« first day (1485 days earlier)      last day (3464 days later) » 

12:09 AM
hi
@NathanOsman you run an ubuntu server right?
 
Yes.
14.04.
 
do you know any steps that should be taken to secure a system, or know a good site?
i just would like to know stuff for hosts but server i can probably pick n choose
 
I usually just do any hardening by hand.
And it depends on the services running.
 
i'm just not sure what are the basic openings really. I haven't done any administration on a linux box, and not sure what i would need to change from the defaults
 
if you keep physical access controlled, keep the system patched, don't run unnecessary services and lock down necessary services you are pretty much hardened.
oh and don't use cheap passwords.
 
12:17 AM
@seth well.. that seems to be general advice :) I guess I need to find out what services I would need.. and that could be system dependent for sure, but are there any 'no one needs that' type services. Like in Windows File and Printer sharing is enabled by default
just was wondering if there was any service that really has no real need to be enabled by default
 
not enabled by default, that I know of. Ubuntu ships with all ports closed, so if something is listening then someone (or, I suppose, something) started it.
 
so let's say an attacker saw a new ubuntu install, and thought hmm I want to attack this. Is there anything I should defend first, or is it going to be hard?
 
@NoTime: I'd probably close all ports by default, use key based ssh, and throw in a copy of fail2ban.
 
First, how does said attacker see this new install?
@JourneymanGeek I'm lazy, I don't use key based ssh ;P
but then, none of my devices are public facing anyway.
 
@JourneymanGeek ok so how does outgoing traffic work?
@seth you could just nmap :) or a christmas tree with kali.. although that's kinda noisy
 
12:23 AM
if outgoing traffic is compromised...
(But proper paranoia indicates you close those too, but I don't bother)
 
ok so you are saying close all ports after compromised?
or are you saying access control on the ports?
 
@NoTime deny all the things!
 
@JourneymanGeek well if you want to go that far.. just degausse the hard drive and kill the NIC :)
 
@NoTime: true
(protip, most skiddies can't find their elbow from their southpointing end of their north pointing self)
 
I wouldn't be looking at script kids
 
12:27 AM
Though my fedora box basically does this for low facing ports. SElinux is a cruel misteress.
Then, you can not worry about 99% of attacks
 
heh.. regarding a competition it would be .1%
as far as scripts... it's against pros.. who are guaranteed to eventually get through
 
eh. in which case
start with the NSA guide ;p
 
are you talking about their encryption manuals?
 
^ see link
 
ah I am looking probably willl be a while before I talk again :p
 
12:31 AM
@NoTime if no ports are open nmap returns nothing :)
(as far as my nmap knowledge goes)
 
@Seth can use other tools, on kali.. can't remember names but they will do like FIN,SYN,ACK,FIN-ACK,SYN-ACK,etc... in the header to see what OS it is
@seth all sorts of fun tools in Kali.. even though most of them are noisy, and easily detected
 
hmm
 
i think you can do other stuff with nmap that is like an attack like that too.. I'm looking through default stuff to change though
 
I didn't know home directories had 751 permissions.
 
yeah i am on that one right now :)
I need to star that from Journeyman
and the one you linked @seth
eh snort is so crazy
 
12:42 AM
I tried setting it up once... that was a pain.
 
there are some GUIs for it.. I made a couple rules that kinda worked.. if you are good at doing regex it helps a lot
<< not good at regex
 
my regex ain't that good either :P
 
you can use BASE (or other GUIs) too
thats more server level id say tho
but it can turn into a intrusion detect/prevent pretty easy because you can drop connections
this page is really great :) exactly what I was looking for, if they had other debian (vs RH) might be good too
i'm sure it's in there somewhere
https://www.nsa.gov/ia/_files/os/redhat/NSA_RHEL_5_GUIDE_v4.2.pdf
seems good even though its RHEL
 
I love bringing that one up.
I don't even remember what it was for.
I think it was for matching MIME types.
 
@NathanOsman and that's why people get scared of Command line
 
12:55 AM
That's a regular expression.
It doesn't necessarily have anything to do with running commands in a terminal.
 
gotcha.. you would put that inside of a rule
or in front of stuff
I just see it searching for anything but I cannot read it @NathanOsman but I usually see those things included in a command.. like in a search and replace
 
I can hardly read it myself... and I wrote it.
 
i'm just amazed how much I don't know about computers... I learn one part (to an acceptable level) , and always find something else I have no clue about
 
It's the same thing for everybody.
In 1960, it was possible to know everything there was to know about computers.
Once the 70s hit, that was no longer possible.
 
and I wasn't alive in the 70's i'm early 80s kid
but have been lucky to have computer in front of me (in school at least) since 1987ish
but there is almost no similarity between computers then and now
i've seen someone run windows 98 in a vm ironically though.. it's kinda funny
 
1:11 AM
I was doing it the other day.
I have the 98 SE disc around here somewhere...
 
i can get up to DOS 6.1? from school
the one that fixed the size issue I believe
after DOS was kind of obsolete
ok so slash dot \. in regex is kinda like slash n \n for newline in python
@NathanOsman @Seth @JourneymanGeek I am so glad you guys are here, you all have been helpful
at one point or another
I understand this regex now..
1? files? found\?
 
1:40 AM
^(\w+)\.\w+f$ kinda makes sense now too
start (find word with any amount of characters) . word with any amount of characters followed by an f end
 
1:53 AM
@NoTime I've run one unironically
need to get it back up actually
I also have a OS/2 vm ;p
 
You need to run the NEXT computer (or is it NXT?)
NeXT
 
that is actually quite interesting... I am around some people who did a lot with older stuff honestly... one of my teachers helped develop Oregon Trail, another worked on the NeXT project.. kinda cool actually
this looks rootkitish
 
 
1 hour later…
3:16 AM
is there a way to kill parens in regex (like escape paren as a character?)
 
\( maybe?
 
I was trying that.. but this is just a sandbox it might not let me
 
well regex is regex...
 
i'm trying to parse through stuff with parenthesis in middle, but I don't know regex well
 
\( is an escape sequence to specifically be interpreted as a (
 
same with \[, \), etc.
 
i get everything, but then I grab parenthesis in between
 
well i don't have your regex string so i am not starting from scratch :p
@NoTime Your "sandbox" is interpreting all regex, it'll interpret \(
 
lets start with that...
(m\w+|f\w+)\W.*\W
the \W.*\W part is the part that needs to be parsed right
I am not sure how I am supposed do this correctly
(m\w+|f\w+)\W(\w+\W\w+\W\d+) but I think I am missing a lot.. and i can't kill that paren in middle
 
Hey @ThomasW. I got to mess with quilt last packaging session...
That was a day and a half of pure pain.
 
 
1 hour later…
4:54 AM
/var is nearly full. After three days of use.
I guess 5 GB wasn't big enough.
It doesn't help that the Ubuntu SDK chroots are stored in there.
...and APT caches all packages in there.
 
I want to delete my old and off-topic this question ; what steps are needed to delete? (@Rinzwind yes, that's not related to Ubuntu)
 
@Pandya at bottom of post
there is a delete link
 
5:13 AM
@Pandya You can delete your own posts if they don't have any answers with a score of one or more (IIRC).
 
6:04 AM
@NathanOsman that has two answer with no up-vote. But I can't delete my question.
 
I cast a delete vote for you.
But at least 8 others must vote to delete as well.
 
Ok
 
 
2 hours later…
7:50 AM
0
Q: something else as important hint about empty-space-characters ... (in 14.04 and 14.10)

dschinn1001Ubuntu-professionals have overseen like Ubuntu-beginners too here, what?!: still there are empty-space-characters making trouble for all sorts of Ubuntu-Installations ?! like in htop there is output: /usr/bin/X -core ?! (one empty space-character too much ?) and after installation of google-c...

 
8:37 AM
0
Q: Does root have access to user data?

pawel_winzigIn case of a Ubuntu distribution (14.4): Does root have access to data of all users?

 
 
2 hours later…
10:22 AM
 
10:44 AM
0
Q: SVN repo on WINDOWS share. How to access from UBUNTU?

user1463822For a long time we put SVN repositories on windows share (worked great as only one person was working on one project). Now, we are moving dev machines away from windows to ubuntu and we need to access those repositories from ubuntu. I did mounted the svn repositories share like this: //win_se...

 
11:20 AM
Possible off-topic IMO: askubuntu.com/q/540527/36315
@muru FIGHT, FIGHT, FIGHT!
hihi
 
 
1 hour later…
12:43 PM
@Seth How so? quilt is what we base all code patches on in Ubuntu SRUs and development (except where changes are inside debian/)
 
1:38 PM
@muru yeah, he is doing it on this one too... askubuntu.com/posts/140246/revisions
which he changed so his wouldn't get closed as a dupe...
 
not found...
 
:( blame your provider.
 
try clicking on the files
 
it starts a download here.
 
1:47 PM
huh, it's fixed now
 
international lightspeed lags ;)
 
Yo
Guys, facing a really strange issue with my touchpad
It moves, I can right click but whatever I do, I can't click
Neither the tap-to-click or the physical click button work
 
the physical button not working is weird. It should not get deactivated by disabling touch click in the touchpad settings.
 
so does it right click when you left click?
or nothing on left click
 
No
It right clicks when I hit the right click physical button
Nothing when I try left clicking
I pulled out my physical mouse, and played around with it
Seemed to have released whatever was getting ti stuck
But very strange nonetheless :|
 
2:04 PM
such hickups are a pain - no chance to debug them.
 
My current suspicion is that my physical mouse went off in my bag, and the left button was clicked
So PEBKAC? Will report if it returns
 
maybe it ignores the click, after it is rapidly pressed so many times?
 
2:42 PM
hello all :)
global mute -_-
 
 
1 hour later…
4:15 PM
Hello fellows!
@PrasadRD o/
 
4:26 PM
hi
 
watsup Mateo
 
@PrasadRD I think you came in as I went to go eat ;)
not much Lucio
seeding the 14.10 isos
 
:O
I think am gonna stay with Trusty
 
I'm still on trusty, just a good time to get my share ratio up ;)
 
hehe, I know your hobby :)
 
4:29 PM
0
Q: Why aren't all the [dependencies] tagged question tagged with dpkg/apt?

BraiamSupposedly, all dependencies question are about dependencies problems with apt or dpkg, yet, less than the 50% (460 out 735 doesn't have it) has either of the tags. Why if every question about dependencies are about either apt or dpkg, doesn't seems to be happening? I feel that is easier making ...

 
Trying out linux desktops!
 
yesterday was the D day on the college
 
4:59 PM
im having trouble finding builds of older kernels on google
im on 3.13 currently but I need to downgrade
i heard somewhere that 3.12 is optimal for my device
but id like the pae version because of RAM issues
 
I think there is a site with the kernel version, let me check..
 
and then the headers to go along with it
3.14 killed my wifi T_T
 
ouch
 
I was running 3.8 before I upgraded but really hacked things up and had to start from scratch. went with 14.04 and ... wifi is spotty
i only see some networks
but my home network it can't see
disabled 8011n but still no go
modprobed left and right
gotta be a kernel issue
 
oh shit, this is hard
I can give you information but it wont be any good for your system
 
5:05 PM
thats ok @Lucio
 
someone else should be of more help than me :-)
 
im barely awake at this point
been at this for hours
going to call it a night
 
yeah, those are situations that we all had been.
take a nap
you will solve it when fresh :)
 
thanks
 
dpkg --get-selections | grep linux
^that will not break your system and will output installed kernels :D
dunno if there is a big difference between 3.13.0-24 and 3.13.0-37 but it's something
 
6:04 PM
Hello
Anyone remember the command used to check something like installation path of a program?
where doesn't work...
@MadaraUchiha You hangout here too?
 
which program_name?
 
@Seth oh right! Thanks dude :D
 
np.
 
6:31 PM
@Seth superhero attacks again! :D
i/ dutch
 
I regret to inform everyone that I will be leaving Ubuntu
After a long time thinking about it, I will be changing my operating system
So I won't be online on askubuntu for a long time
 
:O
:|
:(
:'(
 
Hi Lucio
 
ola luis
 
hola :)
 
6:45 PM
creo q estoy sin palabras
 
yeah sorry buddy
 
palabras inglesas..
 
the thing is
 
don't say sorry
 
I will be moving from Ubuntu 14.04 to 14.10 and will be offline for about 2 hours
 
so i won't be using 14.04 anymore
 
someone pin that
 
@LuisAlvarado those are going to be the longer 2 hours that I can think of right now
 
And won't be able to use askubuntu for 2 hours
hahahahha
 
@LuisAlvarado :(
 
6:47 PM
wait a second
you had been using unicorn already O.o
 
lucio btw do you have a minute to talk about the word of ubuntu on another chat
 
wait, did I get trolled again?
 
yep
 
@Seth yes. Sad times. 2 hours without Ubuntu. What has this world turned into
 
@LuisAlvarado You sir, are the king of trolls! :D
(in a good way)
 
6:48 PM
/bow
user image
2
 
lol
nice horse btw
 
@LuisAlvarado rotfl
@ThomasW. You know, I don't even know. Even DenverCoder9 hadn't seen the error I got before. I finally figured out if I hop on one foot and wave my right hand while rubbing my nose with the left.. everything worked.
 
@Seth well until you show the error... :P
 
in Unix and Linux, Oct 18 at 22:30, by Seth
> bzr: ERROR: An error (1) occurred running quilt: None

The working tree was created by an older version of quilt. Please run 'quilt upgrade'.
in Unix and Linux, Oct 18 at 22:30, by Seth
When I run quilt upgrade I get:
in Unix and Linux, Oct 18 at 22:30, by Seth
> The quilt meta-data in .pc/ are already in the version 2 format; nothing to do
So what I finally did as pop all the patches.. and then it built.
It's possible I was just being stupid..
 
7:10 PM
0
Q: Are questions about the finer points of the linux kernel on topc?

musherMy question is in regards to this question: Packet Traversal through Ubuntu kernel This is a question about the nitty-gritty underpinnings of the linux kernel. While, technically, related to Ubuntu it's not really Ubuntu-specific. this question on meta leads me to think the proper place is not ...

 
jrg
7:31 PM
Darn. Now I get to go and decide if I want to upgrade all my servers or not.
Yeah, they are on the LTS, but I rebuild them (thanks devops!) every month anyway.
Sometimes more often.
 
7:53 PM
@EliahKagan Around? I know you have some experience with C# and Mono. Does this look answerable to you at all? askubuntu.com/questions/539455/…
Looks like "what packages do I need to begin C# development with Mono", but having not experience with this myself I can't say whether that is answerable or not.
 
hasn't been updated in a while.
 
heh, Ghostery blocks it.
 
8:26 PM
@AwalGarg I am everywhere
And nowhere, at the same time.
 
8:53 PM
0
Q: Is it possible to access these directories?

user630190I'm trying to recover data from my Ready NasDuo which is Spark based with a 16kb block size. I've followed another post and successfully mounted the drive using a command like sudo fuseext2 -o ro,allow_other /dev/sdb1 ~/mnt/external However I can't access the directories that store my data. I ...

 
9:03 PM
And now, for the daily funny...
It's my new "Nope" infographic
 
@hbdgaf I found a purple class mod in borderlands2 if you were still looking
 
@Mateo Oh I am. It doesn't matter what it is. I'll trade you anything I have that I can spare and still make the all purples accomplishment. Conversely, I'll give it right back if you have room to hang on to it until I find the other part.
 
what was the other part you needed
 
a purple relic. purple class mod for zero and a purple relic. i have everything else.
 
oh, a reilc, I have a few of the weapons, but I don't think I found a relic
 
9:09 PM
i could use a savegame editor or something, but that sort of takes the fun out of a game and kills it for me. it's like not earning it.
i have the guns, the shield, the skin, the grenade all of that noise. i'm just short the class mod - i'm pulling all psycho and mechromancer mostly - and the relic.
i thought the xp amplifier relic from moxxi would be a purple, but it's not.
in other news, overtime this week... grr.
 
oh, I the ones I have are commando and siren mods
 
heh. i could swap it over to the siren, but i'ld have to level her further to use the other purples i have.
i plan to, and it might be faster than finding purples for zer0. still, it could still go either way. if you're going to sell them in the nearish future, say something and i'll see if there's a swap we can do that makes everyone happy.
side-note: I started one of every class. I'm almost at the end of the zer0 storyline now, so it's more a tagging out everything on the zer0. to get ahead of it, i started one of everything else. i like the commando and the siren more than the gunzerker. idk why, but he's just not as fun. probably because i don't have him far enough for his awesome multiplier to be that usable yet.
awwz, they're arguing over on gaming.se
@Mateo - if you want to earn that constructor accomplishment, my sniper now deals thousands of damage to constructors... so i can nuke them pretty quick.
 
oh, where you destroy it before it makes something?
I'm in lynchtown doing some quests
 
9:26 PM
that or the count. it works as an interrupt too. i have the one you're talking about, but i need to farm the other one a little. the lynchtown ones can be a little fun. i ran from the waves to get most of them though and gamed the engine on the skags mother one. there's a panel you can hide behind in the elevator to take almost no damage. it went against my play style, but running diagonals to stay away from the damage always wore me out before i could finish that way.
 
10:24 PM
@Seth what package were you working on...?
I mean those errors must be WEIRD...
 
Yay! Ubuntu 14.10!
 
@RPiAwesomeness have you been under a rock all day or something...? It was released about 4 hours ago, 5 hours ago officially actually
 
Oli
@hbdgaf Amen. I've had 180 hours of challenging fun from BL2 to date. Golden Keys feel like a cheat but they're just about rare enough not to count.
 
@Mateo
@ThomasW. Sorry, I haven't been using my PC today.
 
10:43 PM
@RPiAwesomeness cool, almost build time?
 
@Mateo Almost, just need the CPU :D
Need to save up a little more & I can get an i5-4690k for $192
possibly
 
11:34 PM
@ThomasW. same package I was working on last time... I just had to change a few things so I could change some dependencies.
 
11:46 PM
@Seth ahhhh
@Seth cool, next time lemme stab the package with a blade blessed by the archangels, it'll make the package comply much easier
is currently in an addiction to Supernatural
 
@Oli yerp. just unlocked ultimate vaulthunter mode. haven't played it at all yet, but hopefully it makes drops nice enough to get the purples i need.
 
@ThomasW. lol, you weren't around at the time ;P
But your answers to my questions are always appreciated :)
 

« first day (1485 days earlier)      last day (3464 days later) »