Autoresponders on the list

2011-11-23 Thread Simon Huggins
On Mon, Nov 21, 2011 at 08:47:06PM +, Piotr Drozdek wrote: Can someone remove that person from this list, please? I prodded listmaster@ and was apparently the third person to do so. They had already removed this address. -- --( A mess, eh? - Morgan Feels like home... -

Re: CAN-2004-0814 ?

2004-12-29 Thread Simon Huggins
On Tue, Dec 28, 2004 at 02:49:40PM -0600, Bob Tanner wrote: Looking at CAN-2004-0814, any reason there isn't a DSA for it? I think you want to look at bugs 277681 and the whole story behind 284356. -- --( I have this terrible pain in all the diodes )-- Simon (

Re: [OT] Collective memory query

2004-09-27 Thread Simon Huggins
On Mon, Sep 27, 2004 at 12:48:03PM +0100, Dale Amon wrote: A couple years ago I ran across a sed like program that will recursively descend through a tree and apply specified edits in place. Has anyone else run across a program of this nature? This is probably more appropriate for -user but

Re: Attempts to poison bayesian systems

2003-12-24 Thread Simon Huggins
On Tue, Dec 23, 2003 at 12:00:43PM -0500, Noah L. Meyerhans wrote: On Tue, Dec 23, 2003 at 01:36:20PM +, Dale Amon wrote: I have yet to see a false positive caused by this even though I get quite a lot of this stuff and routinely mark it as spam. I can't think of any other reason for

Re: Attempts to poison bayesian systems

2003-12-24 Thread Simon Huggins
On Tue, Dec 23, 2003 at 12:00:43PM -0500, Noah L. Meyerhans wrote: On Tue, Dec 23, 2003 at 01:36:20PM +, Dale Amon wrote: I have yet to see a false positive caused by this even though I get quite a lot of this stuff and routinely mark it as spam. I can't think of any other reason for

Re: Kernel 2.4 ioperm

2003-05-22 Thread Simon Huggins
On Thu, May 22, 2003 at 01:50:51PM -0600, xbud wrote: FYI, http://marc.theaimsgroup.com/?|=linux-kernelm=105271679705571w=2 You say 2.4 in the subject and it says 2.5 in that report. Is 2.4 vulnerable too? In a reduced test on 2.4 ioperm succeeds as a user but I'm reluctant to actually run the

Re: Sarge freeze and security updates

2003-02-24 Thread Simon Huggins
Thanks for your patronising reply. On Mon, Feb 24, 2003 at 12:09:10AM +0100, Sven Hoexter wrote: On Sun, Feb 23, 2003 at 06:25:17PM +, Simon Huggins wrote: On Sun, Feb 23, 2003 at 01:35:22AM -0500, Mark L. Kahnt wrote: [..] It would however be nice to have security available for sarge

Re: Sarge freeze and security updates

2003-02-24 Thread Simon Huggins
Thanks for your patronising reply. On Mon, Feb 24, 2003 at 12:09:10AM +0100, Sven Hoexter wrote: On Sun, Feb 23, 2003 at 06:25:17PM +, Simon Huggins wrote: On Sun, Feb 23, 2003 at 01:35:22AM -0500, Mark L. Kahnt wrote: [..] It would however be nice to have security available for sarge

Re: Sarge freeze and security updates

2003-02-23 Thread Simon Huggins
Salut List! On Sun, Feb 23, 2003 at 01:35:22AM -0500, Mark L. Kahnt wrote: There is a side effect that this means that few of the security fixes are making it through to Sarge, either. There is talk about using the security update system to produce security releases for Sarge, but those

Re: Sarge freeze and security updates

2003-02-23 Thread Simon Huggins
Salut List! On Sun, Feb 23, 2003 at 01:35:22AM -0500, Mark L. Kahnt wrote: There is a side effect that this means that few of the security fixes are making it through to Sarge, either. There is talk about using the security update system to produce security releases for Sarge, but those

Re: machine monitoring packages

2003-02-13 Thread Simon Huggins
Hi gabe, On Thu, Feb 13, 2003 at 02:59:26PM +, gabe wrote: I would like to know what ppl think is the best package for monitor servers, at my last work place they were installing mon. In my new job they use Nagios, which I'm not to sure about due to the fact that installation /

Re: machine monitoring packages

2003-02-13 Thread Simon Huggins
Hi gabe, On Thu, Feb 13, 2003 at 02:59:26PM +, gabe wrote: I would like to know what ppl think is the best package for monitor servers, at my last work place they were installing mon. In my new job they use Nagios, which I'm not to sure about due to the fact that installation /

Re: Bad Signature (was: Re: SSH)

2002-12-17 Thread Simon Huggins
'ello Debian On Tue, Dec 17, 2002 at 11:29:36AM +0100, Matthias Hentges wrote: Am Die, 2002-12-17 um 11.00 schrieb Adrian 'Dagurashibanipal' von Bidder: On Tue, 2002-12-17 at 00:06, Kilian CAVALOTTI wrote: I'll start to point these things out cause I'm wondering if it's certain MUA

Re: Bad Signature (was: Re: SSH)

2002-12-17 Thread Simon Huggins
'ello Debian On Tue, Dec 17, 2002 at 11:29:36AM +0100, Matthias Hentges wrote: Am Die, 2002-12-17 um 11.00 schrieb Adrian 'Dagurashibanipal' von Bidder: On Tue, 2002-12-17 at 00:06, Kilian CAVALOTTI wrote: I'll start to point these things out cause I'm wondering if it's certain MUA

Re: Using Razor and Debian Mailing lists

2002-12-03 Thread Simon Huggins
Hiya Debian, On Mon, Dec 02, 2002 at 11:23:11PM -0500, Phillip Hofmeister wrote: Please do not have your procmail or anything else automatically mark mail sent from debian's list as spam. Several valid emails have ended up in my Junk folder because someone is reporting them to razor. I

Re: register_globals in php4

2002-05-09 Thread Simon Huggins
On Fri, May 10, 2002 at 01:11:41AM +0800, Patrick Hsieh wrote: Yes. But when a user type the url something like login.php?id=fakeid Then $HTTP_GET_VARS['id'] and $_GET['id'] will also get fakeid, right? How do I avoid users affecting the system by changing the variable values in the URL

Re: register_globals in php4

2002-05-09 Thread Simon Huggins
On Fri, May 10, 2002 at 01:11:41AM +0800, Patrick Hsieh wrote: Yes. But when a user type the url something like login.php?id=fakeid Then $HTTP_GET_VARS['id'] and $_GET['id'] will also get fakeid, right? How do I avoid users affecting the system by changing the variable values in the URL

Re: default Apache configuration

2002-03-12 Thread Simon Huggins
On Tue, Mar 12, 2002 at 03:28:43PM +0100, Ralf Dreibrodt wrote: Thomas Thurman wrote: On Tue, 12 Mar 2002, Ralf Dreibrodt wrote: btw, i think the apache-paket is not useable for a webhosting-server (e.g frontpage is missing, security is in general too bad), so i normaly do not use it.

Re: default Apache configuration

2002-03-12 Thread Simon Huggins
On Tue, Mar 12, 2002 at 03:28:43PM +0100, Ralf Dreibrodt wrote: Thomas Thurman wrote: On Tue, 12 Mar 2002, Ralf Dreibrodt wrote: btw, i think the apache-paket is not useable for a webhosting-server (e.g frontpage is missing, security is in general too bad), so i normaly do not use it.

Re: Debian security being trashed in Linux Today comments

2002-01-15 Thread Simon Huggins
On Mon, Jan 14, 2002 at 09:53:15AM -0500, Noah L. Meyerhans wrote: On Mon, Jan 14, 2002 at 01:37:50PM +, Simon Huggins wrote: So perhaps Debian security is only as good as the package maintainers? I'm sure most maintainers do care and do investigate bugs I probably just had a bad

Re: Debian security being trashed in Linux Today comments

2002-01-15 Thread Simon Huggins
On Mon, Jan 14, 2002 at 09:53:15AM -0500, Noah L. Meyerhans wrote: On Mon, Jan 14, 2002 at 01:37:50PM +, Simon Huggins wrote: So perhaps Debian security is only as good as the package maintainers? I'm sure most maintainers do care and do investigate bugs I probably just had a bad

Re: Debian security being trashed in Linux Today comments

2002-01-14 Thread Simon Huggins
On Mon, Jan 14, 2002 at 12:05:34PM +, Tim Haynes wrote: Adam Warner [EMAIL PROTECTED] writes: http://www.linuxtoday.com/news_story.php3?ltsn=2002-01-14-002-20-SC-DB Someone with better knowledge of all the facts might want to comment on the claim that Debian is always the last to fix

Re: Debian security being trashed in Linux Today comments

2002-01-14 Thread Simon Huggins
On Mon, Jan 14, 2002 at 12:05:34PM +, Tim Haynes wrote: Adam Warner [EMAIL PROTECTED] writes: http://www.linuxtoday.com/news_story.php3?ltsn=2002-01-14-002-20-SC-DB Someone with better knowledge of all the facts might want to comment on the claim that Debian is always the last to fix

Re: firewall

2001-09-11 Thread Simon Huggins
On Mon, Sep 10, 2001 at 05:24:15PM +0100, Tim Haynes wrote: My script, previously plugged, does this with connection tracking. iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A block -m state --state INVALID -j DROP Indeed though some people may prefer

Re: firewall

2001-09-11 Thread Simon Huggins
On Mon, Sep 10, 2001 at 05:24:15PM +0100, Tim Haynes wrote: My script, previously plugged, does this with connection tracking. iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A block -m state --state INVALID -j DROP Indeed though some people may prefer

Re: firewall

2001-09-11 Thread Simon Huggins
On Tue, Sep 11, 2001 at 11:31:01AM +0100, Tim Haynes wrote: Simon Huggins [EMAIL PROTECTED] writes: On Mon, Sep 10, 2001 at 05:24:15PM +0100, Tim Haynes wrote: My script, previously plugged, does this with connection tracking. iptables -A block -m state --state ESTABLISHED,RELATED -j

Re: shared root account

2001-07-06 Thread Simon Huggins
On Fri, Jul 06, 2001 at 06:15:43AM -0800, Ethan Benson wrote: the main reason i don't use sudo except for small things which cannot grant a root shell in any way is for the simple reason the sudo converts a normal unprivleged user password into another root password. Any user account that

passwd et al

2001-06-21 Thread Simon Huggins
On Wed, Jun 20, 2001 at 12:02:47AM -0600, Hubert Chan wrote: Well, obviously my proposed scheme wouldn't work (because of the previously mentioned exploit), but the motivation behind the scheme was to reduce the number of SUID programs (because if you don't need it to be SUID, you're safer

Re: Logging packets from iptables

2001-05-23 Thread Simon Huggins
On Tue, May 22, 2001 at 08:37:26PM +0100, Dave Smith wrote: ... originating from port 80 of different computers on the internet. ^ On Wed, May 23, 2001 at 08:56:55AM -0500, Steve Greenland wrote: On 22-May-01, 16:50 (CDT), Chris Boyle [EMAIL PROTECTED] wrote: Firstly

[RFC] Network Security Policy (was Re: atd...)

2000-09-26 Thread Simon Huggins
On Tue, Sep 26, 2000 at 09:28:17AM +0100, Patrick Lambe wrote: That's dangerous ground to get into, there are always holes in *all* distributions, regardless of how quickly they're fixed. Yes. There was talk on this list before about being able to neatly disable network services. What would

[RFC] Network Security Policy (was Re: atd...)

2000-09-26 Thread Simon Huggins
On Tue, Sep 26, 2000 at 09:28:17AM +0100, Patrick Lambe wrote: That's dangerous ground to get into, there are always holes in *all* distributions, regardless of how quickly they're fixed. Yes. There was talk on this list before about being able to neatly disable network services. What would