Re: [DNG] Web md RAID monitoring [was: Re: Fake RAID]

2022-03-10 Thread aitor

Hi,

On 10/3/22 8:41, Didier Kryn wrote:


  Not packaged. Debian packaging is something I was never able to
achieve and I prefer devoting my time to more fruitfull trasks, given my
skills. I can send you diskweb.tgz, the size of which is 16K. It is
trivial to build. It monitors both md RAIDs and the level of occupation
of the filesystems. RAID data is read from devices' representation in
/sys/devices/virtual/block, and the display is made attractive by the
use of colors and svg graphics. I wrote this more than a dozen years ago
and never touched it since that time. It's running on our home Desktop.
     Note that the location /sys/devices/virtual/block is not granted to
stay the same place in the future, but this location is easy to change
in the source in case kernel people change their mind.
     If more people are interested I might put it on Devuan git.


If you decide to push it to devuan git, I would try to build the packages.

Aitor.

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] online purchasing (dunno - - - maybe OT)

2022-03-10 Thread Simon
o1bigtenor via Dng  wrote:

> I made a purchase from an online store - - - its a smaller entity that
> covers some interesting niches - - therefore the order.
> 
> In doing the purchase - - - noticed, using uBlockOrigin and
> PrivacyBadger, that paypal 'only' has some 9 domains linked into the
> transaction. Hmmm - - - that's not all - - - that's what PrivacyBadger
> was picking up - - - uBlockOrigin noted that there were some 15
> domains of which it blocked some 4. Still linked were crackbook and a
> bunch of ms googly's garbage.
> 
> So I called the company to tell them that I found this concerning.
> 
> I asked the person that I was talking to if they were into internet
> privacy and security - - - very much so was the answer. So I asked him
> why he needed all these domains connected. The long and short of it
> was that he got quite huffy and asked me to cancel my order (and
> without saying so) get lost. It is more important to him that everyone
> and his dog know about his transactions that it is for him to make
> transactions.

I suspect it’s more a case of two things :
They are using a packaged system that doesn’t make it easy to do things 
properly - only how the system designer things they should be done.
and/or
They get a lot of their business via those routes so there’s a potential 
financial hit if they turn off the tracking.

Recently I had a case where I went to an organisation’s web site and got (IIRC) 
a non-complaint cookie notice. IIRC it was the sort that basically said “we use 
cookies” rather than “can we use cookies”. When I contacted them, they were 
grateful I’d done so - they’d had some work done, and because everyone 
internally used the site all the time, they never saw what a visitor with a 
“clean” browser would see. It got fixed.

> I do wish there were a way of warning other customers - - - - his
> website is likely a magnet for web bottom feeders and he doesn't think
> its worth things about.

No easy way to tell other (potential) customers.

But for the business, you didn’t say what country they are in. Both Germany and 
France have found the use of certain Google “services” breach GDPR. Perhaps 
report the site for that ? I think this is going to get “interesting” for site 
owners ;-)
https://www.theregister.com/2022/01/31/website_fine_google_fonts_gdpr/
https://www.theregister.com/2022/02/10/google_analytics_gdpr_breach/
https://www.theregister.com/2022/01/13/google_analytics_gdpr/

Simon


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Web md RAID monitoring [was: Re: Fake RAID]

2022-03-10 Thread Michael Neuffer via Dng




On 3/10/22 08:41, Didier Kryn wrote:
     Not packaged. Debian packaging is something I was never able to 
achieve and I prefer devoting my time to more fruitfull trasks, given my 
skills. I can send you diskweb.tgz, the size of which is 16K. It is 
trivial to build. It monitors both md RAIDs and the level of occupation 
of the filesystems. RAID data is read from devices' representation in 
/sys/devices/virtual/block, and the display is made attractive by the 
use of colors and svg graphics. I wrote this more than a dozen years ago 
and never touched it since that time. It's running on our home Desktop.


     Note that the location /sys/devices/virtual/block is not granted to 
stay the same place in the future, but this location is easy to change 
in the source in case kernel people change their mind.


     If more people are interested I might put it on Devuan git.



Please do so.

Thanks!

Cheers
  Mike
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Fake RAID

2022-03-10 Thread Hendrik Boom
On Wed, Mar 09, 2022 at 07:18:13PM +0100, Didier Kryn wrote:
> Le 09/03/2022 à 17:12, d...@d404.nl a écrit :
> > On 09-03-2022 16:55, Hendrik Boom wrote:
> > > On Wed, Mar 09, 2022 at 02:42:07PM +0100, aitor wrote:
> > > 
> > > > Did you read the following guide?
> > > > 
> > > > https://wiki.debian.org/DebianInstaller/SataRaid
> > > Interesting note.
> > > 
> > > What is a "fake RAID"?  Is it a RAID or not?
> > > 
> > > -- hendrik
> > > 
> > A real RAID controller has hardware and software on board and often a
> > battery backup. A "fake" RAID does have some hardware but no software or
> > better some software but depends on a Windows driver for the RAID
> > functions. Same trick as with Win modems and printers.
> 
> 
>     I have worked with Dell Poweredge servers around 15 y ago. These had
> PERC hardware RAIDs able to completely do the whole job without any help
> from the OS. The configured RAID devices were seen by the kernel as
> individual disks. After a few years working like this I configured the PERC
> so as to show every disk individually (therefore no RAID), and managed
> software RAIDs using mdadm. md RAIDS, not dm RAIDS. dm stands for
> device-mapper, which also means Logical Volume Manager. On the contrary of
> what is said in the Debian document, I found LVM (dm RAIDs) not much more
> usefull than md and overly complex. On the other hand, mdadm also is not a
> piece of cake but I can find my way with it and I have developped a graphics
> monitoring tool for it, actually a little web server displaying the status
> of all the host's md RAIDs.

That looks useful.
I already have a web server.
Is it possible to easily configure this thing so it provides content to an 
existing web server?

-- hendrik
> 
>     What I mean is that there is probably the possibility to configure the
> PERC as no-RAID and build a software RAID on Linux, if this is manageable
> for your Win10.
> 
> --     Didier
> 
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Kernel Vulnerabilities or who understands this mess

2022-03-10 Thread Ken Dibble

On 3/10/22 04:29, Olaf Meeuwissen via Dng wrote:

Hi,

Ken Dibble  writes:


Well, a consequence of this investigation was that I was forced to
double check some things.

The thing I found is that the default /etc/apt/sources.list has
chimaera-updates and chimaera-security commented out.
Is this really well thought out?
I would think that most people would want those enabled.

The *-security entry is enabled by default, IIRC, *unless* the installer
was not able to contact it.  This *may* have happened if you used an
installer while chimaera was not yet released.  Obviously, if you
installed without a network connection, it will be disabled.

Your sources.list should have appropriate comments if the installer
disabled it.

Whether you want *-updates enabled is debatable.

And while writing this up I suddenly seem to remember the installer
asking me what to enable/disable.  That may have been an advanced mode
installation though.

Hope this helps,
--
Olaf MeeuwissenFSF Associate Member since 2004-01-27
  GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13  F43E B8A4 A88A F84A 2DD9
  Support Free Softwarehttps://my.fsf.org/donate
  Join the Free Software Foundation  https://my.fsf.org/join
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


For a sanity check, I did a fresh install in a vm.  Indeed, things are 
as you suggested they should be.


I have to assume that I made the same mistake repeatedly, on multiple 
installs, choosing a wrong option somewhere, as all the devices had 
identical sources.list files and there were no comments in any of them 
about the network being unavailable (I rarely have network connectivity 
issues).  The only choice that I can think of would have been during the 
install, declining additional sources, thinking that it only meant local 
physical media.


Sorry for the noise, and thanks again.


Ken

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Kernel Vulnerabilities or who understands this mess

2022-03-10 Thread Olaf Meeuwissen via Dng
Hi,

Ken Dibble  writes:

> Well, a consequence of this investigation was that I was forced to
> double check some things.
>
> The thing I found is that the default /etc/apt/sources.list has
> chimaera-updates and chimaera-security commented out.
> Is this really well thought out?
> I would think that most people would want those enabled.

The *-security entry is enabled by default, IIRC, *unless* the installer
was not able to contact it.  This *may* have happened if you used an
installer while chimaera was not yet released.  Obviously, if you
installed without a network connection, it will be disabled.

Your sources.list should have appropriate comments if the installer
disabled it.

Whether you want *-updates enabled is debatable.

And while writing this up I suddenly seem to remember the installer
asking me what to enable/disable.  That may have been an advanced mode
installation though.

Hope this helps,
--
Olaf MeeuwissenFSF Associate Member since 2004-01-27
 GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13  F43E B8A4 A88A F84A 2DD9
 Support Free Softwarehttps://my.fsf.org/donate
 Join the Free Software Foundation  https://my.fsf.org/join
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng