Laura Cowen, Alan Pope, Dave Walker and Tony Whitmore present the ninth episode of the Ubuntu UK Podcast.

This fun packed episode brings us:

• Discussion:
  • Efficient PC hardware review
    • We review the Wraith PC from E fficient PC. Listen in to our next episode (number 10) for a chance to win this great computer!
  • Ubuntu mobile edition confusion
  • Lugradio Live discussion
  • Drobo disk storage robot and Drobo Share
• Competition:
  • The competition from Episode 8 is still open. It will end on the 12th July. (we have extended the competition due to the last episode being late).

Listen on http://podcast.ubuntu-uk.org or subscribe below:

High quality feeds

Low quality feeds

]]> http://daviey.mooo.com/blogroll/ubuntu-uk-podcast-e0109.html/feed http://daviey.mooo.com/blogroll/childishness-dennis-true.html http://daviey.mooo.com/blogroll/childishness-dennis-true.html#comments Sat, 31 May 2008 23:14:52 +0000 Daviey http://daviey.mooo.com/?p=35
// A simple java application that offers useful advice
// paste into hasNone.java
// to compile: javac hasNone.java
// to execute: java hasNone

public class hasNone
{
public static void main(String arg[])
{
childishness (”Dennis”, true);
}

private static void childishness (String idiot, boolean sillyArgument)
{
growup (idiot);
}

private static void growup (String child)
{
System.out.println(”Grow up ” + child + “!”);
}
}
// that is all.


In this edition, we have a lengthy interview with Mark Shuttleworth, where he talks about Gobuntu, reactions to a recent blog post of his, the ssl/libssl issue and it’s handling and much more.  We also have a competition for the much sought after Canonical store vouchers.

http://podcast.ubuntu-uk.org/

You can grab it in MP3/Ogg high & low quality or listen using the embedded flash player.  You can also subscribe to our RSS feed using your favorite client, to auto download new episodes.

We are always looking for extra content, if you have any suggestions, letters or idea for an interview (either phone or in person) - please email podcast@ubuntu-uk.org

Listen on http://podcast.ubuntu-uk.org or subscribe below:

High quality feeds

Low quality feeds

It would appear that the openssl algorithm used to generate the ssh or ssl keys for Ubuntu and Debian isn’t as random as required to be secure, and is therefore vulnerable to brute force attack.

As outlined: http://www.ubuntu.com/usn/usn-612-1

Thankfully Debian security team have written a pretty nifty perl script to help find if your keys are weak!

So ensure you have upgraded to the latest libssl0.9.8 package (as outlined in the USN) then:

To test the public key fingerprint on a server, do the following:

$ wget http://security.debian.org/project/extra/dowkd/dowkd.pl.gz
$ gunzip dowkd.pl.gz
$ chmod +x dowkd.pl
$ ./dowkd.pl file /etc/ssh/ssh_host_{dsa,rsa}_key.pub 2>/dev/null

This will tell you if the public key is weak.  If it is, you should move/remove the key pair, then generate a new pair with:

$ sudo dpkg-reconfigure -plow openssh-server

Authorized keys, that can login using key based authentication.

$ ./dowkd.pl file ~/.ssh/authorized_keys 2>/dev/null

This will return any weak keys that are authorized to login using key based authentication, these entries should be removed and a new one generated and added to the file.

To see if your own user key(s) is vulnerable:

$ ./dowkd.pl file ~/.ssh/id_{rsa,dsa}.pub 2>/dev/null

If it is, you should remove the key - and create a new one using “ssh-keygen”,  and redistribute the public key (including to Launchpad)

NOTE: you should test all user keys on the system.  Might be worth saving any weak key’s, incase you do get locked out of a system.

Please pass this on to anyone using SSH.

EDIT: As per https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-May/000706.html , upgrading the package will test the sshd key, amongst other things.

You can grab it in MP3/Ogg high & low quality or listen using the embedded flash player.  You can also subscribe to our RSS feed using your favorite client, to auto download new episodes.

We are always looking for extra content, if you have any suggestions, letters or idea for an interview (either phone or in person) - please email podcast@ubuntu-uk.org

Listen on http://podcast.ubuntu-uk.org or subscribe below:

High quality feeds

Low quality feeds

To be fair to Dreamhost, it did recover itself within a few minutes - but I was quite surprised at this load and thought it worthy of mention.

Screenshot of “top”:

One slight concern I do have, is support. New ‘converts’ to Linux tend to require some support and I suspect this is not being offered. Hopefully I am incorrect.

Surprisingly this has come in quietly, and was noticed by the ever shrewd “John Levin” on the Ubuntu-UK mailing list.

Links to the systems offered:

• http://linkpot.net/kidnap/
• http://linkpot.net/chastened/

Digg This

The team were delighted to be joined by members of Greater London Linux User Group, Datahop IT and some awesome people from a little company called Canonical. Some random bloke calling himself “Mark Shuttleworth” turned up; we allowed him to join our party as he had bought a round of drinks and some nibbles.

We are still at our party, and drinking some good real ales.

Ubuntu.com has an image in the top left hand corner, showing one of the characters wearing a ‘Dell’ T-Shirt.

As one ‘digger’ said, “I think its rather cool. Linux is not just for nerds any longer.”

On another note, according to This blog posting - Ubuntu/Dell laptops might be available from tomorrow.  Let’s hope!

I think it is important to re-install now and then, if only to bug/gotcha spot - so you can still help people with installation problems. (Also my laptop was running very hot, and lack of ACPI hooks left me unsure how to fix it).

I always try to dual boot Ubuntu, with the other partition being a safe install - it was edgy, so I thought I’d blast that partition away. This way I can keep my existing feisty install for production.

Here are the steps I followed, to do a Fresh install of feisty:
Step

1. Burn feisty ISO to cd
2. Install
3. Reboot and realise you installed the server edition.

Try again…

1. Download the correct ISO (Live version)
2. Burn the image
3. Install
4. X won’t start with my graphics card

Let’s try again..

1. Download the feisty alternate iso
2. Accidentally hit cancel and goto step1
3. Burn the cd
4. Realise you burnt the normal iso again by accident

Hit head against wall & find more blank cdr’s

1. Install
2. X still won’t start
3. Find ‘fglrx’ driver from apt’s cache in other partition
4. Wooo - now go to bed at silly o’clock.

I know I could have upgraded from the server to desktop edition, and reconfigure ‘xserver-xorg’ - but I didn’t want to. I wanted to ‘try’ and install from a ‘newbie’ perspective following the recommended steps. Ie, if Livecd fails - use alternate.

Now I know why not to do certain things when tired…

EDIT:
Bug well known - https://bugs.launchpad.net/xorg-server/+bug/89853