Re: Compilers make a system less secure?

2006-05-02 Thread Otto Moerbeek
On Tue, 2 May 2006, josh wrote: Hello... Some people seem to think that installing a compiler inherently makes their system less secure... despite never being able to cite any actual reasons why. Personally, I really dont see how a compiler is going to lessen security, particuarly when

Re: Compilers make a system less secure?

2006-05-02 Thread loki
On Tue, May 02, 2006 at 04:21:41PM +1200, josh wrote: Some people seem to think that installing a compiler inherently makes their system less secure... despite never being able to cite any actual reasons why. If someone has enough access to your system to use a compiler (maliciously), couldn't

Re: Compilers make a system less secure?

2006-05-02 Thread Damien Miller
On Tue, 2 May 2006, josh wrote: Hello... Some people seem to think that installing a compiler inherently makes their system less secure... despite never being able to cite any actual reasons why. Personally, I really dont see how a compiler is going to lessen security, particuarly when

Re: Compilers make a system less secure?

2006-05-02 Thread H4RR1S
Hi :) Maybe some people tend to think installing a compiler is giving an intruder the possibility to compile his own code. Personally I think, that this thought is one step too late for securing a system. If an intruder already has compromised the system it has been proven that the system is

Re: Red Black Trees

2006-05-02 Thread Damien Miller
On Mon, 1 May 2006, Brian wrote: I am reading through the tree(3), and I need some clarification. If I want to correctly remove an element from a red black tree that I have found and free it's memory allocation, this code should work, right? find.i = 400; n = RB_FIND(inttree, head, find);

Re: PCMCIA on a laptop with a Insyde Software MobilePRO BIOS not working

2006-05-02 Thread Henrik Borgh
On 5/2/06, Lars Hansson [EMAIL PROTECTED] wrote: On Monday 01 May 2006 17:29, Henrik Borgh wrote: I suscpect that the situation is pretty much the same on every laptop, equpped with a Insyde MobilePRO BIOS, Or it could just be Acer since I dont get any errors on my generic laptop with Insyde

Re: PCMCIA on a laptop with a Insyde Software MobilePRO BIOS not working

2006-05-02 Thread Lars Hansson
On Tuesday 02 May 2006 14:31, Henrik Borgh wrote: Could you please tell if you are able to configure IRQ-settings through your BIOS? Nope, there are no settings for the PCMCIA IRQ's in the BIOS, it just works. --- Lars Hansson

Re: pf firewall question

2006-05-02 Thread Paulo Rodriguez
Apologies accepted. bofh schreef: On 5/1/06, Lars Hansson [EMAIL PROTECTED] wrote: On Tuesday 02 May 2006 05:31, bofh wrote: I must say though, a well designed gui can be a great help in managing a [...] not believe him. Now that I'm managing a small bunch of checkpoint

Re: Alternatives to /proc filesystem

2006-05-02 Thread Federico Giannici
Hannah Schroeter wrote: Hello! On Sun, Apr 30, 2006 at 05:07:07PM +0200, Federico Giannici wrote: My CD finally arrived and I immediately installed 3.9 in the first machine. I immediately found a problem for me: it seems that the GENERIC kernel no longer support the procfs filesystem.

Re: Alternatives to /proc filesystem

2006-05-02 Thread Federico Giannici
Stephen Takacs wrote: Instead of compiling a custom kernel, what is the best way (in Perl) to get the list of current processes? I have to scan the list every few seconds. A couple of years ago, I tried executing an external ps, but found that it sometimes freezed. I found the scanning of the

Thinkpad x60s errata(bsd.mp): ioapic0: pin 11 shares different IPL interrupts (40..50), degraded performance

2006-05-02 Thread Didier Wiroth
Hello, For those who are interested, here is the latest info. (I've build my latest snapshot this morning and tested it on the lenovo thinkpad x60s) It looks like developers fixed the ahci bios issue (THANKS!!!). Both (bsd,bsd.rd) kernels work fine now. Still having problems with bsd.mp.

openbsd, wrap, sis driver

2006-05-02 Thread Wild Karl-Heinz
I was looking for performance on a wrap box with openbsd. All infos I've found were much better than the results I got. But that's not the point. When I was locking at m0n0wall I found a patch for the sis driver. Could it be relevant for openbsd too?

Re: Red Black Trees

2006-05-02 Thread Henning Brauer
* Brian [EMAIL PROTECTED] [2006-05-02 07:06]: I am reading through the tree(3), and I need some clarification. If I want to correctly remove an element from a red black tree that I have found and free it's memory allocation, this code should work, right? find.i = 400; n =

Re: Thinkpad x60s errata(bsd.mp): ioapic0: pin 11 shares different IPL interrupts (40..50), degraded performance

2006-05-02 Thread Srebrenko Sehic
While booting bsd.mp I noticed the following output: ioapic0: pin 11 shares different IPL interrupts (40..50), degraded performance Disable pcibios (boot bsd.mp -c; disable pcibios; quit;) and see if the degraded performance message goes away. I bet it will, and your bsd.mp performance problems

Re: notebook: HP Compaq nc6220 - unable to boot from installation CD (crashes)

2006-05-02 Thread Jonathan Gray
On Mon, May 01, 2006 at 11:13:28PM +0200, Vincent Immler wrote: Hi folks, I own a HP Compaq nc6220. I really like this notebook, business look and quality. But I have a serious problem with OpenBSD. I just tried an OpenBSD 3.9 installation CD on it and can't boot properly (already had

Re: Thinkpad x60s errata(bsd.mp): ioapic0: pin 11 shares different IPL interrupts (40..50), degraded performance

2006-05-02 Thread Didier Wiroth
Disable pcibios (boot bsd.mp -c; disable pcibios; quit;) and see if the degraded performance message goes away. I bet it will, and your bsd.mp performance problems will do too. Thx, but this didn't solve the problem. Here the dmesg: OpenBSD 3.9-current (GENERIC.MP) #1: Mon May 1 18:29:09 CEST

Re: Compilers make a system less secure?

2006-05-02 Thread Anton Karpov
Maybe, because in some cases, it just takes a bit more time to 0wn your box if it has no compiler installed. 02 May 2006 16:21:41 +1200, josh [EMAIL PROTECTED]: Hello... Some people seem to think that installing a compiler inherently makes their system less secure... despite never being

Re: OpenBSD via serial line

2006-05-02 Thread Stuart Henderson
On 2006/05/02 12:15, John Kintaro Tate wrote: I was wondering about installing OpenBSD on a very old laptop (no cdrom) via serial line. I am aware it would take literally ages. Transferring the files over serial line shouldn't take /too/ long, unless the laptop can't keep up with the serial

Re: Compilers make a system less secure?

2006-05-02 Thread Nick Holland
Anton Karpov wrote: Maybe, because in some cases, it just takes a bit more time to 0wn your box if it has no compiler installed. Bull. I've never heard of someone taking over a box using a compiler. After all, the compiler is not exposed to the outside world. At most, they build some tools

Re: OpenBSD via serial line

2006-05-02 Thread John Kintaro Tate
The laptop is really old, its a 486DX4, and it has no USB, so the suggestions for that are no good. I cannot find anyone in melbourne that sells oldschool pcmcia network cards, but I do have a null modem sitting around that I use on serial console machines from time to time. I might look into

Re: Compilers make a system less secure?

2006-05-02 Thread Robert C Wittig
Hello Anton, Tuesday, May 2, 2006, 5:05:10 AM, you wrote: AK Maybe, because in some cases, it just takes a bit more time to 0wn AK your box if it has no compiler installed. It's like saying that a handgun makes your house an inherently more dangerous place. Handguns and compilers are both

pdnsd in ports

2006-05-02 Thread anu bhaskar
Hi Will the pdnsd package in the ports, function as a full featured dns server with mysql backend. -- Thank You Anu Bhaskar

Re: pdnsd in ports

2006-05-02 Thread Lars Hansson
On Tuesday 02 May 2006 19:17, anu bhaskar wrote: Will the pdnsd package in the ports, function as a full featured dns server with mysql backend. No.

Re: Compilers make a system less secure?

2006-05-02 Thread Anton Karpov
Imagine the typical situation: an attacker get non-root access to your system, maybe due to the hole in your network daemon foobard, maybe due to the badly coded cgi, or maybe he is a legitimate shell user. The next his step is to get full privileges, e.g. root account. Let suppose he has a l33t

build a kernel

2006-05-02 Thread holger glaess
hi i did an cvsup from 38 to 3.9 then everthing was documented ( cd /usr/src/sys/arch/i386/conf ; config GENERIC ; cd ../compile/GENERIC ; make depend ) to make shure if i did somthing wrong i got the whole source by ftp (src.tar.gz and sys.tar.gz ) for 3.9 and get on both this error ! any

Re: build a kernel

2006-05-02 Thread Florin Iamandi
holger glaess dixit (2006-05-02, 14:04:02): i did an cvsup from 38 to 3.9 then everthing was documented ( cd /usr/src/sys/arch/i386/conf ; config GENERIC ; cd ../compile/GENERIC ; make depend ) to make shure if i did somthing wrong i got the whole source by ftp (src.tar.gz and sys.tar.gz )

Re: (PC video card memory aperture !=0) =OS Rootability?

2006-05-02 Thread Dave Feustel
On Monday 01 May 2006 21:00, mcb, inc. wrote: On Mon, 1 May 2006, Dave Feustel wrote: Below is a comment about X-Windows security sent to me by a person with a lot of experience in computer security: === Dave, X-Windows has been known to be insecure for some time. That is to

Re: PCMCIA on a laptop with a Insyde Software MobilePRO BIOS not working

2006-05-02 Thread Henrik Borgh
On 5/2/06, Lars Hansson [EMAIL PROTECTED] wrote: On Tuesday 02 May 2006 14:31, Henrik Borgh wrote: Could you please tell if you are able to configure IRQ-settings through your BIOS? Nope, there are no settings for the PCMCIA IRQ's in the BIOS, it just works. Are you using some special

Re: OpenBSD 3.9: Blob-Busters Interviewed by Federico Biancuzzi

2006-05-02 Thread Ed White
Dave, I guess the interviewer is talking about this email by Theo: http://marc.theaimsgroup.com/?l=openbsd-miscm=112475373731469w=2 where he states: - When you free an object that is = 1 page in size, it is actually returned to the system. Attempting to read or write to it after you free

Re: Alternatives to /proc filesystem

2006-05-02 Thread Luke Bakken
Hannah Schroeter wrote: Hello! On Sun, Apr 30, 2006 at 05:07:07PM +0200, Federico Giannici wrote: My CD finally arrived and I immediately installed 3.9 in the first machine. I immediately found a problem for me: it seems that the GENERIC kernel no longer support the procfs filesystem.

Re: Compilers make a system less secure?

2006-05-02 Thread Alexander Bochmann
...on Tue, May 02, 2006 at 03:49:26PM +0400, Anton Karpov wrote: But what if your system has no compiler? When attacker should compile his sploit anywhere, and transfer binary evil code onto your box. E.g. he has to have access to the similar machine, maybe with similas OS version and arch.

Re: Compilers make a system less secure?

2006-05-02 Thread jared r r spiegel
On Tue, May 02, 2006 at 04:21:41PM +1200, josh wrote: Hello... Some people seem to think that installing a compiler inherently makes their system less secure... despite never being able to cite any actual reasons why. i had a machine get compromised once; now we don't have a compiler on

Re: Compilers make a system less secure?

2006-05-02 Thread Marian Hettwer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Anton Karpov wrote: Maybe, because in some cases, it just takes a bit more time to 0wn your box if it has no compiler installed. No, not at all. You can't attack a compiler, it's not accessable from the outside. The only reason I can think of in

Re: build a kernel

2006-05-02 Thread Nigel J. Taylor
Compiling 3.9 under 3.8 is not supported, upgrade to 3.9 and build under 3.9. http://www.openbsd.org/faq/faq5.html Step 1, in Building OpenBSD from Source is Upgrading to the closest available binary. It is possible to resolve errors below and build 3.9 under 3.8, but takes some work, you have

Re: OpenBSD 3.9: Blob-Busters Interviewed by Federico Biancuzzi

2006-05-02 Thread Ted Unangst
On 5/2/06, Ed White [EMAIL PROTECTED] wrote: - When you free an object that is = 1 page in size, it is actually returned to the system. Attempting to read or write to it after you free is no longer acceptable. That memory is unmapped. You get a SIGSEGV. - For a decade and a bit, we

Patch make question

2006-05-02 Thread Will H. Backman
001_sendmail.patch for 3.9 says: make obj make depend make make install Is there anything wrong with make obj make depend make make install ? -- Will

Re: Patch make question

2006-05-02 Thread Eric Pancer
On Tue, 2006-05-02 at 10:28:30 -0400, Will H. Backman proclaimed... 001_sendmail.patch for 3.9 says: make obj make depend make make install Is there anything wrong with make obj make depend make make install No.

Re: Patch make question

2006-05-02 Thread Alexander Hall
Will H. Backman wrote: 001_sendmail.patch for 3.9 says: make obj make depend make make install Is there anything wrong with make obj make depend make make install Can't see anything wrong with it.

Re: Compilers make a system less secure?

2006-05-02 Thread Bob Beck
In my experience it's simple. Generally speaking, not installing a compiler makes the system less secure. Why? real easy. Most systems I have ever seen without a compiler has software running on it that is behind on it's updates. When you ask the system administrator why, it is Oh I don't

Sundance PCI Expansion Board

2006-05-02 Thread Cassio B. Caporal
Hey, I have 2 ethernet's connected to a sundance expansion board, but ethernet's are not recognized. I'm using OpenBSD 3.9 and default kernel. --dmesg-- vendor Sundance, unknown product 0x0200 (class network subclass ethernet, rev 0x31) at pci1 dev 0 function 0 not configured

Re: Compilers make a system less secure?

2006-05-02 Thread Tony
Anton Karpov wrote If he can break in as a lowly user uname -a will tell him what it is anyway. And don't tell me we should disable that command or cause it to lie because then I'll shoot you down another way. Re-read my message, please. I didn't tell he cannot stat os version and

Re: Compilers make a system less secure?

2006-05-02 Thread Anton Karpov
Maybe, because in some cases, it just takes a bit more time to 0wn your box if it has no compiler installed. No, not at all. You can't attack a compiler, it's not accessable from the outside. Noone here talks about attacking a compiler ;) We're discussing differences for attacker,

Re: Compilers make a system less secure?

2006-05-02 Thread Graham Toal
But what if your system has no compiler? When attacker should compile his sploit anywhere, and transfer binary evil code onto your box. E.g. he has to have access to the similar machine, maybe with similas OS version and arch. I know not having a compiler has been considered secure

dell 2650 (-current)

2006-05-02 Thread Okan Demirmen
Hi - So I have this wierd problem, which is duplicated on 3 identical machines, where I get a bunch of bmc_io_wait fails messages (see the end of the dmesg). The longer the machine is on, the more messages get tacked on. I'm wondering what this could be. Any ideas/hints? For the curious, the

Re: Compilers make a system less secure?

2006-05-02 Thread Marian Hettwer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hej Bob, Bob Beck wrote: In my experience it's simple. Generally speaking, not installing a compiler makes the system less secure. Why? real easy. Most systems I have ever seen without a compiler has software running on it that is behind

Re: Sundance PCI Expansion Board

2006-05-02 Thread Miod Vallat
I have 2 ethernet's connected to a sundance expansion board, but ethernet's are not recognized. I'm using OpenBSD 3.9 and default kernel. You forgot to tell us which architecture you are running OpenBSD on (something an unabridged dmesg would have told us). I'll suppose you are running an

Re: Sundance PCI Expansion Board

2006-05-02 Thread Cassio B. Caporal
Sorry, im running OpenBSD on i386 system. I dont have Sundance Ethernet card.. I have two 3Com cards connected to Sundance Expansion board. -- dmesg -- OpenBSD 3.9 (GENERIC) #617: Thu Mar 2 02:26:48 MST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel(R)

Re: Compilers make a system less secure?

2006-05-02 Thread Alexander Bochmann
...on Tue, May 02, 2006 at 09:46:01AM -0500, Graham Toal wrote: Back in the old days when the only access to a system was by a modem to a login prompt, and there was no networking available to make things easy, the only way to get a binary on to a machine was to somehow enter it from the

Re: (PC video card memory aperture !=0) =OS Rootability?

2006-05-02 Thread Jonathan Thornburg
Dave Feustel pointed to http://www.ssi.gouv.fr/fr/sciences/fichiers/lti/cansecwest2006-duflot-paper.pdf as an example of X-Windows has been known to be insecure for some time.. A brief perusal of the paper shows that it describes a way for the *superuser* to circumvent securelevel

Re: Compilers make a system less secure?

2006-05-02 Thread NetNeanderthal
On 5/2/06, jared r r spiegel [EMAIL PROTECTED] wrote: i am not asserting that the compromise-pack did not have a precompiled sshd binary for openbsd ( the prior hop up the compromise chain in this case was a debianlinux ), but if it didn't, it may not have rooted machine B. This is a

Re: Compilers make a system less secure?

2006-05-02 Thread Anton Karpov
2006/5/2, [EMAIL PROTECTED] [EMAIL PROTECTED]: Anton Karpov wrote: Noone here talks about attacking a compiler ;) We're discussing differences for attacker, depending on compiler available or not. They should. There is a classic by Ken Thompson (I think) about using a compiler to

Re: Compilers make a system less secure?

2006-05-02 Thread jared r r spiegel
On Tue, May 02, 2006 at 09:33:48AM -0400, jared r r spiegel wrote: i am not asserting that the compromise-pack did not have a precompiled sshd binary for openbsd ( the prior hop up the compromise chain in this case was a debianlinux ), but if it didn't, it may not have rooted machine

Re: 3.9 build on AMD64

2006-05-02 Thread Ed V.
Thanks. What do you mean by more current tree? The CVS build? (e.g.: -current versus -stable) I tried updating directly from anoncvs.ca.openbsd.org this morning still from the -stable branch and got the same stopper. Keep in mind that the initial install was to a formatted drive on a clean or

Re: Compilers make a system less secure?

2006-05-02 Thread Ted Unangst
On 5/2/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: There is a classic by Ken Thompson (I think) about using a compiler to create a back door which has no traces in the source of either the compiler or of the back-doored module. Something about who can you trust. right. and if this is the

OT: opinion on this opinion...

2006-05-02 Thread poncenby
Taken from http://wiki.noreply.org/noreply/TheOnionRouter/ TorFAQ#ServerAnonymity FreeBSD 4.x, all versions of OpenBSD, and all versions of NetBSD have broken gethostbyname_r() implementations that cause Tor's threads to stomp on each other. So rather than threading on these platforms, we

Congratulations OpenBSD project.

2006-05-02 Thread João Salvatti
Hi all, This e-mail has not the purpose of clearing any doubt. It's only meant to thanks everyone who belongs to this mailing list, those who are developers, those who work translating any kind of pages and answering e-mails. I also would like to give my congratulations to the OpenBSD project.

Re: Sundance PCI Expansion Board

2006-05-02 Thread Miod Vallat
Sorry, im running OpenBSD on i386 system. I dont have Sundance Ethernet card.. I have two 3Com cards connected to Sundance Expansion board. Aha! It turns out your expansion box is not supported in the 3.9 release, but only in -CURRENT. However, the changes are trivial to

AMD64 still broken...

2006-05-02 Thread Ed V.
Thanks for all the suggestions (on list and off list). At this point I have: * Low-level formatted my hard drive (twice) * Re-downloaded all AMD64 distribution files and verified checksum values. * Re-installed three times * Re-checked out the CVS OPENBSD_3_9 branch four times Attempted to

problem detecting fxp in 3.9-RELEASE

2006-05-02 Thread Peter Bartoli
Please pardon me if this has already been reported, but this problem still persists in the release. http://archives.neohapsis.com/archives/openbsd/2006-03/0565.html -peter

3.9, su command: bug or feature?

2006-05-02 Thread Cristiano Deana
Hi, i'm new on OpenBSD. I just installed 3.9 (one week ago sources) and i got this: $ uname -rs OpenBSD 3.9 $ su Password: you are not in group wheel Sorry $ whoami cris $ id cris uid=1000(cris) gid=0(wheel) groups=0(wheel) $ grep cris /etc/passwd cris:*:1000:0:Cristiano

Re: using torrents for packages?

2006-05-02 Thread sebastian . rother
jared and daniel, What advantages does Ttorent has: 1. Torrent itself is a protocl. It should be possible to implement it even in Perl 2. In Case of Universities wich have maybe NO mirror: Some universitives have a VERY liberal administration. In Fact that means that every part of the

Re: problem detecting fxp in 3.9-RELEASE

2006-05-02 Thread Miod Vallat
Please pardon me if this has already been reported, but this problem still persists in the release. Of course it still persists in the release, since it was corrected after 3.9 was finalized; however, the fix has been commited to 3.9-STABLE. Miod

Re: 3.9, su command: bug or feature?

2006-05-02 Thread Otto Moerbeek
On Tue, 2 May 2006, Cristiano Deana wrote: Hi, i'm new on OpenBSD. I just installed 3.9 (one week ago sources) and i got this: $ uname -rs OpenBSD 3.9 $ su Password: you are not in group wheel Sorry $ whoami cris $ id cris uid=1000(cris) gid=0(wheel) groups=0(wheel) $ grep cris

Re: 3.9, su command: bug or feature?

2006-05-02 Thread Tony
Cristiano Deana wrote: Hi, i'm new on OpenBSD. I just installed 3.9 (one week ago sources) and i got this: $ uname -rs OpenBSD 3.9 $ su Password: you are not in group wheel Sorry $ whoami cris $ id cris uid=1000(cris) gid=0(wheel) groups=0(wheel) $ grep cris /etc/passwd

Re: 3.9, su command: bug or feature?

2006-05-02 Thread Marcus Carvalho
usermod -G wheel user 2006/5/2, Cristiano Deana [EMAIL PROTECTED]: Hi, i'm new on OpenBSD. I just installed 3.9 (one week ago sources) and i got this: $ uname -rs OpenBSD 3.9 $ su Password: you are not in group wheel Sorry $ whoami cris $ id cris uid=1000(cris) gid=0(wheel)

Re: AMD64 still broken...

2006-05-02 Thread Ed V.
Initial install was with media from: ftp://ftp.openbsd.org/pub/OpenBSD/3.9/amd64 CVS checkout was done with: CVS_RSH='/usr/bin/ssh' CVSROOT='[EMAIL PROTECTED]:/cvs' cvs -q checkout -rOPENBSD_3_9 -P src Which, if I understand the documentation correctly, should have given me the -stable

OpenBSD 3.9 on Sony Vaio FS-115S

2006-05-02 Thread Luca Ramella Votta
After install/upgrade OpenBSD 3.9 at the system startup the operating system jams with this error: fxp0: SCB time out. The error is occured when the system tried to assign the IP at the network card. Now I have disabled the network startup. The dmesg reports: === OpenBSD 3.9

Re: Compilers make a system less secure?

2006-05-02 Thread Constantine A. Murenin
On 02/05/06, Anton Karpov [EMAIL PROTECTED] wrote: privileges to replace your compiler with backdoored one, he has another 65535 ways to abuse your box. Did you mean 65536 ways? Anyhow, I doubt many people nowadays have 16-bit boxes on public networks. :)

3.9 on sony vaio pcg-v505bx: wi0 is missing

2006-05-02 Thread Anton Karpov
I'm trying to boot OpenBSD 3.9 on my sony vaio, in order to play with it onto my laptop (which is currently powered by freebsd). Everything seems to be fine, except wireless card: wi0 at pci2 dev 2 function 0 Intersil PRISM2.5 rev 0x01pci_intr_map: no mapping for pin A : couldn't map interrupt

Re: openbsd, wrap, sis driver

2006-05-02 Thread Chris Cappuccio
The openbsd if_sis is a port of the freebsd driver, so you might be able to make the patch apply on openbsd. do you know what the patch actually does and if it is worth the time to try and apply to the openbsd driver? Wild Karl-Heinz [EMAIL PROTECTED] wrote: I was looking for performance on a

Re: OpenBSD 3.9: Blob-Busters Interviewed by Federico Biancuzzi

2006-05-02 Thread Ed White
On Tuesday 02 May 2006 16:22, Ted Unangst wrote: But it seems that this feature was disabled just before shipping 3.8 because too many ports were instable. 3.9 should come with it. how does it seem this feature was disabled? look at cvs log. nothing was disabled. Disabled = Not enabled

Re: Compilers make a system less secure?

2006-05-02 Thread Constantine A. Murenin
On 02/05/06, jared r r spiegel [EMAIL PROTECTED] wrote: On Tue, May 02, 2006 at 09:33:48AM -0400, jared r r spiegel wrote: i am not asserting that the compromise-pack did not have a precompiled sshd binary for openbsd ( the prior hop up the compromise chain in this case was a

Re: AMD64 still broken...

2006-05-02 Thread Joachim Schipper
On Tue, May 02, 2006 at 01:23:21PM -0600, Ed V. wrote: Initial install was with media from: ftp://ftp.openbsd.org/pub/OpenBSD/3.9/amd64 CVS checkout was done with: CVS_RSH='/usr/bin/ssh' CVSROOT='[EMAIL PROTECTED]:/cvs' cvs -q checkout -rOPENBSD_3_9 -P src Which, if I understand

Re: notebook: HP Compaq nc6220 - unable to boot from installation CD (crashes)

2006-05-02 Thread Vincent Immler
Okay, then it seems like that this is a problem with HP NC notebooks in general - I wonder why it isn't fixed then ... I had an old bios revision and updated to a newer one - without improvement. Tried the latest snapshot - without improvement. Hmm ... what is going to be cheaper? Selling this

Re: Compilers make a system less secure?

2006-05-02 Thread tdonahue
[snip] One thing I didn't follow in this story is why did this 'virus' change the host key? It's not like you can't use the old key with the new sshd install, is it? I see no problem with doing so, I have done so regularly in the past when doing upgrades. As long as you back up your host

Re: OpenBSD 3.9: Blob-Busters Interviewed by Federico Biancuzzi

2006-05-02 Thread Ted Unangst
On 5/2/06, Ed White [EMAIL PROTECTED] wrote: On Tuesday 02 May 2006 16:22, Ted Unangst wrote: But it seems that this feature was disabled just before shipping 3.8 because too many ports were instable. 3.9 should come with it. how does it seem this feature was disabled? look at cvs log.

Re: Compilers make a system less secure?

2006-05-02 Thread jared r r spiegel
On Tue, May 02, 2006 at 09:49:07PM +0100, Constantine A. Murenin wrote: On 02/05/06, jared r r spiegel [EMAIL PROTECTED] wrote: if we didn't have that little PIII/450 sitting next to the machine now, for the purposes of bringing live, getting patches onto, making .tgzs, and then

Re: OpenBSD 3.9: Blob-Busters Interviewed by Federico Biancuzzi

2006-05-02 Thread Constantine A. Murenin
On 02/05/06, Ted Unangst [EMAIL PROTECTED] wrote: once again, nothing changed. if it wasn't enabled in 3.8, it's not enabled in 3.9 and it's not going to get enabled in 3.A. eghhh... Is this the start of the version naming debate again? :) What was the conclusion from the last time? ;)

Re: Compilers make a system less secure?

2006-05-02 Thread Robert C Wittig
Hello chefren, Tuesday, May 2, 2006, 7:51:23 AM, you wrote: c It's quite difficult to shoot yourselves without a gun Yes, exactly... like I said the danger lies in the user, not in the tool. I suppose if a person wants to remain a kludge, and a stumble-bum for the rest of their life, then they

Recommended NIC: Gbit Realtek or 100Mbit 3Com/Intel

2006-05-02 Thread
Hello, I'm thinking about playing with pfsync/carp a bit and for this I will need to buy few additional NICs. From various notes it seems Gbit Realtek chips might not be that crappy as their 100Mbit counterprarts (except 8139c+) and the cards with them seem to even be cheaper than 100Mbit cards

Re: Removing a misconfigured list member? [EMAIL PROTECTED]: Undelivered Mail Returned to Sender]

2006-05-02 Thread Constantine A. Murenin
On 22/03/06, Hannah Schroeter [EMAIL PROTECTED] wrote: Hello! On Wed, Mar 22, 2006 at 07:55:39AM +0059, Han Boetes wrote: Keith Richardson wrote: Hannah wrote: Mailing to [EMAIL PROTECTED] didn't work either (similar loop error message). So could one please remove [EMAIL PROTECTED] from

patch validation

2006-05-02 Thread mdcalvi
I brought up a 3.9 server and have patched it with the sendmail patch. My question is how does one prove that the box has been patched in 2,3 or 4 months? TIA Mike

Re: openbsd, wrap, sis driver

2006-05-02 Thread Wild Karl-Heinz
On Tuesday 02 May 2006 22:44, Chris Cappuccio wrote: The openbsd if_sis is a port of the freebsd driver, so you might be able to make the patch apply on openbsd. do you know what the patch actually does and if it is worth the time to try and apply to the openbsd driver? What I've understood,

Re: patch validation

2006-05-02 Thread Nick Guenther
On 5/2/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I brought up a 3.9 server and have patched it with the sendmail patch. My question is how does one prove that the box has been patched in 2,3 or 4 months? TIA Mike Keep notes?

Can't get gettext installed via package on 3.9.

2006-05-02 Thread Allie Daneman
I already tried to submit a bug report on a package with new dependencies so I'll just post to misc and see if I can get some guidance. It seems like a few packages depend on gettext and I'm having issues installing it's new version. I get this: Can't install gettext-0.14.5p1 because of

Re: Compilers make a system less secure?

2006-05-02 Thread Chris Kuethe
On 5/2/06, Constantine A. Murenin [EMAIL PROTECTED] wrote: Another thing is trusting the updated hostkey. Imagine you are a sysadmin at a university. Do you keep the old hostkey when you reinstall the system on a specific host? What about when you upgrade a Sun workstation, but keep the old

Re: Compilers make a system less secure?

2006-05-02 Thread Constantine A. Murenin
On 02/05/06, jared r r spiegel [EMAIL PROTECTED] wrote: On Tue, May 02, 2006 at 09:49:07PM +0100, Constantine A. Murenin wrote: On 02/05/06, jared r r spiegel [EMAIL PROTECTED] wrote: if we didn't have that little PIII/450 sitting next to the machine now, for the purposes of bringing

Re: Compilers make a system less secure?

2006-05-02 Thread Constantine A. Murenin
On 03/05/06, Chris Kuethe [EMAIL PROTECTED] wrote: On 5/2/06, Constantine A. Murenin [EMAIL PROTECTED] wrote: Another thing is trusting the updated hostkey. Imagine you are a sysadmin at a university. Do you keep the old hostkey when you reinstall the system on a specific host? What about

is openbsd 3.9 php vulnerable? (Re[2]: [UPDATE] php5 to version 5.1.2 (IMPORTANT))

2006-05-02 Thread paul dansing
Hello, Can someone please give a straight answer about these PHP security holes? OpenBSD 3.9 released yesterday had packages supporting: php 4.4.1p0 php 5.0.5p0 are either of these vulnerable? if so, is someone going to release updated packages (not just ports)? the php 5.1.3 release: The

Packet Engines PMC/GNIC2 on 3.9 release

2006-05-02 Thread kyle
I shot out an email re: this last week but it was under 3.8. I'm on 3.9 release now, and the device again shows up as not configured. It's in the source(in dev/pci/pcidevs*), but I'm not sure how to go about to get this to work(I dont see it referenced in the GENERIC config, so I nothing to

Re: patch validation

2006-05-02 Thread Ioan Nemes
Nick Guenther [EMAIL PROTECTED] 03/05/2006 09:07:35 am On 5/2/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I brought up a 3.9 server and have patched it with the sendmail patch. My question is how does one prove that the box has been patched in 2,3 or 4 months? TIA Mike Keep notes? You

www.openbsd.org defaults to Japanese

2006-05-02 Thread Tan Dang
Any reason why www.openbsd.org displays Japanese by default now? Tan

Re: patch validation

2006-05-02 Thread Claus Assmann
On Tue, May 02, 2006, [EMAIL PROTECTED] wrote: I brought up a 3.9 server and have patched it with the sendmail patch. My question is how does one prove that the box has been patched in 2,3 or 4 months? Check the version: -char Version[] = 8.13.4; +char Version[] = 8.13.5.20060308;

Re: 3.9, su command: bug or feature?

2006-05-02 Thread Cristiano Deana
2006/5/2, [EMAIL PROTECTED] [EMAIL PROTECTED]: $ id cris uid=1000(cris) gid=0(wheel) groups=0(wheel) Probably would have essentially identical behavior on any BSD/Linux. No, in FreeBSD if your group is '0' then you (obviously) are in the 'wheel' group -- Cris, member of G.U.F.I Italian

Re: www.openbsd.org defaults to Japanese

2006-05-02 Thread Tan Dang
On 5/2/06, Tan Dang [EMAIL PROTECTED] wrote: Any reason why www.openbsd.org displays Japanese by default now? Sorry to respond to myself, but the 1.522 revision of www/index.html switches the page to Japanese. Tan

Re: openbsd, wrap, sis driver

2006-05-02 Thread Chris Cappuccio
OpenBSD incorporated this patch quite some time ago. Wild Karl-Heinz [EMAIL PROTECTED] wrote: On Tuesday 02 May 2006 22:44, Chris Cappuccio wrote: The openbsd if_sis is a port of the freebsd driver, so you might be able to make the patch apply on openbsd. do you know what the patch

Re: Compilers make a system less secure?

2006-05-02 Thread Chris Kuethe
On 5/2/06, Constantine A. Murenin [EMAIL PROTECTED] wrote: If you backup a key from an old workstation onto a new workstation, and then dispose of the old workstation [in the university setting], then what if the intruider gets access to the HDD data (i.e. the key) of the old workstation?

Re: Can't get gettext installed via package on 3.9.

2006-05-02 Thread kyle
Just a headsup for others, I had no issue installing gettext(needed for wget) but this was on a fresh 3.9 install. What happens if you use pkg_add w/ -r? On 5/2/06, Allie Daneman [EMAIL PROTECTED] wrote: I already tried to submit a bug report on a package with new dependencies so I'll just

Re: www.openbsd.org defaults to Japanese

2006-05-02 Thread Ray Lai
On Tue, May 02, 2006 at 11:26:37PM +, Tan Dang wrote: Any reason why www.openbsd.org displays Japanese by default now? April Fools! -Ray-

Re: www.openbsd.org defaults to Japanese

2006-05-02 Thread jjhartley
From: Tan Dang [EMAIL PROTECTED] Any reason why www.openbsd.org displays Japanese by default now? Tan I see English when accessing www.openbsd.org as I have always done so. You might want to look at your locale settings.

  1   2   >