Hebrew stemming

2009-02-04 Thread Yuval Hager
Hi all,

Does anybody know of a stemming library for Hebrew? Google can find several 
discussions on it, but I could not figure out if something came out of it yet 
or not.

What other things one should consider when looking at a Hebrew search module? 
It seems that Google does very basic stemming + partial words match. Is there 
some form of public work on the subject?

Thanks,

-- 
Yuval Hager


signature.asc
Description: This is a digitally signed message part.
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: Hebrew stemming

2009-02-04 Thread Jonathan Ben Avraham


Start with hspell.

  - yba


--
  EE 77 7F 30 4A 64 2E C5  83 5F E7 49 A6 82 29 BA~. .~   Tk Open Systems
=}ooO--U--Ooo{=
  - y...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -Hi all,



Does anybody know of a stemming library for Hebrew? Google can find several
 

discussions on it, but I could not figure out if something came out of it y
et 

or not.



What other things one should consider when looking at a Hebrew search modul
e? 

It seems that Google does very basic stemming + partial words match. Is the
re 

some form of public work on the subject?



Thanks,



-- 

Yuval Hager



signature.asc
Description: This is a digitally signed message part.
___

Linux-il mailing list

Linux-il@cs.huji.ac.il

http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: Hebrew stemming

2009-02-04 Thread Yuval Hager
On Wednesday 04 February 2009, Jonathan Ben Avraham wrote:
 Start with hspell.

- yba

Thanks, I didn't know it does that. 
I can't seem to find the sources though. All links point to ivrix.org.il, 
which seems to be down.

--yuval


signature.asc
Description: This is a digitally signed message part.
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: Hebrew stemming

2009-02-04 Thread Jonathan Ben Avraham

Try contacting Nadav Har'El n...@math.technion.ac.il.

 - yba


On Wed, 4 Feb 2009, Yuval Hager wrote:


Date: Wed, 4 Feb 2009 11:53:03 +0200
From: Yuval Hager yu...@avramzon.net
To: linux-il@cs.huji.ac.il
Cc: Jonathan Ben Avraham y...@tkos.co.il
Subject: Re: Hebrew stemming

On Wednesday 04 February 2009, Jonathan Ben Avraham wrote:

Start with hspell.

   - yba


Thanks, I didn't know it does that.
I can't seem to find the sources though. All links point to ivrix.org.il,
which seems to be down.

--yuval



--
 EE 77 7F 30 4A 64 2E C5  83 5F E7 49 A6 82 29 BA~. .~   Tk Open Systems
=}ooO--U--Ooo{=
 - y...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


data security

2009-02-04 Thread Erez D
hi

one day this week, i started my computer, it behaved very strange - i had a
blank screen for about 2 minutes before i got the boot screen, then it
continued to boot from ... network
the reason was that the hard drive has died. it wasn't even recognized by
the bios.
the computer was 2 months old, so i replaced the hard drive.

when a hard drive dies and it is under warrenty, we need give the old one
when we want it replaced.
usuallyon the hard drive we have some personal things - pictures, documents,
or confidential data if it belonged to a company etc...
assuming the data is backed up (backing-up is an issue for another thread),
we are left with the possibility of someone retriving data from the damaged
drive.
and when the drive is damaged, we can't even access it to erase that info
before replacing it with a new one.

so i though of a solution - use a crypto FS.
but there are many problems with it.
the practical problems are at least:
1. i do not know of a major linux distibution (i.e. redhat/ubuntu etc... )
that fully support crypto-fs out of the box, so if i use it, i will need to
do manual changes every time i upgrade the system.
2. it is not really secured if the key is stored on disk. however if the key
is not stored on disk, then the computer can not acces the data without
human intervention, which is not good either when it comes to servers.

and guys/girls, take my advice and back-up your data every short while.
everybody thinks it will not happen to him. but it does. it is just a matter
of time.

erez.
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: Hebrew stemming

2009-02-04 Thread Eran Levy
it would be helpful if you will continue your discussion here, thx alot!

On Wed, Feb 4, 2009 at 11:58 AM, Jonathan Ben Avraham y...@tkos.co.il wrote:
 Try contacting Nadav Har'El n...@math.technion.ac.il.

  - yba


 On Wed, 4 Feb 2009, Yuval Hager wrote:

 Date: Wed, 4 Feb 2009 11:53:03 +0200
 From: Yuval Hager yu...@avramzon.net
 To: linux-il@cs.huji.ac.il
 Cc: Jonathan Ben Avraham y...@tkos.co.il
 Subject: Re: Hebrew stemming

 On Wednesday 04 February 2009, Jonathan Ben Avraham wrote:

 Start with hspell.

   - yba

 Thanks, I didn't know it does that.
 I can't seem to find the sources though. All links point to ivrix.org.il,
 which seems to be down.

 --yuval


 --
  EE 77 7F 30 4A 64 2E C5  83 5F E7 49 A6 82 29 BA~. .~   Tk Open Systems
 =}ooO--U--Ooo{=
 - y...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il




-- 
Thanks,
Eran

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Amos Shapira
2009/2/4 Shachar Shemesh shac...@shemesh.biz

 Erez D wrote:


 so i though of a solution - use a crypto FS.
 but there are many problems with it.
 the practical problems are at least:
 1. i do not know of a major linux distibution (i.e. redhat/ubuntu etc... )
 that fully support crypto-fs out of the box, so if i use it, i will need to
 do manual changes every time i upgrade the system.

 Debian does. The installer even offers to install it for you.


And so does Ubuntu.



  2. it is not really secured if the key is stored on disk. however if the
 key is not stored on disk, then the computer can not acces the data without
 human intervention, which is not good either when it comes to servers.

 What I do is to not encrypt everything (which is a good idea anyways). The
 root file system and all of the service directories are not encrypted, and
 only the data is. I also tweak the Debian startup sequence to not ask me for
 the encryption password during boot. This way, the system boots without a
 password (but does not contain any data), and I use a small script to
 perform the actual crypted file system mount later (by which time I can log
 into the machine from ssh).


I didn't bother to use it yet (not quite relevant for my desktops) but I
think current Ubuntu (8.10) also offers to encrypt only your home directory
- so part of your login procedure is to provide the key to mount just the
home directory of the particular user. That way you get the PC up, you don't
get a performance hit from encryption of data you actually don't need to
hide, your data is safe until you login (and then I think it's still
accessible only to you), multiple users can share the computer, each with
their own key.

All this is implied from installing Ubuntu from scratch on my work desktop
last week (finally switched from Debian). No actual experience (yet).

Cheers,

--Amos
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Meir Michanie
What about  /etc/shadow  and other sensitive files? so no encrypting your
root filesystem is also an issue.

What if you put the hard drive under a very strong magnetic field? 

 - Original Message -
 Subject: Re: data security
 From: Shachar Shemesh shac...@shemesh.biz
 To: Orr Dunkelman orr.dunkel...@gmail.com
 CC: linux-il linux-il@cs.huji.ac.il,Erez D erez0...@gmail.com
 Date: 04-02-2009 13:02
 
 
 Orr Dunkelman wrote:
 
 
  I guess that the configuration may still reveal some secrets (like
  which hosts are important enough to be in /etc/hosts), but it's better
  than nothing...
 

 On my laptop, most of the data is not encrypted. I discovered that 
 compiling inside an encrypted partition is horrendously slow. Still, I 
 do it if the data is sensitive (e.g. - all data and sources belonging to 
 clients automatically goes there). I also keep certain important stuff 
 there (my email client folder, my documents folder, browser history 
 etc.) This is fairly easily achieved with symbolic links.
 
 Also, keep in mind that some things are automatically generated but 
 still sensitive. The most important examples are my bash history file ( 
 .bash_history under your home directory) and the database for the 
 locate command (/var/cache/locate). The former shows a history of the 
 commands I type, and the later has a list of all files on the system, 
 including those inside the encrypted directory.
 
 This configuration is more dangerous, no doubt, as it is entirely 
 possible that I have missed something (do share if you think of 
 anything). It works pretty well for me, however.
 
 Shachar
 
 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: Hebrew stemming

2009-02-04 Thread Dvir Volk
I wrote a crude stemming library using hspell's dictionary a few years back.
I didn't put it to use eventually, but i still have the code, i can look it
up if anyone wants.

On Wed, Feb 4, 2009 at 12:11 PM, Eran Levy mceranl...@gmail.com wrote:

 it would be helpful if you will continue your discussion here, thx alot!

 On Wed, Feb 4, 2009 at 11:58 AM, Jonathan Ben Avraham y...@tkos.co.il
 wrote:
  Try contacting Nadav Har'El n...@math.technion.ac.il.
 
   - yba
 
 
  On Wed, 4 Feb 2009, Yuval Hager wrote:
 
  Date: Wed, 4 Feb 2009 11:53:03 +0200
  From: Yuval Hager yu...@avramzon.net
  To: linux-il@cs.huji.ac.il
  Cc: Jonathan Ben Avraham y...@tkos.co.il
  Subject: Re: Hebrew stemming
 
  On Wednesday 04 February 2009, Jonathan Ben Avraham wrote:
 
  Start with hspell.
 
- yba
 
  Thanks, I didn't know it does that.
  I can't seem to find the sources though. All links point to
 ivrix.org.il,
  which seems to be down.
 
  --yuval
 
 
  --
   EE 77 7F 30 4A 64 2E C5  83 5F E7 49 A6 82 29 BA~. .~   Tk Open
 Systems
 
 =}ooO--U--Ooo{=
  - y...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -
 
  ___
  Linux-il mailing list
  Linux-il@cs.huji.ac.il
  http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
 



 --
 Thanks,
 Eran

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Erez D
On Wed, Feb 4, 2009 at 1:10 PM, Meir Michanie me...@riunx.com wrote:

 What about  /etc/shadow  and other sensitive files? so no encrypting your
 root filesystem is also an issue.

 What if you put the hard drive under a very strong magnetic field?


and what if your laptop is stolen ...




  - Original Message -
  Subject: Re: data security
  From: Shachar Shemesh shac...@shemesh.biz
  To: Orr Dunkelman orr.dunkel...@gmail.com
  CC: linux-il linux-il@cs.huji.ac.il,Erez D erez0...@gmail.com
  Date: 04-02-2009 13:02
 
 
  Orr Dunkelman wrote:
  
  
   I guess that the configuration may still reveal some secrets (like
   which hosts are important enough to be in /etc/hosts), but it's better
   than nothing...
  
  
  On my laptop, most of the data is not encrypted. I discovered that
  compiling inside an encrypted partition is horrendously slow. Still, I
  do it if the data is sensitive (e.g. - all data and sources belonging to
  clients automatically goes there). I also keep certain important stuff
  there (my email client folder, my documents folder, browser history
  etc.) This is fairly easily achieved with symbolic links.
 
  Also, keep in mind that some things are automatically generated but
  still sensitive. The most important examples are my bash history file (
  .bash_history under your home directory) and the database for the
  locate command (/var/cache/locate). The former shows a history of the
  commands I type, and the later has a list of all files on the system,
  including those inside the encrypted directory.
 
  This configuration is more dangerous, no doubt, as it is entirely
  possible that I have missed something (do share if you think of
  anything). It works pretty well for me, however.
 
  Shachar
 
  ___
  Linux-il mailing list
  Linux-il@cs.huji.ac.il
  http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Shachar Shemesh

Orr Dunkelman wrote:



The question is whether your swap partition is encrypted or not.

In case it is not - you are probably writing too many secrets to the hard disk.

If it is - well, then I can understand why the machine is slow.
  

It is encrypted, but swap is hardly used on my machine.

And I didn't say my machine was slow. I said that having my entire home 
dir encrypted made compilations slow.

Besides that, knowing about speeds of encryption and hard drives, it
seems that if you use good ciphers, there should be no real
performance lose  (I know that there is such, but I never figured out
why).
  

Maybe because both compilation and encryption are CPU bound?

Shachar

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Moish

Shachar Shemesh wrote:

Orr Dunkelman wrote:



The question is whether your swap partition is encrypted or not.

In case it is not - you are probably writing too many secrets to the 
hard disk.


If it is - well, then I can understand why the machine is slow.
  

It is encrypted, but swap is hardly used on my machine.

And I didn't say my machine was slow. I said that having my entire home 
dir encrypted made compilations slow.

Besides that, knowing about speeds of encryption and hard drives, it
seems that if you use good ciphers, there should be no real
performance lose  (I know that there is such, but I never figured out
why).
  

Maybe because both compilation and encryption are CPU bound?

Shachar


If you are really into that, work with VM and encrypt/decrypt the
directory containing its files. ( Just an example, YMMV )
VM is pretty fast by now, even on desktop machines.

Moish


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Meir Michanie
He asked about what to do with his broken harddisk.

 - Original Message -
 Subject: Re: data security
 From: Erez D erez0...@gmail.com
 To: Meir Michanie me...@riunx.com
 CC: linux-il linux-il@cs.huji.ac.il
 Date: 04-02-2009 13:47
 
 
 On Wed, Feb 4, 2009 at 1:10 PM, Meir Michanie me...@riunx.com wrote:
 
  What about  /etc/shadow  and other sensitive files? so no encrypting
your
  root filesystem is also an issue.
 
  What if you put the hard drive under a very strong magnetic field?
 
 
 and what if your laptop is stolen ...
 
 
 
 
   - Original Message -
   Subject: Re: data security
   From: Shachar Shemesh shac...@shemesh.biz
   To: Orr Dunkelman orr.dunkel...@gmail.com
   CC: linux-il linux-il@cs.huji.ac.il,Erez D erez0...@gmail.com
   Date: 04-02-2009 13:02
  
  
   Orr Dunkelman wrote:
   
   
I guess that the configuration may still reveal some secrets (like
which hosts are important enough to be in /etc/hosts), but it's
better
than nothing...
   
   
   On my laptop, most of the data is not encrypted. I discovered that
   compiling inside an encrypted partition is horrendously slow. Still, I
   do it if the data is sensitive (e.g. - all data and sources belonging
to
   clients automatically goes there). I also keep certain important stuff
   there (my email client folder, my documents folder, browser history
   etc.) This is fairly easily achieved with symbolic links.
  
   Also, keep in mind that some things are automatically generated but
   still sensitive. The most important examples are my bash history file
(
   .bash_history under your home directory) and the database for the
   locate command (/var/cache/locate). The former shows a history of
the
   commands I type, and the later has a list of all files on the system,
   including those inside the encrypted directory.
  
   This configuration is more dangerous, no doubt, as it is entirely
   possible that I have missed something (do share if you think of
   anything). It works pretty well for me, however.
  
   Shachar
  
   ___
   Linux-il mailing list
   Linux-il@cs.huji.ac.il
   http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
 
  ___
  Linux-il mailing list
  Linux-il@cs.huji.ac.il
  http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
 

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Shachar Shemesh

Erez D wrote:


so i though of a solution - use a crypto FS.
but there are many problems with it.
the practical problems are at least:
1. i do not know of a major linux distibution (i.e. redhat/ubuntu 
etc... ) that fully support crypto-fs out of the box, so if i use it, 
i will need to do manual changes every time i upgrade the system.

Debian does. The installer even offers to install it for you.
2. it is not really secured if the key is stored on disk. however if 
the key is not stored on disk, then the computer can not acces the 
data without human intervention, which is not good either when it 
comes to servers.
What I do is to not encrypt everything (which is a good idea anyways). 
The root file system and all of the service directories are not 
encrypted, and only the data is. I also tweak the Debian startup 
sequence to not ask me for the encryption password during boot. This 
way, the system boots without a password (but does not contain any 
data), and I use a small script to perform the actual crypted file 
system mount later (by which time I can log into the machine from ssh).


Hope this helps.
Shachar

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Shachar Shemesh

Orr Dunkelman wrote:



I guess that the configuration may still reveal some secrets (like
which hosts are important enough to be in /etc/hosts), but it's better
than nothing...

  
On my laptop, most of the data is not encrypted. I discovered that 
compiling inside an encrypted partition is horrendously slow. Still, I 
do it if the data is sensitive (e.g. - all data and sources belonging to 
clients automatically goes there). I also keep certain important stuff 
there (my email client folder, my documents folder, browser history 
etc.) This is fairly easily achieved with symbolic links.


Also, keep in mind that some things are automatically generated but 
still sensitive. The most important examples are my bash history file ( 
.bash_history under your home directory) and the database for the 
locate command (/var/cache/locate). The former shows a history of the 
commands I type, and the later has a list of all files on the system, 
including those inside the encrypted directory.


This configuration is more dangerous, no doubt, as it is entirely 
possible that I have missed something (do share if you think of 
anything). It works pretty well for me, however.


Shachar

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Moish

Meir Michanie wrote:

He asked about what to do with his broken harddisk.


- Original Message -
Subject: Re: data security
From: Erez D erez0...@gmail.com
To: Meir Michanie me...@riunx.com
CC: linux-il linux-il@cs.huji.ac.il
Date: 04-02-2009 13:47


On Wed, Feb 4, 2009 at 1:10 PM, Meir Michanie me...@riunx.com wrote:


What about  /etc/shadow  and other sensitive files? so no encrypting

your

root filesystem is also an issue.

What if you put the hard drive under a very strong magnetic field?


and what if your laptop is stolen ...





- Original Message -
Subject: Re: data security
From: Shachar Shemesh shac...@shemesh.biz
To: Orr Dunkelman orr.dunkel...@gmail.com
CC: linux-il linux-il@cs.huji.ac.il,Erez D erez0...@gmail.com
Date: 04-02-2009 13:02


Orr Dunkelman wrote:


I guess that the configuration may still reveal some secrets (like
which hosts are important enough to be in /etc/hosts), but it's

better

than nothing...



On my laptop, most of the data is not encrypted. I discovered that
compiling inside an encrypted partition is horrendously slow. Still, I
do it if the data is sensitive (e.g. - all data and sources belonging

to

clients automatically goes there). I also keep certain important stuff
there (my email client folder, my documents folder, browser history
etc.) This is fairly easily achieved with symbolic links.

Also, keep in mind that some things are automatically generated but
still sensitive. The most important examples are my bash history file

(

.bash_history under your home directory) and the database for the
locate command (/var/cache/locate). The former shows a history of

the

commands I type, and the later has a list of all files on the system,
including those inside the encrypted directory.

This configuration is more dangerous, no doubt, as it is entirely
possible that I have missed something (do share if you think of
anything). It works pretty well for me, however.

Shachar


Take an advice from them:
 http://www.willitblend.com/
   or
Locate road compactors
 http://www.iroads.co.il/MazInternet/General/Pages/HomePage.aspx
   or
buy 
http://www.veritysystems.com/degaussers/hard-drive-degaussers.asp?sub_category=hdd



Moish


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


VIM removal of Unicode ('bomb')

2009-02-04 Thread Noam Rathaus
I am using:
VIM - Vi IMproved 6.1 (2002 Mar 24, compiled Jan 15 2003 08:05:27)

And I have a few unicode characters (unicode encoding 'bomb'/marker) at the 
beginning of the file that I want to remove.
000 bbef 3cbf 4421 434f 5954 4550 6820 6d74

I m referring to 0xbb, 0xef, 0x3c, 0xbf

I would to remove them, but opening the file with vim doesn't show them - as 
they are markers it hides.

Can anyone help me get rid of them?

Any solution (not just using VIM) would be great.

-- 
Noam Rathaus
CTO
no...@beyondsecurity.com
http://www.beyondsecurity.com

Know that you are safe.

Beyond Security Finalist for the Red Herring 100 Global Awards 2007

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Orr Dunkelman
On Wed, Feb 4, 2009 at 12:02 PM, Shachar Shemesh shac...@shemesh.biz wrote:

 Also, keep in mind that some things are automatically generated but still
 sensitive. The most important examples are my bash history file (
 .bash_history under your home directory) and the database for the locate
 command (/var/cache/locate). The former shows a history of the commands I
 type, and the later has a list of all files on the system, including those
 inside the encrypted directory.

Well, there is no problem in changing the location of locate's database, right?

generate /var/sensitive/cache as a third partition, and throw there
whatever you need.

The question is whether your swap partition is encrypted or not.

In case it is not - you are probably writing too many secrets to the hard disk.

If it is - well, then I can understand why the machine is slow.

Besides that, knowing about speeds of encryption and hard drives, it
seems that if you use good ciphers, there should be no real
performance lose  (I know that there is such, but I never figured out
why).


-- 
Orr Dunkelman,
orr.dunkel...@gmail.com

a scientific man ought to have no wishes, no affections, -- a mere
heart of stone - Charles Darwin.

GPG fingerprint: C2D5 C6D6 9A24 9A95 C5B3  2023 6CAB 4A7C B73F D0AA
(This key will never sign Emails, only other PGP keys. The key
corresponds to o...@vipe.technion.ac.il)

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Yuval Hager
This whole encryption thread reminded me of a recent xkcd:

http://xkcd.com/538/

:-)

--y

On Wednesday 04 February 2009, Moish wrote:
 Shachar Shemesh wrote:
  Orr Dunkelman wrote:
  The question is whether your swap partition is encrypted or not.
 
  In case it is not - you are probably writing too many secrets to the
  hard disk.
 
  If it is - well, then I can understand why the machine is slow.
 
  It is encrypted, but swap is hardly used on my machine.
 
  And I didn't say my machine was slow. I said that having my entire home
  dir encrypted made compilations slow.
 
  Besides that, knowing about speeds of encryption and hard drives, it
  seems that if you use good ciphers, there should be no real
  performance lose  (I know that there is such, but I never figured out
  why).
 
  Maybe because both compilation and encryption are CPU bound?
 
  Shachar

 If you are really into that, work with VM and encrypt/decrypt the
 directory containing its files. ( Just an example, YMMV )
 VM is pretty fast by now, even on desktop machines.

 Moish


 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il



-- 
Yuval Hager
[T] +972-77-341-4155
[...@] yu...@avramzon.net


signature.asc
Description: This is a digitally signed message part.
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: VIM removal of Unicode ('bomb')

2009-02-04 Thread Gabor Szabo
On Wed, Feb 4, 2009 at 4:53 PM, Noam Rathaus no...@beyondsecurity.com wrote:
 I am using:
 VIM - Vi IMproved 6.1 (2002 Mar 24, compiled Jan 15 2003 08:05:27)

 And I have a few unicode characters (unicode encoding 'bomb'/marker) at the
 beginning of the file that I want to remove.
 000 bbef 3cbf 4421 434f 5954 4550 6820 6d74

 I m referring to 0xbb, 0xef, 0x3c, 0xbf

 I would to remove them, but opening the file with vim doesn't show them - as
 they are markers it hides.

 Can anyone help me get rid of them?

 Any solution (not just using VIM) would be great.


try this one:

perl -i.bak -0777 -pe 's/^\xbb\xef\x3c\xbf//'   file.txt

it will also create a backup file with .bak extension

seeperldoc perlrun

Gabor

--
Gabor Szabo http://szabgab.com/blog.html
Perl Training in Israel http://www.pti.co.il/
Test Automation Tipshttp://szabgab.com/test_automation_tips.html

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Orr Dunkelman
2009/2/4 Erez D erez0...@gmail.com:

 when a hard drive dies and it is under warrenty, we need give the old one
 when we want it replaced.
 usuallyon the hard drive we have some personal things - pictures, documents,
 or confidential data if it belonged to a company etc...
 assuming the data is backed up (backing-up is an issue for another thread),
 we are left with the possibility of someone retriving data from the damaged
 drive.
 and when the drive is damaged, we can't even access it to erase that info
 before replacing it with a new one.

 so i though of a solution - use a crypto FS.
 but there are many problems with it.
 the practical problems are at least:
 1. i do not know of a major linux distibution (i.e. redhat/ubuntu etc... )
 that fully support crypto-fs out of the box, so if i use it, i will need to
 do manual changes every time i upgrade the system.
 2. it is not really secured if the key is stored on disk. however if the key
 is not stored on disk, then the computer can not acces the data without
 human intervention, which is not good either when it comes to servers.

The solution is thus to have two partitions. One with the OS stuff and
configuration, and one which is encrypted and contains your personal
data.

I guess that the configuration may still reveal some secrets (like
which hosts are important enough to be in /etc/hosts), but it's better
than nothing...

-- 
Orr Dunkelman,
orr.dunkel...@gmail.com

a scientific man ought to have no wishes, no affections, -- a mere
heart of stone - Charles Darwin.

GPG fingerprint: C2D5 C6D6 9A24 9A95 C5B3  2023 6CAB 4A7C B73F D0AA
(This key will never sign Emails, only other PGP keys. The key
corresponds to o...@vipe.technion.ac.il)

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: VIM removal of Unicode ('bomb')

2009-02-04 Thread Yedidyah Bar-David
On Wed, Feb 04, 2009 at 04:53:26PM +0200, Noam Rathaus wrote:
 I am using:
 VIM - Vi IMproved 6.1 (2002 Mar 24, compiled Jan 15 2003 08:05:27)
 
 And I have a few unicode characters (unicode encoding 'bomb'/marker) at the 
 beginning of the file that I want to remove.
 000 bbef 3cbf 4421 434f 5954 4550 6820 6d74
 
 I m referring to 0xbb, 0xef, 0x3c, 0xbf
 
 I would to remove them, but opening the file with vim doesn't show them - as 
 they are markers it hides.
 
 Can anyone help me get rid of them?
 
 Any solution (not just using VIM) would be great.

You can use xxd. Basic stuff is trivial, google for 'vim xxd' for more.
-- 
Didi


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: VIM removal of Unicode ('bomb')

2009-02-04 Thread Shachar Shemesh

Noam Rathaus wrote:

I am using:
VIM - Vi IMproved 6.1 (2002 Mar 24, compiled Jan 15 2003 08:05:27)

And I have a few unicode characters (unicode encoding 'bomb'/marker) at the 
beginning of the file that I want to remove.

000 bbef 3cbf 4421 434f 5954 4550 6820 6d74

I m referring to 0xbb, 0xef, 0x3c, 0xbf

I would to remove them, but opening the file with vim doesn't show them - as 
they are markers it hides.


Can anyone help me get rid of them?

Any solution (not just using VIM) would be great.

  

I would use khexedit, myself, or set the locale to C and open with vim.

Just a technical note: It's BOM - Byte Order Mark. I've never heard of 
bomb (in the Unicode context).


Shachar

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: VIM removal of Unicode ('bomb')

2009-02-04 Thread Shachar Shemesh

Noam Rathaus wrote:

I am using:
VIM - Vi IMproved 6.1 (2002 Mar 24, compiled Jan 15 2003 08:05:27)

And I have a few unicode characters (unicode encoding 'bomb'/marker) at the 
beginning of the file that I want to remove.

000 bbef 3cbf 4421 434f 5954 4550 6820 6d74

I m referring to 0xbb, 0xef, 0x3c, 0xbf
Supplementing my previous answer, your stated byte order is wrong. The 
order is 0xef 0xbb 0xbf. The first three bytes of the file are the BOM. 
The fourth byte, 0x3c, encodes a , and is not part of the meta-data.


Shachar

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: VIM removal of Unicode ('bomb')

2009-02-04 Thread Noam Rathaus
Shachar,

Not my invention :)

do under vim
 :help bomb

It states as you said that the name is BOM

On Wednesday 04 February 2009 19:21:41 Shachar Shemesh wrote:
 Noam Rathaus wrote:
  I am using:
  VIM - Vi IMproved 6.1 (2002 Mar 24, compiled Jan 15 2003 08:05:27)
 
  And I have a few unicode characters (unicode encoding 'bomb'/marker) at
  the beginning of the file that I want to remove.
  000 bbef 3cbf 4421 434f 5954 4550 6820 6d74
 
  I m referring to 0xbb, 0xef, 0x3c, 0xbf
 
  I would to remove them, but opening the file with vim doesn't show them -
  as they are markers it hides.
 
  Can anyone help me get rid of them?
 
  Any solution (not just using VIM) would be great.

 I would use khexedit, myself, or set the locale to C and open with vim.

 Just a technical note: It's BOM - Byte Order Mark. I've never heard of
 bomb (in the Unicode context).

 Shachar


-- 
Noam Rathaus
CTO
no...@beyondsecurity.com
http://www.beyondsecurity.com

Know that you are safe.

Beyond Security Finalist for the Red Herring 100 Global Awards 2007

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: data security

2009-02-04 Thread Oron Peled
On Wednesday, 4 בFebruary 2009, Amos Shapira wrote:
 2009/2/4 Shachar Shemesh shac...@shemesh.biz
  Erez D wrote:
  1. i do not know of a major linux distibution (i.e. redhat/ubuntu etc... 
  Debian does. The installer even offers to install it for you.
 And so does Ubuntu.

And Fedora also of course ;-)

-- 
Oron Peled Voice: +972-4-8228492
o...@actcom.co.il  http://www.actcom.co.il/~oron
No, You Can't Have My Rights, I'm Still Using Them


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


HOT ISP (Was: Orange as a landline ISP)

2009-02-04 Thread Dotan Cohen
 Right now I have a HOT modem and Netvision, which when it works...

 It also happens to be down as I write this and has been for almost 6 hours.

I just left HOT after four years of suffering their constant outages
(I had both internet and VOIP telephone). I went to, of all places,
Bezeq and I've discovered that Bezeq has improved in the past few
years. It is a few (less than ten) shekles more expensive, but so far
the service had been terrific and they even included for me a 4-port
wireless router built into the modem.

I should also mention that the tech who came to my house has been a
Bezeq tech for 14 years. It showed in the way he worked. HOT techs
always look like they just graduated from Yossi's Technical Garden and
when I ask them, they are usually in the field for less than a year. I
understand that HOT is new and growing, but they just don't yet have
the experience that Bezeq has.

-- 
Dotan Cohen

http://what-is-what.com
http://gibberish.co.il

א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه‍-و-ي
А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я
а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я
ä-ö-ü-ß-Ä-Ö-Ü
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: Ubuntu Dok

2009-02-04 Thread Dotan Cohen
 By the way: did anybody have any experience with UNetbootin?
 It is not needed for Ori (because the built-in solution of Ubuntu is
 enough for him), but I ask this question for generic cases, where there
 is no built-in solution.


I have used it but the install failed due to a bug in Ubuntu, the
install failed in the same manner when installed from CD.

-- 
Dotan Cohen

http://what-is-what.com
http://gibberish.co.il

א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه‍-و-ي
А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я
а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я
ä-ö-ü-ß-Ä-Ö-Ü
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: HOT ISP (Was: Orange as a landline ISP)

2009-02-04 Thread Micha Feigin
On Thu, 5 Feb 2009 03:54:09 +0200
Dotan Cohen dotanco...@gmail.com wrote:

  Right now I have a HOT modem and Netvision, which when it works...
 
  It also happens to be down as I write this and has been for almost 6 hours.
 
 I just left HOT after four years of suffering their constant outages
 (I had both internet and VOIP telephone). I went to, of all places,
 Bezeq and I've discovered that Bezeq has improved in the past few
 years. It is a few (less than ten) shekles more expensive, but so far
 the service had been terrific and they even included for me a 4-port
 wireless router built into the modem.
 
 I should also mention that the tech who came to my house has been a
 Bezeq tech for 14 years. It showed in the way he worked. HOT techs
 always look like they just graduated from Yossi's Technical Garden and
 when I ask them, they are usually in the field for less than a year. I
 understand that HOT is new and growing, but they just don't yet have
 the experience that Bezeq has.
 

On the other hand, if you go that way, my neighbour who just went the internet
way with bezeq and is over 70 has a terrible experience with them.

i spent half an hour to convince the guy over the phone that the fact that the
modem disconnects from bezeq every few minutes is not related to the fact that
they forced her to connect to it wirelessly for some reason. They also sent
half way across Haifa to replace it (not sure if she actually did it yet), when
she travels by bus and we actually leave outside Haifa and 1.5km from the
nearest bus station ...

Hot, although the service quality is a bit shitty sent a tech over to my house
about 5 times and replaced the modem at my house twice due to connection
problems.

they are all worthless, it mostly depends on what exactly you need from the at
the time.

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Bogofilter on a shared folder

2009-02-04 Thread Noam Rathaus
Hi,

We have a few shared folders in our Cyrus mail server.

These shared folders do not have a real user behind them, rather more than 
one opens them (via Other Users option).

As such no one filters their incoming emails for spam.

Some background our setup, we use:
1) Postfix for SMTP
2) Procmail for processing of emails
3) Cyrus for IMAP (mail storage)

I wondered if anyone has setup something of this sorts - I couldn't find a 
distinctive guide on the Internet on how to do it:
1) Bogofilter any incoming mail to this folder
2) Allow training (ham and spam) of this bogofilter via two folders that will 
include spam emails - or via forwarding as an attachment to two email 
addresses - whichever is better for bogofilter - I am not sure which

Thank you for the attention.

-- 
Noam Rathaus
CTO
no...@beyondsecurity.com
http://www.beyondsecurity.com

Know that you are safe.

Beyond Security Finalist for the Red Herring 100 Global Awards 2007

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: Israeli sites that are broken under firefox

2009-02-04 Thread Noam Rathaus
Another site for the list:
http://e-services.clalit.org.il

You can login, but basically anything from the menu doesn't work as it 
references document.frames which is an IE only feature.

On Monday 05 January 2009 15:27:09 you wrote:
 Hi,

 On Mon, Jan 5, 2009 at 14:04, Dotan Cohen dotanco...@gmail.com wrote:
  If you have any other IE-only sites, then _please_ let me know. Thanks.

 Website of Beitar Ilit bus company:
 http://www.illit-t.co.il/

 http://forms.gov.il/forms/mot/car/ca...@mot.gov.il.htm

 Looks ugly
 https://www.shaam.gov.il/Shaam_internet/

 A legitimate customer can not login.
 https://www.leumit.co.il


-- 
Noam Rathaus
CTO
no...@beyondsecurity.com
http://www.beyondsecurity.com

Know that you are safe.

Beyond Security Finalist for the Red Herring 100 Global Awards 2007

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: Ubuntu Dok

2009-02-04 Thread Ori Idan
It seems that the DoK solution is not good for me.
The computer I am trying to install on is IBM ThinkPad X31 and it seems that
it can't boot from DoK so although I have a working Ubuntu DoK I can not use
it for my computer.
Does anyone have any idea how can I install Ubuntu on this computer without
a CD?
The computer already has an old version of Debian running on it.

-- 
Ori Idan


On Thu, Feb 5, 2009 at 3:55 AM, Dotan Cohen dotanco...@gmail.com wrote:

  By the way: did anybody have any experience with UNetbootin?
  It is not needed for Ori (because the built-in solution of Ubuntu is
  enough for him), but I ask this question for generic cases, where there
  is no built-in solution.
 

 I have used it but the install failed due to a bug in Ubuntu, the
 install failed in the same manner when installed from CD.

 --
 Dotan Cohen

 http://what-is-what.com
 http://gibberish.co.il

 א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
 ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه‍-و-ي
 А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я
 а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я
 ä-ö-ü-ß-Ä-Ö-Ü
 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: Ubuntu Dok

2009-02-04 Thread Geoffrey S. Mendelson

On Thu, Feb 05, 2009 at 09:06:58AM +0200, Ori Idan wrote:

It seems that the DoK solution is not good for me.
The computer I am trying to install on is IBM ThinkPad X31 and it seems that
it can't boot from DoK so although I have a working Ubuntu DoK I can not use
it for my computer.
Does anyone have any idea how can I install Ubuntu on this computer without
a CD?
The computer already has an old version of Debian running on it.


Are you sure the DOK actually works? It may also be that the DOK does
not work properly with the computer, I have had that problem, but that
was a long time ago. Make sure it is directly connected to the
computer, I have had trouble using a hub when booting from a DOK.

I did a quick web search and found:

http://www.cs.cmu.edu/~dpelleg/X31_freebsd.html

For the purposes of installing, I think it is safe to assume it works the
same with Linux as FreeBSD.

The web page says:

Straightforward, using an external USB CD-ROM.

If you remember my post answering your question, I suggested that an external
DVD drive would do. 


I repeat my offer, if you are in Jerusalem, you are welcome to come here with
it. I have both a working Ubuntu DOK, and an external USB DVD drive.


Geoff.
--
Geoffrey S. Mendelson, Jerusalem, Israel g...@mendelson.com  N3OWJ/4X1GM

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Re: HOT ISP (Was: Orange as a landline ISP)

2009-02-04 Thread Geoffrey S. Mendelson

On Thu, Feb 05, 2009 at 03:54:09AM +0200, Dotan Cohen wrote:


I just left HOT after four years of suffering their constant outages
(I had both internet and VOIP telephone). I went to, of all places,
Bezeq and I've discovered that Bezeq has improved in the past few
years. It is a few (less than ten) shekles more expensive, but so far
the service had been terrific and they even included for me a 4-port
wireless router built into the modem.

I should also mention that the tech who came to my house has been a
Bezeq tech for 14 years. It showed in the way he worked. HOT techs
always look like they just graduated from Yossi's Technical Garden and
when I ask them, they are usually in the field for less than a year. I
understand that HOT is new and growing, but they just don't yet have
the experience that Bezeq has.


Thanks. When I finally called, a tech tested my modem and told me it was
unreachable. The tech put me on hold and came back and told me it was
a wide area outage. 

When it came back, he called me and we went through some diagnostics 
with my modem which had also become hosed. Since then (foo,foo,foo),

it's working fine.

I have the business class service because you could not get a decent
upload speed without it when I upgraded last. I expect by now you can
get better download and upload speeds with the regular service.


Geoff.

--
Geoffrey S. Mendelson, Jerusalem, Israel g...@mendelson.com  N3OWJ/4X1GM

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


Invitation to connect on LinkedIn

2009-02-04 Thread Amichai Rotman
LinkedIn


Amichai Rotman requested to add you as a connection on LinkedIn:
--

Baruch,

I'd like to add you to my professional network on LinkedIn.

- Amichai

View invitation from Amichai Rotman
http://www.linkedin.com/e/hPHQ5pBITDV0c2nfyoJb6QEoY8pMcABe1tM/blk/983015810_2/cBYMcjwRcj0Pe3ALqnpPbOYWrSlI/svi/

--

Why might connecting with Amichai Rotman be a good idea?

Have a question? Amichai Rotman's network will probably have an answer:
You can use LinkedIn Answers to distribute your professional questions to 
Amichai Rotman and your extended network. You can get high-quality answers from 
experienced professionals.

http://www.linkedin.com/e/ash/inv19_ayn/

 
--
(c) 2009, LinkedIn Corporation

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il