Re: on potato's proftpd

2002-04-06 Thread Petro
On Sat, Apr 06, 2002 at 08:48:59AM +, Martin WHEELER wrote: On Fri, 5 Apr 2002, Petro wrote: You *like* upgrading 100 servers every few days? You'll have to ask the scripts that do that stuff for me :) So you don't mind verifying ever couple days that none of your

Re: on potato's proftpd

2002-04-06 Thread Petro
On Sat, Apr 06, 2002 at 08:48:59AM +, Martin WHEELER wrote: On Fri, 5 Apr 2002, Petro wrote: You *like* upgrading 100 servers every few days? You'll have to ask the scripts that do that stuff for me :) So you don't mind verifying ever couple days that none of your

Re: on potato's proftpd

2002-04-05 Thread Petro
On Thu, Apr 04, 2002 at 06:24:18PM +, Martin WHEELER wrote: On Wed, Apr 03, 2002 at 09:22:34AM +, Martin WHEELER wrote: Release early; release often. On Wed, 3 Apr 2002, Petro wrote: bemfont size=7blinkNO/font/em/b Measure twice, cut once. Fine. You wear the same

Re: on potato's proftpd

2002-04-03 Thread Petro
On Wed, Apr 03, 2002 at 10:56:32AM +0900, Howland, Curtis wrote: I would bet that the vast majority of flame wars begin because someone mistakes terse or concise for hostility. The reverse, being the endless spewing of meaningless words, all the while saying nothing at all or even the

Re: on potato's proftpd

2002-04-03 Thread Petro
On Wed, Apr 03, 2002 at 09:22:34AM +, Martin WHEELER wrote: Release early; release often. bemfont size=7blinkNO/font/em/b Measure twice, cut once. -- Share and Enjoy. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL

Re: on potato's proftpd

2002-04-03 Thread Petro
On Wed, Apr 03, 2002 at 10:56:32AM +0900, Howland, Curtis wrote: I would bet that the vast majority of flame wars begin because someone mistakes terse or concise for hostility. The reverse, being the endless spewing of meaningless words, all the while saying nothing at all or even the

Re: Re: iptables filtering rules

2002-03-27 Thread Petro
On Mon, Mar 25, 2002 at 06:01:45AM -0300, Luiz Carlos Santos de Alencar wrote: Andrew Tait wrote: I've checked up one of that IPs; it's being used right now by a web server pretty much infected with I-Worm.Nimda.A! AVG identification. The standard page delivers a readme.eml file in a pop-up

Re: Re: iptables filtering rules

2002-03-27 Thread Petro
On Mon, Mar 25, 2002 at 06:01:45AM -0300, Luiz Carlos Santos de Alencar wrote: Andrew Tait wrote: I've checked up one of that IPs; it's being used right now by a web server pretty much infected with I-Worm.Nimda.A! AVG identification. The standard page delivers a readme.eml file in a pop-up

Re: failed ssh breakins on my exposed www box ..

2002-03-25 Thread Petro
On Mon, Mar 25, 2002 at 04:50:17PM -0500, Gary MacDougall wrote: Agreed. I'll never understand why people will let crackers reap havoc on a network without issue, but if someone comes up and tries to break into my house, the police will be there in 2 seconds. Hate to break it to you, but

Re: failed ssh breakins on my exposed www box ..

2002-03-25 Thread Petro
On Mon, Mar 25, 2002 at 04:50:17PM -0500, Gary MacDougall wrote: Agreed. I'll never understand why people will let crackers reap havoc on a network without issue, but if someone comes up and tries to break into my house, the police will be there in 2 seconds. Hate to break it to you, but

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Petro
On Sun, Mar 24, 2002 at 12:28:17PM -0500, timothy bauscher wrote: We seriouslly need a US branch of the law-enforcement to deal with this sort of stuff. I respect your opinion, but i would hate to have a new branch of government wasting my tax dollars. If these types of attacks can be

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Petro
On Sun, Mar 24, 2002 at 07:24:18PM +0100, andreas mayer wrote: We seriouslly need a US branch of the law-enforcement to deal with this sort of stuff. ?I think if more people got prosecuted for trying to crack into a site, the level of BS would drop to zero. Yeah! And what if the attacker

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Petro
On Sun, Mar 24, 2002 at 12:28:17PM -0500, timothy bauscher wrote: We seriouslly need a US branch of the law-enforcement to deal with this sort of stuff. I respect your opinion, but i would hate to have a new branch of government wasting my tax dollars. If these types of attacks can be

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Petro
On Sun, Mar 24, 2002 at 07:24:18PM +0100, andreas mayer wrote: We seriouslly need a US branch of the law-enforcement to deal with this sort of stuff. ?I think if more people got prosecuted for trying to crack into a site, the level of BS would drop to zero. Yeah! And what if the attacker

Re: [SECURITY] [DSA 122-1] New zlib other packages fix buffer overflow

2002-03-13 Thread Petro
On Wed, Mar 13, 2002 at 10:36:15AM +, David Hart wrote: On Wed, Mar 13, 2002 at 01:47:57AM +, David Hart wrote: Duh, sorry. As someone else has kindly pointed out, 'potato/woody'/'stable/testing' should be transposed :) (I really shouldn't post at 1:45 in the morning) Why?

Re: Problems with tripwire:

2002-03-13 Thread Petro
On Wed, Mar 13, 2002 at 04:31:01PM +0100, Michel Verdier wrote: Petro [EMAIL PROTECTED] a écrit : | The last match is used, try to switch these ones | | I did, that is the second. I'll try it again. In fact you have 3 /var statements, the order should refine matching like

Re: [SECURITY] [DSA 122-1] New zlib other packages fix buffer overflow

2002-03-13 Thread Petro
On Wed, Mar 13, 2002 at 10:36:15AM +, David Hart wrote: On Wed, Mar 13, 2002 at 01:47:57AM +, David Hart wrote: Duh, sorry. As someone else has kindly pointed out, 'potato/woody'/'stable/testing' should be transposed :) (I really shouldn't post at 1:45 in the morning) Why?

Re: Problems with tripwire:

2002-03-13 Thread Petro
On Wed, Mar 13, 2002 at 04:31:01PM +0100, Michel Verdier wrote: Petro [EMAIL PROTECTED] a ?crit : | The last match is used, try to switch these ones | | I did, that is the second. I'll try it again. In fact you have 3 /var statements, the order should refine matching like

Re: Problems with tripwire:

2002-03-12 Thread Petro
On Tue, Mar 12, 2002 at 08:59:08AM +0100, Martin Peikert wrote: Petro wrote: Is there a file-security scanner like tripwire (or like AIDE) that works across a network? I'm envisioning something that does local file scanning, then transmits the resulting table to a remote (more

Re: Problems with tripwire:

2002-03-12 Thread Petro
On Tue, Mar 12, 2002 at 08:57:40PM +0100, Michel Verdier wrote: Petro [EMAIL PROTECTED] a écrit : | !/var/log/ksymoops/ | /var/log@@LOGSEARCH | | Now, according to my understanding, the ! in front of /var/log/ksymoops/ | should be telling tripwire to ignore things under

Re: Problems with tripwire:

2002-03-12 Thread Petro
On Tue, Mar 12, 2002 at 08:59:08AM +0100, Martin Peikert wrote: Petro wrote: Is there a file-security scanner like tripwire (or like AIDE) that works across a network? I'm envisioning something that does local file scanning, then transmits the resulting table to a remote (more

Re: Problems with tripwire:

2002-03-12 Thread Petro
On Tue, Mar 12, 2002 at 08:57:40PM +0100, Michel Verdier wrote: Petro [EMAIL PROTECTED] a ?crit : | !/var/log/ksymoops/ | /var/log@@LOGSEARCH | | Now, according to my understanding, the ! in front of /var/log/ksymoops/ | should be telling tripwire to ignore things under

Problems with tripwire:

2002-03-11 Thread Petro
I have tripwire installed on one of my servers (Debian Stable), and I've managed to get the configuration pretty quiet, but I'm having a little problem with one or two of them. The particular section of tw.config looks like: /var@@AW !/var/log/ksymoops/ /var/log@@LOGSEARCH

Problems with tripwire:

2002-03-11 Thread Petro
I have tripwire installed on one of my servers (Debian Stable), and I've managed to get the configuration pretty quiet, but I'm having a little problem with one or two of them. The particular section of tw.config looks like: /var@@AW !/var/log/ksymoops/ /var/log@@LOGSEARCH

Re: CERT Advisory CA-2002-05 Multiple Vulnerabilities in PHP fileupload

2002-02-28 Thread Petro
On Thu, Feb 28, 2002 at 08:37:45AM -, Jeff wrote: I received this CERT Advisory about 6 hours ago, regarding PHP. The php website confirms the details: www.php.net I think this is going to be a problem for us, due to the way the Debian packaging works - I guess that the immediate

Security implications of chpasswd.

2002-02-28 Thread Petro
For some very good reasons I had to do a mass change of passwords on one of our exposed login machines (no breach/hack, different reason). There is a utility included in Debian Stable (and the others) to do this called chpasswd. I believe there may be some security

Re: CERT Advisory CA-2002-05 Multiple Vulnerabilities in PHP fileupload

2002-02-28 Thread Petro
On Thu, Feb 28, 2002 at 08:37:45AM -, Jeff wrote: I received this CERT Advisory about 6 hours ago, regarding PHP. The php website confirms the details: www.php.net I think this is going to be a problem for us, due to the way the Debian packaging works - I guess that the immediate

Security implications of chpasswd.

2002-02-28 Thread Petro
For some very good reasons I had to do a mass change of passwords on one of our exposed login machines (no breach/hack, different reason). There is a utility included in Debian Stable (and the others) to do this called chpasswd. I believe there may be some security

Re: webhosting

2002-02-25 Thread Petro
On Mon, Feb 25, 2002 at 02:18:29PM -0700, Jerry Lynde wrote: True, true... But Michael was asking for secure, not non-anal licensing... I don't expect he was gonna try and hack BIND or djbdns or anything else... shrug I just wouldn't suggest anyone use BIND is the same sense that I wouldn't

Re: webhosting

2002-02-25 Thread Petro
On Mon, Feb 25, 2002 at 02:18:29PM -0700, Jerry Lynde wrote: True, true... But Michael was asking for secure, not non-anal licensing... I don't expect he was gonna try and hack BIND or djbdns or anything else... shrug I just wouldn't suggest anyone use BIND is the same sense that I wouldn't

Re: Un-installing inetd on Woody.

2002-02-14 Thread Petro
On Wed, Feb 13, 2002 at 09:39:02PM -0800, Ted Cabeen wrote: You shouldn't use the update-rc.d script to remove init.d scripts. If you do, when you upgrade the package, all of the scripts should be reinstalled. Read the man page for update-rc.d for info on how to turn off a service and ensure

Re: securid logins

2002-01-21 Thread Petro
On Mon, Jan 21, 2002 at 06:16:34AM -0800, martin f krafft wrote: assuming i have SecurID tokens with licenses, can i make linux authenticate based on these *without* the use of external or commercial software (like ACE/Server)? any experience anyone? I don't think so. But I'd be

Re: securid logins

2002-01-21 Thread Petro
On Mon, Jan 21, 2002 at 06:16:34AM -0800, martin f krafft wrote: assuming i have SecurID tokens with licenses, can i make linux authenticate based on these *without* the use of external or commercial software (like ACE/Server)? any experience anyone? I don't think so. But I'd be

Re: Secure 2.4.x kernel

2001-12-28 Thread Petro
On Fri, Dec 28, 2001 at 11:18:35AM +0300, Nyarlathotep wrote: On Fri, 2001-12-28 at 03:22, Howland, Curtis wrote: Naa, it's simian posturing. It happens with humans everywhere. I enjoyed watching it in Good Will Hunting, and two days ago rented Finding Forrester (same movie, different

cdimages.debian.org

2001-12-20 Thread Petro
Is this host offline for good? Shouldn't there be an obvious mirror of this somewhere? -- Share and Enjoy. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: cdimages.debian.org

2001-12-20 Thread Petro
On Thu, Dec 20, 2001 at 04:54:01PM -0800, Brian Bilbrey wrote: On Thu, Dec 20, 2001 at 12:42:17PM -0800, Petro wrote: Is this host offline for good? h. Try cdimage.debian.org (there's no 's' in the url as you put it in the subject: line). However, right now, I'm timing out

cdimages.debian.org

2001-12-20 Thread Petro
Is this host offline for good? Shouldn't there be an obvious mirror of this somewhere? -- Share and Enjoy.

Re: cdimages.debian.org

2001-12-20 Thread Petro
On Thu, Dec 20, 2001 at 04:54:01PM -0800, Brian Bilbrey wrote: On Thu, Dec 20, 2001 at 12:42:17PM -0800, Petro wrote: Is this host offline for good? h. Try cdimage.debian.org (there's no 's' in the url as you put it in the subject: line). However, right now, I'm timing out

Re: cdimages.debian.org

2001-12-20 Thread Petro
On Thu, Dec 20, 2001 at 12:42:17PM -0800, Petro wrote: Is this host offline for good? Shouldn't there be an obvious mirror of this somewhere? I got my answer to the obvious mirror part, and found the information (if not the file) that I was looking for. thanks for all

Re: Spam?!?

2001-12-17 Thread Petro
On Mon, Dec 17, 2001 at 11:48:13PM +0900, Yooseong Yang wrote: can you speak korean? if so give them a call or a nasty email for us. I am be shameful of this kinda spam stuffs as a korean. I send an email to hanmail mail administrator about this kinda problem. If I got some mails from whom

Re: Spam?!?

2001-12-17 Thread Petro
On Mon, Dec 17, 2001 at 11:48:13PM +0900, Yooseong Yang wrote: can you speak korean? if so give them a call or a nasty email for us. I am be shameful of this kinda spam stuffs as a korean. I send an email to hanmail mail administrator about this kinda problem. If I got some mails from whom is

Re: Exim mail

2001-12-14 Thread Petro
On Fri, Dec 14, 2001 at 06:22:03PM -0600, Daniel Rychlik wrote: How do I stop this from happening. Apparently my bud telented to port 25 and somehow sent mail from my root account. Any suggestions, white papers or links? Id would like to block the telnet application all together, but I

Re: Exim mail

2001-12-14 Thread Petro
On Fri, Dec 14, 2001 at 06:22:03PM -0600, Daniel Rychlik wrote: How do I stop this from happening. Apparently my bud telented to port 25 and somehow sent mail from my root account. Any suggestions, white papers or links? Id would like to block the telnet application all together, but I dont

Re: Deducing key from encrypted original data

2001-12-11 Thread Petro
On Tue, Dec 11, 2001 at 01:33:41AM +, Andrew Bolt wrote: ...unless you are from Hollywood - in which case a good encryption scheme is one that can be cracked by having lots of digits flash up on the screen, and gradually have individual digits lock into the correct key. Some wierd

Re: Deducing key from encrypted original data

2001-12-11 Thread Petro
On Tue, Dec 11, 2001 at 01:33:41AM +, Andrew Bolt wrote: ...unless you are from Hollywood - in which case a good encryption scheme is one that can be cracked by having lots of digits flash up on the screen, and gradually have individual digits lock into the correct key. Some wierd

Re: Can a daemon listen only on some interfaces?

2001-12-08 Thread Petro
On Sat, Dec 08, 2001 at 01:40:06AM -0800, [EMAIL PROTECTED] wrote: After reading a previous thread about stopping services from listening on certains ports, I decided to investigate things a little further for my system. So, what I can figure out is that it seems that I have only the

Re: Can a daemon listen only on some interfaces?

2001-12-08 Thread Petro
On Sat, Dec 08, 2001 at 01:40:06AM -0800, [EMAIL PROTECTED] wrote: After reading a previous thread about stopping services from listening on certains ports, I decided to investigate things a little further for my system. So, what I can figure out is that it seems that I have only the

Re: shutdown user and accountability

2001-11-29 Thread Petro
On Thu, Nov 29, 2001 at 05:59:40PM +, Niall Walsh wrote: Carel Fellinger wrote: On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: I can't resist it! me too:) Add a usb digital camera to the box and only allow people who are not I've thought of this too, but rejected it

Re: shutdown user and accountability

2001-11-29 Thread Petro
On Thu, Nov 29, 2001 at 05:59:40PM +, Niall Walsh wrote: Carel Fellinger wrote: On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: I can't resist it! me too:) Add a usb digital camera to the box and only allow people who are not I've thought of this too, but rejected it

Re: shutdown user and accountability

2001-11-28 Thread Petro
On Wed, Nov 28, 2001 at 10:58:47AM +0900, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. That's exactly what my sudo setup does

Re: shutdown user and accountability

2001-11-28 Thread Petro
On Wed, Nov 28, 2001 at 10:58:47AM +0900, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. That's exactly what my sudo setup does

Re: is 3des secure??

2001-11-27 Thread Petro
On Tue, Nov 27, 2001 at 12:44:23PM +0100, Janusz A. Urbanowicz wrote: Petro wrote/napisa?[a]/schrieb: On Mon, Nov 26, 2001 at 12:17:32PM +1100, Steve Smith wrote: 3DES is generally considered strong enough. However, it is slow, and can effect performance. Try doing large 'scp's

Re: is 3des secure??

2001-11-27 Thread Petro
On Tue, Nov 27, 2001 at 12:44:23PM +0100, Janusz A. Urbanowicz wrote: Petro wrote/napisa?[a]/schrieb: On Mon, Nov 26, 2001 at 12:17:32PM +1100, Steve Smith wrote: 3DES is generally considered strong enough. However, it is slow, and can effect performance. Try doing large 'scp's

Re: is 3des secure??

2001-11-26 Thread Petro
On Mon, Nov 26, 2001 at 12:17:32PM +1100, Steve Smith wrote: 3DES is generally considered strong enough. However, it is slow, and can effect performance. Try doing large 'scp's and switch between DES/3DES was designed to be implemented in hardware, doing a software-only

Re: is 3des secure??

2001-11-26 Thread Petro
On Mon, Nov 26, 2001 at 12:17:32PM +1100, Steve Smith wrote: 3DES is generally considered strong enough. However, it is slow, and can effect performance. Try doing large 'scp's and switch between DES/3DES was designed to be implemented in hardware, doing a software-only implementation

Re: is 3des secure??

2001-11-25 Thread Petro
On Mon, Nov 26, 2001 at 09:04:59AM +0900, Howland, Curtis wrote: While this may be whipping a greasy stain on the road, it is true that 3DES was created by the government back when private cryptology was difficult or unknown. I believe it is prudent to consider that it was allowed to be

Re: is 3des secure??

2001-11-25 Thread Petro
On Mon, Nov 26, 2001 at 09:04:59AM +0900, Howland, Curtis wrote: While this may be whipping a greasy stain on the road, it is true that 3DES was created by the government back when private cryptology was difficult or unknown. I believe it is prudent to consider that it was allowed to be used

Re: Mail-server config

2001-11-21 Thread Petro
On Wed, Nov 21, 2001 at 04:34:46PM +0100, Johannes Weiss wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi @all, I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-21 Thread Petro
On Tue, Nov 20, 2001 at 08:25:36PM -0800, Nathan E Norman wrote: On Tue, Nov 20, 2001 at 12:01:32PM -0800, J C Lawrence wrote: On Mon, 19 Nov 2001 21:57:05 -0600 Nathan E Norman Nathan wrote: On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: But his is hugely off topic, and I'll

Re: Mail-server config

2001-11-21 Thread Petro
On Wed, Nov 21, 2001 at 04:34:46PM +0100, Johannes Weiss wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi @all, I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to

Re: Mutt tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 02:47:56PM +0100, Florian Bantner wrote: On Die, 20 Nov 2001, Rolf Kutz wrote: Florian Bantner ([EMAIL PROTECTED]) wrote: A fact about which I'm concerned even more than about a hack from outside via the internet etc. is real physical access to the box.

Re: Mutt tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 03:34:54PM +0100, Rolf Kutz wrote: Alexander Clouter ([EMAIL PROTECTED]) wrote: I am the root guy of my own laptop and I can trust myself :) However a lot of countries (uk/us and probably others, lots in the eu I would imagine) have encryption laws, not

Re: WAY OT (Re: In Praise of Dos (RE: Mutt tmp files))

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 01:00:58PM -0800, Vineet Kumar wrote: * J C Lawrence ([EMAIL PROTECTED]) [011120 12:04]: On Mon, 19 Nov 2001 21:57:05 -0600 Nathan E Norman Nathan wrote: On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: But his is hugely off topic, and I'll go no futher

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 08:25:36PM -0800, Nathan E Norman wrote: On Tue, Nov 20, 2001 at 12:01:32PM -0800, J C Lawrence wrote: On Mon, 19 Nov 2001 21:57:05 -0600 Nathan E Norman Nathan wrote: On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: But his is hugely off topic, and I'll

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-20 Thread Petro
On Mon, Nov 19, 2001 at 07:57:05PM -0800, Nathan E Norman wrote: On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: But his is hugely off topic, and I'll go no futher down this road. Could you at least honor my Mail-Followup-To: header? I would have if I saw it. Mutt

Re: Mutt tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 12:13:05PM +0100, Rolf Kutz wrote: Florian Bantner ([EMAIL PROTECTED]) wrote: A fact about which I'm concerned even more than about a hack from outside via the internet etc. is real physical access to the box. Something hackers normaly don't pay enough attention

Re: Mutt tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 02:47:56PM +0100, Florian Bantner wrote: On Die, 20 Nov 2001, Rolf Kutz wrote: Florian Bantner ([EMAIL PROTECTED]) wrote: A fact about which I'm concerned even more than about a hack from outside via the internet etc. is real physical access to the box.

Re: Mutt tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 03:34:54PM +0100, Rolf Kutz wrote: Alexander Clouter ([EMAIL PROTECTED]) wrote: I am the root guy of my own laptop and I can trust myself :) However a lot of countries (uk/us and probably others, lots in the eu I would imagine) have encryption laws, not

Re: WAY OT (Re: In Praise of Dos (RE: Mutt tmp files))

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 01:00:58PM -0800, Vineet Kumar wrote: * J C Lawrence ([EMAIL PROTECTED]) [011120 12:04]: On Mon, 19 Nov 2001 21:57:05 -0600 Nathan E Norman Nathan wrote: On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: But his is hugely off topic, and I'll go no futher

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 12:30:34AM -0800, Martin Christensen wrote: Petro == Petro [EMAIL PROTECTED] writes: Petro On Mon, Nov 19, 2001 at 10:24:05AM +0900, Howland, Curtis Petro wrote: ps: From a personal perspective, I think Linux is about where Windows 3.0 was. This is not a troll

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 12:46:21PM -0800, James Hamilton wrote: My Gnome/X/Debian GNU/Linux Desktop is much slicker than anything I have ever been able to do with Windows. The Gnome apps have a fairly consistent interface as well. There is a steeper and longer learning curve to learn how

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 02:14:54PM -0800, Nathan E Norman wrote: On Mon, Nov 19, 2001 at 01:47:40PM -0800, Petro wrote: enviroments and applications to figure out what it takes to make a system really consistent and usable for you. Even if you pick some things that aren't quite

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 07:57:05PM -0800, Nathan E Norman wrote: On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: But his is hugely off topic, and I'll go no futher down this road. Could you at least honor my Mail-Followup-To: header? I would have if I saw it. Mutt

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 12:30:34AM -0800, Martin Christensen wrote: Petro == Petro [EMAIL PROTECTED] writes: Petro On Mon, Nov 19, 2001 at 10:24:05AM +0900, Howland, Curtis Petro wrote: ps: From a personal perspective, I think Linux is about where Windows 3.0 was. This is not a troll

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 12:46:21PM -0800, James Hamilton wrote: My Gnome/X/Debian GNU/Linux Desktop is much slicker than anything I have ever been able to do with Windows. The Gnome apps have a fairly consistent interface as well. There is a steeper and longer learning curve to learn how to

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 02:14:54PM -0800, Nathan E Norman wrote: On Mon, Nov 19, 2001 at 01:47:40PM -0800, Petro wrote: enviroments and applications to figure out what it takes to make a system really consistent and usable for you. Even if you pick some things that aren't quite

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-18 Thread Petro
On Mon, Nov 19, 2001 at 10:24:05AM +0900, Howland, Curtis wrote: ps: From a personal perspective, I think Linux is about where Windows 3.0 was. This is not a troll, just a usability thing. No, it's about where win3.11 was in a lot of ways. Modulo the stability etc. -- Share and

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-18 Thread Petro
On Mon, Nov 19, 2001 at 10:24:05AM +0900, Howland, Curtis wrote: ps: From a personal perspective, I think Linux is about where Windows 3.0 was. This is not a troll, just a usability thing. No, it's about where win3.11 was in a lot of ways. Modulo the stability etc. -- Share and

Re: Root is God? (was: Mutt tmp files)

2001-11-16 Thread Petro
On Fri, Nov 16, 2001 at 02:36:30PM +0100, Mathias Gygax wrote: On Fre, Nov 16, 2001 at 04:13:16AM -0900, Ethan Benson wrote: Root is God. Anything you do on the system is potentially visible to root. this is, with the right patches applied, not true. And who has to apply those

Re: Root is God? (was: Mutt tmp files)

2001-11-16 Thread Petro
On Fri, Nov 16, 2001 at 05:39:43PM +0100, Mathias Gygax wrote: On Fre, Nov 16, 2001 at 08:23:27AM -0800, Micah Anderson wrote: There is no way, nor any reason why, to setup a system in such a way that the maintainer of the system cannot maintain it. maintainer is someone else. root is

Re: Mutt tmp files

2001-11-16 Thread Petro
On Thu, Nov 15, 2001 at 10:17:39PM -0800, Wade Richards wrote: Also, what makes you thing root knows what he's doing? I suspect that many people with the root password could not install a tty sniffer or any other spying tool unless they could type apt-get install ttysniffer. dude, like

Re: Mutt tmp files

2001-11-16 Thread Petro
On Thu, Nov 15, 2001 at 11:09:41PM -0800, Craig Dickson wrote: Wade Richards wrote: I still say the bottom line is, if you don't trust root, don't use his machine. This is the sort of absolutist nonsense that gives security experts a bad name. After all, anyone armed with a chainsaw can

Re: Root is God? (was: Mutt tmp files)

2001-11-16 Thread Petro
On Fri, Nov 16, 2001 at 02:36:30PM +0100, Mathias Gygax wrote: On Fre, Nov 16, 2001 at 04:13:16AM -0900, Ethan Benson wrote: Root is God. Anything you do on the system is potentially visible to root. this is, with the right patches applied, not true. And who has to apply those

Re: Root is God? (was: Mutt tmp files)

2001-11-16 Thread Petro
On Fri, Nov 16, 2001 at 05:39:43PM +0100, Mathias Gygax wrote: On Fre, Nov 16, 2001 at 08:23:27AM -0800, Micah Anderson wrote: There is no way, nor any reason why, to setup a system in such a way that the maintainer of the system cannot maintain it. maintainer is someone else. root is there

Re: Mutt tmp files

2001-11-15 Thread Petro
On Thu, Nov 15, 2001 at 11:09:41PM -0800, Craig Dickson wrote: Wade Richards wrote: I still say the bottom line is, if you don't trust root, don't use his machine. This is the sort of absolutist nonsense that gives security experts a bad name. After all, anyone armed with a chainsaw can

Re: Vulnerable SSH versions

2001-11-12 Thread Petro
On Mon, Nov 12, 2001 at 05:54:04PM -0800, Ethan Benson wrote: On Tue, Nov 13, 2001 at 10:10:10AM +0900, Howland, Curtis wrote: I will gladly grant that the tar file may not exist for the boot floppies, and that I do not have on hand the CD to check it. It also may have been a Potato(e)

Re: Vulnerable SSH versions

2001-11-12 Thread Petro
On Mon, Nov 12, 2001 at 05:54:04PM -0800, Ethan Benson wrote: On Tue, Nov 13, 2001 at 10:10:10AM +0900, Howland, Curtis wrote: I will gladly grant that the tar file may not exist for the boot floppies, and that I do not have on hand the CD to check it. It also may have been a Potato(e)

Re: FTP and security

2001-11-08 Thread Petro
On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: Is there a decent Windows FTP application that supports sftp? Unfortunately, I have to use Windows at work. :/ Well, there's always cygwin. It almost makes Windows liveable. On Thu, Nov 08, 2001 at 10:55:17PM +0100,

Re: Questions regarding the Security Secretary Position

2001-10-22 Thread Petro
On Mon, Oct 22, 2001 at 09:40:45AM +0300, Lauri Tischler wrote: Matt Zimmerman wrote: I think the security secretary, if we have one, should be a Debian developer. We have two of them, and they are both card-carrying developers. Unnghhh... 'Card-carrying' sounds like

Re: Questions regarding the Security Secretary Position

2001-10-22 Thread Petro
On Mon, Oct 22, 2001 at 09:40:45AM +0300, Lauri Tischler wrote: Matt Zimmerman wrote: I think the security secretary, if we have one, should be a Debian developer. We have two of them, and they are both card-carrying developers. Unnghhh... 'Card-carrying' sounds like fiery-eyed

Re: central administration techniques

2001-10-19 Thread Petro
On Fri, Oct 19, 2001 at 09:41:22AM -0700, nrvale0 wrote: maybe have a look at cfengine? or apt-cache search / freshmeat / google for other options I was down this road just a few months ago. cfengine is nice except that the author doesn't believe that 'administrative information' is

Re: central administration techniques

2001-10-19 Thread Petro
On Fri, Oct 19, 2001 at 09:41:22AM -0700, nrvale0 wrote: maybe have a look at cfengine? or apt-cache search / freshmeat / google for other options I was down this road just a few months ago. cfengine is nice except that the author doesn't believe that 'administrative information' is

Re: '(no

2001-09-15 Thread Petro
On Sat, Sep 15, 2001 at 10:23:45PM +0300, Momchil Velikov wrote: Dimitri == Dimitri Maziuk [EMAIL PROTECTED] writes: Dimitri In linux.debian.security, you wrote: Dimitri If you suspect your machine was r00ted, Dimitri 1. Take it off the net _now_. Dimitri 2. If you want to do a

Re: '(no

2001-09-15 Thread Petro
On Sat, Sep 15, 2001 at 10:23:45PM +0300, Momchil Velikov wrote: Dimitri == Dimitri Maziuk [EMAIL PROTECTED] writes: Dimitri In linux.debian.security, you wrote: Dimitri If you suspect your machine was r00ted, Dimitri 1. Take it off the net _now_. Dimitri 2. If you want to do a post-mortem,

Re: Why do people do this? [Was fishingboat in root]

2001-09-01 Thread Petro
On Sat, Sep 01, 2001 at 01:10:04PM +1000, CaT wrote: On Fri, Aug 31, 2001 at 10:48:37PM -0400, Layne wrote: SUCK MY COCK IF YOU SEND ME ANY MORE SPAM MAIL *gets out a pippet, a microscope and a vacuum cleaner* I'd suggest using a sledge hammer with that pipette. A clue for Layne:

Re: Layne (was: Re: Is ident secure?)

2001-09-01 Thread Petro
On Fri, Aug 31, 2001 at 11:54:40PM -0400, Ed Street wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, If not is anyone up for a road trip? ;) Usually. We'll write it off as a Physical Security Seminar. -- Share and Enjoy.

Re: HARASS ME MORE.........

2001-09-01 Thread Petro
On Sat, Sep 01, 2001 at 03:04:03PM +1000, CaT wrote: On Sat, Sep 01, 2001 at 12:44:15AM -0400, Layne wrote: I ASKED YOU MORONS NOT TO SEND ME ANYMORE E-MAIL BUT HERE YOU GO AGAIN. IS THERE ANY INTELLIGENT PEOPLE THERE OR IS THE PLACE RUN BY BABOONS. i'M Oook? Yes, I'm looking for

Re: HARASS ME MORE.........

2001-08-31 Thread Petro
On Sat, Sep 01, 2001 at 03:04:03PM +1000, CaT wrote: On Sat, Sep 01, 2001 at 12:44:15AM -0400, Layne wrote: I ASKED YOU MORONS NOT TO SEND ME ANYMORE E-MAIL BUT HERE YOU GO AGAIN. IS THERE ANY INTELLIGENT PEOPLE THERE OR IS THE PLACE RUN BY BABOONS. i'M Oook? Yes, I'm looking for

Re: Is ident secure?

2001-08-31 Thread Petro
On Fri, Aug 31, 2001 at 01:07:05AM -0700, Christian Kurz wrote: On 01-08-30 Brian P. Flaherty wrote: I have had a lot of problems running non-Debian software when I disable ident. It seems like the licensing daemons expect to find What the hell is a licensing daemon? It's a

Re: Linux LDAP problem

2001-08-28 Thread Petro
On Tue, Aug 28, 2001 at 09:23:47AM -0400, Sunny Dubey wrote: Hey, I've got a slight problem, at school we run two major networks, one half is Novell Netware based, and the other half is unix based. We basically one centralized system of authentication, so that user don't have to remember

  1   2   >