OpenSSH declares ssh-rsa deprecated. What do I do next?

With the 8.2 release of OpenSSH, they have declared that ssh-rsa for SHA-1 will soon be removed from the defaults:

Future deprecation notice

It is now possible[1] to perform chosen-prefix attacks against the SHA-1 hash algorithm for less than USD$ 50K. For this reason, we will be disabling the “ssh-rsa” public key signature algorithm that depends on SHA-1 by default in a near-future release.

This algorithm is unfortunately still used widely despite the existence of better alternatives, being the only remaining public key signature algorithm specified by the original SSH RFCs.

If I have (and might use, but not sure where) an ssh-rsa key, what are the next steps for me? Pretend I don’t have another key yet.

  1. Generate new key(s?).
  2. Add new keys to known services.
  3. Rename old key so it does not get picked up automatically?
    • This is to nudge me when I try a server that used to work, so I add the new key.
  4. ???

OpenSSL 1.1.1b warning:*** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better

We have a homework assignment to encrypt the famous Tux.ppm using aes with ecb and cbc mode. We have to show and outline how insecure the ecb mode is…

So is there any way to ignore this warning?

*** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better. 

SPFx Document Web Part Deprecated?

I am trying to extend the functionality of the Documents web part

I have been trying to gulp serve this: Documents Web Part.

But it is over 2 year old and localhost refuses to work (ERR_SSL_PROTOCOL), I have set NODE_ENV to production and NODE_NO_HTTP2=1.

I just want someone to run the sample as my work is extending it.

EDIT: I have it working locally by disabling https and removing the s in https from initpage in serve.json – however this disables the web part from running on work bench, any ideas?

Openvpn connection failed; Keysize deprecated and will be removed in Openvpn 2.6

Network manager says “VPN connection failed”. I’m assuming it has to do with the deprecated keysize thing, but I’m not sure what to do with that information. Here is the log:

Jun 27 12:22:00 computer NetworkManager[1040]: <info>  [1561652520.2797] audit: op="connection-activate" uuid="8f7a5122-4768-4032-8cac-a2a930211593" name="ipvanish-US-St-Louis-stl-c08" pid=1515 uid=1000 result="success" Jun 27 12:22:00 computer NetworkManager[1040]: <info>  [1561652520.2873] vpn-connection[0x55c672760150,8f7a5122-4768-4032-8cac-a2a930211593,"ipvanish-US-St-Louis-stl-c08",0]: Started the VPN service, PID 23112 Jun 27 12:22:00 computer NetworkManager[1040]: <info>  [1561652520.2925] vpn-connection[0x55c672760150,8f7a5122-4768-4032-8cac-a2a930211593,"ipvanish-US-St-Louis-stl-c08",0]: Saw the service appear; activating connection Jun 27 12:22:00 computer NetworkManager[1040]: <info>  [1561652520.3364] vpn-connection[0x55c672760150,8f7a5122-4768-4032-8cac-a2a930211593,"ipvanish-US-St-Louis-stl-c08",0]: VPN plugin: state changed: starting (3) Jun 27 12:22:00 computer NetworkManager[1040]: <info>  [1561652520.3364] vpn-connection[0x55c672760150,8f7a5122-4768-4032-8cac-a2a930211593,"ipvanish-US-St-Louis-stl-c08",0]: VPN connection: (ConnectInteractive) reply received Jun 27 12:22:00 computer nm-openvpn[23118]: WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6 Jun 27 12:22:00 computer nm-openvpn[23118]: Options error: --ca fails with '/home/user/Documents/IPVanish%20Configs/ca.ipvanish.com.crt': No such file or directory (errno=2) Jun 27 12:22:00 computer nm-openvpn[23118]: Options error: Please correct these errors. Jun 27 12:22:00 computer nm-openvpn[23118]: Use --help for more information. Jun 27 12:22:00 computer NetworkManager[1040]: <warn>  [1561652520.3394] vpn-connection[0x55c672760150,8f7a5122-4768-4032-8cac-a2a930211593,"ipvanish-US-St-Louis-stl-c08",0]: VPN plugin: failed: connect-failed (1) Jun 27 12:22:00 computer NetworkManager[1040]: <warn>  [1561652520.3395] vpn-connection[0x55c672760150,8f7a5122-4768-4032-8cac-a2a930211593,"ipvanish-US-St-Louis-stl-c08",0]: VPN plugin: failed: connect-failed (1) Jun 27 12:22:00 computer NetworkManager[1040]: <info>  [1561652520.3395] vpn-connection[0x55c672760150,8f7a5122-4768-4032-8cac-a2a930211593,"ipvanish-US-St-Louis-stl-c08",0]: VPN plugin: state changed: stopping (5) Jun 27 12:22:00 computer NetworkManager[1040]: <info>  [1561652520.3396] vpn-connection[0x55c672760150,8f7a5122-4768-4032-8cac-a2a930211593,"ipvanish-US-St-Louis-stl-c08",0]: VPN plugin: state changed: stopped (6) Jun 27 12:22:00 computer NetworkManager[1040]: <info>  [1561652520.3412] vpn-connection[0x55c672760150,8f7a5122-4768-4032-8cac-a2a930211593,"ipvanish-US-St-Louis-stl-c08",0]: VPN service disappeared 

How to clean up deprecated packages after a failed Lubuntu or Ubuntu upgrade?

I tried upgraded my Lubuntu 18.10 system to 19.04 using the standard GUI which runs the do-release-upgrade command. It got most of the way through the installation, installing all the packages. However, it failed before making it to the clean-up section. This has resulted in an unfortunate problem where many of the applications that were deprecated are installed alongside their replacements.

This is obvious when looking at the system tray: System Tray

You can see two network tray icons (for two different program instances) and two power icons. In the applications menu, there are many sets of duplicate programs, i.e. two “Additional Drivers”.

My question is how can I remove these deprecated applications from my system? Is there a simple command I can run? If I have to remove each one individually, how can I know which ones were deprecated and which ones are current?

In case anyone thinks to suggest it, I’ve already worked through this answer and it doesn’t solve my problem.

How to clean up deprecated packages after a failed Lubuntu or Ubuntu upgrade?

I tried upgraded my Lubuntu 18.10 system to 19.04 using the standard GUI which runs the do-release-upgrade command. It got most of the way through the installation, installing all the packages. However, it failed before making it to the clean-up section. This has resulted in an unfortunate problem where many of the applications that were deprecated are installed alongside their replacements.

This is obvious when looking at the system tray: System Tray

You can see two network tray icons (for two different program instances) and two power icons. In the applications menu, there are many sets of duplicate programs, i.e. two “Additional Drivers”.

My question is how can I remove these deprecated applications from my system? Is there a simple command I can run? If I have to remove each one individually, how can I know which ones were deprecated and which ones are current?

In case anyone thinks to suggest it, I’ve already worked through this answer and it doesn’t solve my problem.

How to solve “@deprecated — Use an observer instead of a complete callback”?

So I was trying to get data by using http call and after I use my code, It won’t work and when I check, it does not produce any array. It gave me this message after I hover my mouse over the subscribe function.

Here are my code:

public getCust(){ this.http.get(this.thisUrl+’name=’+this.param.namaID+’&dob=’+this.param.dob+’&idno=’+this.param.idno+’&idt=’+this.param.idt+’&norek=’+this.param.norek+’&cif=’+this.param.cif) .subscribe((res : any[])=>{ console.log(res); this.custs = res; }) }

These are the message that produce by me hovering over the subscribe function:

(method) Observable.subscribe(next?: (value: Object) => void, error?: (error: any) => void, complete?: () => void): Subscription (+4 overloads) @deprecated — Use an observer instead of a complete callback

@deprecated — Use an observer instead of an error callback

@deprecated — Use an observer instead of a complete callback

Simple networking, now that UNet is deprecated

I’m prototyping a two-player typing game in Unity. I don’t have any experience making multiplayer games, so I’m not sure how to best approach the netcode.

For this game all I think I really need is an API for sending messages to and from a server – the two clients only care about what the other one is typing, and there isn’t any gameplay that’s even remotely related to physics. Looking into UNet, it seems like the parts based on synchronizing game objects do more than my game needs, but the messaging stuff from the HLAPI seems like a good fit. That said, this is a real time game, so low latency is ultimately more important than any API style considerations.

The wrench, however, is that Unity is deprecating UNet without shipping any replacements. I’d start working with HLAPI, but I don’t want to have to replace all of the networking code down the line or even have to shut down the game when Unity’s servers go down, if that’s what will happen after using HLAPI.

So as a beginner to multiplayer development, with relatively low API requirements, where do I go when Unity multiplayer is in flux? Should I learn the DOTS-Netcode mentioned in this recent blog post? Should I go with a third party solution like Photon? Or will the HLAPI be sufficient, even post-deprecation?

Simple networking, now that UNet is deprecated

I’m prototyping a two-player typing game in Unity. I don’t have any experience making multiplayer games, so I’m not sure how to best approach the netcode.

For this game all I think I really need is an API for sending messages to and from a server – the two clients only care about what the other one is typing, and there isn’t any gameplay that’s even remotely related to physics. Looking into UNet, it seems like the parts based on synchronizing game objects do more than my game needs, but the messaging stuff from the HLAPI seems like a good fit. That said, this is a real time game, so low latency is ultimately more important than any API style considerations.

The wrench, however, is that Unity is deprecating UNet without shipping any replacements. I’d start working with HLAPI, but I don’t want to have to replace all of the networking code down the line or even have to shut down the game when Unity’s servers go down, if that’s what will happen after using HLAPI.

So as a beginner to multiplayer development, with relatively low API requirements, where do I go when Unity multiplayer is in flux? Should I learn the DOTS-Netcode mentioned in this recent blog post? Should I go with a third party solution like Photon? Or will the HLAPI be sufficient, even post-deprecation?