Re: [DNG] Talos, Intel, libre purism, ...

2017-09-07 Thread Rick Moen
Quoting zap (calmst...@posteo.de): > The Sad thing is, I sometimes if it is nonsensical, or stupid, I find it > highly amusing. Isn't it just? One of the mutt MUA's (many) unsung advantages is you can often tell, merely by glancing at the threading pattern, that a thread has gone totally off

Re: [DNG] Talos, Intel, libre purism, ...

2017-09-07 Thread Rick Moen
Quoting eric (eri...@cox.net): > That may remove some of the (off-topic?) traffic on this list even > though I do not know what is off-topic anymore. One rule of thumb I try to follow, to reduce noise, is state a specific point of contention twice at most, then exit, even if an Inevitable One

Re: [DNG] ascii-security Was:Re: Security updates in Devuan

2017-09-07 Thread John Franklin
> On Sep 7, 2017, at 1:54 PM, KatolaZ wrote: > > These things will clear out when amprolla3 comes up. We are almost > there. The current amprolla is not merging sone suites on ascii, > including ascii-updates and ascii-proposed-updates. I’m looking forward to a big

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Rick Moen
Quoting taii...@gmx.com (taii...@gmx.com): > >I also find a bit questionable your going around attempting to tarnish > >the reputation of someone with a real name, while concealing your own. > Criticism isn't allowed? This is of course nothing like what I said. > I dislike when people deal with

Re: [DNG] ascii-security Was:Re: Security updates in Devuan

2017-09-07 Thread KatolaZ
On Thu, Sep 07, 2017 at 10:22:57AM -0400, fsmithred wrote: [cut] > > I think there's nothing in ascii-security and ascii-updates. The Packages > files for both are empty. (I only checked amd64.) > > In contrast to that jessie-security, jessie-updates and > jessie-proposed-updates all have

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Adam Borowski
On Thu, Sep 07, 2017 at 05:25:47PM +0200, Enrico Weigelt, metux IT consult wrote: > IMHO, even this discussion isn't strictly related to devuan That's why we're talking on dng not on devuan-dev. The latter is for development of Devuan specifically. The former came with the slogan "campfire for

Re: [DNG] Off-topic postings Was: Re: Talos, Intel, libre purism, ...

2017-09-07 Thread golinux
On 2017-09-07 10:31, Svante Signell wrote: On Thu, 2017-09-07 at 08:47 -0500, goli...@dyne.org wrote: On 2017-09-07 08:01, Svante Signell wrote: > > Yes, please! Even if some messages are interesting, a majority of them  > are off-topic for Devuan. This list should concern user feedback, etc.

Re: [DNG] Talos, Intel, libre purism, ...

2017-09-07 Thread golinux
On 2017-09-07 10:40, zap wrote: On 09/07/2017 08:11 AM, Antony Stone wrote: On Thursday 07 September 2017 at 13:59:01, Narcis Garcia wrote: This thread has now 86 posts, and I still don't see a solid contribution to Devuan project. This makes very heavy to be subscribed in a mailing list for

Re: [DNG] OT: (almost), but tangentially on-topic Re: Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Antony Stone
On Thursday 07 September 2017 at 17:34:48, Rowland Penny wrote: > On Fri, 8 Sep 2017 01:23:29 +1000 Erik Christiansen wrote: > > > > Losing your temper in an infantile manner is not. And it won't. > > No I didn't lose my temper, I just shouted because you lot must be deaf. Just because someone

Re: [DNG] ascii-security Was:Re: Security updates in Devuan

2017-09-07 Thread Svante Signell
On Thu, 2017-09-07 at 10:22 -0400, fsmithred wrote: > On 09/07/2017 08:55 AM, Svante Signell wrote: > > > > I think there's nothing in ascii-security and ascii-updates. The Packages > files for both are empty. (I only checked amd64.) > > In contrast to that jessie-security, jessie-updates and >

Re: [DNG] Talos, Intel, libre purism, ...

2017-09-07 Thread zap
On 09/07/2017 08:11 AM, Antony Stone wrote: > On Thursday 07 September 2017 at 13:59:01, Narcis Garcia wrote: > >> This thread has now 86 posts, and I still don't see a solid contribution >> to Devuan project. >> This makes very heavy to be subscribed in a mailing list for people like >> me,

Re: [DNG] OT: (almost), but tangentially on-topic Re: Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Rowland Penny
On Fri, 8 Sep 2017 01:23:29 +1000 Erik Christiansen wrote: > On 07.09.17 15:42, Rowland Penny wrote: > > On Thu, 7 Sep 2017 16:32:42 +0200 > > Adam Borowski wrote: > > > > > On Thu, Sep 07, 2017 at 11:51:46PM +1000, Erik Christiansen wrote: > > >

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Enrico Weigelt, metux IT consult
On 07.09.2017 16:12, Erik Christiansen wrote: If the firewall is on a FPGA, then we know what every gate is doing, as we have the VHDL source for it. An purely FPGA-based firewall (w/o an cpu in it), specifically synthesized for a given ruleset seems an very interesting approach. Anyone here

[DNG] Off-topic postings Was: Re: Talos, Intel, libre purism, ...

2017-09-07 Thread Svante Signell
On Thu, 2017-09-07 at 08:47 -0500, goli...@dyne.org wrote: > On 2017-09-07 08:01, Svante Signell wrote: > > > > Yes, please! Even if some messages are interesting, a majority of them  > > are off-topic for Devuan. This list should concern user feedback, etc. For > > pure development there is

Re: [DNG] Purism Librem and disabling Intel ME

2017-09-07 Thread Rowland Penny
On Thu, 7 Sep 2017 17:12:25 +0200 Edward Bartolo wrote: > Quote: "Please take this discussion somewhere else, it has NOTHING to > do with Devuan" > > This discussion has taught me that Intel CPUs from 2008 onwards also > come with GRATIS but QUESTIONABLE functionalities, that

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Enrico Weigelt, metux IT consult
On 07.09.2017 16:42, Rowland Penny wrote: On Thu, 7 Sep 2017 16:32:42 +0200 Adam Borowski wrote: On Thu, Sep 07, 2017 at 11:51:46PM +1000, Erik Christiansen wrote: I have tried asking nicely WILL YOU SHUTUP!!! hey, please calm down. IMHO, even this discussion isn't

[DNG] OT: (almost), but tangentially on-topic Re: Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Erik Christiansen
On 07.09.17 15:42, Rowland Penny wrote: > On Thu, 7 Sep 2017 16:32:42 +0200 > Adam Borowski wrote: > > > On Thu, Sep 07, 2017 at 11:51:46PM +1000, Erik Christiansen wrote: > > I have tried asking nicely That was wise. It might have worked. > WILL YOU SHUTUP!!! Losing

[DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Edward Bartolo
Quote: "Please take this discussion somewhere else, it has NOTHING to do with Devuan" This discussion has taught me that Intel CPUs from 2008 onwards also come with GRATIS but QUESTIONABLE functionalities, that many including myself, frown upon. If there are non-risky hacks that readers can use

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Rowland Penny
On Thu, 7 Sep 2017 16:32:42 +0200 Adam Borowski wrote: > On Thu, Sep 07, 2017 at 11:51:46PM +1000, Erik Christiansen wrote: I have tried asking nicely WILL YOU SHUTUP!!! I don't care about your drivel, it has nothing directly to do with Devuan Rowland

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Adam Borowski
On Thu, Sep 07, 2017 at 11:51:46PM +1000, Erik Christiansen wrote: > On 07.09.17 13:32, Adam Borowski wrote: > > On Thu, Sep 07, 2017 at 09:17:20PM +1000, Erik Christiansen wrote: > > > If our hosts cannot be trusted not to phone home to folk wearing dark > > > glasses, then would it not suffice

Re: [DNG] ascii-security Was:Re: Security updates in Devuan

2017-09-07 Thread fsmithred
On 09/07/2017 08:55 AM, Svante Signell wrote: > On Thu, 2017-09-07 at 21:07 +0900, Olaf Meeuwissen wrote: >> Hi John, >> >> John Franklin writes: >> >>> I’ve seen several security alerts from Debian, but no matching >>> updates in Devuan. For example, the “file" package has >>> CVE-2017-1000249,

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Rowland Penny
On Fri, 8 Sep 2017 00:12:02 +1000 Erik Christiansen wrote: > On 07.09.17 14:05, Alessandro Selli wrote: > > ROMB is the ROM Bypass and that too is builtin the PCH chip: > > Erik Excuse me, but can you lot not take a hint ??? Please take this discussion somewhere

Re: [DNG] Docker on Devuan?

2017-09-07 Thread golinux
On 2017-09-07 07:22, Olaf Meeuwissen wrote: Hi Ozi, Ozi Traveller writes: Just wondering whether anyone has managed to get docker installed on Devuan? If so, how? And are you getting docker updates as well? Have a look at my blog post[1] on this topic ;-) [1]:

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Erik Christiansen
On 07.09.17 14:05, Alessandro Selli wrote: > ROMB is the ROM Bypass and that too is builtin the PCH chip: > > Loading starts with the ROM program, which is contained in the > built-in PCH read-only memory. Unfortunately, no way to read or > rewrite this memory is known to the

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Erik Christiansen
On 07.09.17 13:32, Adam Borowski wrote: > On Thu, Sep 07, 2017 at 09:17:20PM +1000, Erik Christiansen wrote: > > If our hosts cannot be trusted not to phone home to folk wearing dark > > glasses, then would it not suffice to employ a simple embedded host with > > a small die, such as an ARM, e.g.

Re: [DNG] Talos, Intel, libre purism, ...

2017-09-07 Thread golinux
On 2017-09-07 08:01, Svante Signell wrote: On Thu, 2017-09-07 at 14:11 +0200, Antony Stone wrote: On Thursday 07 September 2017 at 13:59:01, Narcis Garcia wrote: > This thread has now 86 posts, and I still don't see a solid contribution > to Devuan project. > This makes very heavy to be

Re: [DNG] Talos, Intel, libre purism, ...

2017-09-07 Thread Svante Signell
On Thu, 2017-09-07 at 14:11 +0200, Antony Stone wrote: > On Thursday 07 September 2017 at 13:59:01, Narcis Garcia wrote: > > > This thread has now 86 posts, and I still don't see a solid contribution > > to Devuan project. > > This makes very heavy to be subscribed in a mailing list for people

[DNG] ascii-security Was:Re: Security updates in Devuan

2017-09-07 Thread Svante Signell
On Thu, 2017-09-07 at 21:07 +0900, Olaf Meeuwissen wrote: > Hi John, > > John Franklin writes: > > > I’ve seen several security alerts from Debian, but no matching > > updates in Devuan.  For example, the “file" package has > > CVE-2017-1000249, released yesterday. > > > > > For the stable

Re: [DNG] Docker on Devuan?

2017-09-07 Thread Olaf Meeuwissen
Hi Ozi, Ozi Traveller writes: > Just wondering whether anyone has managed to get docker installed on Devuan? > > If so, how? And are you getting docker updates as well? Have a look at my blog post[1] on this topic ;-) [1]: https://paddy-hack.gitlab.io/posts/sandwiching-docker-with-devuan/ I

Re: [DNG] Security updates in Devuan

2017-09-07 Thread Olaf Meeuwissen
Hi John, John Franklin writes: > I’ve seen several security alerts from Debian, but no matching > updates in Devuan. For example, the “file" package has > CVE-2017-1000249, released yesterday. > >> For the stable distribution (stretch), this problem has been fixed in >> version 1:5.30-1+deb9u1.

Re: [DNG] Talos, Intel, libre purism, ...

2017-09-07 Thread Rowland Penny
On Thu, 7 Sep 2017 13:59:01 +0200 Narcis Garcia wrote: > This thread has now 86 posts, and I still don't see a solid > contribution to Devuan project. > This makes very heavy to be subscribed in a mailing list for people > like me, that are looking a good alternative to

Re: [DNG] Talos, Intel, libre purism, ...

2017-09-07 Thread Antony Stone
On Thursday 07 September 2017 at 13:59:01, Narcis Garcia wrote: > This thread has now 86 posts, and I still don't see a solid contribution > to Devuan project. > This makes very heavy to be subscribed in a mailing list for people like > me, that are looking a good alternative to Debian/Systemd,

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Alessandro Selli
On Thu, 7 Sep 2017 at 13:41:25 +0200 Alessandro Selli wrote: > On Thu, 7 Sep 2017 at 21:17:20 +1000 > Erik Christiansen wrote: > > > The notion of an extra embedded CPU or two on big Intel chips is not > > difficult to credit, but where is

[DNG] Talos, Intel, libre purism, ...

2017-09-07 Thread Narcis Garcia
This thread has now 86 posts, and I still don't see a solid contribution to Devuan project. This makes very heavy to be subscribed in a mailing list for people like me, that are looking a good alternative to Debian/Systemd, not only in software but also in community. El 07/09/17 a les 13:43,

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Didier Kryn
Le 07/09/2017 à 10:48, taii...@gmx.com a écrit : On 09/07/2017 04:30 AM, Alessandro Selli wrote: On Wed, 6 Sep 2017 at 17:12:27 -0400 zap wrote: Agreed! Talos is at least *LIBRE!* No, it ain't: https://blog.rapid7.com/2013/07/02/a-penetration-testers-guide-to-ipmi/

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Alessandro Selli
On Thu, 7 Sep 2017 at 21:17:20 +1000 Erik Christiansen wrote: > The notion of an extra embedded CPU or two on big Intel chips is not > difficult to credit, but where is the postulated entire minix OS loaded > from? It's in the report by the Positive Technologies team:

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Adam Borowski
On Thu, Sep 07, 2017 at 09:17:20PM +1000, Erik Christiansen wrote: > If our hosts cannot be trusted not to phone home to folk wearing dark > glasses, then would it not suffice to employ a simple embedded host with > a small die, such as an ARM, e.g. Beaglebone Black, as a firewall? It's not hard

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Erik Christiansen
The notion of an extra embedded CPU or two on big Intel chips is not difficult to credit, but where is the postulated entire minix OS loaded from? If our hosts cannot be trusted not to phone home to folk wearing dark glasses, then would it not suffice to employ a simple embedded host with a small

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Alessandro Selli
On Thu, 7 Sep 2017 at 06:29:59 -0400 "taii...@gmx.com" wrote: > On 09/07/2017 05:01 AM, Rick Moen wrote: > >> Quoting taii...@gmx.com (taii...@gmx.com): >> >> [speaking to Alessandro Selli] >> >>> You are constantly defending them and snubbing your nose at superior >>> products

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread taii...@gmx.com
On 09/07/2017 05:01 AM, Rick Moen wrote: Quoting taii...@gmx.com (taii...@gmx.com): [speaking to Alessandro Selli] You are constantly defending them and snubbing your nose at superior products so it is obvious you work for purism. Can I ask for a bit more civility, please? Mr. Selli is a

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Alessandro Selli
On Thu, 7 Sep 2017 at 04:48:43 -0400 "taii...@gmx.com" wrote: > On 09/07/2017 04:30 AM, Alessandro Selli wrote: > >> On Wed, 6 Sep 2017 at 17:12:27 -0400 >> zap wrote: >> >>> Agreed! Talos is at least *LIBRE!* >>No, it ain't: >>

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Rick Moen
Quoting taii...@gmx.com (taii...@gmx.com): [speaking to Alessandro Selli] > You are constantly defending them and snubbing your nose at superior > products so it is obvious you work for purism. Can I ask for a bit more civility, please? Mr. Selli is a fairly passionate free software person,

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread taii...@gmx.com
On 09/07/2017 04:30 AM, Alessandro Selli wrote: On Wed, 6 Sep 2017 at 17:12:27 -0400 zap wrote: Agreed! Talos is at least *LIBRE!* No, it ain't: https://blog.rapid7.com/2013/07/02/a-penetration-testers-guide-to-ipmi/ "BMCs and the IPMI Protocol

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Alessandro Selli
On Thu, 7 Sep 2017 at 10:30:39 +0200 Alessandro Selli wrote: > On Wed, 6 Sep 2017 at 17:12:27 -0400 > zap wrote: > > > Agreed! Talos is at least *LIBRE!* > > No, it ain't: >

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-07 Thread Alessandro Selli
On Wed, 6 Sep 2017 at 17:12:27 -0400 zap wrote: > Agreed! Talos is at least *LIBRE!* No, it ain't: https://blog.rapid7.com/2013/07/02/a-penetration-testers-guide-to-ipmi/ "BMCs and the IPMI Protocol Baseboard Management Controllers (BMCs) are a type of