libera/#devuan/ Thursday, 2025-05-22

chomwittgood morning09:34
chomwittwhy starting emacs from a tty-shell from  my main user will open gui emacs but doing that from logged in as another user will start a text emacs ?09:36
chomwitt(to be more specific: from a shell running in xterm)09:37
gnarfacechomwitt: by default, X will forbid users other than you from opening windows, but it can't enforce that for programs that stay within the terminal, and even the GUI emacs has the full text version available to fail over to09:37
gnarfaceyou can force the GUI emacs to stay in the terminal with the "-nw" command-line option, or you could just install the "emacs-nox" package instead and it'll leave out the GUI parts entirely09:38
* chomwitt parsing gnarface reply..09:38
gnarfacealternately you could just use the xhost command to grant your other user graphical access09:38
gnarface(check man page for xhost details)09:39
gnarfacerunning X as your own user, even root will be forbidden from opening windows, by default09:39
chomwittgnarface: so X is running i guess as a process with mine UID and when i create an process from fooUID will not accept it.09:41
chomwittemacs-nox package has a nasty habit of conflicting with gui emacs09:43
chomwittgnarface: thank you! i am checking xhost.09:45
chomwittits funny using multiuser linux solo for so many years. I tend to think 'user' is a wrong word. Why not call it sessionID or workflowID?10:06
freaxeh_should I be using rsync over NFS?12:56
freaxeh_or should I connect directly?12:56
gnarfacefreaxeh_: uh, i think rsync has ssh support, but if you're going for speed NFS is probably still gonna win14:30
gnarfacebut if you're going for pure speed you wouldn't necessarily use rsync either; its primary value is it can de-duplicate and update etc during synchronization operations, but that has a lot of transactional overhead, and it's usually faster to just use tar or cp14:31
gnarface(assuming you don't care about duplicated data)14:31
gnarface(like if you're copying fresh directory trees for the first time or doing versioned snapshots or the like)14:32
ecxodHahaha systemd-coredump user states that the whole computer is his home directory18:54
ecxodsystemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin18:54
ecxodbtw I get a 404 on https://git.devuan.org/sdk/arm-sdk20:00
gnarfacehmm, who's supposed to be in charge of that?20:02
ecxodI don't know I followed a link20:02
rwpAnubis there required about 20 seconds of compute time from my slower laptop machine to compute the access hash.20:03
rwpecxod, Try this link: https://git.devuan.org/devuan-sdk/arm-sdk20:04
greenjeansI opened that first link 3 minute ago, and anubis is still trying to figure out if i'm human20:05
ecxodHow can this anubis protect for bots?20:05
greenjeans4 minutes, still not deon20:06
greenjeans*done*20:06
rwpBots don't usually run Javascript and can't solve the local hash computation requirement.20:06
greenjeans5 minutes, still going, this is ridiculous20:06
rwpI think someone may have cranked up the work requirement on this Anubis install quite too high!20:07
greenjeansfinally done, only to give me a 404, lol20:07
rwpThis is OT but...  This problem with Anubis is why some organizations such as GNU & FSF have been resisting adding it to our sites.  The cure might be worse.20:08
greenjeanssecond link worked fine20:08
ecxodnooo, bots would not be able to see anything in the Internet if they would not use js. This protection is NULL20:08
rwpecxod, (greenjeans) I think someone gave out a bad link.  I found the link I posted by searching for it on the site.20:08
greenjeansthat makes it even worse, why does a bad link need 5.5 minutes of anubis shenanigans? lol20:09
rwpMy last OT but I think everyone should create and install a tar pit for bots all over everywhere (not on git servers) so that bots get stuck in those other tar pits in order to protect the precious resources of free software source servers.20:10
rwpgreenjeans, It didn't matter that it was a bad link, or a good link, it was on the site anywhere and therefore anubis required the proof of work to be done for access anywhere on the site.20:10
greenjeansyikes20:11
rwpAnubis does not really care what the link URL is but only that the price had been paid.20:12
greenjeansI get that anubis stuff from time to time while surfing, every time I see it I just close the tab and move on, so it's definitely protecting websites fro me, lol, there may be some merit in that20:14
fsmithredtook me less than half a minute to get the 40420:18
fsmithredbefore anubis it was taking a long time to get there because we were being hammered by bots20:19
fsmithredand once there, it was still slow.20:19
rwpI'll 2nd that observation that without anubis protecting sites many sites (like the GNU source sites) are so hammered that they are overwhelmed and timeout due to the network abuse.20:22
rwpThe problem is that both the network abuse and the protection from network abuse are both bad things for us humans trying to use the sites.  I am hoping we can do something better than anubis and move forward past it.  I see anubis as a clever initial first pass hack.  It's clever.  Something was needed.  But I want the next generation protection now.20:23
fsmithredI vote for ICBM20:25
rwpLOL!20:32
AfdalAnubis causes crashing for me on Palemoon.  Making it -functionally- exactly like the hostile garbage Cloudflare started doing in February20:35
AfdalFor those not aware of the huge scandal plaguing the web the last few months: https://forums.theregister.com/forum/all/2025/03/04/cloudflare_blocking_niche_browsers/20:38
Afdaloh wait, Devuan is using this anubis crap to "protect" their website now?20:39
greenjeansoh yeah, i've been getting that buggy cloudflare crap for months now, sometimes it simply refuses to load the stupid check box and i never get to login to some sites20:39
AfdalDidn't realize the context of this conversation20:39
Afdalyou need to find an alternative fast20:39
AfdalI saw a searx instance using something else recently, let me see if I can find that again20:40
Afdalyeah search.inetol.net uses something called SecuNet I think20:42
greenjeansseconding the ICBM rec20:46
Afdalyep, just tested again20:48
Afdalanubis still crashes my browser20:48
AfdalI'm filing this under malicious software20:49
Afdalcongrats on making the devuan website inaccessible20:49
fsmithredit was already inaccessible before anubis20:50
fsmithrednow at least some of us can get there. Maybe most of us.20:51
AfdalBy the way I'm not sure if this also applies to Anubis, but the way Cloudflare has been operating they're actually strongarming browser developers to add the very automation APIs into their browsers that are used by the bots it claims to protect websites against20:56
Afdalalso the vast majority of site bots (like 90%) are built on Chrome20:57
Afdalso by creating a malicious piece of software to block out non-Google-approved browsers you have done nothing to solve the problem20:58
greenjeansshhh, keep you voice down or google overlords will hear you20:58
chomwitti can access devuan.org from lynx! does that count?21:06
rwpIt does.  But that is a different web site, all static files and more resistant to abusive attacks.  The AI Crawlers are hammering the source browsing web sites and those are very resource heavy and get taken offline the same as if it were a targeted DDOS attack.21:08
chomwittwhat do you mean by 'source browsing web sites'?21:10
chomwittalso qutebrowser works with devuan.org21:11
greenjeansI've never had a problem with any browser accessing devuan.org21:12
Afdaldevuan.org isn't using the malicious Anubis browser "verifier"21:13
rwpchomwitt, I mean gitweb or cgit which renders pages in a human friendly format.21:14
Afdalit's git.devuan.org that has the Anubis malware21:14
chomwittrwp: thank for the clarification21:14
rwpWith git we have cgit and gitweb for human browsing.  And then there is git-http-backend for using http and https protocol for git clone actions.  git-http-backend is the git smart http backend for efficient http protocol cloning.  Unfortunately (my opinion) cgit also supports git cloning and then people use it but it is painfully heavy and should not be used for git cloning.21:15
chomwittah! indeed git.devuan.org checks if i am a bot . but qutebrowser passes. So i guess the solution is to check that not by the browser used but by another browser-agnostic way ?21:19
AfdalAre you using the webkit engine or the qtwebengine21:21
chomwitta! that thought of mine is already discussed in palemoon forum. Using traffic patter analysis and not blocking browsers.21:22
chomwitts/patter/pattern21:22
Afdalwhat thread21:22
Afdalthere's a very big discussion about Cloudflare's garbage on the palemoon forums right now21:22
Afdaloh wait, qtwebengine is Google cruft too21:25
AfdalSo I guess qutebrowser is a Google-approved browser21:25
chomwittnetsurf can access git.devuan.org and doestn do a bot check!21:29
chomwittbut it seems has  javascript disabled21:29
chomwittmaybe that cloudfare issue is not the bigger problem. (shouldnt we discuss that in offtopic?)21:30
AfdalI was thinking this was an off-topic discussion until I realized it was about an official Devuan website21:31
Afdalit's very topical I think21:31
chomwitti mean many sites dont work well for various reasons in ligthweigth browsers21:32
fsmithredchomwitt, lynx works on git.devuan.org too. I just logged in.21:32
chomwittfsmithred: that is ultracool!!21:32
fsmithredcan't log out.21:33
fsmithredlol21:34
chomwitt:-)21:34
AfdalLynx is just another webkit browser21:35
Afdalnetsurf working is interesting though21:35
AfdalI think netsurf uses its own independent engine21:35
Afdalor am I mistaken about Lynx21:36
fsmithredI don't know what lynx uses. It's been around longer than linux.21:37
AfdalWait... are there two web browsers called Lynx???21:37
fsmithredthere's lynx which is console-only and links2 which is console or graphical. Not sure if links is still a thing.21:38
djphI think 'links' got replaced by elinks21:38
Afdalwhat's this https://github.com/KamalDevelopers/Lynx21:38
Afdal@_@?21:39
djphsome rando usurping the name, by the look of it21:39
djphprobably a college kid21:39
Afdallol21:39
Afdalmight be a fake project21:40
Afdalits logo looks like touched up Firefox logo21:40
Afdaleven though it's using webkit :^)21:40
tempforeverAfdal (I know I'm a little late to the conversation) I can access git.devuan.org with palemoon and pass the anubis check without crashing.  I'm using v33.7.1 amd64 gtk222:35
Afdaleh?22:36
AfdalI'm on the same build22:36
Afdalhmmmmm22:36
tempforeverbut I also can get through cloudflare so... not sure what's different here22:36
Afdalwell the Cloudflare thing is complicated22:37
AfdalCloudflare actually serves up random challenges for starters22:37
Afdalsometimes your browser might pass them sometimes it might not22:37
Afdalwonder what's causing my crashing then22:38
Afdaldon't wanna test again right now because crashing is so onerous -.-22:38
tempforeveridk i also use "banned" addon noscript and requestpolicy - banned because of browser support requests for crashes/sites not working22:38
AfdalI use both noscript and ublock origin22:39
Afdalwonder if ublock is doing something here22:39
tempforeveri dont have that one22:39
tempforevernot saying that pm works perfectly, it has issues (including a crash) on other sites, but devuan's git site works at least, even with anubis22:40
AfdalI hadn't had crashes on Palemoon for a long time until this Cloudflare garbage this year22:42
Afdalthat's why I assumed Anubis was doing the same garbage22:42
AfdalThe Cloudflare stuff was extremely malicious, they were using a verification loop that would in a matter of seconds suck up all computer memory22:43
tempforeveri read some of that on their forum,  is that still ongoing?22:44
AfdalPalemoon devs had to issue an emergency patch that for the time being ignored Cloudflare turnstile demands22:44
Afdalno, it's still not resolved completely22:45
Afdalafter some pressure from other browser devs and tech news articles, after like two months of silence they finally got a Cloudflare rep to respond22:45
Afdaland they've been issuing unreasonable demands22:45
Afdalfrom the devs22:45
Afdalhere's a good quote from the lead dev:22:46
Afdal>In fact, from my own inspection of web logs to check bot behaviour, it seems these automation APIs inside browsers is exactly what is being used to drive a good portion of bots (a majority seems to be running on top of automated Chromium instances!); so we're actually against giving bots the tools to abuse the web by refusing to make this available, and I'm against even having this implemented at all in our platform.22:46
AfdalActually it seems the next official Palemoon release (scheduled for July 1 release -_-) passes the current Cloudflare captchas without problems22:56
Afdalof course Cloudflare could always do something else22:57
neoncortexthere was any change in the fonts configuration recently?  My system stopped showing some utf-8 characters, in xterm, and xfce4-terminal.23:40
fsmithredpaculino, did you get your sudo sorted out?23:42

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!