**** BEGIN LOGGING AT Mon Dec 21 02:59:59 2015 Dec 21 04:32:45 hi there! Dec 21 04:33:44 can you advice me with actual ("alive") maemo repos links? "extras" ones seems to be a bit zombies :-/ Dec 21 04:39:14 Although, I somehow got an "update" with bootmenu (I thought it wan't installed before, so dunno why do it installednow) and (new update arrived, but did nothing), but, say, syncevolution-client still broken (can't find syncevolution itself to install). So I decied I missing some repos. Isn't it? Dec 21 06:51:20 hey Dec 21 06:52:12 is there any way some f-head who KNOWS I run an n900 could have logged into my phone when it's connected via usb, and made it (for example) email them the text messages? Dec 21 06:52:37 on a previous linux install that I now know was totally compromised Dec 21 06:53:06 because unlike an android phone, it's a small linux computer, which is easier to "hack" than any android Dec 21 07:03:32 how is it "easier"? Dec 21 07:03:55 it's possible to connect to n900 via usbnet, but... Dec 21 07:04:37 mva: extras* should be working (?) Dec 21 07:19:14 doesn't android have usb debugging stuff that'll basically expose the device to pretty much anything Dec 21 07:19:28 (assuming it's turned on, not sure if rooted images have that by default or not) Dec 21 07:25:48 bencoh: it is working (fapman kinda syncing them). But, say, syncevolution-client is broken, some packages too. And... I didn't meant unavailability under "death". Just lack of updates (including fixes) ;) Dec 21 08:43:02 so it seems my IT dept. can't help me with OWA, Dec 21 08:50:47 "outlook web access is available through the link https://owa.domain.org/owa/ without a Pulse Secure connection. The user must have a cert that matches their user account, and the username must be entered as domain\username" .. excerpt from the documents for OWA. so i asked my local IT dept. to get me this cert and they say i need to use Pulse :( Dec 21 08:52:00 have spent over an hour explaining that i'm not looking to use Pulse. gawd. someimes techs can be difficult people if they don't get what you want or why you want it. Dec 21 08:56:56 s/get/understand/ Dec 21 09:08:41 (that's why you shouldn't ask XY-syndrome questions to techs) Dec 21 09:12:59 ? Dec 21 09:14:48 and where is xy syndrome in what i'm asking them? Dec 21 09:36:30 mva: http://wiki.maemo.org/Repository#List_of_Maemo_repositories Dec 21 09:41:46 fishbulb: any device with physical access is usually easily hackable Dec 21 11:59:11 * Sicelo idly wonders if we can remove an email account in modest via commandline Dec 21 11:59:33 answer is: maybe Dec 21 11:59:50 if config is just text file, then any editor could do Dec 21 12:00:35 but they might be stored as sql db as well, and most likely are Dec 21 12:01:41 i know the login details are kept in gconf Dec 21 12:03:01 nice for os integration, wtf for design Dec 21 12:03:21 huh? Dec 21 12:03:30 i hate any kind of binary configs Dec 21 12:03:56 i didn't know gconf was binary .. is it? Dec 21 12:04:08 flatfiles tied to the program and ~/.program.conf or ~/.program/ are the traditional way Dec 21 12:04:32 also, more portable Dec 21 12:05:11 anyway, if N900 gets lost, and somehow I'm able to login remotely to it, i suppose by removing the gconf entries the finder cannot get new emails :/ Dec 21 12:05:31 change the mailbox pass in that case Dec 21 12:05:32 safer Dec 21 12:06:19 MfE password is hashed Dec 21 12:07:16 i assume you are not the target of any security agency, otherwise no hash is secure Dec 21 12:09:01 you missed the point :) Dec 21 12:09:10 :) Dec 21 12:09:23 woke up recently, still in dreamy land Dec 21 12:09:26 but yes, i wonder if there's cleaner way to remove email accounts Dec 21 12:09:53 for a test you should do filesystem compare before adding/removing account Dec 21 12:10:03 and you could find what's changing Dec 21 12:10:31 i dont remember if n900's kernel has block dev tracing (would make finding what's accessed easier) Dec 21 13:55:34 hey, are there any functional facebook widgets left for maemo Dec 21 13:59:52 no Dec 21 14:07:48 moin :) Dec 21 18:32:14 is it possible for someone to have "rooted" my n900 Dec 21 18:32:22 and send the texts to them Dec 21 18:34:06 it's usually on me, but I've used it so much without reflashing, and connected to so many free or totally dodgy hotspots, that it might as well have had unprotected sex with 350 prostitutes Dec 21 18:34:18 :)) Dec 21 18:34:30 if you are feeling unsafe just reflash Dec 21 18:35:06 I rember last time, there was't a "just" involved Dec 21 18:35:14 ~ping Dec 21 18:35:15 ~pong Dec 21 18:35:18 ~flashing Dec 21 18:35:19 extra, extra, read all about it, maemo-flashing is http://wiki.maemo.org/Updating_the_tablet_firmware, or - on linux PC - download&extract http://maemo.cloud-7.de/maemo5/patches_n_tools/maemo-my-private-workdir.tgz, cd into it, do sudo ./flash-it-all.sh Dec 21 18:35:31 download the script, unpack, run, done Dec 21 18:35:44 cant get any easier Dec 21 18:36:19 you're right, does software still exist for backing up important stuff? Dec 21 18:36:27 ~bm Dec 21 18:36:27 it has been said that backupmenu is http://talk.maemo.org/showthread.php?t=63975 Dec 21 19:03:28 backups of a compromised system isn't a good idea. I doubt anyone would bother to attack a device with so little market share Dec 21 19:03:59 swb: anyone with basic linux knowledge and being his 'friend' Dec 21 19:12:12 fishbulb: you may have actually sent the sms'es yourself by mistake? it's happened to me couple of times. just last week a friend said i sent him an empty email and he wanted to be sure my systems were not compromised. turns out in my sleep (with unlocked N900 close by) i must have pressed the thing enough to send. Dec 21 19:12:36 (no wonder they say monekys could produce a novel if left alone with a typewriter) :D Dec 21 19:12:46 if alcohol/drugs are involved its even more probable Dec 21 19:13:16 well i've never indulged in any of those Dec 21 19:14:05 s/monekys/monkeys/ Dec 21 19:15:00 KotCzarny: you are exactly right Dec 21 19:15:25 I have known some pieces of SHIT Dec 21 19:16:50 I've kept this phone for so long because of "linux" Dec 21 19:17:09 but in reality it's probably frar easier to hack than any android device Dec 21 19:17:16 not true Dec 21 19:17:29 android is much more popular == MUCH mure exploits Dec 21 19:17:49 yes I do realise that it's one of the two phones on the planet, basically Dec 21 19:18:02 and if your droid isnt supported by the maker anymore (usually most stop being supported in 6-12 months after release) Dec 21 19:18:12 then have luck patching holes Dec 21 19:18:41 I know, I don't need a 400 dollar phone, and won't buy one until all my n900's are dead Dec 21 19:18:42 and as such n900 should be considered MORE secure Dec 21 19:18:47 and I don't like android Dec 21 19:19:00 but it's literally a tiny linux computer that has a phone attached Dec 21 19:19:05 yes Dec 21 19:19:55 trying to imagine the motive .. someone sending himself texts from your device .. hehe Dec 21 19:20:23 anyone who is "hacking" into my gmail would find this easier than a decent "hardened" android phone, I have a tablet I got to learn about android, it's.. actually good for some things Dec 21 19:21:15 it's related to how someone gets past 2 step auth on my gmail Dec 21 19:21:38 I had some garbage in my apartment, they went through my stuff, now I have problems. Dec 21 19:21:46 by the way .. do you know the contents of the SMSes? do they remain in Conversations application? do you perhaps have smscon installed? Dec 21 19:22:27 is smscon the security thing for missing phones? I had that installed once Dec 21 19:22:45 just flash it and put lock code on it Dec 21 19:22:58 I want to find out of I'm being paranoid still Dec 21 19:23:14 It's probably SMSCON causing it. Dec 21 19:23:22 yes. smscon is for that. i have it, and after configuring it nicely, am very happy with the results Dec 21 19:23:37 I can't think of another way of someone getting past 2 step auth on gmail Dec 21 19:23:58 set it up wrong and you will have random texts and emails. Dec 21 19:24:01 nobody touches my phone anyway Dec 21 19:24:05 * Sicelo is lost between Gmail step 2 & N900 Dec 21 19:24:07 :/ Dec 21 19:24:20 oh. someone was getting past the 2 step Dec 21 19:24:37 and how does that relate to N900? Dec 21 19:24:39 a piece of garbage who I rented a room to Dec 21 19:24:59 because this is my only phone ,and the texts for 2 step go to it Dec 21 19:25:09 lol Dec 21 19:25:36 so we're troubleshooting N900 when we should be troubleshooting Gmail Dec 21 19:26:05 well maybe Dec 21 19:26:14 but it's still useful to me :) Dec 21 19:26:37 when the step 2 texts come, they come from the usual/correct phone number? Dec 21 19:27:01 and in gmail, you should be able to see previous successful logins Dec 21 19:27:50 I know, the ip addresses have all been from this place Dec 21 19:28:01 shared connection? Dec 21 19:28:13 it shouldn't be Dec 21 19:28:20 I'm not voluntarily sharing it Dec 21 19:29:50 zero other people shoud have access Dec 21 19:30:04 the you have something in there which is likely already pre-approved for authentication, or your gf/wife is the one logging into your gmail :D Dec 21 19:32:05 does smscon have some kind of log? Dec 21 19:33:20 it does. but the problem here is not that N900 sends/receives messages. the real "problem" is someone/thing is logging into his Gmail successfully, so that N900 receives successful login acknowledgement message Dec 21 19:33:30 interogate your gf! :D Dec 21 19:33:39 N900 is innocent Dec 21 19:33:45 or just change all the locks and passwords Dec 21 19:33:59 and review security settings on your gmail Dec 21 19:34:13 I have done all that, nuked my partitions, installed new distros, blah blah Dec 21 19:34:28 I just wanted to know how probable the phone was for being compromised Dec 21 19:34:38 and it's "at least as much as any other phone, if not more" Dec 21 19:34:41 the same as your pc/android Dec 21 19:35:03 yeah. but these days it seems like android is harder Dec 21 19:35:07 having physical access == no problem with compromising Dec 21 19:35:17 ever heard of stagefright? Dec 21 19:35:32 anything from 2.x to 4.x Dec 21 19:35:51 yeah if you have physical access you can do literally anything, and this is the last thing left that hasn't been nuked from orbit (partitions zeroed, all that shit) Dec 21 19:36:03 and if your android phone is not on the 'supported with patches' list, bad luck, no way to fix the exploit Dec 21 19:36:07 stagefright? Dec 21 19:36:37 fishbulb: compromising droid with something as simple as opening video attachment or playing a video Dec 21 19:37:02 there's all this shit about "oh I'm a hacker, but it's only because I'm so smart, and I'm responsible, it's a challenge and I'm not doing any harm" etc etc Dec 21 19:37:48 and a lot of people totally accept that Dec 21 19:38:04 fishbulb: you saying even after changing gmail pass, the smses continue? Dec 21 19:38:38 but if I was like "I have a rock, I've been practicing breaking windows, and for scientific purposes I already broke in and rubbed my balls all over your clothes and toothbrush last week" Dec 21 19:38:40 no, he doesnt know for sure Dec 21 19:38:50 thats why i asked for log Dec 21 19:39:10 about 100% of people would have a problem with that Dec 21 19:39:54 fishbulb: i have my n900 since 2009, never reflashed after initial setup, no problem Dec 21 19:40:11 it's the human link that is usually the exploitable hole Dec 21 19:40:16 KotCzarny: i meant password for gmail :) smscon has no business there Dec 21 19:40:35 similar with my laptop's os (slackware 4.0 and just update since then) Dec 21 19:41:34 KotCzarny: you're without a doubt waaaay better with linux than I am Dec 21 19:41:59 nope Dec 21 19:42:21 i just dont go to dangerous places Dec 21 19:42:35 and dont do suspicious software Dec 21 19:42:39 basically after dos 6.11 (I knew that shit back to front) I found myself without much computer access until about 6 years ago, and I'm 2 years into linux Dec 21 19:43:06 if you want to know linux run it without graphical ui Dec 21 19:43:26 well. if you know dodgy people, dodgy shit is going to happen. like I've lived in 20+ sharehouses, had most of my stuff stolen, but this invasion of my privacy is persisting Dec 21 19:44:23 hmm Dec 21 19:44:30 there's the option of trying to harden the security, and hope the person doing it doesn't know all the exploits, but from what I've seen, they haven't left many traces Dec 21 19:44:35 you don't write gmail password on sticky note somewhere, of course? Dec 21 19:44:40 encrypted os for laptop Dec 21 19:44:45 the other option, I go to his house, bash his teeth in with a pipe Dec 21 19:44:51 and not leaving phone unattended Dec 21 19:45:25 lol fishbulb. you have no proof it's someone else. all evidence is pointing to yourself :p Dec 21 19:45:29 or I just go there, and choke him out then kick his ribs in. Dec 21 19:45:33 before you start bashing you should know what and where Dec 21 19:45:51 otherwise it could only get worse Dec 21 19:45:54 and be careful, he might just shoot, while you're busy raising pipe :D Dec 21 19:46:29 this is australia, beatings are almost a currrency Dec 21 19:47:01 oh Dec 21 19:47:09 sounded like a ghetto in us Dec 21 19:47:11 :> Dec 21 19:47:19 it's just like that Dec 21 19:47:27 most large cities are pretty similar Dec 21 19:48:05 check gmail first then Dec 21 19:48:30 for logs, accesses Dec 21 19:48:37 go there, deauth all devices Dec 21 19:48:43 it's always come from this ip Dec 21 19:48:51 inside the router Dec 21 19:49:49 the only way to get into my gmail and whatever, is with the codes from my phone Dec 21 19:49:50 change WiFi password? Dec 21 19:50:10 codes from your phone? meaning? Dec 21 19:50:19 2 step auth Dec 21 19:50:20 oh, and change the router Dec 21 19:50:21 :> Dec 21 19:50:37 I can't afford to but I was going to try decent firmware Dec 21 19:50:45 surely that's good enough? Dec 21 19:51:10 if its a dlink etc and still on the firmware that it came with.. Dec 21 19:51:18 then i guess anything would be better Dec 21 19:51:34 you might also disable wifi altogether Dec 21 19:51:36 and go wired Dec 21 19:52:22 it's an asus whatever Dec 21 19:52:44 this 2 step thing, lol. Dec 21 19:53:09 no I'm not giving up anything, if I can't stop the wind I won't try, if they're actually not as good as I think they are, I could probably harden things enough Dec 21 19:53:24 yes Dec 21 19:54:04 but to not let them sniff out your passwords you should start from the bottom up Dec 21 19:54:39 i never enabled it .. so i don't know what happens exactly -- so you attempt to login via password (step 1), then google sends an sms with a code to your number (step 2), you enter the code and login. after this google sends you a confirmation sms? Dec 21 19:54:46 I don't know if it's the passwords they're even sniffing out, because they got straight through 2 step auth with no problem Dec 21 19:54:55 is this the correct sequence? Dec 21 19:54:59 no, I get a code, then I log in Dec 21 19:55:07 there's never a confirmation one Dec 21 19:55:22 hmm, is your cellphone on some shared plan? Dec 21 19:55:54 shared with who? Dec 21 19:55:58 like an ex? no way Dec 21 19:56:02 :) Dec 21 19:56:15 * Sicelo goes to check this google thing (curiosity kicking in) Dec 21 19:57:28 I know who is doing this, the guy is trash, it's not unknown. nobody would bother doing this to look at how much money I don't have or get a kick out of reading my stuff if they were like, in latvia, becuse they can't transfer money anyway, and wouldn't give a shit what I do in gmail or facebook Dec 21 20:00:46 ah, if you know him then there's nothing to troubleshoot :) Dec 21 20:01:34 https://security.google.com/settings/security/permissions Dec 21 20:02:07 if there is something, clear it Dec 21 20:02:22 and all those other settings Dec 21 20:04:17 also, all forwardings etc in gmail Dec 21 20:05:51 would generate a login code though Dec 21 20:06:01 anyway, KotCzarny you're on CSSU or stock? Dec 21 20:06:11 well, right now I'm locked out anyway Dec 21 20:06:11 my main phone is still on stock Dec 21 20:06:13 *wouldn't generate... Dec 21 20:06:19 dev and testing on cssu-thumb Dec 21 20:06:53 out of your account? Dec 21 20:07:09 also, check your 'recovery email' setting Dec 21 20:07:24 great. could i ask you to set camera on 1.3Mpix capture mode, then see if captured picture is exactly what you see in the viewfinder Dec 21 20:07:33 I'm locked out of my account anyway Dec 21 20:08:03 KotCzarny: ^^ Dec 21 20:08:07 I have a tablet that runs cyanogenmod, and that's authorised Dec 21 20:08:37 sicelo: i think it's what viewfinder shows Dec 21 20:08:43 +/- my shaky hands Dec 21 20:08:56 please try anyway Dec 21 20:08:56 and I don't think any other device is, I don't use my n900 for much, facebook doesn't really work, does gchat? Dec 21 20:09:08 fishbulb: suspect that tablet Dec 21 20:09:22 sicelo: just tried and said Dec 21 20:09:29 I didn't have the tablet at the time Dec 21 20:09:34 I barely ever use it Dec 21 20:09:38 1.3M low resolution setting Dec 21 20:09:56 KotCzarny: ok. so camera2-ui has a bug .. i get a cropped/zoomed result Dec 21 20:10:23 I have 3 n900's, what's the coolest thing you can think of doing with more than 1? there were competitions ages back that had some pretty cool entries Dec 21 20:10:35 sicelo, viewfinder is cropped if one selects nonidentical-to-screen aspect ratio Dec 21 20:10:50 and now, all that source code has disappeared Dec 21 20:11:05 fishbulb: just anything you can do with linux Dec 21 20:11:19 i wrote me an audio player Dec 21 20:11:32 if you know/learn, its perfect for testing code Dec 21 20:11:42 KotCzarny: check on your dev/testing devices ;) Dec 21 20:11:50 yeah but I'm not much of a coder, and someone spent months if not years doing some aerial photography thing for kites Dec 21 20:11:53 sicelo: im away from home, ask again tomorrow Dec 21 20:12:17 now that I'm scratch building a drone, the n900 seems like the ultimate companion Dec 21 20:12:27 cool Dec 21 20:13:18 to learn the sort of coding I can steal immediately from github or whatever and modify, would take years, and I'd never get the stuff done Dec 21 20:13:59 stealing then modifying code is one way to gradually learn, learning the foundations is of course the best way Dec 21 20:14:53 fishbulb: check pm Dec 21 20:14:55 =) Dec 21 20:15:23 fishbulb: you can only steal the code if you violate copyright, with gpl you are just forking ;) Dec 21 20:17:57 stryngs :) Dec 21 20:21:46 grr, another kernel panic third in two weeks Dec 21 20:22:37 N900? Dec 21 20:24:16 you know what I mean, take code I didn't write then use it Dec 21 20:24:25 nah buntu Dec 21 20:24:35 not many projects would get done without doing that though Dec 21 20:25:19 its the open source, it encourages sharing, using, changing (as long as you distribute modified source with your project you arent stealing anything) Dec 21 21:36:41 fennec performing quite well for me since i stopped the opening of numerous tabs Dec 21 21:37:48 can actually open maps.google.com, here.com, etc. Dec 21 21:41:34 oO Dec 21 21:41:45 are you seriously using those on your phone? Dec 21 21:42:17 how long does it take to load / print proper routing instructions (for instance) ? Dec 21 21:45:10 haha. i use Ovi Maps. i was just testing. it's slow, but definitely not as bad as before. if you have urgent need to access a 'modern' site and you only have N900 with you .. it may come in really handy Dec 21 21:58:19 Isn't it weird when filepicker opens at /home/user directory, and shows its contents, not only MyDocs? Dec 21 22:09:31 never happened to me since 2011 **** ENDING LOGGING AT Tue Dec 22 02:59:58 2015