irclog2html for #uphpu on 20061026

00:31.38*** part/#uphpu herlo (n=herlo@205.149.185.2)
00:47.00*** join/#uphpu herl1 (n=herlo@adsl-70-137-128-50.dsl.snfc21.sbcglobal.net)
00:51.29*** join/#uphpu herl1 (n=herlo@adsl-70-137-128-50.dsl.snfc21.sbcglobal.net)
00:52.47*** mode/#UPHPU [+v herlo] by ChanServ
02:05.05mindjujubigdog_ut, you around?
02:05.11mindjujuel_gaucho
02:06.52*** join/#uphpu _psychic_ (n=_psychic@c-67-186-222-175.hsd1.ut.comcast.net)
02:06.52*** mode/#UPHPU [+v _psychic_] by ChanServ
02:56.22mindjujubigdog_ut , el_gaucho
03:44.59el_gauchoyeah
03:45.28timinatorhe needs a root beer float validation
03:46.52el_gauchojust root beer tonight...got a big glass of it for validation
03:47.30timinatornice
03:48.22el_gauchothat is good stuff
03:49.17timinator:/
03:49.30mindjujuel_gaucho, what kind of vid card do you have?
03:49.38timinatordude... have you ever tried Big Jim's burgers?
03:51.18el_gauchomindjuju, http://www.newegg.com/Product/Product.asp?Item=N82E16814121003
03:52.48mindjujuoh, asus, cool. k.  with what you were saying with WOW and your vid card freezing on you, i thought it might be an exploit in the *nix vid driver  
03:53.12mindjujui was doing my daily scan at CERT and saw that there was an exploit that would cause DOS or worse
03:53.13mindjujuhttp://www.uscert.gov/current/current_activity.html#nvgrhpoc
03:54.23mindjujuCERT just has it listed as Unix, but one site i saw said linux also affected
03:55.33el_gauchoyeah
03:55.53mindjujubrb
03:56.25timinatorel_gaucho: I love their Ribeye Steak Sandwiches
03:56.41timinatorwe should do that sometime
03:56.43el_gauchooh yeah
03:57.21timinatorhow much time could you justify for lunch?
03:57.39timinatorperhaps we could do another geek lunch in a week or so
03:58.46timinatoranother uphpu layton,kaysville,clearfield,ogden lunch
03:58.48timinator:)
04:14.25el_gauchohow much time for me?
04:14.27el_gauchofor?
04:14.37timinatorfor lunch
04:14.50timinatorcould you make the drive next time so we can do Big Jims?
04:26.07*** join/#uphpu Utah_Dave (n=boucha@c-67-172-244-155.hsd1.co.comcast.net)
04:26.07*** mode/#UPHPU [+o Utah_Dave] by ChanServ
05:03.49el_gauchoif we plan it well in advance
05:03.52el_gauchothen i could
05:05.05el_gauchotiminator, did you get that dns stuff all done?
05:05.18timinatorK
05:05.26timinatorI did
05:05.35timinatorand keyed konecnysisters.com
05:05.41timinatorbut not mylumbertrader.com
05:06.02timinatorcause I'm missing the other file
05:06.15el_gauchomissing what file?
05:06.55timinator1 min
05:07.33el_gauchoyour reverse dns is not setup for those 2 ip addresses
05:07.47timinatorI did it
05:07.55timinatorit showed the changes
05:08.04timinatordid it in the Linode control panel
05:20.58timinatorI'm out guys
05:20.59timinatorlater
05:26.48el_gauchojust the bigdog
05:30.52mindjujucool
05:53.59el_gauchotime for bed
12:14.01*** join/#uphpu Utah_Dave (n=boucha@c-67-172-244-155.hsd1.ut.comcast.net)
12:14.01*** mode/#UPHPU [+o Utah_Dave] by ChanServ
12:50.24dripgm
12:51.57*** join/#uphpu Utah_Dav1 (n=boucha@c-67-172-244-155.hsd1.ut.comcast.net)
12:57.44*** join/#uphpu drip (n=drip@67.96.135.254)
12:57.54*** mode/#UPHPU [+v drip] by ChanServ
13:01.13*** part/#uphpu Utah_Dav1 (n=boucha@c-67-172-244-155.hsd1.ut.comcast.net)
14:07.07*** join/#uphpu wps (n=wps@64.72.210.10)
14:07.08*** mode/#UPHPU [+o wps] by ChanServ
14:43.46*** join/#uphpu herlo (n=herlo@adsl-70-137-128-50.dsl.snfc21.sbcglobal.net)
14:43.46*** mode/#UPHPU [+v herlo] by ChanServ
14:56.06*** join/#uphpu beandog (n=sdibb@gentoo/developer/beandog)
14:56.06*** mode/#UPHPU [+v beandog] by ChanServ
14:56.47*** join/#uphpu Utah_Dave (n=boucha@72-166-51-162.dia.static.qwest.net)
14:56.47*** mode/#UPHPU [+o Utah_Dave] by ChanServ
15:01.52mindjujugm ya'll
15:11.22dripgm mindjuju
15:14.38*** join/#uphpu jakea (n=jakea@128.187.140.241)
15:23.29*** join/#uphpu herl1 (n=herlo@205.149.185.2)
15:27.32*** mode/#UPHPU [+v herlo] by ChanServ
15:35.03Utah_Daveherlo: FC6 gave me a nice surprise last night! I was all excited to try out the Xen stuff, but I found out the hard way  that the newer Xen libraries require a PAE extension on the CPU... which Intel mobile and centrino chips don't have.
15:35.25herloUtah_Dave: really?  that sucks!!
15:35.59Utah_Daveso now my laptop goes into a kernel panic because the PAE extension doesn't exist on my laptop, then it reboots.. panics... reboots... panics... reboots...  :)
15:36.40Utah_Daveyeah, so I'm going to have to reinstall without the cool Xen stuff
15:37.11Utah_DaveFrom what I've read, it's really easy to grep cpuinfo to see if it has PAE.  I wish the install would check for that
15:37.51macnewboldsubmit a pr/bug report
15:56.19*** join/#uphpu herlo (n=herlo@205.149.185.2)
15:56.20*** mode/#UPHPU [+v herlo] by ChanServ
15:57.26*** join/#uphpu timinator (n=timinato@c-67-171-118-199.hsd1.ut.comcast.net)
15:57.27*** mode/#UPHPU [+v timinator] by ChanServ
16:42.46wpscan someone ping this for me?
16:42.46wpshttp://jeremyhanks.com/
16:42.54wpswell, not ping actually
16:42.58wpstry loading it in a browser?
16:43.08wpsdoes it come up or are you getting a connection error?
16:43.15timinatoryes
16:43.15Utah_Davemacnewbold: good idea
16:43.34timinatorerror establishing a database connection
16:43.37Utah_Davewps: it comes up for me just fine
16:43.56wpsweird… it is coming up for every other person
16:44.07timinatorUtah_Dave: it is coming up?
16:44.11timinatorit's not for me dude
16:44.21wpsit is load balanced between multiple servers… I think some are working and others are not
16:44.27Utah_Daveyeah, it comes back fine. In fact, I've done several refreshes and it's fine
16:44.28timinatorOH
16:44.41Utah_Davetiminator: ha ha, I got the good server!
16:44.45Utah_Dave:)
16:44.56timinatormine's not... is there a way to find what server I got?
16:45.05timinatorshut it Utah_Dave
16:45.18timinator:)
16:45.25wpsping it from the terminal
16:45.29Utah_Daveit works in FF2.0 and IE6
16:45.42timinatorI'm on Camino
16:46.12timinator64.58.224.247
16:46.14Utah_DaveI'm getting 64.58.224.247
16:46.36timinator??
16:46.40timinatorthat's crazy
16:46.40wpsweird
16:46.45timinatorwe're on the same server?
16:46.58wpshttp://64.58.224.247/
16:47.01wpserror?
16:47.03Utah_Davetry putting that IP in your browser
16:47.14timinatorsame guys
16:47.25wpsworks with the IP?
16:48.00timinatornope
16:48.04timinatorno go w/ IP
16:48.06wpsk
16:48.12wpsthanks guys
16:48.46Utah_Daveworks with the IP for me
16:48.49timinatorsure
16:49.09timinatorUtah_Dave: okay smarty pants, enough rubbing it in
16:49.42Utah_Davesorry
16:50.04timinatork then
16:50.06timinator:)
16:50.50bigdog_utit all works for me
16:51.50timinatornext you'll both tell me that you're on windows boxes and that they are somehow superior
16:53.07bigdog_utexactly
16:55.43bigdog_utlunch at rumbi's today
16:56.11timinatorI'm on for lunch out of the fridge today
17:01.16*** join/#uphpu _psychic_ (n=_psychic@71.32.228.156)
17:01.16*** mode/#UPHPU [+v _psychic_] by ChanServ
17:05.59Utah_DaveI'm going to eat at Tenney's today
17:06.48Utah_Davegoood sandwiches
17:22.25*** join/#uphpu fungus (n=fungus@firebat.aros.net)
17:22.34*** mode/#UPHPU [+o fungus] by ChanServ
18:31.43Utah_Dave~lart mindjuju
18:36.01timinatordang
18:36.05timinatoryou made him leave
18:41.08Utah_Dave:)
18:44.04herlotiminator: how did he leave, he was stuck to the floor
18:44.30timinatorit was messy... I saw it all
19:08.27Utah_Davehe's stuck to the floor and can't reach his keyboard
19:16.20*** join/#uphpu _psychic__ (n=_psychic@71.32.228.156)
19:38.17*** join/#uphpu synic (n=squish@pdpc/supporter/student/synic)
19:38.17*** mode/#UPHPU [+v synic] by ChanServ
20:28.48*** mode/#UPHPU [+v _psychic_] by ChanServ
22:49.29macnewboldbeandog: you still around?
22:49.44macnewboldnewer versions of sshd at least have an option in sshd_config that changes that setting
22:49.54macnewboldman sshd_config should say something about it
22:49.57wpsany CentOS users in the channel?
22:51.24macnewboldbeandog: yeah, here it is. PasswordAuthentication no. There's also PermitRootLogin without-password that might help too.
22:51.44_psychic_hey you guys see that "Getting Real" the 37 signals book is online?
22:52.15macnewboldis it online for free now? or are they still charging money for it?
22:52.32beandogmacnewbold: thanks Ill try it
22:52.38macnewboldnp
22:52.39beandogI dont think the 1st one ever worked
22:52.53_psychic_macnewbold: its kinda online - I'm not sure how much is missing
22:52.56macnewboldyou do have to restart sshd before it takes effect of course
22:52.59_psychic_but the thing I thought was cool
22:53.01beandogright
22:53.03_psychic_was that the book site is in php!
22:53.06macnewboldnice
22:53.08macnewboldhehe
22:53.15macnewboldnot ruby/rails
22:53.22beandogmacnewbold: well the man page talks about turning it on
22:53.28beandogmacnewbold: just nothing about making it the only auth scheme
22:54.12macnewboldyou'd want to turn on pubkey (and maybe rsa, if you like sshv1), and then turn off password and challengeresponse
22:54.36macnewboldyou can try ssh -v ohstname to see what kinds of auth it says it will accept
22:54.41macnewboldthen you will know when you've got it right
22:54.53beandogoh okay, sweet.
22:54.53macnewboldjust don't lose your keys or you'll be paying the server a visit in person
22:55.29beandogYah its still not doing it.
22:55.30beandog-_-
22:55.43beandogIve had "PasswordAuthentication no" already
22:56.57beandogOh wait.
22:57.05beandogUsePam No worked, I think..
22:57.27beandogI swear I tried that before.
22:58.07macnewboldah
22:58.08macnewboldnice
22:58.09beandogdebug1: Authentications that can continue: publickey,keyboard-interactive
22:58.15beandogdoes that look right
22:58.25macnewboldkeyboard-interactive I think might be challenge response or something
22:58.41beandogok
22:58.42beandoglets try that
22:59.11beandognope
23:00.11macnewboldhttp://linuxmafia.com/pipermail/conspire/2006-August/002231.html
23:00.34macnewboldand the answer he got: http://linuxmafia.com/pipermail/conspire/2006-August/002232.html
23:01.24macnewboldthe rest of the thread is helpful too
23:01.27macnewboldaccording to him,
23:01.45macnewboldit still listed keyboard-interactive for some reason, but wouldn't ever prompt for a password
23:01.50beandogeven then.
23:01.52beandogYah.
23:01.53macnewboldjust for a passphrase if necessary
23:01.56beandogRight.
23:02.04beandogI guess its pubkey-only
23:02.07macnewbolddoes that match what you're seeing?
23:02.09beandoghttp://lists.freebsd.org/pipermail/freebsd-questions/2005-March/079755.html
23:02.11macnewboldhehe, want me to test it?
23:02.12beandogyah
23:02.14beandogSure
23:02.58macnewboldnice, no prompts
23:03.13macnewboldyou are secured against those pesky passwords, at least in ssh
23:03.34beandogheh
23:03.37beandogsshd++
23:03.42macnewboldwhich makes you much more secure against a trojaned sshd
23:04.02beandogwell I was using denyhosts
23:04.07beandogBut pubkeys are soooooooooooooo much nicer.
23:09.39beandogHmm
23:09.43beandogThat is nice.
23:09.44beandog:)
23:10.19beandogI did lock myself out once with denyhosts ... that was a lot of fun
23:10.19beandogheh
23:18.04fungusIf you are turning off all form of password auth on sshd, turn off ChallengeResponseAuthentication as well as PasswordAuthentication.
23:19.48beandogok
23:20.42beandogwhat is an s/key password anyway
23:21.20fungusThe only reason to have ChallengeResponseAuthentication on is if you want to UsePAM, or, you want to use one time use passwords.
23:21.35funguss/key is one time use passwords.
23:22.01fungusyou get a list of passwords that each work only one time.
23:23.00fungusIt is very secure, but makes you jump through more hoops.
23:24.09fungushttp://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/one-time-passwords.html
23:24.48beandoghuh, cool
23:27.38timinatorhey guys
23:28.06timinatorwho do you all use for a Credit Card Processing Gateway?
23:28.20timinatorI'm running into a brick wall w/ Authorize.Net

Generated by irclog2html.pl by Jeff Waugh - find it at freshmeat.net! Modified by Tim Riker to work with blootbot logs, split per channel, etc.