Linux-Advocacy Digest #297, Volume #32           Sun, 18 Feb 01 19:13:06 EST

Contents:
  Re: It's just too easy (Mark Styles)
  Re: Microsoft says Linux threatens innovation ("Erik Funkenbusch")
  Re: .NET is plain .NUTS ("Nigel")
  Re: Interesting article (Giuliano Colla)
  Re: MS to Enforce Registration - or Else (Aaron Kulkis)
  Re: Microsoft says Linux threatens innovation ("Erik Funkenbusch")
  Re: Who is the most heavily killfiled person on cola? (Michael Vester)
  Re: .NET is plain .NUTS (Aaron Kulkis)
  Re: Who is the most heavily killfiled person on cola? (Aaron Kulkis)
  Re: .NET is plain .NUTS ("Nigel")
  Re: Microsoft says Linux threatens innovation ("Erik Funkenbusch")
  Re: MS to Enforce Registration - or Else ("Mart van de Wege")
  Re: Whistler/.NET will Help Linux ("Erik Funkenbusch")
  Re: SSH vulnerabilities - still waiting [ was Interesting article ] (Theo de Raadt)
  Re: Information wants to be free, Revisited (Tom Elam)
  Re: The Windows guy. ("Nigel")
  Re: Interesting article ([EMAIL PROTECTED])
  Re: Interesting article ([EMAIL PROTECTED])
  Re: SSH vulnerabilities - still waiting [ was Interesting article ] (J Sloan)
  Re: Whistler/.NET will Help Linux ("Erik Funkenbusch")

----------------------------------------------------------------------------

From: Mark Styles <[EMAIL PROTECTED]>
Subject: Re: It's just too easy
Date: Sun, 18 Feb 2001 18:24:41 -0500

On Sat, 17 Feb 2001 13:04:56 GMT, imekon@$$$REMOVE$$$.freeuk.com (Pete
Goodwin) wrote:

>Peter Köhlmann <[EMAIL PROTECTED]> wrote in 
><[EMAIL PROTECTED]>:
>
>>What D-Link card?
>>I have a D-Link in one of my linux-machines, and it was detected 
>>automatically and runs without any problems.
>
>D-Link DFE-530TX PCI Fast Ethernet Adapter (Rev B).

I have two of these cards in my SuSe Linux machine, both were detected
automagically. All I had to do was assign IP addresses.


------------------------------

From: "Erik Funkenbusch" <[EMAIL PROTECTED]>
Subject: Re: Microsoft says Linux threatens innovation
Date: Sun, 18 Feb 2001 17:38:07 -0600

"Aaron Kulkis" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> > If IBM had not 'open-sourced' the PC architecture, PCs may not have had
> > the success they did.  It may be that the discussion would be
> > open-source v Apple
>
> There were Apple clones in the early 1980's.
>
> Franklin was selling them in 1981.

Franklin was also sued by Apple, and they were forced to discontinue
production.





------------------------------

From: "Nigel" <[EMAIL PROTECTED]>
Subject: Re: .NET is plain .NUTS
Date: 18 Feb 2001 23:33:03 GMT

> Especially when ONE $100 copy of a "professional" grade Linux
> distribution can be ***LEGALLY*** loaded onto every machine
> at a 1500 desktop facility.
> 

Can't imagine this actually happening though - more likely that
each department in the company would get their own copy.
Can you imagine how hard it will be to find the CD if any machine
needs re-installing if only 1 copy exists (of course 1 CD-R per
department all burned from the 1 master is also possible).

------------------------------

From: Giuliano Colla <[EMAIL PROTECTED]>
Crossposted-To: 
alt.destroy.microsoft,comp.os.ms-windows.advocacy,comp.os.ms-windows.nt.advocacy
Subject: Re: Interesting article
Date: Sun, 18 Feb 2001 23:33:12 GMT

Chris Ahlstrom wrote:
> 
> Chad Myers wrote:
> > >
> > >         http://www.uk.research.att.com/vnc/
> >
> > Be careful, however, it's slow, bulky,
> 
> They don't seem to think so:
> 
>         <quote>It is small and simple. The Win32 viewer,
>                 for example, is about 150K in size and
>                 can be run directly from a floppy.
>                 There is no installation needed. </quote>
> 
> > has at least one known exploit,
> 
> Can someone ask him to point to the URL describing this exploit,
> please?
> 
> > and seems to crash a lot.
> 
> Can someone ask him about how he uses it?
> 
> > Do NOT use it over an open network, but rather inside your organization
> > for easier remote access.
> 
> Can someone ask him where he gets this advice?
> 
> > As for remoting Windows desktops in your organization, Terminal Services
> > and NetMeeting's Remote Desktop Sharing are much better.
> 
> Can someone ask him in what way?
> 
> > Win98, WinNT,
> > Windows 2000 all have the RDS functionality.
> 
> Can someone define the RDS acronym for me?
> 
> Chris
> 
> P.S.  Recall that Chad *plonked* me because I'm "Mr. Personal Attack".
>       So he has one less person to contend with.

I can ask him on your behalf, but would you really care to read his
replies?
I believe RDS to be Remote Desktop Sharing, but I don't give a damn.
Most likely it works as if it were a Random Desktop Shutdown.

------------------------------

From: Aaron Kulkis <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc
Subject: Re: MS to Enforce Registration - or Else
Date: Sun, 18 Feb 2001 18:37:37 -0500



The Ghost In The Machine wrote:
> 
> In comp.os.linux.advocacy, Peter Hayes
> <[EMAIL PROTECTED]>
>  wrote
> on Sun, 18 Feb 2001 19:31:32 +0000
> <[EMAIL PROTECTED]>:
> >jtnews <[EMAIL PROTECTED]> wrote:
> >> Who cares about politics or government?
> >> As far as I'm concerned most of the world
> >> governments impose high taxes and do much
> >> more than they should do "for the people".
> >> Everything except law enforcement and the military
> >> should be privatized and out of government
> >> hands.  Then maybe things will get better.
> >
> >Two words. California electricity.
> 
> You confirmed his statement; the problem with California electricity
> is that PG&E did not spend money to upgrade its infrastructure.
> That's because PG&E wasn't allowed to raise rates to market value.
> 
> At the time of the deregulation, we had a healthy surplus of electric
  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Rate controls and deregulation are mutually contradictory.

> power.  It's now a deficit, and PG&E is bleeding badly.
> 
> In other words, the goverment botched the deregulation by imposing
> a price ceiling.

No...the government botched by imposing MORE regulations.

Price control is NOT deregulation, no matter how many times
Kalifornia Kommunists claim it to be...



> 
> At least, that's my understanding of the situation.  TURN and
> other such groups may see things quite differently. :-)
> 
> [.sigsnip]
> 
> --
> [EMAIL PROTECTED] -- insert random misquote here
> EAC code #191       13d:11h:07m actually running Linux.
>                     It's a conspiracy of one.

-- 
Aaron R. Kulkis
Unix Systems Engineer
DNRC Minister of all I survey
ICQ # 3056642


H: "Having found not one single carbon monoxide leak on the entire
    premises, it is my belief, and Willard concurs, that the reason
    you folks feel listless and disoriented is simply because
    you are lazy, stupid people"

I: Loren Petrich's 2-week stubborn refusal to respond to the
   challenge to describe even one philosophical difference
   between himself and the communists demonstrates that, in fact,
   Loren Petrich is a COMMUNIST ***hole

J: Other knee_jerk reactionaries: billh, david casey, redc1c4,
   The retarded sisters: Raunchy (rauni) and Anencephielle (Enielle),
   also known as old hags who've hit the wall....

A:  The wise man is mocked by fools.

B: Jet Silverman plays the fool and spews out nonsense as a
   method of sidetracking discussions which are headed in a
   direction that she doesn't like.
 
C: Jet Silverman claims to have killfiled me.

D: Jet Silverman now follows me from newgroup to newsgroup
   ...despite (C) above.

E: Jet is not worthy of the time to compose a response until
   her behavior improves.

F: Unit_4's "Kook hunt" reminds me of "Jimmy Baker's" harangues against
   adultery while concurrently committing adultery with Tammy Hahn.

G:  Knackos...you're a retard.

------------------------------

From: "Erik Funkenbusch" <[EMAIL PROTECTED]>
Subject: Re: Microsoft says Linux threatens innovation
Date: Sun, 18 Feb 2001 17:46:14 -0600

"Aaron Kulkis" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> They copied EVERY last bit of it...right down to the shape and color
> of the case....even the ventilation slots.

There was some similarity in the Ace 1000 model, but the keyboard was
significantly different and had a different feel to it.  The other Franklin
models were very different.

Apple IIe
http://www.oldbits.de/collection/apple_iie.jpg

Franklin Ace 1000
http://www.oldbits.de/collection/franklin_ace1000.jpg

Franklin Ace 500
http://www.oldbits.de/collection/franklin_ace500.jpg

> I think the only thing that was different was the nameplate.

A bit more.




------------------------------

From: Michael Vester <[EMAIL PROTECTED]>
Subject: Re: Who is the most heavily killfiled person on cola?
Date: Sun, 18 Feb 2001 16:26:43 -0700

J Sloan wrote:
> 
> ono wrote:
> 
> > > It has been very entertaining to watch the Windows advocates
> > > try in vain to discourage the growth of open source. I would
> > What growth? linux 0%, windows 93%.
> > See for yourself at: http://www.thecounter.com/stats/2001/February/os.html
> 
> I had never heard of this site until seeing this link.
> 
> Apparently not many Linux servers make use of their
> page counter function.
> 
> OTOH I could provide web server logs from a site I admin
> that shows Linux has a 65% market share, which is about
> as meaningful as your little counter link.
> 
The web site I over see (a Solaris) reports about 1/2 of all
visitors are still using Netscape 3. I am surprised by that
number but it is only one server with over 1500 web sites (960
are dynamic).  So, if I was a Windows advocate, I would
conclude that 1/2 the world are still Netscape 3. Obviously
not but it shows how misleading statistics are when collected
from a single point. 

We operate one Apache/Solaris production web server and 5 IIs
production servers. Again, the Windows advocate would claim
that we 5 times as many IIS servers than Solaris. But each IIS
server can only handle 10 dynamic web sites.  The Solaris web
site hosts 960 dynamic web sites. The Solaris server handles
almost 20 times as much as 10 IIS servers. The Solaris server
requires 1 part time admin. THe IIS servers require 3 fulltime
MCSE's. The Solaris is never rebooted but the IIS servers are
rebooted weekly if not more often. The Solaris has never
crashed. The IIS servers crash with regularity.

Statistics are meaningless unless you know all the details on
how the numbers were gathered. Counters and log files can be
easily be doctored to favor whatever in the best possible
light. Collecting reliable Linux statistics is probably
impossible. Who is keeping track?  Especially when you don't
need to cut a purchase order to get the software. Linux
consumption cannot be measured in any company that I have ever
worked for.


> BTW help me understand something here -
> 
> You windows zealots angrily and forcefully claim
> that Linux is nothing, it's doomed, it's even inferior
> to windows, etc. So, if that is the case, why are you
> so hung up on Linux?
> 
> Are you trying to convince us, or yourself?
> 
> jjs

- Repetition helps reinforce the belief system. Religious
rituals use the same repetitive methods. Keep saying it over
and over and you will believe.  

- There is also a huge investment of money and time to become
a MCSE. If Microsoft looses it dominate position, all that
MCSE training will not be much use in a Unix world. 
Especially the MCSE's with no other computer education.
According to Microsoft, there is the wrong way and the
Microsoft way. Anyone else knows there is a right way too.

- It is hard to admit that you made a mistake. It took the
Catholic church 400 years of hard physical evidence and 30
years of manned space travel before they finally acknowledged
that Galileo was correct. 

- Be kind to the Windows advocate. Their world is crumbling
around them. 

-- 
Michael Vester
A credible Linux advocate

"The avalanche has started, it is 
too late for the pebbles to vote" 
Kosh, Vorlon Ambassador to Babylon 5

------------------------------

From: Aaron Kulkis <[EMAIL PROTECTED]>
Subject: Re: .NET is plain .NUTS
Date: Sun, 18 Feb 2001 18:40:30 -0500



Bloody Viking wrote:
> 
> mlw ([EMAIL PROTECTED]) wrote:
> 
> : The BSA may be doing our work for us. In a Linux/GNU environment, the BSA can
> : go fuck itself. I think the BSA is probably one of the most disgusting
> : organizations.
> 
> Ah, the irony of the BSA ending up forcing people to use Linux, that
> guarenteed legal freeware UNIX.
> 
> This with the BSA and .NET is utterly disgusting, digital fascism at its
> worst. I'm way ahead of my time I suppose, having switched to Linux in 1994
> _becuse of the cost of software_ and no other reason. And I'm not afraid to
> tell people in real life that I use _UNIX_ at home. (people freak out that I
> don't use Windows)

When they ask you why, tell them 

a) it's EASIER
b) All the standard home/office software is available.
b) one $75 Linux backage has so much software that it would cost
close to $20,000 to buy the equivalents for Windows (and that the
standard home/office software is PART of each distribution).


> 
> Linux on my desktop is here to stay. Either that, or some other freeware UNIX.
> 
> --
> FOOD FOR THOUGHT: 100 calories are used up in the course of a mile run.
> The USDA guidelines for dietary fibre is equal to one ounce of sawdust.
> The liver makes the vast majority of the cholesterol in your bloodstream.

-- 
Aaron R. Kulkis
Unix Systems Engineer
DNRC Minister of all I survey
ICQ # 3056642


H: "Having found not one single carbon monoxide leak on the entire
    premises, it is my belief, and Willard concurs, that the reason
    you folks feel listless and disoriented is simply because
    you are lazy, stupid people"

I: Loren Petrich's 2-week stubborn refusal to respond to the
   challenge to describe even one philosophical difference
   between himself and the communists demonstrates that, in fact,
   Loren Petrich is a COMMUNIST ***hole

J: Other knee_jerk reactionaries: billh, david casey, redc1c4,
   The retarded sisters: Raunchy (rauni) and Anencephielle (Enielle),
   also known as old hags who've hit the wall....

A:  The wise man is mocked by fools.

B: Jet Silverman plays the fool and spews out nonsense as a
   method of sidetracking discussions which are headed in a
   direction that she doesn't like.
 
C: Jet Silverman claims to have killfiled me.

D: Jet Silverman now follows me from newgroup to newsgroup
   ...despite (C) above.

E: Jet is not worthy of the time to compose a response until
   her behavior improves.

F: Unit_4's "Kook hunt" reminds me of "Jimmy Baker's" harangues against
   adultery while concurrently committing adultery with Tammy Hahn.

G:  Knackos...you're a retard.

------------------------------

From: Aaron Kulkis <[EMAIL PROTECTED]>
Subject: Re: Who is the most heavily killfiled person on cola?
Date: Sun, 18 Feb 2001 18:42:14 -0500



Edward Rosten wrote:
> 
> >> I'm just curious as to who is the most heavily killfiled person.
> >>
> >
> >
> > *NEVER* killfile your opponents.  That is conceding defeat.
> >
> 
> When it comes to Chad, he is so blinkered that how ever much you win by,
> he will never admit it. Also, I simply find him offensive.

But failure to respond to his lies connotes "victory: Chad" in the eyes
of the uninformed onlooker.


> 
> There is no fun or utility in arguing with these people, so I deem it a
> waste of time and don't do it.
> 
> -Ed
> 
> --
> Did you know that the reason that windows steam up in cold|Edward Rosten
> weather is because of all the fish in the atmosphere?     |u98ejr
>         - The Hackenthorpe Book of lies                   |@
>                                                           |eng.ox.ac.uk

-- 
Aaron R. Kulkis
Unix Systems Engineer
DNRC Minister of all I survey
ICQ # 3056642


H: "Having found not one single carbon monoxide leak on the entire
    premises, it is my belief, and Willard concurs, that the reason
    you folks feel listless and disoriented is simply because
    you are lazy, stupid people"

I: Loren Petrich's 2-week stubborn refusal to respond to the
   challenge to describe even one philosophical difference
   between himself and the communists demonstrates that, in fact,
   Loren Petrich is a COMMUNIST ***hole

J: Other knee_jerk reactionaries: billh, david casey, redc1c4,
   The retarded sisters: Raunchy (rauni) and Anencephielle (Enielle),
   also known as old hags who've hit the wall....

A:  The wise man is mocked by fools.

B: Jet Silverman plays the fool and spews out nonsense as a
   method of sidetracking discussions which are headed in a
   direction that she doesn't like.
 
C: Jet Silverman claims to have killfiled me.

D: Jet Silverman now follows me from newgroup to newsgroup
   ...despite (C) above.

E: Jet is not worthy of the time to compose a response until
   her behavior improves.

F: Unit_4's "Kook hunt" reminds me of "Jimmy Baker's" harangues against
   adultery while concurrently committing adultery with Tammy Hahn.

G:  Knackos...you're a retard.

------------------------------

From: "Nigel" <[EMAIL PROTECTED]>
Subject: Re: .NET is plain .NUTS
Date: 18 Feb 2001 23:43:00 GMT

> Why mess with this crap in the first place, when GNUware is freely
copyable? 
> You can use one Linux album on every machine if you want. All you need to

> worry about now is the office suite software if you use one. Better to
only 
> have to keep track of the office suite than ALL the fucking software. 
> 

That's easy too - just use Staroffice, Openoffice or Koffice - all free.




------------------------------

From: "Erik Funkenbusch" <[EMAIL PROTECTED]>
Subject: Re: Microsoft says Linux threatens innovation
Date: Sun, 18 Feb 2001 17:57:11 -0600

<[EMAIL PROTECTED]> wrote in message
news:96nchr$ms9$[EMAIL PROTECTED]...
> I am removing you from my killfile.  You are just in need of too much
> help.

If you killfiled me, why did you make such sweeping statements just a few
days ago?

http://groups.google.com/groups?q=msgid:968tl8%24i5k%241%40allenhome.kc.rr.c
om&hl=en&lr=&safe=off&rnum=1&seld=926708034&ic=1

You then failed to respond to my response to your message, obviously
pretending you didn't read it:

http://groups.google.com/groups?q=msgid:BR7i6.984%24k7.163808%40ruti.visi.co
m&hl=en&lr=&safe=off&rnum=1&seld=926405068&ic=1

>     A monopoly never "gives" anything away.  You pay for it by losing
>     the innovations which would have come from their target and by never
>     seeing a hint of newer ideas which would have when others used those
>     new technologies in ways that the monopolists technologies could not
>     be coerced into.

This statement doesn't parse.  It seems like you might be trying to say that
MS prevents people from using technology.  That is simply false, or else
Linux would not exist at all, nor would OS's like BeOS or MacOS X.

>     Erik wake up.  You have been victimized by a criminal organization
>     which provided you with some glitzy toys to distract you.

I've not been victimized by anyone but Red Hat and Mandrake for taking my
money for products that don't work at all.

>     It is not your fault.  Victims don't ask to be abused but nobody but
>     you can get you away from further abuse.

Kill the drama, you can do better than that.






------------------------------

From: "Mart van de Wege" <[EMAIL PROTECTED]>
Subject: Re: MS to Enforce Registration - or Else
Date: Mon, 19 Feb 2001 00:42:54 +0100
Crossposted-To: comp.os.linux.misc

In article <[EMAIL PROTECTED]>,
[EMAIL PROTECTED]  wrote:

> 
> At the time of the deregulation, we had a healthy surplus of
> electric power.  It's now a deficit, and PG&E is bleeding
> badly.
> 
> In other words, the goverment botched the deregulation by
> imposing a price ceiling.
> 
> At least, that's my understanding of the situation.  TURN and
> other such groups may see things quite differently. :-)
> 
> [.sigsnip]
> 
Don't know much about the California situation, but doesn't your
statement imply that the state government was running things
just fine *before* they deregulated?
Inquiring minds want to know, because our government (in the
Netherlands) is reassessing deregulation in the light of the
California energy crisis.

Mart
-- 
Happily running Debian, posting with Pan

------------------------------

From: "Erik Funkenbusch" <[EMAIL PROTECTED]>
Subject: Re: Whistler/.NET will Help Linux
Date: Sun, 18 Feb 2001 18:00:42 -0600

"Tom Wilson" <[EMAIL PROTECTED]> wrote in message
news:oHIj6.106$[EMAIL PROTECTED]...
> You may want to relay to this gentleman that if they port to Linux, we'll
> buy in a heartbeat. CVS is great, but a less-hassle option would be
> better and would save my months of hacking one up myself.

You might try Perforce, or Accurev.  Both have Linux clients and servers.
Both have GUI's.  I prefer the Accurev GUI, it's a little cleaner and
easier.





------------------------------

Crossposted-To: comp.os.ms-windows.nt.advocacy,comp.security.ssh
Subject: Re: SSH vulnerabilities - still waiting [ was Interesting article ]
From: Theo de Raadt <[EMAIL PROTECTED]>
Date: 18 Feb 2001 16:51:27 -0700

"Chad Myers" <[EMAIL PROTECTED]> writes:

> According to the trademark cease-and-desist letter sent to the OpenSSH
> folks from the SSH.com people, OpenSSH only uses the SSH1 protocol,
> but they may be wrong, I guess.

Naw, I wouldn't just call you wrong.

I'd go further and call you an argumentative net-kook idiot who can't
do his own research before opening his mouth and yammering bullshit.

-- 
This space not left unintentionally unblank.            [EMAIL PROTECTED]
Open Source means some restrictions apply, limits are placed, often quite
severe. Free Software has _no_ serious restrictions.  OpenBSD is Free Software.

------------------------------

From: Tom Elam <[EMAIL PROTECTED]>
Crossposted-To: 
comp.sys.mac.advocacy,comp.sys.next.advocacy,comp.os.ms-windows.advocacy
Subject: Re: Information wants to be free, Revisited
Date: Sun, 18 Feb 2001 18:08:03 -0500
Reply-To: [EMAIL PROTECTED]

On 18 Feb 2001 17:13:54 GMT, Tom Elam wrote this reply to John Jensen
<[EMAIL PROTECTED]>:

>At the same time we need to make a buck, we need to live, we need a faster
>car. What we do is tie a string, or anchor in place, the bits we put into
>the digital world. We decide not to let them stray too far. We apply a
>license.
>
>That's our choice, and I don't think we need to make the same choice every
>time. If we believe that is the right of the creators (authors, artists,
>programmers) to dispose of their work as they sees fit, then we must
>accept the choices of creators around us.
>
>It's fair that some people sell things, and some people give things away.


Bingo.  What's not fair is you working 10 years on a novel, putting it on the
market for, say, $7.95 in paperback, and some bozo, against your wishes, scans
it in and posts it on his Web site for anybody to read.  It's your decision,
not some bozo, and not some Web site that thinks copyrighted material "just
oughta be free".

Well said.



--
Tom Elam

"If the facts don't fit the theory, change the facts."
Albert Einstein

------------------------------

From: "Nigel" <[EMAIL PROTECTED]>
Subject: Re: The Windows guy.
Date: 18 Feb 2001 23:56:31 GMT

> MS-DOS..no.
> 
> Digital Research's DR-DOS..yes.
> 

Wasn't DR's multitasking version of dos called
concurrent dos and sold separately to the single
tasking standard DR-DOS?



------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: 
alt.destroy.microsoft,comp.os.ms-windows.advocacy,comp.os.ms-windows.nt.advocacy
Subject: Re: Interesting article
Date: 18 Feb 2001 23:57:35 GMT

In comp.os.linux.advocacy The Ghost In The Machine 
<[EMAIL PROTECTED]> wrote:

> I can only note here that Debian has /var/log/setuid.changes,
> /var/log/setuid.today, and /var/log/setuid.yesterday.  This is
> the equivalent of a security guard making the rounds, at a certain
> time.

Yep, and there are many other packages available which do similar 
things...see Tripwire.

> There are probably other security features which I need to look for.
> An audit record at the kernel level would be nice -- and I suspect
> could easily be added, if it's not in there already.  (I'd be a little
> surprised if it wasn't, but I'd have to look in the kernel source.)

I *think* I saw something in the 2.4.1 kernel config about this, but
I cant remember for sure, and I dont have the source available at the
moment.

>>Explicit deny?  chmod 000, fewel.
>>Inheritance?  Sticky bit, idiot.  -R, buttstick.

> Pedant point: Chad is right, here.  If one has an object tree
> rooted at, say, /a/b/c, in Linux, then changing the rights of /a/b/c
> will not affect the rest of the tree (although chmod -x /a/b/c
> will render the tree inaccessible to all except those proceses
> which were lucky enough to have an inode open -- and those proceses
> will lose the ability to pwd or getcwd(), if I'm not mistaken).

Correct; and this sort of timing can be synthesized with smart 
scripting.

> Whether this is a big issue is not clear to me, however.
> But I'm not a security expert, and most Unix admins will
> use chmod -R, I would suspect.  (The more paranoid might
> use 'find . -type [d|f] [...] -print0 | xargs -0 chmod'.)

I usually use chmod -R.  Its not really a big issue, the chmod 
command can easily be wrapped in a script that will do exactly 
what you want it to to recursive directories.

> (Side point: I would hope chmod -R doesn't propagate through
> subdirectory symbolic links.  However, the manpage says nothing
> regarding same.  NT doesn't have 'em. :-) )

It doesnt naturally propegate through symbolic links, nope. :)




=====.

------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: 
alt.destroy.microsoft,comp.os.ms-windows.advocacy,comp.os.ms-windows.nt.advocacy
Subject: Re: Interesting article
Date: 18 Feb 2001 23:58:45 GMT

In comp.os.linux.advocacy Chad Myers <[EMAIL PROTECTED]> wrote:

> "David Brown" <[EMAIL PROTECTED]> wrote in message
> news:96ojoh$etn$[EMAIL PROTECTED]...
>> Assuming you mean "what's VNC" rather than "what's w/" as other posters seem
>> to think...
>>
>> VNC stands for Virtual Network Computing.  It is a client/server system for
>> controlling desktops over a network, with an efficient communication
>> protocol that works well even with bitmap-type applications (although it is
>> advisable to turn of that 1600x1200x16m background picture when using a
>> dial-up link).  You can mix and match clients and servers (controlling
>> Windows desktops from unix machines, or vice versa, or working with any of a
>> dozen other systems).  Its a great system.
>>
>>         http://www.uk.research.att.com/vnc/

> Be careful, however, it's slow, bulky, has at least one known exploit,
> and seems to crash a lot.
> Do NOT use it over an open network, but rather inside your organization
> for easier remote access.

Unless you pipe it through ssh, in which case you can use it over anything.




=====.


------------------------------

From: J Sloan <[EMAIL PROTECTED]>
Crossposted-To: comp.os.ms-windows.nt.advocacy,comp.security.ssh
Subject: Re: SSH vulnerabilities - still waiting [ was Interesting article ]
Date: Mon, 19 Feb 2001 00:03:48 GMT

Chad Myers wrote:

> ----------------------------------------------------------------
> SSH1 implementations may allow remote system, data compromise
> http://www.securityfocus.com/templates/advisory.html?id=3100
> (OpenSSH uses SSH1, SSH corp uses SSH2)

This wrong. openssh uses both protocols.

> Remote vulnerability in SSH daemon crc32 compensation attack detector
> http://www.securityfocus.com/templates/advisory.html?id=3087

Fixed - and it would have been difficult to exploit in any case.

> SSH protocol 1.5 session key recovery vulnerability
> http://www.securityfocus.com/templates/advisory.html?id=3093
> (admittedly in ver 1 of SSH.com, but still present in OpenSSH)

Old protocol, Linux ships with newer version

> From January 2001:
> ----------------------------------------------------------------
> Hostile server OpenSSH-agent/X11 forwarding
> http://www.securityfocus.com/templates/advisory.html?id=3022

For this to be exploited one has to be very careless -

> Maybe those aren't "huge" in your definition, but it hardly
> looks like SSH or OpenSSH are hardly the paragon of security.

If you don't see the remarkable improvement over telnet,
which is finally a standard in win 2k, there's no hope for you.

> According to the trademark cease-and-desist letter sent to the OpenSSH
> folks from the SSH.com people, OpenSSH only uses the SSH1 protocol,
> but they may be wrong, I guess.

Anyone who has used openssh recently knows that it
supports ssh and ssh2 protocols.

jjs


------------------------------

From: "Erik Funkenbusch" <[EMAIL PROTECTED]>
Subject: Re: Whistler/.NET will Help Linux
Date: Sun, 18 Feb 2001 18:12:04 -0600

"Aaron Kulkis" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> > About the only part of Cairo that was promised that never happened was
the
> > OO File system.
>
> Still lagging behind Unix...which has had an object oriented filesystem
> since the beginning.

Proving, beyond a shadow of a doubt, that you are commenting on something
you don't understand.





------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list by posting to comp.os.linux.advocacy.

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Advocacy Digest
******************************

Reply via email to