Root Access - 2014-09-14

« first day (1500 days earlier) ← previous day next day → last day (3518 days later) »

Journeyman Geek

12:08 AM

man, this is so damned true businessinsider.com/…; "Memorization not rationalisation"

3

2 hours later…

2:13 AM

> We end up borrowing our neighbor’s printer. The logistics of picking up the printer, bringing it over to our apartment, downloading the software, and then printing take about half an hour. (side note: stop messing with my fucking clipboard when I press Ctrl+C, bitch site!)

so they didn't have email when this article was written?

September 9, 2014...

Journeyman Geek

Or a USB drive :p

2:29 AM

too physical for my thought processes at this point :P

USB drives are so 2000s

@JourneymanGeek ...I actually did for tech drawing

scrape the 0.7mm lead with scissor blades to get it down to a finer point

2:45 AM

XDDDDD

@allquixotic o.O

...what was that thing that flew off in the beginning?

and how the hell does it land safely?

@Bob the challenge is: get a Kerbal into space (70,000 meters above ASL of Kerbin) and then back onto the dry land surface of Kerbin in as little time as possible using only stock parts and no mods

That spin push thingy was awesome.

@Bob the command chair is the lightest part that will house a Kerbal, but you can't make your primary ship part a command chair, so he stuck a probodobodyne on it as the primary module in the VAB, and put a separator on it, so first stage is to pop off the probe, then control transfers to the kerbal in his command chair

0

Q: Hosting multiple game servers on a single vps

So I am a developer on a few source engine servers, and I am being paid to make a vps that will host their servers. I would like to know how to do this. is it possible to make seperate folders for each server?

64-bit windows-server-2003 sql-server vps

lordy.

I could answer that question...

2:54 AM

cute, huh? :)

@allquixotic huh. was there a point to that part being designed like that?

@Bob the only thing I can guess is that for some reason the game devs don't want you launching a kerbal into space strapped into a chair on top of a huge scary rocket..... which... is precisely what this guy did, with MANY huge rockets XD

it lands safely because he deploys a parachute at the last possible ~~millisecond~~ frame before it hits the ground.

the parachute deploys almost instantly, and to my knowledge, drag and gee-forces do not cause parachutes to fail (yet...) in stock KSP

so basically it's a "decelerate to around 6 m/s instantaneously as long as you're in an atmosphere" button in the current version of stock KSP.

lol stock KSP

pretty sure they are going to fix the aerodynamics to add atmospheric heating (requiring you to either limit your velocity when entering/leaving atmospheres, or use parts with ceramic tiles on them and make sure your builds are aerodynamically sound), and they're also going to make parachutes that aren't literally indestructible

big complex game, not everything is done

@allquixotic I'm pretty sure I've made a parachute rip itself off before.

That was with an engine on, though.

3:33 AM

ahh

3

Journeyman Geek

0

Q: what is dos operating system?? is it good for gaming?

I am planing to buy a laptop for gaming under 40k and I have seen so many dos operating system. If I have a does operating system can I install all the future updates or what is the meaning I am not understand??????? Is it best to buy a does operating system ?????????

Not sure if trolling or just ....

2 hours later…

5:56 AM

why does "ahh" keep getting starred in this room?

Journeyman Geek

Why not?

Why not not?

Journeyman Geek

Because!

hides bowl of dog food

;p

@AwalGarg He prefers cheese.

6:10 AM

@JourneymanGeek then why not star just everything, every message that comes in.. ?

@Bob lol

Journeyman Geek

Cause its not done that way ;p

anyways, star whatever you want. I'll also star that because:

user image

Journeyman Geek

(Its a running gag. )

lol nice

cya

Journeyman Geek

6:51 AM

Blah

superuser.com/questions/811507/… <--- isn't each NFS share restricted to one client at a time?

7:06 AM

Morning all. Right... I'm struggling with SSL on my VPS. I went to StartSSL to generate a cert, but the certificate is installed to my browser? I then created a new cert in IIS but is not verified. I've not done this before, and i'm lost. Any one got a pointer (or 2)

@Dave the initial cert is a client certificate used in place of a password login

Then you log in with it and generate a server certificate to use on your server.

You can have them generate a private key for you, but I'd recommend generating one locally and submitting a CSR

7:23 AM

I thought you felt the CSR, at $99 was too much?

or are you saying it can be verified by other sites (at different prices) @Bob

? ? ?

You generate a CSR (a request for someone to sign your certificate)

You pay for that someone to do the signing... Or use a free one like startssl

You see, this is where i'm clearly lost!! You wrote "Then you log in with it" Are you saying as soon as I have installed the cert from sslstart on the browser is is effectively authenticating me on startssl website?

Yes.

I'm on my phone right now so I can't type much

Right.... Now things are slotting into place. OK, so I've done that on SSL and my browser is now "authenticated". So, I go back to sslstart to generate the cert for the server

But I really suggest you look up how pki works

7:31 AM

No worries Bob, any help is massively appreciated!

Will do about PKI

I'll be back on a computer in a bit

7:48 AM

@Bob, thanks again for everything. I've now logged on, got a validation for my domain etc. All seems good, but it says it needs to be validated every 30 days. Really? Every 30 days I have to go through this process manually?

@Dave You'll only need to revalidate your domain when you need to reissue the cert.

The cert lasts a year.

Ah, so when it says "You will be able to use this verification for the next 30 days, after which it expires and must be renewed."

Validating your domain in startssl is just them confirming that you own (or at least have administrative access to) the domain

it means I have 30 days to get it verified

the basics of https (http over tls):

you have a server certificate with a private key that should never be exposed to anyone beyond the server

the server certificate and asymmetric encryption is used to share a symmetric encryption key used for each session

this would work with self-signed certificates, incidentally

7:51 AM

OK, all nice and clear!

the problem: how do you confirm that they are who they say they are?

don't answer yet, give me a second

(and i won't Google it, I am thinking)

what's stopping someone attempting to impersonate the server (man in the middle attack)?

btw, asymmetric encryption with RSA can work in two modes:

if you encrypt a message with the public key, it can only be decrypted with the private key

(the certificate contains the public key, the browser can encrypt a symmetric encryption key using the public key, and only the server can decrypt that. in reality, the process is far more complicated, since this is still vulnerable to replay attacks...)

I don't konw the asnwer..

:L)

:)

the other mode is signing

if you take a hash of the message to be signed, and encrypt it with the private key, only the public key can turn read the signature... likewise, only the private key can create that message => signature transformation

the process is something like:

7:56 AM

ok

sign: signature = encryptWithPrivate(hash(message))

verify: is decryptWithPublic(signature) == hash(message) true?

there is a lot here isnt' there?!

I need to start at the basics really!

@Dave eh, don't worry about the signing process too much

OK :)

(incidentally, I've probably misused a term or two - it's not really 'encrypting' or 'decrypting' when you're signing)

@Dave The main point is: only the owner of the private key can sign a message, and others can verify that this message must have been signed by said owner

I went off on a bit of a tangent...

7:58 AM

No, it's all good :)
So, I've created the cert now, it's on my Server, under My Documents.

anyways... so how do you verify someone is the real owner of a domain/certificate?

you get someone you trust to tell you it's real!

now, it's tedious to ask them directly... so they sign the certificate

Ah, I see. Hence why if I can validate myself on a machine, then that satisfies as trust, they sign away and that' that?#

Right, I see

your browser/OS has a listed of trusted signers (root certification authorities)

(they can then delegate trust to intermediate authorities)

it's the job of the CAs to verify that the person who wants their certificate to be signed actually owns the domain

that's what the whole domain validation startssl does is

Understood. So, now I have a cert on my machine, how do I implement it? I mean, it's just a file under MyDocuments... Do I use it via IIS? Do I just install it?

(if a CA 'goes rogue', starts signing certs they shouldn't, they'll probably be untrusted by browsers/OSes, which makes all their signed certificates 'invalid')

so you generate a CSR, a request for some CA to sign your cert

8:02 AM

and I assume if a CA does go rogue, this update would apply pretty quick

@Dave well, see diginotar... they were compromised, and now untrusted

I think the CSR was done on startsssl

DigiNotar was a Dutch certificate authority owned by VASCO Data Security International. On September 3, 2011, after it had become clear that a security breach had resulted in the fraudulent issuing of certificates, the Dutch government took over operational management of DigiNotar's systems. That same month, the company was declared bankrupt. An investigation into the hacking by Dutch-government appointed Fox-IT consultancy identified 300,000 Iranian Gmail users as the main target of the hack (targeted subsequently using man-in-the-middle attacks), and suspected that Iranian government was behind...

> In reaction, Microsoft removed the DigiNotar root certificate from its list of trusted certificates with its browsers on all supported releases of Microsoft Windows[29] and Mozilla revoked trust in the DigiNotar root certificate in all supported versions of its Firefox browser.[30] Chromium / Google Chrome was able to detect the fraudulent *.google.com certificate, due to its "certificate pinning" security feature;[31] however, this protection was limited to Google domains, which resulted in Google removing DigiNotar from its list of trusted certificate issuers.[19] Opera always checks th…

@Dave That depends on the server software...

oh yea, with https you'll also need to serve all intermediate certificates

SSLLabs will detect issues there, so make sure you test

d'oh, I@m sorry Bob, I have to go, I'm running very late :( Thank you so much for your help though, hopefully can do it again.

Do you know what I need to do with the cert now it's on my machine. In regards to setting up an https: site and for my software to be classed as a trusted publisher? Or is this not a trival task?

Sorry, I can't even wait for an ansdwer, Bob, thank you very much for everything

@Dave You should look up how to add an SSL cert for your IIS version. Again, make sure you add the whole cert chain, including all intermediate certificates.

@Dave The software one is different... you need a code-signing certificate (I don't think free ones exist, and they normally require more stringent ID checks), and you need to sign the exes.

@allquixotic knows more about that.

8:47 AM

Hey there.

anyone experienced in OpenVPN configuration?

9:07 AM

"experienced"? nope. but I've had to dabble with it before

!!tell 17665889 meta

ChatBot John Cavil

@j0chn Please don't ask to ask; if you simply ask your actual question, we will help you if we know the answer or can help you find it. This is much faster and simpler than asking if it's OK to ask. As a rule, it is always OK to ask in this channel. Please go ahead.

hm

we need to add a variant for 'is anyone good with X' :P

Sorry :) My problem is dscussed here superuser.com/questions/809423/…

but it stucks atm. so I wanted to ask instead of waiting something happens

good lord.

why are you defining gateways with tap (bridge)?

cause my guide told me to... and than marius told it is a good way to get connected to machine in lan

9:14 AM

:\

IIRC tap is on layer 2

below routing

you're effectively going to be giving the VPN client an address and 'direct' access to the server's interface (and probably network)

that's what I want

So I can log on to server and router and opened other clients

Journeyman Geek

9:26 AM

@j0chn: I used to have a pretty good howto for that

that would be nice. My how tos have been worse

Journeyman Geek

I think I used this

help.ubuntu.com/community/OpenVPN

But it didn't actually work cause both my networks used the same subnets ;p

I'll ahve a look later. Thank you!

Journeyman Geek

i.stack.imgur.com/6Hjvy.gif .

(just so you guys don't see that in a loop by accident ;p)

2 hours later…

Journeyman Geek

11:26 AM

heh

I just answered a 3 year old SF question I was trying to reference to do something ;p

11:49 AM

Just saw the pinned message o_0(or was it pinned just now?)

Journeyman Geek

Its been pinned a while

12:25 PM

0

Q: Open .mpp file ....without having MS Project, is it possible?

I want to know if it is possible to open a .mpp file without having MS project. I also do not want to install any 3rd party software free, trial or shareware for doing the same. Please help...

microsoft-project

> What have you tried?

12:46 PM

@JourneymanGeek DOS is great for gaming!!! Some of the best games I've ever played ran on DOS. Commander Keen, Duke Nukem 1 and 2, Major Stryker, Catacomb Abyss, ....

Actually, come to think of it, they probably weren't all that incredible gameplay-wise, but I was a little kid, so each one was a fundamentally new and unique experience.

Journeyman Geek

;p

Journeyman Geek: your tutorial is good, but now I got a script and a pus rout problem.

Journeyman Geek

a what problem?

1. There is mentioned to create an up and a down scirpt for OpenVPN. If I integrate them OpenVPN doest not start

2. When I use the push "dhcp-option DNS" and "dhp-option DOMAIN" OpenVPN doesn't start .. :D

Journeyman Geek

hm

Alas, its been long enough that I don't remember what I did :/

12:52 PM

I will set verb from 9 to 3. Maybe I will see the problem.

Journeyman Geek

@allquixotic: to my defence, I said modern not classic

I'll just pretend I didn't see you misuse "its" for the 10000th time and that I had already started to play my game

:P

Journeyman Geek

;p

@allquixotic: I did not! ninjamodedits

@JourneymanGeek er. your ninjamodedit didn't fix the problem?

Sun Sep 14 14:53:28 2014 Initialization Sequence Completed
Sun Sep 14 14:53:40 2014 event_wait : Interrupted system call (code=4)

Journeyman Geek

12:55 PM

@allquixotic: I replaced its with it is.

blames caching.

3 hours ago, by Journeyman Geek

http://i.stack.imgur.com/6Hjvy.gif .

Oh and ^^^ That ;p

user image

@JourneymanGeek lol, funny. I'm used to a different perspective of Ash where it looks like he's nearly incapable of walking because his legs are bowed out to the sides :P (like your gravatar)

1:17 PM

Hi everyone! Could someone answer a Google Play Developer account related question here?

@Vinayak not really the kind of thing that we commonly discuss here; I don't want to say it's off-topic, but it's probably not an area of experience of the regulars

typically if you have a question regarding some kind of user account, you want to contact the company responsible for the account

No, not related to a specific account. I asked the question here but it hasn't got many views yet. The question is about the pitfalls (if any) of creating a developer account for other people using your credit card.

Journeyman Geek

1:34 PM

@allquixotic Most of his photos are him lazysitting

He hates being photographed, he's pushed me over when I squatted to take a pic ;p

(And I'm usually on the leash so... ;p)

@JourneymanGeek is that the word? lazysitting?

Journeyman Geek

lol

Thats what most people call that odd one sided sit ;p

(the left leg is out, right leg is tucked in across)

Journeyman Geek

2:35 PM

chat.stackexchange.com/faq#avatar

that's new

o.O

3:00 PM

user image

@JourneymanGeek Hello. I never understood why these are for. They often fall out and are very flimsy.

One is missing in left earphone.

Journeyman Geek

Cause people have different sized ears ;p

so you pick one that fits

No, not silicon pads. The ones inside earphones. On the photo the bottom earphone is missing black circular covering that upper earphone has.

Journeyman Geek

user image

no idea then, I prefer over the ears.

user image

Journeyman Geek

o0

3:06 PM

@Boris_yo Buy better quality earbuds? :P

I can't say I've ever had that problem.

Also, they're there to stop earwax and other crap from getting onto the driver (there should be more seals inside, but they're harder to clean... so one on the outside).

@Bob This one is Logitech UV500, same happened with ZAGG Smart earbuds so this is not crap that I am buying. I didn't now about earwax and other crap. I thought they are intended to apply some kind of anti-distortion effect on music.

@Bob Gyroscope?

@Boris_yo Gimbal, actually, but commonly used with gryos, yes.

@Boris_yo shrug they shouldn't be all that fragile

heck, in normal use they shouldn't be touched

3:33 PM

@Bob Would general purpose glue fix it? No idea how I will put it on since the edges are very small.

@Boris_yo I doubt it.

You'd likely end up covering the port entirely, which would ruin the sound.

o.O

@allquixotic apparently the S5 has issues with overheating?

3:54 PM

wat

amazon.com/BITMAIN-ANTMINER-Bitcoin-Miner-Overclockable/dp/…

more wat

amazon.com/Asicminer-Erupter-Asic-Bitcoin-Miner/dp/B00EENQ0HQ/…

even more wat: en.bitcoin.it/wiki/Mining_hardware_comparison#Other

mining on a router? MIPS? -_-

then there's people testing with PIIIs and PentiumMs: en.bitcoin.it/wiki/Mining_hardware_comparison#Intel

That Brazilian Guy

4:34 PM

I think I have a XT somewhere, let's use it for mining!

o.O

That Brazilian Guy

In fact, I don't. I had one, but it was given away 10 years ago. Would make a nice piece of memorabilia.

@Bob news to me

@allquixotic Something about the waterproofing interfering with heat dissipating...

@Bob it gets scarily hot when optimizing apps (odexing or whatever) but even when tethering over wifi it doesn't get all that hot...

wouldn't surprise me if phones start having to throttle back due to heat, though

or some engineer invents a tiny low-power fan

4:44 PM

@allquixotic interesting pre-release speculation (reads a bit like advertising though): galaxys5us.com/…

interesting because it sounds so... well... so much like marketing fluff

sounds a lot like they'd just start throttling... hardly a new concept

@allquixotic bit of a problem creating a path for air to flow through

5:15 PM

when my cat enters my room, here is Step 1:

user image

and Step 2:

user image

second one we call animal cracker posture

user image

5:51 PM

> i.imgur.com/VmOtL3U.gif

@Bob looks painful

3 hours later…

8:48 PM

wow... come into work today to twenty emails telling me that my various admin accounts are about to expire.

Each email is for a different domain account as well!

9:33 PM

@Bob Cheap, Easy, and Fast?

Surely that's a pick 2 situation...

2 hours later…

Journeyman Geek

11:14 PM

gah. local ubuntu repo seems down

ugh... need to send a user two pages out of a 300 page PDF...

@JourneymanGeek I normally experience the opposite. "Oh, is it up today?"

Snipping tool time!

@MichaelFrank pdftk, pdfsam

@Bob Corporate network computer. No self-installed applications!

11:23 PM

@MichaelFrank who said anything about installing?

Journeyman Geek

@Bob I don't install software on that box often :p

> Fixed bug #100 rotate doesn't perform rotation

I suppose that is a problem.

Journeyman Geek

@MichaelFrank : no PDF printer?

@JourneymanGeek NOPE

o.O

@allquixotic github.com/Zirak/SO-ChatBot/blob/master/source/plugins/…

that could be useful to cut down on the imagespam

11:30 PM

// because people are bad at reading instructions, accept a wide range of
// values for the command

lol

11:50 PM

Heh... was troubleshooting an issue with a VDI when I found there was 255 VDIs set to use the same VLAN. That VLAN has a DHCP scope of 245 addresses.

Someone fucked up!

« first day (1500 days earlier) ← previous day next day → last day (3518 days later) »

Transcript for

Sep '1414

Root Access

For all you Super Users out there. You have backups, right?

computers technology

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile