| hallyn | hi - pulled out my old xperia x with sailfish 3.4.0.24. Want to get it on wifi to upgrade, but wifi wont' connect... i was able to get usb networking before. Is there a way to take one of the files from Sailfish_OS-Jolla-4.3.0.12-f5121-0.2.3.8.zip and use it locally to update? | 04:09 |
|---|---|---|
| gry | why not get usb networking working again? then do the upgrade, and after the upgrade maybe wifi will start working | 04:17 |
| hallyn | oh, interesting. doing "connect to network" and picking an available network would not give me password prompt; doing "add network" from settings told me "could not add network". but if I then go to "advanced" from "add network", it let me add network, and it connected. | 04:17 |
| hallyn | gry: well for some reason i wasn't able to get *past* the laptop. Did set up a masq rule on laptop and default ip route on the phone, but it wouldn't get past. But I think I'm good now - thanks. | 04:18 |
| hallyn | (I'd previously spent 2hrs plugging in and unplugging trying to figure out why it wouldn't turn out, only to finally remember there was something about 'lipstick' causing screen to always be blank. That's when I noticed usb network was active) | 04:20 |
| hallyn | s/wouldn't turn out/wouldn't turn on/ | 04:20 |
| gry | hallyn: looks like some bug in the gui for wireless? | 04:36 |
| hallyn | gry: yeah it does, but it's 3.2 so i won't worry about it until i see the same after upgrade. | 04:43 |
| thilo[m] | Is there already a statement from jolla regarding pwnkit somewhere? Will there be one soon? | 08:56 |
| thilo[m] | Anyone knows where to contact jolla regarding security related issues? The public forum seems to be the wrong place, but they also do not seem to have any separate communication channel for that. Just info@jolla.com? | 13:26 |
| mal | thilo[m]: jolla knows about the issue and will be fixed in next release | 13:40 |
| thilo[m] | @mal: thanks for the response. I'll disable app updates until then. Guess you're having a busy time now. Good Luck. If there is any usable intermediate mitigation let us know. | 14:00 |
| henk | thilo[m]: any specific scenario you are concerned about? i.e. why disable updates? | 14:01 |
| thilo[m] | henk: just a bit paranoid about new code from untrusted sources (e.g. openrepos) | 14:08 |
| Nico | thilo: There is probably nothing new the applications can do, since the installation of the apps is done as root and as such they can run arbitrary scrips and install arbitrary services | 14:09 |
| thilo[m] | Hm, yes, you're probably right | 14:11 |
| thilo[m] | Interesting, I assume that is subject to change, as otherwise sailjail would have a pretty obvious security flaw | 14:14 |
| Nico | Well, such applications wouldn't be allowed in harbour | 14:22 |
| Nico | Also the sandboxing by default in a future release should also make issues like the current one harder to exploit | 14:22 |
| thilo[m] | Nico: I would be suprised if there would be a good protection against arbitrary code execution. Just let the malicous code be disabled until a certain date is reached and it would only be found after it caused harm | 14:24 |
| thilo[m] | Or do you mean, that no applications would be allowed that have e.g. post install scripts? | 14:24 |
| Nico | Yeah, no applications with malicious install scripts are allowed | 14:25 |
| Nico | So all code runs sandboxed as a user after the install and the install can be audited | 14:25 |
| thilo[m] | How do you detect if a script is malicous? | 14:26 |
| Nico | You probably read it | 14:26 |
| thilo[m] | I hope then that jolla is better at auditing than e.g. Etherscan with the $YEAR token | 14:28 |
| thilo[m] | however, I don't really want to get into this discussion. Security is always relative and I guess jolla has good reasons to do what they do | 14:29 |
| thilo[m] | (link for reference: https://twitter.com/cat5749/status/1476813266462539779) | 14:29 |
| henk | the sad truth is, though, that most people do not have the slightest clue what they are doing d-: | 14:44 |
| henk | and security is almost always treated as an afterthought … it’s not clear that some bug is a security issue? meh, fuck it, we’ll get to it at 3pm in january of the year 58429. maybe february. | 14:45 |
| henk | that won’t be much different at jolla than it is anywhere else … | 14:45 |
| hallyn | oh no - the fourth and final os update failed to initiate reboot when done. Which would be ok except battery is 100% full, and power button is broken. | 14:50 |
| hallyn | Maybe it was all for naught anyway - can anyone confirm/deny whether sailfish on the sony xperia x f5121 is capable of VoLTE? (I had assumed it was, but apparently android on that was not, although the SoC is capable) | 14:50 |
| hallyn | uh, re pkcon, i'd recommend chmod u-s /usr/bin/pkexec until that update arrives... | 14:55 |
| Nico | Well, you need local code execution perms to exploit it already, don't you? | 14:56 |
| hallyn | yes. | 15:01 |
| Nico | Then it probably doesn't change much for me ;p | 15:05 |
| hallyn | i just ... i guess i'm more pessimistic than you are :) do you have ssdh_config at least set to disable password login? | 15:05 |
| hallyn | nah you're probably right. | 15:08 |
| Nico | Yeah, also a random port because it reduces login attempts a lot | 15:09 |
| hallyn | so ... is there any other way i can reboot this thing? While it has the sailfish os black update screen with full progress bar? I aassume it won't setup local usb network if i plug it in... | 15:15 |
| hallyn | tried inserting bogus sim card, was hoping that would reset something | 15:16 |
| Nico | Just long press the power button? | 15:17 |
| Nico | Alternatively power + one of the volume keys | 15:17 |
| b100dian[m] | hallyn if you connect usb cable do you have a network interface appearing on your computer? Or is that only if you have developer mode enabled :-? | 15:21 |
| hallyn | b100dian[m]: That happened before, yes. But (just checked) not right now :( I guess it's not running a full os stack. | 15:24 |
| hallyn | Nico: there's the rub, power button is broken. | 15:24 |
| Nico | Take out the battery? | 15:24 |
| hallyn | not user servicable on xperia x :( | 15:25 |
| hallyn | need something fancier :) like a special reset code i can send out over /dev/usb :) | 15:25 |
| hallyn | this all would be moot if f(x)tec would ship their phones. i just needed a stop-gap! | 15:25 |
| Nico | Well, you need to take it apart to repair the power button anyway ;p | 15:25 |
| hallyn | technically i was ok without a power button :) | 15:26 |
| Nico | Clearly you are not okay with it now! | 15:26 |
| hallyn | until now. | 15:26 |
| hallyn | well if the os update would reboot when it wants to reboot i would still be ok :) | 15:26 |
| hallyn | all right so it sounds like i'm out of luck. | 15:27 |
| Nico | You could wait for the power to run out | 15:27 |
| b100dian[m] | Xperia 10 would have been dead by tomorrow:) | 15:27 |
| hallyn | That's the current plan | 15:27 |
| Nico | How do you even activate the screen? | 15:27 |
| hallyn | double-tap | 15:27 |
| Nico | huh | 15:27 |
| Nico | How do you boot, after the power ran out? | 15:28 |
| hallyn | plug it in. | 15:28 |
| b100dian[m] | F(x)tec changed chipset, right? | 15:28 |
| hallyn | yeah i wouldn't mind tkaing it apart - but it's glued together and *that* i do not want to deal with. | 15:28 |
| Nico | plugging it in only puts me on the charging screen | 15:28 |
| hallyn | b100dian[m]: yeah. | 15:28 |
| Nico | The glue is really easy to remove, I did it by accident ;p | 15:28 |
| hallyn | Nico: it has to be close to full battery for it to turn on, but it does turn on for me. | 15:28 |
| Nico | It is just annoying having to buy new glue for 3 bucks | 15:29 |
| hallyn | Hm. Then how do you re-glue it | 15:29 |
| hallyn | ok | 15:29 |
| Nico | I just used tape most of the time :D | 15:29 |
| hallyn | well if VoLTE might not work anyway then it's just not worth it. | 15:29 |
| dokterkat[m] | You can heat it up with a hair blower and try to put it back together when it’s still hot | 15:29 |
| Nico | Then I had one of the few xperia X compacts with removable battery! | 15:29 |
| hallyn | nice | 15:29 |
| hallyn | dual sim? | 15:30 |
| Nico | No | 15:30 |
| Nico | 500gb micro SD card ;p | 15:30 |
| hallyn | what even do yo udo with that :) | 15:31 |
| Nico | I digitized all my CDs as flcac | 15:31 |
| Nico | *flac | 15:31 |
| thilo[m] | you dont need a mobile connection if you can download the whole internet onto the sdcard i guess ;) | 15:31 |
| thilo[m] | ah, also nice ;) | 15:32 |
| Nico | I had a few ISOs on it to boot linux distros too | 15:32 |
| hallyn | is the heaphone amp good enough on that thing to tell? (must be,...) | 15:32 |
| Nico | No | 15:32 |
| hallyn | oh :) | 15:32 |
| Nico | But why lower the quality | 15:32 |
| hallyn | media server then? | 15:32 |
| Nico | Well, you can tell if an mp3 is crappy | 15:32 |
| hallyn | i dunno - i riped my cds 20 years ago, flac was just not an option then | 15:32 |
| Nico | But high quality mp3s don't really make a difference to flacs | 15:32 |
| hallyn | i should re-rip one day. | 15:33 |
| Nico | But if I have the storage... | 15:33 |
| hallyn | yeah | 15:33 |
| mal | just fyi https://github.com/sailfishos/polkit/pull/3 | 16:11 |
| *** Malinux- is now known as Malinux | 20:08 | |
| hallyn | (phone still going strong... would you just run out of battery already!) | 20:40 |
| gry | hallyn: what kind of device have you got? | 20:53 |
| hallyn | sony xperia x f5121 | 20:54 |
| gry | very nice. does it have a loud speaker and good audio? i heard sony are good with audio | 20:59 |
| hallyn | i think it was ok - but i've not had it running in a year and for a year before that my daughter had it (running sailfish). But right the power button is broken and update got hung at reboot so i can't check until it runs out of battery :) | 22:19 |
| hallyn | this is why i don't like offline updaters. had a mac for a year and i culdn't STAND that. let me have system access while the update runs | 22:20 |
| gry | wow this is a lot of information | 22:22 |
| gry | power button broken - wait for battery to go flat- then boot - this isok | 22:22 |
| gry | what was wrong with that mac exactly? and what's wrong with offline updaters? | 22:23 |
| hallyn | the fact that i can't be o the system while it's being updated :) if i could log into the salifish right now, i could reboot :) | 22:25 |
| hallyn | well hopefully by morning batt will be dead | 22:26 |
| gry | oh right, i don't think i saw an offline updater before, then | 22:26 |
| gry | maybe windows is like that. but it at least reboots itself. it doesn't prompt for the user to reboot | 22:26 |
| hallyn | well sailfish doesn't prompt for me to reboot either - it just messsed up and forgot to reboot, so it's sitting at the "100% done upgrading" screen :) | 22:28 |
| gry | take the battery out? | 22:29 |
| gry | or it is forced to be inside | 22:29 |
Generated by irclog2html.py 2.17.1 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!