Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Tomasz Ciolek
Hi guys Perhaps the best way is to sumbmit these patches to the Debian fail2ban maintainer? On Mon, Jul 07, 2014 at 04:41:04PM -0600, Jason Fergus wrote: I run a postfix at home, and I just installed your new package. It does look pretty good so far. Also reminds me I should pay more

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Fabrizio Marocchini
Please remove me from this list thanks a lot On 8 July 2014 09:13, Tomasz Ciolek t...@vandradlabs.com.au wrote: Hi guys Perhaps the best way is to sumbmit these patches to the Debian fail2ban maintainer? On Mon, Jul 07, 2014 at 04:41:04PM -0600, Jason Fergus wrote: I run a postfix at

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Adam D. Barratt
On 2014-07-08 8:13, Tomasz Ciolek wrote: Perhaps the best way is to sumbmit these patches to the Debian fail2ban maintainer? You mean the person who started this thread? :) Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe.

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Armen Igitian
Yaroslav is the maintainer of fail2ban if I am not mistaken On Tue, Jul 8, 2014 at 10:13 AM, Tomasz Ciolek t...@vandradlabs.com.au wrote: Hi guys Perhaps the best way is to sumbmit these patches to the Debian fail2ban maintainer? On Mon, Jul 07, 2014 at 04:41:04PM -0600, Jason Fergus

Re: concrete steps for improving apt downloading security and privacy

2014-07-08 Thread Elias-Daniel Eizenstein
I don't understand why so much noise on this subject. Https for Debian mirrors and a server centralized, maintained and owned by Debian for debsig-verify / debsums packages it will be enough, at least for the next years. PS: from now on I will filter out any email regarding nsa, debian

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Tomasz Ciolek
On Tue, Jul 08, 2014 at 08:51:09AM +0100, Adam D. Barratt wrote: On 2014-07-08 8:13, Tomasz Ciolek wrote: Perhaps the best way is to sumbmit these patches to the Debian fail2ban maintainer? You mean the person who started this thread? :) Duh. having a fail. :) Tomasz -- Tomasz M.

RE: [alerts-security] [SECURITY] [DSA 2973-1] vlc security update

2014-07-08 Thread Xiwen Cheng
N/A -Original Message- From: mendix-alerts-security [mailto:mendix-alerts-security-boun...@lists.knorrie.org] On Behalf Of Moritz Muehlenhoff Sent: Monday, July 07, 2014 11:38 PM To: debian-security-annou...@lists.debian.org Subject: [alerts-security] [SECURITY] [DSA 2973-1] vlc

the calculus of encrypting non-textual data (was Re: concrete steps for improving apt downloading security and privacy)

2014-07-08 Thread Joel Rees
On Tue, Jul 8, 2014 at 5:13 AM, Andrea Zwirner and...@linkspirit.org wrote: On 07/07/2014 13:09, Joel Rees wrote: Sorry Joel, I almost totally disagree with your vision on privacy and security, but I really i don't want to go into the merit of it, because I think Lou is representing my vision

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Jason Fergus
Of course, a guy who uses a gmail account wouldn't be interested in the security of Debian. :D You know you can unsubscribe to it at anytime, right? https://lmddgtfy.net/?q=how+to+unsubscribe+debian+mailing+list On Tue, 2014-07-08 at 09:27 +0200, Fabrizio Marocchini wrote: Please remove me

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Jason Fergus
Of course, a guy who uses a gmail account wouldn't be interested in the security of Debian. :D You know you can unsubscribe to it at anytime, right? https://lmddgtfy.net/?q=how+to+unsubscribe+debian+mailing+list On Tue, 2014-07-08 at 09:27 +0200, Fabrizio Marocchini wrote: Please remove me

Re: the calculus of encrypting non-textual data

2014-07-08 Thread Peter Makholm
Joel Rees joel.r...@gmail.com writes: Did you know that encrypting a picture sometimes results in a picture that looks like it has been through a random color-permuting filter? Can you proof it? Memory of coursework in encryption. The professor did some simple encryption on uncompressed

Re: concrete steps for improving apt downloading security and privacy

2014-07-08 Thread Hans-Christoph Steiner
On 07/07/2014 06:43 PM, Jeremie Marguerie wrote: On Mon, Jul 7, 2014 at 3:15 PM, Lou RUPPERT hims...@louruppert.com wrote: If I'm looking at a catalog page from a shoe store on my table, connected via the phone network, getting close to my 2G cap for my wireless router for the month. My

Re: concrete steps for improving apt downloading security and privacy

2014-07-08 Thread Daniel
On Mon, Jul 07, 2014 at 02:54:15PM -0400, Hans-Christoph Steiner wrote: Do you have another idea for making it difficult for network observers to keep track of the software people are using? Well, you can always mirror the entire repository and configure your server/desktop to use that

Re: the calculus of encrypting non-textual data (was Re: concrete steps for improving apt downloading security and privacy)

2014-07-08 Thread Gunnar Wolf
Joel Rees dijo [Tue, Jul 08, 2014 at 11:11:09PM +0900]: Did you know that encrypting a picture sometimes results in a picture that looks like it has been through a random color-permuting filter? Can you proof it? Memory of coursework in encryption. The professor did some simple

External check

2014-07-08 Thread Raphael Geissert
CVE-2013-4364: RESERVED -- The output might be a bit terse, but the above ids are known elsewhere, check the references in the tracker. The second part indicates the status of that id in the tracker at the moment the script was run. -- To UNSUBSCRIBE, email to