| 00:11.27 | *** join/#maemo Hurrian (~textual@unaffiliated/rikanee) |
| 00:29.39 | *** join/#maemo robbiethe1st (~robbiethe@50-52-1-61.cral.id.frontiernet.net) |
| 00:32.47 | *** join/#maemo sunny_s (~sunny_s@business-092-079-020-027.static.arcor-ip.net) |
| 00:47.13 | *** join/#maemo eMHa__ (~mh@HSI-KBW-46-223-128-72.hsi.kabel-badenwuerttemberg.de) |
| 01:00.07 | *** join/#maemo Snafu777 (~user@unaffiliated/snafu777) |
| 01:16.45 | *** join/#maemo sleepee (~sleepee@adsl-64-237-131-45.prtc.net) |
| 01:29.00 | *** join/#maemo lbt_ (~david@78-32-229-233.static.enta.net) |
| 01:29.00 | *** join/#maemo lbt_ (~david@Maemo/community/contributor/lbt) |
| 01:35.38 | *** join/#maemo zero (ca9b1483@gateway/web/freenode/ip.202.155.20.131) |
| 01:45.36 | Snafu777 | configure: error: OpenSSL version header not found. |
| 01:45.54 | Snafu777 | Nokia-N900:~/openssh-6.6p1# dpkg --list | grep libssl |
| 01:45.54 | Snafu777 | ii libssl-dev 0.9.8n-1+maemo4+0m5 SSL development libraries, header files and documentation |
| 01:45.54 | Snafu777 | ii libssl0.9.7 1.0 libssl0.9.7 |
| 01:45.54 | Snafu777 | ii libssl0.9.8 0.9.8n-1+maemo4+0m5 SSL shared libraries |
| 01:46.01 | Snafu777 | .....? |
| 01:57.43 | *** join/#maemo qwazix (~qwazix@Maemo/community/council/qwazix) |
| 01:59.29 | Snafu777 | Anyone? |
| 01:59.34 | Snafu777 | I love you long time |
| 02:01.45 | *** join/#maemo silviof1 (~silviof@unaffiliated/silviof) |
| 02:02.43 | *** join/#maemo Milhouse (~Milhouse@Maemo/community/contributor/Milhouse) |
| 02:05.56 | Maxdamantus | I suspect you'd need openssl 1 |
| 02:14.37 | Snafu777 | hmm |
| 02:14.44 | Snafu777 | pretty sure i got it hang tight |
| 02:14.49 | Snafu777 | gotta re-ssh into |
| 02:16.21 | Snafu777 | Nokia-N900:~# dpkg --list | grep ssl |
| 02:16.22 | Snafu777 | ii libopenssl-ruby 4.2maemo1 OpenSSL interface for Ruby |
| 02:16.22 | Snafu777 | ii libopenssl-ruby1.8 1.8.7.72-3maemo4 OpenSSL interface for Ruby 1.8 |
| 02:16.22 | Snafu777 | ii libssl-dev 0.9.8n-1+maemo4+0m5 SSL development libraries, header files and documentation |
| 02:16.23 | Snafu777 | ii libssl0.9.7 1.0 libssl0.9.7 |
| 02:16.25 | Snafu777 | ii libssl0.9.8 0.9.8n-1+maemo4+0m5 SSL shared libraries |
| 02:16.28 | Snafu777 | ii openssl 0.9.8n-1+maemo4+0m5 Secure Socket Layer (SSL) binary and related cryptographic tools |
| 02:16.31 | Snafu777 | ii python-openssl 0.7-2maemo2 Python wrapper around the OpenSSL library |
| 02:16.34 | Snafu777 | ii sslstrip 0.9-0maemo1 SSL/TLS man-in-the-middle attack tool |
| 02:16.51 | *** join/#maemo darkschneider (~gab@93-32-59-224.ip32.fastwebnet.it) |
| 02:22.56 | Snafu777 | Maxdamantus: ideas? |
| 02:23.28 | Maxdamantus | I suspect you'd need openssl 1 |
| 02:23.50 | Maxdamantus | It's in a different slot in portage (Gentoo). |
| 02:24.09 | Maxdamantus | so they're basically considered different packages. |
| 02:25.09 | Snafu777 | hmm |
| 02:26.12 | Snafu777 | gentoo != n900 =/ |
| 02:26.25 | Snafu777 | Ideas? |
| 02:44.03 | *** join/#maemo mschlens (~mschlens@p5DC16A90.dip0.t-ipconnect.de) |
| 02:49.50 | *** join/#maemo Defiant (erik@f054098216.adsl.alicedsl.de) |
| 02:53.53 | *** join/#maemo MohammadAG (~MohammadA@Maemo/community/contributor/MohammadAG) |
| 03:07.20 | *** join/#maemo at1as (~at1as@c-69-255-25-188.hsd1.va.comcast.net) |
| 03:37.42 | *** join/#maemo hxka (~hxka@176.14.54.167) |
| 03:39.43 | Luke-Jr | Snafu777: I run Gentoo on my N900 |
| 03:40.34 | Snafu777 | heh |
| 03:40.55 | Snafu777 | I'm running maemo, and the more I did into it, the more it seems I'm going to have to install openssl from source as well |
| 03:41.00 | Snafu777 | This is a frickin nightmare |
| 03:41.10 | Snafu777 | I didn't even have this much trouble with curl, and that was a bitch |
| 03:41.35 | Snafu777 | How can I find out where the openssl library headers are located at on the n900? |
| 03:45.06 | bef0rd | I don't think headers are on the device, dev repo/packages were meant for scratchbox environment |
| 03:46.15 | bef0rd | dpkg-query -L libssl-dev |
| 03:46.23 | bef0rd | should list all files provided by libssl-dev |
| 03:48.26 | Snafu777 | There are definately header files under /usr/include/openssl |
| 03:48.38 | Snafu777 | hmm |
| 03:49.27 | Snafu777 | Learned a new command today thanks to u bef0rd =) |
| 03:49.30 | Snafu777 | dpkg-query -L |
| 03:49.33 | Snafu777 | handy |
| 03:49.40 | Snafu777 | normally - dpkg -x the file |
| 03:49.56 | Snafu777 | and view the contents |
| 03:54.17 | Snafu777 | So here is a question while I wait on configure to die or work |
| 03:54.25 | Snafu777 | Anyone ever considered using /etc/shadow on the n900? |
| 03:58.29 | Maxdamantus | This is why people shouldn't make phone OSes. |
| 03:58.41 | Maxdamantus | They should just make phone software that runs on normal OSes. |
| 03:58.48 | Snafu777 | =) |
| 03:59.17 | Snafu777 | No, this is why security should have been incorporated into the phone to begin with |
| 03:59.22 | Snafu777 | no /etc/shadow |
| 03:59.27 | Snafu777 | DES for the backend |
| 03:59.39 | Snafu777 | N900 is a wonder to behold |
| 03:59.47 | Snafu777 | The world's smallest handheld pentest device |
| 03:59.54 | Maxdamantus | /etc/shadow is a file used by certain applications. |
| 04:00.01 | Snafu777 | Yet vulnerable in ways that should have been BYGONE long ago |
| 04:00.03 | Snafu777 | Agreed |
| 04:00.14 | Snafu777 | but they didn't incorporate shadowing into the os |
| 04:00.22 | Snafu777 | Do you know how easy it would be to pwn this phone ? |
| 04:00.36 | Maxdamantus | Because they didn't include programs that needed it. |
| 04:00.37 | Snafu777 | Most of the .debs are outdated on it |
| 04:00.48 | Snafu777 | I love my n900, don't get me wrong |
| 04:00.58 | Snafu777 | Nods |
| 04:01.03 | Maxdamantus | if you install the sshd from the repository it creates /etc/shadow |
| 04:01.17 | Snafu777 | They had security as an afterthought |
| 04:01.24 | Snafu777 | sshd from repo does not create /etc/shadow |
| 04:01.44 | Snafu777 | unless you are referring to another ssh daemon vs openssh |
| 04:01.52 | Maxdamantus | No, openssh. |
| 04:02.01 | Maxdamantus | maybe it's something special with the application manager then. |
| 04:02.16 | Maxdamantus | I also have the user* programs installed somehow. |
| 04:02.22 | Snafu777 | Do you have maemo on your device Maxdamantus ? |
| 04:02.26 | Maxdamantus | Yes. |
| 04:02.27 | *** join/#maemo lxp1 (~lxp@188-23-100-141.adsl.highway.telekom.at) |
| 04:02.31 | Snafu777 | and you have /etc/shadow? |
| 04:02.58 | Maxdamantus | Ah, no, only /etc/passwd |
| 04:03.05 | Maxdamantus | it stores the password in there. |
| 04:03.07 | Snafu777 | . |
| 04:03.12 | Snafu777 | yes it does |
| 04:03.27 | Snafu777 | Like I said, vulnerable as hell |
| 04:03.31 | Maxdamantus | Why? |
| 04:03.36 | Snafu777 | /etc/passwd? |
| 04:03.44 | Snafu777 | Because it uses DES |
| 04:03.48 | Maxdamantus | Ah, because other people can use it. |
| 04:03.50 | Snafu777 | Let alone that it's world readable |
| 04:03.59 | Maxdamantus | you should be able to use other encryptions .. it's up to libcrypt |
| 04:04.09 | Snafu777 | So how do we configure that? |
| 04:04.27 | Snafu777 | I don't need to compile pam support into openssh if i can do just that |
| 04:04.37 | Snafu777 | but i want to go with PAM to get around the DES issue |
| 04:05.35 | Maxdamantus | just copy the password from another system. |
| 04:05.43 | Maxdamantus | probably the easiest way. |
| 04:06.29 | Snafu777 | and get locked out of the system? |
| 04:06.32 | Maxdamantus | (to use something other than DES) |
| 04:06.43 | Snafu777 | Wouldn't that snap /etc/passwd? |
| 04:06.53 | Snafu777 | I mean I guess i can try real quick |
| 04:06.55 | Snafu777 | one sec |
| 04:07.14 | Maxdamantus | mm .. didn't work |
| 04:08.57 | *** join/#maemo uen (~uen@p508428F9.dip0.t-ipconnect.de) |
| 04:09.25 | Snafu777 | Definately did not work =9 |
| 04:11.44 | Snafu777 | Well, I'm going to grab openssl |
| 04:11.46 | Snafu777 | compile it |
| 04:11.53 | Snafu777 | grab the libraries |
| 04:12.17 | Snafu777 | drop them in a custom location on the OS |
| 04:12.24 | Snafu777 | see if i can perform a nasty hack |
| 04:13.24 | Snafu777 | <--- wishes he knew more about c++ |
| 04:14.12 | Snafu777 | The thing to find out is if i compile it when the libraries exist, will it run when the libraries no longer are there |
| 04:14.22 | Snafu777 | that way i don't have extraneous files lying about |
| 04:16.27 | Snafu777 | Static libraries increase the overall size of the binary, but it means that you don't need to carry along a copy of the library that is being used. As the code is connected at compile time there are not any additional run-time loading costs. The code is simply there. |
| 04:16.36 | Snafu777 | And it shall work, and it shall be named George! |
| 04:17.46 | Snafu777 | Maxdamantus: Got sshd installed on your n900? |
| 04:18.18 | Maxdamantus | Yes. |
| 04:18.23 | Maxdamantus | openssh |
| 04:18.27 | Snafu777 | Want to see the vulnerability I speak of? |
| 04:18.44 | Snafu777 | ssh -l root 127.0.0.1 |
| 04:18.51 | Snafu777 | enter the first eight chars of your root pword |
| 04:18.55 | Snafu777 | p00f, you are in |
| 04:22.26 | Snafu777 | And did it work? |
| 04:24.59 | DocScrutinizer05 | ((<Snafu777> no /etc/shadow [2014-03-25 05:00:22] <Snafu777> Do you know how easy it would be to pwn this phone ?)) Nonsense. Maemo is basically a single-user OS. /etc/shadow is meant to defeat threats from legit users that have access to /etc/passwd. Evidently on maemo that makes no sense |
| 04:25.38 | Snafu777 | /etc/shadow is meant to defeat threats from non-legit users as well |
| 04:26.12 | DocScrutinizer05 | it's just as nonsensical as is the approach to obfuscate your email POP/IMAP passwords in your mail client's config files, to hide them from user |
| 04:26.13 | Maxdamantus | tbh, it should be reasonably secure with a different encryption algorithm. |
| 04:26.23 | DocScrutinizer05 | Snafu777: that's bullshit |
| 04:26.26 | Maxdamantus | it looks like libcrypt isn't the normal one used on Linux systems (which is part of glibc) |
| 04:26.54 | Snafu777 | DocScrutinizer05: Lets say I get a non privileged user account on a system I am not supposed to have access too |
| 04:27.10 | DocScrutinizer05 | Snafu777: you're no supposed to fileshare /etc/passwd to a ftp server |
| 04:27.15 | Snafu777 | I can snarf the contents of /etc/passwd |
| 04:27.21 | Snafu777 | But i cannot see /etc/shadow |
| 04:27.32 | Snafu777 | And windows is bulletproof |
| 04:27.38 | DocScrutinizer05 | let's say you say random stuff |
| 04:29.43 | Maxdamantus | it supports md5 |
| 04:29.54 | Maxdamantus | though that's considered broken |
| 04:30.06 | DocScrutinizer05 | when you make it onto a system that you're not supposed to have any access to, nothing warrants that you can access /etc/password but not /etc/shadow - you shouldn't have access to anything on that system, once you have access it's up to your skills while hacking the system what permissions you hacked for you |
| 04:30.08 | Maxdamantus | I think it needs to be upgraded to support sha. |
| 04:30.21 | Snafu777 | DocScrutinizer05: I just think of things like an attacker would |
| 04:30.35 | *** join/#maemo maybeArgh (~cl@p5B1656FB.dip0.t-ipconnect.de) |
| 04:30.37 | DocScrutinizer05 | no, you think of things like a script kiddie would |
| 04:30.53 | Snafu777 | Okay, so do you have a sim card in your phone DocScrutinizer05 ? |
| 04:31.49 | Snafu777 | I'll assume yes |
| 04:32.01 | Maxdamantus | Yeah, md5 works. |
| 04:32.30 | Maxdamantus | Doesn't let me enter a partial password at least. |
| 04:32.34 | Snafu777 | On that thought, do you really trust cell phone companies to provide proper security posturing on their routers to prevent user a from attacking user b on the same subnet |
| 04:32.41 | Snafu777 | If you believe that |
| 04:33.06 | DocScrutinizer05 | wtf? |
| 04:33.17 | DocScrutinizer05 | not interested in that nonsense |
| 04:33.23 | Snafu777 | dig @ans2.o1.com o1.com axfr |
| 04:33.26 | Snafu777 | There u go |
| 04:33.28 | Snafu777 | a major ISP |
| 04:34.20 | Snafu777 | So yes, I do care if my phone can be bruteforced via ssh in 72^8 (average password characters of 72 character possibilities, a-z, 1-9 with a 8 char max) |
| 04:34.25 | Maxdamantus | https://gist.githubusercontent.com/Maxdamantus/00aa3766f3d560e8637a/raw/d8ae9d08e27557f1e70c7c296f939a254b84063c/gistfile1.txt |
| 04:34.31 | Snafu777 | because the world SUCKS at cyber security |
| 04:34.31 | Maxdamantus | can compile that with -lcrypt |
| 04:34.41 | Snafu777 | Cool Maxdamantus I shall check it out |
| 04:34.41 | bef0rd | then don't enable sshd |
| 04:34.44 | DocScrutinizer05 | Snafu777: sorry, you have no decent idea of how to manage a system |
| 04:34.46 | Maxdamantus | then: ./a.out \$1\$$(tr -dc a-zA-Z0-9./ < /dev/urandom | head -c 8) |
| 04:34.57 | Snafu777 | I'm not a sysadmin DocScrutinizer05 |
| 04:35.00 | Maxdamantus | There's also a `crypt` command installed, but it doesn't hide the input. |
| 04:35.03 | DocScrutinizer05 | obviously |
| 04:35.04 | Snafu777 | I get paid to prevent others from breaking in |
| 04:35.18 | DocScrutinizer05 | OMG |
| 04:35.29 | Snafu777 | Cool Maxdamantus: Glad I at least got one person spun up on the security idea |
| 04:35.30 | Snafu777 | =) |
| 04:35.39 | Maxdamantus | well, it's md5, so it's not really secure. |
| 04:35.42 | Snafu777 | Still |
| 04:35.46 | Maxdamantus | but it's more secure than DES. |
| 04:35.46 | Snafu777 | prevents partial passwords right? |
| 04:35.51 | Maxdamantus | Yes. |
| 04:35.57 | Snafu777 | i don't care about the bits and bytes |
| 04:36.06 | Snafu777 | just the lack of actually checking for my full password |
| 04:36.12 | Snafu777 | they want to bruteforce, go for it |
| 04:36.14 | Snafu777 | =) |
| 04:36.28 | DocScrutinizer05 | you don't want to allow password auth? fine! forbid it, only allow ssh publey auth |
| 04:36.28 | Maxdamantus | You don't need to brute force if you can see the hash. |
| 04:36.38 | DocScrutinizer05 | pubkey even |
| 04:36.39 | Maxdamantus | Well, you need to brute force a bit |
| 04:36.56 | Snafu777 | true, but my /etc/passwd isn't visible |
| 04:37.00 | Maxdamantus | but you don't need to try every input: you can generate matches for given hashes in far less time. |
| 04:37.03 | bef0rd | also, changing from DES to anything else will not prevent people from bruteforcing over ssh... |
| 04:37.12 | Snafu777 | I didn't say they would bef0rd |
| 04:37.18 | Snafu777 | I want to prevent a 72^8 attack |
| 04:37.31 | Snafu777 | That's it |
| 04:37.32 | DocScrutinizer05 | headdesks |
| 04:37.56 | Maxdamantus | 72^8 = 722204136308736 |
| 04:38.09 | Snafu777 | yes it does |
| 04:38.17 | Snafu777 | however |
| 04:38.23 | Snafu777 | It's a phone |
| 04:38.28 | Snafu777 | odds are root password is not strong |
| 04:38.31 | Snafu777 | due to small keyboard |
| 04:38.34 | Snafu777 | Human nature |
| 04:38.37 | Snafu777 | etc... blah blah blah |
| 04:38.52 | Snafu777 | and most likely a left right or right left cascade |
| 04:38.55 | DocScrutinizer05 | >>blah blah blah<< first true statement |
| 04:39.14 | Snafu777 | DocScrutinizer05: I'm not trying to butt heads with ya man. U got skills that far surpass me in many respects |
| 04:39.38 | DocScrutinizer05 | maemo HAS NO root password, usually |
| 04:39.48 | Snafu777 | I'm just making a valid point about the in-security that is inherent on the n900 |
| 04:40.17 | DocScrutinizer05 | no, you jave no idea about how n900 aka fremantle works |
| 04:40.22 | DocScrutinizer05 | have* |
| 04:41.27 | DocScrutinizer05 | you're trying to find the bricks to close the window for good, while letting the door wide open, in your efforts to stop the flood |
| 04:41.43 | Snafu777 | I'm just going for the basics of a NIST checklist |
| 04:42.01 | DocScrutinizer05 | your checklist doesn't apply to maemo. Evidently |
| 04:42.12 | Snafu777 | Agreed, there is no Maemo specific checklist |
| 04:42.30 | DocScrutinizer05 | search for Hildon Application Manager on your list. Search for rootsh on your list |
| 04:42.43 | Snafu777 | yes i agree |
| 04:43.01 | Snafu777 | and i plan to harden my gui launched apps that require root later on |
| 04:43.03 | Snafu777 | not sure if i can |
| 04:43.08 | Snafu777 | but i read about it somewhere |
| 04:43.13 | Snafu777 | and ham i never use |
| 04:43.20 | Snafu777 | I hate guis when i can command line something |
| 04:43.29 | Snafu777 | I only like guis for stuff i dont want to command line |
| 04:43.33 | DocScrutinizer05 | you're giving a 3 (or more?) days live performance of ~xy here |
| 04:43.37 | Snafu777 | like launching an evil twin router attack |
| 04:43.45 | Snafu777 | I'm just me DocScrutinizer05 |
| 04:43.58 | Snafu777 | I'll always be me. And I'll always get paid to be me =) |
| 04:44.13 | Snafu777 | I have a job that I love very much and it allows me to play with a keyboard. |
| 04:44.17 | Snafu777 | How bad can it really be? |
| 04:44.25 | DocScrutinizer05 | we're not paid for attending this performance |
| 04:44.31 | Snafu777 | Sure you are |
| 04:44.37 | Snafu777 | I'm charging you $28 an hour |
| 04:45.22 | DocScrutinizer05 | sorry, dude. I have to take care about my logs not getting filled witj noise |
| 04:47.42 | *** join/#maemo SAiF (~SAiF@117.217.134.49) |
| 05:02.58 | Snafu777 | Welp, off to bed |
| 05:03.03 | Snafu777 | Goodnight world |
| 05:03.27 | Snafu777 | gotta get a goodnights sleep. Picking up a truckload of bricks tomorrow at home depot. Got a big window I'm building a frame around tomorrow |
| 05:05.36 | *** join/#maemo kwtm2 (~kwtm1@24.5.181.136) |
| 05:06.57 | *** join/#maemo ccxN (~ccxCZ@156.200.broadband11.iol.cz) |
| 05:07.19 | DocScrutinizer05 | my N900 have exactly one open port. While it's the ssh service running on that port, it's not port 22. So no matter where I'm roaming with my N900, the likelihood that somebody would find out about that open port and try a brute force attack on it is minimal. At home my N900 is behind my local NAT and thus not reachable from global internet anyway, only locally. When somebody actually would find out about that port where my sshd runs |
| 05:07.21 | DocScrutinizer05 | while I'm roaming on 3G and would start a brute force attack, I'd feel pretty pissed about my battery going flatline or my /var/log/syslog clogging rootfs and this bringing system to a grinding halt - whatever will happen first. Way before that brute force attack will notice that not a single of the usernames they come up with has a valid password auth to log in via ssh |
| 05:08.50 | DocScrutinizer05 | and nota bene standard default fremantle has no sshd running at all, so in the end it's *you, the user, who ruined security when you configure an insecure sshd and make it run all the time on your N900 |
| 05:18.17 | DocScrutinizer05 | and *all* of that becomes totally irrelevant anyway, as soon as you ignore all good advice and best practice and do a dozen things strictly deprecated on either any system (installing packages not meant for that platform) or particularly on that system (not using HAM and rather doing everything via dpkg. OMG). All perceived security flaws after doing such mayham to maemo are not worth a single line in IRC to discuss how to fix them, since |
| 05:18.19 | DocScrutinizer05 | they shouldn't be there to start with |
| 05:23.10 | *** join/#maemo totalizator (~totalizat@89-69-49-198.dynamic.chello.pl) |
| 06:23.16 | *** join/#maemo maybeHere (~cl@p5B1656FB.dip0.t-ipconnect.de) |
| 06:23.30 | *** join/#maemo sunny_s (~sunny_s@business-092-079-020-027.static.arcor-ip.net) |
| 06:27.26 | *** join/#maemo VDVsx (~VDVsx@192.194.199.34) |
| 06:32.28 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 06:47.38 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 06:52.20 | *** join/#maemo SAiF_ (~SAiF@117.217.140.197) |
| 06:53.43 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 06:55.11 | *** join/#maemo jormungandr (~xxx@213.23.120.114) |
| 07:16.06 | triggerhappy | /clear/clear |
| 07:18.39 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 07:35.37 | *** join/#maemo SAiF (~SAiF@117.217.140.197) |
| 07:45.06 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 07:49.42 | *** join/#maemo kolp (~quassel@55d44134.access.ecotel.net) |
| 08:05.28 | *** join/#maemo SAiF (~SAiF@117.196.141.118) |
| 08:27.45 | *** join/#maemo kwtm2 (~kwtm1@24.5.181.136) |
| 08:28.11 | *** join/#maemo stef_204 (~kvirc@unaffiliated/stef-204/x-384198) |
| 08:29.56 | *** join/#maemo cypherc (~user@static.ip-80-255-245-177.signet.nl) |
| 08:30.21 | *** join/#maemo goldkatze (~nobody@unaffiliated/goldkatze) |
| 08:30.34 | Ashley` | well. i guess there is a bug in lockscreen. it checks only first ten numbers |
| 08:31.12 | Ashley` | first nine* |
| 08:31.50 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 08:33.58 | *** join/#maemo Kabouik (~quassel@147.99.218.243) |
| 08:46.00 | Ashley` | oh. |
| 08:46.25 | Ashley` | it's fucked up even more |
| 08:46.50 | Ashley` | only a few first letters need to be true |
| 08:48.25 | Ashley` | i'll investigate it at home :P |
| 08:49.34 | *** join/#maemo cityLights (~nivw@bzq-218-29-26.cablep.bezeqint.net) |
| 08:57.37 | *** join/#maemo geaaru (~geaaru@host170-152-static.43-88-b.business.telecomitalia.it) |
| 08:58.27 | *** part/#maemo triggerhappy (~triggerha@192.30.34.140) |
| 08:58.32 | *** join/#maemo triggerhappy (~triggerha@192.30.34.140) |
| 09:03.32 | Raimu | D: |
| 09:20.22 | *** join/#maemo AD-N770 (~jep@o.bcn.fluendo.net) |
| 09:29.44 | *** join/#maemo auenf (~David@171.72.233.220.static.exetel.com.au) |
| 09:33.19 | *** join/#maemo Gatta_Negra (~SailCat@89.190.196.121) |
| 09:33.55 | *** join/#maemo auenf (David@171.72.233.220.static.exetel.com.au) |
| 09:34.42 | *** join/#maemo dhbiker (~dhbiker@95.87.145.172) |
| 09:34.49 | *** join/#maemo mvp (~mvp@h144.natout.aau.dk) |
| 09:42.10 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 09:44.23 | *** join/#maemo fizzie (fis@unaffiliated/fizzie) |
| 09:52.39 | *** join/#maemo Hurrian (~textual@unaffiliated/rikanee) |
| 09:53.46 | *** join/#maemo geaaru (~geaaru@host170-152-static.43-88-b.business.telecomitalia.it) |
| 09:57.53 | *** join/#maemo cgk (~chris@213.140.200.149) |
| 10:07.51 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 10:13.21 | *** join/#maemo cgk (~chris@213.140.200.149) |
| 10:16.41 | *** join/#maemo cgk_ (~chris@213.140.200.149) |
| 10:17.30 | *** join/#maemo SAiF (~SAiF@117.202.117.27) |
| 10:20.15 | DocScrutinizer05 | I'd not be surprised to find the lockscreen password limited to 5 chars |
| 10:21.04 | DocScrutinizer05 | heck, my credit card password is limited to 4 |
| 10:26.20 | joga | I at least have 6.. |
| 10:26.29 | *** join/#maemo lbt_ (~david@Maemo/community/contributor/lbt) |
| 10:26.54 | joga | or, uh, you mean the "Enter lock code" screen or something else? |
| 10:34.42 | *** join/#maemo qwqwqwerrr (~halfablk@39.59.110.158) |
| 10:35.40 | *** join/#maemo kwtm2 (~kwtm1@24.5.181.136) |
| 10:43.05 | *** join/#maemo trx (~ns-team@devbin/founder/trx) |
| 10:56.29 | DocScrutinizer05 | yes, enter lock code screen (which I never seen in my life so far ;-D ) |
| 10:57.11 | DocScrutinizer05 | default lockcode is "12345" |
| 10:58.00 | DocScrutinizer05 | I'd guess that's the fixed length this "password" has to be, according to the coder who built lockscreen |
| 11:04.36 | *** join/#maemo eMHa__ (~mh@nat.de.netviewer.com) |
| 11:06.02 | *** join/#maemo LauRoman (~LauRoman@5-14-92-78.residential.rdsnet.ro) |
| 11:07.05 | *** join/#maemo lizardo (lizardo@nat/indt/x-qqvfmyfthazfjczt) |
| 11:27.03 | *** join/#maemo SAiF (~SAiF@117.196.136.241) |
| 11:39.41 | fizzie | DocScrutinizer05: It goes up to 8. (Or, rather, it accepts input up to 10, but only the first 8 digits are meaningful.) |
| 11:40.07 | *** join/#maemo at1as (~at1as@c-69-255-25-188.hsd1.va.comcast.net) |
| 11:40.17 | DocScrutinizer05 | that's pretty in line with the hash/crypt() funtion used for passwd hashes |
| 12:00.03 | *** join/#maemo VDVsx (~VDVsx@192.194.199.34) |
| 12:02.42 | *** join/#maemo NIN101 (~core@n900.quitesimple.org) |
| 12:13.55 | *** join/#maemo SmilyOrg (Smily@BSN-142-42-91.dial-up.dsl.siol.net) |
| 12:32.32 | *** join/#maemo ebzzry_ (~ebzzry@112.204.28.168) |
| 12:35.15 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 12:50.00 | *** join/#maemo dos1 (~dos@unaffiliated/dos1) |
| 12:52.07 | *** join/#maemo Kabouik (~quassel@147.99.218.243) |
| 12:52.39 | *** join/#maemo hxka (~hxka@176.14.54.167) |
| 12:53.01 | *** join/#maemo fortytwo (~thomas@who.let.this.bloody.dropbear.in) |
| 12:55.13 | *** join/#maemo xjiujiu (~xjiujiu@218.77.14.204) |
| 12:55.28 | *** join/#maemo heroux (~heroux@50708181.static.ziggozakelijk.nl) |
| 13:02.47 | *** join/#maemo heroux (~heroux@5070816D.static.ziggozakelijk.nl) |
| 13:14.44 | *** join/#maemo Hurrian (~textual@unaffiliated/rikanee) |
| 13:19.24 | *** join/#maemo Venusaur (~wdwrf@wikipedia/Antonio-Lopez) |
| 13:22.44 | *** join/#maemo darkschneider (~gab@93-32-59-224.ip32.fastwebnet.it) |
| 13:28.09 | *** join/#maemo heroux (~heroux@50708181.static.ziggozakelijk.nl) |
| 13:40.33 | *** join/#maemo FReaper-PC (~honoo-pc@jlp-209-16.tm.net.my) |
| 13:47.34 | *** join/#maemo newbie|2 (~Snafu@unaffiliated/snafu777) |
| 13:47.42 | Snafu777 | hugs DocScrutinizer05 |
| 13:47.51 | Snafu777 | chpassword -m |
| 13:47.55 | Snafu777 | user:password |
| 13:47.57 | Snafu777 | crtl+d |
| 13:48.03 | Snafu777 | problem fixed |
| 13:49.51 | Snafu777 | chpasswd rather |
| 13:49.53 | Snafu777 | not chpassword |
| 13:53.05 | *** join/#maemo trumee (~parul@c-98-199-151-246.hsd1.tx.comcast.net) |
| 13:59.00 | *** join/#maemo edheldil (~edheldil@2001:1488:ac14:1400:222:19ff:fe31:415e) |
| 14:21.10 | *** join/#maemo konelix (~konelix@200.119.190.124) |
| 14:23.17 | *** join/#maemo at1as (~at1as@c-69-255-25-188.hsd1.va.comcast.net) |
| 14:29.10 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 14:31.10 | silviof | Snafu777: for scripts 'echo "user:password" | chpasswd' is very usefull :-) |
| 14:32.57 | Ashley` | DocScrutinizer05: 5 numbers are enough to stop dumb friends from changing language to chinese :P |
| 14:35.44 | Snafu777 | silviof: interesting |
| 14:36.06 | Snafu777 | silviof: Main reason i threw that out there is that by default, maemo uses DES, and on ssh only 8 chars is needed for password |
| 14:36.10 | Snafu777 | a security risk i think |
| 14:36.13 | *** join/#maemo RiD (RiD@bl17-224-26.dsl.telepac.pt) |
| 14:38.14 | Snafu777 | What I would like to find out is: what file in the system controls des vs md5 for maemo for passwd |
| 14:38.27 | DocScrutinizer05 | and honestly that's all the devicelock been meant for |
| 14:39.09 | silviof | Snafu777: yes, if it so that this is ugly. But you can set some nerv-parameters on sshd_config. like LoginGraceTime snd so |
| 14:39.43 | Snafu777 | Agreed, but i'm not trying to harden sshd |
| 14:39.50 | Snafu777 | I was trying to find a workaround for the des issue |
| 14:42.49 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 14:43.14 | Snafu777 | So does anyone know that specific file that maemo uses, or is this some hardcode by default thing? |
| 14:53.32 | warfare | Snafu777: /etc/pam.d/common-password? |
| 14:56.00 | Snafu777 | password required pam_unix.so nullok obscure md5 |
| 14:58.43 | *** join/#maemo newbie|2 (~Snafu@unaffiliated/snafu777) |
| 15:05.10 | DocScrutinizer05 | warfare: hmm, on maemo? |
| 15:05.48 | DocScrutinizer05 | IroN900:~# ll /etc/pam* |
| 15:05.49 | DocScrutinizer05 | ls: Zugriff auf /etc/pam* nicht möglich: No such file or directory |
| 15:06.42 | *** join/#maemo konelix_ (~konelix@190.143.148.224) |
| 15:11.38 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 15:14.33 | *** join/#maemo peetah (~peetah@cha92-9-82-236-202-86.fbx.proxad.net) |
| 15:15.15 | *** join/#maemo t3st3r (~t3st3r@gateway/tor-sasl/t3st3r) |
| 15:16.05 | *** join/#maemo RiD (RiD@bl17-224-26.dsl.telepac.pt) |
| 15:17.45 | warfare | DocScrutinizer05: my n900 has them. Belongs to libpam-runtime. |
| 15:18.12 | DocScrutinizer05 | iirc optification came with PR1.2. Before that Nokia tried to cram *all* binaries into the 240MB rootfs, which probably made them a tad stingy regarding feature-richness of of the system |
| 15:18.28 | DocScrutinizer05 | weird |
| 15:19.53 | DocScrutinizer05 | IroN900:~# find /lib/ /usr/lib -name '*pam*';echo $? |
| 15:19.55 | bencoh | a little bit :) |
| 15:19.55 | DocScrutinizer05 | 0 |
| 15:21.21 | DocScrutinizer05 | IroN900:~# apt-cache policy libpam-runtime |
| 15:21.22 | DocScrutinizer05 | libpam-runtime: |
| 15:21.24 | DocScrutinizer05 | <PROTECTED> |
| 15:21.25 | DocScrutinizer05 | <PROTECTED> |
| 15:21.27 | DocScrutinizer05 | <PROTECTED> |
| 15:21.28 | DocScrutinizer05 | <PROTECTED> |
| 15:21.30 | DocScrutinizer05 | <PROTECTED> |
| 15:22.35 | DocScrutinizer05 | I wonder what's the use of libpam when the executables don't use it |
| 15:23.34 | DocScrutinizer05 | IroN900:~# apt-cache policy passwd |
| 15:23.36 | DocScrutinizer05 | passwd: |
| 15:23.37 | DocScrutinizer05 | <PROTECTED> |
| 15:23.39 | DocScrutinizer05 | <PROTECTED> |
| 15:23.40 | DocScrutinizer05 | <PROTECTED> |
| 15:23.42 | DocScrutinizer05 | <PROTECTED> |
| 15:23.43 | DocScrutinizer05 | <PROTECTED> |
| 15:25.27 | warfare | ah, libpam-runtime gets pulled in through cvs, which gets pulled in through git-cvs which is depended on by git. |
| 15:26.10 | Snafu777 | Well I'm glad I was able to spark something. Even if I have no idea what ya'll are discussing as I don't do linux security =) |
| 15:26.38 | warfare | Snafu777: we were just wondering why some of us have /etc/pam.d and others don't. |
| 15:27.24 | bencoh | git-cvs depended on by git ? |
| 15:27.27 | bencoh | hmm |
| 15:32.52 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 15:38.58 | *** join/#maemo sequantz (~sequantz@194.11.24.44) |
| 15:48.07 | *** join/#maemo ssvb (~ssvb@212.16.98.80) |
| 15:53.40 | *** join/#maemo AD-N770 (~jep@o.bcn.fluendo.net) |
| 16:04.11 | *** join/#maemo theblackcrow1 (~theblackc@p549A28B7.dip0.t-ipconnect.de) |
| 16:04.46 | *** join/#maemo konelix (~konelix@190.143.180.195) |
| 16:06.12 | theblackcrow1 | hello, i found the widget desktop-cmd, which fullfills my needs. but if it's installed, there are tapping errors on the whole display widgets and icons. has anyone an alternative for me? |
| 16:08.49 | *** join/#maemo zGrr (~G@46.205.82.53.nat.umts.dynamic.t-mobile.pl) |
| 16:09.13 | zGrr | moin :) |
| 16:11.28 | Apic | Hi |
| 16:15.35 | *** join/#maemo messerting (~messertin@cm-84.209.22.230.getinternet.no) |
| 16:19.39 | *** join/#maemo konelix__ (~konelix@199.13.151.186.static.intelnet.net.gt) |
| 16:20.46 | *** join/#maemo japa-fi (~jani@dsl-hkibrasgw4-50dc4f-215.dhcp.inet.fi) |
| 16:37.19 | *** join/#maemo konelix (~konelix@190.143.148.255) |
| 16:44.13 | *** join/#maemo cypherc (~user@f212009.upc-f.chello.nl) |
| 16:47.49 | DocScrutinizer05 | I'm not available for council meeting tonight |
| 16:49.44 | DocScrutinizer05 | theblackcrow1: queenbeecon |
| 16:50.03 | DocScrutinizer05 | theblackcrow1: though I never had problems with cmd execution widget |
| 16:51.14 | DocScrutinizer05 | theblackcrow1: while queenbeecon is overkill and a real pita to configure, thanks to a zillion options. Well, test it, you might love it |
| 16:52.26 | *** join/#maemo arcean (~arcean@aaeo31.neoplus.adsl.tpnet.pl) |
| 16:53.17 | bencoh | talking about queenbeecon, does hildon-desktop properly handle desktop widgets with desktop refresh (as in queenbeecon for instance) and locked/inactive screen ? |
| 16:53.33 | bencoh | it feels like it just sucks battery |
| 16:54.10 | bencoh | and I suspect a few flows in hildon-desktop code regarding this part, though I'm not sure :) |
| 16:55.21 | theblackcrow1 | DocScrutinizer05: thanks, i'll try it :) |
| 16:59.06 | *** join/#maemo VDVsx (~VDVsx@a88-114-88-95.elisa-laajakaista.fi) |
| 17:11.12 | theblackcrow1 | DocScrutinizer05: thanks, queen-beecon works very nice (until now) and wow, much to configure! |
| 17:11.16 | *** join/#maemo raccoon- (user@tan.uk.is) |
| 17:17.14 | *** join/#maemo hxka (~hxka@176.14.54.167) |
| 17:33.30 | *** part/#maemo Gadgetoid (~Gadgetoid@210.73.2.81.in-addr.arpa) |
| 17:52.58 | *** join/#maemo sq-one (~sq-one@p549A8C5A.dip0.t-ipconnect.de) |
| 17:57.48 | *** join/#maemo kwtm (~kwtm@173.200.183.221) |
| 18:41.12 | *** join/#maemo APTX_ (~APTX@unaffiliated/aptx) |
| 18:43.54 | *** join/#maemo Kabouik (~quassel@15.156.92.79.rev.sfr.net) |
| 18:45.28 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 19:11.38 | *** join/#maemo RiD (Ghost@bl17-224-26.dsl.telepac.pt) |
| 19:20.34 | *** join/#maemo at1as (~at1as@c-69-255-25-188.hsd1.va.comcast.net) |
| 19:21.19 | *** join/#maemo _rd (~rd@p5088FC4E.dip0.t-ipconnect.de) |
| 19:33.27 | *** join/#maemo pcfe (~pcfe@2a02:8109:a2c0:173c:1ec1:deff:fe18:85e1) |
| 19:33.27 | *** join/#maemo pcfe (~pcfe@redhat/pcfe) |
| 19:34.35 | *** join/#maemo kwtm1 (~kwtm@24.5.181.136) |
| 19:41.34 | *** join/#maemo kwtm2 (~kwtm1@24.5.181.136) |
| 19:43.48 | *** join/#maemo mavhc (~mavhc@cpc65310-basf8-2-0-cust204.12-3.cable.virginmedia.com) |
| 19:46.26 | *** join/#maemo Gadgetoid (~Gadgetoid@210.73.2.81.in-addr.arpa) |
| 20:26.39 | *** join/#maemo valeriusL (~valerius@85.26.180.170) |
| 20:28.23 | *** join/#maemo valerius (~user@85.26.180.170) |
| 20:38.24 | *** join/#maemo sunny_s (~sunny_s@business-092-079-020-027.static.arcor-ip.net) |
| 20:47.49 | *** join/#maemo andre__ (~andre__@wikimedia/aklapper) |
| 20:53.54 | *** join/#maemo dhbiker (~dhbiker@95.87.145.172) |
| 21:21.44 | *** join/#maemo M4rtinK (~M4rtinK@ip-78-102-146-9.net.upcbroadband.cz) |
| 21:21.52 | *** join/#maemo kwtm (~kwtm@173.200.183.221) |
| 21:30.45 | *** join/#maemo valeriusL (~valerius@85.26.180.175) |
| 21:31.15 | *** join/#maemo valerius (~user@85.26.180.175) |
| 21:32.13 | *** join/#maemo g3kk3r (torrkull@lehtori.cc.tut.fi) |
| 21:42.09 | *** join/#maemo yosafbridge (~yosafbrid@li125-242.members.linode.com) |
| 21:46.02 | *** join/#maemo till (till@vispillo.org) |
| 21:47.00 | *** join/#maemo Scorcerer (scor@czlug.icis.pcz.pl) |
| 21:47.24 | *** join/#maemo APTX| (~APTX@unaffiliated/aptx) |
| 21:47.36 | *** join/#maemo APTX|_ (~APTX@unaffiliated/aptx) |
| 21:48.37 | *** join/#maemo raccoon- (user@tan.uk.is) |
| 21:49.22 | *** join/#maemo Mekkis (~Mekkis@nl.ti4200.info) |
| 21:50.05 | *** join/#maemo r00t^home (~r00t@port-92-196-49-241.dynamic.qsc.de) |
| 22:02.19 | *** join/#maemo B0n0NL (~B0n0NL@2001:981:115d:1:5256:a8ff:fe01:23b1) |
| 22:25.53 | *** join/#maemo B0n0NL (~B0n0NL@2001:981:115d:1:5256:a8ff:fe01:23b1) |
| 22:29.10 | *** join/#maemo xes (~xes@unaffiliated/xes) |
| 22:42.31 | *** join/#maemo Snafu777 (~user@unaffiliated/snafu777) |
| 22:49.46 | *** join/#maemo nox- (noident@freebsd/developer/nox) |
| 22:52.51 | *** join/#maemo trumee (~parul@98.199.151.246) |
| 22:53.59 | *** join/#maemo jon_y (~enforcer@2001:e68:4053:4b87:e01f:8e6d:cdca:d0e5) |
| 23:03.42 | *** join/#maemo SmilyOrg (Smily@89.142.42.91) |
| 23:06.18 | Snafu777 | Does anyone know if Ruby1.9 has been ported for the n900 ? |
| 23:38.55 | *** join/#maemo lbt (~david@Maemo/community/contributor/lbt) |
| 23:40.54 | *** join/#maemo r00t|d430 (~r00t@31-18-101-12-dynip.superkabel.de) |