The DMZ

« first day (445 days earlier) ← previous day next day → last day (4733 days later) »

nealmcb

00:00

@Gilles But coping with packagekit (not an application, but part of the OS infrastructure, IIRC) involves big security decisions. I'd say it is more like these: "is the information in the dialog actually reliable?" "How would I decide if a given supplier is worth trusting?

And "how should an OS handle this sort of situation?"

Gilles

00:28

@nealmcb that's an interesting question too. I don't think it's what the asker was after.

In fact that question could well be split into our two interpretations

@RoryAlsop What do you think of clearing the migration history and doing a bit of editing?

1 hour later…

minopret

01:41

Thanks for taking an interest. I primarily intended to ask in this order: a) whether the given information is sufficient for someone more savvy than I, and b) if not, where do I get the remainder of the needed info.
I try to make my questions specific, relevant to the venue, and relevant to an actual practical problem that I articulate. It's not always easy to write a perfect question.

Evidently I'm still trying to figure out what I know that fits in set (Sec.SE - union{x in SE: x != Sec.SE}).

4 hours later…

nealmcb

05:19

@minopret Howdy! What I think we would really want to start from is a statement of the problem that packagekit faces. I.e. the use case(s) that users are faced with, and what the packagekit system knows, and what policy constraints they face.

That would be a great question for sec.se

Stack Exchange

Dot Tumblr Dot Com, on the other hand, would be an awful name for a band, if only because of how hard it would be to direct people to your band's website.

nealmcb

05:59

@minopret ... though it might be overly complicated - not sure...

3 hours later…

Rory Alsop

08:54

@Gilles @nealmcb - can do.

3 hours later…

Ninefingers

11:42

@RoryAlsop Hello, have you see the trello board for the superuser blog? It's awesome! We should get one :)

Rory Alsop

@Ninefingers I don't as yet know anything about Trello. Can you point me at this board and I'll have a quick look

Ninefingers

12:00

@RoryAlsop You'll need a login and to be added, I think. Don't think I can do that :(

AviD

@RoryAlsop but you shouldnt have any problem just seeing trello in general - trello.com

its basically a glorified todo list, but very nice. I use it for some of my projects.

@Ninefingers can you grab a screenshot? so we have an idea how they use it. even if you black the details...

Ninefingers

@AviD yeah probably. They basically use it for scheduling, organising who's doing what etc.

v nice.

2 hours later…

Rory Alsop

13:43

@AviD @Ninefingers - having a quick look through their intro/demo page. I hadn't heard of it other than seeing there was a lot of SE traffic with trello tags that looked like helpdesk stuff - so it went in my ignored tags list :-)

Iszi

14:05

I'm thinking this may need to go to Super User or Server Fault but there's also some quality issues that should probably be worked out first...

Q: How to configure Routing, VPN and masquerading in Windows?

i need to link a branch office to a new subnet. I'm wronging something... i try to be more specific: i have this object virtually connected as follows: GW_U ---- S-OpenVPN ----- OpenVPN-C ----- GW_S where: GW_U: main office gateway with linux OS on whicht here is a the VPN server (OpenVPN-...

Iszi

15:03

Just had this thought. Had to share...

What's another term for a burglar?

A Homepwner.

Rory Alsop

15:56

@Iszi Oh dear :-)

Ladadadada

16:11

@Iszi I'd vote for sending that one to ServerFault.

Scott Pack

I agree. They're asking about using a PTP vpn tunnel to connect offices. Definitely a professional IT question.

Ladadadada

Speaking of which... is it worth having ServerFault as one of the default choices in the it-doesn't-belong-here flagging options?

All we have now is meta.security.se.

Scott Pack

@Ladadadada We've been trying

Q: Building our own migration list

Now we've graduated from beta, wouldn't it be time for us to set our migration list? I would propose: meta.security of-course superuser serverfault webapps math / theoretical.cs / stackoverflow Does the moderators have some feedback on this in term of statistical of previous migrations? Th...

feature-request support moderation migration flagging

Iszi

@RoryAlsop Not that I expect it'll help rush things, but could you give us a more current 90-day stat report for migrations?

Rory Alsop

17:03

@Iszi 13 to SF, 10 to SU, 4 to Crypto, 4 to U&L, 3 to Webmasters, 3 to SO then 1 apiece to meta sec, meta SF and askUbuntu

SF has made a big jump up inpopularity

Iszi

@RoryAlsop Meta SF? I'd think if it doesn't belong in Meta Sec it should go to Meta SE.

Rory Alsop

@Iszi interesting, eh. I have updated the meta post with everything down to SO and Webmasters - didn't bother with those final three

Iszi

Great quote here...

I asked, 'How do you know all this programming stuff?'

"His reply: 'It's very simple. You make mistakes. You learn from your mistakes. You repeat for 30 years.'

http://blogs.computerworld.com/19786/infinite_loop

Iszi

17:46

Is anyone going to SANS this year? Got a couple guys in my office that are going.

2 hours later…

Iszi

19:48

How is it I'm only half-way to [badge:fanatic]? Surely I should be much closer!

Aww... No Markdown love for badges?

Gilles

20:26

@minopret I apologize for starting this

I saw three parts in your question: one that's IT Security material, one that's Unix and Linux material, and one that's a bug report.

How to make the decision of whether to install a package: security policy → IT Security

How to find the information for an informed decision: system usage → Unix and Linux

Change PackageKit to display the information → bug report

I thought the U&L part would benefit you the most, so I suggested the migration

I should have explained this in a comment under your question, instead of in chat

And not suggested the migration to a moderator, but to you

Iszi

@Gilles I think the question of what information is useful for the decision is still ITSec. May as well just keep that bit over here. We do just a little bit of system usage here as well, when it's really pertinent to security.

3 hours later…

Ninefingers

23:30

In case anyone from here is interested: