt files on the hard drive into this folder is vastly more time-consuming on the gui even though it's not particularly hard to understand (and shouldn't make people give you goat eyes). People who are coming from a windows environment or are otherwise new to cl uses don't realize how many tedious tasks can be done very simply through a cl and some scripting, even without using the most basic of flow control (like conditionals). My other advice to the OP would be to show your class the BASH way to do stuff that takes multiple steps (and a lot of careful looking and clicking) through a gui. hope that helps, jeff On Mon, Apr 27, 2009 at 5:44 AM, Mark Neidorff m...@neidorff.com wrote: On Saturday 25 April 2009 12:57 pm, Kurian Thayil wrote: Hi All, Planning to give a small demo on BASH scripting in a LUG community. Audience will be school teachers and basic home users and thus are beginners. Thinking on how to present simple and some example scripts that will make them more interesting and love command line. Need some suggestions. Its always difficult to think simple and easy. :-) So I've quite confused here on how and what to present. Any help? Regards, Kurian Thayil. You ask a lot!!! Love the CL? How about a side by side comparison for copying a set of pictures from a memory chip to a folder? IMO, you are not going to create CL converts. The best you can hope for is that folks will be able to use the CL as another tool. The CL really shines with complex tasks, and this is where people's eyes glaze over. For example, I convert a directory of .wav files to .mp3 files on a regular basis. I use lame to do it and the command for a single file is really simple. I've attached autolame (A script which I downloaded and did a little customizing on) which nicely automates the task. Take a look. Imagine trying to teach the ins and outs of that script! Also there is a bash scripting guide out there on the net. Mark -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Bash Session
I'd suggest any tasks that they frequently do by hand. What do school teachers in your community use their Linux machines for? Any way to speed that up? Parsing text files perhaps, doing file conversions or concatenating documents they might have to deal with (pdfs?) or something like that? Typically your audience will be most interested if they can see the relevance to their lives of your material. On Sat, Apr 25, 2009 at 12:57 PM, Kurian Thayil kurianmtha...@gmail.com wrote: Hi All, Planning to give a small demo on BASH scripting in a LUG community. Audience will be school teachers and basic home users and thus are beginners. Thinking on how to present simple and some example scripts that will make them more interesting and love command line. Need some suggestions. Its always difficult to think simple and easy. :-) So I've quite confused here on how and what to present. Any help? Regards, Kurian Thayil. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: debian and ubuntu
Why do you think Ubuntu's commercial? Because they offer for-fee professional support? 2009/4/25 Robert Holtzman hol...@cox.net: On Sun, 26 Apr 2009, Nuno Magalhães wrote: For servers i'd definitely go for Debian. Ubuntu's commercial and you can't be sure if it'll provide support in the future and how. Why do you think Ubuntu's commercial? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: OT - Video card opinions
upgrades to my machine and am considering a pair of Radeon HD 4830s in crossfire mode. I'm stuck between that or sticking with Nvidia and going for a GeForce 9800GT. My understanding is the combination of the two Radeon's in crossfire will blow away the Nvidia performance wise. General workstation, Linux. Perhaps gaming, although that would be a very small portion of the consideration. None of the options you mention will be at all challenged by general workstation use. Personally I'm running a GeForce 9800GT and find it more than adequate for my gaming needs. In my experience, upgrading wine versions has given more performance payoff than upgrading video cards. Basically, for the use you describe, don't worry about performance; save your money. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Adding installed packages to menu
might be useful to you sometime. All of this can also be done from the command line but you probably want to use the GUI that you are already using. I don't use the menus much -- I usually run things through the command line as Thorny was saying -- but it looks like there's some menu management tools through a GUI under System - Preferences - Main Menu. You can show/hide menu items, sort them according to whatever categorization you like, and add/remove new menu items relating to new software packages. Hope this helps. ~JS On Mon, Mar 2, 2009 at 9:44 AM, Thorny thorntreeh...@gmail.com wrote: On Mon, 02 Mar 2009 15:26:33 +0900, Bret Busby wrote: Synaptic installs then loses packages; it downloads and installs a package and its dependencies, and then, when queried, it shows the package and its dependancies to be installed, but it does not add the packages to the menu, and, in the Properties dialogue box in Synaptic, it shows the application category, where I assume that the application should be added to the Applications menu hierarchy; under the label of Section, on the Common tab, but it does not show anything like a path to the package executable file, so, basically, the package gets installed and then lost, so it cannot be used. Well, it's not really lost. You would be able to run the installed package by entering the appropriate command for the package at the command line of a terminal. If the package maintainer chooses to not have package configuration automagically add it to a menu that doesn't mean it is lost or won't work. The system administrator (who installs the package as root) can decide which and who's menu the package shows up in and that is the behaviour I prefer, perhaps others also do. By the way, since you use Synaptic, if you check the properties of the package from the Synaptic menu and look at the Installed Files tab it will show you where all of the files from the package have been installed. That will give you the location of the executable binary for the package. In addition, it shows the location for any documentation installed, which might be useful to you sometime. All of this can also be done from the command line but you probably want to use the GUI that you are already using. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Numeric keypad doesn't work!
Does anybody have a numeric keypad that works? What is your keyboard mfg and model set to? Mine is Generic 101 key PC. Hmm, that may not be the right track then... mine is a Microsoft Natural (one of the old ones, with a PS/2 input instead of USB). In Gnome, I have the Microsoft Natural keyboard layout set, with a USA layout. The relevant section of my xorg.conf is: Section InputDevice Identifier Generic Keyboard Driver kbd Option CoreKeyboard Option XkbRules xorg Option XkbModel pc104 Option XkbLayout us Option XkbOptionsaltwin:meta_win Option XkbOptionscompose:menu EndSection Though come to think of it, something in my setup is doing funny things with my keyboard as well; I have the menu button mapped as a compose key (for typing accents and such) but even though it's set in xorg and in my gnome keyboard settings, I have to re-click that setting in the control panel and then re-save the keyboard settings at each X session in order to get the menu key recognized as compose. Neither here nor there. Anyway... I wonder if there's something maybe trapping the input from your numpad when you're in Gnome? Is that possible? Do you see any kind of behavior change at all from hitting those keys? On Thu, Feb 26, 2009 at 7:10 PM, Dennis Wicks w...@mgssub.com wrote: Jeff Soules wrote the following on 02/25/2009 11:36 PM: On Thu, Feb 26, 2009 at 12:27 AM, Dennis Wicks w...@mgssub.com wrote: Greetings; I just noticed today that my numeric keypad doesn't work under Gnome, but works fine in a console session. (Ctl-Alt-F1) I've tried changing the keyboard brands and models but nothing makes any difference. Still doesn't work, regardless of NumLock setting. And the LED does turn on and off with the NumLock. Anybody have the solution for this problem? TIA! Dennis Is the keyboard model correctly set under Gnome's Keyboard Preferences control panel? How about in /etc/X11/xorg.conf ? Are either of those set to a keyboard type that doesn't have a numpad? Just a shot in the dark, but can't hurt to check. Good question! In 30 years I don't remember ever having a kbd that didn't have a numeric keypad, or one where the keypad didn't work. That is why I first thought that my keyboard wasn't working. Until I discovered that it worked in the console sessions but not in gnome. Does anybody have a numeric keypad that works? What is your keyboard mfg and model set to? Mine is Generic 101 key PC. Thanks, Dennis -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Numeric keypad doesn't work!
Is the keyboard model correctly set under Gnome's Keyboard Preferences control panel? How about in /etc/X11/xorg.conf ? Are either of those set to a keyboard type that doesn't have a numpad? Just a shot in the dark, but can't hurt to check. On Thu, Feb 26, 2009 at 12:27 AM, Dennis Wicks w...@mgssub.com wrote: Greetings; I just noticed today that my numeric keypad doesn't work under Gnome, but works fine in a console session. (Ctl-Alt-F1) I've tried changing the keyboard brands and models but nothing makes any difference. Still doesn't work, regardless of NumLock setting. And the LED does turn on and off with the NumLock. Anybody have the solution for this problem? TIA! Dennis -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: How to protect an encrypted file system for off-line attack?
there's no known practical attack on it. It performs well. So it is ^ That's the word, of course... Any government that discovers a successful attack is going to keep quiet. Except in a certain side-channel sense -- any government that discovers a successful attack on an encryption algorithm it regularly uses will know that other parties could have discovered the same attack, and will then need to limit its use of the compromised algorithm. That behavior change will be observed by other parties and will prompt suspicion about a possible vulnerability. Unless the party that discovered the vulnerability stepped up use of the compromised algorithm, but only for unimportant data or misinformation... Oh, security headgames. On Tue, Feb 24, 2009 at 5:27 AM, Ron Johnson ron.l.john...@cox.net wrote: On 02/24/2009 02:36 AM, Tzafrir Cohen wrote: [snip] Anyway, the AES cipher is one that is very well studied. It has been implemented all over. Just about anybody have tried to attack it and yet there's no known practical attack on it. It performs well. So it is ^ That's the word, of course... Any government that discovers a successful attack is going to keep quiet. a very sane choice as a block cipher. -- Ron Johnson, Jr. Jefferson LA USA The feeling of disgust at seeing a human female in a Relationship with a chimp male is Homininphobia, and you should be ashamed of yourself. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: How to protect an encrypted file system for off-line attack?
As Ron said, the problem you're describing is a little bit different from the one the man page talks about. The most intrusive attacks, where an attacker has complete control of the user's machine (and can therefor modify EncFS, or FUSE, or the kernel itself) are not guarded against. Do not assume that encrypted files will protect your sensitive data if you enter your password into a compromised computer. How you determine that the computer is safe to use is beyond the scope of this documentation. Seems to me that the man page is talking about two situations: #1. Someone has rooted your box. In this case, your encryption can be bypassed, because unless your secret passphrase is actually an entire RSA key, the password is just a gatekeeper and everything needed to decrypt the fs is on the box. A (sufficiently clever) attacker with root (and enough time) could modify the EncFS program itself to bypass the password check and just decrypt your files. #2. Your box is keylogged, or (for some unknown reason) you put in your decryption password on a compromised/keylogged other box. This isn't strictly an offline attack, it could happen remotely if the password is compromised. I suppose you could get around this by automating the way your fs password is input (although if it's automated input over stdin, couldn't a properly designed keylogger still eavesdrop on it?), but that's kind of missing the point, which is if situation #2 happens, you will soon find yourself in situation #1. There, the real questions to ask are how do I avoid getting a keylogger and how do I catch a user account compromise before the attacker can gain root. Taking steps in response to those questions will make you much more secure across the board. If you're simply worried about protecting your filesystem from offline attacks, i.e. someone has physical access to your computer without having rooted it or whatever, then (as always with security) it becomes a question of how good is good enough. How long can someone sit at your computer trying to log in before it locks out for half an hour? How long before you (or someone else) comes back to stop them? Having logged in, how long before they manage to decrypt the filesystem without using EncFS? Etc. We're starting to talk about a very dedicated attacker at this point, who must have a compelling motivation for attacking your box specifically; these aren't government secrets, right? At any rate, in this kind of situation, other security considerations and means of attack (http://xkcd.com/538/) start to come into play. In fact, the main scenarios I can imagine are either that you're trying to keep personal files secret from a prying but technically skilled family member, or that you're protecting a corporate environment from some kind of industrial espionage (although again, in the latter case I think you're more vulnerable to social engineering attacks than strictly technological ones). Though I would wonder if, in those scenarios, having the password automatically input from an SD card or something might actually decrease your security. If you're talking about offline attacks, that's someone with access to the computer's physical environment (and who may even have seen you put in the SD card while you mount encrypted FSs). A non-compromised, keyed-in password would actually provide more protection in that case than an SD card that's sitting on your desk somewhere and that any joe could plug in. After all that, if this problem still seems compelling to you, then I suppose the best situation would be for you to have an SD card or whatever, kept secure and separate from the box, that feeds the actual encryption key into the system, with that key not being stored locally at all. Ideally you would also have some kind of second password check required to get the program to actually use the RSA key, so you can depend on both something you have and something you know. I've no idea how to implement this technically; I don't see a facility in EncFS to do anything like this. Also, this setup makes your data brittle; if your SD card gets wet or zapped, your filesystem is gone. There's always compromises between security and convenience, and security and resilience of data. And, joy of joys, make sure you store your backups somewhere nice and secure. With your EncFS setup you probably want to store the backups of the encrypted filesystem away from all the others, so that someone getting ahold of them has to crack the actual encryption rather than just hunt around for the key. On Sat, Feb 21, 2009 at 11:16 AM, Javier javu...@gmail.com wrote: Sorry for my ignorance in this respect, I hope you can help me. I'm actually using encfs to protect my sensitive data, but this is what is said in the manual: The most intrusive attacks, where an attacker has complete control of the user's machine (and can therefor modify EncFS, or FUSE, or the kernel itself) are not guarded
Re: How to protect an encrypted file system for off-line attack?
Hi Javier, Thank you for your reply. Given the hypothetical (but all too possible) situation you describe, there are different considerations. Now imagine the worst situation, that a friend wants to protect his data from his corrupt dictatorial government Absolutely a possibility. There are many levels of secrecy -- filesystem encryption prevents the contents from being known, but does not hide the fact that there is a secret. The presence of a secret could be enough right there. The kind of government you describe doesn't need to find evidence in order to disappear a person. This also makes it all the more possible that, if his house is raided and encrypted files are found, someone might try to torture the information out of him. (Even if the partition is named something harmless-sounding, I can't imagine cops anywhere who wouldn't demand it be decrypted so they could check it, and refusal would not look good.) In any case, with EncFS we're talking about a technological solution in which the encryption key is stored alongside the encrypted media, so whatever the password concerns are, this is unsuitable for keeping information truly secret when a hostile person might have enough physical access to the drive. I think it is entirely too likely that a government like this either would be able to compromise the data (with or without recovering the passwords), or would be willing to punish him just for having encrypted data to begin with, if they know he has it. Then my question is: is EncFS good enough to protect his data? I think the SD with stored password is a good solution. While he is not in the house, he can carry the SD or have it hidden somewhere. While he is in the house, and police enter, he might have enough time to probably destroy the SD and turn off the computer. With the level of danger involved here, I think the security issue is more that there be some rapid way to destroy any evidence of the existence of the data (possibly destroying the data itself), rather than making sure the password stays safe. Destroying the SD card is a start, but really a person under this kind of government would need to be able to say No, there are no secrets, not Here's a filesystem that you can't read. That was my point in the original email -- while there are some interesting technical problems here, I think in this case the digital security is less important than the social/personal security surrounding it. Or, rather, the digital security will not wind up being the weakest link in the chain. I wonder if in this situation it might be more appropriate to store the encrypted filesystem on an external pluggable device, like a USB key. If a person in this environment were not using many multimedia files, then storage needs might be very moderate, able to fit on some of the larger USB keys (8-16 GB) that can be had for around US $30. (I don't know what kind of budget a person in this situation might have). But by storing any incriminating files on an external medium, preferably a (physically) small one, and then encrypting that, a person could both hide the very existence of prohibited data, and also have a data store that can be more easily hidden or destroyed during a police raid. (Chuck it in the sewer or something if needs be). If the computer is seized or stolen while the person is away, oh well; there's nothing incriminating on the computer, not even any suspicious encrypted filesystems. That's if there is a reasonable reaction time before being taken into custody. I really don't know whether it'd be better to keep this on his person with a plan to ditch or destroy it, or to find a hiding place the police wouldn't check where it could be accessed without arousing suspicion. Good luck to any person who finds himself in such a situation. As to passwords, another method that works well is to take the initials of a memorable phrase, and then make a few predictable changes. For instance, you could take the phrase working to enhance civil liberties by overthrowing kings and dictators to create w2EcLx0KD -- which has a decent 10-char length with some character distribution while remaining very memorable. I hope all this helps. I think the SD with stored password is a good solution. While he is not in the house, he can carry the SD or have it hidden somewhere. While he is in the house, and police enter, he might have enough time to probably destroy the SD and turn off the computer. What would you recommend in this imaginary case? On Sun, Feb 22, 2009 at 8:03 PM, Javier javu...@gmail.com wrote: Jeff Soules escribió: As Ron said, the problem you're describing is a little bit different from the one the man page talks about. The most intrusive attacks, where an attacker has complete control of the user's machine (and can therefor modify EncFS, or FUSE, or the kernel itself) are not guarded against. Do not assume that encrypted files will protect your sensitive data
Re: Which programming Language
On Sun, Feb 8, 2009 at 8:13 AM, Douglas A. Tutty dtu...@vianet.ca wrote: Someone has a python compiler (*.py to an executable)? Yes, I know that python *.py modules get compiled into *.pyc byte-code but that still has to go through the python interpreter. Also, what happens in 10 years when I want to make a slight change to a program? Yeah, both perl [1] and python [2] now have compilers (to executable, not to bytecode) out there. You (obviously) lose the platform-independence with this. It seems like most of them are a little clunky -- they wind up importing part of the relevant interpreter, so I don't know if the resulting executable would run any faster. In 10 years, if you want to change the program, you need to change the source and recompile, just like with C. The issue is just that the language is still changing, so there's no guarantee that any compiler for new hardware will recognize your old language conventions. That'll throw up the same roadblocks whether you compile a standalone executable or stick with the interpreted plaintext script file. [1] http://www.perlmonks.org/?node_id=186402 [2] http://effbot.org/pyfaq/how-can-i-create-a-stand-alone-binary-from-a-python-script.htm -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Which programming Language
So start with Python or Basic (search for Gambas IDE). I hear that Python is an excellent learning language. However, I think that Basic might be less useful for this, simply because it's very different from the major language families and (last I heard) still relied on some features that teach bad habits. Also, I do not believe Basic is used very much in the Unix/Linux world; it might be more useful if you intend to work with Windows a lot. If you are comfortable with how the insides of a computer work (mainly with memory), then actually I would encourage you to learn C early on. (If you are not comfortable with how the insides of a computer work, you should become comfortable; you'll need to know soon enough.) C has a few features (variable and function declarations, strict type checking) that are good reinforcement when starting out, and learning C syntax will set you up well to learn C++, Java, and Perl as you progress. On Fri, Feb 6, 2009 at 1:14 PM, Javier javu...@gmail.com wrote: Abdelkader Belahcene escribió: HI, There are many and many programming languages (mainly : C,C++,java, Shell, Perl, python, php). which learn and use, in which circonstances use that language instead of the other. In many situations we can use anyone, but which is better. For learning purpuses, Python and Basic. But when you finish learning it, the continue with C, Perl, Pascal, even Lisp. A programmer must know several languages. I don't know of any professional programmer who does know only one. Which is better? For text processing, Perl, for driver programming, C, for applications it depends, it can be Python if you don't need it fast, or C++, Pascal, if you need it faster... So start with Python or Basic (search for Gambas IDE). -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: [OT] from LGPL to dual-license?
Note that Linus doesn't agree with that idea, which is why, for example, the nvidia driver is allowed. I think I'm confused -- in that case, wouldn't Linux be the larger work, and the driver be a work that's linked in? nVidia of course has the right to license their software however they like...? -js On Thu, Jan 29, 2009 at 10:14 PM, Ron Johnson ron.l.john...@cox.net wrote: On 01/29/2009 05:27 PM, Boyd Stephen Smith Jr. wrote: [snip] Still, that's much easier than building proprietary or dual licensed work on top of GPL software. The FSF's interpretation is basically that anytime GPL licensed code is integral to the functioning of the larger work (dynamic linking, static linking, IPC, *anytime*) the larger work must be licensed under the GPL, effectively forbidding proprietary or dual licensed works from being built on it. Note that Linus doesn't agree with that idea, which is why, for example, the nvidia driver is allowed. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Logging passwords of SSH attacks
While in general I agree, in this case you could say that I am sitting here as a honeypot. No legitimate users will try connecting via SSH on port 22, and certainly not over the big bad internet. The only reason that I have sshd running here is for another machine on the LAN to ssh in on a different port. That would seem to reduce the difficulties associates with logging random users' passwords. However, that makes me wonder what the point is -- are you just curious as to how random crackers start their dictionary attacks? Besides, if you're only SSHing on the lan, you might be better off from a security standpoint by just dropping foreign-IP packets to 22 and whatever SSH port you actually use. If there is no legitimate traffic, why even give attackers a login prompt? On Fri, Jan 16, 2009 at 8:45 AM, Dotan Cohen dotanco...@gmail.com wrote: 2009/1/16 Florian Mickler flor...@mickler.org: How can I start logging the passwords attempted as well as the usernames? Thanks. That's not possible without hacking in the ssh-sourcecodes, I assume. It would be a security nightmare to have the passwords of users being logged. even if it would only be on failed attempts. people often confuse which password they have to enter where, and thus valid passwords would wander into the logs for malicous people to collect and use at other sites. While in general I agree, in this case you could say that I am sitting here as a honeypot. No legitimate users will try connecting via SSH on port 22, and certainly not over the big bad internet. The only reason that I have sshd running here is for another machine on the LAN to ssh in on a different port. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه-و-ي А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я ä-ö-ü-ß-Ä-Ö-Ü -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: iptables/firestarter
on my system but it isn't running, and I don't think I ever set it up. All I want is for my web port rule to start every time I boot, but I can't find anywhere in the system where iptables is saved, or where to put this one line rule so it starts every time. http://www.debian-administration.org/articles/615 has more information about this topic. Personally, I do this: Ensure that you have your firewall rules set up as you wish them. Then, edit /etc/network/interfaces to add the following: # Bring up firewall pre-up iptables-restore /etc/iptables.rules # And save fw state on shutdown post-down iptables-save -c /etc/iptables.rules However, people seem to be saying that this may have drawbacks, as if you add a bad rule or otherwise negatively alter your ruleset, it would get automatically saved. Since I make all edits to my iptables rules in a shell script that I source when I want to change them, I'm not too worried about that, but you can see several alternate solutions from the link above. Hope this helps! On Fri, Jan 16, 2009 at 10:35 PM, Umarzuki Mochlis umarz...@gmail.com wrote: Perhaps you can run # update-rc.d your-desired-program To make iptables start at boot-up for every runlevel. never tried this but i read from http://www.rexx.com/~dkuhlman/iptables_install.html (check step number 7) 2009/1/17 Paul Cartwright a...@pcartwright.com: I am having a small problem with my system. I started a small web server, so I could share photos. nginx gallery2 are working just fine, easy to setup and use! The problem is, I just rebooted, and I have to rerun the iptables command to open port 80 for my web server again. I see there is firestarter on my system but it isn't running, and I don't think I ever set it up. All I want is for my web port rule to start every time I boot, but I can't find anywhere in the system where iptables is saved, or where to put this one line rule so it starts every time. wiki.debian.org didn't have an iptables section, just shorewall. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: how to find trace of attacks
fail2ban knockd knocker denyhosts http://www.debian-administration.org/articles/187 http://www.howtoforge.com/preventing_ssh_dictionary_attacks_with_denyhosts If you know where you'll be sshing in from, you can use iptables to deny access to the appropriate port with MAC filtering and possibly IP range rules. Something like: iptables -A INPUT -p tcp --dport 22 -m mac --mac-source XX:XX:XX:XX -j ACCEPT iptables -A INPUT -p tcp --dport 22 -j DROP This way you can forbid connections to your SSH port from anybody but the trusted MAC address. MAC addresses can be spoofed, of course, but this is one more layer that an attacker would have to jump through, without requiring much of any effort on your part to set up, and it will read as no sshd provided to a script-kiddie doing a port scan. If you add a few lines to drop packets for the SSH port from any but a small trusted range of IP addresses, you increase the security even further. Of course you should take all the precautions you can. On Wed, Dec 31, 2008 at 12:17 PM, Daryl Styrk darylst...@gmail.com wrote: Douglas A. Tutty wrote: On Wed, Dec 31, 2008 at 01:28:47PM +0100, Abdelkader Belahcene wrote: I am simpler user on laptop, with ssh server running. Ther is no important data on my laptop!!! Curious. Why any server running on a laptop? Do you limit the ssh to rsa/dsa or do you allow passwords? IOW, how have you hardened up the ssh server? Doug. fail2ban knockd knocker denyhosts http://www.debian-administration.org/articles/187 http://www.howtoforge.com/preventing_ssh_dictionary_attacks_with_denyhosts Look over those.. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: How to install chinese fonts for ps output file?
Not sure if this is exactly what you're looking for, but there is a TrueType font package freely available from Arphic which can be installed using apt*. Please see: http://isis.poly.edu/~qiming/chinese-debian-mini-howto.html#Installing_Fonts I'm away from my Debian box and don't have a printer anyway (so I don't think I installed much in the way of postscript support), so I am not sure this will solve your problem, but I hope it is helpful. Best, js On Tue, Dec 23, 2008 at 12:23 PM, Rodolfo Medina rodolfo.med...@gmail.com wrote: With Emacs, I correctly open a file including chinese characters. The characters are correctly displayed in the text file, but when I try to create the ps file, with `C-u M-x pr-ps-print-buffer-preview' or `C-u M-x pr-ps-print-buffer-print', they are not displayed. I know I miss some fonts. Can anyone suggest what fonts and where to download them and how to install them in Debian? Thanks for any help Rodolfo -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: probleme d installation
Bonjour, Vous chercheriez peut-être la liste debian-user-french [1] ? Cette liste-ci s'écrit en anglais, des questions posées en d'autres langues ne recevront pas souvent de réponse. Bonne chance! Que votre problème sera résolu tout de suite. [1] http://lists.debian.org/debian-user-french/ On Tue, Dec 16, 2008 at 9:34 AM, pascal kaluzny pascal.kalu...@gmail.com wrote: bonjour jai achete une revue avec 3 dvd de la derniere version pour l'installer sur mon tout nouveau portable asus,mais lors de l'installation aprés avoir demarrer le lecteur, il me dit qu'il n'existe pas de lecteur, d'ou prob d'installation merci d'avance -- Pascal The triathlete Mamouth -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Sid/KDE
Assuming you really want to:
sed -i -e 's/etch/sid/g;s:/stable:/unstable:g' \
/etc/apt/sources.list /etc/apt/sources.list.d/{.[!.],}* \
aptitude update aptitude install aptitude apt dpkg \
aptitude full-upgrade
should do it.
Which, if you're confused by the one-liner, means:
1) Edit your /etc/apt/sources.list file and any files in
/etc/apt/sources.list.d/ to replace etch with sid and stable
with unstable. This will change the package manager's idea of where
to get packages, and what versions are supposed to be current.
2) Run aptitude update to have aptitude download the new list of
current software packages.
3) Run aptitude install aptitude apt dpkg to install new versions of
the package management system.
4) Run aptitude full-upgrade to kick off a system-wide distribution upgrade.
You probably don't want to do this without some preparation and
backup, as things can wind up broken during a dist-upgrade no matter
how careful you are. Several people (myself included) have had
problems with perl or with locales not upgrading perfectly, leaving
the system in a hampered state. If you're going to do a distribution
upgrade, you want to make sure you'll have time to fix any such
problems that arise, and resources to help you do so (like a startup
disk in case the box doesn't come up, or a second computer for
googling in case you manage to disable your internet access.)
Don't do this right before bedtime the day before your important
presentation in the morning, or when you have a major project due the
next day, etc.
Good luck!
~Jeff
On Mon, Dec 15, 2008 at 11:20 AM, Boyd Stephen Smith Jr.
bs...@volumehost.net wrote:
On Monday 2008 December 15 07:40:58 Dan-Simon Myrland wrote:
Hi!
how do i change my distrubution from Etch to Sid (unstable) ?
Assuming you really want to:
sed -i -e 's/etch/sid/g;s:/stable:/unstable:g' \
/etc/apt/sources.list /etc/apt/sources.list.d/{.[!.],}* \
aptitude update aptitude install aptitude apt dpkg \
aptitude full-upgrade
should do it.
--
Boyd Stephen Smith Jr. ,= ,-_-. =.
bs...@volumehost.net ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-'
http://iguanasuicide.org/ \_/
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Confusion about legality of Linux
On Wed, Dec 10, 2008 at 11:00 AM, marc [EMAIL PROTECTED] wrote: after all, is the priority of a school to educate or to discipline? For an American public school? Unfortunately, probably the latter. Pray forgive my cynicism... On Wed, Dec 10, 2008 at 11:00 AM, marc [EMAIL PROTECTED] wrote: Nate Bargmann said... * Sam Kuper [EMAIL PROTECTED] [2008 Dec 10 06:54 -0600]: 2008/12/10 Nate Bargmann [EMAIL PROTECTED] My feeling is that she should have investigated whether this really was a disturbance before intervening. It is not clear to me that the action she took was needed. Hence my comment. Like me you're probably not an authority figure, there fore our reaction would be quite different. Her training and mindset are that of authority figure and her actions as described were consistent with authority figures as I recall from my youth. But she is, above all, an educator. That trumps authority, at least it does in schools; after all, is the priority of a school to educate or to discipline? And if educators these days are scared of the new, then heaven help us. -- Cheers, Marc -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Compose key keeps resetting in Gnome?
Hi all, I upgraded to Lenny a while back, and since then my compose key setting under Gnome keeps getting reset when I restart. Under system-Keyboard-Layouts I have selected USA with adjustments made to map meta to the win-keys and to use the menu key as compose. However, every time I restart X, the menu key reverts to being a menu key and acting like a right-mouseclick. If I go to the keyboard layout options again after restarting X, under Compose key position I see that menu is compose is still checked; if I uncheck it, recheck it, and save changes, it will work as a compose key again for the rest of the session. But next session, it's gone, even though the option is still highlighted on the layout. After I noticed this problem, I edited xorg.conf in the InputDevice section to add the following line: Option XkbOptionscompose:menu However, this seems to have no effect whatsoever. I have not tested what happens if I change the compose key to something else and try restarting X (i.e. to determine if it's the menu key specifically, or if gnome is just eating my compose setting), but at the end of the day, that's the key I want to use for compose; pretty much all the remaining others are spoken for. Has anybody else encountered something like this? Thanks! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Trouble
1.- I sort of need the login.cc file of the Debian sources and I can't find it in anywere, if you please could send it to me. I need to see an example of how to capture the password of the user of the keyboard before it apears in the screen (like when someone make su). You need us to help you capture passwords? I think he just wants to read keyboard input without the characters being echoed to the screen. On Mon, Dec 1, 2008 at 6:43 PM, Ron Johnson [EMAIL PROTECTED] wrote: On 12/01/08 17:37, Amarantita Mieltostada wrote: Hi, my name is Amaranta, and i'm from Chile. In the page says that I have to write you in english, so i'm trying, but i'm not that handy though, so please be patience. I have 2 problems: 1.- I sort of need the login.cc file of the Debian sources and I can't find it in anywere, if you please could send it to me. I need to see an example of how to capture the password of the user of the keyboard before it apears in the screen (like when someone make su). You need us to help you capture passwords? 2.- A friend and me are building sockets, and we did it on his Ubuntu machine, and we use a function call gethostbyname and it work. But when we try to prove it on my Debian Lenny machine, it didn't work. I search and for what I understood, gethostbyname seems to be unavailable in new distributions of Debbian. So, which function does the new libraries support that work as gethostbyname?, or which library has this function? See if package libc6-dev is installed? -- Ron Johnson, Jr. Jefferson LA USA How does being physically handicapped make me Differently-Abled? What different abilities do I have? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Trouble
On Mon, Dec 1, 2008 at 10:38 PM, Jordi Gutiérrez Hermoso [EMAIL PROTECTED] wrote: 2008/12/1 Jeff Soules [EMAIL PROTECTED]: I think he [...] She. :-) Oh! Heh, didn't even look at the sender's name. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: how do i change to lenny?
On Mon, Nov 24, 2008 at 8:11 AM, Jochen Schulz [EMAIL PROTECTED] wrote: aptitude is the preferred package manager since sarge. Preferred by whom, for what reason? I've always been much happier with apt-get when I want precision, aptitude when I want to browse. When I upgraded from etch to lenny, apt-get gave me useful feedback that helped me fix things; aptitude wanted to mark my entire system for purge, for no specified reason... -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Joiner for Linux
On Mon, Nov 24, 2008 at 11:30 AM, Manuel Gomez [EMAIL PROTECTED] wrote: No comments, if you don't want help, is very simple, please, don't post. And PLEASE, the respect to the others is essential. Speaking of respect, it's against policy on this list to CC someone if they don't ask for it. (Now you know.) As for your question, you asked for help to improve your security by joining a file. You were told this would not improve your security and you shouldn't do it. People are giving you the help you need; it's just not the help you asked for. Also, you said: I am not creating a trojan or something Don't say that. It sounds suspicious, and will probably decrease your chances of getting help. Good luck. El lun, 24-11-2008 a las 10:44 -0500, Douglas A. Tutty escribió: On Mon, Nov 24, 2008 at 04:35:56PM +0100, Manuel Gomez wrote: El lun, 24-11-2008 a las 09:32 -0600, Ron Johnson escribi??: On 11/24/08 09:25, Manuel Gomez wrote: I am searching a joiner for Linux. I need to join an document with another archive, and i want can open the document without problems. I am not creating a trojan or something, its for add size to specific documents (security- If the document have 5 kbs it takes 5 sec download it, but if the document have 500 mb it takes a couple of days, and i turn off the connection constantly. Believe me, for me is usefull). Somebody could help me? You asked the same question yesterday, and were told then why what you wanted to do was not needed. Again... I need this type of protection, and though you say is usseless, i am not going to change my opinion. Thank you very much. That is you choice. However, Don't top post. You asked a question, were given an answer in a thread you didn't like, you started a new thread asking the same question. Get a life. If you want to continue the discussion, stay with the same thread so that those of us who don't want to talk about it further don't waste time opening a new thread on the old topic. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Please send me a lifeline
Hi Jesse, Hopefully we'll be able to help. First step is to get a bit more information. When you say that you cannot get online media to play -- what kinds of media files are you referring to? I'm guessing you mean flash mostly; are you trying to do streaming audio or video in any other formats? Can you give an example of what websites you're trying to access? What web browser are you using to access the online media? You said: everything is set up for mediaplayer or a flash player. Okay. How did you set this up, what steps have you done to make it ready? That will help us know what you need to do next. Hang in there. It certainly is possible to get Debian to play online media, it's just a matter of doing some fixing, and you'll hopefully learn a lot by doing it, too. best, Jeff On Sat, Nov 22, 2008 at 2:19 PM, Jesse Taylor [EMAIL PROTECTED] wrote: I have been trying to convert over to Debian for some time now but I have a few issues that I cannot fix by myself. I am using Etch and have used Sarge but I cannot get online media to play. everything is set up for mediaplayer or a flash player. I am not skilled at command line use to understand what I need to do to load a program from a non-debian package. If I had detailed instruction on what I need to do I could try. Please help. I am a lone voice in my area for Debian and need help. Thank you, Jesse Taylor -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: OT: Looking for free email service with disposable email addresses
It seems positions on gmail have become the new vi-vs-emacs. Anyway, I wouldn't recommend gmail for the original poster's needs simply because it doesn't formally offer disposable email addresses. Sure, you could probably get away with using it that way, but that's not really what it's intended for. On Mon, Nov 17, 2008 at 5:11 PM, Michael Pobega [EMAIL PROTECTED] wrote: On Mon, Nov 17, 2008 at 09:45:00PM +, Ananda Samaddar wrote: David Fox wrote: On Mon, Nov 17, 2008 at 2:16 AM, Martin [EMAIL PROTECTED] wrote: By default, original emails to the list are not echoed. This may be list wide or is a google policy to prevent duplicate mails. It's a Google policy and it makes using mailings lists very difficult indeed. Also their IMAP support is truly atrocious. That's a matter of opinion. I use Google's IMAP services and I love it, especially because all of the filtering is done server-side so it saves me time and energy. I really don't see what's so atrocious about it. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Lenny, apt(titude), dependency issues, seg faults and corrupted .DEB packages
Memtest86+ is a GPL'd memory testing suite that should work with anything in the i386-amd64 family. If you can burn the CD, it will do its own thing so long as you boot from the CD drive. See: http://www.memtest.org/ (Don't know if your system is functional enough to download and burn a cd, but you're posting to the mailing list, so maybe you can?) If something is wrong with your memory, that ought to spot it, and it runs completely separate from any operating system you have installed, so even if your lenny is pretty seriously borked you should still be able to work with it. I would be surprised if the SATA cables were the culprit, but it never hurts to be thorough. Just be sure to check each part, one piece at a time. Good luck. On Fri, Nov 14, 2008 at 4:57 PM, lee [EMAIL PROTECTED] wrote: On Fri, 14 Nov 2008 14:03:16 + Nick Syrotiuk [EMAIL PROTECTED] wrote: Yes, it could be that. I'm a software guy not a hardware guy. How do you suggest I diagnose a hardware problem? Try shutdown -rF now and watch when the file systems are checked on reboot. Try to remove as many memory sticks from the board as possible (unplug the power supply before you open the case) and see what happens. If nothing changes, swap the memory stick against the one of those you have taken out until all sticks are checked. Research about incompatibilities with the board and the memory, maybe something is known. Change out the SATA cables. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: What is the point of RAID?
On Wed, Nov 12, 2008 at 3:44 AM, lee [EMAIL PROTECTED] wrote: Do you mean it is more likely that any one drive in the array fails when you have more drives, or do you mean that it is more likely for a drive in the array to fail when you have more drives? If drives fail more often when being used in an array with more drives, what makes them fail more often under those conditions? It's purely a statistical property, not related to being in a RAID array. But if there's (say) a 5% chance for a given drive to fail on a given day, there's a 95% chance it won't fail. If you have two drives, the chance *both* won't fail is the chance of one not failing, times the chance of the other not failing -- 95% times 95%, or 90.25%. With 24, the chance of all the drives not failing is .95^24 or 29.2%. Of course I just made the rates up, the survival chances of individual drives are higher. But logic holds; the more drives you're watching, the more lucky you'd have to be for none of them to be a dud. -jeff -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Software For Book Writing
Stefan Who doesn't understand why people use such old systems given the availability of cheap replacements which are much smaller and consume less power. Nothing wrong with running on whatever hardware is available. But if your hardware was around for the fall of the Berlin Wall, criticisms of UTF (or anything really) as a drag on system resources will make you sound like a crank. UTF is excess for minimal systems, embedded applications, old boxes used for dedicated NAT/firewalls/etc., but someone who is running in a more recent hardware environment will notice absolutely no speed difference. And hey, maybe they'll want to learn to speak Chinese some day! Anyway (trying to drag this back to the original topic) -- it looks like there is support for LaTeX on Windows via MiKTeX, per a cursory look here[1]. I don't know if anyone uses it, but I guess someone must, since the MiKTeX package is still around... [1] http://www.math.nus.edu.sg/aslaksen/cs/cjk.html -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: What is the point of RAID?
Jeff, you math is off - way off. P(one fails) != 5/100 P(two drives fail at the same time) = P(one fails) * P(one fails) = 25/1 Henning -- I'm not talking about the chance that the array will fail -- just that the more drives are under observation, the more the chance that *one* of them will fail on a given day. The comment I was responding to: Do you mean it is more likely that any one drive in the array fails when you have more drives, or do you mean that it is more likely for a drive in the array to fail when you have more drives? If drives fail more often when being used in an array with more drives, what makes them fail more often under those conditions? seemed to think (mistakenly) that the chances of any one drive failing would be increased by putting it into an array. Adding drives to an array doesn't increase the chance that Drive #1, or #2, etc. will fail, but it does increase the chance that you will see a drive failure in that array on a given day. That's a trivial point -- unrelated to whether they're in a RAID, just simply that you're looking at more drives. The probability that a RAID-5 *array* will fail in a way that results in data loss is a separate issue; that's what you're calculating below. On Wed, Nov 12, 2008 at 9:44 AM, Henning Follmann [EMAIL PROTECTED] wrote: Jeff, you math is off - way off. P(one fails) != 5/100 P(two drives fail at the same time) = P(one fails) * P(one fails) = 25/1 If you have more than 2 drives in the raid you have to make the cobinatoric calculations of how many configuration can be there for two drives out of n. that would be 2! * (n-2)! / n! multiply that to P( two drives fail at the same time) where n is the number of all drives. Henning -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: HardLink SoftLink
CS 103: An Introduction to Unix, eh? http://www.google.com/search?hl=enq=hard+link+vs+soft+linkbtnG=Google+Searchaq=2oq=hard+link+ That's probably a good start. On Fri, Nov 7, 2008 at 12:20 AM, amirehsan ranginkaman [EMAIL PROTECTED] wrote: Hi please send to me all details about HardLink and SoftLink at kernel view and user view.compare them Bye -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: intrusion detection
David Bernier wrote: I got an email today from a list that I never subscribed to. The message body and headers were refused by Debian Users list because of some Javascript. The end part appears below... Sounds like run-of-the-mill spam. To run a secure system, it's important to be paranoid, but there is such a thing as too paranoid as well. You have to find a balance between paranoid enough to lock your doors, and so paranoid you won't use your closets. On Wed, Oct 29, 2008 at 12:16 PM, David Bernier [EMAIL PROTECTED] wrote: David Bernier wrote: I got an email today from a list that I never subscribed to. The message body and headers were refused by Debian Users list because of some Javascript. The end part appears below... David === BPM - SYSTEM ACTIVATED sent this email to [EMAIL PROTECTED] Questions? Contact BPM - SYSTEM ACTIVATED mailto:[EMAIL PROTECTED] or BPM - SYSTEM ACTIVATED, c/o FanBridge, Inc. - 14525 SW Millikan Way, Beaverton, Oregon 97005, United States Unsubscribe http://www.FanBridge.com/unsubscribe/immed.php?userid=66046[EMAIL PROTECTED]confCode=Y452rX4Bd443Y1cdcaYhF7b7Xh | Update your information http://www.FanBridge.com/signup/fanupdate.php?userid=66046[EMAIL PROTECTED]confCode=Y452rX4Bd443Y1cdcaYhF7b7Xh | Privacy Policy http://www.FanBridge.com/learn/privacy.php | Forward to a Friend http://bpmnewalbum.fanbridge.com/signup/forward.php?userid=66046sid=80050712cid=486388cc=Y452rX4Bd443Y1cdcaYhF7b7Xh This email message is powered by: FanBridge http://www.FanBridge.com/b.php?id=66046 Free Email and Mobile fan list management for bands. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Xorg - nv - 8600GT blank screen problem.
Me-too here -- I am also running an 8600GT using the nvidia driver. I installed it using their way after the Debian way wasn't working for a while. (I also had blank screens with the nv driver, though I could just never get X to launch at all; the whole system froze using that driver for me). Once I made sure that I'd downloaded all the appropriate kernel source packages, the nVidia installer script worked without a hitch. (I'm on etch, though.) On Fri, Oct 24, 2008 at 2:53 PM, Ramasubramanian Ramesh [EMAIL PROTECTED] wrote: It is good to know you also have a 8600GT. It makes me feel a bit more confident that nvidia blob will drop in without much hassle. I don't care if it is free or not. If it is well known and is available from reputable place non-free/binary ok on special cases. Did you simply install nvida blob directly from their website following *their procedure *or did you use a method of your own? If the latter, can you tell me what you did? I have another machine that has 9800 GT (usually runs XP) that I can try installing to experiment. Based on the experiment, I will decide between nvidia vs lenny. Regards Ramesh Mark Allums wrote: Ramasubramanian Ramesh wrote: Thanks. I am having this problem on my home network server/gateway. So, I am trying to keep deviation from stable release to minimal. Since I have 86xx, I cannot use nvidia-glx from stable distribution. I will have to go to either lenny or get it from nvidia (latest/nonstandard) Which is less risky or more stable in your opinion? Going nvidia way or switching to lenny? BTW, is this trouble known and am I raising it again? (I googled and could not find anything correlated to my situation) Ramesh Uh, mildly known trouble, if that phrase makes sense. It is an issue that others have, but the advice is usually something like: If you don't need 3D, go with Intel onboard graphics. I would personally go with lenny, but I don't know if that makes sense for you. Certainly, when lenny is stable, there is a good chance you will want to migrate/update/upgrade. On my personal home system, I use the NVIDIA blob, but then, on that computer, I don't care if something breaks. If you are trying to stay with free software, you will not want the blob. I have an 8600GT on that machine, NVIDIA's blob works well. In fact, the latest version about which I know, 177.80, is a noticeably faster performer for me. I have not had recent experience with the lenny nvidia-* drivers. You should get more advice from the other fine members of this list who have used them. Good luck! Mark Allums Mark Allums wrote: Ramasubramanian Ramesh wrote: I am having issues with my new video card MSI 8600GT. Xorg fires up properly and everything is fine as long as I am within X. The moment I try to switch one of the VCs (c-a-f1/2 etc) or exit X, all I get is blank screen and no response from KB/mouse etc. Soon the monitor goes into power save. The only way to fix is reboot. Occasionally, I will see blank screen with X running having very similar syptoms. I have noticed that Xorg runs with almost 100% cpu utilization whenever blank screen event happens. Also, with my prior card I did not have this problem (prior card was EVGA nvidia 7600GS) I run stock etch kenel from amd64 distribution latest xorg with nv driver. Here is exact info uname -a: Linux lata 2.6.18-4-amd64 #1 SMP Fri May 4 00:37:33 UTC 2007 x86_64 GNU/Linux Package: xserver-xorg-video-nv : Version: 1:2.0.3-1 Package: xorg: Version: 1:7.1.0-19 You probably need to think about a different driver. The nvidia-* packages might be a place to start. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: iptables script - where to put it?
go in /etc/init.d/? What do I need to do with this file to get it to run every time I boot? The actual content is copied below. Actually, the easiest way to make sure the firewall rules are always on is to add this to your /etc/network/interfaces : # Bring up firewall pre-up iptables-restore /etc/iptables.rules # And save fw state on shutdown post-down iptables-save -c /etc/iptables.rules On Fri, Oct 10, 2008 at 10:04 AM, tyler [EMAIL PROTECTED] wrote: Hi, I'm trying to learn how to firewall my laptop. I think I've got an appropriate, simple iptables script, but I can't figure out where to put it. Google provides lots of conflicting advice. I think it's supposed to go in /etc/init.d/? What do I need to do with this file to get it to run every time I boot? The actual content is copied below. Thanks, Tyler # start ### Clear the iptables iptables -F iptables -X iptables -Z iptables -t nat -F iptables -t nat -X iptables -t nat -Z iptables -t mangle -F iptables -t mangle -X iptables -t mangle -Z Set default policy to drop all inbound and forwarded packets, accept all outbound iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT Allow input from established connections iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT Allow input from localhost iptables -A INPUT -i lo -j ACCEPT Allow icmp error messages iptables -A INPUT -p icmp --icmp-type 3 -j ACCEPT iptables -A INPUT -p icmp --icmp-type 11 -j ACCEPT iptables -A INPUT -p icmp --icmp-type 12 -j ACCEPT REJECT ident requests iptables -A INPUT -p tcp --syn --dport 113 -j REJECT --reject-with tcp-reset # end # -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Etch 4.0r4a desktop how to set resolution and refresh rate?
Hm. For me it's Desktop menu - Preferences - Screen Resolution. (http://tinypic.com/view.php?pic=2me4kyss=4) Do you not have a desktop menu? I know my Gnome configuration is a little weird, it seems to be missing a common top-level menu... On Fri, Oct 10, 2008 at 10:28 PM, David Christensen [EMAIL PROTECTED] wrote: debian-user: I installed Debian Etch 4.0r4a this afternoon, using the Desktop package choice. I am wondering how to set the screen resolution and refresh rate. Right-clicking on the desktop brings up a menu that doesn't seem to include such. Left-clicking on the Gnome (?) foot, looking around the menus, and trying what would seem to be likely candidates didn't help. STFW, including the Debian website and debian-user mailing list archive, gives hits referring to doing math and editing X configuration files and/or using desktop utilities from previous Debian versions that no longer exist. How do I change the screen resolution and refresh rate on Debian Etch 4.0r4a? Is there complete and current documentation for Etch 4.0r4a? TIA, David -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: How to activate sound recorder
How is your sound set up? Are you using ALSA? Have you checked the mixer settings? (You would need both the microphone setting turned up, and also the capture setting.) If you blow in the microphone, do you get any sound coming through the speakers? (I assume you've confirmed that the microphone works.) On Thu, Sep 25, 2008 at 9:44 AM, abdelkader belahcene [EMAIL PROTECTED] wrote: Hi, I have a problem for recording on sidux , while no problem on debian lenny!!! listening is correct, but no thing is recorded. my laptop is compaq with sound device: audio controller : 82801G Familly ICH7 I used for example audacity to check, it read files but no recording!! the question is : What to do to active the microphone, from terminal or volume control ? thanks for help -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: SSH/SSHD local LAN only
Well, one option is to just set a rule-pair in your firewall: iptables -A INPUT -p tcp --dport 22 -s 192.168.1.0/24 -j ACCEPT iptables -A INPUT -p tcp --dport 22 -j DROP That way connections from the internal network are accepted; all other traffic to the ssh port is dropped. If you go this route, ensure that your system is set up to save your firewall rules and re-load them when it brings the interface up, otherwise your protection is only good for one session ; ) I would probably still want to configure sshd in addition (multiple layers of security = much more secure). From a cursory looking-around at google, it looks like you can set the ListenAddress line in sshd.conf to a local ip; I'm not sure exactly how this implementation would work, and moreover it looks like you'd need several lines if you want to allow a range of ips on the local network. You might also have a look at hosts.allow and hosts.deny (http://linux.about.com/od/commands/l/blcmdl5_hostsal.htm is just the first google result; the man pages certainly have more info, but I don't use hosts.* myself so I can only really provide a pointer). I'm not sure that really adds anything that the firewall rule wouldn't already, though. ~Jeff On Fri, Sep 19, 2008 at 12:52 PM, S.D.Allen [EMAIL PROTECTED] wrote: Greetings; I can seem to figure out which config file to edit and what to enter to allow only hosts on the LAN to connect via SSH. I'll have the box in question available to the entire Internet and want to disable global access to SSH. Presently I'm using password authentication, and would prefer to keep it this way, as opposed to allowing access via trusted key. Thanks. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: A simple question about the Security Advisories
Generally, when you see an advisory, run (as root, or using sudo if you have it installed): apt-get update apt-get upgrade and that should update you. You should generally pay attention to Security Advisories, because as you learn more about the system, you'll understand them more : ) and more importantly, you may want to respond by changing to a different package or something. Responding to the update is easy enough, and don't you feel better knowing when new vulnerabilities are fixed? On Fri, Sep 19, 2008 at 11:31 PM, [EMAIL PROTECTED] wrote: Hello, I am new bee to Debian. I notice the Security Advisories on the main page of Debian. Is there an auto-update tool in the debian system which can auto update software and auto fix some bugs make me needn't to take care about the Security Advisories? Thanks. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: [OT] was Re: diff display
Dismissing most of this because it's little more than an expression of the author's prejudice, but... We don't like the EU because of their complete disregard for individual rights. It was conceived of and implemented by socialists. It's that simple. Socialists? You mean the kind of people who would devote massive amounts of their free time, with no expectation of compensation, to building and distributing a totally free operating system, purely because they believe it would be beneficial to society? And who put in place legal safeguards to ensure that it would protect the rights of its contributors by remaining forever free, and the rights of its users by remaining forever modifiable? Yeah, I hate those guys. On Thu, Sep 11, 2008 at 10:45 AM, Rob McBroom [EMAIL PROTECTED] wrote: On 2008-Sep-11, at 5:08 AM, Tim Edwards wrote: Ron Johnson wrote: (If you ever wonder why so many conservatives in the US dislike the UN [besides the rampant corruption] and the EU, it's because they [the UN and the EU...] spew lots of pretty words, but don't have the testicles to enforce them.) In the UN's case it was specifically designed without balls, these have to be added by the member nations in the form of peace-keeping etc. forces. Good point. I'm kinda glad they aren't that aggressive because who do you think they'd come after first? In fact, I think the reason they accomplish so little is not that they have no balls. It's because deep down, they think rape, slavery, and genocide are only crimes if perpetrated by capitalists. For everyone else, they'll just kinda get to it when they get to it (which is never). Why some in the US hate the EU so much I don't know, but I'd guess it has something to do with disliking anyone who could potentially challenge the US as the world's *only* superpower - whether it be a united Europe, China, or Australia armed with nuclear powered Kangaroos and sharks with laser beams :) (we could do it you know - don't try and stop us!) Free societies aren't a threat to one another. We don't like the EU because of their complete disregard for individual rights. It was conceived of and implemented by socialists. It's that simple. --- Rob McBroom http://www.skurfer.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: [OT] was Re: diff display
If all rights descend from the government (whether that be an absolute monarchy or a parliament), then I'd posit that no, you don't have a right to defend home and hearth. That doesn't follow. If rights descend from the government, then you have a right to defend home and hearth if the government defines such a right (though many governments choose to define instead the right for home and hearth to be defended, by duly appointed authorities). Conversely, if rights come from Nature, that doesn't in itself demonstrate that you have a right to defend home and hearth. It happens to be one of the first rights that the natural-rights folks claim, but it needs a separate proof; one could just as well say that all people have a natural right to warmth and shelter, which invalidates others' rights not to share hearth and home. There's a useful distinction here between rights in the legal sense (You have the right to remain silent, which you didn't before Miranda v. Arizona, and you don't in every country), which are obviously socially defined, and rights in a universalist natural-rights sense. Natural-rights-as-an-inherent-part-of-humanity do not exist, because there is no objective way to measure or test them. If we say Every man has three hearts, we can find out just by cutting up a fresh corpse. If we say Every man has the right to three wives, the proof/disproof cannot be based on observation, only speculative argument. The hearts are objective fact; the wives are theology. Just so, saying People have a natural right to self-defense is not a statement about people, it's a statement about the speaker's belief system, roughly equal to I would not blame anyone or take action against them for practicing self-defense. And attempts to prove that such a right exists can only take the form of attempts to convince others to share that belief. The question What natural rights exist? is still useful, when properly understood as being the equivalent to What legal rights should everyone have? And I should point out, I probably agree with most list-members' judgments about that; and I feel just as strongly as anyone else about the matter. I just don't claim that rights exist in some metaphysical plane; I'm willing to acknowledge that they're a social agreement. So, um, how about that Debian, huh? On Thu, Sep 11, 2008 at 2:08 AM, Ron Johnson [EMAIL PROTECTED] wrote: On 09/10/08 22:17, Celejar wrote: On Wed, 10 Sep 2008 13:31:51 +0200 Johannes Wiedersich [EMAIL PROTECTED] wrote: On 2008-09-10 09:52, James A. Donald wrote: We have the right to defend ourselves and our property, because of the kind of animals that we are. True law derives from this right, not from the arbitrary power of the omnipotent state. http://www.jim.com/ James A. Donald I am happy that I am privileged to live in a society that has abandoned that kind of morality that probably was custom around the stone ages, but has since experienced the advancement of civilisation. Your society does not accept the right to defend oneself and one's property? If all rights descend from the government (whether that be an absolute monarchy or a parliament), then I'd posit that no, you don't have a right to defend home and hearth. Did you know that many states have Concealed Carry (each time such a law has been considered, gun control freaks wail that it will turn the state into the Wild West, with daily OK Corral shootouts, but, of course, that has never happened) and Shoot-The-Burglar laws? The home invader doesn't have to threaten you, or even be armed. The mere fact that he/she has illegally broken into your home gives you full rights to shoot the person. -- Ron Johnson, Jr. Jefferson LA USA -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Emacs has hard time with big text files
On Fri, Sep 5, 2008 at 12:14 PM, Mike McCarty [EMAIL PROTECTED] wrote: Must... not... compare... emacs... to... Operating... System... I wasn't comparing anything to anything. I don't understand even what your objection might be. In the old vi-vs.-EMACS flamewars it was often claimed by vi advocates that EMACS' larger memory footprint and greater attempted extensibility made it basically a replacement operating system. See http://en.wikipedia.org/wiki/Editor_war . While you're hanging around wikipedia learning about ancient religious wars, you might also want to look into http://en.wikipedia.org/wiki/Thirty_years%27_war and http://en.wikipedia.org/wiki/Hussite_war -- those two are almost as dated as this one... : ) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Sound driver configuration issue?
Hello, I've done a fair amount of legwork to try to get recording working on my Etch machine. I'm using Alsa-based sound, and have successfully set up my microphone and recording with a locally-compiled Audacity (and even Windows programs like Ventrilo through Wine). I am using an ATI SB600 Azalia motherboard-integrated sound card. However, I think I've got something set wrong in the mixer. When I am recording, anything playing in another program will get picked up by the audio capture (e.g. playing a background track in Audacious while trying to record a solo track through Audacity, the background track will show up in the recording). I can tell I'm not just picking up speaker sounds on the microphone, since this happens even with the speakers off. I tried disabling one of the two capture devices in alsamixer, but one of them has no effect and the other just kills all recording, both internal sounds and microphone. I suspect this is a stupid configuration issue that should be obvious, but I can't seem to find it. Has anyone had any problem like this, and have you resolved it? If so, how? Best, Jeff p.s. While I have the ears of any recording folks on this list, I've noticed a problem in my Audacity in that if I record, then play back, a track, when I next hit the record button, the program will just hang. Unfortunately I had to compile this audacity from source, because Alsa support isn't present in the packaged versions of Audacity. I suppose I should try recompiling, but if anyone has any other workarounds that they use to get Alsa-supported Audacity in Etch (or has alternative recording programs) I'm all ears. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: [debian-user] Re: Wikipedia
Ted, Wikipedia is a great resource -- you just have to take what you read there with a grain of salt. Many people writing there have an agenda, and some are clueless. If you're reading about something controversial, check the discussion pages; they can often point out that there is a conflict in the information. In my experience, for technical matters, the pages are unlikely to be just-plain-wrong -- particularly when explaining the basics of how something works. (Conversely, if basics aren't enough, Wikipedia might not be the best source, simply because it's an encyclopedia, not an exhaustive reference). With science and math articles, if you stay clear of obvious cranks, you're not likely to go too far wrong--although you may find most of the sci/math articles tend to be written such that they're rather opaque to people who don't already have exhaustive subject knowledge. In short, Wikipedia is sometimes questionable, but so are things you read on mailing lists and forums, and even articles published by professional journalists. As long as you're careful, you can learn many things. On Tue, Aug 19, 2008 at 12:00 PM, Ted Hilts [EMAIL PROTECTED] wrote: I hope this message is not OT and forgive my ignorance but I received a very informative response to some of my questions and several people recommended that I make better use of everyones time by first going to Wikipedia. The messages were more or less as follows: See http://en.wikipedia.org/wiki/Multi_core for more information So, I am being told by some to use wikipedia as a credible reference for technical questions. It is my understanding that use of wikipedia may subject the reader to faulty information. There were several blurbs in the news and in news letters that very clearly indicated a user beware warning. Also, there was recently an internal conflict between several individuals working at wikipedia and the conflict was over the growing content some of which was mis-information and in one case submitted by someone using false credentials. So, I became very cautious about wikipedia although there seems to be a lot of sound information. I have seen a lot of references to wikipedia from the Debian lists to lists that are science oriented and mathematically oriented. Does anyone know what the real facts are on wikipedia. Are all the news items I have read on this subject just garbage??? I collect hundreds of news reports every day and all of them are credible and responsibly written. I obtained my information via these news reports. So, what's going on here??? Thanks, Ted -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fwd: ssh-keygen
On Tue, Aug 19, 2008 at 6:12 AM, Chris Davies [EMAIL PROTECTED] wrote: ssh-keygen -t rsa # Does anyone know whether dsa or rsa is better? I had understood that RSA is cryptographically superior to DSA, at least unless the DSA implementation is done very carefully (or so says the PuTTY website). http://neubia.com/archives/000191.html confirms that security claim, and shows that DSA is faster for key generation (100x) and signing (4x), while RSA is around 3x faster for key verification. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: iptables file locations question
Hi Mike, On my Etch system at least, I'm not seeing any files that list the iptables rules (as I think this is what you're looking for). Such a thing would be created if you manually configured your firewall rules (inputting a bunch of iptables -A ) and then saved them to a file using uptables-save, maybe that's what you're referring to? My recommendation would be to do what I did; make a little shell script that contains all the iptables -A . rules. You can edit the file with your favorite text editor, include lots of #comments to remind yourself why on earth you set the rules that way, and when you're done, just sudo firewall_rules.sh and it'll load up. If you do this, don't forget to either set the script to run automatically at startup, or add the following lines to /etc/network/interfaces: pre-up iptables-restore /etc/iptables.rules post-down iptables-save -c /etc/iptables.rules (if you add these lines, after your next startup, /etc/iptables.rules will contain your list of firewall rules -- perhaps this is what you want anyway). Hope that helps, Jeff On Tue, Aug 19, 2008 at 9:55 PM, GI_Mike - Herman von Mandel [EMAIL PROTECTED] wrote: Greetings to the List! In Woody, Debian placed the iptables files in /var/lib/iptables where two files could be found: active and inactive. It was nice to be able to pull the files into a favorite text editor and change as needed. However, etch does not place any of the iptables files in this location (which I admit was a strange location - I would have expected them in /etc/iptables) and I would like to be able to modify them by hand instead of using the command line iptable -A or iptable -list fucntions. Does anybody know where these files are now stored or what they are called if they have been renamed? Thanks! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: debian-user] Re: AMD vs Intel and the Debian kernel
AMD is a chip manufacturer. They started out (~20 years ago) as a second source for 286 processors, but since then they have been producing independently-designed chips within the x86 architecture (i.e. they use the same instruction set). (See: AMD: http://en.wikipedia.org/wiki/AMD x86 architecture: http://en.wikipedia.org/wiki/X86_architecture) So 1: AMD is a separate chip manufacturer. They are now a competitor, not a second source. 2. Is there any significant architectural differences between the products manufactured by these two companies??? Yes. I'm not an expert on what those differences are, but they are different chips with different hardware details. It looks like there are differences in the CPU pipeline length (or used to be), in the way some instructions are implemented, in number of cores available, etc. You can find out more by googling difference between amd and intel architecture or some such, a lot of the links I was finding are outdated though. Keep in mind both companies are releasing new chips every few months; something that was true in mid-2007 will not necessarily be true any more, etc. 3. I ask the above question because it seems that the chips produced by one seem not be be plug in capable with the chips produced by the other That is correct; they are not plug-in compatible. One needs an Intel motherboard for Intel processors and an AMD mobo for AMD processors. 4. I also ask the above question because over the last 2 years software problems seem to occur around one but not the other??? I haven't heard anything about this; I'm sure that one chip has different problems from another, but all have problems. 5. Also, there is a non-i386 computer containing the AMD acronymn listed with ARM and a dozen other non i386 computers listed by Debian. Not sure what you're referring to. http://www.debian.org/ports/ lists the different chip architectures supported by Debian. AMD64 (iirc, someone will doubtless correct me if I'm wrong) is separate because AMD chips had real 64-bit support before the Intel ones. i386 traditionally refers to the 32-bit x86 instruction set. 6. How is it that (for example) the Debian i386 AMD chip (some but not all) are more condusive to the Debian kernel for certain kinds of operations but not so with the Intel chip? Not sure what you're referring to. This is a pretty vague statement. What version of Debian were you planning to run? You should find both AMD and Intel chips supported perfectly well by the stable branch of Debian. The vendors are correct that you must use AMD motherboards with AMD processors, Intel motherboards with Intel processors; but either one should be capable of doing what the other does (within 32-bit applications). AMD implements the i386 instruction set; everything should work fine there. There will be some differences in 64-bit land, because not everyone supports 64-bit software at this point (Java, Flash, etc. are not yet released in 64-bit compatible versions). This requires some workaround but is generally manageable; software that is not available in 64-bit versions will usually just be run in 32-bit compatibility mode. (Modern kernels are available for both 64-bit and 32-bit architectures, of course; they just won't be identical, because one is built with 64-bit support, one is not). This isn't a processor-specific mailing list, so while I'm sure people here will be able to answer your questions, they won't necessarily be the best answers. It might be helpful if you could specify why you're asking, or what exactly you're trying to do. Best, Jeff Soules On Mon, Aug 18, 2008 at 1:28 PM, Ted Hilts [EMAIL PROTECTED] wrote: Can someone enlighten me regarding my confusion with the term AMD. 1, I know that the term AMD (American Micro Devices) is supposed to be a 'second source' for Intel 32bit and 64bit microprocessors. But it seems based on what I have read on this relationship between AMD and Intel that there is controversy, legal actions, competition, and architectural differences regarding the manufacture and selling of these microprocessors. So this suggests to me that AMD is not really a 'second source' (a licensed second manufacturing and selling source supplier of identical products as designed and manufactured by another company). 2. Is there any significant architectural differences between the products manufactured by these two companies??? 3. I ask the above question because it seems that the chips produced by one seem not be be plug in capable with the chips produced by the other -- it seems that the boards produced for one are different that the CPU boards produced for the other??? 4. I also ask the above question because over the last 2 years software problems seem to occur around one but not the other??? 5. Also, there is a non-i386 computer containing the AMD acronymn listed with ARM and a dozen other non i386 computers listed by Debian. I understand
Re: debian-user] Re: AMD vs Intel and the Debian kernel
Hi Ted, Thanks for clarifying -- hopefully that'll give the wiser heads around here a bit more of a lead on how to help you. I've done a little bit of research into virtualization, but only just scratching the surface, and nothing on the level that you're describing--it sounds like you'll have a lot of research to do before you can put it together, but no reason that should stop you! I'll just throw in a few points. Here's some links on virtualization in Debian: https://penta.debconf.org/~joerg/attachments/16-qdebconf2007_virtualization_in_debian http://wiki.debian.org/Xen (wiki on using Xen under Debian) http://en.wikipedia.org/wiki/Comparison_of_virtual_machines (decent comparison of what your options are for virtualization) Maybe you know these things already, but it can't hurt to provide some links. Gb divided by 8. At this time I haven't got a clue whether the virtual system should be single core or multi core As for multi-core vs. single-core, I can't really imagine that you'd be better served running several virtual machines on a single-core processor than you would a multi-core one. (Do they even sell single-core server-grade processors any more?) Obviously your different virtual machines will have to share whatever hardware resources are available, so I'd imagine there might be a lot of bottlenecks to doing this, not just the processor (disk I/O speed is likely to be another one, for instance). I personally don't have the experience to give any pragmatic advice on what you might need for this. Maybe somebody else on this list can help more, or you could consider checking out some of the Xen mailing lists: http://lists.xensource.com/ Good luck! Thanks Jeff. What I want to do is acquire a fast quad core CPU board and associated chip set (either Intel or AMD) manufactured. The purpose is to establish a virtual enviornment with a Linux host as the basis for that computing environment. Over the last 2 years there have been many changes regarding how a virtual computing environment can come together. First I encountered Xen and then became aware of several existing Linux approaches. I followed the lists the best I could and started to wonder which would be the optimal approach. I decided that Debian would be my best bet but I was unsure of what virtualisation technique would be best. I want to run server applications on this Debian host with that host virtualizing the servers. I need each server to be capable of networking into my LAN as well as into the INTERNET. I need the networking between servers on the LAN and well as the INTERNET to be easily connected and understood preferably by means of a GUI. But I want the entire networking effort OPEN SOURCE so I don't want a GUI that is non Debian. The networking of virtualised servers -- let's say 10 -- has me worried as I want to assign static LAN based IP address (192.168.x.x) and name (server-apache.network.com) and SAMBA connection protocal for every server. In other words I want the servers to be able to interconnect with each other using shares. Also, recently, I discovered that a dual or quad CPU board only provides load balancing and not greater speed. If for example the CPU speed is given as 3 Gb and there are numerous servers on that machine the speed of each of the two (dual core) or 4 (quad core) or 8 core components is reduced thus reducing the speed of each process so the total processing of core elements is 3 Gb. This means for an 8 core unit the speed is reduced to 3 Gb divided by 8. At this time I haven't got a clue whether the virtual system should be single core or multi core as there could be speed advantages and perhaps the manner of virtualising might work best by using some kind of quota control??? Maybe you or someone else reading this response (or possibly a Debian mentor) could help me with this objective. Anyway, thanks -- Ted -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: debian-user] Re: AMD vs Intel and the Debian kernel
So am I -- thought that was via a compatibility layer, though? I know I'm running Adobe's flash player, which has not been released in a 64-bit version, on my 64-bit box here... On Mon, Aug 18, 2008 at 6:13 PM, Nuno Magalhães [EMAIL PROTECTED] wrote: «(Java, Flash, etc. are not yet released in 64-bit compatible versions)» Huh? I'm using Java (Eclipse) and flash (mozilla) on 2.6.18-6-amd64... -- Nuno Magalhães -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: 64 bit Dual-Core Moron
What do you mean by up to par? http://idioms.thefreedictionary.com/up+to+par I would venture to guess that we understand the expression, but just don't know what you're talking about. What specifically about the chip did you want to test? That it's operating at the advertised clock speed, that it's computing successfully, that it is in fact 64-bit...? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Flash in Etch?
Per Arthur A: There's a flash for etch how-to on debian forums. Have you tried that? I assume you're referring to http://forums.debian.net/viewtopic.php?t=28671 -- in fact I had no idea such a thing existed. It's pretty chaotic though, since there's a number of suggestions that would work for other architectures/versions, but not my present one -- ah well. I swear that when I tried apt-get install flashplugin-nonfree on Thursday, nothing came up. Maybe the backports archive has been updated, but it worked today... and now I'm all set. Thank you to everyone who replied! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: du-guidelines - point 7
GMail is known buggy and not suitable for mailing list use, if only for it's propensity to send HTML when the user wasn't expecting to, and it's brutal lack of Reply to Mailing List and poor threading. And yet, it's free-as-in-beer, without having to expose your home system to the vulnerabilities associated with running your own mail server, and its thread-collapsing system and effective search features make it heaps easier to store debugging steps and solutions from the ML and even find them again later. Granted, you have to be comfortable with your mail being stored on an untrusted server; and setting up encryption and signing in Gmail is something I've yet to attempt... but there are pros as well as cons. If anyone is wondering, the settings button in the upper right corner can be used to easily configure a text-based reply mode. Looks like it even auto-wraps to a character count (although I haven't been playing with it in text-mode enough lately to speak). -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Flash in Etch?
Hi all, Open to any advice. My ultimate goal is to get a fully functional Flash player in a browser in my Debian Etch installation (amd64 base). I use Gnome and don't care much for KDE Konqueror. Here's what I've tried so far: *Iceweasel + swfdec -- without success. I'm looking to use YouTube successfully here, whereas with this setup I've yet to see anything in Flash actually work. *gnash -- package appears to be broken in Etch, and I can't resolve the dependencies manually. *I looked into running out of a partial chroot a la this suggestion[1], but that seemed like an ugly kludge to begin with, and I didn't really have the chops to make it work anyway. Failing that, I attempted to install and run SimpleFox in a 32-bit mode, but to do this I've needed to update my version of gtk+2.0 (apparently in prepackaged Etch the version doesn't go beyond 2.8, and there doesn't seem to be anything on backports that would bring me more up to date). Then I attempted to manually install gtk+2.0 in the latest versions as from [2], which in turn requires a new Glib and a new Pango. Attempted to compile these under /opts as per [3], but while I can get glib and pango to compile without incident, the gtk compile is failing due to an undefined symbol. (I've copied the last few lines below at the bottom of this message). So, perhaps I'm going about this all wrong. But it seems to me I need either: - Some form of 32-bit browser, so I can install the (admittedly non-free) Adobe flash player; - Some way to make some of the free alternatives work well enough to meet my needs. I am open to advice on any of these points. I'm more concerned with the pragmatics of getting it to work than with the OSS purity of the system, but ideally I'd like something that isn't an ugly hack. Moreover, given the recent traffic on this list regarding inadequacies in IW, I am tempted to try to install FF3 anyway; to do that I suppose I would need to get those libraries updated somehow...? Thank you to everyone who read this long story, and to anyone who can offer some good suggestions :) Best, Jeff [1]: http://www.debian-administration.org/articles/583 [2]: http://www.gtk.org/download-linux.html [3]: http://www.onelittlesysadmin.com/ Compilation errors: [Many many libraries are compiled successfully] make[4]: Entering directory `/opt/gtk+-2.12.11/modules/input' /bin/sh ../../mkinstalldirs /opt/gtk+-2.12.11/etc/gtk-2.0 ../../gtk/gtk-query-immodules-2.0 /opt/gtk+-2.12.11/etc/gtk-2.0/gtk.immodules Cannot load module /opt/gtk+-2.12.11/lib/gtk-2.0/2.10.0/immodules/im-xim.so: /opt/gtk+-2.12.11/lib/gtk-2.0/2.10.0/immodules/im-xim.so: undefined symbol: g_assertion_message_expr /opt/gtk+-2.12.11/lib/gtk-2.0/2.10.0/immodules/im-xim.so does not export GTK+ IM module API: /opt/gtk+-2.12.11/lib/gtk-2.0/2.10.0/immodules/im-xim.so: undefined symbol: g_assertion_message_expr Cannot load module /opt/gtk+-2.12.11/lib/gtk-2.0/2.10.0/immodules/im-multipress.so: /opt/gtk+-2.12.11/lib/gtk-2.0/2.10.0/immodules/im-multipress.so: undefined symbol: g_assertion_message_expr /opt/gtk+-2.12.11/lib/gtk-2.0/2.10.0/immodules/im-multipress.so does not export GTK+ IM module API: /opt/gtk+-2.12.11/lib/gtk-2.0/2.10.0/immodules/im-multipress.so: undefined symbol: g_assertion_message_expr make[4]: *** [install-data-hook] Error 1 make[4]: Leaving directory `/opt/gtk+-2.12.11/modules/input' make[3]: *** [install-data-am] Error 2 make[3]: Leaving directory `/opt/gtk+-2.12.11/modules/input' make[2]: *** [install-am] Error 2 make[2]: Leaving directory `/opt/gtk+-2.12.11/modules/input' make[1]: *** [install-recursive] Error 1 make[1]: Leaving directory `/opt/gtk+-2.12.11/modules' make: *** [install-recursive] Error 1 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Iceweasel freezes and iceape vulnerabilities and instability
Did a cursory bit of looking at the site -- it looks like the image in question is not actually a popup per se (i.e. a secondary window that gets opened) but is just a particularly obnoxious application of Javascript that's creating a div on top of the page and inserting this form and image into it. Or at least that's what a bit of cursory inspection with the DOM Inspector seems to suggest (also, if you hold down your move-window key and click, the popup is fixed in place within the browser window, it's not a separate window to X). It's the same thing that e.g. gmail uses to display that little loading... status blurb in the upper-right corner that sometimes covers up useful links. So the popup blocker couldn't work, there is no external window popping up. If you turn off javascript completely, that ought to fix it, though probably at the cost of meaning this website won't load at all. It also displays an alert if you attempt to close the chat; my memory is fuzzy but I'm pretty sure that specifying whether you can select that text is a part of the Javascript standard. Can you select the text in other alert boxes? Anyway, the browser is doing its job; it is just possible to do some really annoying things with Javascript. If it bothers you sufficiently, turn off javascript. On Sat, Jul 12, 2008 at 2:02 AM, Bret Busby [EMAIL PROTECTED] wrote: On Fri, 11 Jul 2008, Jeff Soules wrote: that isallowed by Iceape, to take control of Iceape), Iceape opens multiple pop-up windows, and, if one of the pop-up windows is inadvertently, directly manually closed, the application crashes. Funny you mention this -- I don't think this is due to malicious code, because I have had a similar problem in IceWeasel, a crash when I closed a popped-out google chat window. I haven't seen a repeat of this so I don't know if it was a fluke, but it does seem that under certain circumstances which I can't yet elaborate, closing a popup will crash the browser. Okay - the web browser might not itself, contain malicious code, but, when attempting to close a tab, an unauthorised pop-up displays, and says something like Are you sure you want to close this window? Click whatever button (in the unauthorised popup) to confirm/continue, that, to me, is a vulnerability/security risk, created by the browser's inability to block unwanted pop-ups. As a single example of this, open http://www.truthaboutabs.com/get-ripped-abs.html , then, try to close it, by simply clicking on the box with a cross in it, that is to close either a tab or a browser window. Unwanted pop-up appears! Malicious code! And, that the web browser does not allow me to mark and copy the text that is displayed in the unrequested popup window, is a concern in itself, as it is clearly allowing an external web site to take control of the system, in preventing me from marking and copying the text in the popup window. How are we to know whether these things contain malicious code that is written to spread malicious code or otherwise take control of the system? We should not have to go out to a console session, and use ps -ax | grep iceape, then kill -9 each pid showing iceape, and kill all sessions of iceape, just to close a single, malicious tab, that is allowed by security breaches in the mozilla/firefox/iceape/iceweasel software. It is, to me, the web browser saying to the world, Hey, everyone! here is some idiot's computer for you to gain unauthorised entry to and control over!. If the web browser is unable to block unwanted pop-ups, then we should not be misled by the browser, into thinking that it will block unwanted pop-ups that are a threat to system security. That in itself, is particularly disturbing - that we are misled by settings in the browser, that are supposed to protect us, that actually provide no protection. is that indicating that the web browser, does in fact contain malicious code, when it m,isleads the user into wrongly believeing that the user is protected from a particular security threat? That, I think, is a fair question. Here is this special, new, armour plating compund, that will stop all bullet and armour-piercing projectiles. Just because it is actually just a roll of cling-wrap for food covering, does not mean that it will not protect your household from drive-by shootings. That is the nature of the option Block unrequested popup windows, being an option to be set, that simply does not work. Whether that failing, is what causes the other instabilities (leading to the blank untitled windows), is something for the software maintainers to investigate, but, the software is insecure and deceptive, in falsely pretending to Block unrequested popup windows. -- Bret Busby Armadale West Australia .. So once you do know what the question actually is, you'll know what the answer means. - Deep Thought, Chapter 28 of Book 1 of The Hitchhiker's Guide
Re: Iceweasel freeze ups
that isallowed by Iceape, to take control of Iceape), Iceape opens multiple pop-up windows, and, if one of the pop-up windows is inadvertently, directly manually closed, the application crashes. Funny you mention this -- I don't think this is due to malicious code, because I have had a similar problem in IceWeasel, a crash when I closed a popped-out google chat window. I haven't seen a repeat of this so I don't know if it was a fluke, but it does seem that under certain circumstances which I can't yet elaborate, closing a popup will crash the browser. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: memory question (hardware)
Latency, risk of failure, sure... also sheer design complexity (since you have to solve the geometry of fitting more circuitry in the same space), and subsequent complexity of fabrication (since you have to actually make those tiny little circuits). There's also heat dissipation, which isn't so so bad for memory but is still nontrivial. Using smaller circuit paths means that the control signals wind up being effectively noisier too (or so I understand), which affects a whole slew of things, including memory timings among others. At least this is all what I remember...! On Sat, Jul 5, 2008 at 2:24 PM, Mag Gam [EMAIL PROTECTED] wrote: Thanks for the responses. What is the engineering challenge of having more memory in a single die? I expect latency would be a issue. Also, as Brad mentioned greater risk of failure. Any thing else? On Fri, Jul 4, 2008 at 11:04 AM, [EMAIL PROTECTED] wrote: Original Message From: [EMAIL PROTECTED] To: debian-user@lists.debian.org Subject: RE: memory question (hardware) Date: Thu, 3 Jul 2008 01:08:10 -0400 I am curious... When memory is manufactured why does a stick of 4GB memory cost 2.5 times of 2GB memory? Is the manufacturing process that much different to justify the cost? Obviously we can't open up the sticks and look at the chips, but the usual answer is that the 2G used the older technology and the 4G used the newer technology and the chip vendor is trying to recoup development costs. As the newer technology becomes the older technology the cost will go down. With Moore's law this gives the chip vendor about 18 months to recoup most of the development costs and some profit. Larry -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Advice for troubleshooting X (total screen loss) -- Newb Alert
You can also see that I've disabled glx output and restricted screen resolution to 1024x768 or lower (non-widescreen resolutions) in the hope that this might help, but no luck so far. I should've been clearer -- I made those changes through dpkg-reconfigure. (I've grown quite comfortable with the menu interface to Xorg.conf in the last 24 hours!) And, BTW, you're using etch, right? Correct. lspci shows one VGA-compatible device, the line is: 01:00.0 VGA compatible controller: nVidia Corporation Unknown device 0402 (rev a1) I should've looked harder at the Xorg.0.log I got when I ran with the VGA drivers; it told me directly that the VGA driver does not support 24-bit color depth, so it unloaded itself. I set this back down to 8-bit color, and just like that I can load up a minimal gnome desktop. Sadly it has decided the correct resolution is 320x200, which is not yet very useful -- I can't even see to reposition any of the control panels -- when I was hoping once I got a minimal setup I could use that as a base to finish configuring the nVidia-supplied drivers. But at least this is wonderful progress! Thank you! On that note -- You could also try if you can install the newest nvidia driver on Etch with nvidia's own installer script: http://www.nvidia.com/object/linux_display_amd64_173.14.09.html It might help if you get a newer kernel from www.backports.org first. Also make sure that you purge (not just remove) the Debian nvidia packages before you try this. I had originally tried to run nvidia's installer, but it complained that it would have to recompile the kernel with its own hooks to load the nvidia driver. So I downloaded and gunzipped the kernel source package, but nVidia's script couldn't find version.h under the directory where source was installed, so I eventually gave up and tried what was supposed to be the debian way. (Sorry, that's rather inexact -- I did this several days ago and it was before I started taking careful notes of exactly every command I was running.) I'll mess around with this a bit more and then report back. Best, Jeff
Re: Advice for troubleshooting X (total screen loss) -- Newb Alert
Emailed too soon -- I was actually able to run the nvidia installer script without a problem this time around (mysteriously!) so I am now all set up and can resume setting up the new Debian box. Thanks again to everyone for your advice and patience! On Sun, Jun 29, 2008 at 7:35 PM, Jeff Soules [EMAIL PROTECTED] wrote: You can also see that I've disabled glx output and restricted screen resolution to 1024x768 or lower (non-widescreen resolutions) in the hope that this might help, but no luck so far. I should've been clearer -- I made those changes through dpkg-reconfigure. (I've grown quite comfortable with the menu interface to Xorg.conf in the last 24 hours!) And, BTW, you're using etch, right? Correct. lspci shows one VGA-compatible device, the line is: 01:00.0 VGA compatible controller: nVidia Corporation Unknown device 0402 (rev a1) I should've looked harder at the Xorg.0.log I got when I ran with the VGA drivers; it told me directly that the VGA driver does not support 24-bit color depth, so it unloaded itself. I set this back down to 8-bit color, and just like that I can load up a minimal gnome desktop. Sadly it has decided the correct resolution is 320x200, which is not yet very useful -- I can't even see to reposition any of the control panels -- when I was hoping once I got a minimal setup I could use that as a base to finish configuring the nVidia-supplied drivers. But at least this is wonderful progress! Thank you! On that note -- You could also try if you can install the newest nvidia driver on Etch with nvidia's own installer script: http://www.nvidia.com/object/linux_display_amd64_173.14.09.html It might help if you get a newer kernel from www.backports.org first. Also make sure that you purge (not just remove) the Debian nvidia packages before you try this. I had originally tried to run nvidia's installer, but it complained that it would have to recompile the kernel with its own hooks to load the nvidia driver. So I downloaded and gunzipped the kernel source package, but nVidia's script couldn't find version.h under the directory where source was installed, so I eventually gave up and tried what was supposed to be the debian way. (Sorry, that's rather inexact -- I did this several days ago and it was before I started taking careful notes of exactly every command I was running.) I'll mess around with this a bit more and then report back. Best, Jeff
Re: Advice for troubleshooting X (total screen loss) -- Newb Alert
Thanks for the help so far, everyone. I have retried using both of the generic drivers. Now I'm getting a fatal server error -- no screens found. Still not working, but at least it's enough to start me on further research. The monitor in question is an Acer 22 lcd, if anyone out there has any experience with these. Can you post your xorg.conf and the file /var/log/Xorg.0.log? As requested I have attached my xorg.conf and Xorg.0.log files. I'm attaching the conf and log files which occurred using the nv driver, although I get the same results (near as I can tell) when using the vga driver. You can also see that I've disabled glx output and restricted screen resolution to 1024x768 or lower (non-widescreen resolutions) in the hope that this might help, but no luck so far. To keep the message length down I have attached these files instead of copied the text. Hope this doesn't violate any mailing list etiquette rules. Haven't gotten the box to recognize the monitor yet, although I did manage to get the mouse configured correctly thanks to mdetect. Is it unusual to have to require root privileges to open /dev/psaux ? I couldn't cat that device file on my usual login, and mdetect could not discover it without being run as root. Xorg.0.log Description: Binary data xorg.conf Description: Binary data
Advice for troubleshooting X (total screen loss) -- Newb Alert
Hi all, Thanks for taking the time to read this. I try to solve things by myself, but I'm at a loss for the next step in troubleshooting this one. After install, I attempt to start X using startx. A few lines of text flash on the screen, then it blacks out and the system buzzer gives me one short beep. I cannot alt-Fx to any other terminal and lose the terminal I'm working in, and have to restart with ctrl-alt-del. I've tried to capture the text printed to screen before it blacks out using $ startx 21 xfail but on the next restart, file xfail is empty. Setup: I have a fresh install of Etch (AMD64 version) running on an Athlon64x2 dual-core proc. Graphics card is an EVGA-branded nVidia 8600GT. Display is a 22 Acer LCD; I ensured the refresh rates in the x configuration were within monitor specs. For setup, I installed the base system and a couple extra packages (bastille, sudo). Went through interactive bastille, set up my sudoers file, then sudid: apt-get install xserver-xorg-core apt-get install x-window-system apt-get install xserver-xfree86 apt-get install xserver-xorg apt-get install x-window-system-core apt-get install gnome-core apt-get install enlightenment then installed nvidia drivers: apt-get install module-assistant gcc nvidia-kernel-common apt-get install nvidia-kernel-2.6.18-6-amd64 apt-get install nvidia-glx Then reconfigured the x server to use the nvidia driver using dpkg-reconfigure xserver-xorg Forced the nvidia driver to load at boot: echo nvidia /etc/modules (first time) manually loaded the nvidia module: modprobe nvidia ...and then I try startx and get the uninformative results above. If anyone can recommend next steps for troubleshooting or where I should look for more information, I would be very grateful. Thanks! Best, Jeff Soules
Re: Advice for troubleshooting X (total screen loss) -- Newb Alert
Kent West wrote: I would start by changing the nvidia driver to the nv driver in /etc/X11/xorg.conf Mumia W. wrote: Re-do dpkg-reconfigure xserver-xorg and select the vesa driver--just to check if the nvidia driver is the source of the problem. Thanks for the suggestions. I have retried using both of the generic drivers. Now I'm getting a fatal server error -- no screens found. Still not working, but at least it's enough to start me on further research. I attempted lowering the resolution to see if that would let it detect the monitor (and also tried disabling glx) but neither resolved the problem; moreover, when I set x to autodetect the monitor, the screen goes black again with no signal to monitor and I'm forced to do a hard reboot by hitting the box's reset button. The monitor in question is an Acer 22 lcd, if anyone out there has any experience with these. I will keep looking into this and report back when I find a solution, but in the mean time if anyone has any further suggestions I am all ears :) Best, Jeff On Fri, Jun 27, 2008 at 1:53 PM, Mumia W.. [EMAIL PROTECTED][EMAIL PROTECTED] wrote: On 06/27/2008 12:20 PM, Jeff Soules wrote: Hi all, Thanks for taking the time to read this. I try to solve things by myself, but I'm at a loss for the next step in troubleshooting this one. After install, I attempt to start X using startx. A few lines of text flash on the screen, then it blacks out and the system buzzer gives me one short beep. I cannot alt-Fx to any other terminal and lose the terminal I'm working in, and have to restart with ctrl-alt-del. I've tried to capture the text printed to screen before it blacks out using $ startx 21 xfail but on the next restart, file xfail is empty. Setup: I have a fresh install of Etch (AMD64 version) running on an Athlon64x2 dual-core proc. Graphics card is an EVGA-branded nVidia 8600GT. Display is a 22 Acer LCD; I ensured the refresh rates in the x configuration were within monitor specs. For setup, I installed the base system and a couple extra packages (bastille, sudo). Went through interactive bastille, set up my sudoers file, then sudid: apt-get install xserver-xorg-core apt-get install x-window-system apt-get install xserver-xfree86 apt-get install xserver-xorg apt-get install x-window-system-core apt-get install gnome-core apt-get install enlightenment then installed nvidia drivers: apt-get install module-assistant gcc nvidia-kernel-common apt-get install nvidia-kernel-2.6.18-6-amd64 apt-get install nvidia-glx Then reconfigured the x server to use the nvidia driver using dpkg-reconfigure xserver-xorg Forced the nvidia driver to load at boot: echo nvidia /etc/modules (first time) manually loaded the nvidia module: modprobe nvidia ...and then I try startx and get the uninformative results above. If anyone can recommend next steps for troubleshooting or where I should look for more information, I would be very grateful. Thanks! Best, Jeff Soules Re-do dpkg-reconfigure xserver-xorg and select the vesa driver--just to check if the nvidia driver is the source of the problem. Also, I would reconsider bastille. I remember others saying that it was too buggy and not worth the problems it creates, but those comments might have been for Sarge. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
