Re: [DNG] keys & subsystems

2018-07-30 Thread Arnt Karlsen
On Tue, 31 Jul 2018 01:29:33 +0200, Alessandro wrote in message 
<20180731012933.04fec274@ayu.localdomain>:

> On Mon, 30 Jul 2018 at 09:39:14 +0200
> Arnt Karlsen  wrote:
> 
> [...]
> 
> > ..a luxury we can afford once we know which trick the enemy is
> > going to play on us.  Meanwhile we're lucky if we waste no more
> > than 2/3 of our ammo on our bad guesses.  The cost of getting on
> > with life. ;o)  
> 
>   Precisely because we barely have enough resources to concentrate on
> real-life threats, it's stew-peed wasting a lot of time and effort on
> hypothetical ones that border on the paranoia rather than residing
> within the range of possibilities.

..either way, we are going to waste "ammo" on our bad guesses.
Deal with "it" (them bad guesses) and move on.

-- 
..med vennlig hilsen = with Kind Regards from Arnt Karlsen
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] pulseaudio - No Sytemsounds

2018-07-30 Thread Alessandro Selli
Il giorno Mon, 30 Jul 2018 13:46:46 +0200
Kernel Panic  ha scritto:

> Dear Readers,
>
> what must i do to get systemsounds on Devuan? (ASCII)
> Yes, i have turn "ON" systemsounds in my XFCE Setting.
>
> pls, download or take a look to my pulsaudio-mike.txt file from our LUG
> (Nextcloud, Self Hostet)
>
> https://cloud.belug.de/nextcloud/index.php/s/jStHAsTGQPNC2Mp
>
> THX!
> 

  Are you running a later kernel than 4.9?
  I've had troubles with those kernels with:

1) audio;
2) iptables;
3) WiFi.

  The first two issues I inconveniently resolved:

1) unloading the snd* modules and manually reloading them after system
   initialisation;
2) manually loading the netfilter modules and some other networking modules.

I didn't solve (3) on a Centrino Wireless-N 2230 system: manually unloading
and reloading the iwlwifi and iwldvm modules would make the wlan0 interface
show up, but I still could not make it work.

  Issues (1) and (2) I also experienced on an old wireless-less 32bit PC
running Fedora28, so they must not be specific to Devuan.


Alessandro


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] keys & subsystems

2018-07-30 Thread Alessandro Selli
On Mon, 30 Jul 2018 at 09:39:14 +0200
Arnt Karlsen  wrote:

[...]

> ..a luxury we can afford once we know which trick the enemy is going to
> play on us.  Meanwhile we're lucky if we waste no more than 2/3 of our
> ammo on our bad guesses.  The cost of getting on with life. ;o)

  Precisely because we barely have enough resources to concentrate on
real-life threats, it's stew-peed wasting a lot of time and effort on
hypothetical ones that border on the paranoia rather than residing
within the range of possibilities.

Alessandro
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] jessie MySQL -> ascii MariaDB

2018-07-30 Thread Antony Stone
On Monday 30 July 2018 at 13:45:26, Alexander Bochmann wrote:

> Hi,
> 
> I recently updated an old (former) Debian system from Devuan
> jessie to ascii.
> 
> As it turns out, its MySQL database still had a root password
> in the (very) old format, which isn't accepted by MariaDB. The
> upgrade routine doesn't handle that problem, leading to followup
> errors.

I believe the same happens on Debian Jessie -> Stretch.

> I had to manually start MariaDB with --skip-grant-tables,
> update mysql.user with a root password using the new hash format,
> and then complete the dist-upgrade.
> 
>  > update mysql.user set Password = password('admin_pw') where User =
>  > 'root' and Host = 'localhost'; flush privileges;
> 
> No other major problems on a system with over 1500 installed
> packages (ok, insserv reenabled dependency based boot without
> asking, but that unexpectedly didn't break anything).
> 
> Good work on that release!

I'm impressed too :)


Antony.

-- 
Neurotics build castles in the sky;
Psychotics live in them;
Psychiatrists collect the rent.


   Please reply to the list;
 please *don't* CC me.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] pulseaudio - No Sytemsounds

2018-07-30 Thread Kernel Panic
Dear Readers,

what must i do to get systemsounds on Devuan? (ASCII)
Yes, i have turn "ON" systemsounds in my XFCE Setting.

pls, download or take a look to my pulsaudio-mike.txt file from our LUG
(Nextcloud, Self Hostet)

https://cloud.belug.de/nextcloud/index.php/s/jStHAsTGQPNC2Mp

THX!

Michael

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] jessie MySQL -> ascii MariaDB

2018-07-30 Thread Alexander Bochmann
Hi,

I recently updated an old (former) Debian system from Devuan 
jessie to ascii.

As it turns out, its MySQL database still had a root password 
in the (very) old format, which isn't accepted by MariaDB. The 
upgrade routine doesn't handle that problem, leading to followup 
errors.

I had to manually start MariaDB with --skip-grant-tables,  
update mysql.user with a root password using the new hash format, 
and then complete the dist-upgrade.

 > update mysql.user set Password = password('admin_pw') where User = 'root' 
 > and Host = 'localhost';
 > flush privileges;

No other major problems on a system with over 1500 installed 
packages (ok, insserv reenabled dependency based boot without 
asking, but that unexpectedly didn't break anything).

Good work on that release!

Alex.

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] keys & subsystems

2018-07-30 Thread Arnt Karlsen
On Sun, 29 Jul 2018 08:43:30 +0100, Simon wrote in message 
<2ed6325a-a0b9-425b-8236-50657a44a...@thehobsons.co.uk>:

> Arnt Karlsen  wrote:
> 
> > ..or "make do with whatever you have onboard" in new "creative"
> > ways.
> > 
> > ..people has played music on printers and harddisks produced to
> > print oud documents and store data, by hacking them in new creative
> > ways, for decades.  
> 
> Yes, but that's someone with access to the hardware doing it - and
> hardly a general purpose way of communicating without the user
> realising.

..to have full access to our own hardware, we must have accurate
knowledge of it, which BTW is precisely what we don't have, with 
all these secret chipset backdoors.

> IMO this thread has strayed rather a long way into tinfoil
> hat territory ...

...just like climate change fixes and anti-aircraft artillery tactics,
where we try to guess _what_ the enemy might try to do, and try to stop
him from succeeding playing any of those tricks, without caring too much
about the precise details on how he might try do those tricks.

> However, there is a practical (or at least, possible) way for a
> storage device (eg SSD) to "phone home". Since it holds the
> bootloader and the OS, then in theory it could examine the contents
> of that, and feed in it's own shim before the main OS and sit there
> as this undetectable layer between the OS and the hardware, or just
> add in it's own bit of code to the OS (though code signing might
> break with that). That would probably work as a very targeted attack
> (and lets be honest, if you are of that much interest to the TLAs
> then you have bigger problems to worry about) where the target
> environment is well understood, but in the general case I think it
> would be more work than is justified. Just think of all the
> compatibility issues it would be likely to cause - getting that model
> of drive a bad reputation for crashing the systems. Even where it's a
> highly targeted attack, it would almost certainly be easier to simply
> "borrow" your laptop and copy the data from it than it would be to
> somehow persuade you to buy and fit a compromised new SSD !
> 
> At some point you have to put the paranoia on hold and get on with
> life ;-)

..a luxury we can afford once we know which trick the enemy is going to
play on us.  Meanwhile we're lucky if we waste no more than 2/3 of our
ammo on our bad guesses.  The cost of getting on with life. ;o)

-- 
..med vennlig hilsen = with Kind Regards from Arnt Karlsen
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng