You are not logged in.
Fortunately does not always work (it did not on the ip address of the replacement server),
but anyway, there are still many attempts to guess passwords brute force just on the official ports. So it is still a slight relief which btw i've bee using for years. Of course i am aware that a port scanner will always lead to results. And that with more computing power (and with KI help) intrusion has become a lot easier.
No. I am not clickbaiting at all. Must say that very clearly. Up to You everyone understood that i was talking on a devuan based server.
And maybe one could consider that not all users here are native speakers and therefore tend to express things differently.
But there are always people who apparently feel good at misunderstanding.
If we are on reporting, something else: packagekit prior to version 1.3.5 is open for intruders. I stumbled upon this while checking my servers.
https://cybersecuritynews.com/pack2ther … erability/
Just checked my desktop (excalibur): packagekit is installed in version 1.3.1, hence vulnerable.
I wonder why this is actually installed by default, at least in non-gnome or non-kde installations.
At present the packagekit stuff can often be safely removed; what is not being used, should not be installed.
In another XFCE setup is had been pulled in by system-config-printer which could, luckily, also be safely removed. For the price, that printers need to be configured on the command line or using the CUPS web interface.
Now checking the servers. Both excalibur servers do not have it installed. Good.
This is not a company but a family's private server. With only two people knowing the password. And the root login came came from outside
My prefered DE?
Windowmaker. Plus Xeyes plus Xteddy ;-) No file manager.
And many terminal windows. And web browser windows.
On newer installations i am even going back to xterm as the terminal emulator (with modern fonts).
One of my machines is running XFCE with a Macos Like look.
One installation even has a Unity inspired look. But that's not for me...
BTW: a newer server initally set up as devuan chimaera or daedalus vie apt-get from a corresponding debian installation apparently has not (yet) been compromised.
But here the SSHD config did also permit root logins. Is that an issue of the, well actually not too outdated, debians or an issue of devuan? Or maybe an issue of the inital setup from the vserver provider's template?
Anyway, scanbot.me seems to be pretty well known as a phishing site which usually works through email appendices. Which rises the question if and if yes, how, the door could have been the mail server (older postfix with greylisting, no DKIM/DMARC, but otherwise thoroughly configured) in combination with recent thunderbird.
I am running claws-mail which cannot execute garbage in the emails, but the other users (ex wife and my son) use thunderbird.
One of my servers has recently been hacked. Added to a bot network, and apparently still sleeping. It was an old server, still running 32 bit ASCII. It had emerged through about 20 years from some early debian installation.
I know, ASCII is really outdated, but it was not upgradable due to technical issues - the virtual machine running it limited glibc to version 3.10 which meant that nothing more recent could be run.
What happened:
the attac was performed through a login as root via ssh. With the correct password. No attepts to guess it could be found.
Strange enough, the ssh server had been opened to allow root login. Which i had disallowed from the very first setup of that server. But i just saw that ssh root login is enabled by default in excalibur without a warning.
To me it looks as if the intruder actually had compromised the system earlier, learning the password (it was strong 20 years ago, but weak for modern resources).
Anyway:
Apparently this is closely connected to the phishing site scanbot.me showing that that site even intrudes mail servers if possible.
the intruder installed a bot-net client in /tmp/.drone/ hiding in the process list as
"-bash" and "crond"
hidden in
/tmp/.drone/
It was conncted to server 45.58.183.18 through port 6667 and to 51.79.74.212 through port 80. There are more possible controlling servers configured.
the crontab had been modified to restart the client within 5 minutes and to load data from scanbot.me
of course the "authorized_keys" of any user on the system are also compromised.
Did that. Works nicely. But there are things remaining
a) the udev error messages mentioned elsewhere ... on my TODO list.
b) all the rc*d directories from sysvinit. harmless but potentially irritating. can be safely removed after activation of openrc-init and -shutdown stuff.
c) one of them causes a problem: rc.local
In Alpine that directory is used by openrc to add some fine tuning after the runlevel has completed its setup.
I need to use something like this in connection with iwd - configure an AP on wlan0, set up ip forwarding in the kernel and the appropriate firewall rule for masquerading/forwarding.
Four simple commands dependent on iwd up and running. Similar use cases come to mind, e.q. "real" firewalls.
And, honestly, i do not find an "official" place to do that cleanly in devuan (excalibur). Mhmm.
This regard not the script by itself, just the question where to establish it. (/etc/conf.d/iwd will be executed before iwd is set up)
Much love; i am using it on my own machines on a daily basis.
BUT meanwhihc a few glitches show up: WPrefs.app does not like "large" fonts ... the windows remain small, and it is hardly usable on modern displays with high screen resolution.
Similarly the icon size/layout i still designed for older displays with something close to 75dpi:
The number of apps that are not dockable appears to be increasing. And the old "dockit" wrapper seems to have gone decades ago.
It can be done in the mixer for sure, and I haven't seen it done or tried it myself but I would think it's absolutely possible in the EQ as well.
Have been experimenting with the eqalizer a bit. Not with Your tool, just with the basics.
alsamixer -D equal will show the sliders of the EQ. Alsamixer provides keystrokes to split a stereo track and adjust the two channels seperately. More or less, here in devuan not all strokes seem to work, but anyway.
On my notebook i am using qasmixer anyway and for a few years.
quasmixer provides a field for user defined devices. Entering "equal" there shows the eualizer controls, and they are working. There does not seem to be a way to split stereo channels, but channels that have already been split using alsamixer appear split in qasmixer as well, and they are grouped nicely. And the can be operated perfectly from that interface.
Which means that that little and well established program serves 90% of my needs.
So that kind of behavior might be what should be expected for Your little tool as well.
(in my opinion the main work should be some kind of alsa-jack-only overlay on devuan, mainly because possibly all the desktop environments and other apps pull either pulseaudio or pipewire and thus cause problems: after the upgrade to excalibur, my intentionally alsa only machine had pulled pipewire and started the daemon. Which caused audio from freetube not to work. An overlay to devuan might provide dummy packages to resolve those nasty dependencies.
For my current problem with one sided hearing loss that result is really cool: i would just need to run a mono track, adjust the bad side range by range until i hear that frequency range appearing in the center, and i'll end up with a nice overall setting. Being able to enjoy music again is *really* cool.
Just noticed: is there any possibility to adjust the EQ for the right and left channel seperately? That would open the possibility to adjust it according to the hearing curves which in my case are really different.
Another question/suggestion: optionally integrating some kind of loudnes correction? Something like https://github.com/dpapavas/alsaloudness ?
I have been using wine for a while. On ASCII and on Chimaera. Main application LTSPICE. But that started to behave more and more to my frustration; the latest version even worse than LTSPICE4 from XP times. Other - 16bit - apps also became less and less usable with "each" upgrade of wine.
I am currently considering to isolate some old windows (maybe XP) in qemu for that kind of stuff. And/or a Hackintosh within qemu. Of course isolated from the internet outside my LAN.
Interesting stuff,
but did You notice that ardour pulls pipewire on Excalibur (through libfluidsynth3) end even emacs nowadays does (i'm currently using mg instead, but sometimes a bit more versatility and some gui might be nice as well)?
BTW: the installed pipewire had prevented some stuff from playing audio because pipewire had made the default audio devide unavailable even when it was not running.
So today i spent some hours to clean up my notebook (initially pure alsa+quasmixer, possibly also jack).
Moreover i am setting up an XFCE based setup for my (NON-Tech) friend, and for something like that Your project will hopefully really helpful.
Yes, i think Your asssumption is correct.
Hi,
i just gave up on Excalibur netinstall. On a 250 GB SSD.
Issues:
partitioning: the installer did offer me only fat filesystems and ext2 ????
(i am writing this on a machine grown of ASCII from an old debian using XFS partitions, which means i am really surprised)
the installer did not give me the option to install a boot manager
So i could not proceed.
mhmm. And now? Should i go to back do some minimal daedalus or chimaera install and upgrade from there?
(More seriously i am currently giving exegnulinux a try, but i would of course like to understand whats going on)
Why?
Thats for customers of virtuozzo, not for end users. My contract is with my provider and not with virtuozzo. So i would have to open a(nother) call with my provider, maybe regrding this (apparantly not possible in an running template even if the conatainer is not running).
Which might lead me to the conclusion that either hacking the glibc version test which should be harmless because the actual kernel api is a lot newer than the apparent one because the kernel is actually a lot newer might be a way out. One that i really do not like at all.
Mhmm the question was actually not sticking to alpine which i intend to install on a 2nd old machine (replacing chimaera) but that very specific virtuozzo instance which cannot be upgraded beyond ASCII (at least not without dirty tricks). And ASCII has already passed EOL. And that on a production server visible to the world.
Hi,
in order to be able upgrade a virtuzzo based vserver running Devuan ASCII 32bit i need something with a different libc than the glibc provided by the newer Devuan releases.
Reason: the installation is old, the container has been created unter virtuozzo 6. It runsmy main web and email server - so it is mission critical. After migrating the container to virtuozzo 7 (by my provider), the kernel shows up as 3.10.x. In order to be able to upgrade from ASCII i need a libc working with that given kernel API. However, Beowulf and Chimaera's libc both require at least an api as of kernel version 3.20.x.
AFAIK, musl libc has more relaxed demands on the kernel API. So if there was some Devuan based on musl that would open a possible upgrade path.
THX for any hints.
BTW: i just installed Alpine linux on an old eeePC 1016P with an atom n455 cpu and am impressed on the performance and moderate memory footprint. Even firefox is usable ... thats another reason to switch from glibc to musl libc.
I'm aware that this will affect version 3 and not the current one. Nevertheless i set audacity on hold on 4 machines (all running chimaera).
Firejail and the like is nothing for unexperienced users - simply because they do not know or will not dare to use it.
But anyway: the other affected software is musescore. Chimaera provides Musescore 2 and 3, the first due to problems regarding backward compatibility.
I would guess that version 2 is probably "clean" but version 3 ? Or will the new policie affect only recent versions? BTW: the recent android versions of musescore have already been changed - a friend of mine told me that it was unclear wether she could use it free of charge.
IMO version 2 should be prevailed as long as possible. Regardles how long it'll be maintained by Debian.
I just read about a new issue on Audacity and Musescore containing spyware. It looks as if it would be time to supply forks of the packages. I just read about tthat one: https://github.com/cookiengineer/audacity
And for the time being devuan should IMHO be restricted to the latest version of audacity prior to the introduction of spyware elements. Which does not seem much of an issue to me as even old versions of audacity are functional and rock solid.
What do You think?
... works until the next upgrade to chimaera.
And then murphy will predict that You forget to update the release entry before doing the update.
These packages were all installed. I installed the midi apps and soundfonts. This did not remove the warning on missing soundfonts, but starting the mixer will not crash hydrogen anymore. For whatever reason. If i happen have a free moment, i'll check how to setup the midi stuff with hydrogen.
(But first of all i need to deal with the bad news that i will lose my home temporarily for about 1-2 months due to a larger water damage in the building of my appartment. )
EDIT: the mixer problem appears to be due to an incompatibility with the rests of the old installation (as far as i remember, it could have been 0.96 or even older). Which looks like a bug in hydrogen itself and not an issue with the packaging.
Hi folks,
i just installed hydrogen on two machines, one running beoulf, the other one running chimaera.
The chimaera installation has (important) rests of a previous installation in local .hydrogen, the one on beowulf was native.
Problem specific to the chimaera install:
crash as soon as the mixer is opened.
Problems to both installations mainly concern filesystem permissions regarding drumkits:
(E) Filesystem::check_permissions Audiophob is not writable
(E) Filesystem::file_copy unable to copy /usr/share/hydrogen/data/drumkits/Audiophob/drumkit.xml to /usr/share/hydrogen/data/drumkits/Audiophob/drumkit.xml.bak, /usr/share/hydrogen/data/drumkits/Audiophob/drumkit.xml.bak is not writable
(E) XMLDoc::write Unable to open /usr/share/hydrogen/data/drumkits/Audiophob/drumkit.xml for writing
... and so on for all other drumkits in /usr/share/hydrogen/data
To me it is asolutely correct that these paths are not writable to unprivileged users !!
Why in hell does hydrogen expect to be allowed to write into folders belonging to the installation ???
Both installations also moan regarding missing midi notes for these drumkits. Where do i find these? There seems no appropriate package available.
THX
Beate