Re: How to install Precise without getting screwed?

2012-04-08 Thread Colin Watson
On Sat, Apr 07, 2012 at 11:00:31PM -0600, Michael Loftis wrote:
>Oh it goes well and truely far beyond that. Some pinhead decided to move
>/var/run to /run without leaving a symlink or informing and updating
>packages.

/var/run is a symlink to /run in 12.04.  Perhaps you ran into a
corner-case bug, but in general there's a symlink there for
backward-compatibility.

>I had an unfortunate 10.04 LTS system go unbootable

The switch to /run was in 11.10.

>via the FHS accepted and everything but ubuntu� /var/run.

  http://wiki.debian.org/ReleaseGoals/RunDirectory#FAQ

-- 
Colin Watson   [cjwat...@ubuntu.com]

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: server went unbootable

2012-04-08 Thread Dale Amon
On Sat, Apr 07, 2012 at 11:03:48PM -0600, Michael Loftis wrote:
> 
> 
> Sent from my Motorola Xoom
> On Apr 7, 2012 5:44 AM, "Dale Amon"  wrote:
> > At one point I tried to build a 'special' statically
> > linked ssh... an effort that didn't work out... with
> > the idea of having it available on some port as an
> > emergency backdoor for sysadmins that came up as
> > soon as networking was up. The idea was that if things
> > went bad and you were 4000 miles away from the data
> > centre...
> >
> > Just another of those things that I might have done,
> > if I lived on a planet with 48 hours days.
> >
> 
> Don't use openssh! There are a few smaller, lighter, statically linkable
> SSH daemons out there.

There weren't many choices in 2001 or 2002 when I was
looking into it. Do you have any suggestions on one
that might be particularly useful? It doesn't have to
be terribly fancy, just enough so you can get a shell
and 'fix things'.


-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: Ubuntu One needs cloud encryption like LastPass does it

2012-04-08 Thread Dale Amon
On Sun, Apr 08, 2012 at 11:55:25AM +0800, John McCabe-Dansted wrote:
> > LastPass may be secure today, but it is trivially easy for LastPass
> > (or a hypothetical attacker who gains access to LastPass's
> > infrastructure) to compromise that security simply by replacing the
> > javascript code which does the client side encryption and decryption
> > with some code that also passes the encryption key back up to the
> > server (or wherever).
> 
> Hmm, in principle Firefox could support native encryption, where you
> add the key to Firefox directly before even visiting the website.
> Being a bit careful about frames and/or javascript should give you a
> secure solution. The major issue then is, if security matters to you,
> why do you want to access these files from the web? Are you sitting
> down on an untrusted computer and just blindy entering your encryption
> key?
> 
> Still, adding support for securely encrypted files as a cross browser
> standard seems like a fundamentally cool thing to do.

When Mozilla first came out, they had some built in 
encryption capability. The NSA folks forced them to
remove it and even the hooks. I kept my own copy
patched for awhile I just lacked the time. And then
Zimmerman and his pgp pretty much broke the back of
those efforts to keep strong encryption out of the
hands of real people and the capabilities gradually
returned.

Do not ever trust these people. If you have a company
that is US based (some other countries are probably
even worse), someone will show up (or less melodramatically,
you will receive a very official letter) and tell you who
you are going to co-operate with them. And that you really
do not have a choice.

A friend of mine who had his own small ISP for a few customers
had the FBI show up at his door to tell him that he 
had to supply them with a link for for monitoring his
dial up connections. He chose to remove the dialups entirely
and they went away.

Some ISP's here in the UK at one point got told they
had to supply a leased line to the police at their
own expense.

So make no mistake. Point to point encryption with
locally held secure keys it the *ONLY* choice if you
actually want privacy and not pretend privacy.

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: server went unbootable

2012-04-08 Thread Paul Smith
On Sun, 2012-04-08 at 13:55 +0100, Dale Amon wrote:
> There weren't many choices in 2001 or 2002 when I was
> looking into it. Do you have any suggestions on one
> that might be particularly useful? It doesn't have to
> be terribly fancy, just enough so you can get a shell
> and 'fix things'.

I used dropbear for a while.  Works well.

http://matt.ucc.asn.au/dropbear/dropbear.html

Cheers!


-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: How to install Precise without getting screwed?

2012-04-08 Thread Dane Mutters
>
> On the contrary, I found Michael's rant refreshing.  Politically correct
> rants look like a lot of nitpicking over nothing.
>


> ...
>


>
> But of course a little "We shouldn't do this, it's a bad idea" just gets
> an enthusiastic push-back from strong-headed "visionaries" that think
> they're onto something.  When the criticism starts coming in force and with
> sharp language, a threat to ration and reason is made--in other words:
> humans fear losing arguments in the same way they fear being punched in the
> face, and strong and vicious protest is threatening in that it makes being
> wrong particularly high impact.  If the whole world is iffy but unenthused,
> they will swallow your crap and then complain--unenthusiastically--that
> it's not great.  If you are being flamed and shouted at, then when the
> whole world doesn't turn around and realize how excellent your new ideas
> are--perhaps because they're not--you take a MAJOR social hit and suddenly
> nobody likes you, and as a bonus they also get it in their heads that
> anything you touch is a born disaster and probably will never come near you
> again.
>
> In other words, maybe you'll listen when people actually say what they
> mean instead of sucking all the emotional meaning out and presenting simple
> facts--facts which you may dispute with other simple facts.  Facts are
> facts, whether they're true or false.  Information is more than just
> facts:  the emotional weight carries, and the presentation makes that.  Do
> you honestly think Unity would have ever happened if Shuttleworth got
> called a pinhead whenever someone commented on the design proposal and
> subsequent betas?  It would have been quickly abandoned as every single
> developer associated with the project ran for cover from the raining fire
> and brimstone.
>

John,

I can see that you make a good point; bad UI decisions would have been less
likely to happen if at first they were savagely railed against, thereby
causing the potential developers of those bad ideas to go elsewhere.

The problem, as I see it, is that once the decisions have already had time
and effort invested in them, it becomes a problem of, "is all that work I
did stupid/irrelevant?"  This, in addition to pressing the "I can't be
wrong!" button, also presses the "if I'm wrong, my work isn't valuable, so
I'm not valuable" button.  This is, as I see it, the other side of the
psychological "coin" that you aptly outlined above.  Therefore, when a part
of a person's sense of self worth is threatened by way of intense
criticism, the normal response is to "dig in" and fight vehemently to
protect the perceived value of one's work.  Thus, no matter how bad an idea
or system is, those who made it will be all the more stubborn if they feel
like they can't concede gracefully.  (Incidentally, this is similar to how
[useless] bureaucracies become self-preserving.)

So, while I'm, in fact, all *for *speaking bluntly, I also see the quandary
that speaking too bluntly produces when being "wrong" (for the "owners" of
a work) would mean that the months they spent on a particular project would
all be for nothing, should they admit that they were actually wrong.

As a side note, mentioning these psychological/social dynamics may well
push the conversation further in that direction, but it would seem that it
needs to be said (and under other circumstances, I wouldn't hesitate to
aggravate everyone by saying them).  Nobody likes to admit that their
thought processes are irrational and/or emotional, since it means that on
some level, they're being "stupid" by letting other things control any
intelligence they might otherwise possess.

This dynamic (all of the above, including what you've written) seems to
have run rampant in the development of GUIs for the last year or so...but I
hadn't exactly intended to expose this directly until you began doing so.
(Now the beans are "spilled...")

Plus it's fun to read people speaking frankly, though if you spoke like a
> Franc I guess you'd have to use a lot more accents and apostrophes.
>

Well said.  ;-)

--Dane
-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: How to install Precise without getting screwed?

2012-04-08 Thread John Moser

On 04/08/2012 11:14 PM, Dane Mutters wrote:


John,


So, while I'm, in fact, all /for /speaking bluntly, I also see the 
quandary that speaking too bluntly produces when being "wrong" (for 
the "owners" of a work) would mean that the months they spent on a 
particular project would all be for nothing, should they admit that 
they were actually wrong.


All things have a balance.  Direct personal attacks are less useful than 
attacks on a particular feature you don't like; attacks by proxy are 
also more useful than direct personal attacks ("I don't know what idiot 
came up with this..." that idiot is somewhere, but he's at least able to 
shuffle back into the crowd and hide...).  Directly grabbing the 
developer in question and giving them a severe public dressing down is 
just not constructive--let's ignore the issue and lob personal attacks 
instead now eh?  (Thorough dressings down are for the rare situation 
where the person in question is a severely destructive idiot--this 
doesn't happen much, aside from that one coworker we've all had that 
gets paid to creates problems for everyone else.)


Either way, getting *too* uncivil is a bad thing.  Strong language can 
be very useful in some forums; but in forums where it's strongly 
inappropriate you should pick your tone well enough to have the same 
effect.  Railing on something by proxy on a glancing blow may be 
overstepping the bounds of civility, or it might be a needed slap 
alongside the head for someone; continuing to ignore the feature itself 
and continuously use it purely as a proxy to insult someone is just 
malicious and useless.


We don't want to degenerate into a forum of continuous flame wars in any 
case; but the truth is the occasional burn serves to remind us that fire 
is hot and we should really pay attention to what we're doing.  While 
you don't want to burn your house down, you also really don't want to 
freeze to death.


That all said, let's keep it civil.  Or at least let's go for a farce.


Plus it's fun to read people speaking frankly, though if you spoke
like a Franc I guess you'd have to use a lot more accents and
apostrophes.


Well said.  ;-)


If only brevity was my strong point.

--Dane


-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss