Re: [Bulk] Re: slow qemu openbsd

2014-05-26 Thread Kevin Chadwick
previously on this list Robert contributed: > > What I may do to work VM QEMU faster??? > > Not much. > QEMU is faster on Linux, because they use KVM - which doesn't exist on > OpenBSD. > > http://marc.info/?l=openbsd-misc&m=133612666103598 > > kind regards, I'm switching my main workstati

Replacing samba with SFTP and case insensitivity

2014-05-23 Thread Kevin Chadwick
I have replaced samba with sftp and have an issue with atleast one app (sage accounts, still trying to evaluate gnucash) that seems to be using uppercase and then lower case filenames at different times. I could move all the data about and create an msdosfs or look to lowntfs-3g which I am not sur

Re: uaudio useless?

2014-05-18 Thread Kevin Chadwick
command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: [Bulk] Re: Updating sets

2014-05-07 Thread Kevin Chadwick
OpenBSDs userland is base qualified code such as nginx and extra packages are kept separate in /usr/local. For both snapshots and especially for building yourself follow www.openbsd.org/faq/current.html For building from source; man release is brill. Sync issues with packages built after upgrade

Re: 5.5 upgrade and wpi Firmware

2014-05-02 Thread Kevin Chadwick
used so aggressively on LINUX mailing lists because whilst 'apropos' is traditionally the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: Firefox tweaking

2014-05-01 Thread Kevin Chadwick
is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: A misconfigured disklabel can crash the kernel on listing its mounted directory contents (5.4)

2014-04-26 Thread Kevin Chadwick
previously on this list Kevin Chadwick contributed: > /bin/dd if=/dev/zero of=/dev/sd?c Whoops, you should use the raw device on OpenBSD too. The following is much faster at zeroing /bin/dd if=/dev/zero of=/dev/rsd?c bs=

Re: A misconfigured disklabel can crash the kernel on listing its mounted directory contents (5.4)

2014-04-26 Thread Kevin Chadwick
odern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: A misconfigured disklabel can crash the kernel on listing its mounted directory contents (5.4)

2014-04-26 Thread Kevin Chadwick
RTFM is used so aggressively on LINUX mailing lists because whilst 'apropos' is traditionally the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: adsl card advice

2014-04-25 Thread Kevin Chadwick
ign like polkit or systemd ___ I have no idea why RTFM is used so aggressively on LINUX mailing lists because whilst 'apropos' is traditionally the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a t

Re: OpenBSD - Linux compatibility

2014-04-21 Thread Kevin Chadwick
dea why RTFM is used so aggressively on LINUX mailing lists because whilst 'apropos' is traditionally the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Secure C references and tools

2014-04-17 Thread Kevin Chadwick
___ I have no idea why RTFM is used so aggressively on LINUX mailing lists because whilst 'apropos' is traditionally the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-15 Thread Kevin Chadwick
_ 'Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface' (Doug McIlroy) In Other Words - Don't design like polkit or systemd ___ I have no idea why RTFM is used so aggressively on LINUX mailing lists because whilst 'apropos' is traditionally the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: Only two holes in a heck of a long time, but why?

2014-04-07 Thread Kevin Chadwick
polkit or systemd ___ I have no idea why RTFM is used so aggressively on LINUX mailing lists because whilst 'apropos' is traditionally the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to h

Re: Only two holes in a heck of a long time, but why?

2014-04-07 Thread Kevin Chadwick
ystems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: Keeping OpenBSD installation clean

2014-04-04 Thread Kevin Chadwick
ssively on LINUX mailing lists because whilst 'apropos' is traditionally the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: Only two holes in a heck of a long time, but why?

2014-04-04 Thread Kevin Chadwick
ly the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: antiviruses executable on OpenBSD

2014-04-03 Thread Kevin Chadwick
a why RTFM is used so aggressively on LINUX mailing lists because whilst 'apropos' is traditionally the most powerful command on Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Kevin Chadwick
previously on this list Kenneth Westerback contributed: > 1) It's not useful. > 2) It's too complicated. > 3) It's impossible to fit on the install media. 4) With the advent of signify and one of it's goals being efficiency it would be a solution that needlessly wastes resources of many types.

Re: dhclient

2014-03-26 Thread Kevin Chadwick
modern' replacement 'apropos' on Linux is a tool to help psychopaths learn to control their anger. (Kevin Chadwick) ___

nist-p ecdsa default factors

2014-03-24 Thread Kevin Chadwick
This was posted on the debian list and I was thinking of mentioning OpenSSH having ed25519 recently added. Is the latest OpenSSH using ecdsa potentially vulnerable to the alledged reduction to 32 bits of security. __ > Also ECDSA

Re: OpenBSD email provider

2014-03-18 Thread Kevin Chadwick
On Tue, 18 Mar 2014 11:23:12 -0300 Giancarlo Razzolini wrote: > A static IP address without a meaningful reverse name mapping such as > mail.myopenbsdhomeserver.com isn't very useful. Most ISP's wont do > reverse mappings or will charge your eyeballs for it. It's perfectly useful, mail is only dr

Re: OpenBSD email provider

2014-03-18 Thread Kevin Chadwick
previously on this list Jean-Philippe Ouellet contributed: > Also, "absolutely sure privacy is totally respected"??? > Let me know when you find a jurisdiction in which you can reasonably > expect that to even be possible to begin with. Yeah, I believe you have to pin STARTTLS for each host manua

Re: [patch] update FAQ for signify(1)

2014-03-14 Thread Kevin Chadwick
previously on this list Jean-Philippe Ouellet contributed: > The OpenBSD project does not digitally sign releases. The above > command only detects accidental damage, not malicious tampering. > If the men in black suits are out to get you, they're going to > get you. > > It seems

Re: Vision 2020: Making OpenBSD the world's fastest OS

2014-03-05 Thread Kevin Chadwick
previously on this list openda...@hushmail.com contributed: > Anybody have any thoughts on how to achieve this? > > Thanks. > > O.D. What do you mean, just run less? You need to consider what's important. It already is the fastest at providing entropy and installing and getting a secure server

Re: SHA256.sig missing from install55.iso

2014-03-04 Thread Kevin Chadwick
previously on this list frantisek holop contributed: > the lack of the same file is stopping sysmerge > from working. I'm sure you know but just in case, -S skips the check which you can do manually as Theo mentioned. p.s. I'm making a note of this day as the day I first put OpenBSD X11 with mac

Re: Firefox crashes on OpenBSD

2014-03-03 Thread Kevin Chadwick
previously on this list Loganaden Velvindron contributed: > On Thu, Feb 13, 2014 at 1:15 AM, Luis Coronado wrote: > > I know of similar issues with OOM and folks here recommeded reviewing the > > ulimit settings: > > > > http://marc.info/?l=openbsd-misc&m=133363175403956&w=2 > > > > You dont post

Re: More OpenBSD on Hacker News -- RBAC and jails anyone?

2014-02-25 Thread Kevin Chadwick
previously on this list Matthew Weigel contributed: > > 1. Why doesn't OpenBSD have something like RBAC? > > RBAC has a lot more knobs to tweak, so you can always go back after a > security incident and say "aha! I need to tweak *that* knob to prevent > this next time!" But it has a steep learn

Comparison of machdep.allowaperture and Privileged I/O

2014-02-12 Thread Kevin Chadwick
This is purely interest and of course feel free to ignore. I value OpenBSD over Linux with grsecurity for many reasons such as patched by default X and randomisation in any case. I have just been wondering while some cards have run poorly in the past at machdep.allowaperture=1, with KMS some now r

Re: faq addition: working with mfs disks?

2014-01-26 Thread Kevin Chadwick
previously on this list Timo Myyrä contributed: > Now that OpenBSD has tmpfs I'd use that instead of mfs. > > I just added following on my /etc/fstab: > > none /tmp tmpfs rw,nodev,nosuid,-s=1g,-m=1777 0 0 > none /var/cache tmpfs rw,nodev,nosuid,-s=128m,-m=0755 0 0 > none /var/run tmpfs rw,nodev,

Re: Request for Funding our Electricity

2014-01-20 Thread Kevin Chadwick
previously on this list MJ contributed: > >> And I hope it?s the thought that counts more than the amount. > > I guess it doesn't 'count' right now but does mean more and count more if he ever becomes rich. > > LOL, yes, especially when it comes to bills being paid. Maybe that's a stark real

xterm -hold -e loop

2014-01-17 Thread Kevin Chadwick
Xterm gets stuck in a loop burning 100% cpu until you destroy it if you do say. xterm -hold -e /bin/ls Might a patch based on this freebsd patch fix that? The second part of it isn't in the xenocara tree. http://www.freebsd.org/cgi/query-pr.cgi?pr=136686 --

Re: Request for Funding our Electricity

2014-01-17 Thread Kevin Chadwick
previously on this list Dag Richards contributed: > I have a suggestion for every one of us that has mailed in an idea in > response to a solicitaion for money... > > Send money. I also plan to open a ticket and will have to find time to send a short letter to the management of my hosting provi

Re: Request for Funding our Electricity

2014-01-16 Thread Kevin Chadwick
On Thu, 16 Jan 2014 09:09:09 -0800 patrick keshishian wrote: > > The installer or man page asks for donations, how about the ssh login > > banner or initial output which might get perhaps 100s of thousands more > > eyefall? > > I see where this is headed: In app purchases! e.g., after > couple

Re: Automounting with hotplugd on OpenBSD

2014-01-16 Thread Kevin Chadwick
I had a usb that wouldn't mount so I've added logging and support for "unused" sd*c disklabels for vfat, ext2/3/4 and ntfs via blkid. I think newfs ffs writes the disklabel so you don't get unused for sd*c and so don't need a blkid tool. It's three times as long now though so if anyones interested

Re: [Bulk] Is my 5.4 CD ok?

2014-01-16 Thread Kevin Chadwick
previously on this list Mario contributed: > # mount /dev/cd0a /mnt > # /mnt/5.4/packages/amd64 > # pkg_add emacs-21.4p23.tgz You could set the PKG_PATH Did you cd /mnt/5.4/packages/amd64 -- ___ 'Write programs that do one th

Re: Request for Funding our Electricity

2014-01-16 Thread Kevin Chadwick
The installer or man page asks for donations, how about the ssh login banner or initial output which might get perhaps 100s of thousands more eyefall? -- ___ 'Write programs that do one thing and do it well. Write programs to wo

Re: Request for Funding our Electricity

2014-01-15 Thread Kevin Chadwick
previously on this list agrquinonez contributed: > The other idea, is Members, every one of us could give five dollars per > month to keep the privilege of using OpenBSD; receiving information, > participating in the list, etc. I think that would strangle the project and possibly prevent future d

Re: Request for Funding our Electricity

2014-01-15 Thread Kevin Chadwick
On Tue, 14 Jan 2014 17:28:19 -0700 (MST) Theo de Raadt wrote: > That's a great idea. > > I'm going drag a subgroup of the developers away from software > development and we'll start working on that instead. > > Right away. > > To fund the drilling, we'll hold a bake sale. Fair enough just thou

Re: Request for Funding our Electricity

2014-01-14 Thread Kevin Chadwick
previously on this list Theo contributed: > The OpenBSD project uses a lot of electricity for running the > development and build machines. A number of logistical reasons > prevents us from moving the machines to another location which might > offer space/power for free, so let's not allow the co

Re: popa3d removed from base - what do people recommend?

2014-01-14 Thread Kevin Chadwick
previously on this list Артур Истомин contributed: > > > I think pop3 is dead but recently there was a mail in tech@ > > > stating Sunil Nimmagadda develops pop3 daemon closed to > > > OpenBSD standards. > > > > That's a good point. I don't like leaving mails on the server for more than > > a

Re: Automounting with hotplugd on OpenBSD

2014-01-13 Thread Kevin Chadwick
where you like just edit above and must executable by _automount ___ #!/bin/sh # Author: Kevin Chadwick # License: BSD # # # CONFIG # #exec >> /tmp/logfile 2>&1 #set -x MOUNTLOCATION="/mnt/usb" #Maybe useful to grab

Re: Is Ext2 stable enough for normal use?

2013-12-20 Thread Kevin Chadwick
previously on this list Maurice McCarthy contributed: > I'm running Ubuntu Raring while I learn about OpenBSD (slowly as I'm too old > to do anything quick) and I've lately found ntfs much quicker. > > As an experiment last night I tarred and gzipped 216G of video files across > two USB3 hard

Re: slashdot rumours

2013-11-01 Thread Kevin Chadwick
previously on this list Stuart Henderson contributed: > > its a joke > > > > "Strangest of all was the ability of infected machines to transmit small > > amounts of network data with other infected machines even when their power > > cords and Ethernet cables were unplugged and their Wi-Fi and

Re: OpenBSD maintenance compared to FreeBSD

2013-10-30 Thread Kevin Chadwick
previously on this list Stefan Sperling contributed: > > 5.4 will be out on Friday and I don't see why you shouldn't at least > give it a try. As already mentioned you can use mtier with 5.4 Release but if a package you require isn't on mtier and needs updating then you can either build the pack

Re: Sorry OpenBSD people, been a bit busy

2013-10-08 Thread Kevin Chadwick
> Food for thought for everyone, but like I said, he doesn't care and > won't think about it. As I say I am far more concerned about 'modern' incompetent ISP's. Uncaring ISPs or ISP's that can only care about profit (and so advertising) or they are out of business and tasking them (perhaps to the

Re: Sorry OpenBSD people, been a bit busy

2013-10-08 Thread Kevin Chadwick
> Why? With a group of others, I started setting up an Internet > Exchange in Calgary, and this has taken much time because it is highly > politicized and has encountered some resistance. So has your internet access (ISP) improved too since a while back or just locally and what resistance did you

Re: nouveau driver help (moved from ports to misc)

2013-10-04 Thread Kevin Chadwick
> > Oke, > > What is then the best way to proceed ? > > Buy an ATI or Intel gfx card. I assume you meant a system with an intel gfx chip and most use laptops these days but this raised a thought with me. What would be a cheap but decent enough, KMS supported VGA and or PCIEX card model? --

Re: PHP 5.3.1 on OpenBSD 4.2

2013-10-03 Thread Kevin Chadwick
> Hi Otto, > > yeah thats planned with new hardware but this is a kinda urgent > situation so if its possible I need to do the upgrade on this OpenBSd > version Personally I'd still advocate getting a disk ready on 5.4/3 testing and swapping the disk as it is not much different and will be quic

Re: slow console

2013-09-24 Thread Kevin Chadwick
> Under X, KMS performance should be faster on a lot of > hardware. The whole point of KMS is to bring modern, better > supported drivers to OpenBSD (and get rid of the crappy X > security model). I hope that's true but I think the most important point is that it is slower because it is so much s

Re: Feedback about Desktop Environments

2013-09-19 Thread Kevin Chadwick
> Personally, I'm an long time fvwm user. My partner wouldn't know where to > start nor care to learn how to use that. Which is why I need to install a DE. > Years ago I did use KDE3 and liked it but changed because I did not like KDE4. Don't forget especially with xfce you can take just parts o

Re: user can not shutdown PC in xfce

2013-08-30 Thread Kevin Chadwick
> When I want to shut down, I use on/off switch. No permissions needed. I am evaluating parts for improving my OpenBSD desktops but xfce4-session is not part of it so I haven't chimed in yet as I thought others may do a better job. However on Linux such as my TV's I always have a console user aut

Re: What should we look before buying a laptop?

2013-08-27 Thread Kevin Chadwick
> In my experience, now that video is out of the way, the thing to look > out most for is getting a well supported built-in wireless card. > That's starting to become difficult when buying new laptops because > most drivers are lacking support for newer hardware variants. Perhaps someone knows of

Re: Don't read this - OpenBSD: Not Free Not Fuctional and Definetly Not Secure | BSD, the truth - as author rewrites your comments and can't spell

2013-08-12 Thread Kevin Chadwick
On Sat, 10 Aug 2013 17:51:43 +0100 Kaya Saman wrote: > I > think it's much harder to learn since the documentation is more 'sparse' > and also much more limited in certain areas kernel PPP daemon for > example :-) - it took me a while to figure out how to get PPPoE working. Well I agree

Don't read this - OpenBSD: Not Free Not Fuctional and Definetly Not Secure | BSD, the truth - as author rewrites your comments and can't spell

2013-08-10 Thread Kevin Chadwick
While searching for 'OpenBSD "bad package" CONTENTS' I somehow came across this and got sucked in when I shouldn't have. OpenBSD: Not Free Not Fuctional and Definetly Not Secure | BSD, the truth http://aboutthebsds{dot}wordpress{dot}com Well I had a go at educating the author of this thread but

Gnome 3.8 Linux only?

2013-04-26 Thread Kevin Chadwick
I don't use Gnome but this came up on the Gentoo list and so I post it here in case it's not known already or is of any use to know about it. >>> >>> I"m not a gnome user as of yet, but I can tell you that the day is >>>

Re: FAQ - Disk Imaging

2013-04-16 Thread Kevin Chadwick
> I'll try it and let you know. Well I did a very quick test into memory at first (whilst doing something else at the same time) and it seemed to talk about ufs filesystem usage and I was very surprised. I then tried some more comprehensive tests and only found dd usage. I'll retry what I did ini

Re: FAQ - Disk Imaging

2013-04-14 Thread Kevin Chadwick
> On 04/13/13 19:27, Kevin Chadwick wrote: > > 4.15 of the faq says > > > > Unfortunately, there are no known disk imaging packages which are > > FFS-aware. > > > > I haven't tested > ... > > Get back with me when you have. > > I&#x

FAQ - Disk Imaging

2013-04-13 Thread Kevin Chadwick
4.15 of the faq says Unfortunately, there are no known disk imaging packages which are FFS-aware. I haven't tested whether a broad brush had been applied expecting ufs and ffs to be the same or if clonezillas statement is correct but thought it may be worth bringing up that clonezilla.org says F

Re: Authentication completing my OpenBSD 5.2 install.

2013-04-03 Thread Kevin Chadwick
> ports makefile are verifying downloaded (sources) file with checksum. And you can download the ports makefiles via ssh cvs if you want protection going forward. -- ___ 'Write programs that do one thing and do it well. Write p

Re: [Question] Building whitelists so that spamd greylisting can work without users perceiving delivery delays...

2013-03-29 Thread Kevin Chadwick
On Thu, 28 Mar 2013 21:16:38 -0600 Steve Williams wrote: > It's designed to work with sites that use "spf" records, and it > doesn't know about ip6, not an issue in my case > > If you are interested in my script, feel free to contact me off list SPF for spamd. I'd be interested if you don't min

Re: Why to use packages?

2013-03-18 Thread Kevin Chadwick
> The only > halfway sane reason I can think of not to use packages but ports Hoping not to open commentry on the matter but so people are aware and perhaps to avoid the next question, there are some security pluses of using ports (checksums via ssh, landry's testing/beta firefoxes a little earlie

Re: CVS: cvs.openbsd.org: src - kms

2013-03-18 Thread Kevin Chadwick
> > Log message: > > Significantly increase the wordlist for ddb hangman, > > and update our device independent DRM code and the Intel DRM code > > to be mostly in sync with Linux 3.8.3. Among other things this > > brings support for kernel modesetting and enables use of > > the rings on gen6+ Int

Re: A slight twist on the OpenBSD laptop question

2013-03-06 Thread Kevin Chadwick
On Wed, 6 Mar 2013 07:36:58 +0100 Matthieu Herrb wrote: > Stay away from nVidia > mobile chipsets and from recent AMD integated graphics. > > Since AMD's commercial names vs chipset names correspondance is a > not clear to me, I don't know exactly how to check if a given AMD > chipset is supporte

A slight twist on the OpenBSD laptop question

2013-03-04 Thread Kevin Chadwick
I was about to buy two thinkpads which are often suggested when the OpenBSD laptop question is raised but the 93 in stock have disappeared since saturday, aaargh. There are still core2duos and lesser spec'd systems available which has prompted me to ask the question I had pondered on. Does anyone

xfce, dwm, spectrwm

2013-02-25 Thread Kevin Chadwick
I have easy to use setups of fvwm and xfce. I recently started building xfce and I notice it pulled in polkit which I am not a fan of for multiple reasons mainly because sudo is simply better in every way except shipping permissions by default. Which IMO is a plus though it could ship commented en

Re: [Bulk] Re: Constant attacks and ISP's are ignoring them

2013-02-24 Thread Kevin Chadwick
> > If I buy a car, and don't know how to operate it, and cause harm, nobody > > would blame the manufacturer. Never heard of a Toyota recall such as the accelerator pedal sending cars into walls all by themselves. If cars were as bad as routers we wouldn't need to worry about traffic atleast

Re: Constant attacks and ISP's are ignoring them

2013-02-17 Thread Kevin Chadwick
> > Every firewall/router product that I have purchased has been > > compromised so far. > > I don't believe this at all. Not one bit. I could believe it but that doesn't mean that I do. 90% of the routers on my street will be insecure and even using old sps, upnp or wep. SKY is the worst, the

Re: OpenBSD-Update Tool

2013-02-11 Thread Kevin Chadwick
> I am really starting to like it! I love it too but maybe one day long after we have KMS we may get to install it on anyones laptop and know that it is highly likely to keep itself upto date with current packages as a desktop all by itself. Of course you can't always do that even with debian due

Re: Safe bruteforce rule for mobile-friendly website

2013-02-07 Thread Kevin Chadwick
> I had to disable it as soon as I found out so the relevant logs are > probably too far up the buffer, but I'll set up a test server ASAP and > study the tcpdump in detail. I forget if mobiles do more prefetching on dns and/or tcp on mobiles but perhaps that's worth considering as a culprit. Doe

Re: vi vs ed in bsd.rd - proposal

2013-01-14 Thread Kevin Chadwick
> > Did you actually test that ? vi wants /var/tmp rw as well... > > > > Nah, just going from memory. It's been a while. However, the same > logic applies: Look at what partition /var is on and mount it too. It will work just fine without /var. I believe it just puts a temporary recovery fi

Re: new computer

2013-01-10 Thread Kevin Chadwick
> Buy a refurbished ThinkPad, still better older ThinkPad Anyone know of a good place to look for and what model the latest thinkpad with fullscreen/without widescreen would be. I'm guessing fullscreen and usb3 and pci express is an impossible mix never minding throwing in running superbly on Op

Re: Tricks for install OpenBSD under Virtualbox, host Windows XP

2013-01-08 Thread Kevin Chadwick
> Hi, > > I installed Virtualbox 2.2.4 and everything is 100%. > You hope so but make it clear if you ever hit problems that you are not on bare metal as bug reports have been looked at and been found to be the fault of Virtualbox in the past with Theo commenting on their forum that he couldn't

Re: ext2fs read errors

2012-12-30 Thread Kevin Chadwick
On Sun, 30 Dec 2012 15:36:39 +0100 Jan Stary wrote: > > This should not be an issue (this is also my response to Rogier). > > Ext3 is nothing more than ext2 with extra journaling features > > enabled, > > So in particular, the ext3 inode structure > is precisely the ext2 inode structure? I kn

Re: PF block log all and ddos issue

2012-12-27 Thread Kevin Chadwick
On Thu, 27 Dec 2012 18:43:44 +0100 pe...@bsdly.net (Peter N. M. Hansteen) wrote: > As default i wanna log which packet my firewall blocked. > > > > So how can i > > log all blocked packets and my firewall can be still up and > > running? Hopefully I will never need them but I have various pf co

Re: spammers getting less stupid?

2012-12-24 Thread Kevin Chadwick
> I finally got to deploying greyscanner on my mailservers, > and did something similar: trap every recipient address > with two or more digits in the user part (one digit could > be a typo, say a '2' before the '@'). This catches most of it. I forget, did you previously say whitelisting with grey

Re: BSD licensed gnupg replacement question

2012-12-11 Thread Kevin Chadwick
> 1: I'm not sure there are no developers that would like to see this in >base, but they could have other priorities; wanting something not >necessarily means having (time) to do the work. The important >difference is that you don't hear them. I find gpg useful. I think the main barr

Re: DISPLAY=:0.1

2012-12-06 Thread Kevin Chadwick
> I don't know anything about > spectrwm (or KDE or X for that matter :) You can have two displays in xorg.conf or one split in two on two screens as well as some other modes. There are various benefits to each depending on the need for dragging and fullscreen etc.. So an app can remember the ge

Re: ftps?

2012-11-29 Thread Kevin Chadwick
> >Because they can just hack it on top of their crusty old ftp server > >software, whereas using sftp would need much bigger changes? > > SSL/TLS makes everything more secure Never more so than when HSTS is enabled and you can't access paypal because your clock is wrong due to a dead bios

Re: OpenBSD hangs when i unplug USB disk

2012-11-15 Thread Kevin Chadwick
On Thu, 15 Nov 2012 07:45:40 -0300 Marcos Ariel Laufer wrote: > I've been using OpenBSD since 2.6, this never happened to me with any > other USB hard disks. This one in particular i bought it a couple of > days ago. I wonder if it freezes other OS or causes problems before even the bios boot

Re: USB hubs

2012-11-06 Thread Kevin Chadwick
On Tue, 06 Nov 2012 08:18:29 + Peter Kay wrote: > I'm pretty certain my USB hub doesn't need to be uplinked to charge > devices (the computer definitely does not need to be on) It depends on your motherboard whether usb are powered when off. It will need to be on on many computers especially

Re: spammers getting less stupid?

2012-11-02 Thread Kevin Chadwick
> For instance on one mailserver I took over, I noticed that after adding > a Spamhaus sbl-xbl check, required rDNS, and other basic stuff like > requiring a legitimate HELO/EHLO, spam attempts dropped by perhaps a > factor of 100. It was shocking. > Required rDNS, so false positives went up by

Re: spammers getting less stupid?

2012-11-02 Thread Kevin Chadwick
> For instance on one mailserver I took over, I noticed that after adding > a Spamhaus sbl-xbl check, required rDNS, and other basic stuff like > requiring a legitimate HELO/EHLO, spam attempts dropped by perhaps a > factor of 100. It was shocking. > When you required rDNS I bet false positives

Re: Upgrade to 5.2?

2012-11-01 Thread Kevin Chadwick
> > > Don't do it! Seriously, the upgrade process is easy, and is worth > > > becoming familiar with. At least give it a shot since you're > > > planning on reinstalling anyway. I think you'll be pleasantly > > > surprised! > > > > Just out of curiosity, do you think the easiest method is to use

Re: Bibliography on IPv6

2012-10-06 Thread Kevin Chadwick
> I intend to get my hands on an IPv6 book to deal with some of the issues > I'm having - which are mainly my lack of knowledge and expertise on the > subject. > > I've seen "IPv6 Essentials", from O'Rilley mentioned a lot, and I've > heard it has a BSD-related section too. Probably not what your

Gnome 3 and BSD in 2012-13

2012-10-05 Thread Kevin Chadwick
> I do see a slight improvements when running a full GNOME 3 installation. Only asking out of interest because I'm not a Gnome 3 fan but is Gnome 3 still playing ball with BSD or is it more like hard ball? Are they just going to provide compilation flags to leave out the linux only dependencies o

Re: How to PROVE your system is up to date?

2012-09-19 Thread Kevin Chadwick
> I have State and Federal regulators that want me to PROVE (since their > only used to looking at Micro$oft servers) my OBSD 5.1 server is up to > date, and there are no outstanding patches that need to be applied. It is extremely rare that a patch for base actually affects the parts that I am us

Re: !!!!

2012-09-06 Thread Kevin Chadwick
On Thu, 6 Sep 2012 08:34:23 +0800 Rowdy OpenBSD wrote: > If the OpenBSD project signed its packages and distribution sets, we > could reasonably assume that they were not compromised between being > signed and our downloading them. Your current processes do not > provide the same degree of assura

Re: !!!!

2012-09-06 Thread Kevin Chadwick
> No more response from me without bright ideas. I guess the simplist solution would be for a builder with source tree access to upload just the snapshot SHA256 to the source tree for secure cvs download by users? -- ___ 'Write

Re: !!!!

2012-09-06 Thread Kevin Chadwick
> but that requires X That's a non sensical response that has already been answered and you wonder why you are thought to be a troll. X doesn't need to run and some files are required for some packages. Lots of packages are required for some packages, something OpenBSD fights as best it can and do

Re: !!!!

2012-09-05 Thread Kevin Chadwick
On Wed, 5 Sep 2012 16:49:34 -0430 Andres Perera wrote: > On Wed, Sep 5, 2012 at 4:06 PM, Kevin Chadwick wrote: > > On Wed, 5 Sep 2012 15:49:15 -0430 > > Andres Perera wrote: > > > >> doesn't in any way justify > >> downloading sha256 from more than one

Re: !!!!

2012-09-05 Thread Kevin Chadwick
On Wed, 5 Sep 2012 15:49:15 -0430 Andres Perera wrote: > doesn't in any way justify > downloading sha256 from more than one mirror from the same connection, > kevin It does if a lower tier has been compromised and I never said from the same connection. You must be one of them body language read

Re: !!!!

2012-09-05 Thread Kevin Chadwick
On Wed, 5 Sep 2012 23:12:37 +0800 Rowdy OpenBSD wrote: > > To the OP. When checking I choose a source mirror or two and download > > just the SHA256. There is no sha256 for src.tgz and sys.tgz but you can > > use ssh for the source code by getting the fingerprint once like for > > signatures but t

Re: !!!!

2012-09-05 Thread Kevin Chadwick
On Wed, 5 Sep 2012 07:26:26 -0400 Tony Abernethy wrote: > >A very simple addition to the FAQ would not be a problem. > >WOW! This question seems to be asked a lot! > >A simple addition to the FAQ does not seem to be a problem, Nick. > >Yes, I know , a very stupid question asked many times. > >A si

Re: Signatures for distribution sets and packages?

2012-09-05 Thread Kevin Chadwick
> > Is there any way to verify that distribution sets and packages that I > > have downloaded have not been tampered with (e.g., by someone with > > access to the mirror from which I downloaded them)? > > Download the checksums from another mirror using a different connection. > > The project d

Re: Smtpd disposable addresses

2012-08-31 Thread Kevin Chadwick
On Fri, 31 Aug 2012 13:30:05 +1200 ml+helloke...@extensibl.com wrote: > > You specify a character usually defaulting to - as a seperator > > > > and then acceptable addresses > > > > bob > > bob- > > pete- > > > > for a domain like bobszz.net > > > > so bobszz.net can receive mail to > > >

Re: Smtpd disposable addresses

2012-08-30 Thread Kevin Chadwick
On Thu, 30 Aug 2012 23:12:22 +0200 Gilles Chehade wrote: > > I think this came up before but my Googling failed to find it. > > > > I love disposable addresses and being able to say. Oi what you doing > > giving my address to spammers, or have you had a virus?? > > > > A todo list was mentioned,

Smtpd disposable addresses

2012-08-30 Thread Kevin Chadwick
I think this came up before but my Googling failed to find it. I love disposable addresses and being able to say. Oi what you doing giving my address to spammers, or have you had a virus?? A todo list was mentioned, I was just wondering if disposable addresses was on it or would that be in a gala

Re: OpenSSL handling intermediate certificates

2012-08-28 Thread Kevin Chadwick
On Fri, 24 Aug 2012 23:51:27 -0400 Ryan Kirk wrote: > You're definitely on track, although I was referring to D.J. > Bernstein's recent slides: http://cr.yp.to/talks/2012.06.04/slides.pdf > Thanks, I'll take a gander. > In these, he does bring up the same problems again that his DNSCURVE > purp

Re: OpenSSL handling intermediate certificates

2012-08-24 Thread Kevin Chadwick
> However, > this would require DNSSEC to be secure (which itself seems to be mired > in controvery lately, not to mention the slow rate of adoption) Do you have a reference for that. I know of the controversy around DNSCURVE before DNSSEC even arrived but haven't seen any of late. Is it to do wit

<    1   2   3   4   5   6   7   8   9   >