Re: [gentoo-user] Gentoo Council vs Umbrella Corp ?

2020-08-28 Thread Ashley Dixon
On Fri, Aug 28, 2020 at 10:15:32PM -0500, Dale wrote: > Ashley Dixon wrote: > > > > Especially considering most Americans do not understand the system (the > > readability of the I.R.S. tax code has been under scrutiny for a long time), > > I wouldn't want to place the burden of conferring with

Re: [gentoo-user] Gentoo Council vs Umbrella Corp ?

2020-08-28 Thread Dale
Ashley Dixon wrote: > > Especially considering most Americans do not understand the system > (the > readability of the I.R.S. tax code has been under scrutiny for a long time), > I > wouldn't want to place the burden of conferring with such a convoluted system > on > anyone. > I

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Michael Orlitzky
On 2020-08-28 20:29, Grant Taylor wrote: > On 8/28/20 6:10 PM, Michael Orlitzky wrote: >> I think I see where we're diverging: I'm assuming that the employees of >> the VPS provider can hop onto any running system with root privileges. > > Perhaps I'm woefully ignorant, but my current working

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread james
On 8/28/20 3:54 PM, Poison BL. wrote: On Mon, Aug 17, 2020 at 12:51 AM Caveman Al Toraboran wrote: hi. context: 1. tinfoil hat is on. 2. i feel disrespected when someone does things to my stuff without getting my approval. 3. vps admin is not trusty and their sys admin may read my

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 6:10 PM, Michael Orlitzky wrote: I think I see where we're diverging: I'm assuming that the employees of the VPS provider can hop onto any running system with root privileges. Perhaps I'm woefully ignorant, but my current working understanding is that no virtual machine hypervisor

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread james
On 8/28/20 5:00 PM, Grant Taylor wrote: On 8/28/20 1:18 PM, antlists wrote: The main reason other applications use "TCP over HTTP(S)" is because stupid network operators block everything else! I agree that filtering is a problem. I also think that it's something that most people can overcome

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 4:45 PM, james wrote: If we can get these codes running on arm64 (R.P.4) surely running them on AMD or intel is trivial? I will be flabbergasted if something would run on the Raspberry Pi that won't run on x86 (Intel / AMD). Presuming that it's complied from common source code.

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Michael Orlitzky
On 2020-08-28 19:43, Grant Taylor wrote: > > The only way to get the key is to extract it out of the running VPS's > memory. Something that I think is beyond the capability of many, but > definitely not all, people. > > ... > > As long as STARTTLS is used (and validated) between the MTAs and

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 4:26 PM, Michael Orlitzky wrote:> The contents of the disk are unencrypted while the server is powered on, or at least while the server is receiving email (while it's reading from and writing to that disk). In practice that will be all the time -- you can't log in and type the

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread james
On 8/28/20 4:56 PM, Grant Taylor wrote: On 8/28/20 1:55 PM, james wrote: I'm proposing, via a small corp I own, to purchase up to (3) dual Rasp.pi 4 setups of (2) R.Pi.4 8gig ram setups and send them to the devs WE all decide on. A few points. 1)� I don't think that 8 GB of RAM is

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Michael Orlitzky
On 2020-08-28 17:53, Grant Taylor wrote: > On 8/28/20 3:33 PM, Michael Orlitzky wrote: >> TLS only secures the channel; what comes out at the end is a plain-text >> message that can be read with minimal effort by the VPS provider, >> no skullduggery needed. > > I agree that STARTTLS only

Re: [gentoo-user] Gentoo Council vs Umbrella Corp ?

2020-08-28 Thread Ashley Dixon
On Fri, Aug 28, 2020 at 10:03:33PM +0100, antlists wrote: > On 28/08/2020 19:10, james wrote: > > > > A council member, from say England, could manage how 1/2 of what they > > raise is spent. It could even "english centric" but must comply with USA > > IRS standards. Our council could be expanded

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 3:33 PM, Michael Orlitzky wrote: TLS only secures the channel; what comes out at the end is a plain-text message that can be read with minimal effort by the VPS provider, no skullduggery needed. I agree that STARTTLS only protects the email while it's in flight between servers.

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Michael Orlitzky
On 2020-08-28 17:12, Grant Taylor wrote: > On 8/28/20 1:54 PM, Poison BL. wrote: >> I'm rather late to the game with this, but at the end of the day, >> mail coming *into* a mail server isn't typically encrypted (and even >> that is only the body, the headers can still reveal a great deal, >>

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 1:54 PM, Poison BL. wrote: I'm rather late to the game with this, but at the end of the day, mail coming *into* a mail server isn't typically encrypted (and even that is only the body, the headers can still reveal a great deal, and are necessary for the server to work with it).

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Dale
james wrote: > On 8/21/20 4:10 PM, Grant Taylor wrote: >> On 8/21/20 11:01 AM, Caveman Al Toraboran wrote: >>> yes, i do consider re-inventing octagonal wheels. >> >> I think that it's occasionally a good thing to have a thought >> experiment about how $THING might be made better. >> >> It's

Re: [gentoo-user] Gentoo Council vs Umbrella Corp ?

2020-08-28 Thread antlists
On 28/08/2020 19:10, james wrote: A council member, from say England, could manage how 1/2 of what they raise is spent. It could even "english centric" but must comply with USA IRS standards. Our council could be expanded to many members, from other countries, with a centic goal of spending

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 1:18 PM, antlists wrote: The main reason other applications use "TCP over HTTP(S)" is because stupid network operators block everything else! I agree that filtering is a problem. I also think that it's something that most people can overcome when they control the firewall between

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 1:55 PM, james wrote: I'm proposing, via a small corp I own, to purchase up to (3) dual Rasp.pi 4 setups of (2) R.Pi.4 8gig ram setups and send them to the devs WE all decide on. A few points. 1) I don't think that 8 GB of RAM is required. -- My email server is a VPS with 2 GB

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread antlists
On 28/08/2020 20:34, J. Roeleveld wrote: Cheers, Wol I think you meant that Caveman doesn't understand what TCP (and UDP) actually is. Grant does seem to know what he is talking about. Sorry yes I did. I got rather confused ... not surprising really :-) Cheers, Wol

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread james
On 8/21/20 4:10 PM, Grant Taylor wrote: On 8/21/20 11:01 AM, Caveman Al Toraboran wrote: yes, i do consider re-inventing octagonal wheels. I think that it's occasionally a good thing to have a thought experiment about how $THING might be made better. It's probably good to have discussions

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Poison BL.
On Mon, Aug 17, 2020 at 12:51 AM Caveman Al Toraboran wrote: > > hi. context: > > 1. tinfoil hat is on. > 2. i feel disrespected when someone does things to >my stuff without getting my approval. > 3. vps admin is not trusty and their sys admin may >read my emails, and laugh at me! > 4.

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread J. Roeleveld
On 28 August 2020 21:27:52 CEST, antlists wrote: >On 26/08/2020 21:21, Grant Taylor wrote: >>> so basically total expected number of protocols/layers used in the >>> universe, per second, will be much less if we, on planet earth, use >a >>> mail system that uses HTTP* instead of RESXCH_*. >>

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread antlists
On 26/08/2020 21:21, Grant Taylor wrote: so basically total expected number of protocols/layers used in the universe, per second, will be much less if we, on planet earth, use a mail system that uses HTTP* instead of RESXCH_*. I obviously disagree. Exactly. You now need a protocol/layer

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread antlists
On 26/08/2020 19:51, Grant Taylor wrote: Just because it's possible to force something to use HTTP(S) does not mean that it's a good idea to do so. The main reason other applications use "TCP over HTTP(S)" is because stupid network operators block everything else! Cheers, Wol

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread antlists
On 26/08/2020 18:40, Grant Taylor wrote: On 8/21/20 10:15 PM, Caveman Al Toraboran wrote: just to double check i got you right.  due to flushing the buffer to disk, this would mean that mail's throughput is limited by disk i/o? Yes. This speed limitation is viewed as a necessary limitation

Re: [gentoo-user] Gentoo Council vs Umbrella Corp ?

2020-08-28 Thread james
On 8/28/20 2:10 PM, james wrote: On 8/28/20 1:20 PM, Dale wrote: Jack wrote: On 8/28/20 12:33 PM, james wrote: On 8/27/20 10:11 PM, Dale wrote: james wrote: Gentoo, https://blogs.gentoo.org/mgorny/2020/08/25/is-an-umbrella-organization-a-good-choice-for-gentoo/ Surely some of the

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Caveman Al Toraboran
‐‐‐ Original Message ‐‐‐ On Friday, August 28, 2020 2:35 AM, Ashley Dixon wrote: > On Thu, Aug 27, 2020 at 09:07:03PM +, Caveman Al Toraboran wrote: > > > anyway i'm out of this. massive waste of time. i > > could've finished server-side hillarymail by it. > > Oh, come on. People on

Re: [gentoo-user] Gentoo Council vs Umbrella Corp ?

2020-08-28 Thread james
On 8/28/20 1:20 PM, Dale wrote: Jack wrote: On 8/28/20 12:33 PM, james wrote: On 8/27/20 10:11 PM, Dale wrote: james wrote: Gentoo, https://blogs.gentoo.org/mgorny/2020/08/25/is-an-umbrella-organization-a-good-choice-for-gentoo/ Surely some of the business/legal savvy folks want to

Re: [gentoo-user] Gentoo Council vs Umbrella Corp ?

2020-08-28 Thread Dale
Jack wrote: > On 8/28/20 12:33 PM, james wrote: >> On 8/27/20 10:11 PM, Dale wrote: >>> james wrote: Gentoo, https://blogs.gentoo.org/mgorny/2020/08/25/is-an-umbrella-organization-a-good-choice-for-gentoo/ Surely some of the business/legal savvy folks

Re: [gentoo-user] Gentoo Council vs Umbrella Corp ?

2020-08-28 Thread Jack
On 8/28/20 12:33 PM, james wrote: On 8/27/20 10:11 PM, Dale wrote: james wrote: Gentoo, https://blogs.gentoo.org/mgorny/2020/08/25/is-an-umbrella-organization-a-good-choice-for-gentoo/ Surely some of the business/legal savvy folks want to "chime in" on Sir Gorny's proposal? I just

Re: [gentoo-user] Gentoo Council vs Umbrella Corp ?

2020-08-28 Thread james
On 8/27/20 10:11 PM, Dale wrote: james wrote: Gentoo, https://blogs.gentoo.org/mgorny/2020/08/25/is-an-umbrella-organization-a-good-choice-for-gentoo/ Surely some of the business/legal savvy folks want to "chime in" on Sir Gorny's proposal? I just read this on 'hacker news' It just

[gentoo-user] Can root verify user is secure?

2020-08-28 Thread Grant
I noticed some strange behavior recently which has since gone away. >From a security standpoint, if root is hacked I suppose there's no way to know, but if not can I use root to determine whether my user is still secure?

Re: [gentoo-user] new mail protocol rfc (was Re: tips on running a mail server in a cheap vps provider run but not-so-trusty admins?)

2020-08-28 Thread Peter Humphrey
On Friday, 28 August 2020 01:30:58 BST Ashley Dixon wrote: > I can't really comment on LaTeX, because I've never really used it; from > the small snippets I've seen, I just assume it's TeX with a hell of a lot > of useful macros. I've always just stuck to TeX, with a copy of the > TeXBook