Re: [Trisquel-users] Is trisquel using OpenSMTPD ?

2020-01-31 Thread platoxia

From to the link you posted:

"The patch arrived in OpenSMTPD 6.6.2 (6.6.2p1 if you are using the so-called  
Portable source code intended for use on operating systems other that OpenBSD  
itself)."


In Trisquel 8.0 LTS Fildas, the latest version is 5.7.3p2-1 amd64, according  
to my apt search. If this is what you are using then I would be  
extraordinarily concerned, just as you say.


In this case, you can either wait for it to be updated for Fildas or do it  
yourself if you have the ability (I don't myself, but maybe you can find  
someone who can help you in this forum).


Otherwise, I would suggest installing the Guix package manager (as it already  
has OpenSMTPD 6.6.2p1: https://guix.gnu.org/packages/opensmtpd-6.6.2p1/) and  
then use the guix pack utility to create a binary tarball that includes all  
dependencies built in, or it can make a docker image for you...either of  
which you can use on your current system  
(https://guix.gnu.org/manual/en/html_node/Invoking-guix-pack.html#Invoking-guix-pack).  
For full disclosure, I've never done this before and only know it is an  
option that should work according to the Guix guys, but honestly, I don't  
know that this would be any faster than just compiling the new version  
yourself and making a package for it that will work with apt.


Another thought is to just add a ppa to apt that already has it and install  
it from there...although I don't know that the dependencies would be the  
same.


Whichever way you decide to handle it, I would shut down that mail server  
immediately if it accepts random emails from the internet. You aren't likely  
to be able to easily recover from any new outgoing spam activity if you  
already have a history of it.


Best of luck,
Platoxia


Re: [Trisquel-users] Is trisquel using OpenSMTPD ?

2020-01-31 Thread jason
"using"? Trisquel has a number of MTAs available for people to use, including  
OpenSMTPD but also Postix and Exim and...


[Trisquel-users] Is trisquel using OpenSMTPD ?

2020-01-31 Thread amenex

One of my security news feeds just happened to mention a bug in OpenSMTPD:

https://nakedsecurity.sophos.com/2020/01/31/serious-security-how-special-case-code-blew-a-hole-in-opensmtpd/

As I'm getting all manner of unsolicited nasty-looking emails because of
past anti-spam activity, I wonder if I should be extraordinarily
concerned with the state of OpenSMTPD.

George Langford, stunned in SE PA


Re: [Trisquel-users] Recommended certificate provider

2020-01-31 Thread ark
Also there are some mobile phones that will refuse at all to enter such  
sites.


Not really sure if there are such thing as libre respecting authority, maybe  
ethical authorities.


I use LetsEncrypt for my projects.


[Trisquel-users] Recommended certificate provider

2020-01-31 Thread trisquel
Is there such a thing as a "libre" certificate authority or provider? I  
realize that once I put a browser-recognized certificate on my site that  
every visit calls back to the certificate issuer so they know all of my  
traffic stats and having a certificate gives the issuer the power to revoke  
it and kill my site. Torvalds and friends with Lets Encrypt offer one for  
free, and most GNU/Linux distro sites use the Lets Encrypt certificate,  
except for RMS personal site which uses Comodo. Just curious about anyone's  
thoughts here as to the best way to deal with purchasing a certificate. I  
have used a self-signed certificate but it's not good for public-facing sites  
and asking people to import it into their browser is a hassle.


[Trisquel-users] Recommended certificate provider

2020-01-31 Thread trisquel
Is there such a thing as a "libre" certificate authority or provider? I  
realize that once I put a browser-recognized certificate on my site that  
every visit calls back to the certificate issuer so they know all of my  
traffic stats and having a certificate gives the issuer the power to revoke  
it and kill my site. Torvalds and friends with Lets Encrypt offer one for  
free, and most GNU/Linux distro sites use the Lets Encrypt certificate,  
except for RMS personal site which uses Comodo. Just curious about anyone's  
thoughts here as to the best way to deal with purchasing a certificate. I  
have used a self-signed certificate but it's not good for public-facing sites  
and asking people to import it into their browser is a hassle.


Re: [Trisquel-users] Tutorials for switching from Windows 7

2020-01-31 Thread xliang9550
Microsoft is an important collaborator to Linux kernel only. It is still  
hostile to GNU (copyleft). Don't expect Microsoft (or Apple, Google, etc.) to  
support copyleft.


Re: [Trisquel-users] Tutorials for switching from Windows 7

2020-01-31 Thread Ignacio Agulló
On 31/01/20 13:40, wrote:
> Microsoft has set out on the path to make GNU/Linux redundant.
> UNIX-like tools are starting to be available natively.

 Microsoft is an important collaborator to GNU/Linux now, so it is
no wonder that we get to see some of their work on software available on
Windows NT.

 You could say that GNU/Linux is being made redundant.. or that they
are gradually migrating Windows NT to GNU/Linux, starting with the
network layers.

-- 
Ignacio Agulló · grafot...@grafotema.com



Re: [Trisquel-users] Tutorials for switching from Windows 7

2020-01-31 Thread enduzzer
Microsoft has set out on the path to make GNU/Linux redundant. UNIX-like  
tools are starting to be available natively.


https://eternallybored.org/misc/wget/

https://www.howtogeek.com/336775/how-to-enable-and-use-windows-10s-built-in-ssh-commands/




Re: [Trisquel-users] Tutorials for switching from Windows 7

2020-01-31 Thread xliang9550
Switching to GNU/Linux on bare metal should be the last step. I've seen  
countless GNU/Linux beginners turned back to Losedows simply because s/he  
couldn't do certain trivial things under GNU/Linux. And after such  
"unsuccessful" experiences, they became even less interested in free/libre  
software. In other words, their efforts to switch to a free/libre operating  
system backfired.


Another important thing is to teach beginners which trivial things are those  
that they should never expect to do under GNU/Linux. For example, handling  
proprietary formats, playing DRM-encumbered media, or communicating via  
proprietary protocols.


Free software builds for Losedows are not in short supply. Although there are  
many things that can be done much more efficiently under GNU/Linux than under  
Losedows.