« first day (1990 days earlier)      last day (2495 days later) » 

3:52 AM
[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer: Memory Usage statistics different in free and htop by oycebrewton on askubuntu.com
 
1 hour later…
4:54 AM
[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, link at end of body, pattern-matching website in body: Synoptic Boost As noted earlier by user768754 on askubuntu.com
5:14 AM
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body: The book actively discourages the by Bevedavis on askubuntu.com
5:31 AM
[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, bad keyword in username, link at end of body, +1 more: votofelforcefinland.com/ultavive-garcinia/ by Ultavive Garcinia on askubuntu.com
 
1 hour later…
6:43 AM
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, repeated URL at end of long post: The dynamic fixings consolidate by mpbellkiil on askubuntu.com
7:33 AM
[ SmokeDetector | MS ] Potentially bad keyword in body: Buy Flowers For Valentines Day by valentines0618 on askubuntu.com
7:49 AM
[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, blacklisted website in body, blacklisted website in title, +4 more: freesupplementrial.com/ultra-potent-libomax/ by mkhzydbqb on askubuntu.com
 
3 hours later…
11:05 AM
[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: freesupplementrial.com/ultra-potent-libomax/ by fruchworm on askubuntu.com
 
1 hour later…
12:16 PM
CV from me
:)
in Charcoal HQ, 2 days ago, by ArtOfCode
Psssst! If you're not on https://charcoal-se.org/people and you think you should be, now is a very very good time to make sure you're on it
oh why? (I don't think I should be on it. I don't do anything)
youre flagging and using fire?
and you have privileges to do so?
i have em btw since yesterday, god that was a trip to set up fire and fdsc
12:26 PM
I don't use FIRE etc. The flagging is automatic haha. I give feedback, but many people do that
FIRE is quite useful :)
works even from this room
and FDSC gives automatic feedback if you cast a flag on any site
I'm some kind of stubborn Luddite when it comes to userscripts
I understand did take a long time to convert me there from the church of purists :D
not a dupe of that imho but probably a dupe of something. Otherwise, someone with Netbeans can just answer it
this is an interesting question and shouldn't be closed as a dupe imho
12:46 PM
yep I don't think too that this dupe target fits
working since yesterday on an answer to a very specialized but interesting question
1:29 PM
What does "It is off-topic here because of Debian" mean in this comment?
as far i guessed he was referring to libjpeg8_8d-1+deb7u1_amd64.deb which looks like a Debian package.
That makes sense.
I still think it's unclear, not off-topic. (It's closed now, as unclear.) If they give more details we can know. Perhaps they are installing packages meant for Debian on Ubuntu. That usually works, but sometimes causes problems.
@EliahKagan True that, even i have some Debian packages running her on my Ubuntu
2:05 PM
Is this post NAA?
Do you think they are suggesting that there is an application you can use to manage dynamic disks, but they don't know how to use it?
Maybe. @Videonauth's edit improves the post somewhat.
I guess it is a hint...
To be honest I'm not sure if this is an answer but well while i was reading it i deducted an edit is appropriate :)
I don't think that question is no repro. Their answer is bad -- you shouldn't run Android Studio as root -- but it's a recent question and nobody has asked for more information about how they installed it (though I'll do so shortly). The problem didn't go away mysteriously.
2:21 PM
want me to retract my CV?
Well, only if you agree with my reasoning (or have other reasons to have changed your mind).
I agree partly with your reasoning and I'm someone who is willing to give the question a second chance.
I should possibly have commented on the question rather than the answer so other reviewers are more likely to see. But my comment is really a response to the answer.
Btw im actually installing an encrypted Ubuntu in a VM for answering a question, and can test the part of the encryption keys for the home directory sitting in the open on the system
Excellent!
2:28 PM
Yep working on this question here: askubuntu.com/q/982095 (please dont bump it by editing just now) dont want the close vote brgade to kill it befor it can bloom
But aren't we the close vote brigade?
why would that be close voted?
@EliahKagan I don't count us blindly CVing
@Zanna I don't know but i still want to take my time for that answer, that subject took me already 2 days of reading and might take me another 1-2 days of testing till i can write a definitive answer
would be nice to have 2FA on ubuntu and a working way to get it
those backslashes...
11
Q: how to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator?

HrishHow to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator (It can also be setup for non Google accounts)?

i know i know i have seen them :) will edit them as soon I press submit of my answer :)
@Zanna yes might be a dupe on the other hand the user using full disk encryption and home dir encryption and i want to know if thi sinterfered,, and if it is not a dupe
2:37 PM
the guide is also totally not below haha
Is it reasonable to interpret this question as on-topic and answer it with information about monospaced fonts in Ubuntu? If not, I'll VTC it.
i think it is answerable regarding ubuntu
Do you want to post an answer?
actually that is one i skipped at the time i had to review it
That is a repost I think
2:44 PM
Well you can review it now. But you don't have to review to post an answer.
Oh. Should it be duped? Is there an answer somewhere else?
hmm... I could be wrong... I have certainly seen that question before, and I believe it was by the same user, but I can't find any other question like that from them
I think I must have edited the post
Can you find it by searching? Is it by the same user?
it had a comment saying "any monospace font..." or something
> Thank you for reviewing 20 close votes today; come back in 9 hours to continue reviewing.
if it was that user, they must have deleted it
2:46 PM
@EliahKagan see my line above
I believe I edited it and voted to leave open, but perhaps it was closed (or maybe I am imagining all this!!)
Oh, well you can come back tomorrow. Or if you think it should be closed, then you can still cast a close vote on it, just not through review. Anyway, you don't have to review it to answer it, if you so choose. :)
I just noticed another Bash post of mine that needs fixing, and I won't likely get around to posting other answers (unless they're very simple) until I've done that. But if this can be considered on-topic and answered, then it's probably best to do that. Also, the topic of fonts in Ubuntu is actually not something I know a great deal about.
hmm this is the original post...
Oh balls, the full disk encryption does not play nice in a VM
What's wrong with it?
2:48 PM
not able to type in the password for the disk encyption
Why not?
well I dont have a mouse cursor and cant select the field for typing, and blind typing and return does not seem to work
It seems to me that this question should be closed as a duplicate, or answered, or commented on to request specific information (in which case the "unclear" close vote might be correct, depending on what information is requested), but that it should not otherwise be closed.
@Videonauth This is with full disk encryption (LUKS)? I thought you were testing encrypted home directories.
(Because that's what the answer you had commented on was suggesting to use.)
yes but i needed a system with full encryption for that second answer :)
wanted to test this while researching into that 2FA question
2:54 PM
@EliahKagan we could request the format of the original partition, and it could be a dupe of Recovering broken or deleted NTFS partitions
(maybe - I don't know about this topic though)
Do you want to comment to request more information? Should I? Or to suggest that question? Unless there's a sign it's NTFS, I don't know if it should be duped to that without further information.
Actually, I'll comment.
I agree that it should not be duped to that unless we know it is really about an NTFS partition
@EliahKagan thanks :)
[ SmokeDetector | MS ] Link at end of body: How to prevent laptop from sleep by Muhammad Yasser on askubuntu.com
mhmm i wonder what the showblocker is right nowon that encryption screen, it is probably the VM but I wonder how to come around it
3:03 PM
@Zanna Actually, never mind. It's not NTFS. They accidentally deleted their "main partition" when they went to "reinstall Ubuntu," so it's an Ubuntu system partition (ext4). So the question is clear after all.
I read that, but I thought it could still have been a dual boot, before they deleted the Windows partition
@EliahKagan seems unclear! but could be reasonably closed as a dupe of that imho
ah i had to boot with removed 'quiet splash' then i was able to boot it up
[ SmokeDetector | MS ] Username similar to website in answer: Confusion about DNS settings in Ubuntu 17.10 by ookangzheng on askubuntu.com
Ah, excellent.
well that answer that every user will have drive encryption seems to be BS
as far i see my just added testuser has no home drive encryption while i have on the main user
now logging out and login to that testuser
3:12 PM
@Videonauth I think that post is just on the "Looks OK" side of the line, and that's how I've reviewed it. Your edit definitely helped. But would it be useful for us to request more (specific) information?
@Zanna I've voted to dupe that question while also commenting to address the ambiguity.
voted
Although I understand the reasoning for why it might be, I don't think this question is too broad. If it were just worded differently, it could have explicitly asked for all that stuff and been far less likely to attract "too broad" close votes. It's effectively asking two different things... but the OP and other readers would have to already know the answers to both in order for it to make sense to ask them separately.
A possible counter-argument is that the two things it's asking could be answered separately... but it would be hard to do so. It's asking what sets PS1, and also why there's no export line for it in a startup script. Your answer, @Zanna, answers the first part.
3:29 PM
so, well firstly updating that 17.10 install but what i can tell right now if the second user has sudo rights the ecyptfs keys and encrypted stuff is in /home/.ecryptfs and can be accessed
@Videonauth Even when the user is not logged on?
when im rebooting i will test if i can simply sudo su mainuser
@EliahKagan yes the files are encrypted thou
@Videonauth Oh. Well that's probably fine then.
let me update and i test if i could simply sudo su to my mainuser and access his directory
Thanks.
3:32 PM
@EliahKagan regarding that statement that every user gets an encrypted home directory if you choose encrypted home for the main user on install, that is NOT true, my test user has a completely unencrypted home
@Videonauth Had I said that? If so, I should correct it. Or was that in one of the heavily criticized answers about privacy with two sudoers?
it was in one of the answers
Ah, okay.
omg sky is falling
SOS AskUbuntu is down SOS Houston, we have a problem ...
:D
3:39 PM
This is what i got as i treid to reload AU main page
Are you still getting that? I tried immediately after you posted that, and it loaded fine for me. It's still working for me.
no, its gone now
--> askubuntu.com/a/981826 This is the answer i was just referring to
> Previous answers don't apply fully, if you marked encrypt home folder while installing Ubuntu. This guarantees encrypted home folders for every user, even so root can't read the data without the proper password of the user/owner of that home folder.
FALSE -- Myth debunked
Perhaps the answer could be edited so that it specifically describes the actual behavior. Certainly it's possible to create new users with encrypted home directories, so the basic technique should work so long as one actually does that. I think such an edit would be just inside the line of how much it is reasonable to change someone else's answer; if the information can be given correctly, I'd say go for it.
There does remain the question of whether or not the data can be decrypted without entering the user's password, when they are not logged in. I think that's one of the things you're planning to test. I think it cannot (short of actually cracking the encryption). I think the key is not stored in cleartext but must itself be decrypted using the user's password.
Is the user michael logged out completely? And are the data in that user's home directory decrypted?
3:48 PM
he is actually logged in since i did an update
@Videonauth Can you try it with that user completely logged out?
next is a test logging in solely on testuser who has sudo rights
after reboot so i make sure really nothing got decrypted beforehand
That makes sense. Though if logging out is insufficient, that does somewhat limit the value of the method for the OP's situation.
ok plain sudo su michael did not work
since his key is not in my keyring
but this key must be on the sytstem somewhere my guess
otherwise the decryption would not work
will dig into this
but before my cat drives me crazy I'm going to play a bit with her so she shuts up and stops continuously meowing. This drives me insane
:P
@Videonauth I think it's encrypted, and the user's password decrypts it. Doesn't resetting a password from recovery mode (or chrooting from a live environment to do it) cause the user's encrypted home directory, if they have one, to become inaccessible to them, such that special steps are required to decrypt the key using the old password? That was my understanding. Do we have a question for this on the site?
@Videonauth Understood.
Though arguably unclear, I think we should just dupe this question to both the suggested originals. One or the other (or both) almost certainly apply to the OP's situation, and to that of anyone who finds that question by searching.
3:57 PM
well if its using some kind of usual encryption method the key must be accesible to confirm the password and for the whole decryption
Wait, why?
Users' password hashes are not stored in their home directories.
since its using the keyring i think it is going to be an RSA key
But I mean when the user actually logs in. Doesn't that also decrypt their home directory? Isn't it done as part of the login process? By a PAM module or something?
yep its done by a pam module, but without the key belonging to the user how should it be decrypted then?
Although I wish this question contained a more detailed description of what the OP did, I don't think we should close it. I would consider the top comment to be a possible answer; I've replied to suggest the commenter post one.
I think this is no longer needed.
4:13 PM
ok the signature and the wrapped passphrase are out in the open, as i expected
@EliahKagan voted... maybe I overinterpreted in my edit
@Videonauth Can the wrapped passphrase be used without being decrypted by the user's login password (or cracked)? Or am I misunderstanding how it works?
this is what im actually trying but i guess without digging deep into how pam works and checking what encryption method is used it might be hard to crack that and even if you have the insight it might be impossible nearly
i could try to install jhon and give it a go to crack it but i guess this might take days even if i have here chosen a rather simple password
you surely could try to brute force it
unless you have setup pam and apport in a way which would lock your account on serveral fals trys
and since there is nearly no latency you could run a really large amount of tests per second
or i could run a keylogger as a service and simply wait till user no1 logs in to see his password then a simple su mainuser would ask me for even that passwrod and i would be in
since i have sudo this should be not really a problem to inplement that
I'm not too worried about how crackable the encryption is, for the purposes of that answer. You could mention the possibility of cracking and keyloggers in an updated comment (or in an edit, if that seems appropriate) but I think that, if the user's password is needed even for root to access the cleartext of a user's encrypted files that the user has not actually themselves decrypted by logging on, then the basic method in that answer is sound, and it just needs warnings added.
Especially about how new user accounts' home folders aren't encrypted by default even if the first user's was... On the other hand, if that is possible without knowing the user's password, cracking keys, or waiting for the user to log in, then the basic method in the answer is probably at best of minor benefit.
as you can see i now pretended to have gotten the other users password via keylogger
su user was enough from my testuser out to get into it
and unless they run a ton of antivirus stuff a keylogger would not be detected
adn the testuser is only in the sudo group, none else
but he could leverage this to get malicious
all comes down to "if i have physical access, youre hosed anyways"
and if i can pretend to be your buddy and dont give you any reason to suspect anything bad, your data is not save
will write an according comment now
So, as I said I conducted some tests. Outcome: If you select encrypted home at installation, the main user home will get encrypted, additional user homes will not get encrypted by default. Simple sudo su <username> is not enough to get the other users directory decrypted, however as long this second user is in the sudo group he could easily set the logging accordingly or install a keylogger to get the other users password. Then a simple su <username> with the other users password is enough to decrypt his directory. — Videonauth 27 secs ago
4:36 PM
Looks good.
yep but now i made my promise come tru that i do some tests
took a few days tho
I do think this is providing meaningful security, though. Not a lot of security, but more than nothing. There are varying degrees of access to physical hardware. If Alice has the ability to obtain Bob's secrets, but she has to undertake specific action to achieve this, which doesn't work until then Bob subsequently takes action, that's different from Alice just being able to type one command and instantly access Bob's secrets.
We have all sorts of security measures that can be defeated with full access to physical hardware. Virtual consoles and display managers are configured by default to require that users log in with their passwords. Users with the power to run commands as root with sudo by default must enter their passwords again to run commands as root, even though of course either full physical access or just access to run non-privileged commands as that user are sufficient to capture their password.
The list goes on and on. These things aren't worthless. "Not worthless" means something, considering how many precautions people take in the name of security that actually are totally worthless, like allowing a user to only run a few commands as root... but one of them is vim.
yep but i must admit encrypting the whole drive is somewhat good, if the computer gets stolen you cant even boot up to recovery console without providing a password
and if you mount the drive on a different machine you would have to be in the posession of the password or recovery passphrase too
good if you're someone traveling a lot and having a notebook with you
this together with a bios password is almost enough security if you are the sole user of this machine
but when it comes to multi user system encryption might be a weak way of preventing access
this would only be secure if additional users are not sudo, have only right to run the usual stuff on the machine and are chrootjailed to their home directories
How secure are chroot jails?
4:52 PM
@EliahKagan pretty good actually, as long the user who is jailed has no sudo rights, having those would allow the user to break out of jail
I had know why i kept my answer so vague, if you want to cover all aspects of how and why you could write multiple books
and even then some small little genious comes around and points out a way he could invalidate all measures described :D
as of now i could think of countless attack vectors if i would have access to a machine another person shares with me
like a neverending game of chess
white does a preventive move and i react to it
2FA might be an answer to the keylogger problem
then the password alone would be useless unless i have the other persons phone
5:40 PM
one more upvote and i have cracked the 1000 reputation mark on U&L
 
1 hour later…
7:59 PM
sorry, I was writing an answer!
Thank you for writing answers! I have not been writing a lot of answers lately.
Neither have I, but @Videonauth has been making up for it :D
yeah with varying results :P some where good recieved and some well fell under the radar
During the upcoming time of Winter Hats, I hope to write at least a hundred CW answers based on comments that should've been posted as answers.
8:04 PM
btw i just hit the 1k mark on U&L earlier
@EliahKagan I hope there's a hat for that!
Well if the hat is just for hoping I will do it, then it would probably have to be manually awarded... :)
@EliahKagan I am fine with that proposal :) (no need to move the encryption stuff)
I'll move them (but not the encryption stuff) somewhat soon.
@EliahKagan you can wear a physical offline CW hat
8:14 PM
This question is quite valuable and I hope it is never deleted. Is it a duplicate of something, though?
Anything i could add? askubuntu.com/a/984193
I don't know - do you mean, something not specific to WSL?
(my previous message was a reply to Eliah Kagan's last message, in case the lack of ping causes confusion!)
@Zanna I got that :) since my answer has nothing to do with WSL ;)
:)
8:31 PM
@Zanna Maybe. Though the detail about how the initial shell used in WSL isn't a login shell is somewhat important to that question. One should pretty much never set a prompt directly in a file like ~/.bash_profile, though, and for that I'm sure we have something else.
9:20 PM
Sorry about the extended messages about the encryption stuff, I get kinda carried away when it comes to encryption and cyphers, this is simply a topic I'm so highly interested in that i even tried to re-implement the software behind the newer encryption methods. :)
no problem!
@Videonauth I think it's fine. If later it seems too much to keep here, they can go to the Island. This is all a big gray area anyway, since the messages are about improving content on the site, so they're not really off-topic for the Downboat, so much as they have the potential to become drawn out and highly technical. The same logic of replies would be retained if they were moved (they were interspersed with the Bash messages here anyway, after all). But it may be unnecessary to move them.
Ok, well just let me know if i get to carried away sometimes, i could have been going on on encryption the whole afternoon and evening :P
I think you should feel free! It can always be moved to the Island. :)
9:35 PM
^
technical stuff is interesting & useful
That is, after all, what the site is for. I mean, I don't want to minimize the importance of questions and answers, which are the form technical content is most useful in here. But the whole point of cleanup is to support that, not the other way around. Answers don't exist so reviewers can feel useful, or even to be voted on.
hehe it begun for me after i got a book as gift from a friend, its all about ciphers and encryption and how it came to be so important and how important it was in the past
I think that got me hooked :)
Original Title: Codes, Ciphers and other Cryptic and Clandestine
Communication: Making & Breaking Secret Messages from Hierogplyphs to the Internet
ISBN: 1-57912-040-7
@Zanna Is it okay with you if I move the fine print to the bottom in How can I reproduce the error “package… needs to be reinstalled, but I can't find an archive for it” for testing? and remove the horizontal rule? It's <sub>, so there will already be extra space, and I think most readers will benefit from reading the actual question first.
9:51 PM
sure!
VTC'd (an commented about what to do if they really did try all those answers).
@Zanna I'll do so shortly.
did you see the book info i have given above?
that book is a very good read
first half of the book is about the history and the second part is about the different ciphers etc
No problem.
@Zanna I've edited it. I also made some other changes. You can edit again (or roll back) if you don't want them.
10:18 PM
thanks that's so much better
I was not happy with the wording of that question
You might want to add a bit of information about where in the source code to look, but I didn't want to do that because I was already adding a good bit of additional material.
I will leave the tab open. Now I am going to go to bed
thanks again for the awesome edit ^_^
I don't think it's urgently needed anyway. You could probably close the tab if you wanted. :)
Good night!
:)
@Videonauth Yes. Thanks!
 
1 hour later…
11:46 PM
Well im going to rest and hit the pillows

« first day (1990 days earlier)      last day (2495 days later) »