/dev/chat

7:41 AM

HELLOOOOOOOOOOOO !

8:17 AM

@Kiwy Hi.

@FaheemMitha how are you ?

@Kiwy I'm doing Ok, thanks. How are you doing?

I guess working the horrible job?

Friday Iwill quit my current job So I'm really good ^^ @FaheemMitha

Q: how to write a startup dependency on Internet availability?

I've got a feeling this is a dupe.

0

Some of the services on my Raspberry Pi (~ Debian) depend on the availability of Internet (especially ntpd, for cryptic reasons). Specifically, the availability of a network device or a link being up is not enough. When looking at /etc/init.d/ntp I see ### BEGIN INIT INFO # Provides: ntp...

@Kiwy So you are switching to a different job?

@FaheemMitha I first resign I will a job a bit later, I need a break

8:22 AM

@Kiwy Ok. Is it easy to find jobs in your area?

@FaheemMitha in Eurpe if you work in IT, finding the job you like can be tricky, but finding any job as a junior is like a piece of cake, I already had several interview without sending remuse just putting it on monster

@FaheemMitha I rely don't know it doesnt ring a bell as a dup

@Kiwy I might be mistaken.

8:38 AM

@terdon did you get a chance to look at my intro yet?

10:47 AM

@Gilles @slm could you do something about that guy ??

What is WRONG WITH YOUR NAME? It seems R next to Y is inconclusive — cea 49 mins ago

he's such a nervous person

Q: Why do I have to cd out of a deleted directory?

11:46 AM

Am i the only one to think that this question is not the one in the title ?

13

On my server I have a directory structure looking something like this: /myproject/code I normally have an ssh connection to the server and 'stand' in that directory: root@machine:/myproject/code# When I deploy a new version of my code, the code directory is removed so I'm left with: root@m...

shell command-line directory cd delete

2:25 PM

@FaheemMitha No, I'm sorry. It's been a bit hectic here these past few days, I haven't forgotten though, I should be able to do it today or tomorrow.

2:57 PM

@terdon Thanks. Appreciate it.

Anyone have any thoughts on this - posted earlier?

14 hours ago, by Faheem Mitha

What is a good way to write basic web pages? I want to create a simple static HTML page? One option seems to be to write markdown and convert it. Obviously nobody but a masochist would actually want to write HTML. Any other suggestions?

14 hours ago, by Faheem Mitha

I guess LaTeX -> HTML is another possibility, but the HTML conversion tools don't work that well.

14 hours ago, by Faheem Mitha

Another option is rest/sphinx, I suppose

Wow, that's a lot of space.

It seems to create a separate box for each.

On a separate but related topic. I was wondering how to structure my personal web pages inside a VPS. I thought I could having symbolic links in /var/www pointing to my personal files in a repository outside /var/www.

@FaheemMitha Umm... Must be a masochist, I always write HTML.

Why in the world would you want to do LaTeX -> HTML? Seems needlessly complex. HTML is easy to write, much more so in fact than LaTeX since it is a much simpler language.

Mostly

3:14 PM

@terdon Well, LaTeX -> HTML is just one possibility. I suggested a couple of others.

Is it common to write HTML directly?

@FaheemMitha Yeah

@terdon Ok.

I mean, kids today will use WYSIWYG but I've always written pure HTML in emacs

@terdon Ok. I tried writing it once. It was kinda icky.

If you want simple, just use a WYSIWYG editor

@FaheemMitha Less so than LaTeX when you don't know.

3:15 PM

@terdon Hmm, I'm kind of an emacs person.

@terdon Ah, yes. But I do know LaTeX. Enough to write an HTML page, anyway.

@FaheemMitha Same here, which is why I write pure HTML in it :)

@terdon Right

@FaheemMitha Just get yourself a WYSIWYG editor, there are loads and all you need to do is write text, it will make it into HTML for you.

Well, I'll keep the pure HTML option in mind. I had the impression people don't do that any more.

@terdon Ok. Any specific suggestions?

I wonder if texmacs will do it

@terdon do you have a personal web site?

@FaheemMitha Not as such no but I've written quite a few over the years for various things.

Can't suggest a WYSIWYG since I don't use them, just google linux wysiwyg html and you'll get loads. It is really simple.

3:18 PM

@terdon Ok. I've got a VPS and I'm setting something rudimentary up there.

@terdon ok

3:53 PM

@terdon if you are an academic, everyone recommends a web page for advertisement. So people see how wonderful you are, and you get lots of exciting offers. And even otherwise, I suppose.

@FaheemMitha Yeah, and it helps get visibility for invited reviews etc. I have an old one on the institute's page but it's not something I maintain.

@terdon Ok. Well, I'm about to enter the exciting new world of the Web. That's the plan, anyway.

Actually probably not that new any more.

Maybe today if I can stay awake that long.

4:09 PM

does anyone know how to query a generated private/public keypair for information about it?

A ssh key pair, to be clear.

what are the current best choices for ssh key generation? It seems ecdsa is now the default.

A: Good practice to use same SSH keypair on multiple machines?

4:44 PM

I'm confused by this:

5

To be a little more clear from the other answers here and other places: the "safety" is only as secure as the security of the private key. If someone can get access to your private key(s), it could possibly be emailed or copied to a USB device. Then the copied private key could be used by anoth...

Isn't it necessary to have the private key on the remote system?

Ok, I guess not

Greg Dietsche

5:50 PM

you keep the private key. the remote system only has a copy of the public key.

6:09 PM

@GregDietsche yes, I figured that. Thanks.

@GregDietsche possibly dumb question. how are you in unix.sx chat when you don't have an account on this site?

Q: My ssh forced command seems to be broken

6:31 PM

@Gilles Since you suggested the relevant command (3 years ago, how time flies, yikes), do you have any idea about this?

0

I'm using the following as a forced command with hg-ssh. This forced command is designed to just allow pushes with hg. However, I must be doing something wrong, because I can actually log in with this key. I've used this for a while, and my recollection is that it used to exit immediately if I u...

ssh mercurial

9:41 PM

Hi. Does anyone have any idea whether upgrading to perl 5.18 in Debian stable will break things?

@FaheemMitha that sounds like a bad idea. It's rarely a good idea to change a critical system component

@Gilles Agreed. However, biber decided to require perl 5.18 or 5.16. which is annoying

that is the TeX package biber.

biber 1.8 that is.

I recommend installing testing or unstable in a chroot and making biber invoke perl from the chroot. Or else compile perl manually and install it outside the PATH.

@Gilles Ok. Both options are basically eww. But thanks.

@Gilles did you see my question about the ssh forced command thing? any ideas?

it is quite inconsiderate to make this depend on a relatively recent version of perl

@FaheemMitha I'm only just starting my daily trawl

9:49 PM

@Gilles ok

10:07 PM

I wonder how many SE sites are getting hit with Heartbleed questions

like maybe on Seasoned Advice they have "can Hearbleed affect my ability to buy local produce??"

User Experience: "do I need to do anything to assure my users that we're mitigating Heartbleed?"

Stack Overflow, Meta Stack Overflow, Super User, Server Fault, Ask Ubuntu, Information Security, Cryptography, Unix & Linux, Android Enthusiasts, Ask Different, Programmers. Raspberry Pi

from google.com/…

I think that's the lot and the rest are from the hot questions list

looks like it

Notably missing from this list is a question on Software Quality Assurance & Testing or Stack Overflow or Programmers or even Computer Science that asks how to make sure that the program you're writing doesn't have a similar vulnerability

notably missing from this list is a question on Programming Puzzles & Code Golf asking for the most ridiculous way to replicate Heartbleed

root@orwell:/home/faheem# apt-get install texlive-bibtex-extra
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
texlive-bibtex-extra : Depends: texlive-latex-base (>= 2012.20120516) but it is not going to be installed

^^ This doesn't make sense to me. Am I missing something?

10:18 PM

> root@orwell

...

@strugee ?

@FaheemMitha I think the hostname is funny

@strugee orwell? why?

@FaheemMitha I have no idea

@strugee Ok...

10:20 PM

possibly because the entire internet is being paranoid because of Heartbleed and I associate Orwellian thinking as being paranoid

@FaheemMitha try apt-get install texlive-latex-base and see why it's not going to be installed

I find sometimes APT will spit out the errors if you ask for the dependency explicitly

@strugee The point is, unless I've lost my mind, is that the dependency is already satisfied. 2013 > 2012.

apt-get install texlive-latex-base doesn't do anything because it is already installed

@strugee I just like Orwell's writing. Or I did. 1984 was just one book he wrote. Really late in life.

@FaheemMitha no idea. that's the only advice I can suggest - APT is weird; have you tried pacman?

@strugee Not available on debian. :-)

So no.

@FaheemMitha oh yeah, I love him. just last week I turned in a paper where I chose him to write about.

@FaheemMitha true tragedy :P

@strugee Well, just as long as you know that 1984 isn't the only thing he wrote.

10:31 PM

@FaheemMitha Animal Farm, Down and Out in Paris and London, The Road to Wigan Pier, Shooting an Elephant... the list goes on

heh. as seen in the DMZ: privatekeycheck.com

Ok, I see, the problem was possibly with texlive-base. apt is often not good at reporting errors.

What is this heartbleed stuff anyway?

@FaheemMitha unix.stackexchange.com/search?q=heartbleed

there are a couple of mistakes in the top-voted answer, but I think it's an adequate summary overall

@Gilles yes, thanks.

@FaheemMitha to summarize:

Aside from ssh (which apparently isn't affected) I don't think I'm using anything else relevant.

10:38 PM

it leaks TLS keys

@FaheemMitha it affects clients too

although that attack vector is less likely

@strugee what clients?

@FaheemMitha e.g. your web browser

if your web browser links against OpenSSL

@strugee so, what am I supposed to do about it?

Somewhere we have an answer (not by me) that explains how to use unison to detect differently-named duplicate files. Would you know where?

I think it's on U&L but it might be elsewhere (AU, perhaps)

@Gilles I think I saw that on AU yesterday

@FaheemMitha upgrade. restart your browser. if you're feeling really paranoid, restart your entire box to ensure that nothing else is holding a fd open to the old library.

10:41 PM

@strugee Upgrade my browser?

@FaheemMitha no, upgrade your OpenSSL

@strugee Oh, yes, I think Debian security upgrades to that automatically

@strugee no need to restart the browser if it's Chrome or Firefox, they don't use openssl

@Gilles yes, i'm using chromium

@Gilles right. does Chrome use NSS as well as Firefox?

ah, yes. just looked it up.

10:45 PM

Funny, the Debian logs refer to heartbeat. is that a typo?

* Non-maintainer upload by the Security Team.
* Add CVE-2014-0160.patch patch.
CVE-2014-0160: Fix TLS/DTLS hearbeat information disclosure.
A missing bounds check in the handling of the TLS heartbeat extension
can be used to reveal up to 64k of memory to a connected client or
server.

or maybe heartbleed is a play on words thing.

wrt heartbeat?

@FaheemMitha read my answer

and follow the reference if you want to know more

Heartbeat is the protocol whose implementation in OpenSSL is vulnerable.

Heartbleed is a clever name.

ugh, I have an image that I just moved from a VM to bare metal, and I can't figure out why I split /usr off