IRC log for #harmattan on 20110716

00:00.00DocScrutinizerhah
00:01.19javispedroooooooh
00:01.22javispedroI just had that idea today.
00:01.34javispedroieatlint: where?
00:01.51ieatlinthttps://projects.developer.nokia.com/battleships
00:02.59javispedroonly harmattan though?
00:03.02javispedrobaad.
00:03.05ieatlintapparently
00:03.13javispedroUNLESS there's another meegoconf soon.
00:03.20ieatlintyeah, i wonder why... if it uses qt, it should work fine anywhere
00:08.17DocScrutinizerok, my magnetometer is definitely broken at best
00:10.04DocScrutinizercould it be? Nokia forgot to use a magnetically neutered speaker component - and vib motor as well?
00:10.45SpeedEvilhave you found the raw x/y/z outputts?
00:11.37DocScrutinizersure, javispedro provided a minimalistic python script some days ago, and sensorgallery has QMagnetometer
00:12.53DocScrutinizerboth showing same results basically: a gigantic offset, and really shaky values that don't strictly correlate with orientation of device wrt to earth
00:13.20SpeedEvilSeveral things occur.
00:13.55SpeedEvilYou're not ear any large metal objects - or is the building you're in made from concrete?
00:13.57DocScrutinizerI guess with massive integration over time, and offset calibration, you might get some meaningful result
00:13.57SpeedEvilear
00:13.58SpeedEvilnear
00:14.14javispedroDocScrutinizer: QCompass seemingly tries to provide something useful
00:14.16SpeedEvilI'd try it in the garden, or somewhere outside
00:14.31javispedrohere it has around ~10º offset, but is consistent within itself
00:14.32DocScrutinizerthe building has rather few metal in it - it's 150 years old
00:14.59DocScrutinizerI'm talking about offset in the 3 axis raw values
00:15.13DocScrutinizerthe one does never go negative, for example
00:15.43javispedrobut that's how it should be aiui
00:16.06DocScrutinizerhow would one axis never go negative?
00:16.35javispedroah yes, you always do all orientations =)
00:16.41DocScrutinizersure
00:17.44javispedrodepending on portrait/landscape qcompass has a different offset
00:17.44DocScrutinizermeans there's a bias on the field that's fixed to the device and way huger than earth magnetic field
00:17.58javispedroso it's useless as an absolute value but works well enough as a relative
00:19.20DocScrutinizerI nevertheless wonder if the shaky part in the values maybe already is the effect I'm looking for to base my cablefinder on it, and it was way stronger than I might have thought
00:21.29DocScrutinizerI might want to dump the data to a file and run some statistics over it
00:21.37DocScrutinizeresp filters
00:21.54DocScrutinizeror better even FFT
00:22.17DocScrutinizerHAH
00:22.26DocScrutinizeror simply feed it to PA ;-P
00:24.16SpeedEvilI would try degaussing your device
00:24.32SpeedEvilAfter turning off ad removig the battery
00:24.33SpeedEvilOh
00:24.44SpeedEvilDo not degauss the device when it's on
00:24.53DocScrutinizeranyway if vib motor has a moving permanent magnet inside, the whole compass thing is fsckd
00:26.26DocScrutinizerand vib motor has an extremely strong magnet
00:26.34DocScrutinizerat least in FreeRunner
00:26.36SpeedEvilyes
00:27.17DocScrutinizeryou can *almost* pin the whole phone to a steel board at the wall
00:28.37javispedroI love how you need to frigging _pin_ the data rate slider to the _EXACT_ rate otherwise it goes back to 0Hz
00:28.56DocScrutinizerOK - speaker is it here
00:29.09javispedroin an animation that firstly looks cool but after the 37th makes you want threw phone.
00:29.36javispedroalso: set slider to 40Hz in landscape, switch to portrait: slider disappears.
00:29.40DocScrutinizerduh, I thought you simply can not set datarate
00:30.07DocScrutinizerwhich sensor?
00:30.17javispedromagnetometer
00:30.28javispedroonly 40Hz works.
00:30.38javispedro(and 0Hz... which is not really 0...)
00:30.51DocScrutinizeryou can store steel nails at device backside where speaker sits
00:30.52javispedroah, and 2Hz.
00:31.21DocScrutinizerfriggin magnetometer chip has NO datarate at all
00:32.15DocScrutinizeralso I just pushed the slider to a random position and it worked, unlike all other sensors I tested
00:32.47javispedroand the random position was 40? =)
00:33.00DocScrutinizernope, more like 17
00:33.02DocScrutinizeriirc
00:33.24javispedrobzzt! nope
00:33.29javispedro(goes back to 0)
00:33.39DocScrutinizerincredible, it was 40 ;-P
00:34.03javispedro0,1,2,10,20,40
00:34.05DocScrutinizerfirst shot a hit
00:34.26javispedroworst slider widget ever.
00:34.38javispedro(but it's fun)
00:34.40DocScrutinizeroh, it slides back to 40 now when I set random 54
00:35.09javispedrothis sensorsgallery is the most fun app in the phone now.
00:36.47javispedrointerestingly enough, swiping out the camera app reveals it is not using an overlay color key like videos app
00:37.03javispedroand yet from a performance PoV I would not have realized.
00:40.26DocScrutinizeryou might have thought 4th parameter in magnetometer is bool valid, but no, it's always 1 and sensor overload results in readout stalling
00:40.59DocScrutinizerso I wonder hat that 4th parameer might be
00:41.20javispedroit is actually bool valid
00:41.58javispedro"MROI"
00:43.17DocScrutinizerjust another bug. I wonder if there's *one* sensor in QtM that's not flawed or buggy
00:43.35javispedrodon't blame QtM, at least for the ones that provide raw data
00:45.25DocScrutinizerbtw if you wondered: the magnetometer seems to sit "upside left" - quite close to the earpiece transducer (unless kbd opened), and "other side" of  main camera
00:46.11javispedroseems that this is the same magnetometer as used on the playstation move
00:46.15javispedroso there's some RE around.
00:46.39DocScrutinizerwonders if that's a bad sign when he starts to consider portrait the normal orientation of the device
00:47.21DocScrutinizerdatasheet for magmeter is available. Its actually a funny chip design
00:48.18DocScrutinizerthe chip needs power-on cmd, does one readout and auto-powerdowns. You nevertheless can readout registers when powered down
00:48.39DocScrutinizerthat's why I said "there is no datarate of magmeter chip"
00:49.01DocScrutinizerthe arbitrary restriction in QMagnetometer is random BS
00:50.03DocScrutinizeractually I guess sysfs node read() blocks until chip completed a probe cycle
00:51.07DocScrutinizernot as stupid as it sounds, as the chip is really fast
00:51.21DocScrutinizersome 7ms iirc
00:51.37DocScrutinizeror was it 0.7?
00:54.28DocScrutinizertime for measurement: 7.30ms
01:52.41GAN900DocScrutinizer, hope we can fix that with some community-based improvements
01:52.43GAN900Portrait-primary is sucky.
01:53.47rm_youGAN900: still in UK
01:53.52rm_yourofl
01:53.56GAN900Yes
01:54.07rm_youhow do they fail that hard
01:54.13GAN900fiferboy's appears to have fallen into the ocean somewhere.
01:54.16rm_yourofl
01:54.17GAN900I don't know.
01:54.27rm_youthey MUST be either failing to scan things in right, or having system trouble
01:55.06javispedroGAN900: rm_you: it could be worse like that guy in f.m.c who says his order just dematerialized.
01:55.29rm_youT_T
01:56.06javispedrobelieve me when I say the device is not worth the wait!
01:56.22javispedrohides while laughing
01:56.39rm_youlol
02:00.14javispedrohits aegis again
02:00.24javispedroOH WHY I CANNOT INSTALL RPCBIND ON THIS THING
02:00.44javispedroSMASHES THING AGAINST THE WALL UNTIL ONLY AEGIS PURÉE REMAINS
02:04.07javispedrotypes "ME. WANTS. RPCBIND. !!!!" on terminal to see if omniscient aegis answers
02:11.41*** join/#harmattan antman8969 (6c06b0b0@gateway/web/freenode/ip.108.6.176.176)
02:19.57rm_youi thought you could just turn off aegis on the dev machines
03:49.26*** join/#harmattan infobot (~infobot@rikers.org)
03:49.26*** topic/#harmattan is a cozy little place for pure harmattan device discussions | MeeGo N9(|50) CE on its way, MOSLO still missing discuss in #meego-arm please | chanlogs: see ~logs , http://mg.pov.lt/harmattan-irclog/ | http://wiki.meego.com/Migrating_from_N900_to_N950
03:49.26*** mode/#harmattan [+v infobot] by ChanServ
03:55.15ieatlintheh, "Failed to connect to remote themedaemon. Retrying in one second." and then repeating indefinitely every second when trying to launch my app
03:55.52DocScrutinizerremote themedaemon? WTF!?
03:55.56ieatlintthe best part of working on new platforms is being one of the first people to get errors, so that google searches just give you the source repo as hits
03:56.01ieatlintyep.
03:56.05ieatlintno idea wtf that is
03:56.25ieatlintapparently part of libmeegotouch (this app is qml, qt and qt-mobility only)
03:56.54ieatlinti actually think it might be a permissions issue
03:57.48DocScrutinizerhey, never seen it this way - just the source repo, nice :-)
03:58.52ieatlinti ran into a qt-symbian error message one like that too
03:59.00ieatlintonly had hits in gitorious
03:59.33ieatlintyep, was a permissions issue
03:59.38ieatlinti was being lazy and trying to run it as root
04:00.30*** join/#harmattan antman8969 (6c06b0b0@gateway/web/freenode/ip.108.6.176.176)
04:01.26*** join/#harmattan antman8969 (6c06b0b0@gateway/web/freenode/ip.108.6.176.176)
04:34.25*** join/#harmattan DocScrutinizer (~halley@openmoko/engineers/joerg)
06:21.11*** join/#harmattan Scifig (~Scifig@c-24-4-32-47.hsd1.ca.comcast.net)
06:21.55*** join/#harmattan antman8969 (6c06b0b0@gateway/web/freenode/ip.108.6.176.176)
06:25.22dm8tbrgood moaning
06:36.58dm8tbrDocScrutinizer: btw: there is a lxr/mxr, http://mxr.meego.com/ it even features those beloved aegis things, but I think something is broken with the updating, so use with caution.
06:42.25*** join/#harmattan rcg (~rc@g226028138.adsl.alicedsl.de)
07:12.31*** join/#harmattan antman8969_ (6c06b0b0@gateway/web/freenode/ip.108.6.176.176)
07:14.59*** join/#harmattan antman8969 (6c06b0b0@gateway/web/freenode/ip.108.6.176.176)
07:32.17*** join/#harmattan Mece_ (~mece@GGYYYCMIII.gprs.sl-laajakaista.fi)
07:32.22Mece_o/
08:00.06*** join/#harmattan achipa (~attila@a91-155-185-5.elisa-laajakaista.fi)
08:00.06*** join/#harmattan achipa (~attila@Maemo/community/council/achipa)
08:01.36*** join/#harmattan SpeedEvil (~user@mauve.plus.com)
08:01.37*** join/#harmattan SpeedEvil (~user@tor/regular/SpeedEvil)
08:01.39*** join/#harmattan laasonen (~oilgame@a85-156-199-139.elisa-laajakaista.fi)
08:16.33lcukdm8tbr, timeless was on meego a couple of days ago
08:16.40lcukand him and lbt got it updating
08:26.08*** join/#harmattan Venemo (~Timur@fedora/Venemo)
08:28.47Venemomorning harmattanites
08:32.13*** join/#harmattan spenap (~spena@cs27063224.pp.htv.fi)
08:37.47*** join/#harmattan gri (~gri@agsb-4d05558c.pool.mediaWays.net)
08:50.26Venemoanyone wanna try my little app?
08:58.24Venemohttp://forum.meego.com/showpost.php?p=26266&postcount=11 -> says it all
08:58.52Venemoand here is how to keep aegis at bay: http://forum.meego.com/showpost.php?p=25848&postcount=4
09:10.11macmaNnice, got blueman connected to N950 BT DUN almost plugnplay
09:10.16macmaN(imagine airplug)
09:10.31macmaNlinuxing teh internetz from teh car!
09:13.16VenemomacmaN :)
09:14.22macmaNblueman also worked doing PAN to n900 bnep0 so i gotta give thumbs up to the guy
09:17.02mecehey how do I autorotate stuff in Harmattan?
09:18.11Venemomece, my app autorotates pretty automatically
09:20.25Venemowithout me needing to do anything about it
09:27.14dm8tbrlcuk: I know, I started the conversation
09:42.35meceVenemo, what kind of app is it?
09:45.58lcukdm8tbr, ++
09:48.42*** join/#harmattan mzanetti (~micha@2001:4dd0:fddf:0:21c:b3ff:fec3:e17a)
10:20.38macmaNhmm strange thing is n950 doesnt show internet connection when youre connected through bt dun
10:21.02macmaNin the status panel
10:23.37Venemomece, a memory game
10:24.31Venemohttp://sources.venemo.net/memory-game.zip
10:46.14mzanettiVenemo: nice game :)
10:46.30mzanettiVenemo: the toolbar seems to be quite redundant...
10:46.46mzanettiVenemo: there are about 3 different actions but like 10 ways to access them
10:47.55mzanettiVenemo: and IMO the animation when you score should be tuned down a bit. It seems like flickering
10:48.00*** join/#harmattan gri (~gri@agsb-4d05558c.pool.mediaWays.net)
10:52.09*** join/#harmattan NIN101 (~NIN101@p5DD2985F.dip0.t-ipconnect.de)
11:13.16rZrVenemo: European Union Public Licence, is this floss ?
11:13.59rZrVenemo: can i distribuate it in compiled form on my h rep ?
11:21.59mzanettirZr: see LICENCE file section 2.4
11:22.35rZrlooks good
11:25.59mzanettirZr: you also need to provide "a machine-readable copy of the Souce Code [...] easily and freely accessible [...]"
11:29.23mzanettirZr: where can I find the repo to see what else you a re hosting?
11:32.15Venemomzanetti, thank you
11:32.37VenemorZr, yes, you can.
11:32.48VenemorZr, yes it is OSI approved
11:35.26rZrwhat about fsf ? :)
11:35.49rZri am trying to rebuild it
11:45.06griVenemo: What app do you have to test?
11:45.51Venemogri, [12:24] <Venemo> http://sources.venemo.net/memory-game.zip
11:46.14VenemorZr, read the license, it's very short, and it's FOSS, yes
11:50.17Venemomzanetti, the only redundant things are what're in the menu... I'll change that :)
11:50.59mzanettiVenemo: it also feels strange to have close button in a harmattan app
11:51.19mzanettiVenemo: and I think other platforms add a close button to each app themselves
11:51.31Venemomzanetti, lol. I'm annoyed by the fact that there is no close button in apps
11:51.53Venemomzanetti, so I did the css hack trick and I have close buttons now in some MTF apps
11:52.34mzanettiVenemo: sure, its just my opinion. I for one like the swipe thing
11:52.58Venemomzanetti, me too, but I hate to be unable to close apps
11:54.23mzanettiVenemo: as far as I heard you should be able to close them by swiping from top to bottom soon
11:55.35griVenemo: My girlfriend loves memory games, I'll have to delete it before she notices it :P
11:56.43mzanettiVenemo: the row and column settings don't work here but I guess that is work in progress.
11:58.41griAlso in other applications the "more" button shows the menu and hides the toolbar, here the toolbar stays on bottom
12:03.13*** part/#harmattan mece (~mece@dsl-tkubrasgw1-fe3fdc00-44.dhcp.inet.fi)
12:14.18Venemogri, hehehe
12:14.27Venemomzanetti, I heard, but currently I can't
12:14.42Venemomzanetti, they don't work if you are already in game, that is correct
12:14.54Venemomzanetti, stop the game, then set them
12:15.47VenemoI nead to tweak that in my QML
12:19.12*** join/#harmattan trx (~ns-team@93.87.57.221)
12:19.12*** join/#harmattan Termana (~Termana@70.32.34.100)
12:19.12*** join/#harmattan lcuk (lcuk@Maemo/community/contributor/lcuk)
12:52.17*** join/#harmattan trx (~ns-team@212.200.199.199)
13:10.19Venemomgedmin, ping
13:14.35dm8tbrhttps://projects.developer.nokia.com/home/project/explore#tab=recent - would be kind of interesting if there would be a harmattan category or is that what they mean by "MeeGo"
13:15.12dm8tbrWTH, 2 bible readers on the first page of the MeeGo listing...
13:16.51Stskeepsyou'd be surprised at how big that market is
13:17.05Stskeepspeople generally don't want to drag around bibles, easier on the mobile
13:17.05Stskeeps:P
13:19.13Venemoisn't the bible obsolete yet?
13:19.33DocScrutinizerQ-ran readers also very popular
13:20.05TermanaVenemo, ha ha, going in for the kill there aren't you tiger? :p
13:20.15VenemoTermana :P
13:20.22VenemoI would have thought that after a few hundred years of doing that, people would be smarter than killing each other for some stuff in a book... but let's not go OT :P
13:20.25DocScrutinizeris slightly puzzled on that common habit
13:21.35Venemosoo... how do I remap the hw keyboard
13:21.58VenemoI wanna reassing some keys that currently don't do anything when pressed with Fn
13:22.06DocScrutinizeresp denying the fact that books are *always* written by humans is something that bewilders me
13:24.14DocScrutinizerand some of the oldest books have undergone several severe edits and censoring, also by humans with not always honest intentions. This is a provable fact
13:24.28VenemoDocScrutinizer, yeah
13:24.42VenemoDocScrutinizer, so, do you happen to know how to remap N950's hw kbd?
13:25.13DocScrutinizersame way you do that for N900? wild guess
13:26.37Venemonope
13:27.02DocScrutinizerwhy? aegis?
13:27.12Venemomgedmin told me something about it at a tile when I wasn't able to fully focus on IRC... the thing that I remember is one needs to tweak some XML file
13:27.22DocScrutinizeror have they massively changed the underlying gear
13:27.38Venemodunno about the details
13:27.53VenemoI tried the same stuff that worked on N900, that did not work definitely
13:28.06DocScrutinizerwell there are IRC logs all over the place
13:28.36Venemohe didn't tell me the details
13:29.51DocScrutinizerlinux and keyboard - a long confusing and annoying story basically. Each time I'm finished with reading the last manpage/source to find out about some deatils, I already lost the complete picture and have to start all over
13:30.33Venemothis is true for almost every aspect of Linux
13:30.34DocScrutinizerI guess input methods have more layers than OSI
13:32.34DocScrutinizersee [2011-07-16 14:32:05] <DocScrutinizer> http://www.tldp.org/LDP/abs/html/escapingsection.html 5.3 is epic
13:32.59Venemohmm
13:33.56DocScrutinizerread -s -N2 -t 0.001; read -s -N1 -t 0.001  WOWHAA*cough*HA
13:35.18*** join/#harmattan NIN101 (~NIN101@p5DD2985F.dip0.t-ipconnect.de)
13:35.41Venemolcuk, have you tried my humble little app yet?
13:35.52*** join/#harmattan javispedro (~javier@Maemo/community/contributor/javispedro)
13:36.56lcukVenemo, i have not.  when i next ssh into n9 i will do
13:37.08Venemookay, no need to hurry
13:37.09javispedrovoice navigation in drive!
13:37.11javispedrois happy
13:37.15Venemojavispedro, srsly?
13:37.15lcukis pondering a complex thingamibob on other machine
13:37.27javispedroyarlly!
13:37.32Venemothat sounds good :)
13:37.45VenemoIf only we'd have landscape support
13:38.00javispedrowe have landscape support -- in drive
13:38.19javispedroand ovimaps fwiw
13:38.29VenemoI'm talking about homescreens and contacts, music, settings, etc. apps
13:38.45DocScrutinizermeh, my bash doesn't know read -N1
13:38.49Venemomaps, messages, mail, etc. do support landscape
13:39.14javispedrois already totally disregarding the hwkb, too cumbersome..
13:39.25lcuki think xv windows are being sent through compositor and using yuv->rgb on the powervr
13:39.33Venemojavispedro, srsly?
13:39.34dm8tbrcontacts has fun problems if you edit a contact and then edit an entry with the kbd slid out
13:39.45lcuksad panda because it means liqbase runs only as fast as on the n810!
13:39.53Venemojavispedro, it is a very nice keyboard... typing with vkb is a lot slower for me
13:39.58javispedrolcuk: there might be something about this, because videos are slower than on n900
13:40.27javispedroVenemo: not saying vkb is faster. it's just that hwkb requires two hands to slide
13:40.31lcukjavispedro, it also encounters bug 13084 when I use 854*480 video mode
13:40.34MeeGoBotBug https://bugs.meego.com/show_bug.cgi?id=13084 maj, Medium, ---, carsten, ASSI, [n900] Horizontal tearing with xvimagesink
13:40.37Venemojavispedro, indeed.
13:40.47Venemojavispedro, maybe I used my N900 too much? :P
13:41.50javispedrohum, tearing.
13:42.07lcukjavispedro, gatepost alignment error
13:42.09javispedrolcuk: do you have a liqbase build for harmattan around?
13:42.34lcukon the n900-ce, it reads 801 pixels per row
13:42.40javispedrohaha
13:42.49lcukjavispedro, only thusfar used the n900 builds
13:42.51javispedrothen that's quite worse than tearing
13:42.54lcukhappily they work
13:43.04javispedron900ce builds?
13:43.08lcukbut encounter problems
13:43.10lcukmaemo
13:43.11javispedrooh.
13:43.14lcukie this tearing
13:43.23javispedroso you do not have hardfp vs softfp problems?
13:43.42Venemojavispedro, if he doesn't use floats, why would he?
13:43.45lcuki did not try to use deb package on my n900-ce
13:43.51lcuki built ondevice directly
13:43.57javispedroah, ok :)
13:44.04lcukso would not know about hard/soft fp
13:44.17javispedroVenemo: dynamic loader is too stupid to know about whether a function has fp calls
13:44.23javispedros/function/symbol
13:44.30Venemomhm
13:44.32javispedrothat's all it sees, symbol and symbol names.
13:46.07javispedroso it can either refuse to bind ALL symbols from different FP ABI files, or it can just blindly accept them all
13:46.15javispedromy guess is that it will do the former :)
13:46.31VenemoI have no idea
13:46.46DocScrutinizeryeah, puzzling issue
13:46.52Venemohowever, I managed to get my game into a bugged state...
13:46.56DocScrutinizerwindowesque
13:48.32DocScrutinizerso, FWIW - N950 charges reasonably "OKish" from non-D+-_short USB wallwarts
13:49.12javispedroWHAT THE HEL
13:49.20DocScrutinizercharging battery with 80some mA (when idle and screen blanked), to keep it at ~90%
13:49.39javispedro# portmap -h
13:49.39javispedrousage: portmap [-dfv] [-t dir] [-i address]
13:49.54javispedrorpcbind _works_ today, FOR NO REASON AT ALL!
13:49.55DocScrutinizer~messybox
13:49.55infobotmessy... err busybox is meant for lean scripting. Regarding all the missing options and immanent limitations (see su) it's not really the interactive shell of choice. A lot of people hate busybox because a lot of system integrators don't understand the difference between busybox and a decent user interactive shell plus unix utils
13:50.01javispedroI DID NOTHING!
13:50.07DocScrutinizerHAHA
13:50.18javispedroso it is true there's an omniscient Aegis god.
13:50.51DocScrutinizerjavispedro: today the day-of-month is a 2^x
13:51.02javispedromakes a note to sacrificate some lambs so that God allows me to run more programs.
13:51.26GAN900Still stuck in the UK
13:51.35DocScrutinizerWTF GAN900
13:51.46javispedroGAN900: probably will miss Monday then :(
13:52.25DocScrutinizerthere are no volcanoes hindering airplane starts in EU right ATM
13:53.45DocScrutinizerGAN900: curse homeland security - I bet the device has to undergo in-depth inspection for potentially hazardous physical and logical content
13:54.08GAN900Doubt it.
13:54.14DocScrutinizerafter all it's addressed at *you* ;-P
13:54.37GAN900DHL incompetence seems the likelier.
13:55.11DocScrutinizerDHL incompetence is notorious too, yes
13:55.29javispedroremoves man of faith hat, puts on his researcher hat and tries to understand what the *** happened with aegis.
13:55.30VenemoDocScrutinizer, doesn't Aegis count as hazardous logical content?
13:55.58Venemojavispedro, didn't you set your Aegis to relaxed mode or whatever?
13:56.11javispedroI was trying to install rpcbind
13:56.14javispedrothe NFS portmapper
13:56.17javispedros/NFS/RPC
13:56.27javispedrothis must run as root because it opens ports < 1000
13:57.29javispedroso of course aegis refuses it like there's no tomorrow.
13:57.34javispedrowell, yesterday. today it ran it.
13:57.44javispedroalbeit I'm noticing it still does not allow it to open listen sockets.
13:58.23Mekhmm, I managed to get my n950 in a reboot-loop...
13:58.29javispedronot hard.
13:58.58*** join/#harmattan aapo (~quassel@cs27097135.pp.htv.fi)
13:59.00VenemoxD
13:59.40javispedrooh, interesting.
13:59.50javispedroaegis removed portmap user and group from /etc/passwd
14:00.23Venemoaegis is pure evil
14:00.28Venemowhat's the whole point of it?
14:00.35javispedrobut this might be the reason it works
14:02.29aapoHello, I have N950, but I really do not know what I have signed about NDA. I saw one speculation thread on TMO, but is there any 'official' simple English (or even simple Finnish) list what I can publicly say about it?
14:03.00lcuk++ Nokia Design, N950 can stand up in portrait mode with the keyboard open
14:03.13Venemolcuk, lol.
14:03.17SpeedEvilaapo: you have the NDA - you just don't understand it, or you don't have the NDA.
14:03.23javispedrolcuk: :D
14:03.27lcuk-- for location of the USB port to allow making a proper charging dock
14:03.30Venemoaapo, you can retrieve it from Nokia site
14:03.47Venemolcuk, doesn't it annoy you to great length when a portrait-only app opens while the keyboard is slid out?
14:03.57lcukno
14:04.31Venemoit disturbs the flow of my work when it does that
14:04.33aapoSpeedEvil: I clicked same default long text than any others too, but I do not understand it enough to feel comfortable
14:04.40SpeedEvilah
14:05.00Venemoaapo, go to the site where you ordered the N950 and you will find it there
14:05.26aapoVenemo: yes, but I think I do not understand it
14:06.06DocScrutinizeraapo: not even Nokia understands it, evidently
14:06.33Venemoaapo, which part?
14:06.47Venemoaapo, there are two important points in it.
14:07.05Venemoaapo, -> you play €500 if you lose/destroy/etc it
14:07.13Venemos/play/pay
14:07.19SpeedEvil= get phone insurance
14:07.39javispedroalso, look at this IRC log, if there's something we could not say we've probably already said it =)
14:07.45aapoa) if I get something running on it, can I take video and image and post it on my blog?
14:07.59Venemoaapo, -> you are forbidden to pubilicize any deficiencies of the device and its software which come from its pre-release nature
14:08.09Venemoaapo, you can publicize good points, you can take pics, etc.
14:08.17Venemoaapo, but you can NOT make blog post about how crap it is
14:08.41aapovenemo, ok. Can I report any challenges I encounter?
14:09.04SpeedEvilIn order for that clause to apply, wouldn't the device need to be planned to be released?
14:09.14aapocan I speak about bugs? e.g. in nano, which is not meant for end-users?
14:09.17Venemoaapo, I think so...
14:09.22VenemoSpeedEvil, the software will be.
14:09.46Venemoaapo, not sure. if I were you, I would be very light on mentioning bugs
14:10.02Termanajavispedro, and that allows anyone else who agreed to the agreement to talk about it, under the clauses that allow public information to be discussed
14:10.07Termana7. The foregoing obligations shall not apply to any Information which
14:10.08Termana(a) is publicly available at the time of disclosure or later becomes publicly available through no fault of the Receiving Party;
14:10.19aapovenemo: ok.
14:10.38Venemoindeed
14:10.50aapowhat is place to report bugs (if they are meant to be hidden of public)?
14:11.03Termanaaapo, you don't report bugs.
14:11.05SpeedEvilIn general, they are reportedly not wanting reports.
14:11.11SpeedEvilAs the software is a _very_ old version.
14:11.19Venemoit is >5 weeks old
14:11.27Venemoso they probably fixed your bug by now
14:11.27aapotermana, how they get fixed then?
14:11.29javispedrothough, http://www.developer.nokia.com/bugs/enter_bug.cgi
14:11.34javispedroat least for SDK bugs
14:11.35javispedro.
14:12.24javispedroalso, device bugs: http://www.developer.nokia.com/bugs/buglist.cgi?product=MeeGo%201.2%20Harmattan&component=Device&resolution=--- =)
14:13.32Termanaaapo, there are several ways to answer that question, but, the same way as if we weren't being given devices - the team that's working on it will need to discover it.
14:13.55TermanaIf they haven't already and fixed it
14:14.13DocScrutinizerVenemo: the fork happened quite some time before those 5 weeks you mentioned
14:14.41VenemoDocScrutinizer, oh, right. you already mentioned once or twice
14:14.51Venemomewants new sw image
14:16.04javispedrothinks that generally, one should not worry much about the NDA unless one works for engadget, and that in fact, bugs might be filled.
14:16.55aapoanother topic: what is state of 'extras-devel for harmattan'? I understand concept of own PPA, but how about one single place for (needed) community made libraries?
14:17.32DocScrutinizerthinks Nokia has no manpower to assign to triaging bugs filed against a months-old fork of an OS that seen ~3000 bugfixes since that fork
14:17.57javispedroDocScrutinizer: I think you're overstimating the amount of bugfixing work that can be done in a month.
14:18.01aapoI can see two packages on: http://repo.pub.meego.com/repositories/MeeGo/1.2/Harmattan/Apps-testing/armel/
14:18.15*** join/#harmattan piggz (~piggz@host-78-145-113-162.as13285.net)
14:18.19javispedroDocScrutinizer: my current opinion is that whatever image is the most recent will not be that different from ours.
14:18.27DocScrutinizerjavispedro: no estimations in my rationale
14:18.35javispedroexcept of course it will not have all the "preparations" that have been done for ours
14:18.43javispedro(search for all those "-dadd" packages)
14:18.54SpeedEvilUnless they're doing more UI stuff
14:18.59SpeedEvilthat they don't want to leak to the proles.
14:19.10Venemojavispedro, "-dadd"?
14:19.12SpeedEvilWhich seems likely.
14:19.17piggzhi ppl....who has synced with google over mfe?  im not getting my contacts in
14:19.40javispedroso, to sum it up: I say file a bug if you want to see it changed before PR1.1 .
14:19.48javispedroand even if you do, you're probably late already.
14:20.07DocScrutinizerright
14:20.33*** join/#harmattan cpscotti (~cpscotti@87.115.238.133)
14:20.47javispedroVenemo: in dpkg -l, lots of dadd packages, which as I found while removing the developer edition branding means sth like "developer edition addin"
14:21.01Venemoaaah
14:21.06DocScrutinizerI think there is a way more recent firmware image for N9 and for nokia internals, and we just may hope we eventually will participate
14:21.29VenemoDocScrutinizer, maybe if we bug some guys from Nokia on this channel, they may leak it to us
14:21.58javispedroDocScrutinizer: recent, sure. different, on the other hand...
14:22.49DocScrutinizerjavispedro: konttori clearly said "your version lacks the ~3000 bugfixes we have in the recent image since fork"
14:23.34DocScrutinizerjavispedro: check #maemo chanlogs
14:23.39javispedroDocScrutinizer: http://mg.pov.lt/maemo-irclog/%23maemo.2011-07-13.log.html#t2011-07-13T19:14:46
14:26.17piggzim not keen on just how tich the usb cable is...is the port more secure than the n900?
14:26.48DocScrutinizeryeah, I linked to the original statement of konttori there - it puts my statement about fork happening much earlier a bit on question, but it says "3000 bugs fixed, so yours is far from reality"
14:28.28DocScrutinizerpiggz: yes, the port is a thru-hole component and won't come out unless you tear the PCB in two pieces
14:29.02DocScrutinizerat least that's what I think to have seen, with magnifying glass
14:29.05piggzDocScrutinizer: thank goodness :D ...... ive always been very careful with the n900, knowing about the problem
14:29.36piggzthe cable that came with the n900 is a slighly looser fit in the n950, compared to the one with the n950
14:30.09DocScrutinizeryes, the CA-179 is crap
14:30.30Venemohm, is it a problem if I've used N900's cable with N950 so far?
14:30.33DocScrutinizerI prefer the CA-101
14:31.06DocScrutinizerVenemo: the problem is you didn't notice how crappy CA-179 is
14:31.23javispedro's n950 hostname : "harmy"
14:31.36VenemoDocScrutinizer, that is right, I did not notice it is crappy
14:31.36DocScrutinizeryours, or stock?
14:31.48javispedroDocScrutinizer: yours, stock is the usual Nokia-etc
14:31.57DocScrutinizer:-)
14:32.18DocScrutinizerjavispedro: how's kernel building coming along?
14:32.43javispedrowell ,maybe I should retry what I did yesterday today considering Aegis seems to be in a better mood.
14:32.54DocScrutinizerhehehe
14:32.59DocScrutinizermaybe
14:34.35*** join/#harmattan smoku (~spectrum@xkh0g2.infr.xiaoka.com)
14:34.41VenemoDocScrutinizer, why is it crappy?
14:35.45javispedrooooh
14:35.49javispedroaegis is today VERY workable
14:36.00javispedroit just granted me CAP::net_bind_service
14:38.38DocScrutinizerjavispedro: how did yu bribe it?
14:39.05javispedroDocScrutinizer:
14:39.09javispedrohttp://pastebin.com/3KtzcnEf
14:41.09aapohave somebody already bricked+flashed N950? Does it work? Is this right tool: https://www.developer.nokia.com/info/sw.nokia.com/id/db230178-aa63-4c73-ba7f-20930da13cad/Nokia_N950_OneClickFlashers.html
14:42.09*** join/#harmattan mzanetti (~micha@2001:4dd0:fddf:0:21c:b3ff:fec3:e17a)
14:50.37javispedroand... portmapper working!
14:51.59javispedroI wonder if there's a list around specyfing which credentials a "developer" package is able to request.
14:55.25DocScrutinizerjavispedro: where do you implant that magic spell?
14:55.39DocScrutinizeraapo: yes, and yes
14:55.39javispedro.deb package
14:56.02DocScrutinizeraapo: and works as advertised
14:56.21aapoDocScrutinizer: thanks, good to know
14:56.41DocScrutinizerjavispedro: good question
14:57.34javispedroDocScrutinizer: the infamous Nokia master public signatures are in /var/lib/aegis/domains
14:58.18SpeedEvilSomeone should make a distributed public key cracking app. :)
14:58.30javispedrooh
14:58.36javispedroyou can edit this file in develsh mode
15:00.09DocScrutinizerjavispedro: aiui there's absolutely no use in editing it, as it probably needs a signature from same private key as the root cert in ROM
15:00.38javispedrohum
15:00.44javispedroit's not in aegis hashed files list.
15:01.07javispedroeither way I do not know how to sign packages at all for the time being.
15:01.37javispedrohashed files list is in /var/lib/aegis/refhashlist
15:02.08javispedroaiui, this get loaded into the kernel during very early boot
15:02.46DocScrutinizerjavispedro: a mount is very enlightening
15:03.03DocScrutinizerrhe lines more to the bottom ;-)
15:03.44javispedrouh
15:03.46DocScrutinizeraegisfs on /etc/ssl/certs
15:03.47javispedromy passwords are on there.
15:04.24Venemobut, srsly? why Aegis?
15:04.28Venemowhy isn't SELinux enough?
15:04.53DocScrutinizerVenemo: that's a question "beyond the scope of this channel"
15:04.57javispedrofound it
15:05.05javispedrofound the list of credentials granted to devs
15:05.14javispedroit's on /var/lib/aegis/restok/restok.conf
15:05.24javispedroaegis-developer-unknown-source-policy
15:05.42VenemoDocScrutinizer, humm
15:06.33javispedrofull list:
15:06.33javispedrohttp://pastebin.com/KPX88Sgh
15:06.50javispedroso that's all you can grant to a non-nokia package
15:06.58javispedroeverything else, SORRY!.
15:07.18javispedrospecially note no setuid/setgid, so forget about daemons that drop privileges that way.
15:09.48fluxjavispedro, hmm, so sshd works only because it's from nokia?
15:11.03fluxjavispedro, what does it mean to have ie. UID::user there?
15:11.05DocScrutinizerI just had a very comfortingly thought: Nokia *always* messed sth up with configuration/packaging/maintenance of their maemo system. So why should they get *everything* "right" with aegis? And it's an immanent property of such a chain-of-trust architecture that one single point of failure compromises the whole security. IOW find a single ill-configured manifest and you "rooted aegis" - once you fully understand how to mess with it in
15:11.07DocScrutinizerany way you like
15:11.21javispedroyes, sshd is "com.nokia.maemo.system-services"
15:11.32javispedroand thus has chown, fsetid, setuid, setgid granted
15:12.10Stskeepsdoes any derived apps have the same? :P
15:12.32javispedroDocScrutinizer: there's plenty of stuff about R&D signatures, which I'm starting to guess it's the way to enable "open mode
15:12.33javispedro"
15:12.38fluxfrom security point of view I guess it doesn't matter a lot. you can just drop all priviledges? or will you still be able to modify files as root?
15:13.28DocScrutinizereven better: aiui there's no revoke lists or anything like that
15:13.48javispedroStskeeps: I do not know how inheriting credentials works, but develsh has all of the credentials and I couldn't spawn from it a portmap that did setgid(daemon);
15:13.54Stskeeps:nod:
15:15.00Stskeepsis it just me or is the voices of Drive horribly distorted?
15:15.04DocScrutinizerhonestly this friggin aegis thing either has to vanish, or somebody @ nokia damn publish a howto for it
15:15.33javispedroDocScrutinizer: heh, I'm sure someone @ nokia is now saying "you should have payed MORE attention to aegis talks!" ;)
15:15.53javispedro"but I though you weren't that serious!"
15:16.01javispedro"YES WE WERE!"
15:16.07DocScrutinizerI opted for developing on linux, NOT on aegis
15:16.10Stskeepsdon't worry, we won't have aegis in meego.com CE
15:16.10Stskeeps:P
15:16.30Venemois Aegis a Nokia development?
15:16.35Stskeepswe'll just be using the TPM chip to randomly take pictures of you and your loved ones in compromised situations
15:16.37DocScrutinizerbasically yes
15:16.55Stskeepsto finance the development team ;)
15:17.53javispedrothat team will soon be psychopathic if you look at geek's "compromised" situations photos ;)
15:18.04DocScrutinizerVenemo: the aegis flavour seems a Nokia variant of the larger age old notorious security framework/TC concept
15:19.02javispedroflux: (UID::user) dunno so far, maybe accessing files owned by user or similar.
15:19.18javispedrowhat I know for sure is that CAP::* maps to linux capabilities 1:1
15:19.19fluxso, does aegis help? I'm guessing for example the web browser or mail agents won't have sufficiently reduced access permissions to remove the ability to do some damage..
15:19.40DocScrutinizer""sorry team, no money here, no matter how unpleasant the photos you got. But I can share some of that pizza I stole, do you like?""
15:19.45VenemoDocScrutinizer, but what is the point of it?
15:19.56DocScrutinizer~aegis
15:19.56infobotfrom memory, aegis is http://www.developer.nokia.com/Community/Wiki/Harmattan:Developer_Library/Developing_for_Harmattan/Harmattan_security/Security_guide , or "The purpose of this framework is: ... to make sure that the platform meets the requirements set by third party software that requires a safe execution environment.", or http://en.wikipedia.org/wiki/Trusted_Computing#Criticism
15:20.08piggzahh, atleast, that was a monumantal delay...i thought id proken the rss feeds app as it wasnt starting, but 30 seconds later it fired up
15:20.20Venemothx
15:20.40javispedronotes that you _COULD_ implement an android-like permission system -- "would you like to allow RandomHackerApplication to read your address book?" -- on top of aegis
15:21.04javispedrobut so far, I see no UI for that, and instead if (comes_from_nokia) allow_everything()
15:21.12DocScrutinizersure, you *could*
15:21.14javispedromaybe Ovi will have some of that.
15:22.52DocScrutinizerhonestly I'm NOT willing to become an aegis expert. Gimme a 2 pages mini-howto, with all the magic incantations listed there, and I may reconsider sending back this aegis coffing with the tag "USELESS CRAP"
15:23.29DocScrutinizers/coffing/coffin/
15:24.07piggzim surprised how much looks familar when compared to n900ce..it kinda is good to know some things are shared
15:24.32javispedrofamiliar wasn't a Gtk+ distro?
15:24.36javispedroah
15:24.40javispedrosorry, misparsed.
15:24.43DocScrutinizeralternatively give me a true developer environment where aegis is *completely* eradicated
15:24.44piggzheh
15:25.16Venemocouldn't one just remove it from the kernel and be done with it?
15:25.19lcuki don't mind aegis
15:25.31lcukonce things are installed it prevents random single file updates
15:25.48Venemolcuk, it prevents DocScrutinizer from developing usb hostmode for us
15:25.49javispedroI _want_ aegis, as long as I'm in control.
15:25.57Venemojavispedro ++
15:26.16DocScrutinizerlcuk: you obviously missed last 30min as well as previous chats about how aegis is spoiling every devel's day
15:26.18lcukDocScrutinizer, find out how to update the sha hash
15:26.35DocScrutinizerlcuk: NO I WONT!
15:26.47Stskeepsyawns
15:26.54DocScrutinizerI am not in for learning/hacking FSCKNG aegis!
15:26.55lcuki enjoyed learning about it
15:27.06lcukand made a deb package in fremantle scratchbox to cure issue
15:27.14DocScrutinizerthat's your cup of tea
15:27.27Venemolcuk, maybe you could help DocScrutinizer with it then?
15:27.46lcukpackage up your file and see if aegis will let it update?
15:27.48javispedroDocScrutinizer does not even want to build a deb ;)
15:28.16DocScrutinizerjavispedro tried to build a *stock* unchanged kernel yesterday, flashed it ->instant FAIL, panic
15:28.38javispedroindeed.
15:28.52DocScrutinizerso WHAT THE F***!?
15:28.58Venemothere is a 110k+ LoC diff between Maemo 6 kernel and stock kernel with the same version
15:29.01fluxdocscrutinizer, so, it booted, but failed to mount root?
15:29.09javispedroit was stock harmattan kernel
15:29.12lcukwhat is this "kernel" thing anyway, do I need it, can't you just uninstall it and run harmattan?  :P
15:29.17Stskeepsjavispedro: deb or manual flashing?
15:29.24DocScrutinizerlcuk: FU
15:29.32fluxdocscrutinizer, I mean, if it starts, isn't that like that the game is won already?
15:29.32javispedroStskeeps: -k -l -b, but built from the src package.
15:29.46Stskeepsjavispedro: what message did you get?
15:29.52Stskeepsand were you in developer mode?
15:30.12javispedro(dev mode) yes, and no message at all other than rapidly blinking led then shutdown.
15:30.23javispedrothis was stock config, so not even console FB.
15:30.56*** join/#harmattan rlinfati (~rlinfati@151.81.150.188)
15:30.57javispedroDocScrutinizer pointed that I did not rebuild the modules, I did not thought that the vermagic had changed,
15:31.09DocScrutinizerlcuk: sorry, but I'm losing my countenance
15:31.14javispedrobut seemingly due to aegis kernel has some more "strict" hasing (CONFIG_MODULE_ELF_HASH?")
15:31.45Stskeepsjavispedro: i'll ask around, fairly sure that's supposed to work
15:32.12Stskeepsjavispedro: well, at least booting your own kernel and rootfs
15:32.22javispedrothe key here is "your own rootfs"
15:32.28javispedroI was trying to boot Harmattan.
15:32.32*** join/#harmattan djszapi (~lpapp@84-231-105-241.elisa-mobile.fi)
15:32.36Stskeepsright, but even that
15:32.45javispedro(because I bet N950ce works ;) )
15:33.00javispedroand that if you installed aegis there, accli -I would say "Device mode: OPEN" :)
15:33.01djszapiHi! Does anybody know where I could download the libncursesw5-dev package if it is possible ? http://harmattan-dev.nokia.com/pool/harmattan-beta/ -> I did not find it here.
15:33.06Venemoany news about FMTX/FMRX in N950?
15:33.08lcukDocScrutinizer, it was understood that aegis would be on the device
15:33.09Stskeepsi'd (personally) enable consolefb just to see what's going on
15:33.14lcukand the n950-ce build is coming
15:33.18lcukwhich has no such aegis
15:33.21lcukand is meego pure
15:33.46Venemolcuk, it seems that DocScrutinizer doesn't care about meego
15:33.51djszapiI do not think that is good if something has no security...
15:34.42lcukdjszapi, I agree, i found out about the install permissions thing quite early on
15:34.45djszapiThere was an aegis-like smack kernel implementation for meego, but they dropped it.
15:34.56lcukit is a nice thing  actually knowing that files are only coming from packages
15:35.12djszapiI think the Harmattan security is the best ever :)
15:35.21djszapiThat was also the feedback from Android guys.
15:35.38javispedroI'll say that when I see the "Application wants to open Address Book, allow?"
15:35.48javispedrountil that, this is more DRM-like than security-like.
15:35.52dm8tbrI think it has merits as long as you are able to control it if you really own the device
15:36.19dm8tbre.g. install an own signing certificate that you can use for development etc
15:36.25rlinfatithe flasher can reboot the n950 if it's in pc_suite (ovi) mode :S
15:36.42djszapijavispedro: DRM has been completely dropped...
15:37.04djszapiquite a while ago.
15:37.07fluxrlinfati, isn't that like a feature?
15:37.08Stskeepsheh, nice feature
15:37.09dm8tbrdrm in portable devices is dead
15:37.54rlinfatiflux, not for me.... i run the all-in-one flasher to extract the firmware.... and it's reboot my phone and flash-it !!
15:38.27fluxrlinfati, so how is flasher supposed to work, if you don't enter the flash mode?
15:38.52Venemohm
15:39.16fluxrlinfati, hm, how is the firmware extracted? from the device?
15:39.25djszapidm8tbr: I agree with you about that the usability is also very important. However what is on the meego front, selinux, that is far away from usability pov.
15:39.55fluxsomeone should do a writeup on how selinux and aegis differ from each other :)
15:40.04dm8tbrdjszapi: selinux is a pain to configure I've heard, dunno if that would work well enough for embedded
15:40.05djszapiflux: there is
15:40.05rlinfatirun Linux_OCF_22-6_EMMC_RM680-OEM1-916.bin and see /tmp/selfextracted....
15:40.15fluxdjszapi, cool! you know the url?
15:40.26djszapidm8btr: yeah it has been very hard and Linus accepted a new kernel approach :)
15:40.36DocScrutinizerdjszapi: so WTF do *devels* need a "protected" devise??????
15:40.52djszapiis this question serious ?
15:40.59DocScrutinizerYES
15:41.27djszapiwell, I would not like to use my data and having the part of other cheats that happened quite soonish with windows systems.
15:41.34djszapi* to lose my data
15:41.38DocScrutinizerthere's a devel-mode and a "normal" mode - you'd thing devel mode should just completely KILL aegis
15:41.42piggzbecuase you need to devel/test on a framework that is similar to the consumer device too
15:41.43djszapieven if I develop an application.
15:41.56DocScrutinizerthink*
15:42.03DocScrutinizeromg
15:42.04djszapiI would never use devel mode that...
15:42.04rlinfatireading /usr/include/cellular-qt/CellularQt/networkcell.h
15:42.09djszapi* then
15:42.25djszapihowever it might kill most of it, though.
15:42.30DocScrutinizerpiggz: seen my comment one line above about that mode switching?
15:42.32djszapiWhat is wrong about the open mode ?
15:42.35VenemoSELinux _can_ be turned off...
15:42.44piggzDocScrutinizer: yeah, just after i wrote it ;)
15:42.45djszapithat is the best feature of it :)
15:42.53Venemolol
15:42.53javispedrodjszapi: there's nothing wrong, but _how to enter open mode???_
15:43.01djszapithat is the default...
15:43.03djszapion the N950 devices.
15:43.08VenemoOMG
15:43.08javispedronope
15:43.20Venemoif this is open mode, what is the closed mode?
15:43.21javispedro# accli -I
15:43.21javispedroCurrent mode: normal
15:43.29javispedrothis is closed mode.
15:43.36Venemomhm
15:43.42djszapijavispedro: did you also check the settings ?
15:43.45Venemoisn't there some kernel parameter or something?
15:44.08javispedrothe settings is what seems to be called "developer mode", which grants a reduced set of permissions to the "" source (aka developer source)
15:44.15javispedrobut this set of credentials does not even include setgid.
15:44.34javispedroand obviously not a way to load kernel modules.
15:44.50javispedroie I cannot remove the "seal" bit from aegis, and put it in non-enforcing mode
15:44.53djszapiyou can grant that kind of permission via a manifest file.
15:44.57javispedronope
15:45.09djszapiwhy not ? (I could)
15:45.09javispedrobecause it is "" source, and CAP::setgid is not granted to SRC:.
15:45.31djszapimmm
15:45.38*** join/#harmattan NIN101 (~NIN101@p5DD2985F.dip0.t-ipconnect.de)
15:46.08javispedroPackage portmap: denied 'CAP::setgid' -- origin '' does not allow it
15:46.13djszapijavispedro: is aegis-exec available ? (I do not have a device by hand)
15:46.19javispedroyes
15:46.29lcukone question, if I install a fart app and it gets restricted, does it become trapped wind?
15:46.33djszapiyou can grant that way permission to the processes.
15:46.45javispedrolast time I tried that we ended up bricking DocScrutinizer's device
15:46.54DocScrutinizershakes head, deeply depressed about the indiscriminate hype of aegis/SF that some people display here, esp those who obviously haven't really looked into how it works wnd what it means for developers
15:47.11fluxI think it was explained here that aegis-exec doesn't actually grant any priviledges, it rather drops them?
15:47.21lcukDocScrutinizer, mjority of developers can install/update/remove packages
15:47.27javispedrodjszapi: this is what happened when we tried to grant setgid to bash: http://share.ovi.com/media/joerg900.public/joerg900.10170
15:47.41djszapiis checking :)
15:47.54Venemolcuk, Aegis prevents the SDK from implementing the "skip packaging step" feature (best feature for Maemo5)
15:48.03Venemolcuk, and this makes debugging my app a very clumsy process
15:48.06djszapiyeah, you can remove the malfunction entry after reboot, but this is odd.
15:48.16lcukVenemo, i understand
15:48.32javispedroDocScrutinizer: btw, how did you install that bash package? from Nokia repo iirc?
15:48.34djszapiVenemo: not sure what you are doing, but I did not feel anything special while debugging my app.
15:48.43DocScrutinizerjavispedro: yup
15:49.04Venemodjszapi, do you know what happens when you click on the Run button in Qt Creator?
15:49.42javispedroeither way, the fact that we already have two persons that are surprised to see that Aegis is "that restrictive" to us makes me thing there's something that has not been de/activated on our images :S
15:49.51javispedro*think ;P
15:51.11javispedro(and should have)
15:52.01djszapiVenemo: nope, I do not use QtCreator, but someone was complaining about that it worked without QtCreator but not with that. Some dbus related application.
15:52.09lcukgah
15:52.30lcukthe calendar whole screen kinetics is nudged by swipe
15:52.49Venemodjszapi, well, basically Qt Creator builds a .deb package every time I click on Run, which means that I basically lose a minute of my life every time I run my app.
15:52.50djszapijavispedro: well, meego was always much worse on N900
15:53.03Venemodjszapi, people claim it's because Aegis prevents just copying over the binary and executing it
15:53.13lcukVenemo, no you gain a minute to think of the next step
15:53.15djszapiDocScrutnizier: I think the worse hype is that it is sold as a complete meego system
15:53.20DocScrutinizerthere is *definitely* no use whatsoever in protecting developers from their own mess. Please stop even thinking about that - rather give us a developer- aka open-mode that's *really* _completely_ open. If anybody feels threatened by this, he's a) no developer, and b) not understanding that he can implement additional restrictions to his liking
15:53.23Venemolcuk, I know the steps.
15:53.31lcukVenemo, sure
15:53.34Venemolcuk, I usually do before I begin coding :)
15:53.39lcuki say the same thing and at some parts of development
15:53.43djszapiVenemo: that is actually true, you cannot run your own binary, that is why this SDK is existing....
15:53.56lcukthat delay between code/test/modify cycle is important
15:54.01djszapithere is a serious hash calculation (integrity protection) in the background.
15:54.03rlinfatiany tips to use maps ? i can not login (service unavailable )
15:54.03lcukand even extra seconds is bad
15:54.07lcukvs whole minutes
15:54.13lcukreally does understand ;)
15:54.18Venemodjszapi, building a package takes a long time and it ruins the debugging experience
15:54.19fluxwhat the approach prevents as well if just having the .py on the device and developing it there
15:54.29fluxcompletely eliminating any delay induced by even copying the file
15:54.44Venemodjszapi, WP7 is an equally (if not more) closed platform, and still, VS can make my app run on the device instantly
15:54.44djszapiVenemo: well you should use cmake
15:54.46djszapiif it is that big issue for you.
15:55.04Venemodjszapi, while Qt Creator can't.
15:55.05fluxof course, any programs that can be run through an interpreter can avoid the signature checking..
15:55.13djszapiVenemo: complain to QtCreator
15:55.13javispedroflux: I use a NFS mount to mount from device my host computer, so it's like if both computers are the same ;)
15:55.19Venemodjszapi, I opened a bug. :)
15:55.30djszapiVenemo: you can also run an own script which updates the binary hash
15:55.39mzanettiVenemo: I just hit a floating point exception in your app when clicking the play button in your app.
15:55.44djszapiif it is /really/ that big problem for you.
15:55.45DocScrutinizerlcuk: who are you to teach us about important cycles in development?
15:55.49lcukdjszapi, Venemo is highly active hacker and has wide experience developing and packaging cross platform
15:55.51djszapiOther than that I guess the developer mode should enable you to update binary and run it without packaging
15:55.58lcukDocScrutinizer, ?
15:56.01djszapiVenemo: the problem is that you do not have proper source origin
15:56.05lcuki was talking with Venemo
15:56.15DocScrutinizer<lcuk> Venemo, no you gain a minute to think of the next step
15:56.20javispedroaegis-developer-mode --relaxed-exec does enable you to run unsigned binaries
15:56.23javispedrobut only as user
15:56.25djszapithis way, you should use the developer mode, but do not forget the image is slightly old on that device. Not sure how much it concern on the aegis implementation
15:56.28javispedronot root, for some reason (not totally understood yet)
15:56.34DocScrutinizer<lcuk> that delay between code/test/modify cycle is important
15:56.51Venemowell the point is
15:57.01djszapijavispedro: root would not make sense
15:57.11Venemowhen I make a single line modification in my QML, I want to know INSTANTLY the result
15:57.16Venemothe required compile time is 0
15:57.21lcukDocScrutinizer, it was conversation and agreement with him, wassup with that?
15:57.21djszapiroot is not that "approach" like with the general POSIX capability approach
15:57.24Venemoso the packaging shit is an overhead
15:57.26Venemoand that's it.
15:57.45lcukgood for first install :P
15:57.51lcukand if things change in your package
15:58.01djszapiVenemo: no it is not
15:58.22djszapiVenemo: I would not like to have own installation and pollute my system actually. But you have been told how to do it anyway.
16:00.59Venemodjszapi, so, maybe ask MS how they manage to launch my app instantly and then find a way on the N950 to do the same
16:01.21Venemowhen I debug it, I don't care for the packaging. if I want to package it, I package it.
16:02.31aapojavispedro: is SDL on your PPA working on N950? I  just tested sdl-hello, but it is seg faulting for start. Is there something I should use for resolution and flags?
16:02.39DocScrutinizerdjszapi: who cares what you don't want? if you're not capable of coping with it and implement / follow your own restrictions defined to your liking, you suggest rather Nokia should implement those restrictions for all of us? Very polite, thanks for partonizing me.
16:02.52javispedroaapo: I cannot really completely build it until nokia-binaries is imported into COBS :(
16:03.03javispedroaapo: for now, get it from git and built it on your sbox
16:03.47DocScrutinizerdjszapi: we're still debating DEVELOPER mode here
16:03.47aapojavispedro: do you mean upstream sdl git or maemo specific?
16:04.06javispedroaapo: any will work unless you want multitouch or GLES
16:04.16javispedrothen you can install mine on device
16:04.50aapojavispedro: ok, very this moment I just want see something on the screen, later GLES+multitouch
16:05.08javispedro:)
16:05.18javispedroI am looking for some cool demo with GLES2 and multitouch
16:05.23javispedrolike a water ripple effect shader or sth
16:05.26javispedroif you find one tell me :)
16:11.52javispedrocrosses fingers and runs aegis-exec -a CAP::setgid portmap -v -f -d
16:12.33javispedroINSTABRICK!!!!!!!!!!!!!!!!!!!!!!
16:12.39javispedrowonderful.
16:12.41djszapiDocScrutinizer: what do you mean ? Cannot you turn into "proper" developer mode ? What is your exact issue ?
16:13.09javispedroDocScrutinizer: confirming, it was me who bricked your device, as running that has caused exactly the same big warning icon.
16:13.28javispedroharmy is dead
16:14.00DocScrutinizerHeh congrats, welcome to the club :-D
16:14.02djszapiVenemo: ask MS about Harmattan ? Sounds weird. Did you try what javispedro said ?
16:15.03javispedronow, how to unbrick this ? =)
16:15.52javispedrooh, harmy is alive!
16:16.16javispedroDocScrutinizer: triple reboot fixed it :P
16:16.22DocScrutinizerduh
16:16.54javispedrostill in closed mode
16:16.57DocScrutinizerhow cute and smart and cool this aegis is! really great
16:16.59javispedroseems everything is the same
16:17.40GAN900I think Amazon--ordered Friday--may beat out the N950.
16:17.54javispedroGAN900: hey, it did for me.
16:18.04DocScrutinizergoes bathroom, puking a bit, then for some nicer times in beergarden. Feels sick with harmattan
16:18.42DocScrutinizero/
16:18.47javispedrocya DocScrutinizer
16:18.56djszapijavispedro: I think you can remove the related entry, or did I not boot after that "brick" ?
16:19.19aapowhat is wrong with my root, it can't kill user's processes??
16:20.18javispedrodjszapi: for some reason, after running the command you get the big warning icon that was shown on that photo. then I rebooted it via powerbutton, and got big warning icon. Power button did nothing, so I had to hold it for a while until it shutted down
16:20.20DocScrutinizeraapo: haha, aegis
16:20.26djszapiaapo: if it does not have the proper credential, it cannot
16:20.40javispedrodjszapi: turning it back on this third time didn't show the big warning icon and proceeded to normal boot.
16:21.20aapoAnnouncement: initial version of Tuxpaint running on N950. Not usable yet, screen is flickering, but I can draw with it =)
16:21.31aapobtw: do we have official channel for announcements?
16:21.47djszapilet us say, you as a user would not like anybody make anything with your data for instance. Root could even do that,  but this way it cannot.
16:21.47djszapijavispedro: yes, 8+ secs is the hard reset.
16:22.35aapoI think I too hate aegis
16:23.56djszapiDocScrutinizer: why cannot you try to understand the security model ? A user device is not really like a Unix workstation...
16:23.56djszapiaapo: why do you hate aegis ?
16:24.36javispedrothose old unix bears then to like, you know, being able to kill everything they want when they become root ;)
16:24.41javispedros/then/tend/
16:25.00aapodjszapi: a) I have used aegis-developer-mode --relaxed-exec, but still it sometimes whine, and I have rebooted phone to get it stopped
16:25.17DocScrutinizerdjszapi: on back of my N950 is a *large* printing "DEVELOPER DEVICE"
16:25.29Venemodjszapi, what I said, VS can deploy my app on a WP7 device instantly. so why can't Qt Creator do the same?
16:25.51Venemoanyway, I don't want to argue on this any further, it's pointless
16:26.01djszapijavispedro: I would not really like to have a root uesr doing anything with my user data....
16:26.01djszapijust if I grant permissions for that...
16:26.01djszapiaapo: please tell me your issue, I try to help if I can
16:26.07GAN900DocScrutinizer, polish it off yet?
16:26.12DocScrutinizerI didn't apply for the aegis-fieldtest program
16:26.24djszapijavispedro: it is not really a unix workstation, network where you have thousand users and you can do everything you want with those users
16:26.59DocScrutinizerdjszapi: again, who cares what you'd like root to do or not to do - this is DEVELOPER mode and DEVELOPER device
16:27.10djszapiVenemo: complain to QtCreator
16:27.40djszapi?
16:27.40djszapiVenemo: you have been told more times how to do it from console. If that works, really complain to QtCreator.
16:27.40djszapiDocScrutinizer: Look. I complained about the image version weeks ago, it is really an old image for starter.
16:27.46djszapiDocScrutinizer: Second, I could run a binary, thus I do not understand the issue yet properly
16:28.25aapodjszapi: not much more to say. I done needed tricks to get unsigned binaries working, then I left phone for couple of hour and when I continue hacking, it sayd "Error: Permission denied ", Rebooted and it worked again
16:29.01djszapiaapo: this sounds really weird...any scenario to reproduce it ?
16:29.01javispedroaapo: lol, that's exactly what happened to me with portmap
16:29.14javispedroyesterday it did not even want to exec() it
16:29.26javispedrothis morning I found that it started runnign it atleast..
16:29.29SpeedEvildjszapi: The issue is that the role, policies, and operation of aegis is unclear.
16:29.34javispedrohad even thanked the gods for that
16:29.42SpeedEvildjszapi: Especially the future state for the n9 release to the public.
16:29.53djszapiSpeedEvil: I did not check the public documentation yet, but isn't there something written how the security model looks like ?
16:29.55aapodjszapi: I think I do not want reproduce it
16:30.05javispedroI at least can't reproduce it
16:30.08SpeedEvilWhat will it prevent doing at all - for example - can we ever put meego on it?
16:30.09djszapiI am pretty sure there is since Elena hold presentations at the meego conferences and also at the local meetup
16:30.19piggzhas anyone ocr'd/typed the code from the front of the box?
16:30.19djszapiaapo: not much to discuss, maybe pebkac then
16:30.22javispedronow I purge portmap, reinstall, whatever, and it always exec() it
16:31.01djszapiSpeedEvil: no, you cannot flash your own image with flasher in my understanding
16:31.17djszapibut this is something I am not sure about yet.
16:31.26djszapiI tried to update the image with some OEM1 internal image, but it did not work
16:31.47djszapiI had to switch back to N9, not sure about that bit. It might be that they provide a more advanced flasher or I do not know that yet
16:31.58SpeedEvilOr especially - given this is likely to get less support than the n900 post-release - how can we work around 'features' in the release image.
16:32.24Venemodjszapi, as I said, I already opened a bug :)
16:32.39djszapiVenemo: please do not blame aegis, if it is a creator bug.
16:33.35djszapiSpeedEvil: to be quite honest. MeeGo never worked for me on N900, not even this ce edition. I know people do not like hearing it, but this is the fact.
16:34.14Venemoworked for me last time I tried. it was incomplete, but hey.
16:34.25SpeedEvildjszapi: Meego-ce has had perhaps three orders of magnitudes fewer man-hours put into it.
16:35.02djszapiVenemo: we have few games and it was not enjoyable at any time, not even few weeks ago I last tried. I really spent serious time with meego testing on N900.
16:35.08SpeedEvilAnd I'm not talking about the state of meego at n9 releast time even.
16:35.08javispedroI want to try n950ce and see if the 1GiB RAM helps
16:35.24SpeedEvilI'm talking about it a year or so after that.
16:36.08djszapiSpeedEvil: How knows what XXX thinks in one year in this market ? :D :D
16:36.41djszapi* who
16:36.49SpeedEvildjszapi: I know that if I scrape up the cash for a n9, which is debatable - I am unlikely to change it in under a couple of years.
16:37.16SpeedEvildjszapi: I also know that meego will at least somewhat continue development, even if dropped by all corporate sponsors.
16:37.19DocScrutinizerdjszapi: the point is this is a DEVELOPER DEVICE, with two modes selectable from settings: developer mode ON|OFF. We don't need nor want nor see the use of aegis intercepting *anything* in DEVELOPER mode. We want to develop, not learn aegis - we'll cope with aegis and manifests and packaging .deb and whatnot, when we finished developing our app. We go switching developer mode=off in settings then, and do whatever needed to make aegis
16:37.20DocScrutinizerhappy. We really do NOT want to do this *first*, prior to even starting development of our app. Bottom line: the developer mode is way too restrictive, it ideally should just switch off the whole aegis thing
16:37.29lcukVenemo, did you say earlier you are using wp7 also? which device are you testing on?
16:38.19*** join/#harmattan lawl0r (~lawl0r@2001:470:25:1ee:21c:c0ff:fe19:5277)
16:38.23Venemolcuk, I have no device currently, just the emulator
16:38.42lawl0rjust recieved my n950 :D
16:38.44lawl0rso awesome
16:38.45lcukyou said earlier that your code just runs almost instantly on device
16:38.50djszapiDocScrutinizer: do not replicate yourself, I understood your purpose. What is not working ?
16:38.53lcuk(comparison to n950 qt creator slow way)
16:38.56Venemolcuk, because it works with devices too.
16:39.07djszapiSpeedEvil: I agree with you, but this is seriously impossible to plan with one device for years
16:39.22lawl0rbut compared to the n900 the n950 is shit
16:39.25Venemolcuk, I did try WM6.5 dev with running my app on a device, and that was fast too
16:39.33SpeedEvildjszapi: Umm - what do you mean it's impossible to plan?
16:39.38Venemolcuk, maybe I'll borrow a device for testing
16:39.38lawl0rthere is only one cool thing about the n950: aegis
16:39.41DocScrutinizerdjszapi: *sigh* see backscroll of this very channel, you'll find a dozen things that didn't work same way they would without aegis
16:39.59djszapiSpeedEvil: Well, I do not think I can buy any good phone, that will be supported so long in the current state
16:40.01lawl0rnokia finally realized how to implement a proper security system
16:40.06lawl0rwas about damn time
16:40.10DocScrutinizerdjszapi: basically NOTHING works same way as on a system without aegis
16:40.13SpeedEvildjszapi: The key aspect - 'is it possible to install a new OS or drastically modify the OS on an end user phone' is answerable.
16:40.16djszapiDocScrutinizer: first, it was a QtCreator issue
16:40.27SpeedEvildjszapi: Expecting support from nokia - of course not.
16:40.28javispedrobtw, you also can't place files in upstart dir (/etc/init) unless they're digsig'd
16:40.36djszapiSecond, aegis blaming without proper steps how to reproduce, thoes things I saw
16:40.39djszapinone of them is serious for consideration
16:40.46DocScrutinizerdjszapi: killing user process when you're root is NOT a QtCreator issue
16:40.49Venemodjszapi, DocScrutinizer is not talking about my little "issue" here...
16:41.10SpeedEvildjszapi: I would be astonished  if there was more than one bugfix release of software - post release.
16:41.24djszapiDocScrutinizer: You are really not going toward the purpose. If you do not need aegis, turn it off. Doesn't that work or what is your issue ?
16:41.38djszapiWhy do you try to use aegis if you do not wanna instead of turning off telling me if it does not work ?
16:41.44SpeedEvilYou cannot turn it off.
16:41.47DocScrutinizerI wouldn't even know how to turn it off
16:42.03DocScrutinizerdjszapi: that's the whole fuss here
16:42.14DocScrutinizerPLEASE let us turn off aegis!
16:42.16djszapiSpeedEvil: I cannot seriously answer the question about the Nokia policy... I do not read hype either. Ask some manager :)
16:43.17SpeedEvilSuggesting 'turn it off' - when it doesn't seem possible to turn it off isn't especially helpful.
16:43.35SpeedEvilAnd I understand that policy questions are difficult.
16:43.49lcukcan it be apt-get remove'd ?
16:44.10DocScrutinizerdjszapi: I (or we) understood that developer mode was supposed to turn off aegis - obviously it does NOT
16:44.28lcukwhen was it documented that developer mode would do that?
16:45.09DocScrutinizerlcuk: when did you learn to post this type of trolling questions?
16:45.10lcukand do we actually know what effect it does have?
16:45.18lcukDocScrutinizer, i ain't trolling
16:45.24lcukjust trying to understand it
16:46.57*** join/#harmattan djszapi (~lpapp@84-231-105-241.elisa-mobile.fi)
16:47.15DocScrutinizerlcuk: ok then: no it's never been stated that developer mode would really do this, and no we don't know exactly what parts of the system will act up in a true "open mode" where aegis is down or neutered. As there's no howto about the whole friggin thing
16:47.21djszapilcuk: not sure you got all my messages. My mobile internet connection is really bad :(
16:47.37djszapiDocScrutinizer: You are really confusing the open mode with the developer mode
16:47.53DocScrutinizerlcuk: nevertheless e.g frals suggested there'S a way to switch off aegis that will not work on and will brick our "CE devices"
16:49.30DocScrutinizerdjszapi: maybe I'm confusing it, but that's due to missing docs about the whole topic. All i'm interested in is "how do I turn the system into a mode where things work like 'usual' 99.5% of the cases?"
16:49.35djszapiDoes anybody know how to get this package from the public Harmattan repository or from somewhere else ? libncursesw5-dev
16:49.40djszapiI do not see it here, at least: http://harmattan-dev.nokia.com/pool/harmattan-beta/
16:50.19djszapiDocScrutinizer: If you do not get answer, I try to come back to you on Monday. I cannot do more. If turning off aegis does not work, then it does not work...
16:50.48DocScrutinizerdjszapi: fair enough, thanks
16:51.01javispedrodjszapi: I believe it's the same src package as ascii ncurses
16:51.09javispedroaka "ncurses"
16:51.14djszapino, it is not
16:51.46javispedrowas 80% sure :P
16:51.57javispedrochecks
16:52.02djszapilibncurses5-dev and libncursesw5-dev are different packages
16:52.12javispedroyes, but build from the same source
16:52.15javispedroit's just a define
16:52.16Venemodjszapi, since it's a -dev package, could you not try to look in the sdk repo?
16:52.17djszapias far as ncurses and ncursesw are not the same.
16:52.35djszapiVenemo: I tried here: http://harmattan-dev.nokia.com/pool/harmattan-beta/
16:52.49VenemoI see
16:52.57djszapijavispedro: I do not really feel nice building from source, if it is not possible. Hence why I am asking first :p
16:53.07djszapi* if it is possible
16:54.25javispedrodjszapi: http://harmattan-dev.nokia.com/pool/harmattan-beta/free/n/ncurses/libncursesw5-dev_5.7+20081213-6-maemo1+0m6_armel.deb
16:54.42djszapicool thanks :)
16:54.55djszapiDocScrutinizer: have you checked with flasher the gadget is in developer mode ?
16:55.05djszapialso the developer flags ?
16:55.06javispedrohooooooow? :)
16:55.17javispedroit's the old plain rd mode?
16:55.18djszapijavispedro: ?
16:55.22javispedrohoow to check that
16:55.36djszapiuse flasher
16:56.00javispedroiirc, it was _not_ in R&D mode
16:56.10javispedrois R&D mode == aegis open mode?
16:56.16DocScrutinizerdjszapi: just note that I'm not exactly asking for "turning off aegis", I'm just interested in aegis allowing random stuff, like e.g. killing user processes when you're root, editing arbitrary files when you're root, generally doing things each devel is used to do since decades. And I understand that some parts of the system might cease to work when aegis is set to this operation mode, whatever it is called "aegis off" or "aegis has a
16:56.18DocScrutinizerpolicy to allow all in docS-mode" or no matter how it'S achieved
16:56.42djszapiDocScrutinizer: no, turning off as a root is against the aegis design
16:56.43DocScrutinizerdjszapi: no, I didn't know about that
16:57.15SpeedEvil'turning off when magic switch is pulled' then
16:57.25djszapijavispedro: no it is not as I said above...
16:57.29SpeedEvilI don't think anyone especially cares if it's as root.
16:58.05djszapiDocScrutinizer: you cannot edit files of course, that would result no integrity protection. What you want is to turn off aegis if this design is unacceptable for you.
16:58.26djszapior you canusethe aforementioned cli command for double checking.
16:58.59javispedrodjszapi: note that even the nokia wiki pages confuse open and developer modes, but I was talking about r&d mode here (which aiui is another "mode" not aegis related in any way)
16:59.17djszapiDocScrutinizer: However you can grant permissions from the manifest file. Again, if this granulraity design is unacceptable for you, please do not use security on your phone.
16:59.37djszapiSpeedEvil: yes I do.
17:00.05DocScrutinizerI'd happily follow your advice, just have no clue HOW to "not use security on my phone"
17:00.17djszapijavispedro: yes, that mode is related to the integrity protection imo.
17:00.40djszapiDocScrutinizer: write manifest files if you want to spread the credentials as you want.
17:00.44SpeedEvildjszapiI mean - I don't think anyone especially has the opinion that root should be able to do anything - and would mind if aegis was turn-offable with a magic incantation.
17:00.47javispedroDocScrutinizer: "please open nearest trash can, carefully drop phone into trash can device..." ;)
17:01.02djszapior there is also a package which auto-generates things for you.
17:01.42javispedroand that package is? =)
17:02.20djszapiaegis-manifest-dev
17:02.26javispedroaaaaaaaah.
17:02.28javispedrobut but but.
17:02.33djszapinot sure it is enough for you.
17:02.37djszapifor fine granularity though
17:02.37javispedronope :(
17:02.54djszapibut for basic things, it is fine to forget the manifest writing things
17:02.56javispedroe.g. it is not smart enough to map setgid() -> CAP::ssetgid
17:03.03*** join/#harmattan mzanetti (~micha@2001:4dd0:fddf:0:21c:b3ff:fec3:e17a)
17:03.05javispedrobut we could fix that
17:03.23djszapiit is very smart and overthought
17:03.28Venemois Aegis a kernel module btw? or how does it work?
17:03.38javispedroeither way that is still part of the packaging process which Doc et all want to avoid.
17:03.39DocScrutinizerVenemo: partially, yes
17:03.43djszapiVenemo: I do not know what information is public, what not...
17:03.52javispedrothe entire aegis is open source.
17:03.54javispedrowell, or most of it.
17:03.54djszapiVenemo: please read the documentation, that is the safest for me :)
17:04.17djszapiVenemo: but basically *in general* security frameworks, like smack, selinux, aegis, etc have kernel parts for sure
17:04.21Venemohow about 'modprobe -r aegis' then?
17:04.25djszapino, it is not open source....
17:04.31djszapinot even "most of it".
17:04.49javispedrodjszapi: https://meego.gitorious.org/meego-platform-security ?
17:04.52djszapibtw, can you download the kernel ?
17:04.58djszapiI did not actually know
17:04.59Venemodoesn't that violate the kernel's GPL license?
17:05.09djszapibut that was my impression the kernel is internal and not open
17:05.10djszapiI might be wrong with this.
17:05.22javispedroyeah, kernel is open, they're not _THAT_ evil ;)
17:05.22SpeedEvilCan't (legally) be.
17:05.32djszapijavispedro: then again *sigh* it is a qtcreator bug
17:05.37djszapiyou /can/ run binaries....
17:05.44javispedroindeed.
17:05.50javispedrobut we have several problems here.
17:06.02djszapijavispedro: the kernel is open really ?
17:06.04javispedroprobably 5 or 6 "situations that were possible pre-aegis and now aren't" have been mentione
17:06.14djszapiI thought they will not publish it, just binary, mmm
17:06.16javispedrodjszapi: all of it that I can see.
17:06.27Venemodjszapi, that is against the kernel's license
17:06.28SpeedEvilYou're required under the GPL licence to release kernel source. In general this is dealt with by having an open-source kernel part that talks through a public API to a closed-source userspace part.
17:06.52djszapiVenemo: is also the android kernel open ?
17:06.55SpeedEvilyes
17:07.00SpeedEvilIn theory.
17:07.08javispedroAndroid manufactures are way more sloppy.
17:07.17djszapiSpeedEvil: there is no closed userspace part....
17:07.18javispedroand being based in $REMOTE_COUNTRY hardly sue-able.
17:07.20Venemodjszapi, yes.
17:07.20SpeedEvilSome vendors are better than others at keeping kernel sources up-to-date
17:07.23djszapiif the kernel is open, then 100 % open
17:07.45djszapiat least the aegis part of the platform.
17:08.17djszapiSpeedEvil: that is almost impossible.
17:08.32javispedroif kernel had been closed you'd been hearing from me. Probably with a fitchfork ;)
17:08.47SpeedEvildjszapi: What is almost impossible?
17:08.49djszapijavispedro: ok, I am not a lawyers, I trust you :)
17:08.57djszapiSpeedEvil: to be in sync with upstream.
17:09.11djszapiotherwise you could push your changes to upstream anyway...
17:09.13djszapiif Linus and others accept it for sure :)
17:09.21SpeedEvildjszapi: I mean keeping the released sources in sync with the shipped devices.
17:09.41SpeedEvildjszapi: Not getting 'vanilla' kernel to work - that's impossible in many cases.
17:10.10*** join/#harmattan NIN101 (~NIN101@p5DD2985F.dip0.t-ipconnect.de)
17:10.56djszapiSpeedEvil: we merged the upstream security fixes back as much as it was possible.
17:11.17*** part/#harmattan smoku (~spectrum@xkh0g2.infr.xiaoka.com)
17:11.37SpeedEvildjszapi: yes - that's not what I mean - some vendors release source only months after - or not at all - they update the device kernel.
17:11.58djszapi20:06 < javispedro> probably 5 or 6 "situations that were possible pre-aegis and now aren't" have been mentione -> There is no 5-6 things here. 1) Turn off aegis 2) Not turn off and learn
17:12.34javispedrountil anyone knows how to _temporarily_ disable aegis, that is not a solution.
17:13.10javispedroand as for 2), well, someone needs to put on a wiki page to explain all of the "alternatives"
17:13.23djszapijavispedro: I am not speaking about implementation details. If something is missing or buggy, provide me steps how to reproduce. I got zero. I am more like speaking from the design pov.
17:13.44javispedronoone is saying they are bugs
17:13.54javispedro(well, save for maybe that weird stuff that required a reboot)
17:13.58djszapiDo not forget most of the people left Nokia, there is not much manpower over there right now though for fixes.
17:14.01javispedrobut still nuisances.
17:14.57javispedroand imagine now for a moment the amount of _users and developers_ that are going to leave Nokia if they suddenly come to the realitzation that you cannot have real root on the device, or that you cannot package a daemon that requires setgid without a com.nokia.maemo signature.
17:15.15javispedrohave to say that includes me.
17:15.36SpeedEvilIndeed - it'd make me really hesitant to plop down cash for n9
17:15.45SpeedEvilI question how many users that is though.
17:15.49djszapijavispedro: you do not still understand what two ways exist
17:15.58djszapiif you /want/ "real" root, you want to turn aegis off
17:15.59Jaffadjszapi: I think javispedro is very much aware.
17:16.44Venemodjszapi, so as I understand it, we basically need to learn how to write this "manifest file" or whatever thing to allow our packages to do certain things?
17:17.06djszapiback to the meego and CE thingy. I would really not recommend that way, if aegis causes issues for you guys. As for me, it seems Intel is on the way to ship selinux which is *MUCH* worse than aegis
17:17.11djszapiMUCH MUCH MUCH WORSE
17:17.45djszapiVenemo: nope
17:18.01djszapiaegis manifest is file based, not package-wise. Even more grnaularity
17:18.18Venemodjszapi, sure, but I need to package up that manifest, don't I?
17:18.24djszapiok put it mildly: with meego it will be way much more awkward and nightmare according to the principles.
17:18.38VenemoI'm currently talking about Harmattan
17:18.59VenemoDocScrutinizer, could you please elaborate on why the CA-179 is crap?
17:19.04djszapiI am just explaining why meego ce does not make sense for me. If they will really ship selinux, I am out of meego completely.
17:19.27djszapiVenemo: manifest is a simple xml format
17:19.59Venemodjszapi, could you please point me to a doc about it?
17:20.07Venemodjszapi, also, what do you have against SELinux?
17:20.13javispedromanifest only works if you want to request one of the following credentials: http://pastebin.com/KPX88Sgh
17:20.17javispedrootherwise, you're SOL.
17:20.27djszapiVenemo: as I said more times, nope. As said I have never read public documentation, I do not know what they published. It is not my call
17:20.57djszapijavispedro: not really, no
17:21.37javispedroso, how?
17:21.45javispedroI've been able to request any of the credentials from that list.
17:21.54javispedrothat includes net_bind_service so I can at least open ports < 1000
17:22.03javispedrobut not setgid, or setuid, or ..
17:22.10djszapijavispedro: my impression was that you can pretty much provide and request custom credentials as well
17:22.33djszapihowever it might be turned on that level, it is just for the platform internally, this is something I am not sure about. Someone should write a test manifest for that
17:22.41Jaffadjszapi: Remember that what Aegis as a framework allows and the Harmattan implementation of Aegis aren't the same
17:22.56djszapiJaffa: who said it is the same ?
17:23.03djszapiwhy would anybody say that ?
17:23.11Jaffajavispedro: Which makes sense - if you were given setuid/setgid rights, you could bypass it
17:23.16*** join/#harmattan mzanetti (~micha@2001:4dd0:fddf:0:21c:b3ff:fec3:e17a)
17:23.25DocScrutinizerdjszapi: >>if you /want/ "real" root, you want to turn aegis off<< Please give clear instructions on how to do exactly that
17:23.26Jaffadjszapi: "custom credentials" aren't relevant to the concrete realisation, right?
17:23.30djszapijavispedro: aegis-exec could grant me those, setuid, setgid
17:24.02djszapiDocScrutinizer: Have you checked the developer mode and flags ?
17:24.20djszapiJaffa: they are.
17:24.35djszapiThat is the whole idea about...
17:24.42djszapion the top of the general POSIX capabilities.
17:24.46DocScrutinizerno, I don't want to check anything and guess anything. I need a clear word "do this: x, then y"
17:25.04djszapiDocScrutinizer: I cannot help then, sorry (right now)
17:25.17javispedrodjszapi: remember that aegis-exec -a CAP::setgid results in a boot loop ;)
17:26.32GAN900Where is our Aegis expert, anyway?
17:26.43javispedroHave to say that GAN900 has said the smartest thing of the day.
17:27.02javispedrothat's what is missing here.
17:27.43javispedroso, we might have been ... not really concentrated during the aegis meegoconf sessions ... potentially because no one thought of the consequences. Bring back the lady and make her talk again.
17:27.56SpeedEvil:/
17:28.06SpeedEvilIn a way, aegis is irrelevant
17:28.08djszapijavispedro: I cannot reproduce...
17:28.14SpeedEvilIt's the eagis policies that's important
17:28.42SpeedEvilSeemigly the CE releases differ.
17:28.53GAN900javispedro, well, haven't things changed a lot since then?
17:29.32javispedro;P
17:29.55javispedroSpeedEvil: indeed - but also generic stuff like develoepr vs closed vs open
17:30.14DocScrutinizerSpeedEvil: CE devices are missing a Nokia-developer-cert or sth
17:30.42djszapiWindows CE ? :)
17:31.03MekCE labelled devices
17:31.17djszapiI was just joking ;)
17:31.28javispedroSpeedEvil: by CE you mean DE?
17:31.38djszapiwell, in my opinion, the security has nothing to do with this issue. If Nokia managers thought they give out devices without documentation, proper images etc
17:31.41DocScrutinizerno, some obviously nokia internal term referring to "CE" cert of hw, which correlates with the missing cert
17:34.13javispedrothe nokia policy is theoretically described in /var/lib/aegis/restok/restok.conf
17:34.29DocScrutinizerdjszapi: well, yes. It seems like some of the higher-up managers at Nokia are doing the whole meego-N9 thing in a rather half-arsed way
17:34.54javispedrothere you can find stuff like what privileges can SRC::com.nokia.maemo request.
17:35.36djszapiDocScrutinizer: I cannot help sorry. I will be asking my colleagues on Monday who are still at Nokia and not on vacation. Hope the best...
17:35.38djszapijavispedro: that is not just nokia policies, any credentials.
17:35.42djszapilike a "database".
17:36.39javispedroyes, aiui it is edited everytime dpkg-aegis parses a _aegis manifest
17:36.47djszapithat is a good debug interface whether or your manifest credential landed on the device properly.
17:36.50djszapialso accli though
17:37.09djszapiit is called "dpkg" and the original is "dpkg.real"
17:37.23djszapior did it change recently ?
17:37.43DocScrutinizerno, still there
17:38.47djszapiDocScrutinizer: btw, I know how we turned off the security, I am not sure it works publicly though
17:39.27djszapiecho 0 > /sys/kernel/security/digsig/enforce and echo 0 > /sys/kernel/security/digsig/enabled, but it seems to not work anymore
17:39.31DocScrutinizerdjszapi: that's probably what frals also told us. Echo 1 >/etc/die-aegis-DIE etc
17:39.36Mekyou can't do that in CE labelled devices anyway
17:39.51Mekyou can only do that if you already have put your devicein open mode
17:40.02Venemo:what is a "CE labelled device"?
17:40.08Mekand how to do that is completely secret and/or not possible with these CE labelled devices
17:41.13DocScrutinizerVenemo: a device with the letters "CE" written somewhere on the case
17:42.22djszapiDocScrutinizer: nope, "/etc" is integrity protected
17:42.25VenemoDocScrutinizer, I don't recall seeing that on the N950
17:42.32GAN900DocScrutinizer, high-up managers screwing things up has been the issue from the start.
17:42.32javispedrodjszapi: nope, I was just calling the aegis one "dpkg-aegis"
17:42.49MekVenemo: it's behind the screen I think
17:42.52djszapijavispedro: yeah, I have just double checked, it is still dpkg and dpkg.real
17:44.17VenemoMek, and what does it matter?
17:44.49DocScrutinizerVenemo: see my explanation above
17:45.02Mekwell, the label itself doesn't matter, but the label being there means that for example R&D certificates are not prsent
17:45.02djszapi:D:D
17:45.10Venemoaah
17:45.11DocScrutinizerVenemo: [2011-07-16 19:31:41] <DocScrutinizer> no, some obviously nokia internal term referring to "CE" cert of hw, which correlates with the missing cert
17:45.20Venemook, thx for explaining
17:45.27Mekso you can't flash R&D image (if you would have access to them), and do a couple of other things
17:45.28djszapiexactly
17:45.44djszapithat is why it does not have newer images where serious certificates are needed, like skype, jokuspot, gtalk etc
17:45.58djszapiMek: you cannot even do that with production image.
17:46.15Mekwell, nightly build production images are available signed with the right key
17:46.18djszapiuntil they say, okay, this is good for shipping.
17:46.22Venemoso how does a CE label prevent me from flashing an image?
17:46.34djszapiMek: nope, for N950 you cannot use "simple" production image
17:46.40MekVenemo: images are signed with a key, if te key doesn't match a cert on the device, you can't flash the image
17:46.44djszapiit must be OEM1 certified etc etc etc etc
17:46.54Mekdjszapi: yes, OEM1 certified nightly builds for PR images are made
17:47.06javispedrofun stuff surely :)
17:47.10Venemomhm..
17:47.13djszapithere is no available OEM1 nightly build, not even for internals when I last checked
17:47.23Mekdjszapi: there has been for a couple of days
17:47.33djszapiMek: for public ?
17:47.34Venemoso, can we get our hands on it?
17:47.40javispedroremoves setgid() calls from portmap and hopes noone decides to crack my n950.
17:47.40Mekdjszapi: no, internal; and only of PR images
17:47.46DocScrutinizerhmm, I always thought the purpose of TC/security-framework/aegis was to allow apps like skype to check if device is in open mode and refuse to run if it was. Never thought the purpose was to forbid open mode completely
17:47.46djszapiis checking...
17:48.29djszapiahh I do not have access, well I will check that out on Monday.
17:48.47djszapiMek: I checked it after the meetup when the devices were given out, few weeks ago.
17:49.03djszapiweek 22 is a bit old without flash, skype, hotspot, gtalk etc
17:49.10*** join/#harmattan antman8969 (6c06b0b0@gateway/web/freenode/ip.108.6.176.176)
17:49.13Mekdjszapi: yeah, they weren't available then, an interal blog post of earlier this week mentioned they would start making them (and are making them now)
17:49.34djszapiMek: mmh, they may have seen my screaming post about it on the forum xD
17:49.44djszapithat is a good progres, cool.
17:50.28djszapiMek: kdelibs compilation is 92% for harmattan :)
17:50.28Venemosoo...
17:50.48Venemowhen can we get our hands on a new N950 image?
17:51.09javispedrodjszapi: well, many thanks for the conversation.
17:51.09DocScrutinizerVenemo: this question is utterly useless
17:51.23Venemo:P
17:51.30DocScrutinizerVenemo: Nokia NEVER promises any release dates
17:51.36djszapino problem, I do really understand it can be an issue. Not trivial framework, but it cannot be by purpose.
17:51.59djszapiI have never seen any trivial security framework. However turning off should be trivial and well documented, yeah. I will ask around on Monday.
17:52.23DocScrutinizerdjszapi: MUCH appreciates. Many thanks!
17:55.08javispedronfs-mounts his home on 950
17:55.13javispedroaaaaah, home sweet home.
17:55.18javispedrois happy.
17:55.18DocScrutinizer:-D
17:59.19VenemoDocScrutinizer, I don't need/want it to be an official release
17:59.57DocScrutinizerthere's no inofficial releases
18:00.03djszapiVenemo: I was complaining about it as well on the forum after the meetup, you can join crying there :p
18:00.30DocScrutinizergood advice :-)
18:01.36javispedrook, for some reason I just tried to swipe a terminal window. On my desktop.
18:01.40javispedroWith the mouse.
18:02.10DocScrutinizerhehe
18:02.28javispedrolike Fremantle's tap outside dialog, swipe also grows on you seemingly...
18:02.30djszapijavispedro: how about zooming with two mouse like a pincharea ? :)
18:03.03javispedroI could use two mouses... :P
18:03.06javispedro;P
18:04.01Venemodjszapi, ok, I will, gimme a link
18:05.56javispedroout -- cya!
18:06.55DocScrutinizerdjszapi: I tried to zoom pinch on N900 browse just 2 days ago :-)
18:07.24djszapiVenemo: http://forum.meego.com/showthread.php?p=25277&posted=1#post25277
18:08.10Venemodjszapi, already pressed the thanks button :P
18:17.40djszapiVenemo: :) What type of application do you develop, if I can ask ?
18:20.14Venemodjszapi, various; whatever comes to my mind
18:20.32Venemodjszapi, right now I'm making a memory game to learn QML with :)
18:21.42antman8969anyone know any designers interested in drawing me up an anna -style icon? ;)
18:21.54Venemodjszapi, wanna try?
18:21.58Jaffaantman8969: javispedro's icon generator to the resuce
18:22.13antman8969haha, do you have a link?
18:22.40Jaffaantman8969: http://forum.meego.com/showthread.php?t=3714
18:23.05antman8969well... that makes my life a lot easier
18:23.14djszapiVenemo: sure when I got kdelibs working :) Actually we have been doing a game development framework, but Nokia also started providing something. Not sure you need to write it from scratch.
18:23.30antman8969thanks Jaffa
18:23.42Venemoantman8969, also see http://forum.meego.com/showthread.php?t=3717
18:24.09Venemodjszapi, it is a very simple app which I ported from QGV
18:25.09antman8969sweet
18:25.45GAN900Still in the UK.
18:25.49GAN900Lame stuff
18:26.09antman8969are you from the US?
18:28.58GAN900Yes.
18:30.08antman8969me too... n950 has been in the UK for 3 days now
18:30.27antman8969I'm thinking there is a row boat that leaves the UK once a week, and thats what dhl is waiting on
18:30.38JaffaDHL aren't always 100% accurate about when stuff leaves, but I guess this is the US freight restrictions
18:34.42GAN900Never had issues before.
18:35.02GAN900Andrew's is stuck, too, so I'm thinking DHL incompetence.
18:35.14GAN900US really doesn't have a lot of restriction on imports.
18:37.06*** join/#harmattan javispedro (~javier@Maemo/community/contributor/javispedro)
18:37.52javispedroyou are not going to believe what just happened
18:38.12javispedroso I get my n950 with portmap, which was working perfectly
18:38.20javispedroexit home
18:38.31javispedroand after 4 minutes or so
18:38.41javispedroI look at the screen and bang
18:38.49javispedroAegis security problem
18:39.02javispedrowith /sbin/portmap
18:39.20javispedrothis time no way to get out of it
18:39.45javispedroso I had to go back home and swap sim to n900
18:39.54javispedrosighs
18:40.01javispedrosighs loudly.
18:41.49javispedrowrites off harmy, needs a reflash
18:41.59javispedrocya again
18:46.01antman8969hey javispedro, I'm tryingto use your icon maker but getting some trouble...have a sec?
18:46.58*** join/#harmattan rlinfati (~rlinfati@151.81.150.188)
18:47.09rlinfati2 => ProductionServer is https://nokia.account.com/rest/1.0/         // hostname wrong (WTF)
18:47.09rlinfati:(
18:47.24rlinfatinokia.account.com vs account.nokia.com
18:49.30GAN900Jaffa and his murder of N950s.
18:53.30*** join/#harmattan lcukn900 (~lcuk@82.132.248.107)
18:58.21DocScrutinizeraegis
18:59.02djszapilcukn900: got harmattan working on N900 ? :)
19:02.02*** join/#harmattan harbaum (~quassel@krlh-5f736065.pool.mediaWays.net)
19:04.02lcukn900djszapi, no but an app grid 6*4 in liqbase looks awesome :p
19:04.11lcukn900as does swipe swiping :p
19:04.57harbaumlcukn900: do you consider rewriting your stuff in qml?
19:05.56lcukn900harbaum i do, and i try different things often
19:06.44lcukn900latest calendar prototype is qwidget based and so far seen working on c5-03 n8 and most impressively the qt simulator lol
19:07.05lcukn900err a qwidget based calendar
19:07.54lcukn900qml oes not offer scaleable vectors fast enough yet, i try advancing the rendering speed often with folks
19:08.13lcukn900the art of line drawing is gone if everything is a rectangle
19:08.50harbaumhow does the navi then work? It seems to be a qml app
19:09.07harbaumis the nav view itself a c++ widget?
19:09.20lcukn900that is 1 rectangle with a view i believe
19:09.21DocScrutinizerconsiders boxing and suspending N950 til the day much more knowledgeable devels like javispedro managed to at very least get successfully accomplished usual everyday activities like setting up portmap or recompiling and flashing/using stock kernel
19:09.29lcukn900liqbase needs thousands of them
19:10.16harbaumliqbase just need a 2d canvas widget + everything qml already has
19:10.28lcukn900harbaum complex paint processors and caching would be required and extremely wastefu to render to bitmap first
19:10.36DocScrutinizerreally I'm not interested to "develop" the 97th wallpaper changer, and it seems harmattan is not yet ready for doing serious development
19:10.41lcukn900many 2d canvas widgets
19:10.49lcukn900one sketch per rectangle
19:11.09lcukn900the graffiti wall has currently almost 10000 sketches
19:11.24lcukn900live rendered as you pan
19:11.51harbaumthat's still one 2d canvas with 10000 instances
19:12.21lcukn900and can you not see a memory problem yet?
19:12.59lcukn900one heavy set canvas with all its fancypants configuration options is much more memory than a normal qml rectangle
19:14.26rZrVenemo: i build your game and it works
19:14.43VenemorZr, thanks
19:14.46rZri made a few changes , wanna merge ?
19:15.48rZr+Build-Depends: debhelper (>= 5), libqt4-dev
19:15.59rZr+Homepage: http://sources.venemo.net/memory-game.zip
19:16.06VenemorZr, umm, what are the changes?
19:16.23rZr+       # Add here commands to clean up after the build process.
19:16.23rZr+       -$(MAKE) clean
19:16.54VenemorZr, you altered the packaging?
19:16.59rZra bit yet
19:17.01rZryes
19:17.07Venemoonly?
19:17.10rZryes
19:17.15Venemoah.
19:17.16rZri can push my changes
19:17.30VenemoI've deleted the debian folder from the game becasue Qt Creator can't deploy when it's present
19:18.20Venemothe original ones do have a lot of stuff
19:19.14rm_youGeneralAntilles: 8Departed Facility in EAST MIDLANDS - UK EAST MIDLANDS - UK03:53
19:19.27VenemorZr, https://gitorious.org/colorful-apps/memory-game/trees/master/debian
19:19.38VenemorZr, the harmattan branch has not yet been pushed to gitorious
19:19.49rZrk thx
19:20.06*** join/#harmattan harbaum_ (~quassel@krlh-5f72f54f.pool.mediaWays.net)
19:21.16rZri made a puzzle qml game too
19:21.22rZri'll may commit it too
19:21.29VenemorZr, jigsaw puzzle?
19:22.00rZryes
19:22.07rZri saw you create one too
19:22.28rZri can test yours if it's ready
19:22.37Venemoyes, but it's not packaged/ported to Harmattan yet
19:22.52rZri can do that job if needed
19:23.04rZrmy repo is growing every day
19:23.10rZrhttp://rzr.online.fr/q/handset
19:23.19VenemoI understand, but I want to port it to Harmattan first :)
19:25.03rZrsure
19:26.30djszapirZr: I have also been doing a lot of packages for Harmattan. It would be nice to avoid the duplication.
19:26.40*** join/#harmattan harbaum (~quassel@krlh-4d035b98.pool.mediaWays.net)
19:27.55rZrdjszapi: there is a wiki page for that ICCR, I'll sure share the job
19:28.51djszapirZr: we might be able to share a repository for that. Actually, I am not entirely sure how this sharing works on c-obs.
19:29.36rZri think there is already a repo for that but it's empty
19:30.04djszapirZr: it would make sense to sync up with repositories from trusted volunteers.
19:30.18djszapior just sync and fix if there is any breakge.
19:30.25rZrwe already overide
19:30.26djszapi* breakage
19:34.01*** join/#harmattan harbaum_ (~quassel@krlh-4d036bf2.pool.mediaWays.net)
19:43.18GeneralAntillesrm_you, exactly what mine says.
19:43.33rm_youGeneralAntilles: same plane? :P
19:44.18rm_youfiferboy's ever land?
19:47.31GeneralAntillesNope
19:47.37GeneralAntillesCrashed into the Atlantic.
19:48.08GeneralAntillessighs at the lightbulb idiocy.
19:48.38GeneralAntillesI bet the implementation of the efficiency standards generates more CO2 than the bulbs they're regulating.
19:52.51djszapirZr: I have kdelibs working. When we can get c-obs back I will be uploading :=)
19:53.55rZrcongratz
20:04.19rm_youGeneralAntilles: lol
20:04.38rm_you(to both things, kinda the same amount of funny but sad)
20:05.05GeneralAntillesrm_you, well, you know why the industry backed the new regulations so hard, right?
20:05.22rm_youbecause insanity / lobbyists, same reasons as always?
20:05.26GeneralAntillesSo they could close down their incandescent manufacturing plants in the US and move everything over to the CFL plants in China.
20:05.34rm_youlol
20:05.50GeneralAntillesWhich don't have to comply with any efficiency or real environmental standards.
20:06.50GeneralAntillesAnyway, enough of my off topic political whining.
20:06.53GeneralAntillesWHERE IS MY N950?!
20:06.56rm_youlol
20:07.11rm_youi'll laugh if it passes fiferboy's
20:07.19ieatlintbut the CFLs give us a new source of mercury which has been sorely missed since the banning of mercury thermometers
20:08.52ieatlintwe just need to start a rumour that huffing the vapor inside of them gets you high and we can ruin an entire generation of kids
20:09.08GeneralAntillesI still have some old thermostats sitting in the garage.
20:16.57DocScrutinizerGeneralAntilles: (lightbulbs) CFL? forget it, the energy needed to produce all this hightech crap needed in those crappy energy save lamps defeats any reasonable purpose - esp given the promised lifetime usualy isn't even reached by a tenth
20:17.27*** part/#harmattan djszapi (~lpapp@84-231-105-241.elisa-mobile.fi)
20:18.12GeneralAntillesDocScrutinizer, yes, I agree.
20:18.27GeneralAntillesGovernments trying to pick technology (or encourage a direction) does way more harm than good.
20:18.46DocScrutinizerindeed
20:20.39DocScrutinizerbtw now I have those shitty CFL lamps and ponder buying an electrical heater :-P
20:21.43DocScrutinizer(means the heat generated by incandescent is not always to be considered 'lost' - actually I actively plan with this heat)
20:22.09ieatlinti just run several computers
20:22.10ieatlintworks well
20:22.35DocScrutinizerI pondered building a shower heating from 150 dimmed incandescent lamps - moot project
20:23.26GeneralAntillesDocScrutinizer, same with my desktop during winter.
20:23.45DocScrutinizerthe result is I have to heat the bathroom all the time now, as the conventional heating isn't fast enough for a spontaneous shower
20:25.00ieatlintsomehow the electrical requirements of 150 incandescent bulbs in the shower seems like a hazard
20:25.42GeneralAntilleslol
20:25.46lcukworht a try, the results would be enlightening
20:25.58DocScrutinizerjust hopes for some clever manufacturer selling 100W incandescent in a black shirt now, labeled as heater unit, and you just rip off the black shirt
20:26.08GeneralAntillesI want to hook a towel warmer up to a relay in the shower valve.
20:26.34ieatlintsome showers do have a heating lamp in the ceiling that you can turn on
20:26.45DocScrutinizerieatlint: 150 * 20..30W seems just fine
20:26.47SpeedEvilhas 600W of solar cells in the kitchen.
20:27.04SpeedEvilPutting them together is the fun part. :)
20:27.15ieatlintDocScrutinizer: so turning on your bathroom light would be a mere 3-4.5kwh? haha
20:27.21ieatlintit's like running two microwaves
20:27.42SpeedEvilI have a garage light made from 20*22W Energy saving bulbs.
20:27.54SpeedEvilEvery time I turn it on, I save around 1.5Kw.
20:28.03DocScrutinizerit's like running 1.5 .. 2 conventional heaters which is just ok to heat up the bathroom in 3 minutes
20:28.42*** join/#harmattan djszapi (~lpapp@84-231-105-241.elisa-mobile.fi)
20:29.15djszapiCould someone tell me where I can find the "python-setuptools" package here: http://harmattan-dev.nokia.com/pool/harmattan-beta/ ? There are more packages depending on that package in this repository, but I failed ot find it. I hope it is just my sleep deprivation :p
20:33.27DocScrutinizerdjszapi: I'd not be surprised to find more flaws in that location/repo that just "my" bash .deb that refuses to run and then killed the system when javispedro and I tried to make it run nevertheless ( http://forum.meego.com/showpost.php?p=25529&postcount=94 )
20:33.48DocScrutinizers/that j/than j/
20:35.32DocScrutinizerdjszapi: anyway ->
20:35.35DocScrutinizer[jr@lagrange nokia]$ find . -name '*python-setuptools*'
20:35.36djszapiI think this python-setuptools has been forgotten ti upload.
20:35.37DocScrutinizer./harmattan-dev.nokia.com/pool/harmattan-beta/free/d/distribute/python-setuptools_0.6.15-1maemo3+0m6_all.deb
20:35.46lcukJaffa, attitude with compass patch for the win please :$
20:35.51djszapithanks :)
20:35.55DocScrutinizeryw
20:37.51Jaffalcuk: Roger.
20:38.17lcukJaffa, your app would make the idea test for new functionality !
20:38.23DocScrutinizero/ Jaffa
20:39.53GeneralAntillesHow's the community repo situation?
20:40.41djszapiGeneralAntilles: what do you mean exactly ?
20:41.14GeneralAntillesIs there a repo? Where is it, if so? And does Harmattan want to accept it?
20:41.53djszapihttp://harmattan-dev.nokia.com/pool/harmattan-beta/ and also some on -cobs
20:41.55JaffaGeneralAntilles: Apps-testing and Apps repos are being set up, but there are key issues being signed up. People's home repos (equivalent to multiple Extras-devel) are springing up
20:41.57djszapi* c-obs
20:45.50djszapiDocScrutinizer: plese gimme w3m :p
20:46.13DocScrutinizerfind '*w3m*' ?
20:46.46djszapiHave you added this repository to your /etc/apt/sources.list file ?
20:46.46DocScrutinizerdjszapi: sorry?
20:47.15DocScrutinizerdjszapi: no, copied to my box by wget
20:47.58DocScrutinizerdjszapi: you want to know about where '*w3m*'?
20:48.03djszapiwget -r ?
20:48.13DocScrutinizersmt like that, yes
20:48.48DocScrutinizersth*
20:48.49djszapiit would be nice if they put a search engine there.
20:49.28DocScrutinizerwell, now that I have the mass, an occasional update is painless
20:49.34djszapiyeah, right now I need to know ^wm3$
20:49.38DocScrutinizerwget is smart enough for this
20:49.44DocScrutinizerok, moment
20:49.59DocScrutinizerwm3 or w3m ?
20:50.16djszapisorry, my bad :P ^w3m$
20:50.39djszapithe text based browser
20:50.55DocScrutinizerdoesn't exist
20:52.03djszapiok, I am packaging then..
20:52.13DocScrutinizer:-)
21:05.43*** join/#harmattan achipa (~attila@Maemo/community/council/achipa)
21:06.49*** join/#harmattan MohammadAG (~MohammadA@pool-108-14-83-150.nycmny.fios.verizon.net)
21:21.12*** join/#harmattan harbaum (~quassel@krlh-4d036bf2.pool.mediaWays.net)
21:30.41*** join/#harmattan lcukn900 (~lcuk@cpc2-oldh7-0-0-cust702.10-1.cable.virginmedia.com)
22:09.20*** join/#harmattan Noobmonk3y (~Noobmonk3@cpc2-lanc4-0-0-cust164.3-3.cable.virginmedia.com)
22:09.25Noobmonk3yooo harmattan yay!
22:09.56lcukdjszapi, ask in here :)
22:13.18DocScrutinizerlcuk: is it possible to build "normal" small tools on device?
22:22.06*** join/#harmattan cpscotti (~cpscotti@87.114.7.39)
22:26.02*** join/#harmattan nid0 (nidO@dsl-fixed-94-30-53-17.interdsl.co.uk)
22:26.58*** join/#harmattan mzanetti (~micha@2001:4dd0:fddf:0:21c:b3ff:fec3:e17a)
22:29.08mzanettipiggz: have you found a solution for the Keyboard stuff?
22:30.22*** join/#harmattan antman8969 (6c06b0b0@gateway/web/freenode/ip.108.6.176.176)
22:46.41lcukDocScrutinizer, idk, it should be possible to build most things?
22:46.54lcukperhaps the gnu  tools situation is improved
22:47.01lcukbut i haven't looked further
22:47.10lcukis glancing to his left atm
22:49.50*** join/#harmattan lcukn900 (~lcuk@cpc2-oldh7-0-0-cust702.10-1.cable.virginmedia.com)
23:07.56*** join/#harmattan javispedro (~javier@Maemo/community/contributor/javispedro)
23:09.50*** join/#harmattan smoku (~spectrum@xkh0g2.infr.xiaoka.com)
23:26.17DocScrutinizerlcuk: sorry, was busy with updating http://wiki.meego.com/Migrating_from_N900_to_N950 - I just asked as I thought you said you build on device. I got no space on my PC HDD to install the SDK, that's when I wondered if the N950 "comes with" gcc and make and all...
23:26.36rm_youDocScrutinizer: I'm currently struggling with getting the SDK on my machine as well
23:26.48rm_youI'm stuck on windoze on my desktop because i need it for work-from-home
23:27.25rm_youi want to get a VM set up
23:27.37rm_youthe VM on the garage is the old one i think :/
23:28.03rm_youand i only have the vmware player :/
23:29.42GeneralAntillesrages a bit.
23:30.18rm_youlol GA
23:31.24GeneralAntillesWaiting and waiting
23:31.30GeneralAntillesThis is the waiting week for me.
23:31.40javispedromore liek two weeks ;)
23:31.50GeneralAntillesWish they'd stop pretending like it's making progress so at least I could focus on something else.
23:32.26javispedroiirc DHL USA defines the next day by 5:00pm
23:32.45javispedroso if you haven't got it by 5:00pm Nokia might be entitled to have their money back =)
23:33.29GeneralAntillesGood for Nokia.
23:36.10rm_youyeah i hope they do
23:36.21rm_youi should email them and tell them to get their money back :P
23:36.29rm_youjust to prod DHL for being sucky
23:38.07DocScrutinizerhttp://wiki.meego.com/Migrating_from_N900_to_N950#Keyboard_shortcuts  If *anybody* finds a way to select an entry in Search via kbd shortcut, please don't hesitate to share ;-D
23:38.39javispedroDocScrutinizer: how much time should I wait in the "Erasing, this may take a while." stage during flash?
23:38.56DocScrutinizer2 beers?
23:39.14DocScrutinizerI dunno, I left after 5 min
23:39.18javispedroI now need to Google a conversion factor between beers and seconds
23:39.26DocScrutinizerheard it takes 20..25min
23:40.30DocScrutinizeriirc the webpage says "takes 40min" and this seems about right
23:41.18javispedrosighs
23:45.55DocScrutinizerjavispedro: at least it works... even "automatically"
23:49.11javispedrothose aegis gods are vengeful. seemed that I could cheat death (aka aegis selfdestruction) by doing that triple reboot thing, but of course, the wrath of aegis ALWAYS eventually falls.
23:50.29javispedrook, erasing took 15 min
23:51.44javispedroand after that, lashing takes 2 minutes
23:51.45javispedroand done.
23:59.06DocScrutinizerjavispedro: could you check if your one-click-flasher self-erased?
23:59.26javispedronope, it's still there
23:59.33DocScrutinizerweird, but I can't locate mine anymore
23:59.44javispedroname starts with Linux_OCF
23:59.59DocScrutinizerlocate Linux_OCF AYE

Generated by irclog2html.pl Modified by Tim Riker to work with infobot.