Re: [M100] List of capacitors

[John R. Hogerhuis]

FWIW, the Club100 library URLs work in CloudT's "Add URL" feature since it
converts Club100 FTP URL's to http://

-- John.

Re: [M100] List of capacitors

[Daryl Tester]

On Mon, 23 Apr 2018 19:32:16 -0700, Gregory McGill wrote:


supp...@lizardhill.com is don's email.   knock yourself out


Note that as I initially wrote:

"A possibly irrelevant data point."

I don't use browsers for FTP, it's no skin off my nose, and I'm aware
of how much gratis work Don is giving the group.  Lacking 
administrative

access, I'd be prepared to do the work myself ...

--
Regards,
  Daryl Tester
  Handcrafted Computers Pty. Ltd.

Re: [M100] List of capacitors

[Gregory McGill]

supp...@lizardhill.com is don's email.   knock yourself out

Greg

On Mon, Apr 23, 2018 at 4:35 PM, Daryl Tester <
dt-m...@handcraftedcomputers.com.au> wrote:

> On Mon, 23 Apr 2018 09:44:24 -0700, Gregory McGill wrote:
>
> A while back we did a server upgrade, and the new FTP server tool we use
>> requires a non-encrypted FTP (no SSL or TLS) connection with the user name
>> 'anonymous' and no password (not even your email). That is the only way
>> anonymous FTP works any more. If you use a browser and go to
>> ftp://ftp.whtech.com, you can use 'anonymous' as the user, with no
>> password
>> as well.
>>
>
> The browser prompts for credentials *after* it has attempted logging in
> anonymously with a prefilled in password, and failing, sometimes several
> times.  Firefox and IE are particularly bad for this.
>
> It would be nice to whitelist the banning on the anonymous user (yeah,
> I know the ramifications of all of this - I had exactly the same issues
> when I used to support a corporate FTP server. I have many tcpdumps of
> the stupidity browsers get up to).
>
>
> --
> Regards,
>   Daryl Tester
>   Handcrafted Computers Pty. Ltd.
>

Re: [M100] List of capacitors

[Daryl Tester]

On Mon, 23 Apr 2018 09:44:24 -0700, Gregory McGill wrote:

A while back we did a server upgrade, and the new FTP server tool we 
use
requires a non-encrypted FTP (no SSL or TLS) connection with the user 
name
'anonymous' and no password (not even your email). That is the only 
way

anonymous FTP works any more. If you use a browser and go to
ftp://ftp.whtech.com, you can use 'anonymous' as the user, with no 
password

as well.


The browser prompts for credentials *after* it has attempted logging in
anonymously with a prefilled in password, and failing, sometimes 
several

times.  Firefox and IE are particularly bad for this.

It would be nice to whitelist the banning on the anonymous user (yeah,
I know the ramifications of all of this - I had exactly the same issues
when I used to support a corporate FTP server. I have many tcpdumps of
the stupidity browsers get up to).

--
Regards,
  Daryl Tester
  Handcrafted Computers Pty. Ltd.

Re: [M100] List of capacitors

[Brian White]

​I have many servers with public facing ftp and fail2ban banning bad IP's
too. None of this required making the ftp server config that strange.
I guess it's fine if you're one of the cool kids who know the secret
handshake, but really it just makes all those links in all those web pages
into broken links. IE, you click on them, and get an error instead of a
text document explaining something about a floppy drive.

-- 
bkw

On Mon, Apr 23, 2018 at 1:44 PM, Gregory McGill 
wrote:

> Yep me too, but I did set up a firewall on the BBS that blocks the 'bad
> countries' that most of the attacks come from..
> port 23 open is way too exciting to the morons..
>
> Greg
>
> On Mon, Apr 23, 2018 at 10:22 AM, Josh Malone 
> wrote:
>
>> Okay - thanks.
>>
>>
>> > The new FTP server was in response to the constant barrages of bots
>> trying
>> > to break into the server via insecure known FTP exploits. Not that they
>> > could have done any damage since everything from the public site is
>> > read-only, it was quite annoying. Sometimes we'd see 20-30,000 failed
>> logins
>> > a day with all sorts of dictionary attacks. Now, if any IP fails
>> logging in
>> > 5 times it's banned.
>>
>> I've grown accustomed to just ignoring failed logins - if you're on
>> the internet, expect them at the rate of about 1E42 every second. :)
>>
>> -Josh
>>
>
>


-- 
bkw

Re: [M100] List of capacitors

[Gregory McGill]

Yep me too, but I did set up a firewall on the BBS that blocks the 'bad
countries' that most of the attacks come from..
port 23 open is way too exciting to the morons..

Greg

On Mon, Apr 23, 2018 at 10:22 AM, Josh Malone  wrote:

> Okay - thanks.
>
>
> > The new FTP server was in response to the constant barrages of bots
> trying
> > to break into the server via insecure known FTP exploits. Not that they
> > could have done any damage since everything from the public site is
> > read-only, it was quite annoying. Sometimes we'd see 20-30,000 failed
> logins
> > a day with all sorts of dictionary attacks. Now, if any IP fails logging
> in
> > 5 times it's banned.
>
> I've grown accustomed to just ignoring failed logins - if you're on
> the internet, expect them at the rate of about 1E42 every second. :)
>
> -Josh
>

Re: [M100] List of capacitors

[Gregory McGill]

woops wrong group he posted in my other group:

A while back we did a server upgrade, and the new FTP server tool we use
requires a non-encrypted FTP (no SSL or TLS) connection with the user name
'anonymous' and no password (not even your email). That is the only way
anonymous FTP works any more. If you use a browser and go to
ftp://ftp.whtech.com, you can use 'anonymous' as the user, with no password
as well.


Alternatively we set up an http/https connection too...
http://ftp.whtech.com and https://ftp.whtech.com . Both of which mirror the
FTP just like you were connecting via FTP.


The new FTP server was in response to the constant barrages of bots trying
to break into the server via insecure known FTP exploits. Not that they
could have done any damage since everything from the public site is
read-only, it was quite annoying. Sometimes we'd see 20-30,000 failed
logins a day with all sorts of dictionary attacks. Now, if any IP fails
logging in 5 times it's banned.


Hope this helps for everyone!!


Don (still lurking in the shadows, lol)


On Mon, Apr 23, 2018 at 9:43 AM, Gregory McGill 
wrote:

> yep and as I stated in a post in this group it is because the haxxors are
> constantly attacking his ftp site.. not because he "cant"
>
>
> On Mon, Apr 23, 2018 at 5:51 AM, Josh Malone 
> wrote:
>
>> The root problem is is that Lizard Hill is not obeying the anonymous
>> FTP "standard". By convention, anon FTP uses "anonymous" or "ftp" as
>> the login and an email address as the password. By insisting on an
>> empty password, LH is breaking decades of FTP convention and the
>> browsers aren't coping well. I'm very surprised that they can't fix
>> this on a single line in the config file.
>>
>> -Josh
>>
>> On Sun, Apr 22, 2018 at 6:57 PM, Daryl Tester
>>  wrote:
>> > On Sun, 22 Apr 2018 11:05:29 -0700, Gregory McGill wrote:
>> >
>> >> best to use http://ftp.whtech.com or https://ftp.whtech.com then with
>> that
>> >> browser
>> >
>> >
>> > It's good to see the FTP site has been mapped onto http/https - that I
>> > hadn't realised.  Thanks for that!
>> >
>> > I normally use a real FTP client, because I've seen first hand how spack
>> > the web browser implementations can be (given as it sounds like the
>> hosting
>> > provider has something like fail2ban running, which will lock out an IP
>> > address with too many unsuccessful login attempts), but I understand the
>> > convenience factor of why people use browsers.
>> >
>> > Cheers.
>> >
>>
>
>

Re: [M100] List of capacitors

[Gregory McGill]

yep and as I stated in a post in this group it is because the haxxors are
constantly attacking his ftp site.. not because he "cant"


On Mon, Apr 23, 2018 at 5:51 AM, Josh Malone  wrote:

> The root problem is is that Lizard Hill is not obeying the anonymous
> FTP "standard". By convention, anon FTP uses "anonymous" or "ftp" as
> the login and an email address as the password. By insisting on an
> empty password, LH is breaking decades of FTP convention and the
> browsers aren't coping well. I'm very surprised that they can't fix
> this on a single line in the config file.
>
> -Josh
>
> On Sun, Apr 22, 2018 at 6:57 PM, Daryl Tester
>  wrote:
> > On Sun, 22 Apr 2018 11:05:29 -0700, Gregory McGill wrote:
> >
> >> best to use http://ftp.whtech.com or https://ftp.whtech.com then with
> that
> >> browser
> >
> >
> > It's good to see the FTP site has been mapped onto http/https - that I
> > hadn't realised.  Thanks for that!
> >
> > I normally use a real FTP client, because I've seen first hand how spack
> > the web browser implementations can be (given as it sounds like the
> hosting
> > provider has something like fail2ban running, which will lock out an IP
> > address with too many unsuccessful login attempts), but I understand the
> > convenience factor of why people use browsers.
> >
> > Cheers.
> >
>

Re: [M100] List of capacitors

[Daryl Tester]

On Sun, 22 Apr 2018 11:05:29 -0700, Gregory McGill wrote:

best to use http://ftp.whtech.com or https://ftp.whtech.com then with 
that

browser


It's good to see the FTP site has been mapped onto http/https - that I
hadn't realised.  Thanks for that!

I normally use a real FTP client, because I've seen first hand how 
spack
the web browser implementations can be (given as it sounds like the 
hosting

provider has something like fail2ban running, which will lock out an IP
address with too many unsuccessful login attempts), but I understand 
the

convenience factor of why people use browsers.

Cheers.

--
Regards,
  Daryl Tester
  Handcrafted Computers Pty. Ltd.

Re: [M100] List of capacitors

[Gregory McGill]

best to use http://ftp.whtech.com or https://ftp.whtech.com then with that
browser

On Sun, Apr 22, 2018 at 1:12 AM, Daryl Tester <
dt-m...@handcraftedcomputers.com.au> wrote:

> A possibly irrelevant data point.
>
> I tried using ftp://anonymous:@ftp.whtech.com/club100/doc/m100ServiceManua
> l.pdf
> (specifying username and empty password), but Firefox "helpfully" sets the
> empty password to "mozi...@example.com".  When the authentication fails
> (twice), it finally accepts that the password you entered was really empty
> and uses that.
>
> There used to be an option network.ftp.anonymous_password which is where
> this
> was set, but apparently that option no longer exists under 52.
>
> So, once more, browsers suck at protocols other than http/https, and by
> attempting to "be helpful" getting in the way.
>
>
>
> On 22/04/18 09:47, Ken Pettit wrote:
>
>> I asked Don at LizardHill about this.  His comment was "simply use
>> anonymous" with no password.  Or update the website to use http://
>> instead of ftp:// which I haven't had time to do.  So for now, specify
>> "anonymous" as the username.
>>
>> Ken
>>
>> On 4/21/18 5:14 PM, John Watson wrote:
>>
>>> That site asks me for a username and password.
>>>
>>> On 21/04/18 20:21, Mike Stein wrote:
>>>
 A slightly better scan that's not missing C53-C59:
 ftp://ftp.whtech.com/club100/doc/m100ServiceManual.pdf


>>
> --
> Regards,
>  Daryl Tester
>  Handcrafted Computers Pty. Ltd.
>

Re: [M100] List of capacitors

[Ken Pettit]

I asked Don at LizardHill about this.  His comment was "simply use 
anonymous" with no password.  Or update the website to use http:// 
instead of ftp:// which I haven't had time to do.  So for now, specify 
"anonymous" as the username.


Ken

On 4/21/18 5:14 PM, John Watson wrote:

That site asks me for a username and password.

On 21/04/18 20:21, Mike Stein wrote:

A slightly better scan that's not missing C53-C59:
  
ftp://ftp.whtech.com/club100/doc/m100ServiceManual.pdf
  

Re: [M100] List of capacitors

[Mike Stein]

A slightly better scan that's not missing C53-C59:

ftp://ftp.whtech.com/club100/doc/m100ServiceManual.pdf

  - Original Message - 
  From: Brian White 
  To: m...@bitchin100.com 
  Sent: Saturday, April 21, 2018 1:58 PM
  Subject: Re: [M100] List of capacitors


  correction, smack in the middle



  On Sat, Apr 21, 2018 at 1:56 PM, Brian White <bw.al...@gmail.com> wrote:

https://archive.org/details/m100service


towards the end



On Sat, Apr 21, 2018 at 11:39 AM, David Laffineuse <davidlaffine...@me.com> 
wrote:

  Does anyone have a complete list of capacitor specs for the M100?

  Thanks,

  David




-- 

bkw




  -- 

  bkw

Re: [M100] List of capacitors

[Brian White]

correction, smack in the middle

On Sat, Apr 21, 2018 at 1:56 PM, Brian White  wrote:

> https://archive.org/details/m100service
>
> towards the end
>
> On Sat, Apr 21, 2018 at 11:39 AM, David Laffineuse  > wrote:
>
>> Does anyone have a complete list of capacitor specs for the M100?
>>
>> Thanks,
>>
>> David
>>
>
>
>
> --
> bkw
>



-- 
bkw

Re: [M100] List of capacitors

[Brian White]

https://archive.org/details/m100service

towards the end

On Sat, Apr 21, 2018 at 11:39 AM, David Laffineuse 
wrote:

> Does anyone have a complete list of capacitor specs for the M100?
>
> Thanks,
>
> David
>



-- 
bkw

[M100] List of capacitors

[David Laffineuse]

Does anyone have a complete list of capacitor specs for the M100?

Thanks,

David