Ask Ubuntu General Room

12:11 AM

0

I am attempting to install CERN's root software and I am on the final step of installation. The steps im taking are these. 1) Get the sources of the latest ROOT (see above) 2) Type the build commands: mkdir <builddir> cd <builddir> cmake ../root cmake --build . [ -- -j<N> ] [ or si...

Ubuntu Questions on U&L

1:53 AM

0

Q: Ubuntu 19.10 installation error: "file:///cdrom/dists/eoan/Release is not valid yet"

I tried to install Ubuntu 19.10 on a PC using USB thumb drive. I created the bootable flash drive using dd command from other Ubuntu instance. I have the following error. Could you help? Thanks.

ubuntu

Ubuntu Questions on U&L

3:34 AM

0

Q: Removing a program installed via apt and a .deb

I installed browsh via apt install (I followed the instructions below): sudo apt install ./browsh_1.6.4_linux_amd64.deb rm ./browsh_1.6.4_linux_amd64.deb (This is after I used wget to grab the .deb file). I'd like to remove browsh from my Ubuntu (WSL) install, but sudo apt remove browsh yield...

ubuntu apt

TheLittleNaruto

5:46 AM

@EliahKagan I need SSH client with SFTP support exactly like MobaXTerm. The posted answers are suggesting to have separate tools for each of these i.e. one for SSH Client and another for SFTP.

@Kulfy *My messages! My rules!*

Nathan Osman

6:30 AM

So, time for a fun story.

TheLittleNaruto

@NathanOsman AoC?

Nathan Osman

@TheLittleNaruto I forget what AoC means. :(

TheLittleNaruto

Advent of Code

Nathan Osman

@TheLittleNaruto I wish I could do that this year, but I don't have the time, sadly. :(

Anyway, the story...

I am currently running Windows 10 on my desktop, but I have Ubuntu 18.04 LTS running in a virtual machine. I was investigating an unusual amount of CPU usage on the machine. And to my astonishment, I quickly discovered that someone had hacked into the machine and was using it to mine cryptocurrency.

TheLittleNaruto

@NathanOsman Too bad! I am trying this year, let's see if I manage to complete.

@NathanOsman Daymn!

Nathan Osman

6:34 AM

So, first things first - I disconnected the machine from the network bridge to prevent outside access.

Then I started looking through logs to see what had happened.

So, best as I can tell, here's how it happened:

Videonauth

@NathanOsman What happened? Well i not need logs for that, you had windows 10 running :D

sorry could not resist hehehe

Nathan Osman

@Videonauth The host is fine. It's the guest that was compromised. :P

Anyway, I had the router forward connections to port 22 to the virtual machine. And the primary user account (my own) had a decent password.

Videonauth

Now you got me curious, how the heck did you get a crypto miner trojan/virus/malware onto an ubuntu host? You didn't surf where you not supposed to surf ?

Nathan Osman

However, in an attempt to simplify development, I had set the password for the postgres account to postgres.

So, they were able to log into that account.

Videonauth

virtual-facepalm

Nathan Osman

6:38 AM

And as soon as they did (according to ~/.bash_history), they downloaded their miner and started mining.

Videonauth

one readon not to have to much outside access on my network

Nathan Osman

Right. I mean, in my case, it's not a big deal. It's a virtual machine I don't use for anything important - just testing things.

All I have to do is reinstall the OS.

It will take me 15-20 minutes at most.

It wouldn't have taken me any time if I had bothered to create a snapshot. :P

Videonauth

still, the virtual guest is not 100% sandboxed in most cases

Nathan Osman

@Videonauth True, but the hacker didn't have root in the guest so he was extremely limited anyway.

Videonauth

I removed the port 22 forwarding from my router a long time ago, so only SSH connections which can happen are inside my own intranet and still they would have to guess a very complex password

and have physical access inside my flat :D

Nathan Osman

6:42 AM

Oh, for important machines, password login isn't even an option.

Videonauth

uh i never said you could log in with a password inside my intranet you still need RSA keys

Nathan Osman

Ah, okay. Good.

I'm going to dump the files he left on the machine somewhere for analysis.

Videonauth

and not every computer can connect to every other one

my webserver for example knows the keys needed to log in on it but itself can not log in the other way into any machine

just in case someone figures out how to break into the machine via port 80 :D

Nathan Osman

Right.

Videonauth

but ... my virtual machines have an easy password :D

but well i not do much with them anyways

Nathan Osman

6:51 AM

# last
postgres pts/6        37.230.69.190    Tue Dec  3 12:30 - 12:30  (00:00)
postgres pts/5        37.230.69.190    Tue Dec  3 12:29 - 22:23  (09:53)
postgres pts/6        37.230.69.190    Sun Dec  1 14:21 - 22:34 (1+08:13)
postgres pts/5        37.230.69.190    Sun Dec  1 14:12 - 22:35 (1+08:22)
postgres pts/5        37.230.69.190    Sun Dec  1 09:49 - 13:54  (04:05)

wtmp begins Sun Dec  1 09:49:03 2019

Hmm...

The IP address is from Spain.

And here's VirusTotal's report on the file: virustotal.com/gui/file/…

(the executable that I found running on the system)

Kulfy

7:09 AM

@Zanna I see.

@TheLittleNaruto Rules are made to be broken

grrrr...

Ubuntu Questions on U&L

7:40 AM

0

Q: Why is NTFS volume set not valid? The device '/dev/sdd1' doesn't seem to have a valid NTFS

I mounted my HDD a hundred times before but now I got this sudo mount /dev/sdd1 /mnt/mojmaunt/ NTFS signature is missing. Failed to mount '/dev/sdd1': Invalid argument The device '/dev/sdd1' doesn't seem to have a valid NTFS. MBR is 86. Should I change it? This is how sdd looks Disk /dev/sdd...

ubuntu mount

Héctor Álvarez

Hello, I have a small question regarding Samba shares. How can I write to the share without using the smb client?

let's say I have the following share:

[test]
   path = /test

So I can write directly to test by doing something like mkdir /test/itworks

but it doesn't seem to work if I do mkdir //localhost/test/itworks

Ubuntu Questions on U&L

8:41 AM

0

Q: A lot of "sh: 1: /var/tmp/lmbench/hello: not found" lines during lmbench-run processing

During running sudo lmbench-run I got 1786 lines of sh: 1: /var/tmp/lmbench/hello: not found lines in /var/lib/lmbench/results/x86_64-linux-gnu/ubuntu.0 file. Is this situation normal? How could I fix it? Thank you!

ubuntu benchmark

Héctor Álvarez

I'll leave a question just in case someone wants to contribute

0

Q: Write to Samba share directly without SMB Client

I work mostly with Windows, and when I setup a share with public access I can work with it from the command line like it was just another folder. For example, if I create the share windowspublic I can then create a folder inside it with the command mkdir \\localhost\windowspublic\test and it work...

networking permissions samba

Ubuntu Questions on U&L

9:01 AM

0

Q: Is it possible to find out which process initiated a MySQL restart?

When I look at the file /var/log/mysql/error.log on my EC2 instance, I observe that there are two shutdowns and 2 restarts MySQL after the initial start. 2019-12-04T06:57:25.835650Z 0 [Note] mysqld: ready for connections. Version: '5.7.28-0ubuntu0.18.04.4' socket: '/tmp/tmp.D8yMDciKk5/mysqld.so...

ubuntu mysql

Enthusiastic Engineer

1:18 PM

hi, i am very new to linux and have installed debian on my laptop, may i ask a question about it?

i check the thermal status of my laptop sensors by sensors command

all is bellow normal and ok

but the fan is working higher rate, normally the sound is more than when i am logged in to my windows 10 os on the same device

is it ok?

damadam

post your question on Unix & Linux instead of AskUbuntu, it would be closed as off-topic ifnot

Debian != Ubuntu

Ubuntu Questions on U&L

0

Q: Odd output from dsmc (Tivoli storage manager or TSM) query backup

I'm using TSM (dsmc) on Ubuntu 14.04. # dsmc IBM Spectrum Protect Befehlszeilenschnittstelle des Clients für Sichern/Archivieren Clientversion 8, Release 1, Stufe 8.0 Client-Datum/Zeit: 04.12.2019 13:57:40 (c) Copyright by IBM Corporation and other(s) 1990, 2019. (c) Copyright by IBM Corpor...

ubuntu backup restore

Enthusiastic Engineer

@damadam thank you damdam

damadam

@EnthusiasticEngineer also check value of your cpu (there are plenty of software); if you don't want to use one of them, you can read cpu value with a cat /proc/cpuinfo

ermh, wrong file

Enthusiastic Engineer

cpu is also ok

Core 0: +57.0°C (high = +84.0°C, crit = +100.0°C)
Core 1: +57.0°C (high = +84.0°C, crit = +100.0°C)
Core 2: +57.0°C (high = +84.0°C, crit = +100.0°C)
Core 3: +56.0°C (high = +84.0°C, crit = +100.0°C)

damadam

1:29 PM

cpu isn't install by default

but if you have it, nice :)

Enthusiastic Engineer

i installed some other packages...

some searches over the net...

damadam

I can't help more, cpu isn't my speciality :/

Enthusiastic Engineer

linux is toooo hard

:((

damadam

but you're free to personnalize it and destroy it :P

Enthusiastic Engineer

yes but i am not so professional

i afraid i make something wrong on the system

damadam

1:33 PM

if the fan just start so fast, that's probably just a check from OS to see how it works

it's just a though

it didn't work at high rate everytime?

Enthusiastic Engineer

i have just installed it today :D

the rate is the same

damadam

2:13 PM

"666 posts edited" beautiful :D

Ubuntu Questions on U&L

3:27 PM

0

Q: i want customize or edit linux GUI interface. how can i edit or modify the source code linux distro comme mint or ubuntu linux etc?

I want to customize or change GUI interface linux distribution comme ubuntu or linux mint etc. How can i modify linux distribution GUI interface by source code ? I have some knowledge C++ and python language. anyone help would be highly appreciated.Thank you

linux debian ubuntu linux-mint linux-kernel

Ubuntu Questions on U&L

5:50 PM

0

Q: Redirecting information from syslog to separate file

I want to log all incoming TCP connections to my Ubuntu 18.04.3 system. That works fine and is not the problem, just as an intro. I am using this command in crontab for this: @reboot /sbin/iptables -I INPUT -p tcp --syn -j LOG --log-prefix='[tcpconnections] ' (I know that this is not a pretty w...

linux ubuntu logs rsyslog

Ubuntu Questions on U&L

8:12 PM

0

Q: passing a referrer link using a m3u playlist file

I can pass a referrer link in VLC using a lua file, then execute it by typing in vlc ipchannel.lua (see example of lua file below). But how can I pass a referrer link using an m3u playlist file? Example of working referrer link using a lua file Taken from Roy Shilkrot example. (the others didn...

linux ubuntu vlc mp3 lua

Ask Ubuntu Meta

9:42 PM

0

Q: Part of the question & answers are now hidden by blog & other details on the right

I'm not used to writing questions; but the site is offering me Similar questions above where I'm typing, but I cannot read much of the text as the right side of it is covered by the "How to format" which has a yellow background that makes text underneath it unreadable. I cannot read all of comme...

bug site

Ask Ubuntu Meta

10:23 PM

0

Q: Ask Ubuntu Answer Section all over the page - Bug Report

AskUbuntu answer sections appear to be broken, their layout/css is out of wack on multiple freshly installed browsers. Tested latest version of Google Chrome and Firefox on Linux Mint and Debian Linux. See image below for more details. If you want this post to be a real question then how was the ...

bug bug-reports site

Transcript for

Ask Ubuntu General Room