Re: making Debian secure by default

2024-03-29 Thread David Wright
On Fri 29 Mar 2024 at 10:31:09 (+0100), Emanuel Berg wrote: > David Wright wrote: > > >> Ah, surely it can't refer to that as that would be > >> completely ridiculous as it would imply "wanna install > >> stuff? sure, but then it isn't secure anymore". > > > > It's not clear what "isn't secure

Products!!

2024-03-29 Thread Diane Fralano
Hello, We would like to purchase your product. Are you still exporting? Thank you, Diane

Re: making Debian secure by default

2024-03-29 Thread debian-user
Curt wrote: > On 2024-03-28, to...@tuxteam.de wrote: > > > > Security, as Bruce Schneier [1] says, is a process. Not a product. > > A process that is essentially out of your control. I would hope it is, given how little I or most people understand about security. > This is the elephant in

Re: making Debian secure by default

2024-03-29 Thread Andy Smith
Hello, On Fri, Mar 29, 2024 at 07:02:54PM +0100, Kamil Jońca wrote: > Andy Smith writes: > > https://www.openwall.com/lists/oss-security/2024/03/29/4 > > > > (Upstream xz/lzma project compromised, hostile code inserted into > > sshd in Debian sid and other leading edge distros.) > > O-o, is

Re: Fwd: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise

2024-03-29 Thread Andy Smith
Hello, On Fri, Mar 29, 2024 at 01:52:18PM -0400, Jeffrey Walton wrote: > Seems relevant since Debian adopted xz about 10 years ago. Though we do not know how or why this developer has come to recently put apparent exploits in it, so we can't yet draw much of a conclusion beyond "sometimes people

Re: Could Gnome's "install pending software updates" cause installation scripts to misbehave?

2024-03-29 Thread Lucas B. Cohen
On Fri 29 Mar 2024 at 11:06:45 (-0400), Henning Follmann wrote: On Fri, Mar 29, 2024 at 12:01:27PM +0100, Lucas B. Cohen wrote: Hi, I've had a bit of a headache understanding why my Debian bookworm system suddenly panicked at boot with an 'unable to mount root fs' error. Turns out the first of

Re: making Debian secure by default

2024-03-29 Thread Andy Smith
Hi, On Fri, Mar 29, 2024 at 05:43:22PM -, Curt wrote: > On 2024-03-29, Andy Smith wrote: > >> > >> It makes no fucking difference, because your important data is elsewhere > >> and completely out of your control. > > > > I WAS going to gently suggest that you have a lie down in a cool, > >

Re: making Debian secure by default

2024-03-29 Thread Jeffrey Walton
On Thu, Mar 28, 2024 at 5:17 PM Lee wrote: > > > Hope this helps a little bit. > > Yes, it does. I was hoping for something simple but it's becoming > clear to me that there's no simple "make Debian secure for dummies" > checklist to follow. Robert Morris Sr. has some good advice,

Re: making Debian secure by default

2024-03-29 Thread Stefan Monnier
> Yes, it does. I was hoping for something simple but it's becoming > clear to me that there's no simple "make Debian secure for dummies" > checklist to follow. I think to a significant extent, Debian maintainers do aim to make Debian "secure by default", to the extent possible (i.e. based on

Re: Comment installer Bookworm sur un HP elite Mini 600 G9 ?

2024-03-29 Thread Lamourec Alain
Bonjour Vois-tu ta clé dans les médias du BIOS ? Utilises-tu Ventoy pour booter l'ISO ? Sinon change de clé, ça arrive qu'il y a des clés qui sont capricieuses Olivier writes: Bonjour, Je viens d'acquérir un HP elite Mini 600 G9 d'occasion sur lequel Windows 11 est installé (BIOS U21

Re: making Debian secure by default

2024-03-29 Thread Roberto C . Sánchez
On Fri, Mar 29, 2024 at 07:02:54PM +0100, Kamil Jońca wrote: > Andy Smith writes: > > [...] > > https://www.openwall.com/lists/oss-security/2024/03/29/4 > > > > (Upstream xz/lzma project compromised, hostile code inserted into > > sshd in Debian sid and other leading edge distros.) > > > >

Re: making Debian secure by default

2024-03-29 Thread Kamil Jońca
Andy Smith writes: [...] > https://www.openwall.com/lists/oss-security/2024/03/29/4 > > (Upstream xz/lzma project compromised, hostile code inserted into > sshd in Debian sid and other leading edge distros.) > > Thanks, > Andy O-o, is there any simple test to check if I have infected version or

Re: Fwd: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise

2024-03-29 Thread Roberto C . Sánchez
On Fri, Mar 29, 2024 at 01:52:18PM -0400, Jeffrey Walton wrote: > Seems relevant since Debian adopted xz about 10 years ago. > Also note that this has been addressed in Debian: https://lists.debian.org/debian-security-announce/2024/msg00057.html Provided here for the benefit those who are not

Re: making Debian secure by default

2024-03-29 Thread Curt
On 2024-03-29, Joe wrote: > > He's actually referring to credentials stored externally being Jesus, what a genius.

Re: making Debian secure by default

2024-03-29 Thread Curt
On 2024-03-29, Andy Smith wrote: >> >> It makes no fucking difference, because your important data is elsewhere >> and completely out of your control. > > I WAS going to gently suggest that you have a lie down in a cool, > shaded room, but which of us had this on our 2024 bingo card? > This is

Comment installer Bookworm sur un HP elite Mini 600 G9 ?

2024-03-29 Thread Olivier
Bonjour, Je viens d'acquérir un HP elite Mini 600 G9 d'occasion sur lequel Windows 11 est installé (BIOS U21 Ver 02.05.00 du 08/23/2022). Je souhaite installer Bookworm à la place. J'arrive à accéder au BIOS. J'ai désactivé le Secure Boot et autorisé le boot depuis une clé USB. Le BIOS contient

Re: Paquetes snap sin snap.

2024-03-29 Thread JavierDebian
El 29/3/24 a las 14:11, Listas escribió: El vie, 29-03-2024 a las 09:07 -0300, JavierDebian escribió: El paquete en cuestión es Geogebra. Los repositorios están sólo hasta la versión 4. En una distro de por ahí, creo que Arch, está empaquetada la 5. Pero la actual 6 sólo por snap para

Re: Installation minimaliste

2024-03-29 Thread Alex PADOLY
Bonsoir à tous, Si on veut effectuer une installation minimaliste, faut-il choisir le mode expert à l'installation pour maitriser le maximum de chose à l'installation. Merci. Alex PADOLY Le 2024-03-25 22:33, Jean Louis Giraud a écrit : A ma connaissance Lxde n'est plus maintenu depuis

Re: making Debian secure by default

2024-03-29 Thread Joe
On Fri, 29 Mar 2024 16:53:04 + Andy Smith wrote: > Hello, > > On Thu, Mar 28, 2024 at 05:47:44PM -, Curt wrote: > > On 2024-03-28, Greg Wooledge wrote: > > > > > > A more proactive endeavor would be to document known best > > > practices > > > > It makes no fucking difference,

Re: Paquetes snap sin snap.

2024-03-29 Thread Listas
El vie, 29-03-2024 a las 09:07 -0300, JavierDebian escribió: > > > > El paquete en cuestión es Geogebra. > Los repositorios están sólo hasta la versión 4. > En una distro de por ahí, creo que Arch, está empaquetada la 5. > Pero la actual 6 sólo por snap para instalar, o un "standalone" que >

Re: making Debian secure by default

2024-03-29 Thread Andy Smith
Hello, On Thu, Mar 28, 2024 at 05:47:44PM -, Curt wrote: > On 2024-03-28, Greg Wooledge wrote: > > > > A more proactive endeavor would be to document known best practices > > It makes no fucking difference, because your important data is elsewhere > and completely out of your control. I

Re: making Debian secure by default

2024-03-29 Thread Curt
On 2024-03-28, to...@tuxteam.de wrote: > > Security, as Bruce Schneier [1] says, is a process. Not a product. > A process that is essentially out of your control. This is the elephant in the room that you do not wish to address. Anyway, dream on.

subir paquete

2024-03-29 Thread Deiby Herrera
saludos resulta que photoprinter dejo de funcionar para lo unico que la usaba era para imprimir fotos tamaño pasaporte de mera que escribi o desarrolle una propia llamada PotoPassport la con c++ y qt creator hace eso inserta 4 fotos y las manda imprimir tamaño pasaporte ahora quiero subir la a los

Ujjnkkk

2024-03-29 Thread Bucakk Bucakk
iPhone’umdan gönderildi

Re: Could Gnome's "install pending software updates" cause installation scripts to misbehave?

2024-03-29 Thread David Wright
On Fri 29 Mar 2024 at 11:06:45 (-0400), Henning Follmann wrote: > On Fri, Mar 29, 2024 at 12:01:27PM +0100, Lucas B. Cohen wrote: > > > > I've had a bit of a headache understanding why my Debian bookworm system > > suddenly panicked at boot with an 'unable to mount root fs' error. Turns out > >

Re: Installer le noyau 6.6 sur Bookworm [RESOLU]

2024-03-29 Thread Olivier
Comme espéré dans ce fil de discussion, le dépôt Bookworm-backport contient maintenant la version 6.6.13 du noyau et la commande apt -y upgrade déclenche le passage de la 6.5 précédente à la nouvelle version 6.6. Ce passage est sans doute lié au fait que le version 6.6 est LTS. Le ven. 8 mars

Re: making Debian secure by default

2024-03-29 Thread Jeffrey Walton
On Wed, Mar 27, 2024 at 8:37 PM Lee wrote: > > I just saw this advisory > Escape sequence injection in util-linux wall (CVE-2024-28085) > https://seclists.org/fulldisclosure/2024/Mar/35 > where they're talking about grabbing other users sudo password. > > Apparently the root of the security

Re: Could Gnome's "install pending software updates" cause installation scripts to misbehave?

2024-03-29 Thread Henning Follmann
On Fri, Mar 29, 2024 at 12:01:27PM +0100, Lucas B. Cohen wrote: > Hi, > > I've had a bit of a headache understanding why my Debian bookworm system > suddenly panicked at boot with an 'unable to mount root fs' error. Turns out > the first of my two menuentries in grub.cfg were no longer specifying

Re: Installation de VirtualBox par les dépots Debian?

2024-03-29 Thread Eric DEGENETAIS
Le jeu. 28 mars 2024 à 09:00, Lucas Nussbaum a écrit : > VirtualBox est libre (les paquets sont dans Debian "contrib" pour > unstable, car ils dépendent d'un autre paquet non libre), mais Oracle > refuse de fournir des détails sur les problèmes de sécurité, ce qui rend > impossible une

Re: Paquetes snap sin snap.

2024-03-29 Thread JavierDebian
El 29/3/24 a las 06:49, Listas escribió: El jue, 28-03-2024 a las 14:59 -0300, JavierDebian escribió: Buenas tardes. Proyecto para mi fin de semana: Instalar paquetes de SNAP sin instalar Snap. Odio Snap. ¿Hay alguna razón para necesitar que sea un paquete snap? Quiero decir, ¿no está

Could Gnome's "install pending software updates" cause installation scripts to misbehave?

2024-03-29 Thread Lucas B. Cohen
Hi, I've had a bit of a headache understanding why my Debian bookworm system suddenly panicked at boot with an 'unable to mount root fs' error. Turns out the first of my two menuentries in grub.cfg were no longer specifying the linux root by its device UUID (as I was expecting it to do, by

Re: Debian 11 PHP 7.4 – Mysql 8 - Can’t get Mysqli_connect to work

2024-03-29 Thread Greg Wooledge
On Fri, Mar 29, 2024 at 11:49:06AM +0100, Bernard wrote: > Hi to Everyone, > > The text quoted below has already been sent to the list, 2-3 days ago, > someone had replied to it (but the message has been lost, I no longer see it > on the list. I had replied again, which reply disappeared too.) >

Re: Debian 11 PHP 7.4 – Mysql 8 - Can’t get Mysqli_connect to work

2024-03-29 Thread Bernard
Hi to Everyone, The text quoted below has already been sent to the list, 2-3 days ago, someone had replied to it (but the message has been lost, I no longer see it on the list. I had replied again, which reply disappeared too.) So, I want to say again that the errors shown in the text below (S

Re: Paquetes snap sin snap.

2024-03-29 Thread Listas
El jue, 28-03-2024 a las 14:59 -0300, JavierDebian escribió: > Buenas tardes. > > Proyecto para mi fin de semana: > > Instalar paquetes de SNAP sin instalar Snap. > Odio Snap. ¿Hay alguna razón para necesitar que sea un paquete snap? Quiero decir, ¿no está empaquetado en la distribución? ¿no se

Re: making Debian secure by default

2024-03-29 Thread Emanuel Berg
David Wright wrote: >> Ah, surely it can't refer to that as that would be >> completely ridiculous as it would imply "wanna install >> stuff? sure, but then it isn't secure anymore". > > It's not clear what "isn't secure anymore" means. [...] It means as soon as you start doing stuff with the

Re: Paquetes snap sin snap.

2024-03-29 Thread Camaleón
El 2024-03-28 a las 14:59 -0300, JavierDebian escribió: > Buenas tardes. > > Proyecto para mi fin de semana: Aquí en España tenemos un fin de semana «extendido» de 4 días (en algunas comunidades) por ser festivo de Pascua :-) > Instalar paquetes de SNAP sin instalar Snap. > Odio Snap. > >

Re: OT: Lista de correo sobre HARDWARE

2024-03-29 Thread Camaleón
El 2024-03-26 a las 16:23 +, Eduardo Jorge Gil Michelena escribió: > Estimada gente: > > Disculpen el OT... > ¿Conocen alguna lista de correos o foro web sobre Hardware? ¿De hardware en general o buscas algo más concreto? > Antes había muchos pero ahora... parece que han desaparecido o

Re: making Debian secure by default

2024-03-29 Thread Ralph Aichinger
On Thu, 2024-03-28 at 14:12 -0400, Lee wrote: > > Yes, it does.  I was hoping for something simple but it's becoming > clear to me that there's no simple "make Debian secure for dummies" > checklist to follow. Making "Debian secure for dummies" and having a multi-user system at the same time