Re: Winter clock issues in linux

2013-09-08 Thread Tzafrir Cohen
On Sun, Sep 08, 2013 at 11:56:00AM +0300, geoffrey mendelson wrote: > Can anyone point me to a correct Asia/Jerusalem file without having > to install a package? I have two old systems I want to fix, without > any other mods? Donload the deb and extract (ar+tar or with your file manager) usr/shar

Re: [hopefully on topic] is SSH secure in default configuration?

2013-09-08 Thread Oleg Goldshmidt
Aviram Jenik writes: > The question "is encryption ABC safe" is nowadays a purely academic > question and only academics care about them (no offense Oleg). None taken[*]. I re-read my post and I see now that I didn't emphasize that I meant "OpenSSH implementation of AES" when I wrote "AES". All

Re: [hopefully on topic] is SSH secure in default configuration?

2013-09-08 Thread ronys
The algorithm itself is the least of your worries. In modern cryptography, key management is the preferred target. With regards to ssh, this means the key negotiation phase of the protocol handshake. Using your own keys of reasonable size, and managing them properly, is your best bet for reasonable

Re: [hopefully on topic] is SSH secure in default configuration?

2013-09-08 Thread E.S. Rosenberg
2013/9/8 Aviram Jenik : > I'm only taking a wild guess here. To be clear, I have no inside knowledge > and my guess is probably as good as anyone else's. But if I had to bet this > is where I would put my money. > > Either: > > 1. They have a 0-day against SSH (e.g. if you have ssh running they can

Re: [hopefully on topic] is SSH secure in default configuration?

2013-09-08 Thread Aviram Jenik
I'm only taking a wild guess here. To be clear, I have no inside knowledge and my guess is probably as good as anyone else's. But if I had to bet this is where I would put my money. Either: 1. They have a 0-day against SSH (e.g. if you have ssh running they can login to your box) 2. They are awar

Re: [hopefully on topic] is SSH secure in default configuration?

2013-09-08 Thread E.S. Rosenberg
2013/9/8 Oleg Goldshmidt : > > Hi, > > I am not hopeful to secure much of anything against the likes of NSA or > GCHQ. However, my curiousity woke up when the latest > NYT/Guardian/ProPublica pieces about NSA/GCHQ/friends compromising much > of Internet encryption were accompanied by graphics like

Re: password managers (was: Re: Watch out for Bezeq

2013-09-08 Thread Amos Shapira
That's what I used too, until I got sick of files getting out of sync on various devices, having to keep track of what needs to be sync'ed were and copy usernames and passwords manually. All of this was gone when I switched to LastPass. On 8 September 2013 16:55, Leon Romanovsky wrote: > I use

[hopefully on topic] is SSH secure in default configuration?

2013-09-08 Thread Oleg Goldshmidt
Hi, I am not hopeful to secure much of anything against the likes of NSA or GCHQ. However, my curiousity woke up when the latest NYT/Guardian/ProPublica pieces about NSA/GCHQ/friends compromising much of Internet encryption were accompanied by graphics like http://www.nytimes.com/interactive/201

Re: Winter clock issues in linux

2013-09-08 Thread Rabin Yasharzadehe
Download the current tzdate file from iana and compile the file yourself e.g - http://www.borngeek.com/2009/03/16/updating-time-zone-information-in-linux/ On Sun, Sep 8, 2013 at 11:56 AM, geoffrey mendelson < geoffreymendel...@gmail.com> wrote: > On 9/8/2013 12:21 AM, E.S. Rosenberg wrote: > >

Re: Winter clock issues in linux

2013-09-08 Thread geoffrey mendelson
On 9/8/2013 12:21 AM, E.S. Rosenberg wrote: What puzzles me in this whole thing is that it seems to me tzdata updates should be available to all versions regardless of their "production" state, but it seems a lot of distros are locked to specific versions Can anyone point me to a correct Asi