Re: atexit() and stdio() protection

2012-07-19 Thread Otto Moerbeek
On Wed, Jul 18, 2012 at 10:21:04PM -0600, Theo de Raadt wrote:

 I guess you are talking about mitigation mechanisms.
 
 I am not aware of any stdio protection mechanisms.

well, apart from careful handling of file descriptors everywhere to
make sure fd 0, 1 and 2 remain what they are supposed to be. 

-Otto
 
 However, our atexit has a bizzare quirk, as does our malloc.
 
 These functions protect their own internal data structures by
 mprotect()'ing them as non-writeable after updating them.
 
 It isn't worth mentioning in a manual page.  But if you dug into
 the source code, and the commit logs, you'd see this cleverness in
 action.
 
 It slows malloc down a little bit, but it makes it a lot harder to
 attack the back-end.
 
  I'm trying to dig up information on the atexit() and stdio()
  protection given in the FAQ. I can find lots of statements that this
  protection exists, but I can't find any presentations or papers saying
  what they are and what they do. The man pages for these functions
  don't seem to have anything explicit about this protection.
  
  Any pointers? Man pages I should read?
  
  Thanks,
  ==ml
  
  -- 
  Michael W. Lucas
  http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
  Latest book: SSH Mastery http://www.michaelwlucas.com/nonfiction/ssh-mastery
  mwlu...@michaelwlucas.com, Twitter @mwlauthor



Re: X windows unstable. X -configure not working.

2012-07-19 Thread Jan Stary
On Jul 18 22:22:40, Matthieu Herrb wrote:
 On Mon, Jul 16, 2012 at 06:01:37PM -0700, Steve wrote:
  Hi,
  
  I am having ongoing problems with X. I have highlighted some past
  problems with intel drivers on HP. Unable to get a stable platform even 
  after
  using the vesa driver I have started testing on the Alix machines and am
  getting similar problems.
  
  Is X broken ?
 
 Normally, no. It may have been broken with the geode driver on 5.1,
 but I'd be surprised, espcially on Alix, since I have a 3c3 on which I
 test X regularly.
 
  
  I have many of these machines in
  production on older releases and have had little problems. Just looking to
  refresh as most are running 4.4 or 4.5 but cannot get a stable X 
  environment.
  I would appreciate any thoughts or suggestions.
  
 
 Try a -current snapshot. Also forget about X -configure. It's known to
 be more or less broken and nowadays you don't need an xorg.conf file
 to run X in most cases. 
 
 If you need one, your favourite text editor (plus reading
 xorg.conf(5)) is the best tool to produce one.

That's good to know. On my machine, X -configure segfaults
and produces an xorg.conf.new with two displays (a have one).

Jan



X.Org X Server 1.12.2
Release Date: 2012-05-29
X Protocol Version 11, Revision 0
Build Operating System: OpenBSD 5.2 amd64 
Current Operating System: OpenBSD box.stare.cz 5.2 GENERIC.MP#348 amd64
Build Date: 11 July 2012  11:57:09AM
 
Current version of pixman: 0.24.4
Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
Markers: (--) probed, (**) from config file, (==) default setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
(==) Log file: /var/log/Xorg.0.log, Time: Thu Jul 19 07:53:02 2012
List of video drivers:
apm
ark
ati
chips
cirrus
dummy
glint
i128
intel
mach64
mga
neomagic
nv
openchrome
r128
rendition
s3
s3virge
savage
siliconmotion
sis
tdfx
trident
tseng
radeonold
vmware
vmwlegacy
vmwlegacy
vmwlegacy
wsudl
vesa
(EE) module ABI major version (11) doesn't match the server's version (12)
(EE) module ABI major version (11) doesn't match the server's version (12)
(EE) module ABI major version (11) doesn't match the server's version (12)
(EE) module ABI major version (11) doesn't match the server's version (12)
(EE) module ABI major version (11) doesn't match the server's version (12)
(EE) module ABI major version (11) doesn't match the server's version (12)
(==) Using system config directory /usr/X11R6/share/X11/xorg.conf.d
Segmentation fault at address 0x28

Fatal server error:
Caught signal 11 (Segmentation fault). Server aborting


Please consult the The X.Org Foundation support 
 at http://wiki.x.org
 for help. 
Please also check the log file at /var/log/Xorg.0.log for additional 
information.

Server terminated with error (1). Closing log file.
Abort trap 




Section ServerLayout
Identifier X.org Configured
Screen  0  Screen0 0 0
Screen  1  Screen1 RightOf Screen0
InputDeviceMouse0 CorePointer
InputDeviceKeyboard0 CoreKeyboard
EndSection

Section Files
ModulePath   /usr/X11R6/lib/modules
FontPath /usr/X11R6/lib/X11/fonts/misc/
FontPath /usr/X11R6/lib/X11/fonts/TTF/
FontPath /usr/X11R6/lib/X11/fonts/OTF/
FontPath /usr/X11R6/lib/X11/fonts/Type1/
FontPath /usr/X11R6/lib/X11/fonts/100dpi/
FontPath /usr/X11R6/lib/X11/fonts/75dpi/
EndSection

Section Module
Load  dbe
Load  dri
Load  dri2
Load  extmod
Load  glx
Load  record
EndSection

Section InputDevice
Identifier  Keyboard0
Driver  kbd
EndSection

Section InputDevice
Identifier  Mouse0
Driver  mouse
Option  Protocol wsmouse
Option  Device /dev/wsmouse
Option  ZAxisMapping 4 5 6 7
EndSection

Section Monitor
Identifier   Monitor0
VendorName   Monitor Vendor
ModelNameMonitor Model
EndSection

Section Monitor
Identifier   Monitor1
VendorName   Monitor Vendor
ModelNameMonitor Model
EndSection

Section Device
### Available Driver options are:-
### Values: i: integer, f: float, bool: True/False,
### string: String, freq: f Hz/kHz/MHz,
### percent: f%
### [arg]: arg optional
#Option DRI   # [bool]
#Option ColorKey  # i
#Option VideoKey  # i
#Option ModeDebug # [bool]
#Option 

Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Jan Stary
On Jul 19 11:58:21, David Diggles wrote:
 I am looking for ways to speed up scp over 10GigE.
 With parallel transfer of 4x 8GB files, I get
 the following test results with various ciphers.
 
 These tests maxed out 4 cores with encryption overhead.
 
 SSH Options: []
 42.19127261151704773780 MB/s
 41.32435720074992870891 MB/s
 41.22255300977449037448 MB/s
 35.14314848096707088842 MB/s
 SSH Options: [-o Cipher=arcfour]
 42.29364755264296110810 MB/s
 41.33048144476525498397 MB/s
 40.66949911950141243635 MB/s
 34.96835809940579522864 MB/s
 SSH Options: [-o Cipher=blowfish]
 41.31823477141503563833 MB/s
 41.17589132764324310451 MB/s
 40.60436476031948831063 MB/s
 37.9382821256503154 MB/s
 SSH Options: [-o Ciphers=arcfour]
 63.46934728314239543624 MB/s
 63.12456133140056259549 MB/s
 60.76352210664413222751 MB/s
 58.96905384031456559350 MB/s
 SSH Options: [-o Ciphers=blowfish-cbc]
 41.30803475295660396171 MB/s
 41.07683306590647371566 MB/s
 41.01843094015703567390 MB/s
 37.04298839486332491988 MB/s
 SSH Options: [-o Ciphers=aes256-ctr]
 35.52817257150550157716 MB/s
 35.12986798313667520325 MB/s
 34.83586359188837309574 MB/s
 33.97713352365103381419 MB/s
 SSH Options: [-o Ciphers=3des-cbc]
 14.26907486929738814750 MB/s
 14.23944679498915951801 MB/s
 14.12143966591359995680 MB/s
 13.70012503702996703140 MB/s

have you also tried -o 'Compression no'?

 The data itself is not sensitive and does not really need
 to be encrypted, although security policy between the organisations
 involved may prohibit disabling of encryption. :-/
 
 Any suggestions?  I have searched the list for scp 10gigE
 and only found the following post in 2004.
 
 On Thu, 18 Nov 2004, Jonathan Weiss wrote:
 
  Hi folks,
 
  Somebody had a look at http://www.psc.edu/networking/projects/hpn-ssh/ ?
 
  Greets,
  Jonathan
 
 Lessee, pulling Chris Rapier's card out of my pocket.  I read the poster
 presentation at SuperComputing04 last week in Pittsburgh.  Looks
 interesting but I'm not so sure how useful it would be in real world
 commodity networks.
 
 I'm planning on setting up some boxen with the patched ssh when I get back
 from next week's US Holiday, but I work in a world where 10GigE is already
 installed to selected servers and workstations.
 
 diana
 
 Is there any interest or further development with high bandwidth scp
 since 2004?



Re: Xvideo intel(4)

2012-07-19 Thread Gregory Edigarov

On 07/18/2012 07:05 PM, Stuart Henderson wrote:

On 2012-07-16, Gregory Edigarov ediga...@cupid.com wrote:

Hi,

My new home pc has this card:
vga1 at pci0 dev 2 function 0 Intel HD Graphics 2000 rev 0x09

is there anything I could try to get the full screen video playback working?

Try VLC which has fairly simple controls over output device (in
preferences / video settings / display). It all depends on how fast
your machine is and the type of video you're playing as to whether
it can keep up, but you might get something working. I'm having
mostly good luck with X11 video output (XCB) on an Intel HD
Graphics 3000 but it's worth trying other settings too.

Thank you, Stuart. I will try it.

full dmesg:

thanks.




Re: simple PF rule? redirect port without touching address

2012-07-19 Thread Fil DiNoto
WHOA! that works!

I had no idea you could use the bitmask option like that! Thank You.

Although I haven't tested for any unwanted behavior...  I'll get back
to you if i find any.

On Mon, Jul 9, 2012 at 3:10 PM, Stuart Henderson s...@spacehopper.org wrote:
 On 2012-07-09, Simon Perreault sperrea...@openbsd.org wrote:
 On 2012-07-09 10:17, Stuart Henderson wrote:
 On 2012-07-09, Fil DiNotofdin...@gmail.com  wrote:
 But i was wondering if I could achieve something that would work for
 ALL the addresses behind the router as well without creating
 individual rules for each address. Something like this:

 pass in on egress proto tcp from $location1 to any port ssh rdr-to
 (original destination IP) port XXX22

 nope. easiest option for this is probably a userland proxy.
 not sure but I reckon relayd can probably do it.

 Not even with a bitmask pool?

 pass ... rdr-to 0.0.0.0/0 port XXX22 bitmask

 Simon



 Oh, that's twisted, I like it!



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Dan Shechter
Hi David,

Do you see high CPU during transfer?

If you you don't see high CPU, it _could_ be related to round trip
time and window size.

HTH,
Bring order to your Private VLAN network: http://marathon-networks.com



On Thu, Jul 19, 2012 at 4:58 AM, David Diggles da...@elven.com.au wrote:

 encryption. :-/

 Any suggestions?  I have searched the list for scp 10gigE
 and only found the following post in 2004.



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread David Diggles
On Thu, Jul 19, 2012 at 08:08:26AM +0200, Jan Stary wrote:
 
 have you also tried -o 'Compression no'?


I have now.  No real difference;

SSH Options: [-o Ciphers=arcfour -o Compression=no]
64.68132476895114469583 MB/s
63.56096147431307883010 MB/s
61.69097005503488103824 MB/s
61.41473507203868873527 MB/s

Data in the range of many terabytes, possibly up to petabytes are
expected to go over the link, so the hpn-ssh patch used by HPC sites
looks like the most viable for this - thanks, Michael.

Dan, yes the 4 ssh processes were at 100% cpu, I guess with the
encryption overhead.  Both client and server are 8 core.  There
was no other load at the time of testing, so half cores are
available to service disk and network load.



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

I am looking for ways to speed up scp over 10GigE.
With parallel transfer of 4x 8GB files, I get
the following test results with various ciphers.



is it local network? why do you encrypt at all?


The data itself is not sensitive and does not really need
to be encrypted, although security policy between the organisations
involved may prohibit disabling of encryption. :-/


nonsense. it seems like linux style mantras use ssh, it is secure, rest 
is not.


I regularly do use rsh and rcp in my work.
and ssh/scp when needed (public network)


Your results are already very good, i don't thing you can go much better.



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

maybe off topic but what is MAXPHYS set in compiled kernel?

every BSD flavor i've seen sets it way too low for modern drives.
2MB is smallest IMHO value that make sense on modern drives.

you may experience lots of seeking when reading 4 files from same disk


On Thu, 19 Jul 2012, David Diggles wrote:


On Thu, Jul 19, 2012 at 08:08:26AM +0200, Jan Stary wrote:


have you also tried -o 'Compression no'?



I have now.  No real difference;

SSH Options: [-o Ciphers=arcfour -o Compression=no]
64.68132476895114469583 MB/s
63.56096147431307883010 MB/s
61.69097005503488103824 MB/s
61.41473507203868873527 MB/s

Data in the range of many terabytes, possibly up to petabytes are
expected to go over the link, so the hpn-ssh patch used by HPC sites
looks like the most viable for this - thanks, Michael.

Dan, yes the 4 ssh processes were at 100% cpu, I guess with the
encryption overhead.  Both client and server are 8 core.  There
was no other load at the time of testing, so half cores are
available to service disk and network load.




Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Fil DiNoto
I noticed a huge difference in SCP speeds by changing the client.

For example the client WinSCP is much slower than FileZilla.

I am uncertain if there is any significant difference between SCP and
SFTP protocols (I think SCP2 is SFTP). I know both are handled by the
SSH server.

On Thu, Jul 19, 2012 at 1:38 AM, Wojciech Puchar
woj...@wojtek.tensor.gdynia.pl wrote:
 maybe off topic but what is MAXPHYS set in compiled kernel?

 every BSD flavor i've seen sets it way too low for modern drives.
 2MB is smallest IMHO value that make sense on modern drives.

 you may experience lots of seeking when reading 4 files from same disk



 On Thu, 19 Jul 2012, David Diggles wrote:

 On Thu, Jul 19, 2012 at 08:08:26AM +0200, Jan Stary wrote:


 have you also tried -o 'Compression no'?


 I have now.  No real difference;

 SSH Options: [-o Ciphers=arcfour -o Compression=no]
 64.68132476895114469583 MB/s
 63.56096147431307883010 MB/s
 61.69097005503488103824 MB/s
 61.41473507203868873527 MB/s

 Data in the range of many terabytes, possibly up to petabytes are
 expected to go over the link, so the hpn-ssh patch used by HPC sites
 looks like the most viable for this - thanks, Michael.

 Dan, yes the 4 ssh processes were at 100% cpu, I guess with the
 encryption overhead.  Both client and server are 8 core.  There
 was no other load at the time of testing, so half cores are
 available to service disk and network load.



Special Edition H3G

2012-07-19 Thread noreplay
Questo messaggio contiene immagini grafiche. Se non lo visualizzi
correttamente clicca qui. 



Re: ssh tunneling with -D option

2012-07-19 Thread Paolo Aglialoro
Thank you Aaron

On Thu, Jul 19, 2012 at 3:39 AM, Aaron Mason simplersolut...@gmail.comwrote:

 On Thu, Jul 19, 2012 at 9:07 AM, Paolo Aglialoro paol...@gmail.com
 wrote:

  Issuing the following:
  # dsocks.sh lynx google.com  /dev/null 21
 

 Fixed that for you.  Pipe stdout to /dev/null, then pipe stderr to
 stdout.  If you do it the other way, stderr will still appear on
 stdout.


 --
 Aaron Mason - Programmer, open source addict
 I've taken my software vows - for beta or for worse



Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Kevin Chadwick
 I regularly do use rsh and rcp in my work.
 and ssh/scp when needed (public network)

Do you work with a small trusted group, because many attacks come from
co-workers.

-- 


 Why not do something good every day and install BOINC.




Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

I regularly do use rsh and rcp in my work.
and ssh/scp when needed (public network)


Do you work with a small trusted group, because many attacks come from
co-workers.


depends on assumption. For every business i work i assume that co-workers 
doesn't harm and that's agreed with the boss.


With different assumption i would not just design everything different but 
actually lock every single person in separate room, controlling every more 
(because someone may just go to other room) etc...



I am not paranoid. If in any company you must fear that coworker is a 
security danger then something is definitely wrong with that company and 
it is not my job as an admin to fix it.


That's my opinion, i propose going off list.

And not with free email like @yahoo.co.uk about which you should be 10 
times more feared than over your untrusty coworkers.


my .procmailrc redirect all free emails like this to /dev/null.



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Christian Weisgerber
David Diggles da...@elven.com.au wrote:

 I am looking for ways to speed up scp over 10GigE.
 With parallel transfer of 4x 8GB files, I get
 the following test results with various ciphers.
 
 These tests maxed out 4 cores with encryption overhead.

Assuming that crypto actually is your bottleneck, here are a few
hints:

First, use a faster MAC: -m umac...@openssh.com

 SSH Options: [-o Cipher=arcfour]
 SSH Options: [-o Cipher=blowfish]

These only apply to the SSH1 protocol and are ignored otherwise.

 SSH Options: [-o Ciphers=arcfour]
 SSH Options: [-o Ciphers=blowfish-cbc]
 SSH Options: [-o Ciphers=aes256-ctr]
 SSH Options: [-o Ciphers=3des-cbc]

There are really three interesting ciphers: aes128-ctr, aes128-cbc,
and arcfour128.

aes128-ctr is the default and already plenty fast.

aes128-cbc used to be the default until a security problem with the
way CBC mode is used in the SSH2 protocol was discovered.  In
principle it isn't any faster than aes128-ctr, but in practice it
may be since it uses OpenSSL's optimized EVP_aes_128_cbc() function
while aes128-ctr relies on calls to the low-level AES_encrypt()
primitive.

arcfour128 is the fastest cipher supported.  (Plain arcfour may
be a tad faster, but has known security problems.)

-- 
Christian naddy Weisgerber  na...@mips.inka.de



Re: gimp 2.8 on OpeBSD -current

2012-07-19 Thread Giovanni Bechis
Fred Crowson fred.crow...@gmail.com wrote:
 Hi misc@
 
 I'm getting the following errors when running gimp-2.8.0p0 on OpenBSD
 -current (Jun 28 i386 snapshot):
 
I worked on this during g2k12, it has been fixed in gimp-2.8.0p1.
 Cheers



[SOLVED] Re: How can I send SMS from a umsm(4) usb stick?

2012-07-19 Thread Manolis Tzanidakis
On Tue (10/07/12), Stuart Henderson wrote:
  On Tue, Jul 10, 2012 at 3:59 PM, Manolis Tzanidakis
 mtzanida...@gmail.com wrote:
  Hello,
  I'd like to setup a monitoring system that sends SMS messages when
  something is wrong.
  I'm looking for the simplest possible way to send a message from cli,
  something like:
  $ echo Doomsday is coming! | sendsms +1234567890

  smstools package should do the trick...

After a busy week I finally took some time to try smstools and I'd like
to report that it works.
The port's predefined defaults for /etc/smsd.conf are sane; I only
changed this line:

device = /dev/cuaU0

to find my 3g modem. There are some permissions issues though, easily 
fixed, like eg.:

# usermod -G dialer _smsd

to let the daemon access the device. I guess this could be the default
on a future version of the port, since all tty0? and ttyU? devices
have uucp:dialer ownership. Or at least include this information in the
port's install-message. I'm CC'ing this to the ports@ list for further
discussion..

And the permissions of /var/spool/sms need some tweaking to allow 
non-root users to send sms, but I guess this is sysadmin's work.

Anyway, thanks again for the suggestions. Hope this helps someone else
too.

-- 
Manolis Tzanidakis
http://mtzanidakis.com/
mtzanidakis[at]gmail[dot]com



Re: [SOLVED] Re: How can I send SMS from a umsm(4) usb stick?

2012-07-19 Thread Manolis Tzanidakis
Just installed the package in another system and saw that the install-message
already mentions the permissions fix. Sorry for the noise :).

-- 
Manolis Tzanidakis
mtzanidakis [at] gmail [dot] com
http://mtzanidakis.com/


On Thursday, July 19, 2012 at 4:22 PM, Manolis Tzanidakis wrote:

 On Tue (10/07/12), Stuart Henderson wrote:
   On Tue, Jul 10, 2012 at 3:59 PM, Manolis Tzanidakis
   mtzanida...@gmail.com (mailto:mtzanida...@gmail.com) wrote:
Hello,
I'd like to setup a monitoring system that sends SMS messages when
something is wrong.
I'm looking for the simplest possible way to send a message from cli,
something like:
$ echo Doomsday is coming! | sendsms +1234567890
   
  
  
  
   smstools package should do the trick...
 
 After a busy week I finally took some time to try smstools and I'd like
 to report that it works.
 The port's predefined defaults for /etc/smsd.conf are sane; I only
 changed this line:
 
 device = /dev/cuaU0
 
 to find my 3g modem. There are some permissions issues though, easily 
 fixed, like eg.:
 
 # usermod -G dialer _smsd
 
 to let the daemon access the device. I guess this could be the default
 on a future version of the port, since all tty0? and ttyU? devices
 have uucp:dialer ownership. Or at least include this information in the
 port's install-message. I'm CC'ing this to the ports@ list for further
 discussion..
 
 And the permissions of /var/spool/sms need some tweaking to allow 
 non-root users to send sms, but I guess this is sysadmin's work.
 
 Anyway, thanks again for the suggestions. Hope this helps someone else
 too.
 
 -- 
 Manolis Tzanidakis
 http://mtzanidakis.com/
 mtzanidakis[at]gmail[dot]com



Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Kevin Chadwick
On Thu, 19 Jul 2012 13:47:12 +0200 (CEST)
Wojciech Puchar wrote:

 depends on assumption. For every business i work i assume that co-workers 
 doesn't harm and that's agreed with the boss.


Believe me that will change one day. Never had a trusted employee
poached by a competitor for example?

 
 I am not paranoid. If in any company you must fear that coworker is a 
 security danger then something is definitely wrong with that company and 
 it is not my job as an admin to fix it.
 

I disagree completely. I don't fear it because I cover those risks.


 That's my opinion, i propose going off list.
 
 And not with free email like @yahoo.co.uk about which you should be 10 
 times more feared than over your untrusty coworkers.
 
 my .procmailrc redirect all free emails like this to /dev/null.


In which case I'd have to use my OpenBSD mail server to talk off list.
My yahoo account separates out the many list mails. I sometimes feel a
bit harsh on Yahoo though as I stopped using their web search when
Microsoft took it over.


I'd use ssh over rsh every time except maybe to see if the throughput
increased.



Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

Believe me that will change one day. Never had a trusted employee
poached by a competitor for example?


I just dare to say even greatest software will not solve it.
But believing it will make a danger

Once more i propose moving off list, and you've sent me something 
privately as my logs shows but still from @yahoo.


Please use NORMAL mail account.

In which case I'd have to use my OpenBSD mail server to talk off list.


So do it.


My yahoo account separates out the many list mails. I sometimes feel a
Th problem is not yahoo but all such services. Yahoo, gmail, hotmail, 
@wp.pl etc... are all here to control people. nothing else.


You should avoid every large corporation touching your private data.

Using for mailing lists isn't bad as it's not private.



Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Peter Laufenberg
 My yahoo account separates out the many list mails. I sometimes feel a
Th problem is not yahoo but all such services. Yahoo, gmail, hotmail, 
@wp.pl etc... are all here to control people. nothing else.

You should avoid every large corporation touching your private data.

But... they're free :)

Great quote I forgot where from: when you don't know what the product is -- 
the product is you

-- p



Re: ss20's wanted for ports builds

2012-07-19 Thread Erling Westenvik
On Mon, Jul 16, 2012 at 08:45:30PM +0200, [BG-Consulting] Elmar Bschorer wrote:
 What do you mean with ss20?

Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
seem to find any on ebay though but maybe someone in Russia can provide
shell access?

-- 
Cheers,
Erling

() ascii ribbon campaign - against html e-mail  

/\  



Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Joakim Dellrud
Ontopic: just a noob question, can you use a tcp lb or similar to spread
the load? Thinking relayd and whatever the shared interface is called. Or
are limited to one machine?

Off topic some do not have the will to setup their own mail server. And
they read or reg everything anyway...
On Jul 19, 2012 4:51 PM, Peter Laufenberg open...@laufenberg.ch wrote:



Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

You should avoid every large corporation touching your private data.


But... they're free :)

Great quote I forgot where from: when you don't know what the product is -- the 
product is you


this is what i was talking about. But thanks for citation - it compressed 
my multisentence explanation in a one liner.




Re: ss20's wanted for ports builds

2012-07-19 Thread Wojciech Puchar

What do you mean with ss20?


Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
seem to find any on ebay though but maybe someone in Russia can provide
shell access?
actually shell access is enough for single use. But let's leave that 
weapons to Theo, but i ask for little tactical ones at 1kT range or so. 
feel free to send me an offer. please include transport and activation. I would 
send you my prefered target list.



Seriously, sorry if it's stupid question, but cannot one just run qemu to 
emulate sparcstation (qemu can do this). It would probably be faster than 
real hardware.


Or qemu emulation isn't like real hardware in catching bugs in OpenBSD 
that are CPU dependant?




Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

Ontopic: just a noob question, can you use a tcp lb or similar to spread
the load? Thinking relayd and whatever the shared interface is called. Or
are limited to one machine?


from the topic it seems that network itself and tcp transport isn't a 
problem here.




Re: ss20's wanted for ports builds

2012-07-19 Thread Brian McCafferty

On 07/19/12 10:42, Erling Westenvik wrote:

On Mon, Jul 16, 2012 at 08:45:30PM +0200, [BG-Consulting] Elmar Bschorer wrote:

What do you mean with ss20?


Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
seem to find any on ebay though but maybe someone in Russia can provide
shell access?



I don't have any ss-20 missiles, but I do have a SS5/170(turbosparc). 
Not, sure whether that would be useful or not.  If it's too slow, it 
could possibly be adapted to control your centrifuge farm.




Re: ss20's wanted for ports builds

2012-07-19 Thread Theo de Raadt
 On Mon, Jul 16, 2012 at 08:45:30PM +0200, [BG-Consulting] Elmar Bschorer 
 wrote:
  What do you mean with ss20?
 
 Actually a good question. At least for those old enough to remember the
 Soviet era SS-20 intermediate-range ballistic nucelar missiles.

I'd like one of those too.



Re: ss20's wanted for ports builds

2012-07-19 Thread Theo de Raadt
 On 07/19/12 10:42, Erling Westenvik wrote:
  On Mon, Jul 16, 2012 at 08:45:30PM +0200, [BG-Consulting] Elmar Bschorer 
  wrote:
  What do you mean with ss20?
 
  Actually a good question. At least for those old enough to remember the
  Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
  seem to find any on ebay though but maybe someone in Russia can provide
  shell access?
 
 
 I don't have any ss-20 missiles, but I do have a SS5/170(turbosparc). 
 Not, sure whether that would be useful or not.  If it's too slow, it 
 could possibly be adapted to control your centrifuge farm.

I am trying to use only ss20 machines in the rack, so that I can move
parts back and forth easily.



Re: ss20's wanted for ports builds

2012-07-19 Thread ropers
On 19 July 2012 17:15, Theo de Raadt dera...@cvs.openbsd.org wrote:
 On Mon, Jul 16, 2012 at 08:45:30PM +0200, [BG-Consulting] Elmar Bschorer 
 wrote:
  What do you mean with ss20?

 Actually a good question. At least for those old enough to remember the
 Soviet era SS-20 intermediate-range ballistic nucelar missiles.

 I'd like one of those too.

http://en.wikipedia.org/wiki/SS-20#Decommissioning



Proximo Miercoles - Tecnicas Modernas para Administrar Flotillas de Transporte Terrestre

2012-07-19 Thread Lic. Ericka Lopez Caballero
Técnicas Modernas para Administrar Flotillas de Transporte Terrestre
Panama 25 de julio, 2012

Al finalizar el curso, los participantes contarán con los elementos necesarios
para administrar de manera eficiente una flotilla de Transporte Terrestre.

Obtenga herramientas clave para supervisar y controlar el cumplimiento de:
-Rutas e itinerarios programados.
-Consumo de combustible.
-Horas de llegada - salidas a las escalas programadas.
-Políticas de velocidades y paradas.
-Resguardo de vehículo en lugar y horario programado.
-Control de personal.
-Reducción de costos de operación y mantenimiento.

Reciba en este momento el folleto completo!

Únicamente responda con su Nombre, Puesto, Empresa y Teléfono, o Comuníquese
al 800 5001 / (507) 279-1083 / 279-0258 / 279-0887 en donde con gusto le
atenderé.

Reciba un muy cordial saludo!

Lic. Ericka López Caballero
Líder de Proyectos

Para des suscribirse de estas invitaciones, solo responda este correo con el
SUBJECT des suscribir y automáticamente quedará fuera de nuestras listas.
Este correo ha sido enviado a:



Re: ss20's wanted for ports builds

2012-07-19 Thread Wojciech Puchar

Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles.


I'd like one of those too.



to avoid transport just choose a target and it will be delivered directly.



Re: power button halt vs reboot(8) and halt(8)

2012-07-19 Thread frantisek holop
hmm, on Fri, Jul 13, 2012 at 11:58:40PM +0200, frantisek holop said that
 the reason i ask is, that fairly often, reboot(8) and halt(8)
 hangs (X disappears, but there is only black screen,
 and the console never appears, no syncing disks message),
 but pressing the power button turns off the machine
 without fail every time.  another one of those mysteries..

i would like to add a minor correction, the power button
can also fail as i have experienced later.  but its success
rate seems to be higher.

as suspend does not work on this netbook at the moment,
i will be able to keep statistics about the failures..

-f
-- 
a day without sunshine is like night.



Propuesta

2012-07-19 Thread I-A
Ver con Audio

http://www.youtube.com/watc h?v=X06Ng8K1tmA



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread frantisek holop
hmm, on Thu, Jul 19, 2012 at 02:25:18AM -0700, Fil DiNoto said that
 I noticed a huge difference in SCP speeds by changing the client.

client weirdness is a topic of its own.

for example: total commander sftp plugin.  on my home network:

1. start the transfer: speed around 160 KB/s
2. cancel the transfer
3. start again and click on resume: speed around 2MB/s


-f
-- 
room temperature iq.



Proximo Jueves... Tratados de Libre Comercio en Panama y su Impacto en los Negocios

2012-07-19 Thread Lic. Ericka Lopez Caballero
Novedades en los Tratados de Libre Comercio en Panamá y su Impacto en los
Negocios
Panama 26 de julio, 2012
Los Tratados de Libre Comercio están cambiando la forma de hacer negocios hoy
día y en todas las empresas se debe conocer las normas y herramientas que los
conforman, para evitar estar en desventaja comercial, perdiendo competitividad
y afectando sus resultados.
Quality Training Panamá le ofrece la oportunidad de conocer, los Tratados de
Libre Comercio vigentes y en proceso de negociación dentro de la agenda
comercial de Panamá, preparándolos adecuadamente para la utilización de estos
instrumentos.  La falta de conocimiento de estos acuerdos puede provocar
pérdidas directas en las empresas quitándoles la oportunidad de reducir los
costos, redefinir su comercialización y un rediseño del sistema de logística.
Asista a este seminario y regrese a su empresa con el conocimiento básico para
comprender estos tratados y una caja de herramientas para el mejor
aprovechamiento de estas oportunidades y retos. Incluyendo….
- Conocimiento general de la Agenda Comercial de Panamá.
- Comprensión de los accesos a mercados de exportación e importación.
- Reconocimiento de las normas de origen de los productos negociados.
- Oportunidades de negocios en las compras gubernamentales.
- Información de las Normas de Inversión.
- Conocimiento de las Reglas de Negocios en servicios.
- Herramientas para el uso de los Beneficios Arancelarios.
- Implicaciones de los diferentes Tratados Comerciales vigentes.
- Agenda Comercial a futuro.
Reciba en este momento el folleto completo!
Únicamente responda con su Nombre, Puesto, Empresa y Teléfono, o Comuníquese
al (507) 279-1083 / 279-0258 / 279-0887 en donde con gusto le atenderé.
Reciba un muy cordial saludo!
Lic. Ericka López Caballero
Líder de Proyectos
Para des suscribirse de estas invitaciones, solo responda este correo con el
SUBJECT des suscribir y automáticamente quedará fuera de nuestras listas.
Este correo ha sido enviado enviado a: misc@openbsd.org

[demime 1.01d removed an attachment of type image/jpeg which had a name of 
Trtados_libre_comercio.jpg]



Re: ss20's wanted for ports builds

2012-07-19 Thread Dag Richards

Theo de Raadt wrote:

On Mon, Jul 16, 2012 at 08:45:30PM +0200, [BG-Consulting] Elmar Bschorer wrote:

What do you mean with ss20?

Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles.


I'd like one of those too.




Lets be honest with ouselves sir, with your temper is a nuclear weapon 
really a good idea?



--
IS-IS sleeps.
BGP peers are quiet.
Something must be wrong.



Re: ss20's wanted for ports builds

2012-07-19 Thread Wojciech Puchar
Lets be honest with ouselves sir, with your temper is a nuclear weapon really 
a good idea?



for sure better than in government hands



Polish encoding on console in x window

2012-07-19 Thread Tomasz Marszal
Hi Group.
I have a question to polish users how to set up polish encoding in terminal
in x windows in Open BSD 5.1 i386.
LC_ALL and LC_LOCALE didnt work (works only in bash and i get strange signs
instead of polish dialect signs. Setting wsconsctl keyboard.encoding=pl
also dont give wanted result.

Best Regards 
Tomek Marszal



Re: Polish encoding on console in x window

2012-07-19 Thread Wojciech Puchar

LC_ALL and LC_LOCALE didnt work (works only in bash and i get strange signs
LC_ALL environment variable are not defining console but program behaviour 
(like messages in Polish)




Unicast CARP and static arp entries

2012-07-19 Thread Lee Verberne
A power supply failed in my 2-node OpenBSD 5.1 unicast CARP cluster
recently.  After the failure I noticed that the carp demote counter was
being increased by output errors:

carp: carp0 demoted group carp by 1 to 1 ( snderrors)

I tracked this back to the surviving node being unable to arp for the
ethernet address of its carppeer.  At least, adding static permanent arp
entries stopped the Oerrs on carp0.

I'm planning on adding static arp entries as a best-practice now any
time I use unicast CARP.  I didn't see any documentation or list traffic
on this topic, though, so I thought I'd ask what others do.  Am I
missing something or is this ill-advised?

Thanks,
-lee



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Courtney R. Spencer
On Wed, Jul 18, 2012 at 10:17 PM, David Diggles da...@elven.com.au wrote:
 Hmmm, ok...  hpn-ssh looks like the go.

 http://www.psc.edu/index.php/hpn-ssh
 http://www.nren.nasa.gov/hpn_ssh.html
 http://www.hpsc.csiro.au/userguides/faq/ssh.php#hpn-ssh


hpn-ssh is a very good solution

Along with network buffer tweaks, I routinely use it on BSD, Solaris
and Linux hosts
over long haul private gig and 100meg links to approach the speeds one can
achieve with rcp or rsyncd.

It may not solve your CPU pegging, but in practice where such issues do not
exist, it takes a minute for the sending host to prime the pipe.  The settings
I begin setting higher than the defaults are:

net.inet.tcp.sendspace
net.inet.tcp.recvspace
net.inet.tcp.recvbuf_max
net.inet.tcp.sendbuf_max

There are likely more settings to change and  I'd be interested to see them.

Courtney



Re: ss20's wanted for ports builds

2012-07-19 Thread Kirill Bychkov
On Thu, July 19, 2012 18:42, Erling Westenvik wrote:
 On Mon, Jul 16, 2012 at 08:45:30PM +0200, [BG-Consulting] Elmar Bschorer
 wrote:
 What do you mean with ss20?

 Actually a good question. At least for those old enough to remember the
 Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
 seem to find any on ebay though but maybe someone in Russia can provide
 shell access?

well, even forget to find it in exUSSR ;)
AND NO SHELL ACCESS!!! Only buttons-buttons-buttons!!! If you have luck to
find some.
 --
 Cheers,
 Erling

 () ascii ribbon campaign - against html e-mail
 /\



Re: ss20's wanted for ports builds

2012-07-19 Thread noah pugsley
For fucks sake, just donate already! \
You know you use this shit every day \
I am an absolutely poor loser, I had $18 US (dollars, yech! Real men use
gold or rupees) \
after getting smokes and tall cans (corey, trevor, let's go!) and I just
donated $5. \

If I have to smoke resin until I go recycle cans again y'all can do better
than me.\

--destitute asshole

Thank you for your OpenBSD Order! In case of problems or questions about
this order, \
please contact aus...@openbsd.org Order number 2012/7/19-20:6:50-15264:
Your order \
currently is: - USD $5.00 [DON] DONATION to the OpenBSD Project - Total:
USD \
$5.00 + Shipping.