Re: a VNC client suitable to monitor 15 desktops in 1 screen, automatic reconnect. Exists?

2010-02-17 Thread Mark Shroyer
On 2/17/2010 11:21 AM, Andres Salazar wrote:
 Is there a VNC client out there that can permit me to run it 15 times
 simultaneously and scale them smaller so that I can view 15 little
 remote screens (at the same time) in my one big monitor?
 
 Also, is there a way to make it so if the PC is rebooted the client
 automatically reconnects ?
 
 The goal of this is to have one big monitor to view in realtime what
 people are doing in their PCs. Without interaction from me with the
 mouse/keyboard.. all I need to do is watch.
 
 A plus if this VNC client is compatible with MacOS/windows

That's pretty much what iTalc does in a nutshell:

http://italc.sourceforge.net/

Runs on Linux and Windows, but not on OS X.

-- 
Mark Shroyer
http://markshroyer.com/contact/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4b7c68fa.1080...@markshroyer.com



Re: sudo vs. su (was Re: new to list, new to debian, new to linux)

2009-05-23 Thread Mark Shroyer
On Fri, May 22, 2009 at 09:45:05PM +, Glyn Astill wrote:
  'ALL=(ALL) ALL' is no more dangerous than having the 'su' binary
  available.
  
  The NOPASSWD option is not the default.
 
 No. For su they'd have to enter the root password, for sudo su they'd
 just have to enter the password of the current user and they are root.

And what I'm saying is that in the most likely attack scenario for this
type of user--remote exploit of an essentially single-user system
through an application running under a regular account, such as a web
browser or a word processor--it isn't magically harder for an attacker
to obtain the root password than it would be to obtain the regular
user's password.  Both would typically have to be obtained through the
same process.

If you're worried about brute-force attacks on a user's password, that's
one thing.  But most basic desktop systems, such as the one the OP was
describing, are not running SSH or other remote-login services.  With
the type of attack vector this type of user should be concerned about,
two passwords does not equal twice the security.

-- 
Mark Shroyer
http://markshroyer.com/contact/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Xorg starts only manually

2009-05-22 Thread Mark Shroyer
On Fri, May 22, 2009 at 10:00:25AM +0300, Luc Saffre wrote:
 after upgrading my laptop to Lenny, the Gnome desktop no longer starts
 automatically when I boot up. It starts correctly if i then log in at
 the console and run `startx`. I tried `dpkg-reconfigure xserver-xorg`
 without change. I didn't see anything anormal in /var/log/Xorg.0.log.
 Any suggestions about the possible reason and what I can try next?

Is the file /etc/init.d/gdm present on your system?  If so, try running

sudo /etc/init.d/gdm start

when you log in to bring up the login screen.  If this works, then run

sudo update-rc.d gdm defaults

to make sure that the runlevel symbolic links are installed.  On the
other hand, if the GDM init script is missing for some reason, try
installing the package gdm.

-- 
Mark Shroyer
http://markshroyer.com/contact/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



sudo vs. su (was Re: new to list, new to debian, new to linux)

2009-05-22 Thread Mark Shroyer
On Fri, May 22, 2009 at 06:56:18AM -0700, Thorny wrote:
 You've just advised an obvious newbie (stated in post) on how to make his
 system insecure. Giving ALL=(All) ALL rights to a normal user is pretty
 much the same as running as root and is not recommended on a Debian
 system. It is what was asked for, sort of, but he may not have have
 realized the significance.

I have to call shenanigans on this.  What's the threat model, exactly,
where it is safer to have a regular user su'ing to root than to have him
use sudo to the same effect?

Suppose that an attacker has managed to execute code under a user's
account (say, through a web browser exploit), and wants to use this as a
stepping stone to root.  If the targeted account is in /etc/sudoers with
ALL=(ALL) ALL (but *not* NOPASSWD, obviously), then the attacker still
needs to capture the user's password before he can escalate privileges
through sudo.

If the targeted user uses su instead of sudo (and gksu instead of
gksudo), the situation is no better and no worse: if the attacker can
get code to run under the user's account, then he can attempt to log the
user's keystrokes until he obtains the root password.

It *would* be safer to use neither su nor sudo, and only have root log
in on a separate, secure console, thereby eliminating the possibility of
password sniffing from a compromised regular account.  However, few
desktop Linux users actually run their computers this way.

-- 
Mark Shroyer
http://markshroyer.com/contact/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Recommendations for Mini PCIe 802.11b/g card?

2009-05-21 Thread Mark Shroyer
My laptop's Intel 3945BG card won't connect to half of the APs that I
want it to--and even when it does work, I can only squeeze about 9 Mbps
out of it in 802.11g mode.  So I'd like to replace it with something
that works better with Debian Lenny.  Can anyone recommend a really
rock-solid 802.11b/g Mini PCI Express card that has an equally solid
driver in Lenny?

(I've read the compatibility lists, but there's nothing like first-hand
experience to say what works and what doesn't.  E.g., on paper my 3945BG
should have been fine, but in practice it turned out to be problematic.)

My wish list:

  * 802.11b/g support

  * WPA2

  * Compatibility with Lenny's 2.6.26 kernel

  * Non-wholesale availability in the United States

  * 802.11n support a plus, but not required

Thanks for any advice!

-- 
Mark Shroyer
http://markshroyer.com/contact/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: What hardware to use for Debian Firewall/Gateway or server?

2009-05-21 Thread Mark Shroyer
On Thu, May 21, 2009 at 09:31:14PM +0200, Csanyi Pal wrote:
 I have at my home a small network:
 firewall/gateway: Pentium II Class PC box with 64 MB RAM, 5,1 GB HDD
 server  : Pentium IV Class PC box with  2 GB RAM, 60 GB HDD
 desktop : Pentium IV Class PC box with  2 GB RAM, 2 * 320 GB HDD
 
 On all these PC boxes run Debian GNU/Linux:
 firewall/gateway: Etch
 Server  : Etch
 desktop : Lenny
 
 The firewall has a buggy hardware and can't to install on it Lenny so
 I decide to buy a new hardware for firewall/gateway.
 
 I think about that that I could to use the server box as a
 firewall/gateway and the new PC box for the server..
 
 What is the recommended new hardware for firewall/gateway or for a
 web, mail, file  printer server at a small home network? 
 
 Any advices will be appreciated!

As for replacing the gateway itself: mine runs OpenBSD rather than
Linux, but my home router is a PC Engines Alix 2d3:

http://pcengines.ch/alix2d3.htm

The downside to this kind of embedded system, versus standard PCs like
you're currently using, is that you can't simply stick in a CD and boot
up the Debian installer...  I installed OpenBSD on mine by running
VMware Workstation on my laptop with the board's CF card plugged in and
configured as a physical volume, then transplanting the card to the Alix
board once everything was up and running.  Installing using the serial
console and PXE boot is another option, but this route entails setting
up a boot server first.  Either way, there's a bit more work involved
than with a repurposed PC.

Also, the Alix board doesn't ship with a CMOS clock battery holder
installed, so you'll need to solder one in yourself if you want the
board to keep time while unplugged.  But the solder points are clearly
marked on the board, and battery holders are cheap.

That said: what all this extra effort gets you is an inexpensive, small,
silent and cool-running box with three Ethernet adapters plenty of
horsepower for running a firewall and VPN.  And there are no moving
parts (although I imagine my CF card will die eventually, since I have
it mounted read-write).  Also, the while thing only consumes about 5W of
power.

Soekris Engineering is another popular manufacturer of similar
general-purpose embedded PCs suitable as small gateways, and there are
other companies too.  And you'd be hard-pressed to find one that
*doesn't* work with Linux :)

-- 
Mark Shroyer
http://markshroyer.com/contact/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: cups virtual printer for PDF and print to file path

2009-05-06 Thread Mark Shroyer
On Tue, May 05, 2009 at 09:47:12PM -0400, H.S. wrote:
 Celejar wrote:
  My print to file box (Sid, IW 3.0.9) offers me a choice of ps or pdf.
 
 Mine doesn't. I too have the same version (3.0.9-1). I wonder if I am
 missing some other package which provides this functinality in iceweasel.

As far as I know, the save to PDF functionality provided in Ubuntu
(and I assume Sid is the same way) is through gtkprint, not CUPS-PDF.
The version of GTK in Lenny does not provide this, I don't know about
Squeeze.

CUPS-PDF, on the other hand, can't pop up a dialog box for the user,
since it's just a CUPS backend.  Hence the need to set it up in advance
to save to a given directory.  However, the CUPS-PDF method has the
advantage of working with all applications; not all programs use
gtkprint.

-- 
Mark Shroyer
http://markshroyer.com/contact/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: cups virtual printer for PDF and print to file path

2009-05-06 Thread Mark Shroyer
On Wed, May 06, 2009 at 09:35:44PM -0400, H.S. wrote:
 Mark Shroyer wrote:
   As far as I know, the save to PDF functionality provided in Ubuntu
  (and I assume Sid is the same way) is through gtkprint, not CUPS-PDF.
  The version of GTK in Lenny does not provide this, I don't know about
  Squeeze.
 
 hmm... apt-cache searching gtkprint in Testing and in Unstable does not
 give me anything.

Sorry for being unclear: it would have been more precise for me to refer
to gtkprint as GtkPrintOperation, i.e. the GTK+ printing API.  It isn't
a separate package in Debian, it's part of libgtk2.0.

-- 
Mark Shroyer
http://markshroyer.com/contact/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: stopwatch/worktime program?

2009-05-03 Thread Mark Shroyer
On Sun, May 03, 2009 at 03:48:18PM +0300, Micha Feigin wrote:
 I'm looking for some program to follow my work time on different projects,
 preferably something that can plug into the xfce, or if not the gnome panel.
 
 I'm working on different projects for different people and I need to report
 work hours and it's a bit hard for me to follow the times by writing them down
 as I tend to work on and off for short times during the day. I want something
 like a stopwatch, preferable that would be able to keep a few of them around.
 If they can later give me an history, it's even better.

If you don't mind a command line solution, there's timeclock:

http://zwiki.org/repos/ledger/doc/ledger/Using-timeclock-to-record-billable-time.html

This is actually an auxiliary part of Jason Wiegley's ledger CLI
accounting system; it outputs a plaintext log that can be used as input
for ledger itself.  Emacs and Vim integration is provided.

Ledger is packaged in Testing (apt-get install ledger).  If like me
you're running Lenny, you can build it from source after downloading
here:

http://github.com/jwiegley/ledger/

There is no xfce or gnome panel integration that I am aware of, however.

-- 
Mark Shroyer
http://markshroyer.com/contact/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org