« first day (1662 days earlier)      last day (3296 days later) » 
00:00 - 21:0021:00 - 00:00

12:20 AM
@terdon Why did you convert unix.stackexchange.com/a/198998 to a comment? It's an answer. A wrong answer, but it's an answer, not a comment. That makes the comments under the question confusing now.
 
@Gilles 'Twas flagged as "not an answer" and it read like a comment.
I take it your comments on the answer were before it was edited?
 
The first one was before the edit, the second after
 
OK, I didn't look closely enough and read them to mean that the answer was not useful.
I undeleted it.
 
It's not useful because it's wrong (whatever x-gvfs-hide does, it's not that). But it's an answer. It isn't a request for clarification, or a hint, or a side remark.
Huh, did somebody upvote?
 
@Gilles I often convert too-short answers to comments. Probably a bad idea in that case.
 
12:24 AM
@Gilles you want only the wake up to stop or showing it altogether
 
@terdon You shouldn't. You should convert answers to a comment only if they are not answers but are worth having for some other reasons. Not just because they're short.
@Braiam I want the wake up to stop. I don't mind the showing, but I figure if it's shown, then the application will try to read something.
 
@Gilles I don't convert just because they're short! I will convert something that might be useful but is not really giving an answer.
 
And I hope it goes without saying (famous last words on the Internet), but unplugging the disk and the like are not acceptable solutions
 
Man, you're so picky!
 
damn, I was about to suggest that!
 
12:27 AM
::P
 
1:01 AM
@Gilles if you find a way to modify the udev database and set UDISKS_PRESENTATION_HIDE to 1, I think you could. Forget about gvfs and udisk
 
 
14 hours later…
3:22 PM
0
A: Prevent the Gtk file dialog from listing mount points

derobertThe GVFS documentation has a file about Controlling What is Shown in the User Interface. In short, you have two ways to do this: If it's in /etc/fstab, add x-gvfs-hide as one of the options (or, for older versions of udisks2, comment=gvfs-hide). Configure udev to set the $ENV{UDISKS_IGNORE}="1"...

... not every day you get to answer a question from @Gilles.
@Braiam that's udisks1. udisks2 uses a different variable
 
@derobert dammed udisk manual
 
3:41 PM
time to file a bunch of bug reports! (not looking forward to that, but for the greater good I suppose)
 
@casey did you just upgrade to jessie?
 
@derobert no, I went crazy with gcc 5.1 and now have a (small) list of packages that no longer compile with link-time-optimization (regression from 4.9) and another small list of packages that are broken from changes to the C pre-processor in 5.x.
the no-longer-compile-with-LTO list are all ICE cases, so those go to gcc, the rest go to their respective devs
the rest of my problems are all C++ ABI related, but those are nobodys fault but my own
but unrelated, yes I did upgrade my digital ocean VPS to jessie with no problems of note
 
@casey Well, you or the C++ committee :-/
 
3:56 PM
@derobert perhaps the gcc folks but I can't blame them. A major version bump is a good as time as any to break things. That said, gcc 5.x can emit/link objects against the last ABI but since I have a source distro on this box it doesn't make sense (to me) to mix and match and instead bring all the C++ stuff up to the new ABI
my complaint there is against gentoo actually, as the easiest way to rebuild the system doesn't take dependency order into account when ordering the package builds, so it doesn't handle ABI breakage well
 
I believe the ABI change was forced by C++ standard changes
@casey fun :-(
 
morning.. anyone know a good guide to learn what to be to pass a bash conditional and what [ -eq 1 ] means?
 
@derobert probably, as the new ABI is called the C++11 ABI by gcc
@Darth_Vader [ is test, see man test
 
@Darth_Vader [ -eq 1 ] is an error... -eq is a binary operator, it needs a number on both sides
 
or see the bash builtin for test
 
3:59 PM
help test
as for a guide, you just want one on shell scripting. Any shell scripting guide is going to cover test/[.
 
ah was trying to figure out what [ $? -eq 1 ] meant
 
$? is the return value of the last command run
so that is testing that the last command returned 1
 
 
2 hours later…
6:10 PM
I'm playing with my new landline phone. The 3G network seems very slow. Is that normal? Of course, I can't tell if it is actually using a 3G network.
Hmm, calibre is trying to talk to my phone (currently plugged in and apparently recharging on USB).
Failed to get storage info for device.

Traceback (most recent call last):
File "/usr/lib/calibre/calibre/gui2/device.py", line 86, in run
self.result = self.func(*self.args, **self.kwargs)
File "/usr/lib/calibre/calibre/gui2/device.py", line 467, in _get_device_information
fs = self.device.free_space()
File "/usr/lib/calibre/calibre/devices/mtp/base.py", line 24, in synchronizer
return func(self, *args, **kwargs)
File "/usr/lib/calibre/calibre/devices/mtp/unix/driver.py", line 308, in free_space
No idea what this means, and not even sure why calibre is paying any attention to a phone.
 
7:04 PM
landline with 3G?
@FaheemMitha mtp is a protocol to sync multimedia files with phones (music, ebooks, videos, etc)
 
@casey Oh. Not sure what to do with that, if anything.
Another question: what are best practices for recharging Android phones, if anything? Do I let it completely run down before recharging, or does it not matter?
 
@FaheemMitha your log suggests calibre was trying to synchronize content to your phone via mtp.
 
@casey And presumably mtp was not enabled on the phone side?
 
android has used mtp rather than usb mass storage since 4.0
 
@casey Oh. Does that mean it is enabled?
 
7:11 PM
@FaheemMitha it's a setting, but its probably enabled by default
 
@derobert ok.
 
should give you a notification when you plug it in telling you if its in MTP mode
 
@FaheemMitha yes, it is likely enabled by default and that is probably why calibre tried to talk to it
 
@casey but failed, apparently.
I just plugged it in. Haven't tried doing much. The 3G network doesn't seem to work inside my room.
 
I think the recommendation for lithium batteries is that it's better not to do full discharges, except possibly once a month or two to recalibrate
 
7:12 PM
I guess it is too closed.
@derobert Ok. How low should I let it get? And are less frequent charges better than more frequent?
 
should be an icon up top telling you what cell network its on. Or in settings/about
 
Personally I try to not let my LiON batteries go below 12% and then I charge to full (I put on the charger at night regardless of battery level)
whether that is best practice or not, can't tell you
 
@casey ok
 
@FaheemMitha shallow cycles are better, within reason. Also don't have it live on the charger.
 
@derobert yes there was some 3G icon. But when I go into my room it goes dark (I think). I'm not really familar with how this phone works. BTW, what do I need to do to get a shell?
 
7:14 PM
yes, leaving on the charger needlessly is a good way to kill the battery much faster than normal
 
install a terminal app, or install adb and do adb shell over usb
 
@derobert shalllow cycles means more frequent recharges? It was at 40% just now. It's taking its time recharging.
@derobert Android terminal app? I guess I should try to enable wifi off my router then.
 
@FaheemMitha it'll charge slowly from a computer, wall charger should be much faster. Yeah, shallow means more frequent charges
 
Any recommendations for an Android terminal app? And does the underlying structure resemble unix?
 
you should do that anyway, unless you have an unlimited data plan there is no good reason to use the cell data network at home
 
7:16 PM
@casey I've been trying to use all 7G of data t-mobile gives me now. Haven't managed yet...
 
@derobert Ok. There is what seems to be a wall charger in there, but I seem to be missing a lead. Is that normal?
@casey sure. though this router is kinda crap. I'll try.
 
probably takes a standard micro-usb cable, like the one you're using to connect it to the computer
 
@derobert yea, if you have a good plan it doesn't matter, but that isn't universal
 
@derobert Ok, maybe it plugs into the end of that cable. I'll take a look. Thanks.
@derobert Do you get it bundled?
 
@FaheemMitha its a linux kernel with a non-standard filesystem layout, app isolation via unique users per app
if you want familiar tools, install busybox or a gnu userland
 
7:17 PM
@FaheemMitha get what bundled? the data is part of my monthly plan with them
 
@casey yuck.
 
and if you need root you'll have to jump through some hoops
 
@derobert the data.
 
I use Better Terminal Emulator Pro, but that's not free. There is something like Android Terminal which is also pretty good.
 
@casey hmm. I'll let it be, probably. Don't really see much point.
 
7:18 PM
and if you just want to ssh out of your phone, get juicessh or similar
 
It's just a phone. I might also use it as a camera.
I had a nice digital camera. It died shortly after arriving in India. Really very nice digital camera.
Even the comparatively low-end Android phone I have seems to take quite nice photos.
 
@casey vx connectbot
 
These small devices are quite the engineering feat. I wonder what kind of materials science goes into a touch interface like that.
@derobert thanks, I'll try it. If I can figure out how to get a wireless connection off my router.
yes, I have a wireless thing. But it's turned off. Sensibly so.
 
@FaheemMitha just a capacative layer on top of the screen that can resolve multiple distinct touches.
the technology has had ~50 years to mature to this point
 
I have a vague memory you can do encryption for wireless connections, but I don't see an encryption option here.
@casey I see. I haven't really run into this before now. Regular computers don't bother with it.
ok, I see the encryption stuff.
 
7:23 PM
@FaheemMitha go laptop shopping, that used to be true but not as much these days
at least among the win 8 laptops, touch is a fairly common feature
 
Actually, I was reading about how SIMs connect to the network. Looks like the use a form of pgp or at any rate public key encryption.
@casey Oh, how recent is this?
 
@FaheemMitha a year or two? not sure
 
I don't really keep in touch with the latest gadgetry. Maybe if I travelled more.
@casey Ah, fairly recent then.
 
mass market was probably about the time win 8 came out
 
@casey ok
I wonder if this capacative stuff was also funded by the DOD.
They seem to behind a lot of computer related stuff. Maybe no 100%, but I'd say upwards of 80% of fundamental engineering research related to computers.
I guess the touch alters the local electrical properties of the material. Which means it is probably really easy to fry one of these gadgets.
This little screen here does seem remarkably sensitive, but this might be like 5th gen technology at this point.
 
7:28 PM
In electrical engineering, capacitive sensing is a technology, based on capacitive coupling, that takes human body capacitance as input. Capacitive sensors detect anything that is conductive or has a dielectric different from that of air. Many types of sensors use capacitive sensing, including sensors to detect and measure proximity, position or displacement, humidity, fluid level, and acceleration. Human interface devices based on capacitive sensing, such as trackpads, can replace the computer mouse. Digital audio players, mobile phones, and tablet computers use capacitive sensing touchscreens...
 
@FaheemMitha there should be one. Hopefully WPA2-AES.
 
@derobert Yes, I found something.
 
if the something you found was called WEP, then that is essentially nothing
 
I'm getting a choice between AES and TKIP+AES.
 
AES
 
7:30 PM
That's the WPA/WAPI Encryption field.
Network auth is either WPA-personal or WEP.
 
TKIP has some flaws (and for some reason they're only giving the full name of TKIP+AES, presumably the other is CCMP+AES)
 
WPA
 
oh, and WPA-enterprise. Whatever that is.
 
WPA personal if you want to set up a password. WPA enterprise if you want your next task to be "configure RADIUS, PKI, etc."
 
WPA enterprise is either WAP2 only or WPA only. Or auto.
 
7:32 PM
dont pick enterprise
 
WPA2
 
@derobert ok.
 
@casey Maybe he wants to configure RADIUS!
 
its more work than you could possibly want to do for fun
@derobert maybe :)
 
It is more secure... :-p
 
7:32 PM
WPA personal are the same options. Is the WAP2 a typo?
 
Probably. They surely mean WPA2
 
@derobert ok.
 
WPA2 CCMP-AES is, AFAIK, actually a secure protocol.
Provided of course you use a sufficiently-long randomly-generated key.
 
@derobert that's nice. Now time to set a passphrase.
I usually use sentences.
Sometimes also math statements. But sentences are easier.
 
Remember you will get to type this on the phone. Sentences (at least if they make sense) don't provide that much entropy per word... only a few bits.
 
7:35 PM
There are also beasts called resistive touchscreens.
 
@FaheemMitha yes, but you don't want a phone with one of those
 
@derobert Apparently I can hook a keyboard up to the thing. Haven't tried that yet.
@casey no?
 
@FaheemMitha Yes. They're not as nice as capacitive (less sensitive, less accurate, often much more pressure required), but they work in some situations where capacitive will not.
 
@derobert ok
@derobert like gloves?
or a stylus.
 
@FaheemMitha Yep. Or with plain plastic styluses.
 
7:36 PM
@derobert ok
So are the people who work on this stuff materials scientists or electrical engineers?
 
@FaheemMitha no. if you have ever used a pay kiosk at a store (the kind you swipe a credit card, hit "credit" and sign), note the poor touch response, especially if you use a finger instead of the stylus. those are typically resistive (though the newer ones I'm seeing are capacitive)
 
@casey yes, those aren't very sensitive. you have to kind of lean on them.
 
@FaheemMitha yes, you don't want that on a phone.
 
@casey true
@derobert They do if the sentence is long enough.
 
@FaheemMitha Both. The glass was no doubt designed by materials scientists (etc.) to be scratch-resistant. The EEs figured out where your finger(s) are.
 
7:39 PM
The great thing about a phrase is that even a long one is easy to remember.
 
@FaheemMitha a few bits per word. So yeah, a long enough sentence can.
it's not something you'll be typing routinely, you don't need to remember it. Just write it down somewhere.
 
@derobert Hmm. I figure the materials science people would also need to be involved in actual materials manufacture.
 
Probably. I'm sure there are a lot of different types of scientists/engineers required to make that display.
 
@derobert Ok. Actually, I like sentences I can just remember. I remembered my gpg passphrase after 2 years. Without thinking about it in between.
It is a crushingly banal sentence, but probably nobody would ever guess it.
@derobert i was going to a Debian key signing. Remember me mentioning the release party?
 
not a question of guessing it, it's a question of how many sentences you have to try to brute force it
 
7:42 PM
I only got one signature offer, and even that was not complete. Bummer.
 
weird, was there not a keysigning there?
 
There were two people I was hoping to meet that didn't turn up. However, I'm sufficiently impressed there is even a Debian scene here at all.
@derobert No, just me. Apparently.
 
/me wonders if its ok to set up a bot to VtC . Ok, not really, I'm sure it's not, but I can dream...
2
 
I went over there, and asked about key signing. The sole DD present said, sure, I'll sign your key. I emailed him his key, signed by me, and encrypted, but he has not responded.
 
@FaheemMitha ah, well, give him a few days.
 
7:44 PM
@derobert If the sentence is 20 odd characters, wouldn't it be difficult to brute force it?
My gpg sentence is 23 char I think. Probably better to have no spaces, and I don't.
@derobert I will.
@derobert How hard is it to write bots to manipulate web pages?
 
If it's made of words, its easy enough to grab a dictionary and start trying combinations of words. Even better if you can use grammar rules to try sensical things first.
 
@derobert I think it would have to be an automated attack.
No human is likely to come up with the correct sentence by experimentation.
 
Yep. That's what you worry about. Anyone serious about attacking it will use computers to do so.
 
@derobert sure.
If the NSA has reason to be seriously interested in me, then I'll worry.
 
And if you're targeted beyond automated attack, well, an xkcd cartoon about a wrench comes to mind.
 
7:47 PM
But I am not Julian Assange or Edward Snowden.
Or Glenn Greenwald, even.
@derobert Which one is that?
@Braiam likes to post xkcd here, so why not others? :-)
 
hmmm... /me wonders why that failed to onebox
... that should at least
 
@derobert :-) Not sure if I have seen that one.
@derobert well, if I want to invoke Randall to make my point for me, how about
Dammit, where is my one-boxing?
Hmm, doesn't like https.
 
@FaheemMitha yes, but I know how your passphrase is around 23 characters of common words with no spaces inbetween.
so I need not guess randomly, I can just try every combination from a big dictionary
 
@casey Yes, but you're not the NSA. Are you?
/me is a little worried.
 
no, but you've constrained the problem sufficiently that perhaps I don't need to be
 
7:53 PM
Is spaces between good or bad?
I figure good.
 
That's 4 random words, which he calculates as 44 bits of entropy. That's reasonable for online attacks... offline attacks (e.g., attacking the hash) is much faster. Instead of 1000 guesses per second max, tens of billions per second is reasonable.
 
for example that xkcd is a lot of entropy but if I know it is just 4 dictonary words concatenated, that is a simpler problem
 
@casey that's the entropy he is using: you know it's 4 random words
 
@casey true, but hopefully that information wouldn't come bundled with the passphrase.
@derobert Well, yes, Like I said, I'm assuming the NSA doesn't find me interesting.
Apparently they have computers. Lotsa computers. And they use them. And they don't care about the law or ethics or any of that pesky stuff the rest of us worry about.
 
44 bits of entropy / 4 words means he's counting 11 per word. So he's only using ~2000 common words
 
7:56 PM
One of my UNC classmates took a job at the NSA. He wasn't very nice.
Not fun to think those kind of people are in charge of important decisions.
 
@FaheemMitha That's not the NSA. If the NSA was your adversary, you should assume hundreds of trillions/second, at least.
Probably a fair bit more.
 
@derobert Um, ok.
 
Tens of billions is spending a few bucks with Amazon...
 
hundreds of trillions/second seems a little excessive.
Do they do massively parallel computer cracking?
 
No one knows what NSA does. But getting into the billions of hashes/sec range is well under $1000 now.
 
7:58 PM
But realistically, if they are trying to crack a connection remotely, they don't have the actual encrypted thing in their hands, do they?
 
just ask the bitcoin miners :)
@FaheemMitha anyone driving by can capture all your encrypted traffic and save it for analysis
 
Which they would need to do to do very fast guesses.
@casey Well, Ok, but they would not be trying to attach the encryption directly.
 
thats why WEP is terrible to use, they don't need to save anything and can crack the password without even slowing down as they drive by
 
@derobert only for really crappy password hashing or a very powerful adversary. A decent password hash should take about 0.1s/processor/attempt.
 
Though I don't know anything about crypto. I wonder if people discuss this kind of thing on crypto.sx.
 
8:00 PM
@FaheemMitha lots of stuff on the topic on Information Security
Cryptography tends to be more advanced than that
 
@Gilles Ok.
 
@Gilles well, we're talking WPA2 here. Which uses 256 rounds of PBKDF-2, if I remember correctly.
 
@derobert Something similar to this has been done before. erwaysoftware.com/charcoal automatically parses comments and based on certain keywords it flags them.
 
@Gilles more advanced than what?
@derobert and @casey you seem to know quite a lot about this stuff.
 
@FaheemMitha it's mostly about crypto primitives, not about how to use them to hash passwords
 
8:02 PM
In case you are wondering, it's on github. github.com/Charcoal-SE/Charcoal
 
Is this the sort of thing they teach in US high schools these days?
 
@derobert 256 rounds is too small, but it would still take a powerful adversary to reach 1e10/s
 
@Gilles ok
 
@FaheemMitha not back when I was in high school
 
@casey ok
 
8:03 PM
but then again I taught the CS class I was taking my senior year :)
crypto is math though, not CS
 
@casey more CS than math, but it does involve math
 
@casey Depends on your defn of math. I know some math people who would disagree.
 
Purely theoretical crypto is pure math, applied crypto is both.
 
@Gilles yea, I shouldn't discount the CS as much. The implementation is only as strong as the code
 
@Gilles Well, single GPU SHA-1 performance is over 5 billion/second now, quickly looking it up. So I'm not sure what that'd cost on AWS, but yeah, it'd cost some money
 
8:05 PM
Though I hear they use elliptic curves in crypto these days. And computational algebraic geometry and number theory, more generally.
@derobert what kind of GPU?
@DavidFreitag True. Like Daniel Bernstein.
Though I've no idea what he actually does.
 
@FaheemMitha Radeon R9 295X2 according to a table I found.
 
@derobert With gvfs and udisks, do you know if /etc/fstab is parsed, or if it's the mount options that count?
 
@derobert oh. is that expensive?
 
@Gilles I think it's /etc/fstab
 
I don't understand where it looks at the volume and where it looks at the mount point
 
8:06 PM
@FaheemMitha ~$650 or so.
 
@derobert that's not much.
 
an R290X can achieve 27333.8 MH/s
 
And do I have to restart something (udisks?) or can I test by updating /etc/fstab and then opening the file dialog?
 
@DavidFreitag does everyone know more about this stuff than I do?
 
@Gilles Not sure if you have to restart udisks. You don't have to restart anything (or even reopen the file dialog) if you do it the udev route. (Well, you have to udevadmin trigger, of course)
@DavidFreitag Apparently I need a more up-to-date table.
@DavidFreitag wait, that's 8x of them
 
8:10 PM
@FaheemMitha I would say it's a coincidence. I happen to know a few people who build multi-GPU rigs for various crptyo-related projects.
 
@DavidFreitag oh. I guess crypto is getting to be big business these days.
 
@derobert Right, I forgot that. It breaks down each GPU though.
 
Hmmm
I just tried something I should have tried yesterday
Different users have different volumes listed
 
8:37 PM
It's a bit unfortunate that Mohsen now has edit privs on U&L.
 
8:52 PM
Faheem, were you able to go to the Debian release party ?
@FaheemMitha ^
 
*($^()*$#)($#
 
also does anybody want to see if the tag-addition and tag-edit are good or not unix.stackexchange.com/tags/apt-file/info
filed about apt-file as it is a necessary tool in a sys-admin toolkit but apparently not many people know about the tool .
 
@shirish I did. Wasn't much of a party. You didn't make it, nor did the IITB guy. Forget his name.
Kumar.
 
were you talking about Kumar Appiah
 
Kartik said he would sign my key, so I signed his key and emailed it to him using cass, as #debian-mentors recommended. Though he told me to upload to the servers.
But #debian-mentors made disapproving noises about it, so I used cass instead.
 
8:59 PM
ah yes. I am guessing because people who are in IITB rarely feel the need to venture outside as it is very nice green environment and just next to the lake.
 
00:00 - 21:0021:00 - 00:00

« first day (1662 days earlier)      last day (3296 days later) »