Re: closing unwanted ports - and what is 1720/tcp filtered H.323/Q.931

2005-12-16 Thread Adrian von Bidder
On Thursday 15 December 2005 23.54, Noah Meyerhans wrote: given the choice between having your users use weak but easy to remember passwords and having them use complex passwords that they have to write down, My experience suggests that users use weak passwords *and* need to write them down.

Re: closing unwanted ports - and what is 1720/tcp filtered H.323/Q.931

2005-12-16 Thread kevin bailey
Adrian von Bidder wrote: On Thursday 15 December 2005 23.54, Noah Meyerhans wrote: given the choice between having your users use weak but easy to remember passwords and having them use complex passwords that they have to write down, My experience suggests that users use weak passwords

Re: closing unwanted ports - and what is 1720/tcp filtered H.323/Q.931

2005-12-16 Thread Javier Fernández-Sanguino Peña
On Thu, Dec 15, 2005 at 05:54:34PM -0500, Noah Meyerhans wrote: On Thu, Dec 15, 2005 at 10:19:48PM +, kevin bailey wrote: good point - also the fact that the users stick their email passwords to their monitors using postits! Well, at least there's still *some* level of physical

Re: closing unwanted ports - and what is 1720/tcp filtered H.323/Q.931

2005-12-16 Thread Michael Stone
On Fri, Dec 16, 2005 at 01:27:57PM +0100, Javier Fernández-Sanguino Peña wrote: On Thu, Dec 15, 2005 at 05:54:34PM -0500, Noah Meyerhans wrote: Well, at least there's still *some* level of physical security there; an attacker has to be at your user's desk to get the password. Plus, Noah,

Re: hardening checkpoints

2005-12-16 Thread Andreas Blaafladt
* alex black [EMAIL PROTECTED] [2005-12-15 23:50:42]: I use this line: */3 * * * * rootiptables -A INPUT -i eth0 -p tcp -s MY_WORKSTATION_IP --dport 22 -j ACCEPT echo issued iptables cmd | mail -a From: [EMAIL PROTECTED] -s [iptables-keepalive] [EMAIL PROTECTED] That does 2

Re: hardening checkpoints

2005-12-16 Thread Alvin Oga
On Thu, 15 Dec 2005, kevin bailey wrote: Alvin Oga wrote: On Thu, 15 Dec 2005, kevin bailey wrote: was recently rootkitted on a debian machine because i'd left an obscure service running. if you know how they got in .. i assume oyu have since fixed it my guess it was the

So many patches!

2005-12-16 Thread curby .
Within the last hour or so, I've gotten about 130 announcements of accepted patches/upgrades of packages on debian-changes. Before then, I'd only usually get a few such announcements per day. Is some backlog clearing up, did I miss some announcement, or is this otherwise expected or unexpected?