| 00:01.06 | *** join/#maemo merlin1991 (~merlin@Maemo/community/cssu/merlin1991) |
| 00:06.18 | *** join/#maemo inf (~inf@unaffiliated/informatic) |
| 00:07.00 | *** join/#maemo madduck (~madduck@domine.madduck.net) |
| 00:07.01 | *** join/#maemo madduck (~madduck@debian/developer/madduck) |
| 00:09.24 | *** join/#maemo masch (~quassel@2001:41d0:2:b63b::1) |
| 00:12.25 | DocScrutinizer05 | yoh, moin |
| 00:15.04 | xes | hi Doc |
| 00:20.35 | r00t^home | damn germans everywhere... |
| 00:21.11 | *** join/#maemo guerby (~guerby@nc10d-ipv6.tetaneutral.net) |
| 00:22.03 | *** join/#maemo sasquatch (~username@46.115.117.229) |
| 00:27.09 | *** join/#maemo mvp_ (~mvp@fl-207-30-52-254.dyn.embarqhsd.net) |
| 00:37.21 | *** join/#maemo RST38x (marat@wsip-184-180-40-182.ri.ri.cox.net) |
| 00:37.33 | *** join/#maemo kolp_ (~quassel@212.255.22.206) |
| 00:37.39 | *** join/#maemo flx_ (flux@2001:708:310:3430:2d8d:69a7:c612:f30a) |
| 00:38.04 | *** join/#maemo Gh0sty_ (~ghosty@77.109.102.161) |
| 00:39.19 | *** join/#maemo pigeon_ (~pigeon@eth5284.nsw.adsl.internode.on.net) |
| 00:39.31 | *** join/#maemo realityg1ps (~realityga@static.146.244.9.176.clients.your-server.de) |
| 00:39.51 | *** join/#maemo thuttu77_2 (~thuttu77@cs181246145.pp.htv.fi) |
| 00:40.02 | *** join/#maemo DocAvalanche (~lagrange@lagrange.cloud-7.de) |
| 00:44.24 | *** join/#maemo larrfed (~larrygtt3@c-50-151-48-65.hsd1.il.comcast.net) |
| 00:44.59 | *** join/#maemo aap (~drew@cpe-174-101-232-161.cinci.res.rr.com) |
| 00:46.33 | *** join/#maemo freemangordon (~freemango@130-204-50-168.2074221835.ddns.cablebg.net) |
| 00:50.11 | *** join/#maemo Apic (apic@geekhabitat.de) |
| 00:53.28 | *** join/#maemo techlife (techlife@60.212.33.102) |
| 00:58.46 | *** join/#maemo larrfed (~larrygtt3@c-50-151-48-65.hsd1.il.comcast.net) |
| 01:00.54 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 01:01.43 | *** join/#maemo larrfed (~larrygtt3@c-50-151-48-65.hsd1.il.comcast.net) |
| 01:08.57 | *** join/#maemo larrfed (~larrygtt3@c-50-151-48-65.hsd1.il.comcast.net) |
| 01:29.44 | *** join/#maemo DocScrutinizer51 (~lagrange@openmoko/engineers/joerg) |
| 01:32.26 | *** join/#maemo LaoLang_cool (~LaoLang_c@14.151.35.199) |
| 01:36.06 | *** join/#maemo Estel_ (~Estel@Maemo/community/contributor/Estel-) |
| 01:41.33 | Estel_ | freemangordon, exactly |
| 01:41.42 | Estel_ | (about google "inventing" augmented reality) |
| 01:41.55 | *** join/#maemo jpinx (~jpinx@unaffiliated/jpinx) |
| 01:42.28 | Estel_ | btw unless they put it into contact lens and bundle night vision with it, they may gtfo. Not to mention, that they probably can gtfo even with that, just because they're google. |
| 01:43.04 | Estel_ | want to print contact lenses with circuit in 15 years |
| 01:43.21 | Estel_ | ...on DIY 3D printer, prefferably :P |
| 01:55.15 | tx0h | reprap lenses would be amazing |
| 01:56.25 | tx0h | i like to have a delta bot printer |
| 01:57.12 | tx0h | with changeable heads (for printing, lasercutting and milling) |
| 01:57.35 | SpeedEvil | <PROTECTED> |
| 01:57.45 | SpeedEvil | you can mostly skip it for printing |
| 01:58.04 | DocScrutinizer05 | r00t^home: seems you're poorly informed, or you have a problem we're not aware of. Had a trip to Germany? then "germans everywhere" is just expected. Otherwise your statement makes no sense to me |
| 01:58.18 | SpeedEvil | but if you want something that stays dimensionally accurate with 50kg of vibrating load, it gets more painful |
| 01:59.36 | tx0h | they 3d printed a bike at least |
| 01:59.37 | DocScrutinizer05 | moin SpeedEvil |
| 01:59.54 | SpeedEvil | hey. |
| 02:00.17 | SpeedEvil | 3d printing is comparatively easy |
| 02:01.34 | tx0h | schlafenszeit |
| 02:10.10 | Estel_ | SpeedEvil, exactly, I have it with quite powerful DIY CNC |
| 02:10.30 | Estel_ | done first one with moving gate, switched to moving table rather |
| 02:10.41 | Estel_ | I know, beginner mistake, but i was beginner then ;) |
| 02:10.54 | SpeedEvil | is currently doing beam calculations for house mods. |
| 02:10.57 | SpeedEvil | fun. |
| 02:11.00 | Estel_ | + mill cooled by water |
| 02:11.01 | Estel_ | :) |
| 02:11.05 | SpeedEvil | rigidity is hard. |
| 02:13.16 | Estel_ | I thinking about vacuum lamp to hold material, later, but it needs to wait for $$$ |
| 02:13.24 | Estel_ | s/lamp/pump/ |
| 02:13.40 | Estel_ | lamp, lol |
| 02:13.50 | Estel_ | I must have been having plasma lamp in mind :P |
| 02:20.50 | SpeedEvil | sighs. |
| 02:21.03 | SpeedEvil | I need to get my nice vacuum pump hooked up. |
| 02:21.21 | SpeedEvil | ~micron dual mechanical oil pump |
| 02:23.16 | RST38x | Meanwhile, Saudi Arabia is preparing to abolish beheading |
| 02:30.08 | DocScrutinizer05 | what do they use instead? |
| 02:30.41 | RST38x | I would guess impalement, but who knows? |
| 02:31.08 | *** join/#maemo e-yes (~e-yes@94.45.179.115) |
| 02:32.29 | Estel_ | DocScrutinizer05, my device charge with 500 mA reproducibly :P |
| 02:32.51 | Estel_ | wanna install kp52 on two of your devices (or one? should suffice) and test? |
| 02:33.28 | Estel_ | is installing shitload of stuuf on 2nd device, to do same test in reversed order, charged N900 becoming charging one |
| 02:54.49 | DocScrutinizer05 | ganglia "www" server-down |
| 02:55.11 | DocScrutinizer05 | "last heartbeat: 5h ago2 |
| 02:55.14 | DocScrutinizer05 | "last heartbeat: 5h ago" |
| 02:56.21 | DocScrutinizer05 | oops echan, sorry |
| 03:02.01 | *** join/#maemo maybeWTF (~cl@p5B165F4A.dip.t-dialin.net) |
| 03:02.40 | *** join/#maemo d-_-b (~Linux@189.252.8.50) |
| 03:02.41 | d-_-b | ;) |
| 03:02.41 | d-_-b | hola |
| 03:02.45 | *** join/#maemo otep_ (~quassel@AP-203.167.4.11.sysads.com) |
| 03:14.35 | *** join/#maemo rlinfati (~rlinfati@190.163.244.184) |
| 03:24.51 | *** join/#maemo VD (priv8@my.irc.so) |
| 03:30.09 | *** join/#maemo uen (~uen@p5DCB30EC.dip.t-dialin.net) |
| 03:32.03 | DocScrutinizer05 | ~seen rlinfati |
| 03:32.06 | infobot | rlinfati <~rlinfati@190.163.244.184> was last seen on IRC in channel #n9, 12d 22h 28m 44s ago, saying: '~logs'. |
| 03:32.06 | *** join/#maemo jpinx (~jpinx@unaffiliated/jpinx) |
| 03:56.27 | Macer | what i would give for telepathy on this e7 heh |
| 03:57.17 | Macer | i heard the telepathy front end in meego was even better. too bad the n9 doesnt have a hwkb |
| 04:00.34 | larrfed | i first played angry birds on N900. have since transferred the save from Nokia N900 -> HTC Incredible S -> Nokia N9 -> iPhone 5. good thing the save file is compatible across all devices |
| 04:00.51 | *** join/#maemo dockane (~dockane@dsdf-4db54256.pool.mediaWays.net) |
| 04:01.38 | Macer | heh |
| 04:01.47 | Macer | cant say i got into angry birds |
| 04:02.05 | Macer | i thought it funny MS was using it in their marketing |
| 04:02.28 | Macer | wow! win8 can play a game that can run on 15 year old hardware! amazing! |
| 04:03.00 | Macer | heh... they couldnt choose like maybe a pc version of halo or something? |
| 04:03.39 | Macer | but then again the hardware coming out nowadays is low powered stuff... people gave up on 4 high powered gpus just to have the biggest e-nis |
| 04:03.51 | *** join/#maemo DocScrutinizer06 (~HaleBopp@openmoko/engineers/joerg) |
| 04:16.16 | *** join/#maemo jpinx (~jpinx@unaffiliated/jpinx) |
| 04:19.07 | *** join/#maemo kwtm5 (~kwtm1@c-24-5-190-87.hsd1.ca.comcast.net) |
| 04:24.48 | *** join/#maemo mvp_ (~mvp@fl-207-30-52-254.dyn.embarqhsd.net) |
| 04:45.46 | *** join/#maemo ieatlint (~ieatlint@tehinterweb.com) |
| 04:55.04 | *** join/#maemo realitygaps (~realityga@unaffiliated/realitygaps) |
| 04:55.23 | *** join/#maemo realitygaps (~realityga@static.146.244.9.176.clients.your-server.de) |
| 04:55.24 | *** join/#maemo realitygaps (~realityga@unaffiliated/realitygaps) |
| 04:59.07 | *** join/#maemo jpinx (~jpinx@unaffiliated/jpinx) |
| 05:34.12 | *** join/#maemo stardiviner (~stardivin@122.236.254.168) |
| 05:34.38 | *** join/#maemo SmilyOrg (Smily@BSN-61-9-94.dial-up.dsl.siol.net) |
| 05:34.55 | *** join/#maemo unclouded (~neil@2001:4428:200:80fc:603b:7981:7558:7f85) |
| 05:47.10 | *** join/#maemo shamus (~shmaus@ip-206-192-195-49.marylandheights.ip.cablemo.net) |
| 05:57.52 | *** join/#maemo dhbiker (~dhbiker@95.87.145.172) |
| 06:01.29 | DocScrutinizer05 | two years Fuckooshima, dang the time passes by... |
| 06:04.50 | *** join/#maemo calvaris (~calvaris@12.98.117.91.dynamic.mundo-r.com) |
| 06:19.02 | *** join/#maemo calvaris (~calvaris@12.98.117.91.dynamic.mundo-r.com) |
| 06:25.26 | *** join/#maemo VDVsx (~VDVsx@194.157.16.35) |
| 06:30.10 | *** join/#maemo ian--- (ian---@46.11.118.245) |
| 06:41.30 | *** join/#maemo ab (~ab@pdpc/supporter/professional/ab) |
| 06:50.21 | *** join/#maemo e-yes (~e-yes@94.45.179.115) |
| 06:52.31 | *** part/#maemo Aoyagi_joytop (~opera@88.208.95.82) |
| 06:57.05 | *** join/#maemo Aoyagi_joytop (~opera@88.208.95.82) |
| 07:06.21 | *** join/#maemo stardiviner (~stardivin@122.236.247.9) |
| 07:08.41 | *** join/#maemo vblazquez (~vic@248.71.15.37.dynamic.jazztel.es) |
| 07:10.10 | *** join/#maemo Cor-Ai_ (~cor-ai@212.112.62.30) |
| 07:15.54 | *** join/#maemo jrocha (~JRocha@116.244.165.83.dynamic.mundo-r.com) |
| 07:22.04 | *** join/#maemo XATRIX (~xatrix@77.88.209.171) |
| 07:25.50 | *** join/#maemo povbot (~supybot@office.pov.lt) |
| 07:25.50 | *** mode/#maemo [+v povbot] by hitchcock.freenode.net |
| 07:27.41 | *** join/#maemo Martix (~martix@219.104.broadband7.iol.cz) |
| 07:34.59 | *** join/#maemo croppa (~stuart@CPE-120-146-137-99.static.nsw.bigpond.net.au) |
| 07:39.57 | *** join/#maemo geaaru (~geaaru@host170-152-static.43-88-b.business.telecomitalia.it) |
| 07:42.27 | *** join/#maemo freemangordon (~freemango@130-204-50-168.2074221835.ddns.cablebg.net) |
| 07:55.36 | *** join/#maemo e-yes (~e-yes@94.25.130.1) |
| 07:56.12 | *** join/#maemo phryk (~phryk@static.39.216.9.176.clients.your-server.de) |
| 08:01.16 | *** join/#maemo cityLights (~nivw@bzq-218-29-26.cablep.bezeqint.net) |
| 08:01.24 | *** join/#maemo jrocha (~JRocha@116.244.165.83.dynamic.mundo-r.com) |
| 08:03.41 | *** join/#maemo pvanhoof (~philip@codeminded.be) |
| 08:03.49 | *** join/#maemo Venusaur (~wdwrf@wikipedia/Antonio-Lopez) |
| 08:07.56 | *** join/#maemo Martix (~martix@dhcp-229-170.eduroam.muni.cz) |
| 08:11.45 | *** join/#maemo croppa (~stuart@CPE-120-146-137-99.static.nsw.bigpond.net.au) |
| 08:14.04 | *** join/#maemo xprism (~xprism@110.232.94.169) |
| 08:15.34 | *** join/#maemo LauRoman (~LauRoman@5-14-92-176.residential.rdsnet.ro) |
| 08:20.22 | *** join/#maemo esaym153 (~esaym153@216-45-91-132.gvec.net) |
| 08:20.27 | *** join/#maemo _berto_ (~berto@dsl-hkibrasgw4-50dc4e-72.dhcp.inet.fi) |
| 08:24.39 | *** join/#maemo murrayc (~murrayc@ppp-188-174-144-158.dynamic.mnet-online.de) |
| 08:24.56 | *** join/#maemo _berto_ (~berto@dsl-hkibrasgw4-50dc4e-72.dhcp.inet.fi) |
| 08:38.52 | *** join/#maemo OkropNick (kuba@87.99.110.97) |
| 08:40.38 | *** join/#maemo vi__ (~Thunderbi@proxy.ei-info.com) |
| 08:41.42 | *** join/#maemo florian_kc (~fuchs@port-217-146-132-69.static.qsc.de) |
| 08:41.44 | *** join/#maemo florian_kc (~fuchs@Maemo/community/contributor/florian) |
| 08:43.42 | Macer | tmobile has some web guard crap on by default set to young adult |
| 08:43.48 | Macer | but i can look up fellatio on wikipedia |
| 08:44.39 | Macer | not only that but it takes forever for it to turn off |
| 08:44.49 | Macer | maybe next time the modem disconnects |
| 08:51.26 | *** join/#maemo eMHa__ (~mh@et-0-30.gw-nat.bs.kae.de.oneandone.net) |
| 08:54.13 | *** part/#maemo valeriusN (root@80.250.181.195) |
| 09:11.12 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 09:11.31 | *** join/#maemo otypoks (~quassel@host-5db0d228.sileman.net.pl) |
| 09:14.23 | Jaffa | GeneralAntilles: Morning |
| 09:14.34 | DocScrutinizer05 | well, I think you shouldn't allow anybody to use internet at all before you told her/him about facts of life |
| 09:14.42 | DocScrutinizer05 | hi Jaffa |
| 09:15.38 | DocScrutinizer05 | to block XXX is another thing |
| 09:15.58 | DocScrutinizer05 | but blocking wikipedia for young adults? c'mon! |
| 09:16.29 | *** join/#maemo tanty (~agomez@cs78210056.pp.htv.fi) |
| 09:16.38 | *** join/#maemo RzR (~RzR@82.236.136.171) |
| 09:16.41 | *** join/#maemo robink (~quassel@unaffilated/robink) |
| 09:17.40 | DocScrutinizer05 | probably you would forbid your kids to use your paper Encyclopedia as well? |
| 09:34.22 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 09:35.39 | *** join/#maemo andre__ (~andre@ip-62-24-76-119.net.upcbroadband.cz) |
| 09:35.39 | *** join/#maemo andre__ (~andre@wikimedia/aklapper) |
| 09:36.50 | *** join/#maemo AD-N770 (~jep@o.bcn.fluendo.net) |
| 09:39.25 | *** join/#maemo eijk_ (~eijk@e178231094.adsl.alicedsl.de) |
| 09:43.10 | *** join/#maemo futpib (~futpib@89.106.198.127) |
| 09:44.32 | DocScrutinizer05 | Jaffa: GeneralAntilles: we'll switch DNS on Thursday 1700UTC (tentatively scheduled), to point to our new server infra |
| 09:46.02 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 09:51.35 | *** join/#maemo Martix (~martix@eduroam-186.fi.muni.cz) |
| 09:53.22 | *** join/#maemo FlameReaper-PC (~FR@203.106.65.1) |
| 10:04.31 | *** join/#maemo felipe` (~felipe@unaffiliated/felipe) |
| 10:04.31 | *** join/#maemo eijk (~eijk@e178231094.adsl.alicedsl.de) |
| 10:09.40 | *** join/#maemo Smily (Smily@BSN-61-9-94.dial-up.dsl.siol.net) |
| 10:10.49 | *** join/#maemo futpib_ (~futpib@89.106.197.24) |
| 10:11.03 | DocScrutinizer05 | :eduroam: OT but still might be interesting for fremantle as well: http://lists.openmoko.org/pipermail/community/2013-March/068357.html |
| 10:12.15 | *** join/#maemo rcg (~rcg@2a02:908:e252:e101:19d6:5db8:5911:c64d) |
| 10:12.32 | *** join/#maemo chenca (chenca@nat/indt/x-fyxysrxuvagmpiva) |
| 10:15.37 | DocScrutinizer05 | @all: please review this http://pastebin.com/2ai6FqEK DNS changes planned for Thursday. Please holler if we missed anything, did typos or whatever |
| 10:16.06 | DocScrutinizer05 | you got ~60min for that |
| 10:16.27 | DocScrutinizer05 | we need to send it to Nokia, to get stuff done in time |
| 10:18.20 | DocScrutinizer05 | if that helps, here's the zonefile we got now on Nokia NS: http://pastebin.com/3kfwzNGw -- for reference |
| 10:18.57 | Macer | tabletsdev.maemo.org? |
| 10:21.24 | Macer | wow. i didnt know bind could do wildcards |
| 10:21.32 | Macer | facepalm |
| 10:22.49 | *** join/#maemo murrayc (~murrayc@ppp-188-174-144-158.dynamic.mnet-online.de) |
| 10:23.11 | DocScrutinizer05 | we actually don't plan to use that "new zonefile" as is, rather we'll ask Nokia to just edit each record accordingly to that list - which means old records will stay |
| 10:26.19 | *** join/#maemo valerius2k (root@icq.jabber.tsure.ru) |
| 10:33.36 | Jaffa | DocScrutinizer05: Looks good |
| 10:33.48 | DocScrutinizer05 | thanks |
| 10:34.41 | DocScrutinizer05 | Jaffa: please ponder to publish a /etc/hosts hack for the unfortunate case that Nokia doesn't manage the DNS switching until 15.3. and Nemein shuts down old stuff |
| 10:34.43 | freemangordon | DocScrutinizer05: any plans for scratchbox? |
| 10:35.05 | DocScrutinizer05 | plans? thedead1440 is setting it up |
| 10:35.39 | DocScrutinizer05 | I'd guess on Friday it should work |
| 10:35.53 | freemangordon | DocScrutinizer05: ok, great |
| 10:35.56 | DocScrutinizer05 | oooh, scratchbox domain? |
| 10:36.00 | freemangordon | yep |
| 10:36.17 | DocScrutinizer05 | we asked Jussi about what to do with it |
| 10:36.25 | DocScrutinizer05 | thedead1440: any answer? |
| 10:41.42 | frals | nice of nokia to send over a list of all projects.maemo.org domains as well, heh |
| 10:42.02 | *** join/#maemo markinfo (~marek-non@dhcp12.dmg.tuwien.ac.at) |
| 10:43.07 | DocScrutinizer05 | well, it's not exactly sekrit |
| 10:43.14 | *** join/#maemo kolp (~quassel@212.255.36.81) |
| 10:45.01 | DocScrutinizer05 | and we actually should have seen that list months ago |
| 10:45.42 | *** join/#maemo MohammadAG (~MohammadA@Maemo/community/contributor/MohammadAG) |
| 10:45.42 | divVerent | BTW... what is the current "best status" of encrypting the N900's data? |
| 10:45.48 | DocScrutinizer05 | http://pastebin.com/sCJ4uw27 <-updated |
| 10:45.55 | divVerent | I read about one way, which has the problem that if you don't authenticate before receiving a SMS/EMail, you get a problem |
| 10:46.27 | divVerent | (he said you have to auth within 60 seconds, or email app will start using an empty mail folder, which is BAD when THEN receiving something) |
| 10:46.49 | divVerent | for email this is kinda easy to mitigate - don't bring up network before authenticated... but for SMS it seems more difficult |
| 10:47.55 | divVerent | basically, the way I would think this could be fixed, would be "somehow" integrating the encryption setup into the boot process at the right place... e.g. REPLACE the way the user home is currently mounted (but that sounds like it may break stuff, at least on next root reflash) |
| 10:48.22 | DocScrutinizer05 | actually nope it's not that difficult. You could link the password request sync to the lockcode request |
| 10:48.50 | divVerent | also, the issues others had with mounting the whole homedir as crypto volume MAYBE could be fixed by using ext*, not VFAT, for the MyDocs partition, and symlinking anything "important" from homedir to MyDocs/ (but then of course you lose access to it in USB mass storage mode) |
| 10:48.54 | DocScrutinizer05 | or rather: PIN request |
| 10:49.07 | divVerent | I also thought of a separate way, on this manner... clone what the iPhone does ;) |
| 10:49.15 | divVerent | i.e. encrypt by a fixed device password, stored in some area on the root fs |
| 10:49.19 | divVerent | but clear this key on a special SMS |
| 10:49.24 | divVerent | aka "remote wipe" |
| 10:49.47 | divVerent | less secure if the attacker knows what they are doing... |
| 10:50.00 | divVerent | but OTOH, if they have the device in their hands, they also can break a "good" encryption method easily |
| 10:50.13 | divVerent | patch rootfs to replace whatever does the password query by something that also sends the PW somewhere |
| 10:50.35 | divVerent | so the "remote wipe" way isn't MUCH less secure... the attacker then has to think of using a faraday cage ;) |
| 10:51.10 | divVerent | DocScrutinizer05: can it be linked to the power-on unlock code request? |
| 10:51.20 | divVerent | I thought the phone is already "online", and thus can receive SMS, at that point |
| 10:51.22 | DocScrutinizer05 | why not? |
| 10:51.24 | divVerent | at least that's what iOS and Android do |
| 10:51.36 | *** part/#maemo valerius2k (root@icq.jabber.tsure.ru) |
| 10:51.49 | divVerent | (iOS actually TRIES, but fails, if the SIM card has the PIN required...) |
| 10:51.59 | divVerent | but does log into the WLAN immediately |
| 10:52.25 | divVerent | basically, I need the PW query as early as possible - ideally before anything on /home is use |
| 10:52.27 | divVerent | d |
| 10:52.39 | Hurrian | divVerent: ask for a password in /sbin/preinit? |
| 10:52.45 | divVerent | right, that's basically the idea ;) |
| 10:52.46 | kerio | divVerent: full disk encryption? |
| 10:52.56 | divVerent | kerio: encrypting /home and swap is sufficient |
| 10:53.04 | divVerent | but it seems to be almost as complex as full disk, if done right |
| 10:53.05 | Hurrian | You can already work with input devices in preinit. |
| 10:53.12 | divVerent | and what about the screen output? |
| 10:53.20 | divVerent | can some sort of text mode be activated (framebuffer...)? |
| 10:53.20 | kerio | text2screen or whatever it's called |
| 10:53.23 | Hurrian | text2screen. |
| 10:53.27 | kerio | yay |
| 10:53.38 | kerio | Hurrian: in fact, i think that it would be better to do so in rcS-late |
| 10:53.41 | *** join/#maemo valeriusN (root@80.250.181.195) |
| 10:53.55 | Hurrian | divVerent: if you can be assed to copy rootfs to eMMC or SD card, you can do whole-disk encryption. |
| 10:53.59 | divVerent | also, is there some sort of N900 VM to try out such stuff? |
| 10:54.12 | kerio | divVerent: Pali has a qemu thing going on i think |
| 10:54.15 | Hurrian | The N900 QEMU works, but is slow. Really slow. |
| 10:54.20 | divVerent | Hurrian: right, THEN one could do it the same way as desktop linux, basically initrd sets up everything |
| 10:54.25 | Hurrian | kerio: there's a QEMU included with the Maemo 5 QT SDK |
| 10:54.29 | Hurrian | *Qt |
| 10:54.33 | divVerent | ok, then all I need is to get the SDK ;) |
| 10:54.37 | divVerent | which seems currently down |
| 10:54.38 | kerio | divVerent: there's no initrd |
| 10:54.39 | Hurrian | divVerent: exactly. |
| 10:54.52 | divVerent | kerio: I would ASSUME that one of the various bootloader supports initrds... |
| 10:55.03 | kerio | but you can use the system on mtd to pivot_root somewhere else |
| 10:55.07 | Hurrian | u-boot supports initrds. |
| 10:55.21 | kerio | ...now that i think about it, full disk encryption on the n900 is *much* more difficult than just /home |
| 10:55.23 | divVerent | yes... but also... rootfs doesn't NEED to be encrypted |
| 10:55.32 | divVerent | and swap only needs to to avoid leaking stuff, thus the key for swap can be entirely random |
| 10:55.37 | kerio | an encrypted /opt will be hell though |
| 10:55.38 | divVerent | (and generated on boot) |
| 10:55.53 | kerio | for performance |
| 10:56.05 | divVerent | I could try living with encrypting MyDocs only, and symlinking certain dirs below ~ into that |
| 10:56.16 | divVerent | and adding hacks to kill processes on USB mass storage entry |
| 10:56.22 | divVerent | e.g. mail reception would have to be stopped then |
| 10:56.32 | divVerent | (and then, I'd probably NOT encrypt SMS/calls) |
| 10:57.03 | Hurrian | divVerent: note that you'd have to be careful to encrypt everything personal, and know what gets leaked into unencrypted filesystems. |
| 10:57.20 | Hurrian | The N900 won't refuse binaries loaded by NOLO over USB. |
| 10:57.20 | kerio | Hurrian: that's why full disk encryption would be better, i think |
| 10:57.52 | divVerent | Hurrian: of course |
| 10:58.20 | *** join/#maemo rcg (~rcg@2a02:908:e252:e101:29aa:565d:50a1:6d44) |
| 10:58.47 | *** join/#maemo muellisoft (~muelli@port-50008.pppoe.wtnet.de) |
| 11:04.11 | divVerent | Hurrian: my biggest worries would be the stored passwords, not even the emails :P |
| 11:05.34 | Hurrian | divVerent: Encrypting /home sounds solid for the moment - nothing writes above it outside of program installations and the usual tweaking. |
| 11:08.13 | *** join/#maemo vblazquez (~vic@248.71.15.37.dynamic.jazztel.es) |
| 11:23.03 | divVerent | Hurrian: yes, the only issue is that /home is accessed too early... I NEED to unlock it before the desktop (and maybe some other services) start up |
| 11:23.03 | divVerent | basically, it needs to somehow be integrated at the right point in bootup |
| 11:23.03 | divVerent | 11:57:20 Hurrian | The N900 won't refuse binaries loaded by NOLO over USB. |
| 11:23.03 | divVerent | exactly that's the issue why any encryption is SOMEWHAT futile, and I may consider implementing remote wipe instead |
| 11:23.03 | divVerent | (maybe "remote wipe" with a way out, though) |
| 11:23.03 | divVerent | way out being, having a copy of the key file elsewhere, so it can be restored after the keyfile has been "wiped" |
| 11:23.04 | DocScrutinizer05 | [GENERAL NOTICE] *.maemo.org will go read-only mode in <now+30h>, to do final sync to new infra. Possibly *some* services will need to get shut down completely for several hours |
| 11:23.04 | *** join/#maemo Vanadis__ (~Vanadis@84-73-15-21.dclient.hispeed.ch) |
| 11:23.05 | divVerent | and I know that SSDs still would typically contain the data even after overwriting, but software can't get at these blocks any more, so it'd be "good enough" |
| 11:23.59 | Hurrian | divVerent: receiving SMS kinda requires the Ofono stack outside of Maemo. |
| 11:24.36 | divVerent | basically, my "ultimate" goal would be asking for password BEFORE anything using /home is running |
| 11:24.53 | divVerent | also, the MyDocs area does not NEED to be encrypted for my purposes... or maybe I will use encfs for the photos only |
| 11:25.03 | divVerent | /home however is somewhat needed |
| 11:25.13 | divVerent | as I assume that is where stored passwords end up |
| 11:26.24 | *** join/#maemo lizardo (lizardo@nat/indt/x-xxnsdmlhqumhmytp) |
| 11:27.28 | divVerent | I am mainly worried about a possible attacker getting hold of my email account, the other data (video, audio, photos) don't matter much |
| 11:27.52 | divVerent | even the emails themselves aren't as critical |
| 11:28.23 | divVerent | but once one can receive NEW messages, one can password reset virtually everything |
| 11:28.41 | divVerent | so one option would also be entering email password at bootup... if that's easier to do |
| 11:29.05 | Hurrian | divVerent: and how do you store this passphrase? |
| 11:29.13 | divVerent | in RAM of course |
| 11:29.17 | divVerent | lock screen would protect that |
| 11:29.25 | divVerent | I assume the area should be mlock'd of course ;) |
| 11:29.26 | Hurrian | no, I mean, how does the OS check, where is the password stored. |
| 11:29.39 | divVerent | how the OS checks? |
| 11:29.44 | Hurrian | plain LUKS or dm-crypt is secure, and should do fine. |
| 11:29.51 | divVerent | right, if viable |
| 11:30.03 | divVerent | has anoyne already done it, in a way it's properly integrated into the bootup process? |
| 11:30.09 | divVerent | because, IF that is possible, it's what I would want |
| 11:30.34 | divVerent | also, how important is /opt for bootup? |
| 11:30.45 | Hurrian | divVerent: someone's done a password field for /home in console once, iirc |
| 11:30.53 | divVerent | in console, yes |
| 11:30.55 | Hurrian | also, /opt doesn't matter until you start using it. |
| 11:31.07 | divVerent | but it had the side effect of losing SMS if the PW is not entered quickly enough |
| 11:31.07 | Hurrian | e.g. Xorg starting |
| 11:31.28 | divVerent | and querying the PW from device keyboard is possible without xorg? good then |
| 11:31.36 | divVerent | on desktop linux it's easy of course ;) |
| 11:32.03 | Hurrian | divVerent: you could probably edit the init scripts to wait on a single task before continuing. |
| 11:32.16 | Hurrian | upstart makes things slightly more painful than reordering init. |
| 11:32.26 | divVerent | yes, I know |
| 11:32.42 | divVerent | but the N900 doesn't seem to ONLY use upstart, or does it? |
| 11:32.53 | Hurrian | it uses only upstart. |
| 11:33.00 | Hurrian | well, past /sbin/preinit. |
| 11:33.14 | divVerent | oh, so /sbin/init IS upstart |
| 11:33.18 | divVerent | what is /etc/inittab good for then? |
| 11:33.46 | Hurrian | Diddly squat on the N900. |
| 11:33.48 | *** join/#maemo zhxt (~zhxt@125.39.9.148) |
| 11:34.06 | Hurrian | plain tty doesn't play well with SGX driver. |
| 11:35.16 | divVerent | and what mounts /home? |
| 11:35.25 | divVerent | currently trying to find out where upstart service files are |
| 11:35.33 | divVerent | I only know bsd, sysvinit and systemd yet |
| 11:35.35 | Hurrian | rcS-late, iirc mounts /home. |
| 11:36.51 | divVerent | ah, nice... found where /home is mounted |
| 11:36.57 | divVerent | /etc/init.d/rcS |
| 11:37.03 | divVerent | hm... so upstart still uses /etc/init.d? |
| 11:37.47 | Hurrian | Nope. |
| 11:37.54 | Hurrian | Check /etc/event.d/rcS-late |
| 11:38.12 | divVerent | hm... suppsoedly upstart usrs /etc/init/* bugt I don't have that |
| 11:39.36 | divVerent | ok, I see then what to do |
| 11:40.09 | divVerent | can input be read "safely" from /dev/tty in these scripts? (and using text2screen for output) |
| 11:40.52 | divVerent | the biggest problem is large danger of bricking it... because stuff is optified |
| 11:40.52 | Hurrian | Without anything else, it's preferred that input from keyboard is read using evkey. |
| 11:41.12 | Hurrian | In rcS-late, you can wedge most of Maemo's init. |
| 11:41.34 | divVerent | well, I already saw that if this script fails mounting /home, the N900 will reboot |
| 11:42.02 | divVerent | evkey seems kinda bad for querying passwords... |
| 11:42.32 | divVerent | text2screen works fine |
| 11:42.53 | Hurrian | divVerent: if the script exits, nothing launches, watchdog kicks in. |
| 11:43.36 | Hurrian | Wait, so you want to add a password query while /inside/ Maemo? |
| 11:43.49 | Hurrian | The boot splash makes that not-quite-easy. |
| 11:44.12 | divVerent | "inside"? |
| 11:44.14 | Hurrian | You're going to have to forego the tiny dots, and use fbcon to get a proper, easily-working text input going. |
| 11:44.16 | divVerent | I mean from rcS-lagt |
| 11:44.25 | divVerent | and if I have to enter the PW blindly, it's ok too |
| 11:44.29 | DocScrutinizer05 | divVerent: see BM |
| 11:44.30 | Hurrian | divVerent: yes, "inside" maemo is anything past rcS-late |
| 11:44.32 | divVerent | am more worried about input |
| 11:44.41 | divVerent | well, is "in rcS-late" the same as "past rcS-late"? |
| 11:44.43 | divVerent | ;) |
| 11:44.44 | Hurrian | whoops, I mean preinit, not rcS-late |
| 11:44.50 | divVerent | oh, I see |
| 11:45.06 | divVerent | one other way would be doing it from preinit, AND changing rcS-late to use the /dev/mapper/* device if available |
| 11:45.13 | divVerent | the one one gets after cryptsetup |
| 11:45.35 | DocScrutinizer05 | honestly, check source of BM |
| 11:45.38 | *** join/#maemo tx0h (~tx@f052049146.adsl.alicedsl.de) |
| 11:45.39 | divVerent | what is BM? |
| 11:46.03 | divVerent | that boot menu thing that already is in /sbin/preinit? |
| 11:46.44 | *** join/#maemo tzafrir_laptop (~tzafrir@local.xorcom.com) |
| 11:47.10 | DocScrutinizer05 | ~bm |
| 11:47.10 | infobot | backupmenu is, like, http://talk.maemo.org/showthread.php?t=63975 |
| 11:47.17 | DocScrutinizer05 | basically yes |
| 11:48.30 | divVerent | hm... this thing just reads from stdin |
| 11:48.35 | divVerent | the existing preinit |
| 11:48.40 | divVerent | and seems to have mixed use of echo and text2screen |
| 11:48.49 | divVerent | does that mean echo would actually work, and just possibly end up ugly? |
| 11:48.53 | DocScrutinizer05 | I think you could query your password there, write it to a tmp-file and use that tmp-file on mount time |
| 11:49.01 | divVerent | well, if I _am_ there |
| 11:49.06 | divVerent | I am thinking of an even more nasty hack :P |
| 11:49.08 | *** join/#maemo Martix (~martix@eduroam-186.fi.muni.cz) |
| 11:49.11 | divVerent | query PW there, cryptsetup etc. |
| 11:49.18 | divVerent | and THEN, delete the mmc device normally used for home |
| 11:49.26 | divVerent | and instead put there a symlink to the /dev/mapper device from cryptsetup |
| 11:49.36 | divVerent | then MAYBE an unmodified rcS-late would work |
| 11:49.57 | DocScrutinizer05 | delete device? |
| 11:50.03 | divVerent | replace it by a symlink |
| 11:50.19 | divVerent | as in, /dev/mmc0blkp2 -> /dev/mapper/crypt |
| 11:50.44 | divVerent | AFTER the crypto device has been opened, and thus dm-crypt holds a reference to the partition |
| 11:51.18 | DocScrutinizer05 | you're aware that at this point in time nothing got mounted yet? |
| 11:51.25 | divVerent | that's the idea |
| 11:51.31 | divVerent | udev probably is there, though... or not yet? |
| 11:51.38 | divVerent | it does rely on some device nodes in /dev |
| 11:52.10 | divVerent | alternative would be chanigng rcS-late to use /dev/mapper/crypt if available, the mmc nodes if not |
| 11:53.21 | divVerent | hm... cryptsetup is not packaged? |
| 11:54.17 | divVerent | oh, only extras-devel |
| 11:54.33 | divVerent | does there happen to be a packages.debian.org-like site for Maemo? |
| 11:54.46 | divVerent | where one can search for package contents? |
| 11:55.04 | DocScrutinizer05 | ~pkgs |
| 11:55.04 | infobot | methinks #maemo pkg is http://maemo.org/packages/ |
| 11:55.31 | divVerent | that only looks for names but still good :) |
| 11:55.42 | divVerent | packages.debian.org also indexes path names used by packages |
| 11:55.48 | divVerent | so you can e.g. look for what installs /bin/ls |
| 11:59.30 | divVerent | ok, when I can get hold of the Maemo SDK VM, I will try getting that to work |
| 11:59.39 | divVerent | (and if it means running qemu in virtualbox... don't care) |
| 12:00.23 | divVerent | one other part I am somewhat afraid of is properly converting the /home partition to be encrypted... because, what if something goes wrong during the transfer ;) |
| 12:00.50 | divVerent | I'd probably put a tarball on the VFAT partition, cryptsetup, mkfs.ext3, restore... and hope nothing will happen during that |
| 12:01.25 | *** join/#maemo chenca (chenca@nat/indt/x-txncaivhpqmylrqm) |
| 12:03.53 | *** join/#maemo MetalGearSolid (~MetalGear@251.241.50.60.brf03-home.tm.net.my) |
| 12:13.45 | *** join/#maemo futpib__ (~futpib@89.106.198.43) |
| 12:14.46 | *** join/#maemo hardaker (~hardaker@dhcp-15b4.meeting.ietf.org) |
| 12:21.03 | *** join/#maemo FlameReaper-PC (~FR@203.106.65.1) |
| 12:22.41 | *** join/#maemo guampa (~guampa@unaffiliated/guampa) |
| 12:23.01 | *** join/#maemo dos1 (~dos@unaffiliated/dos1) |
| 12:33.44 | *** join/#maemo RzR (~RzR@82.236.136.171) |
| 12:33.52 | GeneralAntilles | Jaffa, morning. |
| 12:33.53 | GeneralAntilles | Jaffa, got lazy last night. Damn DST. |
| 12:34.41 | *** join/#maemo shamus (~shmaus@ip-206-192-195-49.marylandheights.ip.cablemo.net) |
| 12:36.36 | Jaffa | GeneralAntilles: Yeah, me too (damned work) |
| 12:36.58 | Jaffa | Although DST in the US before Europe does mean only a 7 hour time difference when I go to California next week |
| 12:41.00 | *** join/#maemo kaawee_ (~user@port-92-206-60-83.dynamic.qsc.de) |
| 12:52.19 | *** join/#maemo markinfo (~marek-non@dhcp12.dmg.tuwien.ac.at) |
| 13:02.28 | *** join/#maemo eijk (~eijk@e178231094.adsl.alicedsl.de) |
| 13:05.07 | Macer | http://www.youtube.com/watch?v=3iGm4dl0Ys4 |
| 13:05.11 | Macer | omg i love the steve jobs part |
| 13:05.14 | *** join/#maemo valeriusL (~valerius@178.76.208.218) |
| 13:05.15 | Macer | i cried laughing |
| 13:09.11 | *** join/#maemo cyborg-one (~cyborg-on@31.31.121.114) |
| 13:10.48 | *** join/#maemo futpib (~futpib@89.106.197.38) |
| 13:15.46 | *** join/#maemo drussell (~dave@nat/canonical/x-uqzzcnuutkqcsgyd) |
| 13:15.50 | *** join/#maemo kaawee_ (~user@wlan251132.rz.uni-leipzig.de) |
| 13:16.10 | *** join/#maemo mvp_ (~mvp@fl-207-30-52-254.dyn.embarqhsd.net) |
| 13:18.20 | *** join/#maemo xprism (~xprism@118.97.95.76) |
| 13:27.56 | DocScrutinizer05 | [GENERAL NOTICE] *.maemo.org will go read-only mode in <now+30h>, to do final sync to new infra. Possibly *some* services will need to get shut down completely for several hours. We probably will need to completely shut down most of *.m.o for a short while, after Thu 1700UTC when DNS switch supposed to have happened |
| 13:28.07 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 13:35.37 | divVerent | how to fix these?Failed to fetch http://repository.maemo.org/extras-devel/pool/fremantle/free/c/cryptsetup/cryptsetup_1.0.7-12maemo0_armel.deb Hash Sum mismatch |
| 13:35.55 | divVerent | skeiron's extras-devel doesn't seem to have this yet |
| 13:36.32 | divVerent | (but checking again) |
| 13:37.05 | divVerent | yes, doesn't have it |
| 13:39.45 | divVerent | Failed to fetch http://maemo.jacekowski.org/mirror/repository.maemo.org/extras-devel/pool/fremantle/free/c/cryptsetup/cryptsetup_1.0.7-12maemo0_armel.deb Hash Sum mismatch |
| 13:39.55 | divVerent | maybe it IS me... when two repos have the same problem. Just how to fix it? |
| 13:41.01 | *** join/#maemo kwtm7 (~kwtm1@c-24-5-190-87.hsd1.ca.comcast.net) |
| 13:41.05 | GeneralAntilles | Jaffa, SF? |
| 13:42.02 | *** join/#maemo kaawee_ (~user@port-92-206-60-83.dynamic.qsc.de) |
| 13:43.18 | *** join/#maemo RzR (~RzR@82.236.136.171) |
| 13:54.26 | *** join/#maemo _kW (~user@port-92-206-119-169.dynamic.qsc.de) |
| 13:56.16 | *** join/#maemo rcg (~rcg@2a02:908:e252:e101:7832:c251:2800:e99b) |
| 13:57.47 | Jaffa | GeneralAntilles: LA |
| 13:59.11 | Jaffa | GeneralAntilles: For two weeks. Then maybe a relocation there for a year |
| 13:59.35 | divVerent | OK, first test works... I used text2screen to write something on the screen from preinit. echo however did not work properly. |
| 13:59.46 | GeneralAntilles | Haven't even been to SoCal. |
| 13:59.49 | divVerent | as in, I couldn't find it |
| 13:59.50 | GeneralAntilles | Sounds like it could be fun. |
| 13:59.57 | GeneralAntilles | Pain to relocate for just a year, though. |
| 14:00.42 | divVerent | also, cryptsetup has an option to wait for a timer to expire before exiting... so "bricking" could be prevented that way (obviously, for playing around with it, I will have to use something else than /home then) |
| 14:02.34 | divVerent | what happens if the VFAT partition is in broken state? Does that hinder booting? |
| 14:03.01 | divVerent | also, would it silently reformat it? |
| 14:03.57 | divVerent | yes indeed, echo output ends up nowhere, only text2screen works... kinda bad as I would LIKE to see cryptsetup's messages... |
| 14:04.02 | divVerent | but can live without them |
| 14:04.53 | *** join/#maemo loganbr (~user@adsl-63-204-157-24.dsl.snfc21.pacbell.net) |
| 14:06.03 | divVerent | so next thing to check is whether I can get input properly |
| 14:08.58 | thedead1440 | DocScrutinizer05: sorry for the late reply; no reply till date from Jussi :( |
| 14:09.12 | thedead1440 | In total 3 reminders have been sent to him for various issues |
| 14:09.20 | thedead1440 | the latest was the one 2 days ago |
| 14:09.21 | divVerent | WORKS, "read" command does successfully read. So will quite likely cryptsetup. |
| 14:11.56 | *** join/#maemo kaawee (~user@port-92-206-60-83.dynamic.qsc.de) |
| 14:13.34 | DocScrutinizer05 | text2screen -xHERE -yTHERE -text "cryptsetup says: `cryptsetup -foo -bar` " |
| 14:13.43 | divVerent | yes, that's not interactive |
| 14:13.45 | *** join/#maemo drussell (~dave@nat/canonical/x-mpjfhzxushxujqbf) |
| 14:13.49 | divVerent | but that's what I will use as workaround on error |
| 14:14.28 | *** join/#maemo drussell (~dave@nat/canonical/x-exhxwlziwitoaacc) |
| 14:17.08 | DocScrutinizer05 | cryptsetup -foo -bar <readtext | while read; do text2screen -x -y -text "$REPLY"; done; |
| 14:18.29 | *** join/#maemo Fottes (5edc390b@gateway/web/freenode/ip.94.220.57.11) |
| 14:18.35 | *** join/#maemo FlameReaper-PC (~FR@203.106.65.1) |
| 14:19.05 | divVerent | hm... that I know, but don't trust much ;) maybe will try when the rest works |
| 14:19.14 | divVerent | as in, can I be sure the output is lne buffered |
| 14:21.10 | divVerent | also, I want to get the exit status of cryptsetup if possible |
| 14:21.32 | divVerent | ok, first attempt failed, cryptsetup not in $PATH ;) but I did get the error message |
| 14:24.03 | divVerent | is -y in pixels or rows? |
| 14:24.21 | r00t^home | DocScrutinizer05: [r00t^home] (~r00t@port-83-236-58-48.dynamic.qsc.de) |
| 14:26.05 | DocScrutinizer05 | r00t^home: huh? |
| 14:27.36 | DocScrutinizer05 | what the heck is this now, except a highlight pestering me for dunno what? |
| 14:28.09 | DocScrutinizer05 | an I supposed to have any idea what to do with this "info"? |
| 14:29.12 | DocScrutinizer05 | (not that I couldn't gain same info with a /who ) |
| 14:29.57 | divVerent | hm... looks like text2screen coordinates are broken |
| 14:31.06 | *** join/#maemo fizzie (fis@unaffiliated/fizzie) |
| 14:31.06 | *** join/#maemo jacekowski (jacekowski@jacekowski.org) |
| 14:31.06 | *** join/#maemo ShadowJK (jk@terminus.enivax.net) |
| 14:31.26 | *** join/#maemo jyrjyr (~jyrjyr@mail.turvamies.fi) |
| 14:31.38 | *** join/#maemo rm_work|away (~rm_work@johnx.xen.prgmr.com) |
| 14:31.39 | *** join/#maemo cyndis (cyndis@2001:1bc8:1004::1) |
| 14:31.41 | *** join/#maemo rm_work (~rm_work@Maemo/community/cssu/rm-you) |
| 14:31.54 | DocScrutinizer05 | they might not be what you think they should |
| 14:31.57 | *** join/#maemo kraft (kraft@gateway/shell/blinkenshell.org/x-htzyzadmtpjredkj) |
| 14:32.07 | *** join/#maemo aloril (~aloril@dsl-tkubrasgw3-54f97e-153.dhcp.inet.fi) |
| 14:32.11 | divVerent | well, x and y are simple concepts :P |
| 14:32.14 | *** join/#maemo torindel (~torindel@83-144-101-198.static.chello.pl) |
| 14:32.32 | divVerent | it looks like it calculates byte positions from corodinates wrong, like, based on the wrong screen size |
| 14:32.33 | *** join/#maemo inf (~inf@unaffiliated/informatic) |
| 14:32.50 | DocScrutinizer05 | yeah, and *usually* they are even 90° to each other |
| 14:33.19 | DocScrutinizer05 | byte positions? |
| 14:33.36 | divVerent | OH |
| 14:33.40 | divVerent | the coordinates DO work fine at bootup |
| 14:33.44 | divVerent | it's just screwed up while X runs |
| 14:33.52 | DocScrutinizer05 | lol |
| 14:33.54 | *** join/#maemo drussell (~dave@nat/canonical/x-lesprelpqonguloo) |
| 14:33.58 | *** join/#maemo chainsawbike (~chainsawb@unaffiliated/chainsawbike) |
| 14:34.00 | divVerent | so that's ok for me... except it didn't find cryptsetup |
| 14:34.13 | divVerent | but how can it fail to find /usr/sbin/cryptsetup but finds /usr/bin/text2screen |
| 14:34.34 | divVerent | it is not a PATH issue, as I specified the paths explicitly |
| 14:35.01 | DocScrutinizer05 | well, maybe the former is iptified? |
| 14:35.04 | divVerent | maybe a library cryptsetup needs lives in /opt? |
| 14:35.06 | divVerent | that would be... bad |
| 14:35.32 | DocScrutinizer05 | lsof is your friend |
| 14:35.43 | DocScrutinizer05 | I guess |
| 14:35.45 | divVerent | cryptsetup indeed lives in /opt... that's stupid |
| 14:36.07 | DocScrutinizer05 | well, yeah |
| 14:36.11 | divVerent | is there a "proper" way to un-optify a path? |
| 14:36.15 | DocScrutinizer05 | so deoptify it |
| 14:36.18 | divVerent | or is the only real way to make my own copy of the file |
| 14:36.32 | divVerent | I don't want it to get optified again when the package gets upgraded |
| 14:36.45 | DocScrutinizer05 | allegedly the optify scripts support de-optification as well |
| 14:36.55 | divVerent | hm... if dpkg -L is true |
| 14:37.01 | divVerent | then optification is done BEFORE building the .deb |
| 14:37.05 | divVerent | and not a feature hacked into e.g. dpkg |
| 14:37.16 | divVerent | so I will actually have to copy the file |
| 14:37.19 | *** join/#maemo shamus (~shmaus@ip-206-192-195-49.marylandheights.ip.cablemo.net) |
| 14:37.35 | divVerent | that kinda makes me want to stop... at least, to stop considering encrypting whole /home |
| 14:37.51 | DocScrutinizer05 | hmm, probably osso-autooptify.sh should still work |
| 14:37.55 | divVerent | and instead apply it to the normally VFAT partition, but formatting it as something else and symlinking homedir stuff into it |
| 14:38.23 | divVerent | because, what if e.g. a package cryptsetup depends on (e.g. the device mapper libs) suddenly get optified |
| 14:38.32 | divVerent | IIRC the decision whether or not to optify depends by file size, and code grows |
| 14:39.16 | divVerent | is there any known issues when the MyDocs partition is ext3/ext4? |
| 14:39.20 | DocScrutinizer05 | then otoh I wouldn't feel any bad by mv `which cryptsetup` /sbin |
| 14:39.26 | divVerent | yes, that will work |
| 14:39.37 | divVerent | but what if then some device mapper libs suddenly are optified too |
| 14:40.24 | DocScrutinizer05 | nothing ever is "suddenly optified" |
| 14:41.19 | *** join/#maemo tzafrir_laptop (~tzafrir@local.xorcom.com) |
| 14:41.29 | DocScrutinizer05 | and, as mentioned above, the auto-optify-once.sh or whatever the name has a config file with option to DEoptify as well |
| 14:44.57 | *** join/#maemo Fottes (5edc390b@gateway/web/freenode/ip.94.220.57.11) |
| 14:45.13 | RST38x | moos |
| 14:46.29 | *** join/#maemo arcean (~arcean@apn-95-41-105-99.dynamic.gprs.plus.pl) |
| 14:52.29 | *** join/#maemo Martix (~martix@dhcp-229-170.eduroam.muni.cz) |
| 15:00.51 | divVerent | DocScrutinizer05: oh, so it is NOT the .deb that is already optified? |
| 15:02.20 | DocScrutinizer05 | I dunno |
| 15:02.27 | *** join/#maemo VDVsx (~VDVsx@88.114.88.95) |
| 15:02.39 | DocScrutinizer05 | but optify-script is not depending on .deb aiui |
| 15:03.14 | DocScrutinizer05 | it simply moves FQN files or dirs to and from /opt |
| 15:03.27 | DocScrutinizer05 | and creates/deletes symlinks |
| 15:03.32 | divVerent | no, the .deb is already optified |
| 15:03.42 | DocScrutinizer05 | so what? |
| 15:03.52 | divVerent | https://gist.github.com/5134857 |
| 15:03.57 | DocScrutinizer05 | so what? |
| 15:04.02 | divVerent | that means, when ANOTHER package gets optified too, I may get a problem |
| 15:04.09 | divVerent | basically, what i _want_ is a statically linked cryptsetup :P |
| 15:04.23 | DocScrutinizer05 | then build it |
| 15:04.29 | divVerent | for that I need the SDK |
| 15:04.30 | *** join/#maemo Martix_ (~martix@eduroam-165.fi.muni.cz) |
| 15:04.35 | divVerent | for which I need the VM image that's currently not availablöe |
| 15:04.54 | DocScrutinizer05 | the VM is terribly obsolete anyway |
| 15:04.57 | divVerent | well |
| 15:05.03 | divVerent | the SDK only exists for 32bit systems |
| 15:05.08 | divVerent | I don't have any PC with a 32bit distro |
| 15:05.19 | DocScrutinizer05 | I'd rather set up an own VM and install normal SDK in it |
| 15:05.31 | divVerent | so I'd have to set up my own VM... and that I'd prefer to avoid unless I really must |
| 15:05.32 | *** join/#maemo FlameReaper-PC (~FR@203.106.65.1) |
| 15:05.40 | divVerent | I'd prefer taking an existing ready made VM, if possible |
| 15:05.48 | divVerent | unless we KNOW it won't appear again |
| 15:06.25 | DocScrutinizer05 | ~skeiron |
| 15:06.25 | infobot | it has been said that skeiron is the semi-official backup and emergency standin for all internet borne maemo resources: http://skeiron.org/tablets-dev/ http://talk.maemo.org/showthread.php?p=1315143#post1315143 |
| 15:06.29 | divVerent | I know :P |
| 15:06.34 | divVerent | but exactly this file is not on skeiron |
| 15:06.45 | divVerent | his "download" for the SDK goes to *.nokia.com |
| 15:06.45 | DocScrutinizer05 | hmm, too bad then |
| 15:06.48 | divVerent | which has the dead link |
| 15:07.43 | DocScrutinizer05 | lol, the mirror of course doesn't fix stupid .php scripts to point to mirror instead original nokia.com page |
| 15:08.49 | divVerent | but anyway, which Ubuntu release does the SDK require? |
| 15:08.57 | divVerent | I wouldn't be surprised if 12.10 does NOT work :P |
| 15:10.38 | divVerent | is 9.04 still the "recommended" version? |
| 15:10.57 | kerio | the VM image is ubuntu 10.10 afaik |
| 15:11.04 | divVerent | ok, then that's what I will use |
| 15:11.29 | divVerent | don't want to have to mess with compatibility issues |
| 15:11.38 | kerio | use the VM image though |
| 15:11.44 | divVerent | I would, if I could |
| 15:11.47 | divVerent | but the download of it is dead |
| 15:11.51 | divVerent | and it's not mirrored on skeiron |
| 15:12.11 | divVerent | for what I am going to do, even the outdated image will be good enough |
| 15:12.15 | divVerent | as all I want is a static binary |
| 15:12.15 | kerio | aww, did he delete them |
| 15:12.18 | divVerent | no |
| 15:12.21 | divVerent | he never mirrored them |
| 15:12.24 | kerio | sure he did |
| 15:12.25 | divVerent | the link goes to nikia.com |
| 15:12.43 | divVerent | http://skeiron.org/tablets-dev/ where? |
| 15:12.49 | divVerent | the "Download" below goes to Nokia |
| 15:12.59 | kerio | thus, my question |
| 15:13.19 | divVerent | or do you still have the VM image? maybe the file name of the original archive will yield another mirror |
| 15:14.44 | divVerent | http://maemovmware.garage.maemo.org/2nd_edition/ is what skeiron ultimately points to for the SDK... the link http://tablets-dev.nokia.com/maemo-dev-env-downloads.php is not very helpful |
| 15:16.14 | *** join/#maemo rcg (~rcg@aftr-37-24-149-208.unity-media.net) |
| 15:16.20 | Jaffa | GeneralAntilles: Think you'll have some time to day? (I might, but it'll be later, ans suspect working out what's happening with HiFo may take a while) |
| 15:16.48 | GeneralAntilles | Yeah, I'll have some free time in the afternoon. |
| 15:20.59 | divVerent | ok, trying something else... now cryptsetup and ALL libs it depends on copied to /crypto, still fails... cannot communicate with device mapper. I suspect I know why, but donÄt like it... |
| 15:21.09 | divVerent | (lack of udev at this point) |
| 15:22.14 | *** join/#maemo eijk_ (~eijk@85.178.206.142) |
| 15:22.15 | DocScrutinizer05 | /srv/tablets-dev.nokia.com/maemo-dev-env-downloads/Maemo_Ubuntu_Intrepid_Server_SDK_Virtual_Image.zip |
| 15:22.16 | DocScrutinizer05 | /srv/tablets-dev.nokia.com/maemo-dev-env-downloads/Maemo_Ubuntu_Lucid_Desktop_SDK_Virtual_Image_Final.7z |
| 15:22.17 | DocScrutinizer05 | /srv/tablets-dev.nokia.com/maemo-dev-env-downloads/Maemo_Ubuntu_Lucid_Server_SDK_Virtual_Image_Final.zip |
| 15:22.19 | DocScrutinizer05 | /srv/tablets-dev.nokia.com/maemo-dev-env-downloads/Readme_Ubuntu_Intrepid_Server_SDK_Virtual_Image.txt |
| 15:22.20 | DocScrutinizer05 | /srv/tablets-dev.nokia.com/maemo-dev-env-downloads/Readme_Ubuntu_Lucid_Desktop_SDK_Virtual_Image_Final.txt |
| 15:22.24 | divVerent | trying to mknod /dev/mapper/control from my script :P |
| 15:22.29 | divVerent | oh, thanks |
| 15:22.35 | divVerent | so he has mirrored it, just not linked it :) |
| 15:23.06 | divVerent | or, you? is skeiron.org yours? |
| 15:26.06 | DocScrutinizer05 | http://skeiron.org/tablets-dev/maemo-dev-env-downloads/Readme_Ubuntu_Lucid_Desktop_SDK_Virtual_Image_Final.txt |
| 15:28.26 | *** join/#maemo at1as (~at1as@kurios.r4780y.com) |
| 15:29.37 | DocScrutinizer05 | s http://${subdomain}.nokia.com http://skeiron.org/${subdomain}/ |
| 15:30.19 | *** join/#maemo Ethernin (~ethernin@74.94.177.217) |
| 15:30.32 | DocScrutinizer05 | divVerent: well... no, it's not "mine" |
| 15:31.12 | divVerent | HAHA, ALMOST bricked it... I forgot to redirect input from awk to /proc/misc to find the device inode of device mapper :P |
| 15:31.16 | DocScrutinizer05 | though I could get quite some pizza for the money it costs each month |
| 15:31.24 | divVerent | luckily, ctrl-d works at this point |
| 15:31.48 | divVerent | where "brick" means "hate having to reflash" |
| 15:31.57 | *** part/#maemo Ethernin (~ethernin@74.94.177.217) |
| 15:32.08 | *** join/#maemo Ethernin (~ethernin@74.94.177.217) |
| 15:33.43 | divVerent | YES, blinking dots... it does boot up still |
| 15:33.57 | divVerent | it failed to boot up all the time when USB was connected |
| 15:34.23 | DocScrutinizer05 | shouldn't you build in a saftety fallback, like... BM? |
| 15:35.07 | *** join/#maemo mvp_ (~mvp@2001:df8:0:8:a832:b451:8af7:49fe) |
| 15:35.35 | divVerent | that would help here? |
| 15:35.36 | DocScrutinizer05 | or rescue-boot or what's the name, which will check open cam door or sth and restores last safed events.d/ etc/ if detected |
| 15:36.06 | divVerent | too bad my changes are not in /etc |
| 15:36.27 | DocScrutinizer05 | (help?) well depends in which sequence you call those early bootup extensions I guess |
| 15:36.29 | divVerent | but... camera lock... that's an idea |
| 15:36.36 | divVerent | I call it from preinit |
| 15:36.38 | divVerent | and it's a simple script |
| 15:36.45 | divVerent | the goal is for this script to provide the device in /dev/mapper |
| 15:36.53 | divVerent | so I can later pick it up from rcS-late |
| 15:37.20 | kerio | DocScrutinizer05: ew |
| 15:37.30 | kerio | there's recovery console, bootmenu entry that gives you a console |
| 15:37.39 | kerio | automatic """recovery""" like that is teh dumbz |
| 15:37.43 | DocScrutinizer05 | I know |
| 15:38.13 | divVerent | in BM or where? I suppose BM does it too by editing the preinit script? |
| 15:38.13 | DocScrutinizer05 | the problem is that console never worked for me |
| 15:38.28 | DocScrutinizer05 | since it needs FB aiui |
| 15:38.36 | kerio | ah, yes |
| 15:38.44 | kerio | hm, same as BM's console then? |
| 15:39.30 | DocScrutinizer05 | I'm talking about BM's console |
| 15:39.35 | kerio | ah ok |
| 15:39.44 | kerio | there's a "recovery console" thing that's just a tiny bootmenu script |
| 15:39.50 | kerio | which runs inside preinit |
| 15:39.58 | kerio | and gives you a shell, but i think that it uses fbcon |
| 15:40.04 | divVerent | it has to |
| 15:40.18 | DocScrutinizer05 | will also need some way to print to screen |
| 15:40.26 | *** join/#maemo otep (~quassel@AP-203.167.4.11.sysads.com) |
| 15:40.30 | divVerent | exactly |
| 15:40.40 | divVerent | DAMN... what is missing NOW, device-mapper... |
| 15:41.16 | DocScrutinizer05 | that's why automatic recovery isn't as stupid as it sounds first time you hear it |
| 15:41.46 | DocScrutinizer05 | even while it's something windows does as well (basically) |
| 15:44.52 | *** join/#maemo hardaker (~hardaker@130.129.21.180) |
| 15:46.24 | DocScrutinizer05 | damn, www aka static is 'dead' |
| 15:48.21 | divVerent | ok... I did now get it to open a LUKS device from preinit |
| 15:48.35 | divVerent | only one minor bug, the password prompt itself only appears AFTER pressing enter |
| 15:48.44 | divVerent | i.e. cryptsetup prompts are delayed by one line |
| 15:49.18 | divVerent | but this now was the easy part... I wonder how to best change the /home partition to be encrypted |
| 15:49.25 | divVerent | given that invariably stuff from it is open while the device is on |
| 15:52.03 | divVerent | hm... no, failed ANYWAY. It got opened just fine, but somehow the device disappeared later. |
| 15:52.40 | divVerent | but I still can reach it via /dev/dm-0, it just "lost its name" |
| 15:53.15 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 15:53.54 | divVerent | ok, that basically means the initial script also has to mount it, it can't just open the device |
| 15:54.07 | divVerent | and rcS-late then has to mount --bind it to where it belongs |
| 16:03.39 | *** join/#maemo Aoyagi (~opera@222.18.broadband15.iol.cz) |
| 16:12.53 | divVerent | now it works REALLY properly... had some other issue left |
| 16:14.59 | divVerent | http://pastebin.com/j5FGZYjk my current version of the script |
| 16:17.06 | divVerent | too bad the link in /dev/mapper/ gets lost when udev gets initialized, and apparently is never regenerated |
| 16:18.34 | *** join/#maemo Skry (~skry@adsl-77-109-215-222.kymp.net) |
| 16:19.12 | divVerent | step 2 would be the required edits to rcS-late... these are easy |
| 16:19.38 | divVerent | and step 3 is the part I fear most, converting the existing disk to encrypted... this is kinda hard to get right on a device without an emergency root shell |
| 16:20.10 | kerio | rescueOS |
| 16:20.19 | kerio | and, hell, backupmenu |
| 16:20.49 | divVerent | backupmenu is REALLY still there? first google hit says it's deprecated |
| 16:21.04 | divVerent | also, CAN backupmenu show a root shell? without fbcon? |
| 16:21.24 | divVerent | oh, USB console, it can... better than nothing |
| 16:23.13 | *** join/#maemo hardaker (~hardaker@dhcp-15b4.meeting.ietf.org) |
| 16:23.30 | ShadowJK | bootmenu depreciated perhaps |
| 16:23.42 | ShadowJK | or the old old version of backupmenu.. |
| 16:24.02 | *** join/#maemo hardaker (~hardaker@dhcp-15b4.meeting.ietf.org) |
| 16:29.05 | divVerent | hehe |
| 16:29.12 | divVerent | I see that the root shell from backupmenu works |
| 16:29.22 | divVerent | I successfully opened my LUKS container from it |
| 16:29.36 | divVerent | then I will go for converting my /home tomorrow |
| 16:29.52 | divVerent | then cleanup my script |
| 16:29.58 | thedead1440 | http://skeiron.org/tablets-dev/maemo-dev-env-downloads/ <--- has the VM images required |
| 16:30.02 | divVerent | too bad it can't be packaged, but will rather become a wiki page... |
| 16:30.10 | divVerent | because it requires editing /sbin/preinit |
| 16:30.14 | *** join/#maemo drussell (~dave@nat/canonical/x-gdqvkpgadkoarvys) |
| 16:30.19 | divVerent | AND converting the eMMC data manually |
| 16:30.27 | thedead1440 | f.e.: http://skeiron.org/tablets-dev/maemo-dev-env-downloads/Maemo_Ubuntu_Lucid_Desktop_SDK_Virtual_Image_Final.7z |
| 16:30.32 | divVerent | yes, I now have it |
| 16:30.50 | thedead1440 | so what was it that you need but not linked on skeiron? |
| 16:30.54 | divVerent | I hadn't followed that link before because it neither said SDK nor Maemo 5 :P |
| 16:30.58 | divVerent | I only followed the "SDK 5" link there |
| 16:31.03 | thedead1440 | ah $user_error then :p |
| 16:31.16 | divVerent | really? |
| 16:31.16 | divVerent | trusting what links say is user error? ;) |
| 16:31.44 | divVerent | but seriously, now I know |
| 16:32.06 | thedead1440 | good ;) |
| 16:32.42 | thedead1440 | that link on original tablets-dev was dead too so skeiron.org/tablets-dev is basically an untouched site ;) |
| 16:32.46 | divVerent | there seems to be another fun bug with my password entry script... does the N900 happen to have a watchdog that has to be fed regularily? |
| 16:33.00 | divVerent | I noticed that when taking too long at password entry, the display goes dark and a bit later it SEEMS to power off |
| 16:33.52 | divVerent | basically limits password quality :P |
| 16:35.02 | divVerent | also, I still don't like mounting the crypto device from that early... as it may mean it "may or may not" get unmounted cleanly |
| 16:35.32 | divVerent | but relying on /dev/dm-0 being the right device later on is bad too |
| 16:35.44 | divVerent | and storing the passphrase somewhere to retrieve it later is stupid too |
| 16:36.36 | divVerent | ok, script is grounded for now by an "exit 0" :) |
| 16:36.37 | *** join/#maemo mvp_ (~mvp@2001:df8:0:8:b4b2:b892:7cfa:ffdc) |
| 16:40.44 | *** join/#maemo FlameReaper-PC (~FR@203.106.65.1) |
| 16:42.11 | *** join/#maemo Nitial (~sslaitin@kekkonen.cs.hut.fi) |
| 16:42.37 | *** join/#maemo konelix (~konelix@190.143.170.85) |
| 16:46.50 | *** join/#maemo iDont (~iDont@ip4da305b4.direct-adsl.nl) |
| 16:46.53 | DocScrutinizer05 | yes, watchdog |
| 16:48.49 | *** join/#maemo Martix (~martix@eduroam-165.fi.muni.cz) |
| 16:49.02 | *** join/#maemo LauRoman (~LauRoman@5.14.92.176) |
| 16:49.34 | *** join/#maemo odin_ (~Odin@2a01:348:261:32:211:11ff:fe6b:2483) |
| 16:54.22 | *** join/#maemo Luke-Jr (~luke-jr@2001:470:5:265:222:4dff:fe50:4c49) |
| 17:00.55 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 17:02.01 | *** join/#maemo Martix (~martix@eduroam-165.fi.muni.cz) |
| 17:04.35 | *** join/#maemo NIN101 (~NIN@p5DD295AD.dip0.t-ipconnect.de) |
| 17:10.10 | Estel_ | hey, easy question, but I have never used it: |
| 17:10.35 | Estel_ | in which file desktop settings like shortcuts and widgets (just their arrangement on desktop(s) ) are stored? |
| 17:11.16 | Estel_ | my son just ravaged through my desktops, messing them totally and deleting 3/4 of icons ;) |
| 17:12.25 | Estel_ | (was so happy about aranging icons on his own N900 that he gave it a try on mine, too... I need to setup gCompris on his device soon, that will eliminate touching mine :P ) |
| 17:12.49 | Estel_ | I would like to restore desktop settings from backup, instead of re-creating it painstakily |
| 17:14.22 | Estel_ | divVerent, as for your question, I think you're overcomplicating things. First, using avanced interface switcher, you may avoid bringing gsm at boot too, delaying it .till after you turn it on manually. Second, if you receive sms before mounting, you just need to read it before closing - it's lost, then. Not saved anywhere, just lost |
| 17:14.37 | kerio | Estel_: somewhere in ~ |
| 17:14.39 | kerio | >:3 |
| 17:14.39 | Estel_ | but you still receive it |
| 17:14.43 | Estel_ | kerio, sure ;) |
| 17:15.03 | Estel_ | DocScrutinizer05, remembering that desktop settings location or where to find info about it? |
| 17:15.28 | Estel_ | I just run into mentions to backup it in some places on wiki, but no location |
| 17:15.31 | ManoftheSea | freedesktop.org? |
| 17:15.32 | thedead1440 | Estel_: i think it should be /home/user/.config/hildon-desktop/home.plugins for widgets |
| 17:15.50 | Estel_ | thedead1440, thanks... I wonder if icons are somewhere nearby |
| 17:16.22 | thedead1440 | Estel_: not very sure ~/.config is where things should be rightfully stored but i may be wrong... |
| 17:16.34 | Estel_ | automatically tries to hit place where x-term icon was, then sighs, and add it from settings |
| 17:16.55 | *** join/#maemo konelix (~konelix@190.143.170.85) |
| 17:17.01 | Estel_ | I also vaguely remember it should be somewhere else |
| 17:17.24 | Estel_ | just hoped that restoring it from backup will be faster than recreating for all desktops :P |
| 17:18.16 | Estel_ | thedead1440, this file doesn't store plugins positions :( |
| 17:18.20 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 17:18.22 | Estel_ | it just list widgets |
| 17:18.27 | Estel_ | s/plugins/widgets/ |
| 17:18.51 | DocScrutinizer51 | find ~ -mtime -1 |
| 17:19.01 | thedead1440 | oh i'm sorry i don't use much widgets but in mine it shows the homescreen the widget should be at |
| 17:19.48 | DocScrutinizer51 | gconf -R / >before |
| 17:19.55 | DocScrutinizer51 | move icon |
| 17:20.03 | DocScrutinizer51 | gconf -R / >after |
| 17:20.07 | DocScrutinizer51 | cmp |
| 17:20.22 | DocScrutinizer51 | or diff |
| 17:20.30 | Estel_ | 0_o? |
| 17:20.35 | thedead1440 | on the N9 there is a file for it: /home/user/.config/meegotouchhome/launcherbuttons.data ; couldn't find a hildon-desktop equivalent |
| 17:21.02 | Estel_ | no need to sorry, thanks anyway |
| 17:21.06 | Estel_ | mtime stuff? |
| 17:21.29 | Estel_ | it is stored in gconf, the desktop icons etc? |
| 17:21.32 | *** join/#maemo Cor-Ai (~cor-ai@212.112.62.30) |
| 17:22.26 | Estel_ | shit, it seems that restoring backup on another device and using it as visual refference for manual restoration will be faster :( |
| 17:23.36 | divVerent | Estel_: sure, BUT... I now am really close to really fully encrypted data partition |
| 17:23.59 | divVerent | even found a way without changing scripts, will try tomorrow |
| 17:24.01 | Estel_ | but encrypted home is counter-roductive ;) |
| 17:24.11 | divVerent | even found a way without changing scripts, will try tomorrow |
| 17:24.12 | Estel_ | it will slow overall performance down |
| 17:24.25 | divVerent | that is the price |
| 17:24.33 | Estel_ | so why to pay it |
| 17:24.51 | divVerent | that is the price |
| 17:24.54 | divVerent | to not leak account passwords |
| 17:24.56 | Estel_ | if you can have encrypted only things you want to have encrtypted, and symlinked |
| 17:25.05 | Estel_ | I don't leak account passwords ;) |
| 17:25.55 | divVerent | also, unlocking via xterm is annoying ;) |
| 17:26.18 | divVerent | but, I will try that too, bujt with encfs |
| 17:26.54 | *** join/#maemo Ethernin (~ethernin@74.94.177.217) |
| 17:27.09 | divVerent | thing is, once you encrypt ANYTHING, you will need to encrypt swap too |
| 17:27.21 | divVerent | and that is boot time stuff |
| 17:28.29 | divVerent | but that needs no interaction, just gennerating a random key on boot works |
| 17:30.29 | divVerent | on PCs my solution to that normally is "no swap, enough RAM" |
| 17:31.07 | divVerent | but the N900 just does not have enough RAM to work swapless |
| 17:32.05 | divVerent | 230M/256 used already, only two xterm windows open |
| 17:32.32 | iDont | divVerent: check http://206.253.166.96/N900/crypto/encrypted_home/ , it contains instructions for encrypting /home and your swap. Do note that I haven't tried out those instructions myself |
| 17:33.36 | *** join/#maemo dos1 (~dos@unaffiliated/dos1) |
| 17:34.40 | divVerent | iDont: yes, saw it, not robust |
| 17:35.10 | divVerent | when one of the files gets replaced during update, system no longer bolots |
| 17:35.26 | Estel_ | divVerent, encrypting swap is easy, but unnecessary for your photos etc |
| 17:35.45 | Estel_ | for that, I have 2nd encrypted partition, for "super-duper" secret data |
| 17:35.48 | ManoftheSea | When will someone release a phone with ALL of the LTE bands, a crypto-coprocessor, an unlocked bootloader, and linux mainline drivers for the modem. |
| 17:35.48 | divVerent | Estel_: I now see your trick |
| 17:36.04 | divVerent | dead symlink prevents dirs from being auto created |
| 17:36.07 | Estel_ | and script that encrypt swap juts before enabling that 2nd partition |
| 17:36.13 | ManoftheSea | even the DoD can't get a secure phone. |
| 17:36.22 | divVerent | that is why your method does not leak |
| 17:36.56 | divVerent | soo yes. |
| 17:37.03 | divVerent | will try to replicate that |
| 17:37.10 | divVerent | but with encfs |
| 17:37.15 | iDont | divVerent: well, if e.g. a CSSU update breaks your custom boot, you can always fix it with RescueOS. But I do see why you might want to avoid that :) |
| 17:37.54 | divVerent | would still need a robust hack forf encrypting swap |
| 17:38.17 | divVerent | because swapoff is already unlikely to work when in X |
| 17:38.48 | Estel_ | without paying price of decreased performance |
| 17:38.50 | Estel_ | hey, it is easy |
| 17:38.56 | Estel_ | you enable encrypted swap |
| 17:39.01 | kerio | afaik pali is working on a bit more solid rcS-late |
| 17:39.04 | Estel_ | then disable non-encrypted one |
| 17:39.17 | Estel_ | things from non-encrypted, goes to encypted, then |
| 17:39.21 | Estel_ | then you proceed |
| 17:39.25 | divVerent | Estel_: oh, by wasting another 512M ;) |
| 17:39.39 | Estel_ | or microsd for 1$ |
| 17:39.41 | Estel_ | ;) |
| 17:39.45 | divVerent | i wanted to swapoff/cryptsetup/swapon instead |
| 17:40.08 | divVerent | but... moving swap off the integrated memory is GOOD |
| 17:40.12 | Estel_ | not going to work |
| 17:40.21 | Estel_ | (without 2nd swap) |
| 17:40.26 | kerio | what? |
| 17:40.27 | divVerent | less write cycles on the integrated memory |
| 17:40.30 | kerio | encrypted second swap? |
| 17:40.31 | Estel_ | btw swap encdrypted all the time is bad |
| 17:40.34 | Estel_ | divVerent, exactly |
| 17:40.50 | Estel_ | kerio, rather second swap that gets encrypted in case of need |
| 17:41.02 | Estel_ | divVerent, sure, I use swaps on microsd only |
| 17:41.04 | kerio | which need? |
| 17:41.13 | divVerent | case of need? |
| 17:41.15 | divVerent | always needed |
| 17:41.20 | Estel_ | in need of moving those area51 plans to super secure partition |
| 17:41.24 | Estel_ | nope |
| 17:41.48 | divVerent | there is nothing more critical than the email passworrd |
| 17:42.03 | divVerent | with it you can take over everything else |
| 17:42.54 | Estel_ | I don't see reason to encrypt swap for photos |
| 17:43.17 | divVerent | yes, but once you receive email on the thing |
| 17:43.28 | divVerent | you basically need to encryp.t swap |
| 17:43.30 | Estel_ | for things that need really topmost security, I have 2nd encrypted partition, that is manually mountedd etc |
| 17:43.34 | Estel_ | and encrypt swap before |
| 17:43.45 | divVerent | to prevent the email password from being written plain |
| 17:43.47 | Estel_ | e-mail security is so low by design, sadly |
| 17:43.55 | divVerent | yes |
| 17:44.01 | iDont | divVerent: setting up compcache might buy you enough memory for temporarily disabling your regular swap, i.e. compcache/swapoff/cryptsetup/swapon/(optional)swapoff_compcache |
| 17:44.03 | Estel_ | than leaking it from my device IMAP is least of a problem |
| 17:44.17 | Estel_ | iDont, sadly, not the case |
| 17:44.29 | Estel_ | Maemo is going nuts if less than 500 MB memory is present |
| 17:44.39 | Estel_ | event a little more is required, something around 500 |
| 17:44.47 | Estel_ | nothing wan't to start, if less present |
| 17:44.49 | Estel_ | even xterm |
| 17:44.57 | Estel_ | (unless started already) |
| 17:45.26 | Estel_ | divVerent, reading your mail password from swap require too much hassle |
| 17:45.32 | Estel_ | better to sniff on network |
| 17:45.41 | Estel_ | brb for now |
| 17:45.42 | divVerent | if you can |
| 17:45.46 | divVerent | ssl... |
| 17:46.02 | Estel_ | if you can read RAW from emmc to get things from swap... |
| 17:46.20 | iDont | Estel_: if you automate encrypting your swap, you might just beat the clock (i.e. memory pressure). But I haven't tried it, so I might very well be wrong |
| 17:46.34 | *** part/#maemo Ethernin (~ethernin@74.94.177.217) |
| 17:46.43 | Estel_ | iDont, I recall trying something like that and it was accidental-reboot prone :( |
| 17:47.03 | iDont | Estel_: yes, it _is_ racy |
| 17:47.46 | divVerent | you mean encrypting swap inpplace? |
| 17:47.46 | divVerent | haha |
| 17:48.10 | divVerent | and hoping there will be no paging in the meantime |
| 17:48.29 | *** join/#maemo FlameReaper-PC (~FR@203.106.65.1) |
| 17:48.31 | iDont | divVerent: I never said encrypting swap in place |
| 17:48.54 | iDont | If you were referring to me |
| 17:49.29 | kerio | just set up the encrypted swap at the beginning? |
| 17:49.29 | kerio | idk |
| 17:49.53 | iDont | kerio: he does not want to mess with any boot script, afaics |
| 17:49.59 | divVerent | oh, not THAT race condition ;) |
| 17:50.04 | kerio | hahahahahahahahahahahahhaha |
| 17:50.17 | divVerent | yes, I prefer only messing with boot params and extgra scripts |
| 17:50.28 | divVerent | for encrypting home it is possible |
| 17:50.47 | divVerent | because rcS-late does not mount it if it already is |
| 17:57.47 | *** join/#maemo hardaker (~hardaker@dhcp-15b4.meeting.ietf.org) |
| 18:01.21 | *** join/#maemo mvp_ (~mvp@2001:df8:0:8:b4b2:b892:7cfa:ffdc) |
| 18:11.49 | *** join/#maemo onre (~esp@212.16.111.100) |
| 18:18.14 | *** join/#maemo mvp_ (~mvp@2001:df8:0:8:b4b2:b892:7cfa:ffdc) |
| 18:30.46 | *** join/#maemo FlameReaper-PC (~FR@203.106.65.1) |
| 18:44.45 | *** join/#maemo hardaker (~hardaker@dhcp-15b4.meeting.ietf.org) |
| 18:51.21 | *** join/#maemo tom_ (~tom@66.172.11.27) |
| 18:57.26 | *** join/#maemo M4rtinK (~M4rtinK@ip-86-49-81-87.net.upcbroadband.cz) |
| 18:59.11 | *** part/#maemo valeriusN (root@80.250.181.195) |
| 19:02.51 | *** join/#maemo sixwheeledbeast (~paul@cl-1547.lon-02.gb.sixxs.net) |
| 19:04.13 | *** join/#maemo valeriusN (root@80.250.181.195) |
| 19:11.02 | *** join/#maemo calvaris (~calvaris@12.98.117.91.dynamic.mundo-r.com) |
| 19:12.08 | sixwheeledbeast | waits to find a camera module stuck down with nutella :P - Estel_ |
| 19:14.03 | *** join/#maemo NIN101 (~NIN@p5DD295AD.dip0.t-ipconnect.de) |
| 19:14.44 | *** join/#maemo Guest63766 (~esp@unaffiliated/onre) |
| 19:14.45 | *** join/#maemo mvp_ (~mvp@2001:df8:0:8:b4b2:b892:7cfa:ffdc) |
| 19:20.17 | *** join/#maemo Vlad_on_the_road (~Vlad_on_t@82.216.1.66) |
| 19:21.45 | *** join/#maemo calvaris (~calvaris@12.98.117.91.dynamic.mundo-r.com) |
| 19:22.09 | *** join/#maemo sq-one (~sq-one@p57977643.dip.t-dialin.net) |
| 19:22.17 | *** join/#maemo arcean (~Tomek@apn-77-115-214-251.dynamic.gprs.plus.pl) |
| 19:25.33 | *** join/#maemo mvp_ (~mvp@2001:df8:0:8:b4b2:b892:7cfa:ffdc) |
| 19:25.45 | qwazix | I forgot my phone at the office, I can ssh to it via my pc there. Any way to see if I got any missed calls without X forwarding or vnc? |
| 19:25.56 | *** join/#maemo cehteh (~cehteh@pipapo.org) |
| 19:26.09 | freemangordon | qwazix: select in the DB? |
| 19:26.34 | qwazix | which db is that eventlogger? |
| 19:26.58 | qwazix | s/that/that?/ |
| 19:27.46 | freemangordon | qwazix: hmm not sure |
| 19:28.15 | freemangordon | qwazix: but I guess so |
| 19:29.13 | qwazix | freemangordon, seems I got something, I can see sms's |
| 19:29.16 | qwazix | thanks |
| 19:30.08 | freemangordon | qwazix: np |
| 19:31.29 | *** join/#maemo Martix (~martix@static-84-242-103-180.net.upcbroadband.cz) |
| 19:40.48 | *** join/#maemo eccerr0r (blc@r.jajcs.net) |
| 19:42.02 | DocScrutinizer05 | moin qwazix |
| 19:44.25 | *** join/#maemo aslani (~aslan@ruutana.net) |
| 19:48.35 | *** join/#maemo hardaker (~hardaker@dhcp-15b4.meeting.ietf.org) |
| 19:48.59 | *** join/#maemo sirdancealot (~sirdancea@88.100.82.98) |
| 20:06.59 | *** join/#maemo unclouded (~neil@2001:4428:200:80fc:603b:7981:7558:7f85) |
| 20:14.24 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 20:16.08 | *** join/#maemo dos11 (~dos@unaffiliated/dos1) |
| 20:18.24 | *** join/#maemo NeutrinoPower (~neutrino@HSI-KBW-078-042-162-195.hsi3.kabel-badenwuerttemberg.de) |
| 20:28.38 | *** join/#maemo lxp (~lxp@62-47-159-92.adsl.highway.telekom.at) |
| 20:31.51 | *** join/#maemo konelix (~konelix@190.143.170.85) |
| 20:37.20 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 20:39.25 | *** join/#maemo Natch_q (~Natch@c-fecee155.25-4-64736c10.cust.bredbandsbolaget.se) |
| 20:40.30 | *** join/#maemo inz_ (inz@idle.ircing.org) |
| 20:40.45 | *** join/#maemo nslu2-log_ (~nslu2-log@140.211.169.184) |
| 20:41.12 | *** join/#maemo nusse (~nusse@gonzo.teamidiot.de) |
| 20:42.24 | *** join/#maemo dimir_ (~dimir@dimir.eu) |
| 20:42.27 | *** join/#maemo ssvb_ (~ssvb@212.16.98.80) |
| 20:42.40 | *** join/#maemo eMHa__ (~mh@HSI-KBW-149-172-0-168.hsi13.kabel-badenwuerttemberg.de) |
| 20:43.51 | *** join/#maemo tzafrir_laptop (~tzafrir@212.179.75.202) |
| 20:46.39 | *** join/#maemo nslu2-log_ (~nslu2-log@140.211.169.184) |
| 20:48.23 | *** join/#maemo nslu2-log (~nslu2-log@140.211.169.184) |
| 20:51.17 | *** join/#maemo FlameReaper (~assassin@203.106.65.1) |
| 20:54.55 | *** join/#maemo NIN101 (~NIN@93.210.149.173) |
| 20:55.05 | *** join/#maemo ds3 (noinf@netblock-66-245-251-24.dslextreme.com) |
| 20:55.29 | *** join/#maemo techlife (techlife@60.212.33.102) |
| 20:56.47 | *** join/#maemo xes (~xes@unaffiliated/xes) |
| 21:11.10 | DocScrutinizer05 | [2013-03-11 14:37:34] <warfare> I'll put in the disks tomorrow. |
| 21:13.45 | M4rtinK | DocScrutinizer05: good ! :) |
| 21:13.50 | *** join/#maemo konelix (~konelix@190.143.170.65) |
| 21:23.09 | DocScrutinizer05 | :-) |
| 21:29.52 | *** part/#maemo Aoyagi (~opera@222.18.broadband15.iol.cz) |
| 21:38.28 | *** join/#maemo Woody14619 (~Woody@2620:4:4000:11:1cb5:1eb4:7fda:ac44) |
| 21:38.29 | *** join/#maemo Woody14619 (~Woody@Maemo/community/contributor/Woody14619) |
| 21:38.45 | *** join/#maemo rcg (~rcg@2a02:908:e252:e101:e9bf:6fb3:ae91:3246) |
| 21:41.07 | *** join/#maemo MrPingu (~MrPingute@86.92.226.97) |
| 21:41.15 | *** join/#maemo mvp_ (~mvp@2001:df8:0:8:c44a:cc60:4eb5:4617) |
| 21:41.36 | *** join/#maemo kwtm (~kwtm1@c-24-5-190-87.hsd1.ca.comcast.net) |
| 21:51.15 | *** join/#maemo hardaker (~hardaker@dhcp-15b4.meeting.ietf.org) |
| 22:01.12 | *** join/#maemo kwtm (~kwtm1@c-24-5-190-87.hsd1.ca.comcast.net) |
| 22:03.00 | *** join/#maemo StyXman (~mdione@ant06-1-82-242-111-163.fbx.proxad.net) |
| 22:03.01 | *** join/#maemo StyXman (~mdione@grulic/root/StyXman) |
| 22:06.53 | *** join/#maemo mvp_ (~mvp@2001:df8:0:8:c44a:cc60:4eb5:4617) |
| 22:07.01 | *** join/#maemo eijk_ (~eijk@85.178.206.142) |
| 22:12.19 | *** join/#maemo vblazquez (~vic@37.15.71.248) |
| 22:20.42 | *** join/#maemo arcean_ (~Tomek@apn-77-115-214-251.dynamic.gprs.plus.pl) |
| 22:23.59 | *** join/#maemo bef0rd (~bef0rd@unaffiliated/beford) |
| 22:27.14 | *** join/#maemo arcean__ (~Tomek@apn-77-115-214-251.dynamic.gprs.plus.pl) |
| 22:45.32 | *** join/#maemo pvanhoof (~philip@86.39.154.67) |
| 22:50.17 | *** join/#maemo Woody14619 (~Woody@2620:4:4000:11:1cb5:1eb4:7fda:ac44) |
| 22:50.18 | *** join/#maemo Woody14619 (~Woody@Maemo/community/contributor/Woody14619) |
| 22:52.32 | *** join/#maemo phunguy (santas@dhcp.i-p.org.uk) |
| 22:59.49 | *** join/#maemo em (~em@unaffiliated/emma) |
| 23:03.03 | *** join/#maemo phunguy (santas@dhcp.i-p.org.uk) |
| 23:06.26 | *** join/#maemo Woody14619 (~Woody@2620:4:4000:11:1cb5:1eb4:7fda:ac44) |
| 23:06.26 | *** join/#maemo Woody14619 (~Woody@Maemo/community/contributor/Woody14619) |
| 23:16.11 | sixwheeledbeast | ~rmo-new |
| 23:16.11 | infobot | somebody said rmo-new was do `echo 213.128.137.22 repository.maemo.org >>/etc/hosts` on your N900, as root, or http://talk.maemo.org/showthread.php?p=1327342#post1327342 |
| 23:37.55 | *** join/#maemo robbiethe1st (~robbiethe@50-37-151-189.mscw.id.frontiernet.net) |
| 23:46.03 | *** join/#maemo mvp_ (~mvp@207.30.52.254) |