[00:03] *** BlueMax has quit IRC (Read error: Connection reset by peer) [00:03] *** BlueMax has joined #archiveteam-ot [00:05] *** nataraj has quit IRC (Read error: Operation timed out) [00:16] *** OrIdow6 has joined #archiveteam-ot [00:19] *** BlueMax has quit IRC (Remote host closed the connection) [00:19] *** BlueMax has joined #archiveteam-ot [01:42] *** BlueMax has quit IRC (Remote host closed the connection) [01:42] *** BlueMax has joined #archiveteam-ot [01:51] *** BlueMax has quit IRC (Remote host closed the connection) [01:51] *** BlueMax has joined #archiveteam-ot [02:00] *** BlueMax has quit IRC (Remote host closed the connection) [02:00] *** BlueMax has joined #archiveteam-ot [02:19] *** BlueMax has quit IRC (Remote host closed the connection) [02:19] *** BlueMax has joined #archiveteam-ot [02:35] *** BlueMax has quit IRC (Remote host closed the connection) [02:35] *** BlueMax has joined #archiveteam-ot [02:35] *** BlueMax has quit IRC (Remote host closed the connection) [02:35] *** BlueMax has joined #archiveteam-ot [02:35] *** BlueMax has quit IRC (Remote host closed the connection) [02:36] *** BlueMax has joined #archiveteam-ot [02:37] *** BlueMax has quit IRC (Read error: Connection reset by peer) [02:38] *** BlueMax has joined #archiveteam-ot [02:39] *** BlueMax has quit IRC (Remote host closed the connection) [02:39] *** BlueMax has joined #archiveteam-ot [02:49] *** BlueMax has quit IRC (Remote host closed the connection) [02:49] *** BlueMax has joined #archiveteam-ot [02:52] *** BlueMax has quit IRC (Remote host closed the connection) [02:52] *** BlueMax has joined #archiveteam-ot [03:05] *** DogsRNice has quit IRC (Read error: Connection reset by peer) [03:58] *** BlueMax has quit IRC (Remote host closed the connection) [03:58] *** BlueMax has joined #archiveteam-ot [04:04] *** BlueMax has quit IRC (Remote host closed the connection) [04:04] *** BlueMax has joined #archiveteam-ot [04:06] *** qw3rty_ has joined #archiveteam-ot [04:11] *** BlueMax has quit IRC (Remote host closed the connection) [04:11] *** BlueMax has joined #archiveteam-ot [04:11] *** BlueMax has quit IRC (Read error: Connection reset by peer) [04:11] *** qw3rty__ has quit IRC (Ping timeout: 276 seconds) [04:11] *** BlueMax has joined #archiveteam-ot [04:26] *** godane has quit IRC (Read error: Connection reset by peer) [04:57] *** odemg has quit IRC (Ping timeout: 745 seconds) [05:01] *** odemg has joined #archiveteam-ot [06:37] *** nataraj has joined #archiveteam-ot [07:05] *** LowLevelM has quit IRC (Read error: Operation timed out) [07:17] *** nyany has quit IRC (Read error: Operation timed out) [07:17] *** nyany has joined #archiveteam-ot [07:17] *** systwi has joined #archiveteam-ot [07:24] *** systwi_ has quit IRC (Read error: Operation timed out) [07:52] *** nicolas17 has quit IRC (Ping timeout: 360 seconds) [09:01] *** Craigle has quit IRC (Quit: The Lounge - https://thelounge.chat) [09:27] *** josey has quit IRC (Read error: Connection reset by peer) [09:27] *** josey has joined #archiveteam-ot [09:32] *** LowLevelM has joined #archiveteam-ot [09:33] *** LowLevelM has quit IRC (Client Quit) [09:34] *** LowLevelM has joined #archiveteam-ot [10:01] *** LowLevelM has quit IRC (The Lounge - https://thelounge.chat) [10:02] *** LowLevelM has joined #archiveteam-ot [10:03] *** BlueMax has quit IRC (Quit: Leaving) [10:07] *** xit has quit IRC (Quit: Connection closed for inactivity) [12:35] *** Craigle has joined #archiveteam-ot [13:13] *** Dallas has joined #archiveteam-ot [15:27] *** SmolColle has joined #archiveteam-ot [15:43] *** fangfufu has left Konversation terminated! [15:45] *** tuluu_ has joined #archiveteam-ot [15:45] *** tuluu has quit IRC (Ping timeout: 258 seconds) [15:46] *** Laverne has quit IRC (Ping timeout: 258 seconds) [15:47] *** Craigle has quit IRC (Ping timeout: 258 seconds) [16:00] some arse broke into one of the warriors that i set up and killed the docker container so they could mine crypto. [16:00] nyany: did they broke in through ssh? [16:01] aye [16:01] if it's ssh, there a "deny" option you can use, so you block every ip range, except the one you whitelist [16:01] 'fraid that's unnecesary. the machine was totally pwned [16:02] i grabbed some data to analyze but it's now sleeping peacefully in the server abyss [16:02] yeah, i meant next time you set it up :) [16:02] Generally, you protect SSH by having good passwords, or maybe even disabling passwords in favour of public keys [16:02] seem silly of them, you are less likely to notice if they keep the docker container running. [16:03] * eythian always installs fail2ban to lock out people attempting brute force attacks. [16:03] I don't bother with fail2ban. They will _never_ brute force the password. [16:03] 99% of the time, they don't even get the username right [16:03] let alone the password [16:04] I tend to believe in defence in depth. [16:04] That's fair [16:06] yeah, i used to install fail2ban, but after some boxes of mine were pwned (very secure, firewall + fail2ban) i started to get more paranoid and just used the "deny" option on ssh instead..work great and less high maintenance [16:06] eythian: i got a cpu alert [16:06] lol [16:06] wouldn't be surprised if there worm outthere who use ssh/openssh vulns [16:06] ah right :) [16:07] managed to save and RE some of them too, its just rsync + bash really [16:07] SmolColle: I have no doubt there are, but if you have autoupdates enabled for security, then you're probably fine. [16:07] they did some binary patch on rsync, still trying to scratch my head in knowing what it does [16:07] there was no vuln here [16:07] SmolColle: Are your passwords strong? [16:07] it was a straight up bruteforce [16:08] I've actually set up a modified openssh as a honeypot to see what kinds of passwords they try to use [16:08] eythian: yeah, but we all know there always a possibility some vulns are "private", like all things are sometimes Forgging: yep, very strong [16:08] They're always bullshit passwords like "password" "admin" "minecraft" "password1" [16:08] Frogging: yes, because they use a wordlist [16:08] yeah [16:09] so if your account gets brute forced, it's probably because your password was bad [16:09] not for my case, ironically [16:10] it was very secure, firewall, iptables, even had fail2ban, but after like 2 month or so, i notice a weird proces on htop, look and its a cronjob that bruteforce other servers from mine [16:10] there no access logs either, they prob deleted it somehow [16:10] (no i wasn't running root) [16:10] Yeah, it'd be interesting to know how they got in there [16:10] Maybe a vulnerable app? [16:11] luckily i still have a sample of their "virus", encrypted somewhere, only managed to RE half of it, they did binary patching and stuff on rsync that came with it [16:11] maybe? everything is possible, especially seeing as there so much vulns on nearly everything that get discovered, some even are still private [16:11] yeah [16:11] 0-days are rare, but they do exist [16:12] they aren't rare, look on twitter :) you'll see dozens of opsec ppl bragging about their findings [16:12] and that's only for the public one btw, private have tons of those [16:13] I don't know if I'd consider Twitter a great source [16:13] but yeah, I don't know [16:13] wasn't really a great source, was mainly suggesting it as a "proof" to show how much stuff get discovered [16:14] arkiver: mind looking at pm? thanks [16:19] I ran a ssh honeypot for a while and some of the passwords they were trying were... [16:19] * nyany shrugs [16:19] bad [16:19] i had one day where everyone and their dog was trying the password "peter" [16:28] I just disable password authentication [16:28] the worst part is the logical conclusion: if they still do/try that then they have good success with whatever they're doing [16:29] every time you see spam, phishing: yes, there're people who fall for it [16:29] yup [16:30] I imagine a lot of it is just not changing defaults [16:30] I wonder what the success rate needs to be to make a profit [16:31] thousands of sources in the botnet is the success rate [16:32] I still have 2FA'd steam acc with a leaked user:pass. There're still one chinese every other day who tries his luck [16:32] change the password then? [16:32] secondary acc, it's fun to receive emails :P [16:32] I see :p [16:57] 2fa was mandatory on my steam account [16:57] as in, i logged in one day and it was enabled, won't let me disable [16:57] *** Laverne has joined #archiveteam-ot [16:58] *** Craigle has joined #archiveteam-ot [17:01] Friendly hackers upping your security [18:27] *** Stilett0 has quit IRC () [18:39] *** Stilett0 has joined #archiveteam-ot [18:44] *** Stilett0 has quit IRC () [18:44] *** Stilett0 has joined #archiveteam-ot [18:45] *** Stilett0 is now known as Stiletto [18:46] *** Stiletto has quit IRC (Client Quit) [18:51] *** Stiletto has joined #archiveteam-ot [18:52] *** Stiletto has quit IRC (Client Quit) [19:01] nyany, was that a standard VirtualBox Warrior VM? I don't recall there being a password for us to setup when running that VM... [19:01] atphoenix: no, it was a manually deployed warrior [19:01] in the cloud [19:01] running in docker [19:02] okay, so nothing to worry about for the standard VBox Warrior :) [19:02] Nope [19:02] (it also has docker inside) [19:02] Yeah, I'm getting ready to publish the script I wrote to provision these, it's a Linode StackScript [19:03] So far it runs perfectly on Ubuntu 18.04, I'm testing with CentOS 7 [19:03] *** britmob has quit IRC (Read error: Connection reset by peer) [19:06] Looks like it runs on CentOS 7 also [19:07] *** Stiletto has joined #archiveteam-ot [19:08] https://cloud.linode.com/stackscripts/626989 [19:19] *** nicolas17 has joined #archiveteam-ot [19:30] *** X-Scale` has joined #archiveteam-ot [19:32] *** nataraj has quit IRC (Read error: Operation timed out) [19:38] *** X-Scale has quit IRC (Ping timeout: 610 seconds) [19:38] *** X-Scale` is now known as X-Scale [19:56] *** schbirid has joined #archiveteam-ot [20:35] *** nicolas17 has quit IRC (Quit: Konversation terminated!) [20:36] *** X-Scale` has joined #archiveteam-ot [20:40] *** X-Scale has quit IRC (Read error: Operation timed out) [20:40] *** X-Scale` is now known as X-Scale [21:19] *** schbirid has quit IRC (Quit: Leaving) [21:40] *** Dallas has quit IRC (se.hub irc.efnet.nl) [21:40] *** sHATNER has quit IRC (se.hub irc.efnet.nl) [21:40] *** jodizzle has quit IRC (se.hub irc.efnet.nl) [21:40] *** dashcloud has quit IRC (se.hub irc.efnet.nl) [21:40] *** MrRadar2 has quit IRC (se.hub irc.efnet.nl) [21:40] *** Tenebrae has quit IRC (se.hub irc.efnet.nl) [21:40] *** Dallas has joined #archiveteam-ot [21:40] *** Tenebrae has joined #archiveteam-ot [21:40] *** sHATNER has joined #archiveteam-ot [21:40] *** jodizzle has joined #archiveteam-ot [21:40] *** dashcloud has joined #archiveteam-ot [21:40] *** MrRadar2 has joined #archiveteam-ot [22:12] *** britmob has joined #archiveteam-ot [22:50] *** Dimtree has joined #archiveteam-ot [23:04] *** BlueMax has joined #archiveteam-ot [23:16] *** nicolas17 has joined #archiveteam-ot [23:19] *** systwi has quit IRC (Read error: Connection reset by peer) [23:20] *** Igloo has quit IRC (Read error: Operation timed out) [23:20] *** systwi has joined #archiveteam-ot [23:21] *** prq has quit IRC (Read error: Operation timed out) [23:21] *** prq has joined #archiveteam-ot [23:26] *** Igloo has joined #archiveteam-ot [23:28] *** VoyKnight has joined #archiveteam-ot [23:31] Does anyone here have advice for book digitising? I've been asked about an old and valuable book which has all the typical old book issues you'd expect (somewhat fragile, can't be opened fully and pages can't be pressed flat without damage either, some pages with text in the joint, etc.). Professional services are too expensive, so I'm looking for something DIY. (Something) (mumble) laser grid (...) [23:31] camera, I guess, based on what I've heard before, but where can I find out more about the details? [23:31] Do you have the book physically? [23:31] Yeah [23:32] Well how come you can't open it fully? *thinking* [23:32] Or well, I can get ahold of it and do the digitising. [23:32] It's an old book and would fall apart. [23:32] Did you check and see if its not already archived somewhere? [23:33] Saves you the time and effort [23:33] i have a manual book scanner [23:33] I can open it "fully", but I can't press it flat to fully scan it including the text in the middle. [23:33] Oh wow that's a sticky predicament [23:33] This is a unique handwritten book. It's definitely not available anywhere else. [23:33] so old books get a special scanning vice that looks like the letter V extruded. more like 90 degrees [23:33] JAA: where is the book physically? [23:34] marked1: Yeah, but those usually use a glass plate to press it flat into a 100+ ° angle. That would probably damage the book. [23:34] iirc archive.org has a public-access book scanner, some libraries do too [23:34] astrid: Germany [23:34] hmmm [23:34] the one I saw used cameras [23:35] >handwritten [23:35] that's extra fun [23:35] https://www.diybookscanner.org [23:36] I have seen devices to scan large books where it's impossible to press them flat just because of the book thickness [23:36] marked1: Yeah, was just about to link that. As I said, those platen would damage the book. [23:36] pages remain inevitably curvy [23:36] so they have a mirror to let the camera see the outline of the page, and software to correct that curvature [23:37] I wouldn't use a platen like on that page [23:37] Huh, haven't heard of setups with a mirror. Any idea what I could search for there? [23:37] I'm not sure if that works for delicate books [23:37] Ah [23:37] I heard of it for like, 1000-page "books" with financial records that a company needs to digitize [23:37] i have one and it is a challenge at times [23:37] do you know the page count? [23:38] Not precisely, but 300-ish I guess. [23:39] I would check with the libraries in germany with old texts before trying to build diy [23:39] Regarding not using a platen, I guess that's the main question, how to deal with the page warping. That's why I mentioned laser grids above, since I know that's used sometimes. I think Google used it on their book scanning project, for example. [23:40] Yeah, probably. [23:40] photographic techniques have really improved since when Google did that mass book scan [23:40] Sure, but physics haven't changed as far as I know. ¯\_(ツ)_/¯ [23:41] Can't dewarp if you don't have some indication of how the page is warped, and a laser grid seems like an easy way to achieve that. [23:41] yes [23:41] or looking at the book from the edge [23:42] Hmm, what do you mean? [23:43] try to get us any image from the book, because blead through is another thing to factor in [23:43] JAA: that's what I meant with the mirror [23:44] if you look at the book from the bottom edge, you can see the curve of the paper [23:44] Ah [23:44] Well meanwhile I've been managing my own archival project [23:44] assuming it's not curved in more than one dimension (folded/damaged pages would be a problem) [23:45] No, the book seems to be in quite good condition in general. [23:45] So that should be fine. [23:45] If I may ask JAA, why exactly is this book handwritten? [23:45] What's it about? [23:46] marked1: Can't get an image currently, but I don't remember seeing bleed-through. [23:46] VoyKnight: It's a family tree. [23:46] Oh? Of who? [23:46] https://archive.org/details/tabletopscribesystem [23:48] So marked1, do you archive anything? [23:49] Just a random family, and I know some of them. Nobody "important", and nobody outside the family cares about this book. [23:49] Oh wow [23:49] just web stuff myself. though I have the hardware to do TV and radio [23:49] uh i use an unwarp tool that works from a grid of red spots that you print out and then lay across the warped surface prior to taking images [23:50] it requires no fancy hardware and also it exists [23:50] I archive old recovery media [23:50] Oh yeah, I came across something like that before, hold on. [23:50] Pretty unique project. Nobody's ever dedicated their time to it. [23:50] https://forum.diybookscanner.org/viewtopic.php?f=19&t=2589 [23:50] yeah that one [23:50] hm, red lasers are really cheap, shouldn't be hard to automated that [23:51] Yeah, I guess if the warping is only in one direction (physically), that would work. [23:52] I feel like this is something LIDAR should do well [23:52] I don't know much about LIDAR, but I somehow doubt it'll work well across distances like this. [23:52] What's a LIDAR? [23:53] VoyKnight: like RADAR but laser [23:53] Hm...nice [23:53] You need *really* good time resolution for that to work at ~1 m. [23:53] but the problem of light is that it moves fast :) [23:54] VoyKnight search google images for LIDAR [23:54] There are LIDAR scanners to e.g. 3D-scan rooms, but I'd expect that they're pretty expensive. [23:55] Do any of you have Discord? [23:55] I kinda wish ArchiveTeam had a Discord [23:55] Fuck Discord. [23:55] we're already split into two IRC servers [23:55] no need to split more [23:56] That, and Discord has some fundamental problems that are completely contradictory to everything AT is about. [23:58] nicolas17 do you archive anything? [23:58] On another note, I see that the only snapshot of https://forum.diybookscanner.org/viewtopic.php?f=19&t=2589 in the WBM is by ArchiveBot from 2017. :-) [23:58] Because astrid threw that forum in. <3 [23:58] I have uploaded a few DOS games I have [23:58] need to get back to that...