Ask Ubuntu General Room

LOL.

I needed that.

I see Oli has . . . stepped up his humor game (•_•) ( •_•)>⌐■-■ (⌐■_■)

My puns are the best . . .

and by best i mean worst

Oli

@Serg I'm a dad now, I'm playing for keeps now.

Looks like a good dad to me so far

I am for one not ready have kids. Kids love me and i do love kids but I am far from being adulty and responsibleh

We need the puns to carry us through to Friday.

That and caffeine.

12:18 AM

I've given up cafffeine for a bit

I wanted to give it up for some time, but since i need to wake up early and stay on campus whole day, i kinda need it

@terdon As strongly suggested encrypted passwords were added for the rm password protection here: askubuntu.com/questions/865023/… and here:askubuntu.com/questions/888458/…

12:36 AM

what's the number value for rwxr-xr-x?

oh it's 755

duh

111 - 101 - 101

conver that to decimal

@Zacharee1 or use this:

$ stat --printf="%a -> %A\n" /etc/passwd
644 -> -rw-r--r--

hmm

@Serg is there a way to run a series of command all in one with SH?

like, should I just put a semi-colon between each command?

yeah

OK

cmd1;cmd2;cmd3

12:48 AM

that makes things easier

@Zacharee1 Do you want to abort if one of them fails?

If so, use "&&" instead of ";".

I actually can't use it

because I forgot I was using variables

and I wanted to just run each command from Java

because my app is crashing for some reason

em . . . Java and bash slightly differ, you know

Oh, you're doing Android app dev too?

yup

@Serg I know, but you can run UNIX commands from Java

12:56 AM

how do i get into Android development,guys ? Tesh meh, i wanna be hip with the kids yo

Cool.

@NathanOsman it's not cool

it's hell

@Serg All the hipsters are doing iOS development with Swift :P

but it's so much fun too

ewwwwww

That was sarcastic, don't worry.

12:57 AM

@Zacharee1 yeah, via system() command, right ? So you can calll system("sh -c 'cmd1;cmd2;cmd3'")

Android app development isn't too bad for simple apps.

@Serg no

All you need is Android Studio and a decent phone.

nah, you should totally just do web app stuff on the Ubuntu phone like me ;)

it involves Runtime.getRuntime().exec("stuff");

12:57 AM

@Mateo if only I have the Ubuntu phone

@Mateo I'll write Ubuntu Touch apps when they figure out how to let us run background tasks.

never

Until then, NitroShare is impossible to port.

At least, as an app.

muahahaha

Might be able to get it running in the terminal.

12:58 AM

@NathanOsman and that's it ?

@Serg Well, you already know Java.

@NathanOsman just do it when the app is open

@Mateo That is theoretically possible but who wants to keep the app open for 40 minutes while they transfer their MP3 collection?

public class Hue { public static void main(String [] args){ System.out.println("Hue world"); } }

or you could do a version for the open store, someone did a weather indicator

12:59 AM

how's that ?

@NathanOsman ah yeah...

With Android we can run tasks in the background with services.

I have no idea why this feature is missing from the phones.

open.uappexplorer.com/app/indicator-weather.bhdouglass take a look at this @NathanOsman

@Mateo Interesting. How does it work?

I guess you can run background stuff - just not allowed in the store yet

1:04 AM

Hmm...

Well... if so, it would be fairly simple to port (I hope) since all I'd need to do is write QML wrappers for the NitroShare library written in C++.

That's the theory anyway.

so that is where the open store comes in

1:58 AM

hmmm it got kinda quiet here

It sure did.

And it isn't even Friday.

takes out bag of bacon strips to lure in people

George the Dev

Appears.

O.o i thought penguins only eat fish

RIP tonight's sleep

2:00 AM

Also appears.

Oh my.

Yay, bacon werked

I've been around all the time, trying to get those flipflops and logic gates into my head.

Heh, fun stuff

@ByteCommander It's quite simple really.

2:01 AM

No.

Let me know if you.need help with those @ByteCommander

Not if it's 3AM and you write an exam about them on 8.30AM

@ByteCommander The exam is a lie.

Okay, that was lame.

Life is a lie.

2:02 AM

Hmmm . . . what could i do with them flip flops in python ?

Mmmm. I love tests.

Still having 122 more slides through which I have to dig...

Yikes.

muru

@KazWolfe oh, my process goes like this: Does this question interest me? Then do as much fixing up as I can. Sometimes I have to embed the images just to see what the question really is, in which case I might not do anything further if the question is meh. Sometimes I do embed the images, and then cancel it if I find the question too boring/lazy/etc.

Luckily not all of them contain stuff we need to know and we may take 3 sheets with notes into the exam.

But those notes want to be written first, too...

muru

2:04 AM

Spam or not? askubuntu.com/a/888669/158442

@muru looks like low quality, link only

no affiliation disclosure though

user account is around for some months already, I don't think it's intentional spam, if any

I'd go for NAA at most.

back to circuits

@ByteCommander so what exactly you guys doing with digital circuits ? have you gotten to to state machine and counters yet ?

all kinds of counters and arithmetic circuits

Hah. Got blocked on twitter by the author of cryptocat.

2:10 AM

At least you aren't blocked by the author of clicrypt :)

Sounds like fun but a bit more intense course that i have.

TBH i slept through most of digital circuits 2 class. Still passed with B.

Had to figure out how to do counter design during final exam, because my partners basically took over the lab making for the whole semester /facepalm

Although i like it a lot

im in digital 3 now, having fun with verilog

sigh . . . times go by, we grow . . .

@NathanOsman :)

seriously though, crypto people are weird. They're like the neurologists of IT or something. They do great work but man..

You gotta have the tinfoil hat mentality to be good at crypto, I guess.

@Serg well, the type of university I attend beats it into you in half the time as usual, I guess, because you go work the other half

We got to all that stuff in barely 3 months with about 3.5h per week

2:26 AM

@NathanOsman this is pretty accurate.

2:59 AM

coffee at 8 pm

am i crazeh ?

YES.

:P

Yup.... unless you have bacon with it... then you're normal :p

3:25 AM

well, i have chinese sausage and cheetos with it

i love chinese sausage

That sounds... unusual.

I am a man of weird taste.

nthis room doesn't have enough controversy.

@KazWolfe lately there's been far too much of it

@KazWolfe yes, yes we do.

3:36 AM

HOW DARE YOU SAY THAT! AIRSPACE HAMMERS @KazWolfe

@JourneymanGeek [redacted]

<censored> back at ya.

you guys kiss your mothers with those mouths?! tsk tsk.

i keep trying to swish coffee towards the back edges of my tongue and keep missing . . . somehow i feel like it's going to give me the most taste satisfaction

@Serg certain tastebuds are on certain parts of the tongue. I forget where/which exactly though.

I seem to recall most of sweet being on the front tip, with salty on patches along the back sides..

3:39 AM

No kissing in my culture. And I can ▓▓▓▓▓▓▓! All I want ><

yeah, there's specific regions, and for the most satisfaction out of the food, you need to move it to those regions.

I thought that was a urban myth?

@JourneymanGeek @KazWolfe 你们闭嘴吧 lol

@JourneymanGeek the taste regions ? no, that's a thing

@Serg boo. Half the joke is in the sheer level of redaction. That's semi trivially legible ;p

yeah, it's like bleeps in the movie

Speaking of which, @Zacharee1 have you seen the yesterdays video from Mark ? The one with the FNAF fan game ?

I died laughing while watching it

3:42 AM

@Seth Nope.

But I do [redacted]

also, [redacted] and <censored> are not the same thing.

Well, ugh . . . my HP w196 monitor went nuts

The "Input not supported" bubble doesn't wanna go away

@JourneymanGeek oh, it's culturally forbidden? Well... over here with the Kaz, it's by choice.

(because actually going out to places is hard, and finding someone sane is even harder)

4:06 AM

what would be.a good project to write in perl ?

I need to find something so that i can write a lot of perl code

4:31 AM

O_O

dead spam is dead muahahahh

You gotta be fast to catch Smokey posts now.

yes, one does.

Fast bot is fast.

@ThomasWard probably has some kind of magic enabled ( aka notifications ) for when smokey finds spam

4:34 AM

Must write a better bot...

can I write a chatbot in perl ?

Probably, but Go is better.

@Serg instant notice in CHQ, but yes.

special magic.

but not really magic.

I may or may not have written a chat library in Go.

:D

But still a notification :p

I'm just trying to find some sort of project for learning Perl right now. I'm getting by with writing scripts on U&L or here in perl, but they're quite short and don't quite allow me to go into 150-line range

See, my problem isn't languages. I can learn them. But I need something to drive me into learning. I need ideas and motifashion

4:38 AM

I mean I could make Smokey ping me here

but i don't want to get pinged here as much as I do in CHQ

and I get at least 15 pings a day :P

@Serg How about writing a command sender in perl for sending text to multiple terminals as well as a setting to send keepalive (like a space / backspace) every so often.

@KazWolfe eh, true.

@Terrance basically wall command written in perl ?

@KazWolfe are you saying your mother is not sane? :P

@Serg Kind of, but with a graphical interface

4:40 AM

@KazWolfe btw, did you ever figure out what those new settings in the messaging applet are?

@Serg CSSH (Cluster SSH) can do it, but it doesn't do keepalive very well.

Actually, not at all.

@Terrance actually, that'd be great idea ! Ever since gnome-terminal stopped registering, my scripts that relied on wall broke, so I need something new now

@Serg I would love to see if it you can do it. Tech companies might be interested in it too. :)

Putting that down on my list

Cool!!! :)

4:46 AM

also, while we're on the subject of wall . . . why in the heck gnome-terminal devs decided that stopping gnome-terminal form registering with utmp database is a good idea ? It breaks backward compatability with xterm

Also , I don't know why I misspell compatibility as compatability all the time

I have no idea. I wonder if that is why xdotool has a problem sending characters to gnome-terminal?

could be a different issue. xdotool doesn't deal with /dev/ things, only with X11 stuff

Good point.

Still, I wonder why it stopped working with gnome-terminal then? I can use it for rxvt and other terminals OK.

What kind of specific command you're trying to do ? I'd like to try it out, see if it works here

Let me find my keepalive script I have been running here.

Let me post my script here.

4:54 AM

code formatting is fun

That's why paste.ubuntu.com is better

Yeah, I should have posted it there.

paste.ubuntu.com/24094233

There

@ThomasWard Can you remove my code post here?

Thank you!

:)

Nope.

But secret people can.

@Seth nope, didnt do much tho

Ah, well, thank you to whoever removed it. =)

4:58 AM

damnit metro.

let me read nfc tags

Indeed fails , but works in Terminator

Curious case

Buying from China be like. O_o

muru

@Seth the noodles can be long...

XD

@Serg It used to work fine, and when I originally was doing code like that because Dell iDRACs for some reason will kick you off in 30+ seconds of no activity. So now I use rxvt

5:11 AM

Now, are we talking about Pho noodles or Udon noodles or Jia jiang mian noodles ? Cuz some of them can be long

@Serg they mean the series of tubes the thickness of rice noodles that run the Internet

Mmmmm, Pho!

@Terrance Well, I'll play around with it over the weekend, will see if i can find a solution. So far, searching by PID also doesn't work

@Serg Cool! Thank you!

5:24 AM

will companies please stop being morons...

all i want is my metro card on my phone and that is not easy to do.

@KazWolfe Was that the NFC card?

@NathanOsman yes.

Ah.

MIFARE Plus SL1

I can use a MFOC exploit, but I need at least one existing key, which requires a brute-force

why they can't just let me use my phone natively i don't know.

now, if the sheriff's office would kindly leak the validator APK they use...

that would make my life easier.

I'm a total no0b when it comes to NFC. Can't you just copy the data from the card?

Or does the card play an active role when it's scanned?

5:33 AM

no.

i wish it were that simple

I figured there must be more to it.

it's sorta like the EMV on your credit card chip.

Ah.

sorta.

there's an application running on the card afaik that stores/retrieves data.

plus, the data itself is all encrypted, which is what's causing the issue.

You can't even read the data without the proper access key (the "B" key iirc). You can't write without the proper key (the "A" key)

I have a mifare classic I want to crack, just no hardware :/

5:35 AM

@NathanOsman -- firefart.at/post/how-to-crack-mifare-classic-cards

Curious what you end up using @Kaz

@Seth you can sorta use your phone.

@KazWolfe nobody makes the cracking tools for Android.

@Seth that's why i said sorta.

I wonder if I can intercept the key from the reader in transit...

that wont look suspicious at all lol

I'm not really interested in doing the work needed to cross compile. I kinda doubt the phones NFC chip can handle the continuous use required anyway

5:37 AM

It's a six-byte key.

which unfortunately is still extremely taxing to break.

that's why i'm sorta curious about live intercepting from the fare validator.

or getting a copy of the APK from the sheriff's office somehow

Probably more work than brute forcing it tbh

Tho the SL1 may be stronger than the classic.

it's not.

SL1 is "classic emulation mode"

Then should be pretty easy to brute force

6 bytes, still.

ADA fruit sells the hardware for ~$50 last I checked.

5:40 AM

And i'm not sure the MFCUK works on the Plus

That's still 2^48 iirc, and I'm limited by the speed of the NFC chip.

I'm honestly not sure how Cubic Nextfare works, though. Apparently all cards have different encryption keys to them.

which means there has to be a huge store on every phone validator and TAP device thingy.

which makes no sense

So, there has to be some publicly-accessible data that somehow reveals the encryption keys to the entire card.

(more accurately, anyone with the card should be able to look at the identifier and theoretically look up the encryption keys from a database)

there's a five byte ID that doesn't seem to be unique...

correction, 4 bytes.

so, logic reasons that those 4 bytes govern the encryption keys used by the card.

6:08 AM

the card validation needs to be done offline, so that means that the keyset must be relatively small in order to be easily storable... unless the keys are dynamically generated from the four-byte ID which is effectively unique...

if anyone has any ideas of where to go from here, ping me pls :)

6:24 AM

just saw a.programming quote post on facebook. Quote by Brian Keringhan but Dennis Ritchie.in the picture. Somebody doesnt know how our great Unix founding fathers look like

They are both really smart people though.

At least they didn't get Dennis Ritchie mixed up with Justin Bieber or something.

so yeah nathan... that's nfc cracking and security.

Doesn't sound easy.

But reverse engineering seldom is.

i wonder if i can somehow intercept encryption keys live...

how suspicious would it look to the police if i just started pulling out and scanning a whole bunch of metro cards on a validator with a PCB between the card and the validator?

6:41 AM

Very.

drat.

like i said, if the sheriff's office would be nice and leak that APK...

very

you could put your card in your phone case and scan the whole thing

basically the goal.

@JourneymanGeek Assuming the case wasn't lead :P

that still won't allow for interception...

that apk getting out would be the best bet. second to that, some sort of interception.

6:50 AM

actually, i did notice something interesting when i was in the station today... employees were scanning their phones against a specific spot in the wall.

the phone dosen't need to be a phone

Wat.

and you can do it over a few trips

I might go probe that next trip and see if it reveals anything odd.

6:51 AM

Ooh. Clever.

Also.

You could get off at each stop, scan out, go "oops! wrong stop!", scan back in, and get back on. Nobody would be following you to each stop so it wouldn't look suspicious.

that costs money.

Wat.

you only scan in or on transfers.

Your system is different than ours then.

I know for a fact that the encryption key is static, so once I grab it, it's mine.

6:52 AM

you would get charged each time you scanned multiple cards too no?

The first scan in entitles you to 90 minutes on the system regardless of scans in or out until that point.

@JourneymanGeek yes, but that's multiple cards and gives me more behaviors

@NathanOsman yeah, i've reverse-engineered most of the system i think.

When you first tap onto the network, you get two hours in-network of transfers without anything. These are stored into the card's local memory for quick validation/use.

There's no tap out, it just expires, or it notices you're coming back through the same station/line/whatever you left.

see this, too: github.com/micolous/metrodroid/wiki/Cubic-Nextfare-MFC

I assume it then syncs up to a central server eventually

but the encryption key either has to be stored in each location (based on the ID or part of the ID) or it's dynamically generated from the ID.

there is no way the system can query a central server to look through 4 billion records and return data that fast.

or even query its own memory. It's generation or some part determines the keyset.

I suspect our system replaces all the cards every few years so they can refresh the keys

Our system can't do that. The keys are permanently written to the card iirc.

no no

6:58 AM

Once they're set, I'm relatively confident they can't be altered.

they invalidate all the cards

And because the card is never taken from us...

well, our cards do have an expiration date i think

Literally "we're getting rid of the MKII cards, you can swap it by mid next year"

LA doesn't do that.

There are really old cards out there.

That's why these cards are SL1 and not something that's actually impossible to break

yes, metro cards do expire.

@KazWolfe Tried it on mine - "This card is not yet supported on Metrodroid. Only raw data can be displayed."

7:01 AM

their expiration dates seem to have been written when the cards were bought.

And under "Application: 0x10000" I get "Authentication error".

So, no dice.

NXP has a program... what is it...

play.google.com/store/apps/…

this guy.

it dumps almost everything it can about the card if it's NXP-brand, and i think most cards now are.

this is gonna be interesting.

i'll talk to one of my friends who does a lot of radio stuff. cc @Seth, if you have any ideas.

@Seth I need your help improving my chess game. My younger brother just beat me :(

you can play with me, i suck at chess, so it's basically easy win

Well, I didn't mean right at this exact moment, but sure. I'd be glad to play anyone for practice :P

I'm not an expert either, so it will be a good game.

7:10 AM

you can play Deep Thought, lol

Oh that's right.

I have Chess on my Mac Mini.

Totally forgot about that.

well, ima rest and think more

and wait for my radio hacker guy to get back to me

peace

Goodnight.

sigh . . . i need ideas . . .

Jacob Vlijm

No idea

...but: dupe: askubuntu.com/questions/888728/… (or OT)

7:44 AM

i give up. Probably will have to go to sleep and see if i get any ideas in the morning

Jacob Vlijm

Now that is an idea :)

Q: Remove domain from HPKP preload list

8:16 AM

Good morning ! :)

blade19899

8:33 AM

Yeah, so this happened:

0

So, this is a fun story regarding HTTP Public Key Pinning (HPKP/) - HTST. I was playing with the HTST Always and HPKP preload options, not being fully aware of the consequences. About the same time, I discovered that my "test" account that I used to 'test' on how I can fully secure users, was n...

Q: I installed QT on my Ubuntu system and now I can't find it to make a shortcut

8:52 AM

Whew. Just finished refactoring a 12 KB Java class: github.com/nitroshare/nitroshare-android/blob/master/app/src/…

Fabby

9:13 AM

@Serg upgoated!

@Serg "just because Ubuntu is based on Mint doesn't mean it's the same" Really???

Hi, Xamidovic. The point here is that Linux Mint and Ubuntu are two different distributions and as such can have different settings. So just because you remove Linux Mint from question and "pretend it's Ubuntu" , really doesn't help. In this specific case, shutdown/boot records should be the same as same set of tools is used across many Linux distributions, so you can refer to the duplicate. Hope you understand that distributions differ, and just because Ubuntu is based on Mint doesn't mean it's the same — Serg 2 hours ago

Ubuntu Questions on U&L

10:32 AM

0

The title basically says it all I just want to make a shortcut to start it but I can't find it anymore. And I don't know if this matters but I used the packet installer for installing. Please Help me

linux ubuntu qt

10:43 AM

@Fabby Really ... yes ! :)

10:55 AM

@ParanoidPanda As you still seem to have issues with receiving messages ... I upvoted and answered your latest question -> askubuntu.com/questions/888557/… Hope you like it ... :)

11:05 AM

Good morning all :)

@WinEunuuchs2Unix Good morning to you ! :)

jokerdino

11:35 AM

@cl-netbox I don't remember what thing you are referring to and I am not sure what is it that you are insinuating. Please be direct and clear. I am not really good in de-obfuscating.

Was I overreacting / too sensitive to this user's criticisms in comments? askubuntu.com/questions/888458/…

@jokerdino First of all : good morning ! :) I guess you are referring to the discussion we had yesterday here ... and you may not remember it, because that happened some time ago ... this must be what I was talking about -> chat.stackexchange.com/transcript/message/30294123#30294123

@WinEunuuchs2Unix no ... looks correct ... +1 from me for your answer ! :)

jokerdino

@cl-netbox You and me both know exactly what happened.. Do you really want me to go through them?

Good day to you!

I can also leave this now, if you have changed your mind.