anyway, i'm out for now, bye folks

@Videonauth depending on exactly what you need, yes. A few options. Check out the summaries here, and then I can tell you specifics:

sectools.org/tag/vuln-scanners

well im actually hardening (or at least trying to find misconfigurations on my raspi 3 server I'm running here)

but thanks for that link just having a look

@KeijoDPutt Hey! This is a family-friendly environment. No weird crap vimisms allowed!

:P

@Videonauth useful order to look is cvedetails.com for the specific version you have (to spot known issues with revisions) and then go for config specifics

at the bottom of that page there is a link to fuzzers, which is another good option for finding config specific problems

eeek

sectools.org/tag/fuzzers

an outsider mod

Just visiting :-)

@RoryAlsop will do as far i have looked at the vuln scanners there seems to be only one which is free, OpenVAS but not sure how good it is, will give it a try for sure

@Videonauth our chat goes through phases of busy and quiet, but if you have specific questions about use of tools, there's always someone who can help

just want to poke the server here as much as possibleto have at least a good sleep again :))

@Videonauth I have used OpenVAS in the past, but not for a while - for the past few years my employers have used the top commercial ones (waaaay too expensive for what you want to do)

even thou i know that you never be 100% secure

@Videonauth Burp has some fuzzing functionality that may be useful for you

yeah i guess nessus and co.

@Videonauth nessus is incredibly cheap for a company. I wish we could get away with using it

just looked at some pricings and this is insane tho

@Videonauth we spend many hundreds of thousands a year on this sort of thing

how would someone supposedly get a food in this industry

@Videonauth lots of routes. I came from network and system admin. I have folks from telecoms, MS admin, Notes admin, web dev, you name it

hehehe well im a full time hobbyist

but this since 1978 :p (this time i was 6 years old)

im conctantly fiddling with programming languages, coding, and well servers :)

That works too. The challenge that I was discussing on twitter yesterday is that either you come in new from uni (good degree but no practical sec experience) or transfer from somewhere else with seniority to a junior sec position (and have to suffer salary drop) which is why we have a challenge getting folks into the industry

Being a good coder really helps in the tech end of infosec

especially if you regularly review code

Check out some of these if you are interested:

security.stackexchange.com/questions/tagged/…

going to NR 5 Mode: Input Input Input :D

Of the years, though, I have hired people with backgrounds in Biology, Music, PE and others - but a passion for hacking (in the original sense of the word - understanding how something works, taking it to pieces, improving it etc) is essential

yeah im from a mechanical background job wise

or was, meanwhile pensioned because of health issues, but sick of living on the low end of everything

so something has to change

@Videonauth well, infosec will not make you a millionaire (unless you take the criminal side...) but it definitely pays the mortgage and bills, and is not going away in a hurry

better as having to live from 370 euros pesions per month for sure ;)

and for sure better as sitting here all day long with an age of 44 and doing nothing but learn, better learning and having income too

@Videonauth oh yes. A whole lot better than that :-)

actually i spend my days with coffee and poking my computers and/or VM's

setting up servers, sometimes wisely soemtimes in the most naive was and poke them untill they break

chmod -R 777 /*

:D beside coding and watching/reading tutorials

@Zacharee1 thats even better than alcohol :p

its a SOLUTION for disaster

... askubuntu.com/questions/858783/…

its really time that 12.04 reaches EOL

soon

April

so one LTS release goes EOL as soon as a new version of Ubuntu comes out?

wait no

hmm

how to phrase

no 12.04 still not EOL, 14.04 still not EOL, newest LTS out 16.04

ah yes: I need sleep

LTS reaches EOL after 5 years

@Videonauth 12.04 is going EOL in April. 17.04 is going to be released in April. This is what I meant

they should make it 4 then it would fit better

yeah but 17.04 is no LTS

exactly

next LTS to come out is 18.04

I edited it

and then I rephrased it

Hi, need help

How can I convert this date time format "201612091310" to "09-12-2016 13:10"

using date command

I think you'll have to manipulate the string before parsing it to date. You can specify the output format but I think you're a bit constrained on the input format..

@KasiyA date +%d-%m-%Y_%H:%M

sadly you cant do a space between that date and the time you would have to run it through something else to achieve that but this is how you get the normal output in bash

for more options use date --help or man date

$ date --date="$(sed -r 's/.{4}$/ &/' <<< '201612091310')" '+%d-%m-%Y %H:%M'
09-12-2016 13:10

Combine sed with date @KasiyA ^

Why doesn't detect the time?

date --date="$( <<< '201612091310')" '+%d-%m-%Y %H:%M'

09-12-2016 00:00

@KasiyA try this:

date "+%Y-%m-%d %H:%M"

@KasiyA are you trying to convert your timestamp into the 'date' format?

@KasiyA It shouldn't accept that as valid date input format at all.

@KasiyA because that's not a valid Date format

@KasiyA it should be 120920161310

Huh, strange!?

$ date --date="$( <<< '201612091310')" '+%d-%m-%Y %H:%M'
09-12-2016 00:00
$ date --date='201612091310' '+%d-%m-%Y %H:%M'
date: invalid date ‘201612091310’

I think the <<< has something to do with it

14.04, it doesn't.

16.04

just saying.

It doesn't read this either

date --date="$( <<< '20161208')" '+%d-%m-%Y'

09-12-2016

just print today's date

what's the point of the here-string? I mean, couldn't you just write it?

I have a datetime string in a variable with format like "201612091310"

I need to convert and print it out like 09-12-2016 13:10

@IanC You have to. The here string makes no sense in that context

@ByteCommander the <<< is only useful when passing text input to a command. You're using it inside a command substitution instead.

So why in the world is it working? o_O

I'm using it to pass the string to sed as stdin.

date --date="$(sed -r 's/.{4}$/ &/' <<< '201612091310')" '+%d-%m-%Y %H:%M'

And that command actually works.

Why don't you want to use this ^ @KasiyA ?

And so does this one: date --date="$( <<< '201612091310')" '+%d-%m-%Y %H:%M' and that's what I don't get. That shouldn't work.

Hi

It doesn't really work.

It ignores the time

quick question or so

Ah! Yes it does. Phew. That makes more sense.

@ByteCommander If didn't find other command, will use that

anyone has experiences with lftp?

it does makes sense with sed, would avoid using an extra command to pipe the string to it, but on $( <<< "string") it looks quite useless @ByteCommander @terdon :p

import sys

try:
    for line in sys.stdin:
      # Input format is a single line, in this format:
      # YYYYmmddHHMM
      year = line[0:4]
      month = line[4:6]
      day = line[6:8]
      hour = line[8:10]
      minute = line[10:12]

except:
    print ("Invalid Input, or Error")

print (year + "-" + month + "-" + day + " " + hour + ":" + minute)

^ Python3 script that'll do the convert

@terdon It actually ignores the whole input string and prints today 00:00

I'm trying to create logs

$ date --date="$( <<< '201511051310')" '+%d-%m-%Y %H:%M'
09-12-2016 00:00

% python3 date.py <<< "201612091310"
2016-12-09 13:10

@ByteCommander Yeah. That's what I'd expect. The <<< makes no sens inside a command substitution.

well, gotta get ready for work, have a good day everyone!

see you all later

/k/BI/Etl/Ftp/lftp/bin/lftp -c "
set ssl:verify-certificate no;
set ftp:ssl-force true;
set ftp:ssl-protect-data true;
set dns:max-retries 3;
set net:max-retries 3;
set net:timeout 10;
set net:reconnect-interval-base 0;
set net:reconnect-interval-max 5;
set net:reconnect-interval-multiplier 1;
set xfer:log 1
set xfer:log-file /k/BI/Etl/Ftp/log/file123.log;

open x.x.x.x:21;
user username_MGR password;
mput -c -O / /cygdrive/k/Costing/*;
mput -c -O /RFQ /cygdrive/k/Costing/RFQ/*;
bye;
"

@KasiyA you could borrow my quite inefficient python script that can do it

the one i just pasted :P

I've set that line set xfer:log-file /k/BI/Etl/Ftp/log/file123.log;

Yeah, the "$( <<< '...')" producces empty output, so it runs date --date="", which prints the beginning of today.

Makes sense.

yet it gives me everytime this sh** /k/BI/Etl/Ftp/log/file123.log: No such file or directory.

@AndyK does /k/BI/Etl/Ftp/log/file123.log explicitly exist on disk?

is the path right?

@ThomasWard thanks, will look for that

@KasiyA if the format of your input is always the same, you can use:

$ date -d "$(sed -E 's/(.{4})(..)(..)(..)(..)/\1-\2-\3 \4:\5/' <<<'201612091310')"
Fri Dec  9 13:10:00 EET 2016

always same

Then use sed+date instead of writing 11 lines of python :P

@terdon lol

@terdon up to @KasiyA what to do. But yeah, there's multiple approaches

@ByteCommander @ByteCommander you are right, the problem is one space there,

date --date="20161208 1310" "+%d-%m-%Y %H:%M"

08-12-2016 13:10

since it's not a valid date format

both failed

@ByteCommander because date does not accept spaces in the pattern if you wanna keep hours and date appart you need either use - or _

@Videonauth It does accept spaces.

@terdon I was stuck on a problem with my server, and it got "unstuck" just by procrastinating a while in here. No intention to be rude or anything, and I meant ":wq!" as a fun vim pun. Sorry, will never happen again.

@ByteCommander ah ok

@KeijoDPutt Oh, hey, that was just your classic emacs user poking a vim user with a stick! it was not meant to be taken literally!

It was a fun vim pun.

Nothing wrong with that!

Or, well, nothing wrong with that that isn't already wrong with anyone chosing to use such an inferior editor.

See? Classic emacs/vim crap. :P

There you go, no you're getting into the spirit of the thing!

#GOTeamNano :D

@Videonauth "Mommy, mommy, can I enter the formula 1 competition with my bicicle? The training wheels are off!"

@terdon :D well everyone should use what fits him best and im quite happy with nano, cant get the hang on vi/vim really and emacs is for my taste a bit to bloated, and if i have to use a GUI editor im preferring SciTE

Just use nano and python all other things.

^ that

But what do you use to write your code? Nano? Really? Your choice, of course, but I would really recommend you learn one good editor. Even if it's vim. Or sublime or one of the newfangled ones. Just something designed for people writing code.

PyCharm.

And for small things, Gedit.

Can't keep from :wq!'ing on nano...

I preferred the 15.04 Gedit with an actual toolbar over the new one with the pestilential Gnome hamburger button though, but it's still useful.

Even has a little Python console and command-line built in.

And as CLI editor, nano is the tool of choice.

Adding to the drama... Why On Earth Ubuntu's vanilla "visudo" nano's the sudoers? it's "VI"sudo, for Pete's sake..

@KeijoDPutt removing from the drama: the ubuntus vanilla visodu editor is set via select-editor

@ByteCommander, thanks, will use your suggested command : )

np

CLose this askubuntu.com/q/858809/367990

@ByteCommander 16.10 is not officially released yet ?????

you might want to edit that

I ♥ vim :) just sayin

Hum?

Oh!

@KeijoDPutt because your average user has no idea how to use vim. That's a reasonable decision really.

He said Ubuntu 16.10 Mate beta, that confused me.

Is Ubuntu Mate 16.10 out too?

Vim isn't the most intuitive editor in the world.

I know this is why im telling you

not sure

you all may be interested in this reddit.com/r/Ubuntu/comments/5f80hi/…

@terdon Now that's a smart answer to a childish rant. No wonder why yo have the rep (and the patience).

ubuntu-mate.org/download/#yakkety

seems official.

Nah, you get a +30K rep bonus if you're an emacs user. :P

Don't get me started on some of the other choices made in Ubuntu though. . .

LMAO, I'd stick to vim, even though I need to have its cheatsheet in a background tab xD

There was a time where my only tools were pico, pine, and pilot, back in the late 90s...

and you used to compile everything, uphill both ways in the snow?

Oh, and Midnight Commander was a blast.

is there an editor war here?

@KeijoDPutt Oh, you were going through them alphabetically? So you finally reached vim, and visudo? Next year you can learn about Xen then :P

@terdon this made my day :)

:)

but then we have to do a turnover what a good editor starting with a ??

Here's one called Aardvarg:

abebooks.com/book-search/author/david-aardvark-editor

sublime text is best editor ever

@terdon Aaaand you did it again. Another classy response, sir.

Yep. Can't beat search engines :)

well my first computing experience was writing code into ram (in 1978)

i still can remeber my first acoustic copplers with full two way 300 baud lol

browsing BBS nearly brought me to the brink of death as my dad saw the phone bill

:D

DRm wasnt an issue back then , you got a new game tape cassete well all you needed was a good HiFi with a dual casette recorder

Good'ol'times

Memories, ahhh, memories. Back in the 80s all we did was to manually type all the BASIC programs that came in the Commodore manuals. Type an O for a 0 and your 300 lines piano was screwed. Debugging was a nightmare, but boy, when it worked we felt like NASA engineers...

I like it when you guys are around. Makes me feel younger :P

Back in the 80s all I did was go to school.

old fart

jk i am not an ageist

I am. And most of you are kids. It's nice to have some adults around :P

Well, I went to school back in the 80s as well, but rushed back from it to my friend's house and tinker with him in his dad's Commodore 16. We had such a blast. Later our lives separated, he became a guitar player and I, well I like to pretend I'm a computer savant. The good thing is that there's people that know a lot less than me, so there's plenty of gullible population out there.

born 1972, got my first compute in 1978 when i went to primary school, and yes felt like being a nasa engineer when something worked, stillremembering source codes in HEX format in computer magacines

typing those was a huge PITA

1975 here, but I wouldn't have had all this computer-related curiosity if I hadn't fed up my parents about letting me learn English. That was the go-to decision. Learn English, walk to the shores of the knowledge. Learning a different language at a very young age (I was 4) led to all that came then.

Best decision ever of your parents, I learned english a long time later sadly

@Videonauth Well, you've done a good job of it. Your English is fine. Admittedly, @KeijoDPutt's seems native so far, but yours is perfectly good.

@terdon wlell im trying, and i dont think my english is good enough, but maybe thats just the perfectionist in me

What does "good enough" mean? I can't hear your accent, but I've never had any trouble understanding you here and I haven't seen you having trouble understanding others. So your English is certainly good enough to communicate in and that's the primary (though not the only) objective.

I don't think you can ever stop learning a language. There's always more to learn. Even in your native tongue, but certainly in any you picked up as an adult.

Plus, with native speakers of languages like English or French who very rarely learn a second language, you have the killer argument: "Hey, this is my Nth language, how many do you speak, smart ass?"

well 3 here 1 native: german (native), croatian (barely remember anything of it) and english (mostly fluent)

I actually used that argument once with some French idiot who was looking down his nose at my French: "This is my second to worse language out of 5. How many do you speak, connard?"

Shut him up quite nicely.

hehe

Or another idiot who was claiming that Spanish has the richest vocabulary of all languages in the world. Oh, I said, and how many do you speak? One, came the answer.

Not to mention that my Spanish vocabulary was probably larger than his. Bloody eejit.

:) i wouldnt be able to answer which one of the world languages is the richest in termy of vacabualry

None. They're all rich.

And you can't really count vocabulary in a meaningful way. For one thing, all languages that can describe arbitrary numbers have an infinite vocabulary: one, two, ..., thirty two million four hundred thousand seven hundred and three.

imagine that this 'thirty two million four hundred thousand seven hundred and three' is one word in german :D

screams randomly for no reason

@Videonauth Still makes for an infinite number of distinct words.

@terdon yep

Then you have specific jargon. Is UTP an English word? How about 3,4,4,5-tetramethylcyclohexa-2,5-dienone?

It's basically impossible to count the number of words in a language.

Show me someone who claims their language is the richest in the world and I'll show you an ignorant chauvinist.

well yes, what you could do take their most representative dictionarys and count the words listed

Good afternoon ! :)

o/ @cl-netbox

o/

o/ Boxxy :)

@Videonauth Sure, but those will be basically the same size for all languages and, anyway, don't actually capture the full complexity of their vocabularies for the reasons mentioned above.

o/ <--- loved it.

@terdon exactly, it oly can give you a rough estimate

Hi terdon ! :) Hi @ThomasWard ! :) Hi @Videonauth ! :) Everything alrighty ? :)

@KeijoDPutt If you're going to be hanging out here much, I suggest you read this:

Very useful.

@cl-netbox my laptop battery died. so not really.

@cl-netbox It has to, and whatever happens the world woudn't stop spinning

@ThomasWard shit ! hope a new battery is not too expensive ! :)

@cl-netbox oh no not like that death

i forgot my charger at home

which is why this post was made:

@Videonauth yes indeed ... although my internet world stopped spinning ... outage for about 20 hours - technical problems on ISP side ! :)

@ThomasWard Ah - okay ... then it is just a temporary annoyance ! :)

@cl-netbox that are the days i do internal mainentance :D or simply reading a book (only times i have time for that)

@Videonauth I used the time to work on my financial planning sheets for next year ! :)

@terdon Thanks for that. Although there are some general ideograms (emoticons is a word I loathe and 'emoji' I loathe moaaarrr) many places have their own "localism" for them, and acronyms really help to understand the group's idiosyncrasy.

@KeijoDPutt most of that you can mainly apply to the normal internet crazyness

20something years of IRC taught me that, yes.

NAA: askubuntu.com/a/858843/522934

wow that was gone quick :))

@Videonauth yeah some of us mods are lurking lol

seth is probably lurkiest of them all

@terdon that and the meme post.

@NathanOsman I have no idea what you're talking about.

♪ ♪ ♪ dunno, dunno, dunno

It's snowing pretty good here.

good list

this is OT and to broad and anyways again a homework question kinda : --> askubuntu.com/q/858859/522934

could apply an unclear as well, because im unclear to what i now bwest close vote it :p

it is that time of the year

people trying to finish homework and projects

I wonder how the new UK spying bill will affect Ubuntu..

@NathanOsman that's still missing Jorge, Elijah, several others.

this is just nuts

I mean its really time to get younger politicians somehow, they dont really believer this will be a solution to all and everything terror related?

The terroroist have already won in my opinion, because we let restrict your freedom more and more in tha name of terror prevention

@Videonauth This? This what?

@terdon Believing in putting back-doors everywhere to grant the government spying access on all and everything, is a solution to terror in this world or anything

Oh, I don't think any politician actually believes that. That's just a useful way to sell it.

as if the bad guy and even casual users wouldnt find ways around it

@edwinksl o.O

brb cleaning my drivers

while i am at it, may as well clean my kernel too

@terdon may you have a look at this comment: i think it is more insulting that constructive : askubuntu.com/questions/714010/…

Uhm. . . I'm in two minds. Everything stated in the comment is absolutely true.

It isn't written in an aggressive or rude manner, it just makes some honest and true observations about the post.

in one way true but if i where the post author i would really feel betitled by it as well

@edwinksl ?!?!?!?!

@ThomasWard I feel you hahaha

@Videonauth I don't know. It honestly seems like quite restrained and constructive criticism. The post is absolutely awful, after all. Not even the minimum effort of adding a full stop or re-reading it once to see whether it makes any sense.

I just don't see anything remotely rude or aggressive in the comment. All I see is someone using restrained and toned down language and pointing out flaws.

@Seth let your thoughts be heard at reddit.com/r/pcmasterrace/comments/5hcxuh/…

wel ok then

To put it another way, if you do something wrong, telling you "hey, that's wrong for this and this and this reason" isn't rude.

Then again, maybe my threshold is too high. @Seth @ThomasWard you're around. Care to weigh in? Videonauth considers this comment rude and I don't see it.

@edwinksl honestly it sounds like an AI to me.

@terdon that one sentence about his profile is absolutely unnecessary

Yeah, that's the only bit I might object to. Then again, having read the profile, it is an odd thing to say.

@edwinksl I'd agree with this, but otherwise no, it seems fine. Close to the edge, but I don't think he went over.

yeah i am overall okay

well i just brought this up because im someone who tries to slip in the skin of the OP there

@Videonauth And you should bring it up, thanks. I just happen not to agree with you this time, that's all.

don't ever be afraid to bring something up

Unless it's something you ate. That can be unpleasant.

Sorry, been working all day. My humor chip's frazzled.

More than usual.

no im not afraid to bring things up :)

why should I?

no reason whatsoever :)

people don't always wait for reasons tho

@Videonauth Arrr....shiver me timbers...make him walk the plank! (boat programming comment)

YAY I have my laptop power back

@ThomasWard me too...

wtf all windows

@edwinksl they are work computers...only one of them is mine actually...

one is going to have autocad on it...

and the third one is being set up for future use

can't connect on ssh or ftp

@Alex connect the data center that they shall reset the machine manually. one of the possible scenarios is you got attacked (DDoSed) or another one that you screwed up the setup

@Alex Connection Reset sounds like it may be you trying to access HTTPS with HTTP, or vice versa

if you can't SSH or FTP to it, then contact Amazon

because it could be suspended, or the firewall on it is not configured properly, etc.

^ or that

ok, I will do, thanks

they are working again now. I clicked 'reboot' in the instance on amazon dashboard, it should have been this that made them work again, right?

yawns

@Alex probably. stale networking data perhaps and such can cause issues like those

Oh boy. How about that new UK law?

The one that says "we're leaving the tech scene now - we passed a law that will make all decent businesses pack up and move."

@TheXed hey, elitebook 8460p, nice.

@NathanOsman Most businesses aren't decent.

Well that's a great outlook for the UK :P

I'm accepting donations to purchase a small island off the coast of Indonesia. I will form a country named Freedomland. The governing philosophy is that government should be as small as possible. Ideally, nobody should know it exists.

And no draconian spying laws. This isn't the 1950s.

@NathanOsman how do you protect against espionage

or the terrorists

or those chinese hackers who've constantly been after you

With knowledge.

Espionage is irrelevant since the government is a public entity. Anyone can find out whatever they want. It's up to private businesses to keep secrets :D

@NathanOsman @nathan I dont get that either, why do they really think this bill is the right thing to do

As for the hackers, bring it. We'll have the brightest minds.

@Videonauth well, to put it bluntly, they are just that dumb.

all what they do right now is loosing the trust in their rightful citizens nothing else

they not need to know everything

they not need to see everything

they really should focus on more pressing matters which are really a thread to humanity and not on this hacker/spywars/cyberwar bullshit debates

sorry to have put it very blunt here

They just need to back off and remember that they exist to serve the people, not the other way around.

@NathanOsman or evil.

I tend to believe the latter.

Can anyone verify this answer? askubuntu.com/questions/472453/…

hah, I am so using that.

@Seth me too

lol

wow, so if you don't quite believe the Kremlin hacked all the US stuff and rigged the election you are now a Russian apologist.

The heck does that even mean?! Russians are people too.

And they're not generally our freaking enemy either!

sorry, rant over

humm how do I block/allow a complete range of IP in UFW ?

let me find that question

ah thank you

(never been to Asia, but I suppose these universal truths hold up there as well)

why wouldn't they hold in asia

Erm, they would hold up? >:-)

But as I've never been there, I can only suppose they would. ;-)

-.- i have really no clue what im doing wrong right now with setting up UFW

My whole UFW configuration consists of sudo ufw enable actually... :P

yes if you dont want to run a server clarly thats the way to go

i set allow for the standart ports and now i wanted to ban an ip adress but ufw dows not honor that rule

what about iptables, that built-in kind of firewall?

Got my replacement V20.

Way less noise reduction