Re: security - "pass the hash" style attacks?

2014-11-02 Thread Alexander Hall
On November 3, 2014 1:41:24 AM CET, Nex6|Bill wrote: >so, for OpenBSD you would have to get the /etc/passwd for an offline >attack on >the password hashes >and for that they would need a user account to logon to the system. Or >to have >compromised the system in such a >way as they could copy /et

Re: cubieboard

2014-11-02 Thread leeqiand
thanks .I will try 5.6 release later.I hope it will be work. At 2014-10-29 18:16:22, "Jonathan Gray" wrote: >On Wed, Oct 29, 2014 at 08:59:11AM +0800, leeqiand wrote: >> Any one had ever install openbsd on cubieboard? >> I tried in this way. >> http://comments.gmane.org/gmane.os.openbsd.arm/915 >>

Re: Upgrade56.html instead of Upgrade54.html

2014-11-02 Thread Nick Holland
On 11/02/14 18:15, Mario St-Gelais wrote: > http://www.openbsd.org/faq/faq5.html#BldBinary > [Quote] > It is recommended that you install the binary by using the "Upgrade" option > of the install media. If that is not possible, you can also unpack the > binaries as described here. Regardless, you m

Re: `make` problem applying 5.6 errata

2014-11-02 Thread Ted Unangst
On Sun, Nov 02, 2014 at 18:49, Ted Unangst wrote: >> # cd /usr/src/lib/libssl/ssl >> # make obj >> /usr/src/lib/libssl/ssl/obj -> /usr/obj/lib/libssl/ssl >> # make >> make: don't know how to make /usr/src/lib/libssl/ssl/../src/e_os.h >> (prerequisite of: s3_meth.o) >> Stop in /usr/src/lib/libssl/s

Re: OpenBSD 5.6/amd64 WLE200NX (Atheros AR9280) athn issues

2014-11-02 Thread trondd
Same here. About 3 timeouts a day and I get close to 10% errors on the input on 2 different athn devices. On Nov 2, 2014 7:49 PM, "Zé Loff" wrote: > On Mon, Nov 03, 2014 at 01:13:40AM +0100, Stefan Krüger wrote: > > Hi, > > > > I have a PC Engines APU board with a Compex WLE200NX miniPCI-e wifi c

Re: OpenBSD 5.6/amd64 WLE200NX (Atheros AR9280) athn issues

2014-11-02 Thread Zé Loff
On Mon, Nov 03, 2014 at 01:13:40AM +0100, Stefan Krüger wrote: > Hi, > > I have a PC Engines APU board with a Compex WLE200NX miniPCI-e wifi card > running in hostap mode (11g). > > root@apu:/var/log # dmesg | grep athn0 > athn0 at pci4 dev 0 function 0 "Atheros AR9281" rev 0x01: apic 2 int 19 >

Re: security - "pass the hash" style attacks?

2014-11-02 Thread Philip Guenther
[apologies for the contentless previous message] On Sun, Nov 2, 2014 at 4:43 PM, Philip Guenther wrote: > On Sun, Nov 2, 2014 at 4:41 PM, Nex6|Bill wrote: > ... >> what about kerberos? (windows K5 vs Unix K5?) There's a bunch of *really good* papers on Kerberos's design which discuss exactly th

Re: security - "pass the hash" style attacks?

2014-11-02 Thread Philip Guenther
On Sun, Nov 2, 2014 at 4:41 PM, Nex6|Bill wrote: ... > what about kerberos? (windows K5 vs Unix K5?) > > >> >> >>> is OpenBSD, or BSD in general vulnerable to these style attacks? >> >> The vulnerability is the authentication protocol/method, independent >> the operating system. >> If you used

Re: security - "pass the hash" style attacks?

2014-11-02 Thread Nex6|Bill
On Nov 2, 2014, at 4:30 PM, Philip Guenther wrote: > On Sun, Nov 2, 2014 at 4:05 PM, Nex6|Bill wrote: >> I know, that “pass the hash” is now getting a lot of playtime on windows. and >> I have heard in a couple of talks >> that its directly related to “SSO” part of the OS, and may be part of pos

Re: security - "pass the hash" style attacks?

2014-11-02 Thread Philip Guenther
On Sun, Nov 2, 2014 at 4:05 PM, Nex6|Bill wrote: > I know, that “pass the hash” is now getting a lot of playtime on windows. and > I have heard in a couple of talks > that its directly related to “SSO” part of the OS, and may be part of posix? Nope. It's just a bad (as in, completely broken) des

OpenBSD 5.6/amd64 WLE200NX (Atheros AR9280) athn issues

2014-11-02 Thread Stefan Krüger
Hi, I have a PC Engines APU board with a Compex WLE200NX miniPCI-e wifi card running in hostap mode (11g). root@apu:/var/log # dmesg | grep athn0 athn0 at pci4 dev 0 function 0 "Atheros AR9281" rev 0x01: apic 2 int 19 athn0: AR9280 rev 2 (2T2R), ROM rev 22, address xx:xx:xx:xx:xx:xx root@apu:/var

Re: OpenBSD 5.6 Released

2014-11-02 Thread Nex6|Bill
I see, TCP wrappers has been removed i am assuming using only PF is the practice for stuff people who where using TCP wrappers for… and, thanks for the hard work… -Nex6 On Nov 1, 2014, at 10:22 AM, Antoine Jacoutot wrote: > November 1, 2014. > > We are pleased to announce the official rele

security - "pass the hash" style attacks?

2014-11-02 Thread Nex6|Bill
I know, that “pass the hash” is now getting a lot of playtime on windows. and I have heard in a couple of talks that its directly related to “SSO” part of the OS, and may be part of posix? is OpenBSD, or BSD in general vulnerable to these style attacks? or just the normal unix dump the password /e

Re: `make` problem applying 5.6 errata

2014-11-02 Thread Ted Unangst
On Mon, Nov 03, 2014 at 10:22, mark hellewell wrote: > Hi, > > I've just upgraded a couple of 5.5 servers to 5.6 and apart from the > issues I'm about to describe everything went smoothly (thanks!) > > As the final step of my upgrade procedure (following upgrade56.html, > using install kernel as

`make` problem applying 5.6 errata

2014-11-02 Thread mark hellewell
Hi, I've just upgraded a couple of 5.5 servers to 5.6 and apart from the issues I'm about to describe everything went smoothly (thanks!) As the final step of my upgrade procedure (following upgrade56.html, using install kernel as usual) it was time to fetch -stable source, which I did with:

Upgrade56.html instead of Upgrade54.html

2014-11-02 Thread Mario St-Gelais
http://www.openbsd.org/faq/faq5.html#BldBinary [Quote] It is recommended that you install the binary by using the "Upgrade" option of the install media. If that is not possible, you can also unpack the binaries as described here. Regardless, you must do the entire upgrade process, including creatin

Re: still loosing connections

2014-11-02 Thread Stefan Wollny
Am 11/02/14 um 07:04 schrieb Ted Unangst: > On Sat, Nov 01, 2014 at 20:26, Stefan Wollny wrote: >> An other case of TL:DR??? >> >> Please help me with a 'clue-stick' on how to investigate further. > > I think so. Your message is a million lines long, but I have no idea > what the problem is. >

Re: UPDATE: www/tt-rss to 1.14

2014-11-02 Thread Atanas Vladimirov
On 02.11.2014 17:29, Robert Peichaer wrote: Hi Atanas As you provided update diffs in the past, would you mind testing this update for tt-rss from 1.13 to 1.14? I don't have mysql running here and being lazy I would like to avoid setting one up just to test this update. Thanks Robert Hi, I've

Re: AR8161 patch , FYI

2014-11-02 Thread Atanas Vladimirov
On Sun, Nov 02, 2014 at 08:11:51AM +0100, o...@openbsd.se wrote: > I have tested the driver on both openbsd 5.5 and 5.6, not on current. > > > OpenBSD 5.6-stable (GENERIC.MP) #6: Sat Nov 1 14:02:01 CET 2014 > root@ubook.hagen.hassel:/usr/src/sys/arch/amd64/compile/GENERIC.MP > real mem = 415

Re: FreeBSD's Capsicum

2014-11-02 Thread Daniel Cegiełka
2014-11-02 16:49 GMT+01:00 : > Hi, > > From what I gather, RBAC / MAC isn't really necessary unless you add people > to your system that you don't really trust (ref. Nick Holland @ > http://marc.info/?l=openbsd-misc&m=139321387226212). But what about FreeBSD's > Capsicum? http://www.openbsdfo

FreeBSD's Capsicum

2014-11-02 Thread opendaddy
Hi, >From what I gather, RBAC / MAC isn't really necessary unless you add people to >your system that you don't really trust (ref. Nick Holland @ >http://marc.info/?l=openbsd-misc&m=139321387226212). But what about FreeBSD's >Capsicum? Thanks! O.D.

Re: crypto softraid and keydisk on same harddrive

2014-11-02 Thread Joel Sing
On Wed, 29 Oct 2014, Patrik Lundin wrote: > On Wed, Oct 29, 2014 at 01:24:30AM +1100, Joel Sing wrote: > > You could try this (only compile tested) diff: > > I tried this diff on 5.5-stable and it appeared to solve my problem! The > system now boots from sr0a without asking for a passphrase. Overwr

Re: bridge + vlan broke after 5.5 > 5.6 upgrade

2014-11-02 Thread Mattieu Baptiste
Le 2 nov. 2014 13:52, "Jorge Schrauwen" a écrit : > > Hey All, > > TL;DR: traffic leaving a bridge over a vlan does > not get tagged but leaves untagged after upgrade. > Is this by design? > [...] > > Anybody else experiencing this? Did it get broken > by design? (AKA was I doing something stupid

bridge + vlan broke after 5.5 > 5.6 upgrade

2014-11-02 Thread Jorge Schrauwen
Hey All, TL;DR: traffic leaving a bridge over a vlan does not get tagged but leaves untagged after upgrade. Is this by design? Longer version: Lost most of my night trying to figure out why my setup ended up breaking. I found a solution but I am not exactly happy with it. I think this breakage

Re: still loosing connections

2014-11-02 Thread Ted Unangst
On Sat, Nov 01, 2014 at 20:26, Stefan Wollny wrote: > An other case of TL:DR??? > > Please help me with a 'clue-stick' on how to investigate further. I think so. Your message is a million lines long, but I have no idea what the problem is.

Re: uscom/ucom hardware question [was: OpenBSD 5.6 Released]

2014-11-02 Thread Ted Unangst
On Sun, Nov 02, 2014 at 06:08, ropers wrote: > When I said I wanted to use a USB-only laptop *as* a serial console, > what I meant was this: > > 1. There is a headless computer that has a physical RS-232. This is > not the laptop. So what you want to know is if you can run "cu -l /dev/cuaU0" on

urtw0 no network on yeeloong

2014-11-02 Thread Lars Noodén
I've not been able to establish a wireless connection lately on urtw0 on a yeeloong. ifconfig keeps showing a status of 'no network' on urtw0 both for the local wireless network here and another wifi network I've tried that used to work. The indicator light for the wireless device is on and 'ifc