Merge pull request 'Duo MFA guide' (#10) from jshiffer/site:mfa-guide into main

Reviewed-on: lug/site#10

content/directory.md

@@ -5,8 +5,6 @@ title: Directory
 Some of our internal websites:
 - [Gitea](https://git.linux.ucla.edu): includes the Git repository for the
   website you're viewing right now!
-- [cgit](https://linux.ucla.edu/git): a more minimalist git server.
-- [Booru](https://booru.linux.ucla.edu): imageboard
 - [Orwell](https://orwell.linux.ucla.edu): server room security camera
 
 Here's a list of member-run websites:

content/events/gaming-s25.md

@@ -0,0 +1,32 @@
+---
+title: "Spring 2025 Week 4 Meeting: Gaming on Linux"
+date: 2025-04-20
+tags: [events]
+author: LUG Board
+---
+
+Come to our "Gaming on Linux" meeting, where we'll give a presentation on the current state of video games on Linux, and dispel the myth that you can't play your favorite games on Linux. Then, we'll play one of two open source games: SuperTuxKart or Minetest!
+
+* Date: 2025-04-24, Thursday
+* Time: 6-7:50 PM
+* Location: Slichter Hall 2834
+
+### SuperTuxKart Server
+
+Search for `LUG server` in the global server list
+
+### Minetest Server
+
+(requires UCLA VPN)
+
+Address: `linux.ucla.edu`
+
+Port: `30000`
+
+Register for an account before joining for the first time
+
+---
+
+**Update:**
+
+Thanks to those who attended in person or over Zoom! The slides are posted [here](https://linux.ucla.edu/S25_Gaming_On_Linux.pptx).

content/events/installfest-s25.md

@@ -0,0 +1,47 @@
+---
+title: "Spring 2025 Installfest"
+date: 2025-04-02
+tags: [events, installfests]
+author: LUG Board
+---
+
+Free Pizza will be provided!!!
+
+The Linux Users Group (LUG) at UCLA invites you to attend the quarterly Linux
+Installfest! Please fill out the RSVP form to indicate your pizza preferences.
+
+* Date: 2025-04-11 (Friday of Week 2)
+* Time: 6-9 PM
+* Location: Engineering IV (room TBD)
+* RSVP: [link](https://forms.gle/6XRzGgdqXddJJ76L9)
+
+## General Info
+
+LUG hosts a quarterly installfest on Friday of the 2nd week. We will start by
+giving a presentation on Linux to get newcomers up to speed. Then, attendees
+will be provided a USB drive and guided in dual booting their computers with
+Linux (most likely Ubuntu, Debian, or Linux Mint). However, you are welcome to
+bring your own flash drives and install any distro of your choice. Or if you
+don't feel comfortable with the possibility of losing their data, you can set
+up a Virtual Machine instead.
+
+This time around, we have various Dell Precision workstations that we snatched
+from the med school's e-waste (lol).
+
+The officers will also be doing a show-and-tell of their own hardware which
+they have installed Linux on. Experienced users are also encouraged to show off
+their own setups.
+
+At the end, we'll have a SuperTuxKart LAN party with our freshly installed
+Linux machines.
+
+## Past Installfests
+
+You can view pictures from past installfests [here](https://linux.ucla.edu/zenphoto/).
+
+## Note on Apple Silicon (M1-M4) Macs
+
+Due to their custom Apple silicon, the only Linux distro which works on M1/M2
+Macs is the experimental Asahi Linux. There is no support for M3 or M4. You
+still have the option of setting up a Virtual Machine to run Linux so feel free
+to come and chat with us!

content/events/installfest-w25.md

@@ -0,0 +1,47 @@
+---
+title: "Winter 2025 Installfest"
+date: 2025-01-20
+tags: [events, installfests]
+author: LUG Board
+---
+
+Free Pizza will be provided!!!
+
+The Linux Users Group (LUG) at UCLA invites you to attend the quarterly Linux
+Installfest! Please fill out the RSVP form to indicate your pizza preferences.
+
+* Date: 2025-01-24 (Friday of Week 3) **Moved to Week 3 because of ongoing wildfires**
+* Time: 6-9 PM
+* Location: Engineering IV, Undergraduate Lounge (67-127)
+* RSVP: link
+
+## General Info
+
+LUG hosts a quarterly installfest on Friday of the 2nd week. We will start by
+giving a presentation on Linux to get newcomers up to speed. Then, attendees
+will be provided a USB drive and guided in dual booting their computers with
+Linux (most likely Ubuntu, Debian, or Linux Mint). However, you are welcome to
+bring your own flash drives and install any distro of your choice. Or if you
+don't feel comfortable with the possibility of losing their data, you can set
+up a Virtual Machine instead.
+
+This time around, there will be a demo of a Linux install on an HP Elitebook
+laptop, obtained from a corporate e-waste pile...
+
+The officers will also be doing a show-and-tell of their own hardware which
+they have installed Linux on. Experienced users are also encouraged to show off
+their own setups.
+
+At the end, we'll have a SuperTuxKart LAN party with our freshly installed
+Linux machines.
+
+## Past Installfests
+
+You can view pictures from past installfests [here](https://linux.ucla.edu/zenphoto/).
+
+## Note on Apple Silicon (M1-M4) Macs
+
+Due to their custom Apple silicon, the only Linux distro which works on M1/M2
+Macs is the experimental Asahi Linux. There is no support for M3 or M4. You
+still have the option of setting up a Virtual Machine to run Linux so feel free
+to come and chat with us!

content/events/llm-w25.md

@@ -0,0 +1,20 @@
+---
+title: "Winter 2025 LLM Workshop"
+date: 2025-01-23
+tags: [events]
+author: LUG Board
+---
+
+Come to our LLM development workshop, where officers will give a presentation on everything you need to know to get up to speed in this quickly-evolving field. Then, one of our members is bringing his own AI rig for you to try out.
+
+UCLA students will have a chance to use our new workstation for their own AI projects!
+
+* Date: 2025-01-30, Thursday
+* Time: 6-6:50 PM
+* Location: Boelter Hall 4283
+
+---
+
+**Update:**
+
+Thanks to those who attended in person or over Zoom! The slides are posted [here](https://linux.ucla.edu/W25_LLM_Workshop.pptx).

content/events/privsec-w25.md

@@ -0,0 +1,18 @@
+---
+title: "Winter 2025 Tech Talk: Privacy and Security"
+date: 2025-02-23
+tags: [events]
+author: LUG Board
+---
+
+Come to our Privacy and Security Tech Talk, where officers will give a presentation on why privacy and operations security (OPSEC) is important for *everyone* in the digital age, how to develop a personal threat model, and various tools you can use and habits you can develop to better anonymize yourself. We also share our own recommended resources for further reading.
+
+* Date: 2025-02-27, Thursday
+* Time: 6-6:50 PM
+* Location: Boelter Hall 4283
+
+---
+
+**Update:**
+
+Thanks to those who attended in person or over Zoom! The slides are posted [here](https://linux.ucla.edu/W25_Privacy_Opsec.pptx).

content/membership.md

@@ -4,15 +4,19 @@ author: LUG Board
 ---
 
 ## Board
-| Name                  | Position             | Contact                 |
-| --------------------- | -------------------- | ----------------------- |
-| Mustafa E.            | President            | mstf@linux.ucla.edu     |
-| David Zheng           | Vice President       |                         |
-| Lawrence Liu          | Programming Director |                         |
-| James Shiffer         | Secretary            | jshiffer@linux.ucla.edu |
-| Professor Paul Eggert | Faculty Advisor      | eggert@cs.ucla.edu      |
+Shared inbox: [board@linux.ucla.edu](mailto:board@linux.ucla.edu)
 
-## Join us
+| Name                  | Position                        | Contact                 |
+| --------------------- | ------------------------------- | ----------------------- |
+| James Shiffer         | Co-President                    | jshiffer@linux.ucla.edu |
+| Lawrence Liu          | Co-President                    |                         |
+| Ethan Cheng           | Vice President                  | ethan@linux.ucla.edu    |
+| Matthew Risley        | Vice President                  | mrisley@linux.ucla.edu  |
+| Evan Aceves           | Vice President                  | eaceves@linux.ucla.edu  |
+| Mustafa E.            | Officer                         | mstf@linux.ucla.edu     |
+| Professor Paul Eggert | Faculty Advisor (on sabbatical) | eggert@cs.ucla.edu      |
+
+## Join Us
 Becoming a member is easy, and there's no membership fees or interviews! If you
 want a server or email, fill out the [application
 form](https://linux.ucla.edu/application.pdf) and email it to us at
@@ -20,6 +24,8 @@ form](https://linux.ucla.edu/application.pdf) and email it to us at
 officers in person)
 
 **Member benefits include:**
-- SSH access
-- Free web hosting
-- Free server space
+- Free virtual private server (VPS) hosting
+- Free web hosting under https://linux.ucla.edu/yourname
+- Free email address at yourname@linux.ucla.edu
+- Free XMPP account
+- Free Git hosting on https://git.linux.ucla.edu

content/services.md

@@ -11,16 +11,21 @@ Our club hosts various open source web services for the public to use:
 
 - [XMPP](https://xmpp.link/#main@room.linux.ucla.edu): Instant messaging platform, bridged with our Discord chat. Ask an officer for a `linux.ucla.edu` account.
 
-- [SuperTuxKart](https://supertuxkart.net): Racing video game server; connect to `linux.ucla.edu`
+- [SuperTuxKart](https://supertuxkart.net): Racing video game server; search for `LUG server` in the global list
+
+- [Luanti (formerly Minetest)](https://luanti.org/): Like Minecraft, but free and open source. IP: `linux.ucla.edu` Port: `30000` (requires UCLA VPN)
+
+- [Invidious](https://yt.linux.ucla.edu/): Privacy-respecting YouTube frontend with no ads
+
+- [Gitea](https://git.linux.ucla.edu): Git code forge; ask an officer for an account
+
+- [Arch Linux Mirror](https://arch.linux.ucla.edu/): Tier 2 mirror which syncs twice a day from [Leaseweb](https://mirror.sfo12.us.leaseweb.net/archlinux/). Add the line `Server = https://arch.linux.ucla.edu/$repo/os/$arch` to your `/etc/pacman.d/mirrorlist` file.
+
+- [SearXNG](https://searx.linux.ucla.edu/): Search engine aggregator with no tracking or ads
+
+- **Backups**: our NAS automatically backs up the contents of our members' VMs three times a week.
 
 ## Planned
 
-- **Mirrors**: [EndeavourOS](https://github.com/endeavouros-team/mirrors?tab=readme-ov-file) (only one US mirror!), [Arch Linux](https://wiki.archlinux.org/title/DeveloperWiki:NewMirrors) (Tier 2), [Artix](https://wiki.artixlinux.org/Main/Mirrors) (normal), [CRAN](https://cran.r-project.org/mirrors.html).
+- **More Mirrors**: [EndeavourOS](https://github.com/endeavouros-team/mirrors?tab=readme-ov-file) (only one US mirror!), [Artix](https://wiki.artixlinux.org/Main/Mirrors) (normal), [CRAN](https://cran.r-project.org/mirrors.html).
 
-- [Minetest](https://www.minetest.net/): Like Minecraft, but free and open source.
-
-- [Invidious](https://invidious.io/): Privacy-respecting YouTube frontend with no ads
-
-- [SearXNG](https://docs.searxng.org/): Search engine aggregator with no tracking or ads
-
-- **Backups**: once our NAS is online, we will automatically back up the contents of our members' VMs.

content/wiki/better-than-acm.md

@@ -0,0 +1,24 @@
+---
+title: "Breaking News: LUG Replaces UCLA ACM Chapter"
+date: 2025-04-01
+tags: [funny, april-fools]
+author: LUG Board
+---
+
+It's about time we deprecated ACM.
+
+- Unlike **ACM Cloud**, we actually provide [free web hosting](https://linux.ucla.edu/membership/) and educate our members on [self-hosting](https://linux.ucla.edu/W25_Selfhost.pptx).
+- Unlike **ACM AI**, we actually provide GPUs to members, run our own free chatbot, and have members publishing in [top conferences](https://openreview.net/forum?id=62hJ09Z0NU).
+- LUG finished first in the **ACM Cyber** CTF last spring, despite never going to a meeting. We had our own meeting on [cybersecurity](/events/privsec-w25/), anyway.
+- LUG is endorsed by the most GOATed CS professor ([Eggert](https://samueli.ucla.edu/time-zone-king-how-one-ucla-computer-scientist-keeps-digital-clocks-ticking/)).
+- Unlike **ACM ICPC**, where they grind LeetCode Hards that are [solvable by AI now](https://ultracode.ai/), we regularly exercise our brains with IQ tests and Wordle.
+- Unlike **ACM TeachLA**, we actually educate our *own* students at our [weekly meetings](https://linux.ucla.edu/events/).
+- Unlike **ACM Studio**, we support video games that people will actually play by running a [SuperTuxKart](https://supertuxkart.net/Main_Page) server, and educating users about [Proton](https://en.wikipedia.org/wiki/Proton_(software)).
+- Unlike anyone in ACM, we are actually skilled with hardware, owing to our high representation of CEs, CSEs, and EEs.
+- We had at least one girl at every [installfest](https://linux.ucla.edu/tags/installfests/) this year, and we closed the rest of the gap by becoming femboys – **ACM W** (more like **ACM WOKE**) utterly destroyed.
+- We never leave the terminal – **ACM Design** utterly destroyed.
+- We generated [our website](https://git.linux.ucla.edu/lug/site) from Markdown files using Hugo – **ACM Hack** utterly destroyed.
+- Unlike ACM, we're not blacklisted from ordering from Enzo's Pizzeria, even after we ripped them off.
+- Unlike 90% of CS students, we actually daily drive Linux, not just SSH into it.
+- Unlike 90% of CS students, we actually give back to open source instead of leeching off of it.
+- We're laid back, we're not corporatized and we're owned by no one.

content/wiki/description.md

@@ -1,5 +1,6 @@
 ---
 title: Club Description
+description: "Please give a brief, but detailed summary of your organization. Be sure to include any history of the group, a mission statement and a brief account of the student population that the organization represent.…"
 ---
 
 > Please give a brief, but detailed summary of your organization. Be sure to

content/wiki/emails.md

@@ -1,38 +1,79 @@
 ---
 title: Email Account Guide
+description: "How to log in with an email client, change your password, and the latest updates on the upcoming multi-factor authentication (MFA) mandate."
 ---
 
-**IMPORTANT: PLEASE CHOOSE A STRONG PASSWORD FOR YOUR EMAIL ACCOUNT** 
+---
 
-[![img](https://linux.ucla.edu/mediawiki/images/thumb/3/34/Image.png/300px-Image.png)](https://linux.ucla.edu/mediawiki/index.php/File:Image.png)
+## NEW: Multi-Factor Authentication
 
-Some hacking attempts on our email server
+The University is mandating that multi-factor authentication (MFA) be enabled for all email accounts by May 1, 2025. Specifically, we are using [Cisco Duo](https://duo.com/docs/duounix) as our MFA service, to be consistent with MyUCLA, UCLA Google Apps, and the UCLA Campus VPN. Even if you have UCLA Duo set up already, this uses a slightly different instance belonging to UCLA Computer Science specifically.
 
- **WE GET SEVERAL BRUTE FORCE ATTEMPTS EVERY DAY. IF THE  HACKERS GET IN TO YOUR EMAIL ACCOUNT THEY WILL SEND SPAM AND THE CS  DEPARTMENT WILL GET MAD AT US.**  **Please use a secure password, otherwise we might have to restrict access to only people on the UCLA VPN.**
+We have activated MFA starting on April 25. You must follow the below instructions to access your inbox.
+
+### Enrollment Instructions
+
+1. Install the Duo app on your mobile device ([iOS](https://apps.apple.com/us/app/duo-mobile/id422663827), [Android](https://play.google.com/store/apps/details?id=com.duosecurity.duomobile&hl=en-US&pli=1)). You can also use a compatible [security key](https://guide.duo.com/security-keys).
+2. SSH into your virtual machine.
+3. Run `ssh [your username]@10.0.0.10` in the shell—this connects to the mail server.
+
+{{< figure src="/duo/Screenshot from 2025-04-25 16-46-23.png" >}}
+
+4. You will be prompted to enroll in Duo MFA. Paste any one of the links into your browser and follow the on-screen instructions.
+
+{{< figure src="/duo/Screenshot 2025-04-25 at 16-43-30 Duo Security - Device Management.png" >}}
+
+We recommend against using text messages as your authentication method, because they leave you vulnerable to [SIM swap attacks](https://www.cnet.com/news/privacy/do-you-use-sms-for-two-factor-authentication-heres-why-you-shouldnt/).
+
+{{< figure src="/duo/Screenshot 2025-04-25 at 16-43-47 Duo Security - Device Management.png" >}}
+
+{{< figure src="/duo/Screenshot 2025-04-25 at 16-44-11 Duo Security - Device Management.png" >}}
+
+{{< figure src="/duo/Screenshot 2025-04-25 at 16-44-24 Duo Security - Device Management.png" >}}
+
+{{< figure src="/duo/Screenshot 2025-04-25 at 16-44-34 Duo Security - Device Management.png" >}}
+
+{{< figure src="/duo/Screenshot 2025-04-25 at 16-44-55 Duo Security - Device Management.png" >}}
+
+{{< figure src="/duo/Screenshot 2025-04-25 at 16-45-28 Duo Security - Device Management.png" >}}
+
+{{< figure src="/duo/Screenshot 2025-04-25 at 16-45-42 Duo Security - Device Management.png" >}}
+
+5. You can Ctrl+C out of the SSH password prompt once you've enrolled.
+
+6. Try rerunning the last SSH command. You should now get a Duo push on your phone, which logs you in once accepted.
+
+{{< figure src="/duo/IMG_6215.jpg" height="400" >}}
+
+{{< figure src="/duo/Screenshot from 2025-04-25 16-59-20.png" >}}
+
+Now would be a good time to change your password if you haven't done so already! Just run the `passwd` command on the "paris" server.
+
+7. Now, you can log into your email inbox as you did before, with the added step of accepting the Duo push on your phone.
+
+**NOTE:** your IMAP session is supposed to be cached for an hour to avoid spamming repeat Duo requests. Please contact us right away if this doesn't work as intended&mdash;hitting "deny" on the Duo pushes repeatedly will only lock you out of your account, requiring manual intervention from the CS Department! You can reach us on [Discord](/discord), [XMPP](https://xmpp.link/#main@room.linux.ucla.edu%3Fjoin), or use an alternative account to email [board@linux.ucla.edu](mailto:board@linux.ucla.edu).
+
+---
 
 ## Logging in
 
 I am using the following settings with Thunderbird to get in. I haven't  tried it with another email client but you are welcome to.
 
-SMTP: 
+### SMTP
 
-Server Name: mail.linux.ucla.edu 
+Server Name: `mail.linux.ucla.edu`
 
-Port: 587 
-
-[![img](https://linux.ucla.edu/mediawiki/images/thumb/9/9b/Hackerman.png/300px-Hackerman.png)](https://linux.ucla.edu/mediawiki/index.php/File:Hackerman.png)
-
-Look at all the hackers getting banned for too many failed login attempts!
+Port: `587`
 
 Authentication method: Normal password 
 
 Connection security: STARTTLS 
 
-IMAP: 
+### IMAP
 
-Server Name: mail.linux.ucla.edu 
+Server Name: `mail.linux.ucla.edu`
 
-Port: 993 
+Port: `993`
 
 Authentication method: Normal Password 
 
@@ -40,6 +81,6 @@ Connection security: SSL/TLS
 
 ## Changing your password
 
-To change the password, please ssh into your web server and ssh to [your  username]@10.0.0.10. Then use passwd to change your password.
+To change the password, SSH into your virtual machine and run the shell command `ssh [your  username]@10.0.0.10`. Accept the Duo MFA push, or follow the MFA enrollment instructions if it's your first time. Then use the `passwd` command to change your password.
 
 (Yes we know, this is a pretty crappy and inelegant solution, but it's good enough for now)

content/wiki/linux.md

@@ -1,6 +1,7 @@
 ---
 title: Linux
 date: 2024-04-03
+description: "So what’s this Linux thing all about? What does Linux look like? What software runs on Linux? What is Linux about?…"
 ---
 
 So what's this Linux thing all about? What does Linux look like? What software

content/wiki/llms.md

@@ -0,0 +1,10 @@
+---
+title: A Deep Dive on Large Language Models (LLMs)
+date: 2025-01-30
+description: "Everything you need to know to get up to speed on this rapidly evolving technology."
+author: James Shiffer
+---
+
+This was a live presentation which I gave at a weekly club meeting. You can get the slides [here](https://linux.ucla.edu/W25_LLM_Workshop.pptx).
+
+If requested enough, I can write it up as a text article.

content/wiki/rdp.md

@@ -2,6 +2,7 @@
 title: RDP guide
 date: 2024-05-24
 author: David Z
+description: "Many classes require using the UCLA SEASNet Remote Desktop. For example 115C requires you to use Cadence (yuck). Microsoft’s Remote Desktop Protocol is proprietary, but there are open source clients which can connect to it.…"
 ---
 
 Many classes require using the UCLA SEASNet Remote Desktop. For example 115C requires you 

content/wiki/ucla-network.md

@@ -2,6 +2,7 @@
 title: UCLA Network Guide
 date: 2024-04-03
 author: Mustafa
+description: "Eduroam is an international roaming service for students, based on WPA2 Enterprise. Along with UCLA_WEB, it is a highly available network on campus.…"
 ---
 
 Eduroam is an international roaming service for students, based on WPA2

hugo.toml

@@ -2,7 +2,6 @@ baseURL = "/"
 languageCode = "en-us"
 title = "UCLA Linux Users Group"
 theme = "ezhil"
-paginate = 5
 
 copyright = "© Copyright 2024"
 
@@ -26,6 +25,9 @@ summaryLength = 20
 	# customDarkCSS = "css/custom-dark.css"  # Custom styles applied to dark mode css.
 	# customJS = ["https://code.jquery.com/jquery-3.4.1.js", "js/custom1.js"]  # Custom JS scripts.
 
+[pagination]
+  pagerSize = 5
+
 [[menu.main]]
 name = "About"
 url = "/about"

layouts/partials/now.html

@@ -12,10 +12,21 @@
         66% {color: #4545e8; }
     }
 </style>
-<ol>
+<ul>
     <li>
-        <a href="/events/installfest-f24">
-            <span class="magic">October 11, 2024: Fall Quarter Installfest</span>
+        <a href="/events">
+            Next Weekly Meeting: <span class="magic" id="next-meeting-date"></span> at 6 PM, Slichter Hall Room 2834
         </a>
     </li>
-</ol> 
+    <li>
+        <a href="/wiki/emails">
+            <span class="magic">ACTION REQUIRED:</span> Enroll in Email Multi-Factor Authentication
+        </a>
+    </li>
+</ul>
+<script>
+    document.addEventListener('DOMContentLoaded', function () {
+        var nextThursday = new Date(Date.now() + (((4 - new Date().getDay() + 7) % 7) * 86400000));
+        document.getElementById('next-meeting-date').innerHTML = nextThursday.toDateString();
+    });
+</script>

themes/ezhil/layouts/_default/single.html

@@ -42,9 +42,7 @@
 		{{- end -}}
 
 		<!-- Check if disqus short name is given -->
-		{{ if not .Site.DisqusShortname }}
 		{{- $.Scratch.Set "isDisqus" false -}}
-		{{ end }}
 
 		{{- if eq ($.Scratch.Get "isDisqus") true -}}
 		{{- partial "disqus.html" . -}}