September 2007 - wlug - list.wlug.org.nz

WLUG Installfest
by Bruce Kingsbury 30 Sep '07

30 Sep '07

You may be aware that WLUG have planned an installfest for Saturday 6th Oct. In order for this to be a successful event we really need a good number of volunteers to turn up on the day. It doesn't matter if you're not a linux guru, someone with any experience at all is going to be helpful to someone who's never used Linux before. Also we've planned 2,000 fliers to go in letterboxes on Wednesday. Rod and myself are prepared to do 1,000 each if necessary but a few volunteers here would greatly help.

3 2

Any coders here wantto write a patch for Tremulous?
by Bruce Kingsbury 29 Sep '07

29 Sep '07

gpg authentication patch for tremulous; Tremulous client and server run as a single thread, 20 'frames' per second. Because of this time limit, the current system for identifying admins on a server consists of a 32byte cookie named 'cl_guid' which is stored (if the user has any admin priviledges) on the server in admin.dat and sent by the client in plaintext at connect time. This is less-than-ideal. I don't think it would be too difficult to fork off an authentication thread which uses pgp to do a proper signed-challenge authentication. This would be a completely different thread and not constrained by the 50ms frame timelimit. My suggestion, connecting clients optionally send a cl_gpgauth flag which indicates if they're willing to gpg-authenticate. If the server doesn't care then we don't ignore it (as an unpatched server will do) and their guid is accepted as-is. If we want to give them ops, the server requests they sent their public key which is stored in the admin.dat in some appropriate manner. If at the time they connect the guid they've sent is in the admin.dat and has a public key, the server immediately sets their GUID to “”, sends them a 'challenge' of 256 bytes (2048 bits) which is also stored locally, and carries on. If they're in admin dat and don't have a public key, no problem.. existing behaviour. (There might need to be some kind of connection-rate-limit and challenge-drop-time to prevent denial of service attacks on the server at this point.) Until they answer the challenge, or if they ignore the challenge completely, they end up with an effective GUID of “” Client binary, on receiving the challenge, forks off a gpg process to sign the challenge block with their Tremulous private key. When the fork ends (perhaps dozens of frames later) the next reply to the server will include a detatched signature of the challenge data. The server then forks off a GPG process and checks that they've correctly signed the challenge block, and (again perhaps dozend of frames later) if the gpg result is correct, their ingame guid is set back to the one listed in the admin.dat, and existing server code handles whatever privileges are implied by this. Result, connecting ops have their guid set to "" immediately when they first connect, it should only take a few seconds to do the authentication, and they'll have their regular ID back faster than it takes to unpack all the models and textures. Note; cl_guid is not their gpg-key signature or anything like that, it's still just a big random number, and the server keeps a record of both only if there's any reason for them to be authenticated.

1 1

Police go wikiing
by Ian McDonald 29 Sep '07

29 Sep '07

And using open source software too (pmwiki): http://www.nzherald.co.nz/section/1/story.cfm?c_id=1&objectid=10466034&ref=… -- Web1: http://wand.net.nz/~iam4/ Web2: http://www.jandi.co.nz Blog: http://iansblog.jandi.co.nz

2 1

OpenCD reborn as OpenDisc
by Ian McDonald 27 Sep '07

27 Sep '07

http://lwn.net/Articles/251967/rss -- Web1: http://wand.net.nz/~iam4/ Web2: http://www.jandi.co.nz Blog: http://iansblog.jandi.co.nz

1 0

Be careful out there upgrading Ubuntu
by Ian McDonald 26 Sep '07

26 Sep '07

I've seen quite a few reports recently about people upgrading to Feisty and breaking their systems. I've also had problems with the previews of Gibbon (7.10) and this has caused my system to break quite a bit, quite badly. (Multiple instances of not being able to use my GUI environment at all). I'm not trying to slag Ubuntu off - and it's probably only 1% of people having issues. Just remember with any upgrade that you should always have backups. This applies whether you use Windows or Linux or the Mac or whatever.. It's just that Linux upgrades a bit more often typically. I've written a bit about bugs recently on my blog: http://iansblog.jandi.co.nz/2007/09/bugs-bugs-bugs.html Ian -- Web1: http://wand.net.nz/~iam4/ Web2: http://www.jandi.co.nz Blog: http://iansblog.jandi.co.nz

2 3

Geography tool going open source
by Ian McDonald 26 Sep '07

26 Sep '07

Autodesk opensourcing a tool. No interest to me but might interest someone here: http://www.news.com/8301-13580_3-9784878-39.html?part=rss&subj=news&tag=254… -- Web1: http://wand.net.nz/~iam4/ Web2: http://www.jandi.co.nz Blog: http://iansblog.jandi.co.nz

1 0

Another gnome 2.20 article - more detail
by Ian McDonald 25 Sep '07

25 Sep '07

http://arstechnica.com/reviews/os/gnome-2-20-review.ars/1 -- Web1: http://wand.net.nz/~iam4/ Web2: http://www.jandi.co.nz Blog: http://iansblog.jandi.co.nz

1 0

HP to expand Linux PC offering
by Ian McDonald 25 Sep '07

25 Sep '07

http://arstechnica.com/news.ars/post/20070924-hp-to-expand-linux-pc-offerin… -- Web1: http://wand.net.nz/~iam4/ Web2: http://www.jandi.co.nz Blog: http://iansblog.jandi.co.nz

1 0

OLPC for sale!!
by Bruce Kingsbury 24 Sep '07

24 Sep '07

http://news.bbc.co.uk/2/hi/technology/6994957.stm

1 0

REMINDER: WLUG meeting tonight!
by Meeting Reminder Bot 23 Sep '07

23 Sep '07

There's a WLUG meeting tonight: ---------------------------------------------------------------------- 7:30pm, TW.2.05 (http://www.wlug.org.nz/TW) This will be the AGM for Wlug and WlugElections will be held. If you're interested in standing for WlugCommittee sign up on the WlugElections page There is a small proposed change to the charter at WlugCharterDiscussion.

1 0