Re: Security questions: Login spoofing, X11 keylogging, and sandboxed apps

2024-03-29 Thread Luke A. Call
e a little? I realize this is an ignorant question. > On Thu, Mar 28, 2024 at 7:39???PM Luke A. Call wrote: > > > On 2024-03-28 17:28:56+0100, Jan Stary wrote: > > > > (2) I've learned that X11 allows locally running malware to sniff the > > > > keystrokes input

Re: Security questions: Login spoofing, X11 keylogging, and sandboxed apps

2024-03-28 Thread Luke A. Call
in the same X session, because of these boundaries around keyboard sniffing and also filesystem etc restrictions across users). 4) I am under the impression that the clipboard sharing between X users is not restricted as the above things are. Ie, one can spy on another freely. Luke Call

site terms (was Re: Does openBSD come with a web browser?

2023-09-12 Thread Luke A. Call
On 2023-09-11 23:21:06-0700, Eric Demer wrote: > > > (I am considering getting a laptop with openBSD, but have > > > not yet done so, which is why I can't easily check on my own.) > > > ?? > > > Does openBSD come with a web browser? > > > The "the FAQ and" parts of

Re: heck of a long time

2023-08-23 Thread Luke A. Call
On 2023-08-23 18:06:47+0200, Peter N. M. Hansteen wrote: > On Wed, Aug 23, 2023 at 01:41:31PM +0200, Peter J. Philipp wrote: > > If this is a sensitive topic I apologize ahead of time. > > I'm wondering... can we have a change in the OpenBSD front page (to say): > > "Only two remote holes in the

Re: gdb segfaults setting breakpoint on a Rust test

2023-03-24 Thread Luke A. Call
Thank you! On 2023-03-24 14:10:50-0600, Todd C. Miller wrote: > On Fri, 24 Mar 2023 13:10:08 -0600, "Luke A. Call" wrote: > > > Hi. When I run this on the binary of a test in my Rust > > application, then run these commands in gdb, I get the following output >

gdb segfaults setting breakpoint on a Rust test

2023-03-24 Thread Luke A. Call
til.rs:1057 Segmentation fault @:~/<...>/target/debug/deps $ I'm on obsd 7.2 stable and am not a C programmer, unfortunately. If, prior to setting the breakpoint, I just do the "run" command, it successfully runs the test to completion (which shows an intentional test failure for

Re: Why some mail were lost, is this common?

2023-02-10 Thread Luke A. Call
pair.com also seems to work well as a mail provider (online, pop, or imap, no weird games). On 2023-02-10 12:39:13+0800, Adriel Peng wrote: > Hmm I am the person working for email delivery. > don't use mail.ru who blocks a lot of lists mail every day. > Use gmail instead. If gmail is unavailable

Re: Script launcher and a suite of basic scripts for music production?

2023-01-18 Thread Luke A. Call
On 2023-01-18 16:51:28+0100, Brian Durant wrote: > On 1/18/23 11:46, Abhishek Chakravarti wrote: > > Brian Durant writes: > > > The only disadvantage that I can see at this point, is that what I am > > > describing would require a number of open terminals on the desktop, > > > which can be

Re: Configure OpenBSD for remote server rarely used

2022-11-27 Thread Luke A. Call
at normal use I imagine). -- Luke Call lukecall.net

Re: sysupdate and space check

2022-10-26 Thread Luke A. Call
On 2022-10-26 11:57:23-, Stuart Henderson wrote: > On 2022-10-24, Peter Fraser wrote: > > I make a stupid mistake; I didn't check partition sizes before doing a > > sysupgrade. > > sysupgrade ran out of space or /usr in the middle of the upgrade. > > I know I should have checked first but

Re: Libreoffice crashing on Thinkcentre m92p 7.1 FVWM - seems to be a python problem

2022-09-25 Thread Luke A. Call
Details in case it helps: https://marc.info/?l=openbsd-misc=161280915705719=2 https://marc.info/?l=openbsd-bugs=164814366002554=2 On 2022-09-25 08:24:44-0600, Luke A. Call wrote: > I had a similar problem where I could open files with LO if I typed them > on the command line when launch

Re: Libreoffice crashing on Thinkcentre m92p 7.1 FVWM - seems to be a python problem

2022-09-25 Thread Luke A. Call
I had a similar problem where I could open files with LO if I typed them on the command line when launching LO, but File / Open would crash when choosing the file and hitting OK. But I don't think mine was python-related. It seemed that my cleaning up by removing evidently unused packages

Re: recommended partitions to backup with dump

2022-08-24 Thread Luke A. Call
On 2022-08-24 12:51:16-0500, Allan Streib wrote: > On Wed, Aug 24, 2022, at 12:28, Shadrock Uhuru wrote: > > i already have /home /etc and /root set for backup, > > are there any other partitions i should bear in mind ? > > I always backup /var The above make sense to me also. Exploring man 7

Re: Multiuser security on OpenBSD

2022-08-10 Thread Luke A. Call
On 2022-08-09 12:52:28-0400, Dave Levine wrote: > I currently use OpenBSD on my laptop for a number of reasons, mainly > performance and hardware support. However, I have been considering > setting up a multiuser POWER9 box for some Discord friends and I to > work on in a hobbyist setting (these

Re: mg: how to indent using spaces instead of tabs

2022-06-12 Thread Luke A. Call
On 2022-06-12 18:16:15+0300, Mihai Popescu wrote: > > ... mg will use a tab for indentation. > > Use something to replace every TAB occurrence in the source code with > 8 spaces sequence. Well, not every TAB maybe? man expand, unexpand(1) exists.

Re: OpenBSD Home Server + Workstation on same machine?

2022-03-22 Thread Luke A. Call
On 2022-03-22 16:13:47+0100, ??ukasz Moska??a wrote: > Dnia Mon, Mar 21, 2022 at 08:22:36PM -0700, Eric Thomas napisa??(a): > > Hello, > > > > I'd like to learn about secure networking (PKI, x509 certs, DNS, IPS, etc.) > > and generally > > harden my home network using OpenBSD. Can I use OpenBSD

chromium key mappings go crazy under ssh -X

2022-03-18 Thread Luke A. Call
send a bug report? Thanks much! Luke Call Here is /var/run/dmesg.boot. (The dmesg itself is included further down): s0 detached uhidev0 detached uhidev0 at uhub0 port 3 configuration 1 interface 0 "Logitech USB Optical Mouse" rev 2.00/72.00 addr 2 uhidev0: iclass 3/1 ums0 at uhidev0:

Re: Missing action list in lesskey man page

2021-12-04 Thread Luke A. Call
On 2021-12-04 12:39:41+, Jason McIntyre wrote: > On Sat, Dec 04, 2021 at 12:19:34PM +0100, Richard Ulmer wrote: > > Hi all, > > I've been reading up on "advanced" less(1) features and came across the > > lesskey(1) man page. In the COMMAND SECTION of the page I read this: > > > > > The

Re: Server certs expired higher up the chain, imaps and https

2021-09-30 Thread Luke A. Call
I think I read in some news (slashdot? HN?) semi-recently that a bunch of old-style (?) Let's Encrypt certificates are expiring today. Different software packages may handle it differently, as to how they determine what to accept...? Sorry vague, but I something on my phone with one site that

Re: VMM 6.9amd64 host video acceleration

2021-05-12 Thread Luke A. Call
I think there are ways to get what you want w/o VMM, such as a combination of regular X, separate user accounts for different activities, ssh -X/-Y, and rarely, xhost. Email me off-list if you want details; I have described them here at least somewhat, in the past. (Also given the fact that

Re: default umask 0077?

2021-05-01 Thread Luke A. Call
One possible correction: login.conf might be a better place than what I suggested earlier. Either way, would require thinking through it by someone more knowledgeable. On 2021-05-01 09:37:51-0600, Luke A. Call wrote: > I have been wondering for a long time (and did some searches) if it >

default umask 0077?

2021-05-01 Thread Luke A. Call
I have been wondering for a long time (and did some searches) if it would make sense for obsd to have a default umask of 0077, in the /etc/profile or /etc/skel files on new installs, or what I'm missing. I imagine it helping a new user who hasn't learned yet about umask, to not create files

Re: Deleting sysupgrade, was: sysupgrade failure logs

2021-02-15 Thread Luke A. Call
e and easier (given that I am not near your level of expertise here), so, thanks for it being there. Luke Call http://lukecall.net

libreoffice and iridium/chromium crash on openbsd6.8, unless devhelp manually installed

2021-02-08 Thread Luke A. Call
on to another user's desktop. I haven't tried it when launching X as the same user that runs the apps. Luke Call http://lukecall.net - Tech,thots,peace.(Updated 2021-01-10. Cmts/sugg welcome. https later.) DMESG: OpenBSD 6.8 (GENERIC.MP) #4: Mon Jan 11 10:35:56 MST 2021 r...@syspatch-68-a

Re: Microsoft's war on plain text email in open source

2020-08-26 Thread Luke A. Call
ences and flexibility, and I feel ~"enough" control over my email, but they run the servers, I can set various kinds of rules or DKIM things etc if memory serves, but don't have to), and maybe pobox.com (but it has been a long time since I used pobox), and I imagine others. Luke Call

multiple simultaneous X sessions?

2020-08-24 Thread Luke A. Call
hing among them with Ctrl-Alt-FN.) Either way, thanks much for any info. Luke Call

multiple simultaneous X sessions?

2020-08-22 Thread Luke A. Call
trl-Alt-FN.) -- Luke Call "...[W]hen the wicked rule the people mourn. Wherefore, honest men and wise men should be sought for diligently, and good men and wise men ye should observe to uphold; otherwise whatsoever is less than these cometh of evil." (Doctrine & Covenants 98:

Re: email attachments in firefox

2020-08-21 Thread Luke A. Call
es (I don't have access to my > OpenBSD system right now but probably look for "firefox" in that directory.) If it is done similarly as in chromium, /tmp will also work in addition to ~/Downloads, as will directories symlinked to those. -- Luke Call "...[W]hen the wicked rule the

reviewing what is available (was Re: Faking the same LAN over the Internet

2020-04-01 Thread Luke A. Call
lly reading. Lots of good stuff and some surprises (for me at least) in there. If I hadn't done that once with debian (years ago), I wouldn't know about touch(1), for example, and a bunch of other things. Again, you know more than I, so no insult intended. :) -- Luke Call Peace, tech, help, idea

Re: Samba on obsd

2020-03-25 Thread Luke A. Call
On 03-25 12:42, Lars Bonnesen wrote: > It seems that Debian is also recommended as an AD replacement. And in my experience with packaging tools internals, policies, standards support, etc (which was not with anything related to AD), far superior to other Linux distros. Ask me off-list if you

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Luke A. Call
On 03-18 20:29, Ingo Schwarze wrote: > I have definitely collaborated with at least these NetBSD developers > in the past: And a lame but sincere thanks to Ingo, Theo, and everyone else, for the impressive work freely given, and for patiently tolerating the rest of us.

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Luke A. Call
ld location, while avoiding possible "which bsd" confusion (maybe called "Some other systems' manuals", or such). Especially for those not reading this thread. Just a thought. -- Luke Call My thoughts: http://lukecall.net (updated 2020-03-13)

Re: alacritty build

2020-03-11 Thread Luke A. Call
evening (SAST) if you > > don't come right before then. > part of the staff group, datasizr-cur=4096M max infinity > during build on my dual core i7 4xxx it took 17m to build RAM usage really > going over 800mb > 35mb binary Just curious: what was the size after running "strip" on the binary, or did you? -- Luke Call My thoughts: http://lukecall.net (updated 2020-02-18)

pkg_outdated binary?

2020-03-09 Thread Luke A. Call
ux 0 wsmouse0 detached ums0 detached uhidev0 detached uhidev0 at uhub0 port 3 configuration 1 interface 0 "vendor 0x USB OPTICAL MOUSE" rev 1.10/1.00 addr 2 uhidev0: iclass 3/1, 1 report id ums0 at uhidev0 reportid 1: 3 buttons, Z dir wsmouse0 at ums0 mux 0 wsmouse0 detached ums0 detached uhidev0 detached uhidev0 at uhub0 port 3 configuration 1 interface 0 "vendor 0x USB OPTICAL MOUSE" rev 1.10/1.00 addr 2 uhidev0: iclass 3/1, 1 report id ums0 at uhidev0 reportid 1: 3 buttons, Z dir wsmouse0 at ums0 mux 0 wsmouse0 detached ums0 detached uhidev0 detached uhidev0 at uhub0 port 3 configuration 1 interface 0 "vendor 0x USB OPTICAL MOUSE" rev 1.10/1.00 addr 2 uhidev0: iclass 3/1, 1 report id ums0 at uhidev0 reportid 1: 3 buttons, Z dir wsmouse0 at ums0 mux 0 -- Luke Call My thoughts: http://lukecall.net (updated 2020-02-18)

Re: Hardening browser

2020-03-07 Thread Luke A. Call
On 03-07 19:19, whistlez...@riseup.net wrote: > On Thu, Mar 05, 2020 at 07:32:36AM -0700, Luke A. Call wrote: > > I just leave javascript off for usual browsing, with a tab sitting open > > in chromium or iridium to turn it on for the occasional temporary need, > > or a

Re: Hardening browser

2020-03-05 Thread Luke A. Call
y convenient.) > Actually my browsing routine now employs more primitive browsers. Yes, sometimes, if practical. -- Luke Call My thoughts: http://lukecall.net (updated 2020-02-18)

Re: Hardening browser

2020-03-04 Thread Luke A. Call
On 03-04 12:03, Luke A. Call wrote: > Partly as a possible approach, and partly for feedback/suggestions on > it: [] > multiple user logins and their corresponding X sessions running > at the same time, among which I would switch with Ctrl-Alt-F* keys, > hoping that if one a

Re: Hardening browser

2020-03-04 Thread Luke A. Call
re I can, and a systemwide default of umask 0077, and limit my root access to run only from a console -- which you can consider. But I've wondered, if obsd were suited to multiple concurrent X sessions, whether that could be interesting as well to address this common issue. -- Luke Call

Re: Web documentation available offline by default?

2020-02-28 Thread Luke A. Call
harmful. -- Luke Call My general thoughts: http://lukecall.net (updated 2020-02-18)

Re: Resource temporarily unavailable: have to recompile?

2020-02-03 Thread Luke A. Call
On 02-01 19:43, Strahil Nikolov wrote: > On February 1, 2020 12:27:40 AM GMT+02:00, "Luke A. Call" > wrote: > >I am still seeing this problem, even after logging out/in and ulimit -u > >shows 712. Running "ps -U myusername|less" yields about 180 lines and

Re: Resource temporarily unavailable: have to recompile?

2020-01-31 Thread Luke A. Call
w (in both cases: "Resource temporarily unavailable"). On 01-31 13:20, Luke A. Call wrote: > Hi misc. > > Am I running into a limit that will require recompiling the kernel > (or changing my work style I suppose)? Which man pages should I read > next, or should I be thinkin

Re: Resource temporarily unavailable: have to recompile?

2020-01-31 Thread Luke A. Call
Sorry. It seems to have been just a ulimit and a login.conf value that I had not increased enough. On 01-31 13:20, Luke A. Call wrote: > [] > I am getting "Resource temporarily unavailable" in > /var/log/authlog when I try to open too many "ssh [-X] user@localhost

Resource temporarily unavailable: have to recompile?

2020-01-31 Thread Luke A. Call
Hi misc. Am I running into a limit that will require recompiling the kernel (or changing my work style I suppose)? Which man pages should I read next, or should I be thinking about this differently? I am getting "Resource temporarily unavailable" in /var/log/authlog when I try to open too

Re: Question about marketability of OpenBSD Laptops

2020-01-26 Thread Luke A. Call
On 01-26 10:45, Stuart Henderson wrote: > [] > I have non-technical users on OpenBSD > laptops and desktops using GNOME+Chromium+LibreOffice, not everything > is perfect but it works well enough and we didn't have to revert to > Windows. > > It *does* need managing though, it won't work as

Re: pkg_info(1) man page possible error

2020-01-25 Thread Luke A. Call
On 01-25 01:49, Ingo Schwarze wrote: > Andrew Easton wrote on Fri, Jan 24, 2020 at 11:17:20PM +0100: > > I was looking for a list of ports packages > Depending what you really need, try > $ doas pkg_add portslist > $ less /usr/local/share/ports-INDEX > $ doas pkg_add sqlports > $ sqlite3

Re: Suggestion: Replace Perl with Lua in the OpenBSD Base System

2019-12-31 Thread Luke A. Call
On 12-31 14:02, Raul Miller wrote: > On Tue, Dec 31, 2019 at 1:32 PM wrote: > > I'm curious to know if there are any languages other than C and perl in > > use in OpenBSD base. > It's pretty easy to download the sources for base, and then: > tar zxf src.tar.gz > find . -type f -name '*.*' | sed

Re: ttyC0 floods with error messages

2019-12-16 Thread Luke A. Call
On 12-16 10:48, Raymond, David wrote: > I get similar stuff on console 1 but not on the others on all my > OpenBSD machines. As I use X windows and have clean consoles 2-4 > available if necessary, I just ignore it. I get similar messages in dmesg (used to be on the first console), and every

hardware security (was Re: Installing OpenBSD on Supermicro A2SDi-4C-HLN4F

2019-06-16 Thread Luke A. Call
hoosing many individual components. Thanks in advance. -- Luke Call Things I want to say to many (a lightly-loading site): http://lukecall.net (updated 2019-06-09) On 06-15 15:11, Stuart Henderson wrote: > On 2019-06-15, ms wrote: > > There were some serious security issues with hardw

Re: No more KDE's dolphin after upgrade to 6.5

2019-04-26 Thread Luke A. Call
On 04-26 21:47, Rafael Sadowski wrote: > [] > update all packages with the following PKG_PATH example: > > env PKG_PATH=https://ftp.openbsd.org/pub/OpenBSD/6.5/packages/ pkg_add -u -v > -Dinstalled > > It looks like you mixed packages for 6.4 and 6.5 and/or -current. I had to run a pkg_add

Re: OpenBSD 6.5

2019-04-25 Thread Luke A. Call
On 04-24 15:31:34+, Mik J wrote: > Thank you for this new release and all of those who contributed. Echoed by many, for past and future work on this excellent system. Thanks very much indeed.

crash report

2019-04-22 Thread Luke A. Call
dCrash-imagesOnOnePage.html http://lukecall.net/temp-crashInfo/3rdCrash-imagesOnOnePage.html http://lukecall.net/temp-crashInfo/allImagesLinks.html http://lukecall.net/temp-crashInfo/ Luke Call - - Things I want to tell people: Free personal organizer software, & thoughts on subjects (updated

mouse stops working 2 days after reboot

2018-11-15 Thread Luke A. Call
Hi. On 6.4 (not 6.3 or snapshots i tried), the external mouse just stops working, ~2 days after rebooting, multiple times. A reboot fixes it, but just restarting X with Ctrl-Alt-Bksp does not fix it (though it does seem to close/restart xenodm). I am not using the trackpad and even while this

Re: xfce4-terminal crash in openbsd 6.4

2018-11-09 Thread Luke A. Call
lling inkscape fixed it. On 11-07 09:53:32-0700, Luke A. Call wrote: > This happens in OpenBSD 6.4 but I'm fairly confident didn't happen in > 6.3 (definitely didn't happen at some point in the recent past; I don't > recall if I tried this while I was using snapshots between 6.3 and 6.4): &

xfce4-terminal crash in openbsd 6.4

2018-11-07 Thread Luke A. Call
This happens in OpenBSD 6.4 but I'm fairly confident didn't happen in 6.3 (definitely didn't happen at some point in the recent past; I don't recall if I tried this while I was using snapshots between 6.3 and 6.4): If I start xfce4-terminal (either from xterm or the xfce4 "Run Program" dialog),

can't start X in 6.4

2018-10-27 Thread Luke A. Call
I was running a snapshot from Sept 26, then upgraded yesterday to 6.4 release, and ran pkg_add -u and syspatch. Fortunately mutt runs without X :) . When I run "startx" I get errors like this (details in log below): [ 78310.256] (EE) No drivers available. [ 78310.256] (EE) Fatal server

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Luke A. Call
On 09-19 08:32, Chris Bennett wrote: > On Wed, Sep 19, 2018 at 04:14:47PM +0200, Solene Rapenne wrote: > > Chris Bennett wrote: > > > I have not opened up my server before for full usage of email, web, > > > database, etc. before. So I'm a total noob on really good security > > > practices. > > >

ssh -X instead, workarounds (was Re: ssh -Y behaviour change

2018-09-12 Thread Luke A. Call
On 09-12 08:20, Brett Mahar wrote: > I know `ssh -X` is more secure, I use this when I can but use the `ssh -Y` > version when I need ability to copy and paste. While this probably doesn't solve your main problem, it might be useful afterward. For what it's worth, I have used ssh -X

Re: Running your own mail server

2018-09-10 Thread Luke A. Call
On 09-10 13:30, Craig Skinner wrote: > Being a postmaster (email server administrator) and hostmaster (DNS > server administrator) is fun, hectic, and takes about 5 years to learn. > [] > Save yourself the trouble and let them use their gMail > accounts/addresses directly. They'll soon be

Re: nmap on routed ip4 networks, openbsd/pf or package/port issue?

2018-08-01 Thread Luke A. Call
On 08-01 10:54, Luke A. Call wrote: > On 08-01 15:08, Henrik Engmark wrote: > > So I set up a new 6.3 with the sole purpose of nmapping, since my older > > OpenBSDs is coremapping on me with nmap. > >[] > > On to the problem, I scan my local LAN with the follo

Re: nmap on routed ip4 networks, openbsd/pf or package/port issue?

2018-08-01 Thread Luke A. Call
On 08-01 15:08, Henrik Engmark wrote: > So I set up a new 6.3 with the sole purpose of nmapping, since my older > OpenBSDs is coremapping on me with nmap. >[] > On to the problem, I scan my local LAN with the following: > nmap -Pn -A -v -v --send-eth -e em0 -stylesheet somestylesheet -oA >

Re: Questions about crypto and USA laws, concerns today

2018-07-24 Thread Luke A. Call
On 07-24 11:50, Chris Bennett wrote: > What is going on overall with the US and cryptography? > I recently joined an organization that has legitimate concerns about > privacy, so I thought I'd ask those who know and have history with this > issue. I am definitely not any kind of expert on this

Re: How to search for "hostap" in man pages.

2018-06-16 Thread Luke A. Call
ps: I think apropos/man -k only search the header, not the entire manual page. On 06-16 17:34, Luke A. Call wrote: > I think "man -K" would work on gnu/linux, but on OpenBSD you might have to: > cd /usr/share/man > or > cd /usr/local/man > and > grep -ir hosta

Re: How to search for "hostap" in man pages.

2018-06-16 Thread Luke A. Call
I think "man -K" would work on gnu/linux, but on OpenBSD you might have to: cd /usr/share/man or cd /usr/local/man and grep -ir hostap *|less . Maybe someone else knows a better way though. On 06-16 22:39, Karel Gardas wrote: > > Hello, > > was looking for "hostap" or "Host AP" using

Re: Limit CPU usage of a process?

2018-05-27 Thread Luke A. Call
I had that problem but turning off javascript (as someone else said), turning off images most of the time, and bookmarking the tab group then closing as many tabs as I wasn't actually going to use soonest (especially any viewing PDF files), dropped it down to ~4%. On 05-27 12:07:16+0200,