Re: recommended input methods?

2014-10-17 Thread Joel Rees
On Tue, Oct 14, 2014 at 3:14 PM, Bryan Linton wrote: > On 2014-10-14 14:02:52, Joel Rees wrote: >> What're the recommended input methods for Japanese and Spanish? >> > > [...] > The only complaint I have is that for some applications, namely > xombrero and xfe, they either do not accept Japanese

Re: looking for coding hints with ptrace(2)

2014-10-17 Thread Philip Guenther
On Fri, Oct 17, 2014 at 1:34 PM, Peter J. Philipp wrote: > I'm trying to read the stack of another process that has the same user > credentials. Here is my program, I am stuck with this, it doesn't work > for me. Printing 0's is rewrapped to '.' and you should use this program > with hexdump lik

Re: looking for coding hints with ptrace(2)

2014-10-17 Thread Peter J. Philipp
On 10/17/14 22:38, Theo de Raadt wrote: >> I'm trying to read the stack of another process that has the same user >> credentials. Here is my program, I am stuck with this, it doesn't work >> for me. Printing 0's is rewrapped to '.' and you should use this program >> with hexdump like so: ./memte

Re: Fix xfe (Was: sudo bad practice or inconsistency?)

2014-10-17 Thread Alessandro DE LAURENZIS
On Fri 17/10 17:39, Raimo Niskanen wrote: > > As I read the man page for su it is the target's login shell that is > invoked, and it need not always be /bin/sh - it can be changed. > > Therefore I suspect that you want "-s /bin/sh " between "su " and "root". I'm confused: just22@poseidon:[~]> s

Re: LibreSSL 2.1.1 released.

2014-10-17 Thread Ian Grant
On Thu, Oct 16, 2014 at 9:15 AM, Bob Beck wrote: > We have released LibreSSL 2.1.1- which should be arriving in the > LIbreSSL directory of an OpenBSD mirror near you very soon. If I clone the GitHub repo from Bolivia, do I have to cut my eyeballs out or stand guilty of re-exporting munitions fro

Re: looking for coding hints with ptrace(2)

2014-10-17 Thread Theo de Raadt
> I'm trying to read the stack of another process that has the same user > credentials. Here is my program, I am stuck with this, it doesn't work > for me. Printing 0's is rewrapped to '.' and you should use this program > with hexdump like so: ./memtest [pid] | hexdump -C | less > Sometimes I g

looking for coding hints with ptrace(2)

2014-10-17 Thread Peter J. Philipp
I'm trying to read the stack of another process that has the same user credentials. Here is my program, I am stuck with this, it doesn't work for me. Printing 0's is rewrapped to '.' and you should use this program with hexdump like so: ./memtest [pid] | hexdump -C | less Sometimes I get a bit o

Re: Shadow TCP stacks

2014-10-17 Thread Bret Lambert
On Fri, Oct 17, 2014 at 02:59:26PM -0400, Ian Grant wrote: > On Fri, Oct 17, 2014 at 2:49 PM, Bret Lambert wrote: > > Well, if, as Herr Schroeder seems to be implying, this is used to > > avoid port scans, I'd look for traffic to/from address:port which > > don't show up on scans. > > That's why

Re: Shadow TCP stacks

2014-10-17 Thread Ian Grant
On Fri, Oct 17, 2014 at 2:49 PM, Bret Lambert wrote: > Well, if, as Herr Schroeder seems to be implying, this is used to > avoid port scans, I'd look for traffic to/from address:port which > don't show up on scans. That's why I want to hide it behind an ordinary service. >> Also, the VPN could b

Re: Shadow TCP stacks

2014-10-17 Thread Martin Schröder
2014-10-17 20:49 GMT+02:00 Bret Lambert : > Well, if, as Herr Schroeder seems to be implying, this is used to > avoid port scans, I'd look for traffic to/from address:port which > don't show up on scans. That's certainly possible but more expensive than "find all ssh servers". Best Martin

Re: Shadow TCP stacks

2014-10-17 Thread Bret Lambert
On Fri, Oct 17, 2014 at 12:13:55PM -0400, Ian Grant wrote: > On Fri, Oct 17, 2014 at 4:24 AM, Bret Lambert wrote: > > On Thu, Oct 16, 2014 at 02:48:22PM +0200, Martin Schr??der wrote: > >> 2014-10-16 13:16 GMT+02:00 Kevin Chadwick : > >> The impossibility to scan for services - which the NSA/GHCQ/

Re: Fix xfe (Was: sudo bad practice or inconsistency?)

2014-10-17 Thread Raimo Niskanen
On Fri, Oct 17, 2014 at 05:51:08AM -0600, David Coppa wrote: > > From: Thorsten Glaser > > Date: Fri, Oct 17, 2014 at 10:44 AM > > Subject: Re: sudo bad practice or inconsistency? > > To: misc@openbsd.org > > > > > > Alessandro DE LAURENZIS gmail.com> writes: > > > > (line-wrapped because of G

Re: httpd, php, and httpd.conf in 5.6

2014-10-17 Thread Kevin
On Fri, Oct 17, 2014 at 9:51 AM, Zé Loff wrote: > > > Installed 5.6-current last night and saw that the new httpd daemon will > be > > using the config file /etc/httpd.conf (which looks like it needs to be > > created by hand, fine). > > > > At the risk of sounding like a knucklehead, are there

Re: httpd, php, and httpd.conf in 5.6

2014-10-17 Thread Zé Loff
On Fri, Oct 17, 2014 at 09:45:41AM -0700, Kevin wrote: > All, > > Installed 5.6-current last night and saw that the new httpd daemon will be > using the config file /etc/httpd.conf (which looks like it needs to be > created by hand, fine). > > At the risk of sounding like a knucklehead, are there

httpd, php, and httpd.conf in 5.6

2014-10-17 Thread Kevin
All, Installed 5.6-current last night and saw that the new httpd daemon will be using the config file /etc/httpd.conf (which looks like it needs to be created by hand, fine). At the risk of sounding like a knucklehead, are there good examples of how to hook php to the new daemon? (Or for that mat

Re: Shadow TCP stacks

2014-10-17 Thread J Sisson
On Fri, Oct 17, 2014 at 9:13 AM, Ian Grant wrote: > On Fri, Oct 17, 2014 at 4:24 AM, Bret Lambert wrote: >> On Thu, Oct 16, 2014 at 02:48:22PM +0200, Martin Schr??der wrote: >>> 2014-10-16 13:16 GMT+02:00 Kevin Chadwick : >>> The impossibility to scan for services - which the NSA/GHCQ/... do. >>

Re: Shadow TCP stacks

2014-10-17 Thread Ian Grant
On Fri, Oct 17, 2014 at 4:24 AM, Bret Lambert wrote: > On Thu, Oct 16, 2014 at 02:48:22PM +0200, Martin Schr??der wrote: >> 2014-10-16 13:16 GMT+02:00 Kevin Chadwick : >> The impossibility to scan for services - which the NSA/GHCQ/... do. > > It's a good thing that traffic analysis isn't a thing,

GCC Undefined Behavior Sanitizer – ubsan

2014-10-17 Thread somelooser3524
Hallo, "Undefined behavior is a concept known especially in the C and C++ languages which means that the semantics of certain operations is undefined and the compiler presumes that such operations never happen. For instance, using non-static variable before it has been initialized is undefined. I

relayd question - from the man page

2014-10-17 Thread Alan McKay
Hi folks, The manpage for relayd.conf has this basic construct in it a couple of times : table { 192.168.1.1, 192.168.1.2, 192.168.2.3 } table disable { 10.1.5.1 retry 2 } redirect "www" { listen on www.example.com port 80

Fix xfe (Was: sudo bad practice or inconsistency?)

2014-10-17 Thread David Coppa
> From: Thorsten Glaser > Date: Fri, Oct 17, 2014 at 10:44 AM > Subject: Re: sudo bad practice or inconsistency? > To: misc@openbsd.org > > > Alessandro DE LAURENZIS gmail.com> writes: > > (line-wrapped because of GMane) > > > #define SUDOCMD "-fn 7x14 -geometry 60x4 -e sudo su -c 'nohup \ >

Re: Shadow TCP stacks

2014-10-17 Thread Bret Lambert
On Fri, Oct 17, 2014 at 12:56:48PM +0200, Martin Schr??der wrote: > 2014-10-17 10:24 GMT+02:00 Bret Lambert : > > On Thu, Oct 16, 2014 at 02:48:22PM +0200, Martin Schr??der wrote: > >> The impossibility to scan for services - which the NSA/GHCQ/... do. > > > > It's a good thing that traffic analysi

Re: Shadow TCP stacks

2014-10-17 Thread Martin Schröder
2014-10-17 10:24 GMT+02:00 Bret Lambert : > On Thu, Oct 16, 2014 at 02:48:22PM +0200, Martin Schr??der wrote: >> The impossibility to scan for services - which the NSA/GHCQ/... do. > > It's a good thing that traffic analysis isn't a thing, then. Otherwise > they'd be able to check if traffic purpor

Re: sudo bad practice or inconsistency?

2014-10-17 Thread Thorsten Glaser
Alessandro DE LAURENZIS gmail.com> writes: (line-wrapped because of GMane) > #define SUDOCMD "-fn 7x14 -geometry 60x4 -e sudo su -c 'nohup \ > xfe >& /dev/null & sleep 1'" ^^ Note that this will not work on OpenBSD anyway; even mksh, which does implement this bashism, will not parse this

Re: Shadow TCP stacks

2014-10-17 Thread Bret Lambert
On Thu, Oct 16, 2014 at 02:48:22PM +0200, Martin Schr??der wrote: > 2014-10-16 13:16 GMT+02:00 Kevin Chadwick : > > I still don't see the benefit though but do see added complexity or > > more code to audit. > > > > Reducing DDOS against a visible SSH service maybe? Reduce password > > attempts on