Re: UNS: Debian 4.0 Upgrade Path

2010-01-23 Thread Thiemo Nagel
However if that is the case, I wonder if oldstable support could be extended for some more time. But why? There is a *stable* release with security support. Debian isn't made for skipping a whole release. And the end of support for etch was announced long ago, so that everyone had enough time

Re: UNS: Debian 4.0 Upgrade Path

2010-01-23 Thread Thiemo Nagel
Dear Johannes, On 01/22/2010 11:27 PM, Johannes Wiedersich wrote: A typical Debian upgrade will lead to a downtime on the order of a few minutes once every 2 years, compared to tedious manual reinstallation required on other systems. It is straightforward to semi-automatically upgrade some 100

Re: UNS: Debian 4.0 Upgrade Path

2010-01-23 Thread Thiemo Nagel
Dear Moritz, On 01/22/2010 07:14 PM, Moritz Muehlenhoff wrote: On 2010-01-22, Thiemo Nagelthiemo.na...@ph.tum.de wrote: The Security Team has discussed and stated before: If large institutions want a longer support cycle for oldstable they should colloborate to fund this externally. Supporting

Re: UNS: Debian 4.0 Upgrade Path

2010-01-22 Thread Thiemo Nagel
. I assume that there are many large organisations which are as slow as that or only slightly faster. [***] http://linux.web.cern.ch/linux/news.shtml -- +---+--+ | Dipl.-Phys. Thiemo Nagel | | | Technische

Debian 4.0 Upgrade Path

2010-01-21 Thread Thiemo Nagel
-- +---+--+ | Dipl.-Phys. Thiemo Nagel | | | Technische Universitaet Muenchen | RoomPH1 3276 | | Physik-Department E18 | | | James-Franck-Strasse | Phone +49 89

Re: Debian 4.0 Upgrade Path

2010-01-21 Thread Thiemo Nagel
Dear Eduardo, Eduardo M KALINOWSKI wrote: On Qui, 21 Jan 2010, Thiemo Nagel wrote: having read your email concerning the termination of etch security support, I'm looking for an upgrade path for our installation of ~100 machines. Is it planned to start squeeze security support in time

Re: OT: Is it so easy to break into an NIS?

2003-03-19 Thread Thiemo Nagel
setups. regards, Thiemo Nagel [EMAIL PROTECTED] wrote: On Wed, Mar 19, 2003 at 02:09:51AM -0800, Rick Moen wrote: Quoting seph ([EMAIL PROTECTED]): depends what you mean by free. Are you aware of openafs? http://www.openafs.org That is of course derived from the IBM Transarc software

Re: [work] Integrity of Debian packages - please take OT private

2003-03-10 Thread Thiemo Nagel
of separation of powers, leader without legitimation by the people, pre-emptive war I am frightened. And I'm not talking about North Korea nor Iran nor Iraq. regards, Thiemo Nagel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: [work] Integrity of Debian packages - please take OT private

2003-03-10 Thread Thiemo Nagel
of separation of powers, leader without legitimation by the people, pre-emptive war I am frightened. And I'm not talking about North Korea nor Iran nor Iraq. regards, Thiemo Nagel

Re: Access on Port 0

2002-10-12 Thread Thiemo Nagel
://www.insecure.org/nmap/nmap-fingerprinting-article.html best regards, Thiemo Nagel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Access on Port 0

2002-10-12 Thread Thiemo Nagel
://www.insecure.org/nmap/nmap-fingerprinting-article.html best regards, Thiemo Nagel

Re: [SECURITY] [DSA 149-1] New glibc packages fix security related problems

2002-08-14 Thread Thiemo Nagel
of ldd's output.) Among those: sshd apache mysqld bind postfix syslogd sh I'm thinking about restarting the system. regards, Thiemo Nagel $ ldd /usr/sbin/apache libm.so.6 = /lib/libm.so.6 (0x4001b000) libcrypt.so.1 = /lib/libcrypt.so.1 (0x4003c000) libdb.so.2 = /lib

Re: Some more port closing questions

2002-08-01 Thread Thiemo Nagel
we could get this far without such a system. ;-) We didn't without. This is already implemented in the installer and in the package handling systems. Try $ dpgk-reconfigure debconf regards, Thiemo Nagel

Re: Some more port closing questions

2002-08-01 Thread Thiemo Nagel
Paul Hampson wrote: On Thu, Aug 01, 2002 at 11:58:59AM +0200, Thiemo Nagel wrote: Paul Hampson wrote: You mean like maybe assigning different questions different priorities, and letting the user choose the priority which a question needs to have before it is asked, with some default assumed

SunRPC Vulnerability

2002-07-31 Thread Thiemo Nagel
Funny. We were just discussing about portmap, and now this: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823 Is Debian vulnerable? regards, Thiemo Nagel

mysql-server local DOS vulnerability

2002-04-19 Thread Thiemo Nagel
regards, Thiemo Nagel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Webserver questions: using samba, avoiding cleartext passwords, co-existing with Windows

2002-04-19 Thread Thiemo Nagel
desktop that executes c:\program files\cygwin\bin\bash.exe path_to_script I think this is more convenient that FTP, too. cu, Thiemo Nagel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

mysql-server local DOS vulnerability

2002-04-19 Thread Thiemo Nagel
, Thiemo Nagel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: ulimits

2002-03-26 Thread Thiemo Nagel
Hello, Recently a friend of mine was kind enough to hit refresh 700 times after requesting a depth 5 recursive validation from the validator on my web server. It's load levels went to above 150, hehe. Took me a couple of minutes to log in, and a couple to su to root, and more than 5 minutes

Re: ulimits

2002-03-26 Thread Thiemo Nagel
Hello, Recently a friend of mine was kind enough to hit refresh 700 times after requesting a depth 5 recursive validation from the validator on my web server. It's load levels went to above 150, hehe. Took me a couple of minutes to log in, and a couple to su to root, and more than 5 minutes

Re: portscans and sniffing

2002-01-21 Thread Thiemo Nagel
). Anyways, consult your lawyer about it, if you need a definite answer. best regards, Thiemo Nagel [EMAIL PROTECTED] schrieb: Hi all. I have startet a Security Company in Germany an now i have e few questions. Are ftp anonymous scans illegal? if it is, can i get an license to do