Upgrading Mozilla from 1.0.1 to 1.4 in RedHat 8.0
I downloaded the following RPMs: 9208167 mozilla-1.4-0.i386.rpm 119897 mozilla-chat-1.4-0.i386.rpm 3301167 mozilla-devel-1.4-0.i386.rpm 162207 mozilla-dom-inspector-1.4-0.i386.rpm 212296 mozilla-js-debugger-1.4-0.i386.rpm 1923838 mozilla-mail-1.4-0.i386.rpm 103139 mozilla-nspr-1.4-0.i386.rpm 175862 mozilla-nspr-devel-1.4-0.i386.rpm 633236 mozilla-nss-1.4-0.i386.rpm 479970 mozilla-nss-devel-1.4-0.i386.rpm 283810 mozilla-psm-1.4-0.i386.rpm and ran rpm -U --test mozilla*.rpm in a directory which held the above files. The output was: error: Failed dependencies: libpthread.so.0(GLIBC_2.3.2) is needed by mozilla-nspr-1.4-0 The versions I have in my Linux installation are: /lib/libpthread-0.10.so /lib/libc-2.2.93.so (according to rpm -qf, both files are from package glibc-2.2.93-5). My questions: 1. Does the above mean that I have to upgrade to package glibc-2.3.2-whatever? 2. If yes, does anyone have experience upgrading RedHat 8.0 installation like this? How risky would this be? Thanks, --- Omer My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: iglo checksums for RH9 ??
On Thu, Oct 02, 2003 at 02:54:33PM +0300, [EMAIL PROTECTED] wrote: > Hi, > > Does anyone know why some ftp sites > (uselinux.org/pub/redhat/9/en/iso/i386/MD5SUM and many others) have a > shrike-SRPMS-disc1.iso MD5 checksum of > > 34048ce4cd069b624f6e021ba63ecde5 > > while -disk1 from mirror.israel.net and iglu.org.il has a md5 checksum of > > 400c7fb292c73b793fb722532abd09ad That is true. It's also worth noticing that the MD5SUM file claims this (400...) MD5 for shrike-i386-disc1.iso (I assume you meant i386, not SRPMS). The MD5SUM file is not something we generated; it's a file provided (and signed) by RedHat. However, when you look on RedHat's FTP, you notice they have a different MD5SUM now. It claims different MD5 for shrike-i386-disc1.iso. It was apparently reissued on 3rd September 2003. I'll resync IGLU's mirror with it. (RedHat's ISOs are not synced automatically.) = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Re: ANNOUNCE: Linux-il archives to be closed
Maybe we should remind them about the announcement at the WICC site (http://www.weizmann.ac.il/CC/unix/) about Linux Course (posted on: 23.09.2003) The Weizmann Institute Computing Center is considering opening a basic course in Linux . -- >> http://www.weizmann.ac.il/CC/news/unix/173.html in Hebrew we say something like "to spit at their own drinking-well...". This could be a great resource for their courses. Oren Maureer = = = --- Walla! Mail, Get Your Private, Free E-mail from Walla! at: http://mail.walla.co.il = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
Ariel Biener wrote: If you have problems within Machba, there are some of us here who might have assisted have you turned to us for help in the first place. However, marking the whole Weizmann CC as a bunch of idiots wont get you or anyone else very far, no matter what the cause is. A few clarifications. First, I never characterized the WICC as a whole. The only enumerations used were "high-level officials" and "security experts". That's definitely not the whole CC. On the contrary, there are many people who're fully qualified; and I'm in friendly relations with some of them. However, regarding those who were (implicitly) named - I stick to my opinion about them. Second, I reserve for myself the right to treat people exactly in the way they treat me. And if you didn't get it - _they_ have been treating me as an idiot (or as a brainless kid, in the best case) for years. There could have been better solutions. Which for example, I wonder? You'd call them privately and tell "Well, Evgeny is a good guy, let him play with his plasma-gate toy" or something like this? I don't want this kind of favour either! Either there is a security problem with plasma-gate or there isn't. If it does exist, I want to hear about it. If I can, I'll fix it. If I can't, I'll say "Sorry guys, I'm not qualified to sort the thingy out" and will shut the plasma-gate down myself. Instead, I've been continously told "this is a security policy, just shut up". I am very doubtful that after this there are any left, at least within the WICC jurisdiction. If I thought there would be a _tiniest_ chance to resolve the problem within the WICC jurisdiction, I wouldn't have written the open letter. I wrote to the relevant people in private a month ago. Neither of them even bothered replying. There have been quite a few phone calls in both directions as well - with no constructive ideas at all. It's only when I realized the chance is mathematically zero and very few days left ahead, I decided that it's time for someone to take over the archive maintenance. Regards, Evgeny = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
Ariel Biener <[EMAIL PROTECTED]> writes: > While I understand the frustration, please do not spam Aviva and her > colleague with our mail. They were cc:'ed for the last 6-7 mails, due to > you people using `reply'. Actually, I CCed them on purpose, because I thought it was worthwhile to let them know there were people who appeciated what Evgeny did on plasma-gate. It was not an expression of frustration on my part. -- Oleg Goldshmidt | [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Mozilla and internet banking
Funny indeed. I DO remember that past note from their site claiming new support for mozilla - it's probably a note mentioning that "back to support mozilla" step you describe (the time tables are in sync with my vague memory...). Anyway, like you said, its nice to have it working and that's what matters. Further more, it made me thinking that sometimes encouraging non-IE support is better (more productive) than criticizing this lack of support. Hmm.. Maybe it's worth writing them about that. Night, Boaz. Gabor Szabo wrote: On Thu, 2 Oct 2003, Boaz Rymland wrote: As already cliamed, bank hapoalim indeed supports mozilla. I can add that this support is not "by chance". Funny as I actually wanted to write that their support of Mozilla might be *by mistake*. It was working with Mozilla for a long time. A couple of month ago they broke their web site and I could not use it with Mozilla. I wrote to them, they told me to use IE. After some time - and I don't recall how long passed - I checked it again as I was about to complain to my branch manager. By that time it worked again. Anyway, it works now and that's what is important. Gabor http://www.pti.co.il/ = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
On Thu, 2 Oct 2003, Evgeny Stambulchik wrote: Hi, While I understand the frustration, please do not spam Aviva and her colleague with our mail. They were cc:'ed for the last 6-7 mails, due to you people using `reply'. If you have problems within Machba, there are some of us here who might have assisted have you turned to us for help in the first place. However, marking the whole Weizmann CC as a bunch of idiots wont get you or anyone else very far, no matter what the cause is. There could have been better solutions. I am very doubtful that after this there are any left, at least within the WICC jurisdiction. I know that for all you care, you don't want their favours (for they are a bunch of idiots as you said in your own colorful way), but I believe there are better ways to deal with frustration that to slander the whole Weizmann CC on an open mailing list. --Ariel -- Ariel Biener e-mail: [EMAIL PROTECTED] PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
Oleg Goldshmidt wrote: Evgeny Stambulchik <[EMAIL PROTECTED]> writes: Oleg Goldshmidt wrote: I am a Grace user of way too many years to count (I forgot whether xvgr predated xmgr or the other way around), and I would not want *that* to go down... Well, that will go down too. Well, will Hamakor and/or IGLU consider adopting it? It's a really cool and useful piece of GPLed software. http://plasma-gate.weizmann.ac.il/Grace/ We could, but quite frankly, I don't see anything that we can do for this project that can't be done much better using sourceforge/berlios. Shachar -- Shachar Shemesh Open Source integration consultant Home page & resume - http://www.shemesh.biz/ = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Mozilla and internet banking
On Thu, 2 Oct 2003, Boaz Rymland wrote: > As already cliamed, bank hapoalim indeed supports mozilla. I can add > that this support is not "by chance". Funny as I actually wanted to write that their support of Mozilla might be *by mistake*. It was working with Mozilla for a long time. A couple of month ago they broke their web site and I could not use it with Mozilla. I wrote to them, they told me to use IE. After some time - and I don't recall how long passed - I checked it again as I was about to complain to my branch manager. By that time it worked again. Anyway, it works now and that's what is important. Gabor http://www.pti.co.il/ = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
Evgeny Stambulchik wrote: Shlomi Fish wrote: Very well. We have mirror.hamakor.org.il now. Shachar, would it be possible to host the archives there? If so, Evgeny, would you mind sending them the configuration and scripts you use to archive the list? No problem. Just let me know whom to send. Regards, Evgeny Send them to me. I may just use some sort of other utility, but having the scripts will be a welcome start. Now a few questions: First - What rate would you say the archives grow at? Second - Will you be able to keep the existing archives up, or should we mirror those as well? Third - in case the answer to 2 is that you won't be able to - how big are the archives already? Will you be able to sftp them over? Feel free to start excluding the list at any time you like `-) Shachar -- Shachar Shemesh Open Source integration consultant Home page & resume - http://www.shemesh.biz/ = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
Evgeny Stambulchik <[EMAIL PROTECTED]> writes: > Oleg Goldshmidt wrote: > >I am a Grace > >user of way too many years to count (I forgot whether xvgr predated > >xmgr or the other way around), and I would not want *that* to go > > down... > > Well, that will go down too. Well, will Hamakor and/or IGLU consider adopting it? It's a really cool and useful piece of GPLed software. http://plasma-gate.weizmann.ac.il/Grace/ > And don't think they ignore the community needs only. There is a > mailing list related to the plasma science as well. Arggghh... My previous plasma physics incarnation is hurt just as much as my current computer science one... -- Oleg Goldshmidt | [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: verifying mail signatures from the command line
+ Moshe Kaminsky <[EMAIL PROTECTED]> [30/09/03 22:20]:
> This whole thing means I'll need some extra program to verify such
> e-mails, but I guess no one knows where I can find it. I guess I'll
> just have to use perl's MIME::Tools.
Well, I wrote something. I attach it in case someone else needs it (it's
useful with procmail).
> Thanks anyway,
> Moshe
>
> >
> > --
> > Nadav Har'El| Monday, Sep 29 2003, 3 Tishri 5764
> > [EMAIL PROTECTED] |-
> > Phone: +972-53-790466, ICQ 13349191 |If you lost your left arm, your right arm
> > http://nadav.harel.org.il |would be left.
> >
> > =
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> >
>
> --
> Moshe Kaminsky <[EMAIL PROTECTED]>
> Home: 08-9456841
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
--
Moshe Kaminsky <[EMAIL PROTECTED]>
Home: 08-9456841
#!/usr/bin/env perl
# File Name: mailverify
# Maintainer: Moshe Kaminsky <[EMAIL PROTECTED]>
# Original Date: September 30, 2003
# Last Update: September 30, 2003
###
use warnings;
use integer;
BEGIN {
our $VERSION = 0.1;
# analyze command line
use Getopt::Long qw(:config gnu_getopt);
use Pod::Usage;
our $opt_help;
our $opt_man;
our $opt_version;
our $Gpg;
our $Tolerant;
GetOptions('gpg=s' => \$Gpg,
'tolerant!' => \$Tolerant,
'help', 'version', 'man');
pod2usage(1) if $opt_help;
pod2usage(-verbose => 2) if $opt_man;
print "$0 version $VERSION\n" and exit if $opt_version;
$Gpg = '/usr/local/bin/gpg --batch --verify' unless $Gpg;
}
use File::Temp qw( tempfile );
my $PrevField = '';
# process the header
while (<>) {
next if /^From /o;
last if /^$/o;
if (/^([\w-]+): (.*)$/o) {
$Header{$1} = $2;
$PrevField = $1;
} else {
$Header{$PrevField} .= $_;
}
}
# check that the message is signed
$Str = $Header{'Content-Type'};
@Parts = split /;\s+/, $Str if $Str;
if (not $Str or $Parts[0] ne 'multipart/signed') {
# the message is not multipart/signed, but might still be cleartext
# signed. Depending on --tolerant, we may pass the rest of the message to
# gpg directly
print "Message not signed\n" and exit -1 unless $Tolerant;
open GPG, "|$Gpg" or die "Can't open pipe to gpg ($Gpg): $!";
print GPG <>;
close GPG;
exit $? >> 8;
}
# the boundary string signals the boundary between two attachments
$Boundary = $1 if $Parts[3] =~ /^boundary="(.*)"$/o;
# go to the start of the message
while (<>) {
last if $_ eq "--$Boundary\n";
}
# read the message, excluding the last (empty) line
while (<>) {
last if $_ eq "--$Boundary\n";
push @Message, $_;
}
pop @Message;
# read the sig
while (<>) {
last if /^-BEGIN PGP SIGNATURE-$/o;
}
{
do {
push @Sig, $_;
last if /^-END PGP SIGNATURE-$/o;
} while (<>);
};
# here comes the funny part: replace \n by \r\n
$_ = join '', @Message;
s/(?$SigFile" or die "can't open $SigFile: $!";
print SIGFH @Sig;
close $MsgFH;
close SIGFH;
# run gpg
print `$Gpg $SigFile`;
# clean up
unlink $MsgFile, $SigFile;
# exit with the status of gpg
exit $? >> 8;
__DATA__
# start of POD
=head1 NAME
mailverify - verify the pgp signature of a mime signed mail message
=head1 SYNOPSIS
B B<--help>|B<--man>|B<--version>
B [B<--gpg=I>] [B<--(no)tolerant>] [I]
=head1 OPTIONS
=over 4
=item B<--gpg=I>
The command to run to do the actual checking. The default is
S>. It is called with one argument,
which is the name of the file containing the signature. If B<--tolerant> is
used, it may also be called with the whole message on the standard input.
=item B<--(no)tolerant>
Normally (with B<--notolerant>), if the Content-Type is not
C, B decides that the message is not signed,
and exits with status -1. With this switch, the message is passed to I
(or whatever was specified with the B<--gpg> option) as is. This way,
clearsigned messages can be verified with the same command.
=item B<--help>
Give a short usage message and exit with status 1
=item B<--man>
Give the full description and exit with status 1
=item B<--version>
Print a line with the program name and exit with status 0
=back
=head1 ARGUMENTS
If an argument is given, it is treated a file containing an e-mail message to
verify, but more common is to read the message from stdin.
=head1 DESCRIPTION
This script verifies the pgp signature of files whose signature appears as an
attachment (Content-Type C). If B<--tole
Re: ANNOUNCE: Linux-il archives to be closed
Shlomi Fish wrote: Very well. We have mirror.hamakor.org.il now. Shachar, would it be possible to host the archives there? If so, Evgeny, would you mind sending them the configuration and scripts you use to archive the list? No problem. Just let me know whom to send. Regards, Evgeny = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
Diego Iastrubni wrote: The problem is that too ignorant people have too much power about decisions in which they have no enough knowledge to decide about. Right. As the minkind history shows, there is nothing worse than a fool with power. Regards, Evgeny = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
Oleg Goldshmidt wrote: 2) Will plasma-gate continue to function as a web server? So far, yes, but I'm afraid only until they discover that a (mis)configured http server may serve as an email relay (shhh). Then, only www.weizmann.ac.il will remain. Also, as I said, there have been a couple of attempts to shut down the plasma-gate web server in the past, just out of the blue. One never knows... I am a Grace user of way too many years to count (I forgot whether xvgr predated xmgr or the other way around), and I would not want *that* to go down... Well, that will go down too. At least, I'll have to find a new home for the project - there are the mailing lists, too (actually, those are the emails that were disabled for half a month; and if you think somebody bothered to inform me in advance you're deeply mistaken...), there is a bug report system coupled with the mailing list etc. Hours of work are thrown away blindly; more hours will be spend to setup the whole thing anew - instead of preparing the new version and/or fixing bugs. As a result, thousands of users (including those at Weizmann, BTW) will suffer. And don't think they ignore the community needs only. There is a mailing list related to the plasma science as well. And of course, there are dozens of researchers in the lab that have been using their @plasma-gate addresses for years (these emails appear in countless scientific publications, too), and on one nice day (which will happen soon) they will at once stop getting emails from collegues from abroad. It's a common knowledge that security usually comes at the expense of convenience. But in this case, the price is paid to the obscurity only. This is a pity. Regards, Evgeny = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Help, Help, I've ran out of entropy!
Oleg Goldshmidt <[EMAIL PROTECTED]> writes: > On several occasions I generated millions of integers using > /dev/urandom in a tight loop (read from /dev/urandom, write to a file, > nothing else). I think this should have depleted the pool > significantly. Actually, As I wrote this I thought that it might not be true - writing to a file could be replenishing the pool fast enough. On the other hand, these writes were probably not terribly random. It's tricky, I agree. -- Oleg Goldshmidt | [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Hebrew Keyboard in Knoppix
Tzafrir Cohen wrote:
> > however, if you are using this method, you shouldn't be using the KDE way
> > anymore and should use apps like kkbswitch.
>
> Which are not on the CD, unfortunetly. I fully agree, though, that kxkb
> must be rewriten to exploit the keyboard layouts of XFree 4.3 if possible.
> ("rewritten", not "extended").
>
yes, well, i'm working on a knoppix3.3 remaster that will include it.
> > i'm not sure about that, but i think it doesn't matter when you are using
> > the KDE way to switch layouts.
> >
> > The kde app in knoppix3.3 have some other issues, like the annoying
> > problem ctrl+alt+k that can switch only to hebrew but not back. some ppl
> > seem to have solved it by defining an alternate key of ctrl+alt+LAMED
> > which sound like a silly solusion to me and does not work for all
> > versions.
>
> Why doesn't it work? Are there more than two layouts?
no, even if you use only en and il it happens, and if you use some more
layouts then alt+ctrl+K can switch them all till it gets to il and then it
gets stuck !
Sounds like a problem in the keymap file to me. but i don't know how to check
it.
--
Regards,
Shlomi Loubaton.
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
lol... i don't know if i want to cry or laugh... The problem is that too ignorant people have too much power about decisions in which they have no enough knowledge to decide about. I hope that in my "academic institute" the things will not come to this. Actually it's worst, the from page says "this site can be viewed with Netscape 6.X and above" and I am quite sure it does not. I am even rewriting some part of the site to be able to view them in konqui/mozilla/netscape/opera/ie. ביום חמישי, 2 באוקטובר 2003, 19:24, נכתב על ידי Evgeny Stambulchik: > To: The Israeli Group of Linux Users > Copy to: Prof. Yigal Burstein, Senior Advisor to the President for > Information Systems, Weizmann Institute of Science > Copy to: Aviva Greenman, Head of the Computing Center, Weizmann Institute > of Science > > > Hello, > > It is my sad duty to inform you all, that the archives of the Linux-il > mailing list hosted at http://plasma-gate.weizmann.ac.il/Linux/ will be > closed really soon. No, it's not because I'm tired of maintaining the > site. The real cause is ... viruses. Yes, that's right. I'm not joking. > > You see, some smart heads at the Computing Center of the Weizmann > Institute decided that the only way to stop the wave of the MS-oriented > viruses that flooded the Internet recently is to block all SMTP traffic to > the weizmann.ac.il domain except a single firewalled mail relay. So far, > so good. Well, it could be good - if the person(s) in charge could prove > they're capable at anything except crossing the fingers. Meantime, email > addresses that get too much spam are simply disabled so the humble > misconfigured relay w/ antivirus software doesn't choke leaving the whole > thousands of the Institute's personal out of email reach. Again, I'm not > joking. Only @plasma-gate, four email addresses were disabled for more > than two weeks! And when the emails do arrive, sometimes with hours of > delay, they're often broken. I had to manually reconstruct MIME messages > on several occasions. But, if that wouldn't be enough, now they stepped > even further along their noble quest for everyone's security. Namely, all > email addresses not of the form of [EMAIL PROTECTED] (and the archive > robot's [EMAIL PROTECTED] is among them) are simply > banned and delivery attempts will fail. Forwarding, even inside the DMZ, > won't be allowed as well. Today, I was told the new policy will be > enforced in a few days or so. > > No, I don't know why a simple MX record would circumvent the security. A > plausible explanation is that the knowledge required to properly configure > the relay is a way beyond the basic IQ level required to be considered a > security expert at the WICC. When asked, the only answer I got was "This > is the official policy". > > A few words about the "official policy" formation here at Weizmann. I > don't know whether this is a common practice in other academic > institutions in Israel, but here, a "senior advisor" among the leading > scientists is periodically elected to serve as a supervising force over > the CC decisions. In practice, though, this is just a trick to allow the > CC high-level officials to do whatever they want. First, they persuade the > advisor about something (and he obviously believes to the "experts") and > then any argument becomes impossible. Arguing with the advisor on the > technical terms is pointless (he might be great in his scientific field, > but not specialist in the computer/network/security stuff, of course). On > the other hand, any discussion with the "experts" ends immediately with > "This is the official policy. Talk to the advisor". The loop. > > And don't think I gave up easily. I fought hard. Actually, I've been > fighting hard since the very first days of plasma-gate's existence. Back > in 1994, it took 3 (three) months of endless discussions culminated in a > meeting with the dean to be allowed to connect a Linux server to the LAN. > You can't believe which security disasters were foreseen by the "experts" > then. In comparison, the ten plagues of Egypt would be a joy, according to > them. Some of the "experts" are still on board. BTW, by that time, no > firewall existed at WIS, all home directories were NFS-exported RW to the > whole world, passwords were sent in the clear text over the wire, the > public FTP server was full of pirated warez, and viruses were flourishing > in wild on the users' PCs. So much about the security awareness. Since > then, there have been countless attempts to shut plasma-gate down, either > completely or just some services. In parallel to throwing some handfuls of > sand in the wheels, the "experts" were busy improving other aspects of the > institute's security. For example, the warez FTP server was shut down. You > see, when it comes to pressing the power button, the reaction is swift > (just a couple of years). MX is something different. BTW, Weizmann remains > a noticeable exception among the
Re: ANNOUNCE: Linux-il archives to be closed
Evgeny Stambulchik <[EMAIL PROTECTED]> writes: > It is my sad duty to inform you all, that the archives of the Linux-il > mailing list hosted at http://plasma-gate.weizmann.ac.il/Linux/ will > be closed really soon. Great pity. Thanks, Evgeny, for all the work and effort you put into this over the years. Two question to you and the Cabal: 1) The archives are very useful. I use them a lot, at least. Can they find a warm home on IGLU/Hamakor? 2) Will plasma-gate continue to function as a web server? I am a Grace user of way too many years to count (I forgot whether xvgr predated xmgr or the other way around), and I would not want *that* to go down... Thanks, -- Oleg Goldshmidt | [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ANNOUNCE: Linux-il archives to be closed
Very well. We have mirror.hamakor.org.il now. Shachar, would it be possible to host the archives there? If so, Evgeny, would you mind sending them the configuration and scripts you use to archive the list? Regards, Shlomi Fish -- Shlomi Fish[EMAIL PROTECTED] Home Page: http://t2.technion.ac.il/~shlomif/ Writing a BitKeeper replacement is probably easier at this point than getting its license changed. Matt Mackall on OFTC.net #offtopic. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Help, Help, I've ran out of entropy!
Shachar Shemesh <[EMAIL PROTECTED]> writes: > Oleg Goldshmidt wrote: > > >Switch to /dev/urandom - it exists exactly for that purpose. I read > >through the thread - your assertion that /dev/urandom is "of lower > >quality" is wrong. > > > > That depends. If no entropy is being generated, then urandom is indeed > of poorer quality. If Entropy is being generated, but is being > deplated by someone else rapidly, then urandom is probably of > indistinguishable quality from random. This is technically true. Let me explain what I meant. On several occasions I generated millions of integers using /dev/urandom in a tight loop (read from /dev/urandom, write to a file, nothing else). I think this should have depleted the pool significantly. I then ran a known, well-regarded battery of randomness tests written by an authority on the subject (DIEHARD by G. Marsaglia) on the sequence and the result was very random (all tests passed with flying colors). The tests were designed to satisfy a wide range of applications (most pseudo-random generators fail at least some of the tests, btw, in fact it is not easy to find one that succeeds). To say that for your particular application this is not good enough will imply intimate knowledge of the application and its peculiarities. I think the OP mentioned in passing that his application was a third-party one etc, so I assume this is not the case. Hence my comment. -- Oleg Goldshmidt | [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
ANNOUNCE: Linux-il archives to be closed
To: The Israeli Group of Linux Users Copy to: Prof. Yigal Burstein, Senior Advisor to the President for Information Systems, Weizmann Institute of Science Copy to: Aviva Greenman, Head of the Computing Center, Weizmann Institute of Science Hello, It is my sad duty to inform you all, that the archives of the Linux-il mailing list hosted at http://plasma-gate.weizmann.ac.il/Linux/ will be closed really soon. No, it's not because I'm tired of maintaining the site. The real cause is ... viruses. Yes, that's right. I'm not joking. You see, some smart heads at the Computing Center of the Weizmann Institute decided that the only way to stop the wave of the MS-oriented viruses that flooded the Internet recently is to block all SMTP traffic to the weizmann.ac.il domain except a single firewalled mail relay. So far, so good. Well, it could be good - if the person(s) in charge could prove they're capable at anything except crossing the fingers. Meantime, email addresses that get too much spam are simply disabled so the humble misconfigured relay w/ antivirus software doesn't choke leaving the whole thousands of the Institute's personal out of email reach. Again, I'm not joking. Only @plasma-gate, four email addresses were disabled for more than two weeks! And when the emails do arrive, sometimes with hours of delay, they're often broken. I had to manually reconstruct MIME messages on several occasions. But, if that wouldn't be enough, now they stepped even further along their noble quest for everyone's security. Namely, all email addresses not of the form of [EMAIL PROTECTED] (and the archive robot's [EMAIL PROTECTED] is among them) are simply banned and delivery attempts will fail. Forwarding, even inside the DMZ, won't be allowed as well. Today, I was told the new policy will be enforced in a few days or so. No, I don't know why a simple MX record would circumvent the security. A plausible explanation is that the knowledge required to properly configure the relay is a way beyond the basic IQ level required to be considered a security expert at the WICC. When asked, the only answer I got was "This is the official policy". A few words about the "official policy" formation here at Weizmann. I don't know whether this is a common practice in other academic institutions in Israel, but here, a "senior advisor" among the leading scientists is periodically elected to serve as a supervising force over the CC decisions. In practice, though, this is just a trick to allow the CC high-level officials to do whatever they want. First, they persuade the advisor about something (and he obviously believes to the "experts") and then any argument becomes impossible. Arguing with the advisor on the technical terms is pointless (he might be great in his scientific field, but not specialist in the computer/network/security stuff, of course). On the other hand, any discussion with the "experts" ends immediately with "This is the official policy. Talk to the advisor". The loop. And don't think I gave up easily. I fought hard. Actually, I've been fighting hard since the very first days of plasma-gate's existence. Back in 1994, it took 3 (three) months of endless discussions culminated in a meeting with the dean to be allowed to connect a Linux server to the LAN. You can't believe which security disasters were foreseen by the "experts" then. In comparison, the ten plagues of Egypt would be a joy, according to them. Some of the "experts" are still on board. BTW, by that time, no firewall existed at WIS, all home directories were NFS-exported RW to the whole world, passwords were sent in the clear text over the wire, the public FTP server was full of pirated warez, and viruses were flourishing in wild on the users' PCs. So much about the security awareness. Since then, there have been countless attempts to shut plasma-gate down, either completely or just some services. In parallel to throwing some handfuls of sand in the wheels, the "experts" were busy improving other aspects of the institute's security. For example, the warez FTP server was shut down. You see, when it comes to pressing the power button, the reaction is swift (just a couple of years). MX is something different. BTW, Weizmann remains a noticeable exception among the MACHBA institutions that doesn't provide a single FTP mirror even internally, let alone serving the community. In short: I'm tired. Struggling with hardware or software issues is challenging. Struggling with stupidity and ignorance isn't. Regards, Evgeny = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Hebrew Keyboard in Knoppix
On Wed, 1 Oct 2003, shlomi wrote:
>
> Tzafrir Cohen wrote:
> > unlike the text of cheatsheet.txt (and what you read when you press F2)
> > there is a boot-time option 'lang=he' which tries to do something sensible
> > for Hebrew. However the keyboard settings there are:
> >
> > KEYBOARD="il"
> > XKEYBOARD="il"
> > KDEKEYBOARD="il"
> >
>
> Hi,
>
> It seems that setting XKEYBOARD to "il" is sensible only when you are using X
> to switch ketboards and not using th KDE keyboard app.
Actually: it is not exactly in effect there. However it may have been in
effect had there been a way to pass other parameters to setkxbmap .
> switching keyboards using X is done by adding a line :
> Option "XkbOptions" "grp:switch,grp:alt_shift_toggle"
> to your XF86Config-4 file.
Or, equivalently, by running setxkbmap in the beginning of the session
with the relevant parameters.
Editing XF86Config tends to be more difficult. I'm not sure how it is on
knoppix, though.
> however, if you are using this method, you shouldn't be using the KDE way
> anymore and should use apps like kkbswitch.
>
Which are not on the CD, unfortunetly. I fully agree, though, that kxkb
must be rewriten to exploit the keyboard layouts of XFree 4.3 if possible.
("rewritten", not "extended").
> > I'm not sure exactly what KDEKEYBOARD is for. It is used for something
> > in the initialization of KDE. I think it should have a value of the
> > sort of "us,il" or "us il", but I haven't yet checked it.
> >
> > XKEYBOARD should definetly have the value "us,il". It seems to only
> > have effect on non-kde desktops, though.
>
Also see my other message
> i'm not sure about that, but i think it doesn't matter when you are using the
> KDE way to switch layouts.
>
> The kde app in knoppix3.3 have some other issues, like the annoying problem
> ctrl+alt+k that can switch only to hebrew but not back. some ppl seem to have
> solved it by defining an alternate key of ctrl+alt+LAMED which sound like a
> silly solusion to me and does not work for all versions.
Why doesn't it work? Are there more than two layouts?
>
> > Also: any idea why the default locales package that comes with knoppix
> > does not create he_IL.UTF-8 (it does create a he_IL of charset
> > ISO-8859-8 , and quite a few UTF-8 locales). /etc/locales.gen seems to
> > be auto-generated.
>
> is it ? i thought it was generated only by the package itself like:
> #dpkg-reconfigure locales
Maybe this was it and I should simply file a bug in knoppix...
--
Tzafrir Cohen
mailto:[EMAIL PROTECTED]
http://www.technion.ac.il/~tzafrir
To unsubscribe, send
mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
Re: Hebrew Keyboard in Knoppix
One correction: On Wed, 1 Oct 2003, Tzafrir Cohen wrote: > unlike the text of cheatsheet.txt (and what you read when you press F2) > there is a boot-time option 'lang=he' which tries to do something sensible > for Hebrew. However the keyboard settings there are: > > KEYBOARD="il" > XKEYBOARD="il" > KDEKEYBOARD="il" > > (Originally in /etc/rcS.d/S00knoppix-autoconfig , which puts them in > the file /etc/sysconfig/keyboard (and yes: I realise this should be > /etc/defaults)) > > I'm not sure exactly what KDEKEYBOARD is for. It is used for something > in the initialization of KDE. I think it should have a value of the > sort of "us,il" or "us il", but I haven't yet checked it. After looking further here it seems that the value of KDEKEYBOARD and KDEKEYBOARDS is used by /etc/X11/Xsession.d/45xsession to write the keymaps for kde (each time you start X. BTW: if you kill X with ctrl-alt-Backspace knoppix won't shut down. You can also always run a second X server) So the value of "il" for KDEKEYBOARD and "en,fr,de" for KDEKEYBOARDS" will leave you covered. Though I figure that others would have selected a saner value for KDEKEYBOARDS (maybe make the English the default, and maybe use only Hebrew-English). > > XKEYBOARD should definetly have the value "us,il". It seems to only > have effect on non-kde desktops, though. > can be overriden by the lilo parameter "xkeyboard". But it has some side-effects, IIRC > KEYBOARD affects the console keyboard. "il" seems safe, but somewhat > unintuitive. "il-heb" may be better. See > >/usr/share/keymaps/i386/qwerty/il.gz >/usr/share/keymaps/i386/qwerty/il-heb.gz > > (Also on debian). > Again, there is a lilo parameter here: "keyboard", but it sets the value for "xkeyboard" as well. -- Tzafrir Cohen mailto:[EMAIL PROTECTED] http://www.technion.ac.il/~tzafrir = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
RE: Mozilla and internet banking
FWIW, Bank Discount supports IE and IE only, and they wrote to me that they have no intention of supporting anything that didn't have a significant user demand. This was what they replied to my query a few months ago. Their position may have changed in the meanwhile (but I doubt it). Rony = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
iglo checksums for RH9 ??
Hi,Does anyone know why some ftp sites(uselinux.org/pub/redhat/9/en/iso/i386/MD5SUM and many others) have ashrike-SRPMS-disc1.iso MD5 checksum of34048ce4cd069b624f6e021ba63ecde5while -disk1 from mirror.israel.net and iglu.org.il has a md5 checksum of400c7fb292c73b793fb722532abd09adthe checksums for -disk2 and -disk3 are the samesize and dates are the same. (actually on israel.net the date is 4/3/03)thanx.D.
Re: Mozilla and internet banking
On Thursday 02 October 2003 01:24, Boaz Rymland wrote: > As already cliamed, bank hapoalim indeed supports mozilla. I can add > that this support is not "by chance". Up to some point in the past (not > too long ago, but don't have exact date) their site wasn't (fully?) > supported. At some point, they intentially started supporting > mozilla/netscape browsers, as it is today. > There was even some notification for mozilla/netscape users specifying > the fact that "the site works specifically with mozilla/netscape > browsers" (maybe it exists there, somewhere [sorry, no link here]). > > In short - Bank Hapoalim support for mozilla/netscape is good, intended > and I hope - will long last. My Father is using latest FireBird with Bank Hapoalim's site, and while it is usable, its far from perfect - lots of hebrew directionality issues, and some toolbars do not work. -- Oded ::.. USER, n.: The word computer professionals use when they mean "idiot." -- Dave Barry, "Claw Your Way to the Top" = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Mozilla and internet banking
On Thursday 02 October 2003 01:24, Boaz Rymland wrote: > As already cliamed, bank hapoalim indeed supports mozilla. I can add > that this support is not "by chance". Up to some point in the past (not > too long ago, but don't have exact date) their site wasn't (fully?) > supported. At some point, they intentially started supporting > mozilla/netscape browsers, as it is today. The support is not full. Their "mail inbox" system doesn't work with Mozilla ( for me at least ). > There was even some notification for mozilla/netscape users specifying > the fact that "the site works specifically with mozilla/netscape > browsers" (maybe it exists there, somewhere [sorry, no link here]). > > In short - Bank Hapoalim support for mozilla/netscape is good, intended > and I hope - will long last. Konqueror, OTOH, worked with this site for very short period of time. And the problem is in Konqueror. > > Boaz. > And if I'm already writing - which Linux browser works with Isracard service site? Neither Mozilla nor Konqueror nor Opera work for me. -- Regards, Alex Chudnovsky e-mail : [EMAIL PROTECTED] ICQ : 35559910 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
