Re: [eug-lug]FileSystem.mount()
On Thu, Dec 11, 2003 at 11:33:45AM -0800, Brad Davidson wrote: I gave LUFS/SSHFS a try a while ago. The project as a whole looked very hackish, and it crashed constantly on my laptop. Now my laptop is PPC so there may be some endianness bugs, but even so - it seemed very amateur to me. How long ago was this? ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
[eug-lug]Equilibrium==movie...
Equilibrium, I just watched it... It was ok, not great, but the thing that had me scratching my head was : Could they copy the matrx any more ? i really think someone told the main actor that he was going to be the next keanu. Anyway i was wondering what some of you guys thougth of it? Jamie -- Linux: because a PC is a terrible thing to waste -- [EMAIL PROTECTED] put this on Tshirts in '93 ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]FileSystem.mount()
Maybe 6 months or so? I don't recall exactly. I'm sure it's improved since then, but it had a 'cruft' flavor to it that I don't feel from a lot of startup projects. -Brad T. Joseph Carter wrote: On Thu, Dec 11, 2003 at 11:33:45AM -0800, Brad Davidson wrote: I gave LUFS/SSHFS a try a while ago. The project as a whole looked very hackish, and it crashed constantly on my laptop. Now my laptop is PPC so there may be some endianness bugs, but even so - it seemed very amateur to me. How long ago was this? ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
[eug-lug]SCO DDoS
Early Wednesday morning, The SCO Group's web server was allegedly attacked in a SYN flood DDoS attack. SCO made a press release about it, and their stock price went up. (I'm really curious what goes on inside the mind of a day trader...) Some people didn't believe the DDoS was real. This Groklaw article is the focus point for that viewpoint. http://www.groklaw.net/article.php?story=20031210163721614 Today, CAIDA published an article stating that they did indeed see a backscatter effect from SCO's DDoS on their Network Telescope. http://www.caida.org/analysis/security/sco-dos/ So it appears that the DDoS was real. (BTW, check out this totally cool movie from CAIDA.) http://www.caida.org/outreach/resources/animations/passive_monitoring/backscatter.mpg -- Bob Miller Kbob kbobsoft software consulting http://kbobsoft.com [EMAIL PROTECTED] ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]SCO DDoS
Bob, the caida analysis repeated refers to a distributed denial-of-service attack (DDoS) against SCO, but many other parts, and groklaw, refer to a DoS attack. It was my understanding that SYN flood attacks are generally not distributed attacks, although I'm certain they *could* be coordinated... just that usually only one attacker is needed, with good bandwidth, to generate a big flood. Anyone have any clarification on whether this is truly a DDoS, or technically a DoS?? (thanks) Now to rip on SCO: maybe someone should tell them about the great free code they could steal to protect them from this stuff... it's been around a while, no? Apparently, unixware isn't up-to-snuff. ciao, Ben PS - thanks for posting this -- I was following the groklaw banter yesterday, and discussing it with co-workers. On Fri, 12 Dec 2003 12:29:40 -0800 Bob Miller [EMAIL PROTECTED] wrote: | Early Wednesday morning, The SCO Group's web server was allegedly | attacked in a SYN flood DDoS attack. | | SCO made a press release about it, and their stock price went up. | (I'm really curious what goes on inside the mind of a day trader...) | | Some people didn't believe the DDoS was real. This Groklaw article is | the focus point for that viewpoint. | | http://www.groklaw.net/article.php?story=20031210163721614 | | Today, CAIDA published an article stating that they did indeed see a | backscatter effect from SCO's DDoS on their Network Telescope. | | http://www.caida.org/analysis/security/sco-dos/ | | So it appears that the DDoS was real. | | (BTW, check out this totally cool movie from CAIDA.) | http://www.caida.org/outreach/resources/animations/passive_monitoring/backscatter.mpg | | -- | Bob Miller Kbob | kbobsoft software consulting | http://kbobsoft.com [EMAIL PROTECTED] -- just me, Ben. ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]FileSystem.mount()
On Fri, Dec 12, 2003 at 07:41:15AM -0800, Brad Davidson wrote: Maybe 6 months or so? I don't recall exactly. I'm sure it's improved since then, but it had a 'cruft' flavor to it that I don't feel from a lot of startup projects. The whole idea of a filesystem in userspace is pretty hackish, so I won't ask what's wrong with it. Instead, I'll ask: What would be a better way to do it? ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]FileSystem.mount()
T. Joseph Carter wrote: The whole idea of a filesystem in userspace is pretty hackish, so I won't ask what's wrong with it. Instead, I'll ask: What would be a better way to do it? Give your filesystem an NFS server interface. An NFS server listens for SunRPC/UDP packets and replies with more of the same. You can't get better isolation from the kernel than that. Better, it uses the very portable Berkeley Socket interface, so the same code could run on Linux, HP/UX and Windows with a few tweaks. It can be network transparent if you want, or it can be restricted to localhost. -- Bob Miller Kbob kbobsoft software consulting http://kbobsoft.com [EMAIL PROTECTED] ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
[eug-lug]power fluctuations
We're getting some power fluctuations here at work, by the river roughly across from the UO. Anyone else? Ben ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]power fluctuations
Here too, in Cottage Grove. On 12/12/03 02pm, Ben Barrett wrote: We're getting some power fluctuations here at work, by the river roughly across from the UO. Anyone else? Ben ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
[eug-lug]Those HP Servers
As you know if you were at EUGLUG's clinic last night, we have four monstrous HP servers that the City of Eugene recently donated. The biggest of them has dual 200 MHz Pentiums, 512 MB of RAM, a hardware RAID of 12 drives totaling 78 GB, and triply redundant power supplies, all housed in a cabinet the size and shape of an end table. So, compared to a $300 PC from Best Buy, these machines are slow, huge, and power hungry, but they have good disk bandwidth, and their power supplies won't burn out anytime soon. (-: They are also free. The question is, what should we do with them? Larry suggested donating them to a local nonprofit, and I think that's a good idea. But it'd be good to target a nonprofit that can actually use the performance characteristics of the machines that we have. I'm thinking a database server. What could a nonprofit do with a high performance database over 10 GB in size? Maybe we could have a contest for the most creative use of these servers, and award the servers to the best entrants? Or would society get the most benefit from recycling these junkers responsibly, then holding a bake sale to buy Headstart a new Celeron box? Brainstorming time. Throw out some ideas. -- Bob Miller Kbob kbobsoft software consulting http://kbobsoft.com [EMAIL PROTECTED] ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
[eug-lug]newbie-ish question
We have had a range if ip addy's(xxx.xxx.xxx.xx) we've used forever. Now our office is moving and our ISP says we will now be getting our #'s from them (dhcp?) and that we don't need to do anything and that everything will work just fine. I'm pretty sure he's right about the Win pcs and the obsd firewall (packetfiltering bridge). but what about the obsd server that runs our web and email services? In resolve.conf it lists: search ourdomain.com lookup file bind nameserver xxx.xxx.xxx.xx nameserver ###.###.###.## Our nameservers will remain the same but our new addressing scheme is something like 10.0.0.# Is there something he doesn't know about that I will probably have to change? Or is he right and everything will just plug and play? thoughts, comments, experiences? Regards, j _ [1]Winterize your home with tips from MSN House Home. References 1. http://g.msn.com/8HMAENUS/2746??PS= ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]Those HP Servers
On Friday, December 12, 2003, at 03:30 PM, Bob Miller wrote: As you know if you were at EUGLUG's clinic last night, we have four monstrous HP servers that the City of Eugene recently donated. The biggest of them has dual 200 MHz Pentiums, 512 MB of RAM, a hardware RAID of 12 drives totaling 78 GB, and triply redundant power supplies, all housed in a cabinet the size and shape of an end table. snip The question is, what should we do with them? Larry suggested donating them to a local nonprofit, and I think that's a good idea. But it'd be good to target a nonprofit that can actually use the performance characteristics of the machines that we have. Found at least one, KRVM which is a project of the 4J school district is in need of a stable FTP/Samba server for keeping audio files and serving them up to students for purposes of Media production. I'm thinking a database server. What could a nonprofit do with a high performance database over 10 GB in size? keeping a list of who's naughty and nice ;-) -- You are the eventuality of an anomaly , which despite my sincerest efforts I have been unable to eliminate from what is otherwise a harmony of mathematical precision. -The Architect Microsoft has resolved this issue. We have put processes in place to ensure there is no recurrence of this eventuality. -Microsoft ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]newbie-ish question
On Fri, Dec 12, 2003 at 10:29:18PM +, john marten wrote: We have had a range if ip addy's(xxx.xxx.xxx.xx) we've used forever. Now our office is moving and our ISP says we will now be getting our #'s from them (dhcp?) and that we don't need to do anything and that everything will work just fine. I'm pretty sure he's right about the Win pcs and the obsd firewall (packetfiltering bridge). but what about the obsd server that runs our web and email services? In resolve.conf it lists: search ourdomain.com lookup file bind nameserver xxx.xxx.xxx.xx nameserver ###.###.###.## Our nameservers will remain the same but our new addressing scheme is something like 10.0.0.# Is there something he doesn't know about that I will probably have to change? Or is he right and everything will just plug and play? thoughts, comments, experiences? Regards, j As long as the nameservers in /etc/resolv.conf are pointing at the right nameservers, you should be OK. If you do have a local net, are the web and email services for the local network, or for the internet? Do you have your own local network with IPs 10.0.0.*, or is your ISP giving your boxes those addresses? If your ISP is assingining you IP addreses AND doing your DNS, then it's all their responsibility, and you just need /etc/resolv.conf to point to their nameservers. -- [EMAIL PROTECTED] ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]power fluctuations
On Fri, Dec 12, 2003 at 02:16:44PM -0800, Ben Barrett wrote: We're getting some power fluctuations here at work, by the river roughly across from the UO. Anyone else? Here on the UO campus. ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]Linux at Lane CC
Ken Barber wrote: Last May we had a thread on eug-lug regarding Linux classes at LCC. Beaker had a great suggestion which has finally become reality: On Thursday 29 May 2003 4:51 pm, Beaker wrote: I've always thought a Best of Open Source series would be of interest to people. Many apps such as OpenOffice, The Gimp, and Mozilla run on several operating systems - not _just_ Linux :J - and may have broader appeal then Linux-only apps. It's taken months to get it approved, but I'll be teaching a best of Open Source class at LCC Winter term. The descriptions of all of my linux classes are here: http://www.lanecc.edu/cont_ed/cont_ed/cc_menu_winter04.html#3 and instructions on how to register are here: http://www.lanecc.edu/cont_ed/faq.htm (hint: the website isn't easy. Best way to register is by phone) Note, if you will, that I'll also be teaching an Introduction to Linux class for newbies at LCC now. It will eventually be geared to people whose workplace has switched to Linux... which should counter the M$ FUD that goes, where will you get trained people to use Linux in your workplace? But there might be some nonprofits out there who are already using it, and this class will help these folks quickly get up to speed. Of course, the Linux system administration class (formerly Red Hat Linux System Administration) is also being offered. We plan to expand it to two classes, basic and a second-level class, starting Spring term. I also plan to have earned my RHCE, and possibly a couple of LPI certs, by then. Finally, we're also offering a special Linux sysadmin class for the folks at K12s who are in charge of keeping their computers running. Please spread the word. Ken ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug I remember the thread well and I am impressed that the best of and, k-12 classes made it into the catalog. What are the chances of the non distro specific intermeadiate linux users class or a beggining sys admin class making it to the schedules in the next year or so? John Fleming ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]SCO DDoS
SYN cookies (the protective fix) since '99? Some other date? Ben On Fri, 12 Dec 2003 15:21:41 -0800 Brad Davidson [EMAIL PROTECTED] wrote: | | Yes, but there have been patches out for routers/firewalls/TCP stacks | for AGES that make it much less of a problem. | ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]Those HP Servers
Maybe we could have a contest for the most creative use of these servers, and award the servers to the best entrants? Or would society get the most benefit from recycling these junkers responsibly, then holding a bake sale to buy Headstart a new Celeron box? Brainstorming time. Throw out some ideas. Mini fridge. -- [ SiMpLe MaChInEs ] -- gopher://beaker.mdns.org or (via proxy) http://gopher.floodgap.com/gopher/gw.lite?gopher://beaker.mdns.org:70/1 ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]FileSystem.mount()
T. Joseph Carter wrote: Doesn't this open you up to the world of evil that is NFS security? Not if you restricted it to localhost. NFS uses a priveleged port, and ordinary users can't sniff the lo interface, so I don't see a way offhand to simulate a client or eavesdrop on other clients from localhost. Maybe I'm missing something... -- Bob Miller Kbob kbobsoft software consulting http://kbobsoft.com [EMAIL PROTECTED] ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
[eug-lug]Thanks Larry, Bob and Cory! Re: Intruder
You guys rock! The blackjack:localhost is a port assigned to network blackjack at TCP/UDP 1025 in /etc/services. I don't remember having that port open (or even assigned) in previous Slackware distributions and can't imagine why PJV left this open, but I have closed it and it disappears from the netstat list. Woody ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
[eug-lug]whack: jack and phlack (sound and security projects)
Fun projects I found over dinner: 1. http://jackit.sourceforge.net/ what is jack? JACK is a low-latency audio server, written for POSIX conformant operating systems such as GNU/Linux and Apple's OS X. It can connect a number of different applications to an audio device, as well as allowing them to share audio between themselves. Its clients can run in their own processes (ie. as normal applications), or can they can run within the JACK server (ie. as a plugin). JACK was designed from the ground up for professional audio work, and its design focuses on two key areas: synchronous execution of all clients, and low latency operation. check out http://jackit.sourceforge.net/apps/ applications that use jack 2. http://www.phlak.org/modules/news/ PHLAK is a modular live security Linux distribution. PHLAK comes with two light gui's (fluxbox and XFCE4), many security tools, and a spiral notebook full of security documentation. PHLAK is a direct fork of Morphix, created by Alex de Landgraaf. another child of debian, in the line of knoppix... it has an impressive list of tools: http://www.phlak.org/modules/sections/index.php?op=listarticlessecid=1 nearby mirrors: http://phlak.oregonstate.edu/phlak-0.2.iso ftp://ftp.oregonstate.edu/.1/phlak/phlak-0.2.iso ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]whack: jack and phlack (sound and security projects)
And I guess if you haven't used it yet, you don't know Jack. Sorry. I'll leave now. Ben Barrett ([EMAIL PROTECTED]) wrote: Fun projects I found over dinner: 1. http://jackit.sourceforge.net/ what is jack? JACK is a low-latency audio server, written for POSIX conformant operating systems such as GNU/Linux and Apple's OS X. It can connect a number of different applications to an audio device, as well as allowing them to share audio between themselves. Its clients can run in their own processes (ie. as normal applications), or can they can run within the JACK server (ie. as a plugin). JACK was designed from the ground up for professional audio work, and its design focuses on two key areas: synchronous execution of all clients, and low latency operation. check out http://jackit.sourceforge.net/apps/ applications that use jack 2. http://www.phlak.org/modules/news/ PHLAK is a modular live security Linux distribution. PHLAK comes with two light gui's (fluxbox and XFCE4), many security tools, and a spiral notebook full of security documentation. PHLAK is a direct fork of Morphix, created by Alex de Landgraaf. another child of debian, in the line of knoppix... it has an impressive list of tools: http://www.phlak.org/modules/sections/index.php?op=listarticlessecid=1 nearby mirrors: http://phlak.oregonstate.edu/phlak-0.2.iso ftp://ftp.oregonstate.edu/.1/phlak/phlak-0.2.iso ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug -- Assured Computing When you need to be sure. [EMAIL PROTECTED] www.assuredcomp.com Voice - 541-868-0331 FAX - 541-463-1627 Eugene, Oregon ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]whack: jack and phlack (sound and security projects)
On Fri, Dec 12, 2003 at 09:39:41PM -0800, Ben Barrett wrote: Fun projects I found over dinner: 1. http://jackit.sourceforge.net/ what is jack? JACK is a low-latency audio server, written for POSIX conformant operating systems such as GNU/Linux and Apple's OS X. It can connect a number of different applications to an audio device, as well as allowing them to share audio between themselves. Its clients can run in their own processes (ie. as normal applications), or can they can run within the JACK server (ie. as a plugin). JACK was designed from the ground up for professional audio work, and its design focuses on two key areas: synchronous execution of all clients, and low latency operation. check out http://jackit.sourceforge.net/apps/ applications that use jack JACK is cool. If you use JACK, I highly recommend subscribing to the Planet CCRMA mailing list. JACK development is happening quickly, and keeping JACK apps in sync with JACK, and keeping JACK in sync with ALSA, takes some effort to stay current and keep your audio system stable. There's also now an xmms-jack plugin, so you can apply effects to internet radio and record/mix it in realtime, if something like that interests you :) If there are Linux audio program that don't use JACK within the next 6-8 months, they're probably better off dead. (And if there are audio programs that don't use ALSA natively in the next three months, they're _really_ better off dead, as ALSA will be the default audio system in Linux 2.6.0.) -- [EMAIL PROTECTED] ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug
Re: [eug-lug]whack: jack and phlack (sound and security projects)
On Sat, Dec 13, 2003 at 06:07:39AM +, Bob Crandell wrote: And I guess if you haven't used it yet, you don't know Jack. Sorry. I'll leave now. Actually, the site asks, Do you know JACK? http://jackit.sourceforge.net/docs/faq.php#a6 -- [EMAIL PROTECTED] ___ EuG-LUG mailing list [EMAIL PROTECTED] http://mailman.efn.org/cgi-bin/listinfo/eug-lug