Re: need help on cracking wireless password

2018-02-25 Thread deloptes
Long Wind wrote:

> but this is China, we have very low moral standard than you(your email
> shows that you are from USA) the big ? in China is freedomgoogle,
> facebook, twitter ... are all blocked by governmentif we demand justice,
> these should receive more priority than stealing (sharing) bandwidth

Sometimes I think it might be worth blocking google or the stupid social
media platforms. Google as search engine is the only thing I use, but I can
imagine there would be other ways to find information if google was banned.

So do not think that we all here on the other side like google or facebook.

regards



Re: need help on cracking wireless password

2018-02-25 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, Feb 25, 2018 at 10:57:03AM +0100, deloptes wrote:
> Long Wind wrote:
> 
> > but this is China, we have very low moral standard than you(your email
> > shows that you are from USA) the big ? in China is freedomgoogle,
> > facebook, twitter ... are all blocked by governmentif we demand justice,
> > these should receive more priority than stealing (sharing) bandwidth
> 
> Sometimes I think it might be worth blocking google or the stupid social
> media platforms. Google as search engine is the only thing I use,

Detox:

  https://duckduckgo.com/
  https://searx.laquadrature.net/
  https://www.ixquick.com/

There sure are other options. At first you've to get used to it,
because part of Google's better hit rate stems from the fact that
they know you (which, while from a purely technical POV is a Good
Thing, from a societal POV is a disaster, IMHO).

I'm not a purist, mind you, and fall back to Google whenever the
alternatives seem to "fail": that's about once every two months
at the moment (at the beginning of the Google Detox it was more
like once a week).

>but I can
> imagine there would be other ways to find information if google was banned.
> 
> So do not think that we all here on the other side like google or facebook.

Personally I try to keep as much distance between myself
and Google (or facebook or all those (anti-)social networks,
undermined by the likes of deloptes who, using gmail somehow
feed the beast with her/his correspondent's mails (yeah,
that's me)

A bit tongue-in-cheek, a bit serious...

Cheers
- -- t
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlqSkGcACgkQBcgs9XrR2kbUbQCfSla2EydBPOxzuiknsSL0QYBm
ypQAn19mkYz8yTMZJ2Pdn5zBiW54nEql
=dJry
-END PGP SIGNATURE-



Re: need help on cracking wireless password

2018-02-25 Thread Ben Caradoc-Davies
This discussion is not complete without mention of the 
Upside-Down-Ternet, an oldie but a goodie, on how to have fun with 
iptables and squid when your neighbours are stealing your wireless 
internet access:

http://www.ex-parrot.com/pete/upside-down-ternet.html

Kind regards,

--
Ben Caradoc-Davies 
Director
Transient Software Limited 
New Zealand



Re: need help on cracking wireless password

2018-02-25 Thread Thomas Schmitt
Hi,

Ben Caradoc-Davies wrote:
> http://www.ex-parrot.com/pete/upside-down-ternet.html

That's cool ... and should be a warning. Much worse things could happen.


Have a nice day :)

Thomas



Re: need help on cracking wireless password

2018-02-25 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, Feb 25, 2018 at 02:28:45PM +0100, Thomas Schmitt wrote:
> Hi,
> 
> Ben Caradoc-Davies wrote:
> > http://www.ex-parrot.com/pete/upside-down-ternet.html
> 
> That's cool ... and should be a warning. Much worse things could happen.

Yes, I enjoyed that too :-)

Remember that, with some ISPs, this is included in the price...

Cheers
- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlqSvB8ACgkQBcgs9XrR2kbELgCfWj5kU13/m1mWEEU3eE95ONKE
ccQAniOVjJ/i8obdrgZIglcZGw7d1q3w
=dhC5
-END PGP SIGNATURE-



Re: totem not working

2018-02-25 Thread Pierre Frenkiel

up to now, I got no answer, but I would be interested, at least,
to know whether anybody here actually uses it.

best regards,
--
Pierre Frenkiel



Re: need help on cracking wireless password

2018-02-25 Thread deloptes
Long Wind wrote:

> China is a different world than the free worldmore than 200 years after
> 
> Declaration of the Rights of Man
> in 1789, we still don't have freedom of expressionbanning
> google/facebook/twitter are just some evidence i offer freedom of
> expression is sacredwithout it you lose many many rights
> 
> i repeat jungle law holds true in Chinaon top of food chain is communist
> leadershipgovernment ask people to obey law,but government doesn't obey
> law, it's corrupted since government isn't ashamed of banning web siteswhy
> should i be ashamed of stealing(sharing) bandwidth? if i can talk with
> neighbors, topics like how tovisit banned web sites are more important and
> interestingthan bandwidth stealing prevention

Just do not have the illusion we on the other side live in free world with
freedom of speech and so on.
IMO it is even worse, because you think you have those basic human rights,
but in fact at the end you don't - well to some extent you have them, but
look at Assange or Snowden - if you pose danger to the people in power or
the system - you get shut down very quickly.

Why do you think here that governments obey law? Take as example Obama and
Merkel - both are 100% criminals.

To me the main difference are the people - there are definitely more
enlightened people here than in China. What China needs is more
enlightment.

regards





Re: need help on cracking wireless password

2018-02-25 Thread John Hasler
tomas writes:
> There sure are other options. At first you've to get used to it,
> because part of Google's better hit rate stems from the fact that they
> know you (which, while from a purely technical POV is a Good Thing,
> from a societal POV is a disaster, IMHO).

I use Google Search a lot, but they don't "know" me: no cookies and no
scripts.  I've tried allowing their scripts and cookies and find that I
prefer their search engine vanilla.

I do miss the ability to create complex search expressions as was
possible with AltaVista, though.
-- 
John Hasler 
jhas...@newsguy.com
Elmwood, WI USA



Re: stretch and DNS name resolution service for other devices on a LAN

2018-02-25 Thread David Wright
On Sat 24 Feb 2018 at 09:49:27 (+0100), Pascal Hambourg wrote:
> Le 22/02/2018 à 22:57, David Wright a écrit :
> >On Tue 23 Jan 2018 at 20:56:31 (+0100), Pascal Hambourg wrote:
> >>Le 23/01/2018 à 18:08, David Wright a écrit :
> >>>
> >>>[My Laptop] --- wireless connection IPv4 --- [Router] --- Internet Modem
> >>>  | / |
> >>>  | CAT5 cable IPv6/  |
> >>>  |   /   | wireless/wired
> >>>[My Desktop] --- wireless connection IPv4 __/| connections
> >>>  | IPv4
> >>>  |
> >>> [TVs]
> >>>
> Both devices will allocate themselves an address in the 'link local' 
> range,
> and these addresses can then be used for communicating between the 
> devices.
> >>
> >>They can, but they should not be used with application-layer
> >>protocols. Really. IPv6 link local addresses are not meant for this.
> >
> >Well, I won't argue with this as I don't know what they were
> >originally meant for.
> 
> They are meant to be used with low level IPv6 services (automatic
> configuration, neighbour discovery...)
> 
> >However, I don't see why I have them if I'm
> >not allowed to use them when I find a good reason to. I didn't pay
> >good money just to stare at the numbers in  ip address show.
> 
> You did not pay any money for IPv6 link local addresses.

It's an expression. They hand one a newspaper when one gets on the
transAtlantic flight. When one's wife says "You could leave that on
the seat for the next person boarding", one might reply "I didn't pay
good money just to leave the crossword behind".

> >>On disadvantage is that these addresses are not globally unique (the
> >>link local prefix exists on all interfaces) and must be appended
> >>with an interface name.
> >
> >Not an issue here. The only change I have made since you commented
> >on this in August 2016 is that I now sed the output of
> > ip -o link show
> >to pick up the name of the ethernet interface. (The file that defines
> >my IPv6 functions is shared with wheezy/jessie/stretch hosts, and
> >"eth0" doesn't cut it any more.)
> 
> Hackish.

Why is this any more hackish than just setting net.ifnames=0
and sticking with eth0?

> >>The second disadvantage is that if the
> >>interface is replaced for whatever reason, the interface name may
> >>change and the MAC address will change. The link local addresses is
> >>based on the MAC addresses, so it will change too.
> >
> >Well, as the MAC addresses are all configured in my router,
> 
> No, A MAC address is configured in the ethernet adapter NVRAM.
> Besides, The two interfaces we are discussing about are not
> connected to any router.

AIUI the MAC addresses are "burnt" into the card. I then have to copy
the MAC addresses into the router by hand so that it can dispense the
correct IP numbers when devices connect to it.

The point I am making is that were I to be replacing interfaces
all the time, it would still be easier to keep the MAC references
up to date in my bash functions than in the router configuration pages.

> >>IMO, simple
> >>static configuration with a ULA prefix, or with a global prefix if
> >>you own one, would be much reliable.
> >
> >So what would be involved in setting that up? I have no idea where
> >to start. I can't believe it's as simple as 1,2,3 below.
> 
> Get a ULA prefix. Online generators are available on the web.
> Pick up two host addresses in the prefix.
> Statically assign an address to the two interface in
> /etc/network/interfaces or any other network manager.

I'll try that when I've got IPv4 working, as that would make
all of Andy, Greg and yourself happy.

> >>So Andy is right : you could use IPv4 for this. But rather with
> >>static configuration than unpredictable APIPA assignments.
> >
> >Of course I could, but then I've got to interfere with the routing
> >table to prevent the file transfers going through the default
> >wireless interface.
> 
> You can't be more wrong. With the static configuration of a pair of
> IPv4 addresses in a distinct prefix at both ends of the ethernet
> link the traffic between these addresses would flow through the
> ethernet link.

OK, so I would do something like this, would I?

# cat /etc/network/interfaces.d/directcable

auto eth0
iface eth0 inet static
  address 192.168.2.123/24

#

with the appropriate values for eth0 and 123 at each end,
connect a cable and then type

$ scp /etc/network/interfaces.d/directcable username@192.168.2.222:/tmp/

to effect a file transfer (after the ssh dialog)?

> >If I use IPv6, this is all I have to do to transfer large files at
> >CAT5 speeds:
> >
> >1) plug a CAT5 cable into ethernet ports at each machine,
> >2) on the source, type:   6 
> >3) when finished, remove the cable.
> >
> >The wireless interface is unaware of any change, so I can 

sshd fails to start on boot

2018-02-25 Thread mick crane

hello,
on boot sshd seems to be starting before the network is ready so fails.
How/where do I tell it to start after network is up ?

debian testing (buster)

cheers

mick
--
Key ID  4BFEBB31



Re: sshd fails to start on boot

2018-02-25 Thread Don Armstrong
On Sun, 25 Feb 2018, mick crane wrote:
> on boot sshd seems to be starting before the network is ready so
> fails. How/where do I tell it to start after network is up ?
>
> debian testing (buster)

sshd starts after network.target, and listens on 0.0.0.0 and :: by
default, so unless you've modified it to listen on a specific address
which isn't yet up, it shouldn't matter.

Check out what journalctl -xe _SYSTEMD_UNIT=ssh.service; says to see why
it failed to start, and that should tell you what's actually going on.

-- 
Don Armstrong  https://www.donarmstrong.com

Good people are good because they've come to wisdom through failure.
We get very little wisdom from success, you know.
 -- William Saroyan _My Heart's in the Highlands_



Re: totem not working

2018-02-25 Thread Louis Wust
On Sun, Feb 25, 2018, at 10:15, Pierre Frenkiel wrote:
> m is supposed to "show the DVD menu", but typing "m" just opens a
> search window...
> Idem for all shortcuts.

I have loaded a DVD using Totem and verified that the "m" key works as
described in the manpage (and in the "Keyboard Shortcuts" help menu).
This is on a Debian Stretch desktop, using a commercially-manufactured
DVD (i.e., with CSS protection).

Conversely, when a DVD was not yet loaded, the "m" key (and all of the
other alphabet keys) caused a search window to appear, pre-populated
with "m". This matches standard behavior of many "explorer"-type
programs, which present an interface for searching through a library of
items -- videos, in the case of Totem.

Did you try pressing "m" when a video was loaded? One of my test DVDs
took a while to load while the system was "retrieving" CSS keys (as
indicated by a message on stdout).



Re: totem not working

2018-02-25 Thread terryc
On Sun, 11 Feb 2018 18:08:44 +0100 (CET)
Pierre Frenkiel  wrote:

> hi,
> I'm trying to use totem to play DVDs, but none of the shortcuts given
> in the man works.
> For example, m is supposed to "show the DVD menu", but typing "m"
> just opens a search window...
> Idem for all shortcuts.
> Is there a way to make it work?
> Presently, I'm obliged to use vlc, but the menu handling is very bad,
> and I expected to get something better with totem...

I've jst installed it to try and it is IMO cude.
Try something like 
 totem /path/to/file   
Which is what worked for me. I just pointed to a sub directory that
contained four mp4 files and it started playing the first.
Caveat I had to "close the window" to stop it playing.
The terminal in which I invoked the program spewed lots of
errors/warnings.

Best of luck.



stable-backports kernel 4.14.3 ACPI errors with new Gigabyte EFI motherboard

2018-02-25 Thread Geoffrey Brimhall
Hi -

Am using debian9, just upgraded my system to a gigabyte Z370 + intel
core-i7-8700k, bootup is EFI.

System works fine, but bootup is really slowed down because of the
following ACPI errors.

In digging around, looks like the issue is gigabyte needs to fix their
bios, have put in a support request for this.

In the meantime, is there some kernel boot option I could use that might
have the bootup ignore the errors ( and hopefully speed up the boot ) ?

I originally was using the 4.9.x kernel in debian stable, but upgraded to
the 4.14.x in backports.

-geoff Brimhall

Bootup error messages ( seem to be warning that really slow the bootup ):

[0.080726] ACPI Error: [_SB_.PCI0.RP05.PXSX] Namespace lookup failure,
AE_NOT_FOUND (20170728/dswload2-191)
[0.080732] ACPI Error: Method parse/execution failed
\_SB.PCI0.RP04.PXSX, AE_NOT_FOUND (20170728/psparse-550)
[0.080909] ACPI Error: [_SB_.PCI0.RP09.PXSX] Namespace lookup failure,
AE_NOT_FOUND (20170728/dswload2-191)
[0.080912] ACPI Error: Method parse/execution failed
\_SB.PCI0.RP08.PXSX, AE_NOT_FOUND (20170728/psparse-550)
[4.209055] ACPI Error: [DSSP] Namespace lookup failure, AE_NOT_FOUND
(20170728/psargs-364)
[4.209078] ACPI Error: Method parse/execution failed
\_SB.PCI0.SAT0.PRT1._GTF, AE_NOT_FOUND (20170728/psparse-550)
[4.209141] ACPI Error: [DSSP] Namespace lookup failure, AE_NOT_FOUND
(20170728/psargs-364)
[4.209163] ACPI Error: Method parse/execution failed
\_SB.PCI0.SAT0.PRT0._GTF, AE_NOT_FOUND (20170728/psparse-550)
[4.211342] ACPI Error: [DSSP] Namespace lookup failure, AE_NOT_FOUND
(20170728/psargs-364)
[4.211364] ACPI Error: Method parse/execution failed
\_SB.PCI0.SAT0.PRT0._GTF, AE_NOT_FOUND (20170728/psparse-550)
[4.251184] ACPI Error: [DSSP] Namespace lookup failure, AE_NOT_FOUND
(20170728/psargs-364)
[4.251232] ACPI Error: Method parse/execution failed
\_SB.PCI0.SAT0.PRT1._GTF, AE_NOT_FOUND (20170728/psparse-550)


Re: sshd fails to start on boot

2018-02-25 Thread john doe

On 2/25/2018 9:52 PM, mick crane wrote:

hello,
on boot sshd seems to be starting before the network is ready so fails.
How/where do I tell it to start after network is up ?


$ systemctl enable systemd-networkd-wait-online

https://www.freedesktop.org/software/systemd/man/systemd-networkd-wait-online.service.html

--
John Doe