Re: news from my hacked box

2020-04-09 Thread Cord
> > change target. Then a victim that describe a situation outside of this > > schema most > > probably will be classified as a paranoid or a troll. > > Do you have reason to believe, that this evil person has control over your > hardware > deliveries? Do you have some procurement process in

user-agent spoofing info; working around site "requirements"

2020-04-09 Thread Bryan Stenson
most of you already know this. tldr - inferring system requirements from the "user-agent" http header is useless/dangerous/silly, and your site/page stop (nothing new here...not sure why certain sites trust the user-provided data). This is not OpenBSD specific, but hopefully helpful for anyone

SOLUTION: "msk0" freezes in HPmini 2140

2020-04-09 Thread Pekka Niiranen
Hello Misc, I noticed Ethernet channel "Marvell Yukon 88E8072" freezes within a minute unless network speed is set to 100baseTX in "hostname.msk0": media 100baseTX dhcp During installation the "msk0" got DHCP address spuriously, ifconfig down/up does not help. FreeBSD has had the same

Re: secure MTA

2020-04-09 Thread Erling Westenvik
On Thu, Apr 09, 2020 at 04:24:34PM +0100, Kevin Chadwick wrote: > > > Now this whole debate boils down to "how much effort is someone willing to > > invest > > into hacking Cord's computers?", and that's something I can't answer. > > And how competent Cord is at defending his computer because

Re: Having PF enabled breaks up rsync (and scp) over ssh connections

2020-04-09 Thread Stuart Henderson
Are you using PF rules with "overload"? If so, try removing that. On 2020-03-06, Jyri Hovila [Turvamies.fi] wrote: > Hi! > >> Thanks, and sorry I missed in your previous mail that things were working >> OK before. In which case it doesn't sound like a configuration problem >> which I wasn't

Re: BGP and carp slaves

2020-04-09 Thread Luca Bodini
@Gregory: the configuration is just an example, is not a LAB but i changed IP information for privacy @Claudio: Yes there are lots of ways to achieve this, for example "depends on" options that annonunce a route via BGP only if interface link is up (in terms of carp MASTER) let me be more

Re: secure MTA

2020-04-09 Thread Kevin Chadwick
> Now this whole debate boils down to "how much effort is someone willing to > invest > into hacking Cord's computers?", and that's something I can't answer. And how competent Cord is at defending his computer because they may not be able to if he is competent enough, which is my point; It is

Re: 6.7-BETA on Thinkpad P1 with two drives : (FIXED)

2020-04-09 Thread Derek Sivers
On Thu, Apr 09, 2020 at 02:25:49PM +0200, Otto Moerbeek wrote: > You did not tell if you were using EFI or MBR boot. You couldn try the > other one. I never got my X1 6th gen booting with EFI boot. Thank you Otto, and sorry everyone else. I thought I had tried all of the BIOS settings. You're

Re: secure MTA

2020-04-09 Thread Rudolf Leitgeb
> Conversely, if everything was easily hackable then we probably wouldn't use > computers, at all. Being hacked is a risk everybody is ready to accept, some knowingly, some unknowingly. There may be people here, who have never done business with any of these entities listed here, but they are

Re: Ports: how to install dependencies from binaries?

2020-04-09 Thread Marc Espie
On Tue, Apr 07, 2020 at 11:29:50PM -0400, Daniel Jakots wrote: > On Wed, 8 Apr 2020 13:12:54 +1000, Stuart Longland > wrote: > > > Silly question… how do you install the dependencies of a port from > > binaries automatically? > > https://man.openbsd.org/bsd.port.mk#FETCH_PACKAGES but it doesn't

Re: 6.7-BETA on Thinkpad P1 with two drives : (won't boot)

2020-04-09 Thread Otto Moerbeek
On Thu, Apr 09, 2020 at 11:39:08PM +1200, Derek Sivers wrote: > 6.7-BETA (today's snapshot). > > Lenovo ThinkPad P1 2nd gen with two NVMe inside. > > Windows on /dev/sd1 > Installed OpenBSD on /dev/sd0 (a 1TB Samsung 970 pro) > /dev/sd0 has had FreeBSD and Arch Linux on it successfully. > >

Re: secure MTA

2020-04-09 Thread Kevin Chadwick
On 2020-04-09 10:55, Rudolf Leitgeb wrote: > My point was, that security is an ongoing effort. Flaws and new > exploit venues are discovered. There will be different numbers > of flaws for different operating systems, but none remains unscathed > for years. As soon as your server does anything

6.7-BETA on Thinkpad P1 with two drives : (won't boot)

2020-04-09 Thread Derek Sivers
6.7-BETA (today's snapshot). Lenovo ThinkPad P1 2nd gen with two NVMe inside. Windows on /dev/sd1 Installed OpenBSD on /dev/sd0 (a 1TB Samsung 970 pro) /dev/sd0 has had FreeBSD and Arch Linux on it successfully. Installed via USB just fine. Fresh [W]hole disk install. Just default install, no

Re: OpenBSD/sparc64 6.7-beta not working on silver Blade 2500

2020-04-09 Thread Otto Moerbeek
On Wed, Apr 08, 2020 at 07:03:29PM +0200, Sigi Rudzio wrote: > Am Mi., 8. Apr. 2020 um 08:37 Uhr schrieb Otto Moerbeek : > > > > On Wed, Apr 08, 2020 at 01:11:29AM +0200, Sigi Rudzio wrote: > > > > > Hello misc@, > > > > > > while testing the FFS2 patches by otto@ I noticed that I was unable > >

Re: secure MTA (was: news from ...)

2020-04-09 Thread infoomatic
On 09.04.20 11:55, Rudolf Leitgeb wrote: > As soon as your server does anything useful, it will > present an attack vector to the outside world, and one needs to > be aware of it. > just to add to your argument: your server does not even have to do anything ... the interface driver or just the

Re: secure MTA (was: news from ...)

2020-04-09 Thread Rudolf Leitgeb
On Wed, 2020-04-08 at 13:55 -0400, Allan Streib wrote: > My (default) smtpd.conf says: > > listen on lo0 > > So how might that be remotely exploitable? I can disable all network connections on an unpatched Windows 95 laptop - oh, this would make it s secure ... Hint: a server, which