Root Access

Journeyman Geek

14:03

lol

sorry, researching my next project ;p

trying to work out if I can use hostapd with an existing dhcp server

I'm probably going to revive my old atom box as a download box, and will likely end up setting it up as a wifi AP for my remaining legacy gear.

no one seems to run things that way though

ahh

I can bridge it, excellent

Ash

@OliverSalzburg happy birthday dude :)

Oliver Salzburg

@Ash Thanks :)

Journeyman Geek

cyberciti.biz/faq/… reading the comments makes me almost lose the will to live.

Boris_yo

How do you extract (not convert) audio from video file?

Journeyman Geek

"T tried to use vi editor but it hard to handle
every key i pres it change another line on the file
If you can explain how to make edit and save the line using vi cmmand"

Ash

14:12

I always wonder why your name shows up in blue @OliverSalzburg

Journeyman Geek

he's a mod

mine's in italics cause I'm a owner.

mods anywhere will be in blue, IIRC

Fitzroy

@JourneymanGeek Not sure whats worse - that or a million comments all saying 'awesome'

Journeyman Geek

@Fitzroy: If you don't know that nano exists...

vi is nice and all but oh so 70s.

nano is probably a better option for someone slightly clueless ;p

Braiam

lol, vi is too complex if you are newb, vim is more sane

Oliver Salzburg

@Ash What @JourneymanGeek said, I'm a mod

Journeyman Geek

14:17

just use nano. The hljk key movement system is kinda esoteric

Ash

@JourneymanGeek It must be cool to be the owner of a channel.Isn't it ?That too , for root access.

"I created this place , down here I am god"

Journeyman Geek

lol

naw

I got it because a previous owner drifted off and The System decided I spend a lot of time here ;p

I wasn't even appointed like @Bob

Fitzroy

@JourneymanGeek Haha. Most people I've spoken to, the first tme they used vi, they really didnt have a clue what they were doing and had to close their SSH session in order to exit the darn thing.

Journeyman Geek

@Fitzroy: precisely

nano is the second easiest console based text editor I have used

Braiam

@JourneymanGeek after emacs?

Fitzroy

14:20

yeah, nano is decent enough

Journeyman Geek

@Braiam: I said text editor

the easiest was, wierdly enough, edit.com from dos

Ash

@bob thanks for the song. I wanted it badly.

Bob

@JourneymanGeek that was somewhat random :P

Ash

so you used soundhound ??

Fitzroy

I downloaded a Nano port for Windows once, but it used Unix line endings, not much good if you need to open files in Notepad later.

Braiam

14:23

@JourneymanGeek emacs is a "text editor"... mainly

Fitzroy

@JourneymanGeek The only choices in Windows are edit.com or edlin really.

I did use something called Brief editor a few years back

Journeyman Geek

@Fitzroy: generally in windows, there's little need for a console mode text editor

Bob

@Ash ya.

@JourneymanGeek vim vim vim!

Journeyman Geek

also, there's no edlin/edit.com in 64 bit windows

Bob

(I just use the arrow keys :P)

Journeyman Geek

14:26

@Bob: point being really that there's more than one way to tree a cat ;p

Bob

@JourneymanGeek ...I'm pretty sure those comments gave me cancer.

!!learn cancer <>https://i.sstatic.net/iLK7z.jpg

ChatBot John Cavil

@Bob Command cancer learned

Journeyman Geek

=o0

yeah

precisely ;p

hm, setting my AP to automatic mode was a bad idea

I'll set it back to the 'best' channel according to inssider tommorrow

Ash

!!cancer

ChatBot John Cavil

Ash

14:31

@JourneymanGeek so main problem with installing mac on pc (hardware) is system management controller, some audio/video firmware ( in brief ) ? other than kernal playing cool with the overall system ?

Journeyman Geek

@Ash: oh, the reason you can't 'just' stick an OS X disk and install OS X is the SMC

Fitzroy

I would propbably use console editors in windows if powershell remoting gave you a proper interactive shell (like ssh does)

Braiam

> I intend to build a AP based upon a USB wifi adapter

D:

Journeyman Geek

the reason you are going to find a system you managed to get OS X installed on difficult to get working just right without lots of research is the drivers.

@Braiam: lol. Actually, quite a few people use a raspi for a ghetto AP

Braiam

yeah, but raspi is not a usb dongle wifi adapter :(

Journeyman Geek

14:34

lol

you can use a USB wifi adaptor and a general purpose computer with the right hardware to do the same thing your router does ;p

but using a lot more power

hostapd is nice cause it lets you use quite a few common wifi adaptors as a way to set up a 'infrastructure' AP at a pinch

(that said, many ralink adaptors do that and simultaneous AP/client mode out of the box in windows)

(yes, these folk have odd english ;P)

Bob

@JourneymanGeek not really

wifi client adaptors aren't designed to be APs and typically don't perform as well

even more so for USB ones

Journeyman Geek

@Bob: I have one 802.11 G only device left

And the 'ap' is practically in the next room

(yeah, the other alternative is to get it on a wired connection but that has its own set of problems for me)

this should let me use a broader wireless band if I wanted to

(yes, I am entirely aware this will suck. Nonetheless, its something I want to mess with ;p)

Bob

14:51

@JourneymanGeek upgrade the device?

Journeyman Geek

@Bob: its my dad's so...

not happening.

Bob

...

just swap out the wifi adaptor while he's not looking

Journeyman Geek

lol

under VERY serious consideration

but iirc thinkpads have a wireless adaptor whitelist

so I can't just buy a random PCIe card and expect it to work :/

Bob

@JourneymanGeek ...joy

I'm having fun with HP's whitelist right now :(

Journeyman Geek

yeah

since I'd like to have a 5ghz capable adaptor ;p

Bob

14:55

ordered an Intel card. it'll be here in a week, and I just have to pray that it works

@JourneymanGeek pretty much :P

Journeyman Geek

(though, when I get a job, I'm likely upgrading again, especially if its not in singapore. I doubt bringing nyx along will be cost effective, so I may end up getting a gaming laptop of some flavour)

Bob

...I forgot what nyx is :P

Fitzroy

This is probably better suited to the ubuntu room - but it's a bit dead in there right now... When setting up new ubuntu servers I like to give every admin their own user account. My concern is that if all the accounts became locked-out or everyone left the company, etc, there wouldnt be a simple way back into the server. It seems to me to be a good idea to have an account perhaps with the password stored in a safe place for those kinds of situations. What do you guys do?

Bob

also, I did kinda end up stealing your naming scheme :D

Journeyman Geek

lol

nyx is my main gaming system.

Bob

14:58

@Fitzroy worst case, you can just boot off a livecd and overwrite the passwords

remember, physical access = full access

Journeyman Geek

@Fitzroy: Have a 'common' backup account

Bob

(unless you have full disk encryption, that'll provide some measure of protection)

Fitzroy

@JourneymanGeek thatswhat I'm thinknig. is that something you do?

Journeyman Geek

and, while its oldschool, write down the password, and lock it up

Fitzroy

@JourneymanGeek again -thats also something I'm condering. Storing the passwod in the safe.

Journeyman Geek

14:59

@Fitzroy: alas, if a bus ran me over, no one would know what anything does here. Its best practice according to my information security management classes.

Bob

also, @Fitzroy, how to deal with the sole admin leaving is a bit more of a SF question

Fitzroy

@JourneymanGeek Is this somethinb that you do yourself?

Bob

though all admins leaving at the same time is.... weird

Journeyman Geek

@Fitzroy: I would.

however, my current situation is odd.

Fitzroy

@Bob Sorry - just thought I'd see what you guys think being such a friendly lot...

Journeyman Geek

15:00

so, there's no system that really needs it

Bob

3

Q: Store office passwords safely

I have a customer with various computers and hardware devices that have admin passwords. There's no active directory so each computer / device has its own password. I would like to store those password with a secure system on their LAN. Even an excel file with cipher would be ok but I look for ...

password

Journeyman Geek

I'd also rotate the password every so often

Bob

@Fitzroy oh, no problem asking here

I just mean you might want to search around there

Fitzroy

oh I see, yes, worth trying in SF as well.

Bob

5

Q: Do you use the same root password for every device?

This is kind of related to Password Best Practices but more specific. Do you use the same root password for all the servers in your organization? For within a class of devices?

password

@Fitzroy careful - their chatroom doesn't really like random questions

unless they know you, I suppose

Journeyman Geek

15:02

@Bob: the locked up password has a few advantages - its nearly bus proof, you can go do a PAL style split password, and is 'simple'

Bob

47

Q: Best Practise and Solutions for Sharing Passwords

We have various passwords that need to be known to more than one person in our company. For example, the admin password to our internet routers, the password for our web-host, and also a few "non-IT" passwords like safe codes. Currently, we use an ad hoc system of "standard passwords" for low-v...

password

Journeyman Geek

its also massively low tech, which is good and bad ;p

(and yes, this is along side per user passwords with appropriate permissions)

Fitzroy

@Bob yea - i thought I'd be 'safer' asking in here. Plus it's not the most well constructed question. Just curious to have a bit of real word experience from others...

Journeyman Geek

@Fitzroy: can't help with real world experience. I've been doing this in school for the past few years ;p

Bob

@Fitzroy What kind of system is this?

Personal? Large corporate?

Really, end of the day, you can't just expect all admins to run away

document everything, yes

but someone trustworthy must hold the password and point out the documentation to any newcomer etc etc

if you have 100% personnel changeover at once (how the f...), then you're going to have problems no matter what you do

locking the password in a safe is useless if no one knows how to open the safe

Journeyman Geek

15:06

@Bob: run away, no. But the idea is that if there's an emergency, you can get access to the system, even if the 'right' person is not there

Bob

@JourneymanGeek then have a backup admin account with the other person knowing the password

Journeyman Geek

@Bob: oh, you always have a back up person too

Bob

@JourneymanGeek general rule is, don't write down the password or share it if possible - it's preferred to have separate accounts (each capable of resetting the other)

Journeyman Geek

@Bob: wierdly enough, not always true.

Bob

because once you share a password, you must make sure everyone has the most recent version if it changes, and you must have some way to revoke/change if someone goes rogue

as far as managing access goes, it rapidly complicates matters

Journeyman Geek

15:09

@Bob: the 'backup' account is independent of the regular user accounts

Bob

if you were going to share a password - don't - just create another account with a new password and give them the password

Journeyman Geek

ideally its changed by one person who then updates them, but they wouldn't be used unless the excrement hits the air impeller

Bob

@JourneymanGeek don't have a common account, just create an account for, say, your boss and give them that password

that becomes a backup account

as far as backup accounts go, it's the same thing

Journeyman Geek

@Bob: until your boss leaves or gets promoted up and no longer needs access.

Bob

as far as managing accounts go, it makes things a lot easier

@JourneymanGeek then you delete the account. easy.

easier than changing the password and having to update anyone else who needs to know it.

Journeyman Geek

15:10

@Bob: then you have no backup ;p

Bob

deleting one account would not affect other backup accounts

@JourneymanGeek you can have more than one

Journeyman Geek

@Bob: thats why the safe. no one needs to know it all the time.

Bob

@JourneymanGeek ..that makes no sense

if it's in the safe, then people need to have access to the safe

if they have access to the safe, then they can look inside at any time

and what if the safe is destroyed? whoops.

Journeyman Geek

@Bob: well, thats the worst case scenario.

Bob

give everyone their own accounts, put them in a 'backup' group if necessary

Journeyman Geek

15:12

(but yeah, this is exactly what we're told to do)

Bob

then that collection of accounts is your fallback

there is no advantage to having a single account with the password in a safe over having one account per person (who would've had access to that safe)

if all those people disappear? you lost access to the safe anyway

if one of those people go rogue? it's better than a common account/safe.

it's also better for auditing - you can know who performed an action

so - unless you can think of an advantage to the single account/safe over multiple accounts, I just don't see it.

Journeyman Geek

@Bob: from memory (and its been a while), the 'ideal' was to have each person having control over what he needed, and act as the back up for a second person. The 'safe' was specifically for situations where both people were impossible to get hold of

Bob

@JourneymanGeek but who has access to the safe?

Journeyman Geek

@Bob: I don't remember ;p

Bob

give those same people individual accounts with equivalent access on the system

Journeyman Geek

15:17

but there's probably a way to audit that

Bob

then it's the same thing, as far as access goes

Journeyman Geek

@Bob: problem with that is it prevents compartmentalization of data

Bob

unless your safe is buried in a nuclear bunker with armed checkpoints, individual accounts is going to be better for access control

@JourneymanGeek and what prevents one of those with access to the safe from logging into that single account?

Journeyman Geek

@Bob: in theory? Not much - but that would be a giveaway something is wrong

Bob

yes, give each person control over what they need - but anyone who should have access needed as a "backup" should also have that access

you could create a second account for them if you wanted to segregate that

@JourneymanGeek once you go "common account", you've utterly broken any compartmentalisation.

Journeyman Geek

15:20

and blah, I'll need to grab my textbook ;p

its been a while since I looked at this.

Bob

compartmentalisation by common account just... it's a paradox, really

do something like Windows does

Journeyman Geek

oh, thats not compartmentalisation

its for when bad things happen (tm)

Bob

have a 'normal' security key, and an 'elevated' key "for when bad things happen"

Journeyman Geek

and I might be remembering it entirely incorrectly ;p

Bob

e.g. userA with normal access and userA-backup for emergencies

with only those who had access to the safe in the other scheme having a -backup account

Journeyman Geek

15:22

yeah

Bob

it might sound messy, having more accounts

but not if you group them properly, and not in large networks that have hundreds of users anyway

Journeyman Geek

well, if you had centralised account management, less so.

Bob

it's still going to be better control and redundancy (I'd say, cleaner) than a single backup account with a password locked in a safe -_-

...though I'd probably not bother if it was under five users anyway

depends on circumstances, in that case

Journeyman Geek

lol

it always does.

if you had 5 users with exactly the same access control requirements....

Bob

there is still not any scenario that a central account is better

Journeyman Geek

15:26

you'd not have any issues

Bob

perhaps easier if you don't have a proper admin who knows how to add accounts without making a mess

(and I'm saying this as a guy who just logs straight into root on my VPSes...)

then again, there's really nothing I care about on them, so bleh

Journeyman Geek

(honestly, as the sole computer guy here, and in a family business... I just happen to have everyone's password memorised ;p)

Bob

heh

similar situation in one place, all passwords in a book :\

but we're moving to a domain within the next month, so that should get better

Fitzroy

15:47

@Bob @JourneymanGeek Sorry, was AFK, have just read your discussion. Some interesting ideas there. Thank you both.

Journeyman Geek

o0 kickstarter.com/projects/thorium/thorium-core-cloud-desktop

Lews Therin

Guys I need your help.

So I am connecting my monitor to the laptop

It is a widescreen monitor with 1920x1080p resolution

Connected via vga to hdmi converter.

But I am get worse graphics or display on this monitor.. compared to my laptop

Any ideas? I don't think the converted should screw things up

Bibhas

Assume the converter is broken, test it out

BTW, what do you mean by "worse graphics or display"

what laptop?

Lews Therin

16:02

The color seems washed out on the external monitor.

Laptop is custom built.

For the example the screen saver I am using is a dark blue on the laptop. But light blue on the external monitor

I will see if I can screen shot it

Bibhas

check color settings of the monitor?

Lews Therin

A slight improvement. But not as sharp as I would like

Lol.. no difference in screenshot. Not surprised

ACER V223HQV monitor

forums.cnet.com/7723-32544_102-573568/…

Same problem

Braiam

> In a black and white world, there is a building with black people and black animals. I am the only person around that is white

Gowtham

16:30

wow, just wasted 3 hours trying to help my friend who repeatedly flashed the wrong version of SuperSU and told me it wasn't working @_@

Braiam

@Gowtham what a good friend you are d:

Boris_yo

18:31

Wrap him up!

Bibhas

@Boris_yo why do people always cut the after-impression? I'd have loved to watch the reaction of the cat. :P

Oliver Salzburg

Seems popular

Bibhas

Oy, who changed that thing on it's head. It was red!

I wonder what would have happened if it were a dog

Oliver Salzburg

Different cat I guess

Bibhas

18:47

maybe. wrapping paper is also different.

allquixotic

@OliverSalzburg I saw that you +1'ed RunKeeper on Google Plus

you use it?

Oliver Salzburg

@allquixotic I did yeah

allquixotic

any good?

Oliver Salzburg

But now I do my workouts indoors :P

Bibhas

5

Oliver Salzburg

18:49

@allquixotic Yeah, it's fun

allquixotic

ohh

Bibhas

I use Strava. Doesn't show the calorie burnt stuff, but good.

allquixotic

I got a Withings scale for Christmas... it has no idea how heavy I am... the readings have varied by more than 50 lbs (22.5 kg)

Braiam

@Bibhas O_O

> forcing all its children to be wrapped in a box

I can imagine the misunderstanding that can cause...

allquixotic

LOL

I'd star that 10 times if I could

Bibhas

18:52

thank god didn't see anything lilke "Removing parents from children" :P

Might have called 911

allquixotic

@Bibhas wouldn't it usually be the other way around in HTML, anyway?

Bibhas

Right

Braiam

@Bibhas you know what is the scary part? is pausible that s/he did

Oliver Salzburg

@allquixotic I got a gym membership about 2 months ago. I feel like it is much more structured activity than what I did when I was trying to run. Given that I didn't really get any physical activity for a looong time, it helped to have professional support

allquixotic

!!is Endless Space any good?

ChatBot John Cavil

18:56

@allquixotic Of course not

allquixotic

thanks for being my own pocket metacritic Cavil

Braiam

I think that if it's for Cavil, you don't buy anything (not even food)

!!is possible to buy good and cheap food in my country?

ChatBot John Cavil

@Braiam But of course

@Braiam Yes!

Braiam

@ChatBotJohnCavil LIAR

allquixotic

lol

!!is it a good idea to eat Pringles when you're trying to lose weight?

ChatBot John Cavil

19:03

@allquixotic I'm not so sure anymore. It can go either way

Boris_yo

"Bots now account for 61% of webtraffic"
http://www.bbc.co.uk/news/technology-25346235

Oliver Salzburg

!!is it true that your kind is responsible for 61% of web traffic?

ChatBot John Cavil

@OliverSalzburg All signs point to yes

Oliver Salzburg

Ha!

Confirmed

slhck

19:27

Oh, a late happy birthday, @OliverSalzburg!

Oliver Salzburg

@slhck Thanks :)

slhck

Aw, gotta go, Jurassic Park is on :P

(Curse you, Christmas TV programming)

Braiam

... Jurassic Park............................................................... WTF?

allquixotic

!!is steam down?

ChatBot John Cavil

@allquixotic Frankly my dear, I don't give a dean

allquixotic

19:36

damn it Steam

Sorry

The Steam Community is currently unavailable. Please try again later.






Error 503 Service Unavailable

Boris_yo

!!is wikipedia down?

ChatBot John Cavil

@Boris_yo Certainly

Boris_yo

@ChatBotJohnCavil You are lying!

allquixotic

oh, I know why steam is down... they're giving away L4D2 for free today... all the poor people with no money are rushing at it and effectively DDoSing Steam's servers :D

Lews Therin

19:53

Steam is also down for me :D

What a coincidence. Just talking it about it with my mate :L

Boris_yo

!!urban l4d2

ChatBot John Cavil

@Boris_yo l4d2 The second installment of Left 4 dead, made by valve... characters include Rochelle, Coach, Ellis and Nick

Boris_yo

@allquixotic Why would people love so much this game?

Oliver Salzburg

20:09

@Boris_yo You get to shoot things

Boris_yo

@OliverSalzburg Duuuhhhhhh

Michael Frank

20:21

heh... was just talking with a friend about why Steam was down.

Lews Therin

Still can't access it :(

But L4D2 is downloading finally :D

Boris_yo

20:42

How do I build fax server?

Oliver Salzburg

21:01

@Boris_yo Install the Fax Server role on a Windows Server machine

Michael Frank

brb installing Fax Server on my server just for the hell of it

AGirlSaidMySmileIsCute

21:25

What are the machines called that power the internet?

Michael Frank

Power stations?

slhck

Tubes

@Braiam Why, what's wrong with that?

That movie even has a reference to UNIX.

DragonLord

@slhck: Just ordered my Sager NP8255-S (Clevo P157SM), and it's a real powerhouse

Core i7-4800MQ, GeForce GTX 780M, 8 GB RAM, Windows 8.1 Pro

It's about time. My HP laptop is more than three years old and has a lot of trouble with newer games.

slhck

21:41

Never heard about that brand, but it looks nice

allquixotic

except for the low RAM, that is really good for a laptop... seems a lot of people are ordering laptops with that CPU lately... of course, if you're in college and you have that kind of beast with you all the time, it's practically begging for you to play games instead of homework, and that temptation would totally defeat me... which is why I had a gaming desktop and an ultraportable laptop in college :P

DragonLord

8 GB is enough for most applications, and it's easy to add more

They say battery life is not that bad, it gets about 3 hours of web browsing thanks to Nvidia Optimus

allquixotic

I practically had to fight other people for outlets in college just to plug in my laptop, so I learned that 3 hours isn't nearly enough... went with the longest battery life ultraportable available at the time... that was several years ago.... today I'd probably be able to go all day without plugging in if I got something like a Surface Pro 2

DragonLord

@allquixotic My current laptop gets about 3 hours, and it really isn't an issue for me

@allquixotic The system takes 32 GB of memory, and while two of the memory slots require removing the keyboard to access, it shouldn't be too hard to do from what I can tell looking at the service manual

allquixotic

22:59

RIP Steam -- tons of great games, on sale, that nobody can buy :D

Transcript for