Re: Scripts that run insecurely-downloaded code

2020-05-02 Thread Jason Fergus
On Sat, 2020-05-02 at 18:01 +0200, estel...@elstel.org wrote: > > Am 02.05.2020 10:14, schrieb Davide Prina: > > On 01/05/20 22:00, Rebecca N. Palmer wrote: > > > On 01/05/2020 20:31, Elmar Stellnberger wrote: > > > > https isn´t any more secure than http as long as you do not have a > > > >

Re: flashplugin-nonfree and latest Flash security updates

2016-08-05 Thread Jason Fergus
On Wed, 2016-08-03 at 20:43 +0200, Rob van der Putten wrote: > Hi there > > > On 03/08/16 11:55, Paul Wise wrote: > > > > > > > I'm not part of the team, > > Me neither. > > > > > but I do know that contrib and non-free are > > not supported by the Debian security team, so they are

Re: ANNOUNCEMENT: AMD processor microcode security update

2016-03-24 Thread Jason Fergus
That's very interesting.  Hopefully that's not the reason my AMD system would randomly crash on me, I thought I had fixed it with some better cooling, and one of my DIMMs had gone bad.  I no longer have the system though. On Wed, 2016-03-23 at 11:52 -0700, Kalnozols, Andris wrote: > FYI in case

Re: Mandatory Access Control

2015-11-29 Thread Jason Fergus
I think the problem lies in this "someone can give me your opinion about it?"   It's really all opinion.  Each have their advantages and disadvantages.  Pretty sure most companies that would require SElinux would also require RHEL/CentOS.  Debian simply gives you a choice of what you'd prefer.  

Re: Debian Desktop Environment

2015-10-27 Thread Jason Fergus
I'm curious about how you were infected by a rootkit, which one it was, and what you did to discover it?  Using a Sandbox is a great idea for those two, except of course those are generally the applications with the most sensitive data as well.  I always try to disable html email, but people

Re: [SECURITY] [DSA 3053-1] openssl security update

2014-10-22 Thread Jason Fergus
On Sat, 2014-10-18 at 23:59 +0100, Jonathan Wiltshire wrote: On 2014-10-18 22:08, Julian Gilbey wrote: On Thu, Oct 16, 2014 at 05:48:24PM +0200, Thijs Kinkhorst wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 -

Re: vacation mail

2014-08-07 Thread Jason Fergus
Ha, I think it's hilarious when people do this. Also stupid, but if it weren't for stupid people, who would we have to laugh at? :D On Thu, 2014-08-07 at 15:54 +0100, Daniel wrote: It's not the first, and it won't be the last. Y'know, if I was a malicious individual I might lurk the Debian

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Jason Fergus
:41:04PM -0600, Jason Fergus wrote: I run a postfix at home, and I just installed your new package. It does look pretty good so far. Also reminds me I should pay more attention to my logs. There are a lot of attempts to connect from

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Jason Fergus
:41:04PM -0600, Jason Fergus wrote: I run a postfix at home, and I just installed your new package. It does look pretty good so far. Also reminds me I should pay more attention to my logs. There are a lot of attempts to connect from

Re: RFC: fail2ban wheezy security update

2014-07-07 Thread Jason Fergus
I run a postfix at home, and I just installed your new package. It does look pretty good so far. Also reminds me I should pay more attention to my logs. There are a lot of attempts to connect from unauthorized people. Of course I'm sure that happens everywhere, which is why we use fail2ban in

Re: Please remove me from this list

2014-06-26 Thread Jason Fergus
Ha ha, made me laugh. Speaking of lists, I wish I knew how Evolution knows to ask if one would like to reply to the list or the sender. My work uses a bunch of mailing lists, and I always feel like I'm breaking list etiquette when I have to do a group reply, because the option isn't there to

Re: Please remove me from this list

2014-06-26 Thread Jason Fergus
On Thu, 2014-06-26 at 16:15 +0200, Erwan David wrote: Le 26/06/2014 16:06, Jason Fergus a écrit : Ha ha, made me laugh. Speaking of lists, I wish I knew how Evolution knows to ask if one would like to reply to the list or the sender. My work uses a bunch of mailing lists, and I

Re: Debian mirrors and MITM

2014-05-30 Thread Jason Fergus
I have to laugh at this, my phone was going off constantly this morning, and I was thinking I don't have this much email normally! Looked over the discussion and thought, didn't this discussion happen recently? It was something I was randomly thinking about one day too, but really plain-text

Re: End-user laptop firewall available?

2013-12-09 Thread Jason Fergus
On Sat, 2013-12-07 at 10:55 -0600, Richard Owlett wrote: I chose phrasing of subject line to emphasize some peculiarities of my needs. End-user emphasizes: - I am *NOT* an expert - my system is never intended to be a server Without any services running, you won't really have any

Re: End-user laptop firewall available?

2013-12-09 Thread Jason Fergus
On Sat, 2013-12-07 at 10:55 -0600, Richard Owlett wrote: I chose phrasing of subject line to emphasize some peculiarities of my needs. End-user emphasizes: - I am *NOT* an expert - my system is never intended to be a server Without any services running, you won't really have any

Re: End-user laptop firewall available?

2013-12-09 Thread Jason Fergus
On Mon, 2013-12-09 at 20:16 +0100, Javier Fernández-Sanguino Peña wrote: On Mon, Dec 09, 2013 at 09:41:34AM -0700, Jason Fergus wrote: On Sat, 2013-12-07 at 10:55 -0600, Richard Owlett wrote: I chose phrasing of subject line to emphasize some peculiarities of my needs. End

Re: NULL Scan issues or something else?

2013-02-05 Thread Jason Fergus
On Tue, 2013-02-05 at 23:10 +, Jérémie Marguerie wrote: Le 5 févr. 2013 23:03, Bartek Krajnik bar...@bmk-it.com a écrit : Hi, For ssh login attempts you can use program authfail (after 4 wrong login attempts it adds proper IP to netfilter with DROP rule sending notification to IP

Re: flashplugin-nonfree get-upstream-version.pl security concern

2012-12-13 Thread Jason Fergus
On Thu, 2012-12-13 at 19:55 -0500, Michael Gilbert wrote: On Wed, Dec 12, 2012 at 11:41 PM, Jason Fergus wrote: On Wed, 2012-12-12 at 17:26 -0500, Michael Gilbert wrote: On Wed, Dec 12, 2012 at 12:52 PM, adrelanos wrote: What is Debian policy on code execution from user websites

Re: flashplugin-nonfree get-upstream-version.pl security concern

2012-12-12 Thread Jason Fergus
On Wed, 2012-12-12 at 17:26 -0500, Michael Gilbert wrote: On Wed, Dec 12, 2012 at 12:52 PM, adrelanos wrote: What is Debian policy on code execution from user websites? Unfortunately there is none. I've tried to gain consensus that at a minimum things downloaders like this need to stay out

Re: Informazioni Log Analyzer Postfix

2012-12-04 Thread Jason Fergus
On Tue, 2012-12-04 at 11:35 +0100, Gilles Mocellin wrote: Le 27/11/2012 11:53, Zattara Stefano a écrit : Buongiorno a tutta la lista, vi chiedo un consiglio riguardo un log analyzer per postfix. Ho già dato un'occhiata a pflogsum ed a varie interfaccie simili in python. Quello che mi

Re: sun-java6-plugin outdated and vulnerable to an actively exploited security issue

2012-08-16 Thread Jason Fergus
On Thu, 2012-08-16 at 12:09 +0200, Erwan David wrote: On Thu, Aug 16, 2012 at 11:37:09AM CEST, Thijs Kinkhorst th...@debian.org said: Hi Adam, On Thu, August 16, 2012 07:56, echo083 wrote: The sun-java6 in the stable branch is the version 1.6.0_26 is there a plan for any security

Re: how to fix rootkit?

2012-02-08 Thread Jason Fergus
On Wed, 2012-02-08 at 18:16 -0600, Mike Mestnik wrote: On 02/08/12 18:07, Russell Coker wrote: On Thu, 9 Feb 2012, Stephen Hemminger shemmin...@vyatta.com wrote: The advice I heard is trust nothing (even reflash the BIOS). Do you know of any real-world exploits that involve replacing the