Re: Help kill the Surveillance State Bill

2005-05-10 Thread Bill Freeman
Fred writes:
  Keep in mind that your microwave oven can be your best friend in the
  defense against RFIDs.

Or if you want it to work sometimes, like when/if it becomes a
requirement for some transactions, and you just want to prevent remote
readings, keep it in an aluminum foil envelope (similar to the
magnetic stripe protection envelope that comes with your ATM card).

   And, even if it's only a magstrip, I don't want the clerks at the
   liquor store, or the store owners to have access to my identity that
   easily.

Don't let them scan it.  If they insist, shop elsewhere.  (I
don't shop at the Stop and Shop family of grocers any more, since you
have to use their card to get there best price.  I still occasionally
shop at CVS, because the price difference is tiny, and is only a store
credit that comes significantly after the purchase time.)

  And a deguasser is your best friend there. However, none of these would
  be effective against bar codes.

What we need is a plastic cover that is clear in visible light
but opaque or reflective or stippled in the IR.

  I found this out the hard way once when I crossed into Canada, and the
  Canadian customs ran my DL and pulled up a 5-year-old case of
  disorderly conduct in which I was found not-guilty. Didn't matter.
  They harassed me about it anyway.

And they could do that with just your driver's license number,
or the number on any other document that they accept as ID.  Border
control is actually a reason for record aggregation that I support.
The problems here are that: 1. That they felt that they should hassle
you over a charge that resulted in a not guilty verdict; and 2. that
not guilty cases aren't expunged from the level of record that they
can access without first bringing a charge against you.

Basically I agree that we effectively already have national
and even international ID.  Fighting the provision under discussion of
the pending legislation is just spitting into the wind.  You cannot
prevent organizations, and especially government, from keeping track
of you and much of what you do.  Having a national ID card probably
makes it harder to delude yourself that you have some degree of
anonymity, and thus may actually be a good thing.  At least we don't
yet have finger print scanners on public restroom doors.

Bill
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Help kill the Surveillance State Bill

2005-05-10 Thread Kevin D. Clark

Bill Freeman [EMAIL PROTECTED] writes:

 You cannot
 prevent organizations, and especially government, from keeping track
 of you and much of what you do.

Last time I checked the US government got its power from the people.
The people supply it with taxes and votes.  I find the assertion that
citizens can't influence the government to be flawed.

Regards,

--kevin
-- 
GnuPG ID: B280F24E And the madness of the crowd
alumni.unh.edu!kdc Is an epileptic fit
   -- Tom Waits
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Free routers

2005-05-10 Thread Travis Roy
I got some routers for free. Most I sold but I had two left if anybody wants 
them.

Cisco 2503

The Cisco 2500 Series of ethernet and token ring routers provide a wide range
of branch office solutions including integrated router/hub and router/access
server models. Each router chassis can accommodate up to three WAN modules -
two synchronous serial and one ISDN Dynamic random-access memory (DRAM) for
main system memory and shared memory Nonvolatile random-access memory (NVRAM)
for storing configuration information Flash memory for running Cisco IOS
software EIA/TIA-232 console port for connecting a console terminal
EIA/TIA-232 auxiliary port for connecting a terminal or modem

You gotta pick them up.. Downtown Manchester.
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Help kill the Surveillance State Bill

2005-05-10 Thread Paul Lussier
[EMAIL PROTECTED] (Kevin D. Clark) writes:

 Bill Freeman [EMAIL PROTECTED] writes:

 You cannot
 prevent organizations, and especially government, from keeping track
 of you and much of what you do.

 Last time I checked the US government got its power from the people.
 The people supply it with taxes and votes.  I find the assertion that
 citizens can't influence the government to be flawed.

And that's my point here.  I too, concede we already have a national
ID card in the form of a driver's license.  However, that doesn't mean
that a) our legislators should go ahead and begin overriding State's
Rights by creating a redundant system which is actually more
problematic than what is already in place, or b) that they should ruin
an otherwise decent bill with hogwash like this.

I find it more disturbing that this bill is essentially sailing
through the Senate with neither a debate on the floor, nor discussion
in any committee!  This is just another example of our gov't running
amok, and the law of unintended consequences resulting from this bill
is likely to be far more painful than people realize.  And just
sitting there doing nothing, and saying, well, we already have
National ID cards, so why bother? IMO, is nuts.  Just because there
is already a defacto standard doesn't mean we should further
institutionalize and accept an actual standard which is worse than the
default!  That's like saying, Well, Microsoft already has a moslty
usable mail client, so we should just abandon the develop of
(thunderbird, evolution, gnus, mutt, pine, elm, etc.)!.

-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: [OT] Help kill the Surveillance State Bill

2005-05-10 Thread Michael ODonnell



 ( please note and preserve the [OT] )


I recently read about some guy who built himself
a wallet (not really small enough to count as
wallet-sized, more like VHS cassette-sized) that
has a card reader built in and will not open until a
card is swiped, so when somebody asks him for his ID
they can read the visible text portion of his ID card
(where it's stored inside the wallet) though a small
window but if they want to get a swipe from his card
they first have to swipe theirs...

I can't remember where I read this (some blog) but
it should be possible to dogpile for it.
 
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Help kill the Surveillance State Bill

2005-05-10 Thread Fred
On Tue, 2005-05-10 at 09:15 -0400, Bill Freeman wrote:
 Fred writes:
   Keep in mind that your microwave oven can be your best friend in the
   defense against RFIDs.
 
   Or if you want it to work sometimes, like when/if it becomes a
 requirement for some transactions, and you just want to prevent remote
 readings, keep it in an aluminum foil envelope (similar to the
 magnetic stripe protection envelope that comes with your ATM card).

If RFIDs ever become a *requirement* for a transaction, there *won't be*
a transaction with me, period.

Even credit card merchants have the option of typing in the number if
the mag stripe fails.

...
   And a deguasser is your best friend there. However, none of these would
   be effective against bar codes.
 
   What we need is a plastic cover that is clear in visible light
 but opaque or reflective or stippled in the IR.

Nevermind the plastic cover. A felt-tip magic marker will do the trick
just nicely.

   I found this out the hard way once when I crossed into Canada, and the
   Canadian customs ran my DL and pulled up a 5-year-old case of
   disorderly conduct in which I was found not-guilty. Didn't matter.
   They harassed me about it anyway.
 
   And they could do that with just your driver's license number,
 or the number on any other document that they accept as ID.

I don't think anything is tied to my passport number, since it was not
involved in the incident -- but the DL was. The databases are not THAT
good -- yet. Give'em time though.

   Border
 control is actually a reason for record aggregation that I support.

Until it's your turn to be harassed, falsely accused of something you
didn't do, etc. Then your life will get *real interesting*. 

Errors also typically occurs in the aggregation, and getting them fixed
is, well, an exercise in near futility.

I also experienced this too with regards some benefits my autistic son
supposedly had 5 years back, but no more. It took years to get that crap
out of the State's aggregate database -- much time, money, aggravation,
and bad attitudes from the civil servants who refused to serve. The
health insurance company also refused to deal *because* it was a 5-year-
old case and all the records had been archived. It was a nightmare.

Think twice, thrice, and more before being sure you are for record
aggregation. The truth is, I think, that you have an ideal in your head
that, unfortunately, does not reflect reality. Sorry to be hard on this,
but I've seen the worst of it, and don't see how any benefits that can
come from it can outweigh all the concomitant problems that are next to
impossible to fix and will eat up time, fees, legal action, and more.

 The problems here are that: 1. That they felt that they should hassle
 you over a charge that resulted in a not guilty verdict; and 2. that
 not guilty cases aren't expunged from the level of record that they
 can access without first bringing a charge against you.

And that, my friend, is just the tip of the iceberg. This is par for the
course, not an unusual occurrence. 

It has been my long-standing maxim that government cannot not eliminate
misery, but just move it from one place to another, creating more along
the way. Once you think about it for a moment, you'll see it's true.

   Basically I agree that we effectively already have national
 and even international ID.  Fighting the provision under discussion of
 the pending legislation is just spitting into the wind.  You cannot
 prevent organizations, and especially government, from keeping track
 of you and much of what you do.

Sure you can. We have ways, and then we have ways. It's just that life
becomes a lot less convenient, but it can be done. For example, the
very flaws in their aggregation methods can be exploited to make
yourself invisible, and this can be done legally.

We may not be able to stop them from trying, though.

   Having a national ID card probably
 makes it harder to delude yourself that you have some degree of
 anonymity, and thus may actually be a good thing.

Until, of course, you get wrongfully accused or suffer some other
travesty of justice and get caught up in the system. Then it's a very
bad thing.

Have we forgotten our history so quickly? How did the Germans keep track
of the Jews during the Holocaust, for example? Can you say, IBM, boys
and girls?

And with the fascist ways the Bush Administration has been carrying on
lately, are you *sure* it's a good thing? No one that had anything pro-
Kerry on their persons, even in their wallets, or bumper stickers on
their cars even, were allowed into the Republican convention. Hello? Did
I miss something? Has anyone been paying attention? Guess not.

   At least we don't
 yet have finger print scanners on public restroom doors.

Give'em time.

Consider this -- cameras in public places, connected to face recognition
software, that can track your every move -- everyone's every move. Have
you seen Minority Report? I suggest you 

Re: Help kill the Surveillance State Bill

2005-05-10 Thread Ben Scott
Hey people!

  Not too long ago we had a rather prolonged discussion about whether
political stuff like this appropriate for this forum.  While a formal
vote was not taken, informally, a clear majority voiced the opinion
that this stuff is better discussed elsewhere.  Someone even went so
far as to create a separate forum where this kind of stuff was
explicitly allowed.

  I find it rather rude and irresponsible that a few people don't
appear to care, and freely hijack this forum for their own purposes. 
Grr.

  Shall we call for a formal vote and appoint some topic-cops, or can
we act like adults and take it off-list?
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


RE: [OT] Help kill the Surveillance State Bill

2005-05-10 Thread Brian
Yeah, that wearable computer guy in Seattle or Toronto I think.

Interesting idea, but pointless.  If you go to buy a 1/5 of Jack Daniels
(for example) you have to show ID.  YOU are the one initiating a sequence of
events that you know will setoff a request for your ID.  It is not sane to
require a store clerk, for instance, to show you their ID in order for them
to see yours.  This basic scenario is true in several (maybe even most?)
cases where you would be asked to present ID.

If some random person comes along and requests to see your ID, then it would
be normal for you to want to identify them first and in return.  But this is
really a solution looking for a problems in most cases. 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Michael ODonnell
 Sent: Tuesday, May 10, 2005 10:32 AM
 To: gnhlug-discuss@mail.gnhlug.org
 Subject: Re: [OT] Help kill the Surveillance State Bill 
 
 
 
 
  ( please note and preserve the [OT] )
 
 
 I recently read about some guy who built himself a wallet 
 (not really small enough to count as wallet-sized, more like 
 VHS cassette-sized) that has a card reader built in and will 
 not open until a card is swiped, so when somebody asks him 
 for his ID they can read the visible text portion of his ID 
 card (where it's stored inside the wallet) though a small 
 window but if they want to get a swipe from his card they 
 first have to swipe theirs...
 
 I can't remember where I read this (some blog) but it should 
 be possible to dogpile for it.
  
 ___
 gnhlug-discuss mailing list
 gnhlug-discuss@mail.gnhlug.org
 http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
 

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: [OT] Help kill the Surveillance State Bill

2005-05-10 Thread Paul Lussier
Michael ODonnell [EMAIL PROTECTED] writes:

 I recently read about some guy who built himself
 a wallet (not really small enough to count as
 wallet-sized, more like VHS cassette-sized) that
 has a card reader built in and will not open until a
 card is swiped, so when somebody asks him for his ID
 they can read the visible text portion of his ID card
 (where it's stored inside the wallet) though a small
 window but if they want to get a swipe from his card
 they first have to swipe theirs...

 I can't remember where I read this (some blog) but
 it should be possible to dogpile for it.

I recently read the same article.  I found it rather amusing.  Though,
if it were implanted with RFID, you'd have to embed a jammer in there
too :(

-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


RE: Environmental Monitoring

2005-05-10 Thread Brian
 I have.  I rolled my own.

http://www.karas.net/homeautomation/temp_mon_front.jpg
http://www.karas.net/homeautomation/temp_mon_pcb.jpg

Basic Stamp, SitePlayer, Dallas 1-wire sensors, some bits of code and you
have a monitor that can keep track of a couple of dozen temps that has a
serial port and a webserver.

You could go on the cheap with just a Basic Stamp 2, no site player, no LCD,
and LM34's instead of the 1-wire sensors and build something for probably
far less than $100 overall that is monitored via serial port.

Humidity sensors are a little more costly and difficult to find, but
Parallax has some on their site with code samples. 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of mike ledoux
 Sent: Tuesday, May 10, 2005 11:03 AM
 To: gnhlug-discuss@mail.gnhlug.org
 Subject: Environmental Monitoring
 
 I need to devise a system to monitor (at least) temperature 
 and humidity at various points in my machine room.  Budget 
 for this project is non-existant.  My hope is that devices 
 exist that I can attach to key servers (all Linux, mostly 
 RHEL) to monitor their immediate environment, which would be 
 'good enough' for my purposes.
 
 Have any of you done anything like this?  Any 
 recommendations?  My quick google searches have only found 
 solutions in the multiple thousand range, but which do much 
 more than I need.
 
 Thanks,
 
 -- 
 [EMAIL PROTECTED]  OpenPGP KeyID 0x57C3430B
 Holder of Past Knowledge   CS, O-
 Put your wasted CPU cycles to use: 
 http://www.distributed.net/ Profanity is the inevitable 
 linguistic crutch of the inarticulate  motherfucker.  Bruce 
 Sherrod ___
 gnhlug-discuss mailing list
 gnhlug-discuss@mail.gnhlug.org
 http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
 

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Routers gone

2005-05-10 Thread Travis Roy
They are claimed
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Help kill the Surveillance State Bill

2005-05-10 Thread Bill Freeman
Fred writes:
  On Tue, 2005-05-10 at 09:15 -0400, Bill Freeman wrote:
   Fred writes:
...
  If RFIDs ever become a *requirement* for a transaction, there *won't be*
  a transaction with me, period.
  
  Even credit card merchants have the option of typing in the number if
  the mag stripe fails.

Yep.  If you make a credit card purchase then you're already
screwed.  The thing to fear is ID required to make a cash purchase.

  What we need is a plastic cover that is clear in visible light
   but opaque or reflective or stippled in the IR.
  
  Nevermind the plastic cover. A felt-tip magic marker will do the trick
  just nicely.

Except that this is obvious.  A bar code that looks good but
won't scan is probably blamed on the scanner, and exceeds the clerk's
too much bother level without getting him annoyed at you and putting
your bread under your canned goods.

...

 Border
   control is actually a reason for record aggregation that I support.
  
  Until it's your turn to be harassed, falsely accused of something you
  didn't do, etc. Then your life will get *real interesting*. 

Everything has trade offs.

  Errors also typically occurs in the aggregation, and getting them fixed
  is, well, an exercise in near futility.

And there is the problem, rather than the existance of some particular
ID system.  The political will of the few who understand the issue is
inadequate to actually get these problems fixed.  But what clout there
is would be more effectively spent in support of legislation limiting
what information could be collected, what can be retained, and to what
use it can be put, rather than wasted attacking one particular ID
system.

...

  Think twice, thrice, and more before being sure you are for record
  aggregation. The truth is, I think, that you have an ideal in your head
  that, unfortunately, does not reflect reality.

I haven't read a posting yet in this thread that can't accept
this description.  More directly, from my point of view, this is the
pot calling the kettle black.

...

  Have we forgotten our history so quickly? How did the Germans keep track
  of the Jews during the Holocaust, for example? Can you say, IBM, boys
  and girls?

Yes, and you can kill someone with a scalpel, so we should make surgery
illegal.

  And with the fascist ways the Bush Administration has been carrying on
  lately, are you *sure* it's a good thing? No one that had anything pro-
  Kerry on their persons, even in their wallets, or bumper stickers on
  their cars even, were allowed into the Republican convention. Hello? Did
  I miss something? Has anyone been paying attention? Guess not.

That works for me.  It's not as though conservatives are welcomed at
liberal venues.  National media presentments notwithstanding, I think
that the fascist label applies at least as well to Democrats as it
does to Republicans.

...

  Consider this -- cameras in public places, connected to face recognition
  software, that can track your every move -- everyone's every move. Have
  you seen Minority Report? I suggest you do if you haven't. There
  already are companies claiming they can pick out faces of convicts out
  of a crowd, say, at a ball park, and this technology has already been
  tested under those conditions. I think they had high false positive
  rates, but thats the whole problem. Many innocents can be harassed due
  to no fault of their own -- just because the *machine* mistook their
  face for a known felon. 

You make my original point for me.  A national ID card can only make
us more vigilant and them more sloppy.

  Witness what is already in place -- Airport Insecurity. On a flight I
  took recently, I and my business partner were flagged and have all of
  our belongings searched with a glove. I had to watch total strangers
  poke and prod my underwear in full sight of everyone. And yet I was
  thinking the whole time -- just for fun, to keep myself amused -- ways
  around their infective over-security that a real terrorist with 2
  neurons to rub together can get around. 

...

You'll have to stop packing the embarrassing types of underwear then.
I've been inspected myself.  Other than the delay, I find it no big
deal.  But I still don't see how an ID card makes this any worse.

...

  And to be honest, I would not want  truly *effective* security in place.

Nor will you ever see it.  It's not about security.  It's about the
general public's perception of security.  Sell tickets.  Buy votes.
What you will see is something more invasive and less secure than we
have now.  Because news people need to sell advertising.

...

Bill
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Routers gone

2005-05-10 Thread Chris
Hi Travis...
your email server is about 5hrs ahead.
Travis Roy wrote:
They are claimed
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss

--
IBA #15631
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Environmental Monitoring

2005-05-10 Thread Bill McGonigle
On May 10, 2005, at 11:03, mike ledoux wrote:
Have any of you done anything like this?  Any recommendations?  My
quick google searches have only found solutions in the multiple
thousand range, but which do much more than I need.
I've been looking at this recently for a NEMA box I have in a swamp for  
my neighborhood network's ISP connection.  I'd like to make sure the  
heater and fans are working as expected (and page me if the network  
gear is about to melt).

My current plan is to solder a serial port into a WRT54G and hook up a  
COTS serial environment sensor which are cheap. Sveasoft Alchemy has  
SNMP which I'd like to hook into.  ~$100 if your time is free.  There  
are ~$250 units in Processor.com if you want to buy.

   
http://www.google.com/url?sa=Ustart=1q=http://www.rwhitby.net/ 
wrt54gs/serial.htmle=10053

I've been 'meaning to do it' for a couple months but my soldering  
skills top out with slightly larger components (probably I don't know  
what kind of tools to use to do it this precisely).

-Bill
-
Bill McGonigle, Owner   Work: 603.448.4440
BFC Computing, LLC  Home: 603.448.1668
[EMAIL PROTECTED]   Mobile: 603.252.2606
http://www.bfccomputing.com/Pager: 603.442.1833
AIM: wpmcgonigleSkype: bill_mcgonigle
For fastest support contact, please follow:
http://bfccomputing.com/support_contact.html
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Environmental Monitoring

2005-05-10 Thread Ben Scott
On 5/10/05, mike ledoux [EMAIL PROTECTED] wrote:
 Have any of you done anything like this?

  If you have any APC Smart-UPS units with open expansion slots, APC
sells a gadget that provides ambient environmental monitoring.  I
think it's called Measure-UPS.  I've seen them for a few hundred
dollars.  While that is more then the non-existent budget you
mentioned allows, it is cheaper then multiple thousands.

  If you're really after the bargin basement stuff, I've seen hacks
that attach a thermocouple to the parallel port using a simple
analog/digital converter IC.  I'm told such projects require nothing
more then some really cheap parts and some skill with a soldering
iron.  I don't know about humidity sensors, but it's possible the same
idea applies.

  Keep in mind that polling the parallel port to acquire data like
this tends to be rather CPU intensive, due to the ancient and
brain-damaged design of the parallel port, so if you go this route, I
would put it on a spare junkbox PC, not a busy server.

  This message originated in theory, where everything works.  Reality
may have other ideas.
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: [OT] Help kill the Surveillance State Bill

2005-05-10 Thread Bill Freeman
Paul Lussier writes:
  Michael ODonnell [EMAIL PROTECTED] writes:
...
   window but if they want to get a swipe from his card
   they first have to swipe theirs...

...

  I recently read the same article.  I found it rather amusing.  Though,
  if it were implanted with RFID, you'd have to embed a jammer in there
  too :(
 
You just need to short out a few turns of the antenna coil.
No active jammer is required.  The MicroChip web site has some good
stuff about RFID.

Bill

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


List topics (was Re: Help kill the Surveillance State Bill)

2005-05-10 Thread Derek Martin
On Tue, May 10, 2005 at 11:15:31AM -0400, Ben Scott wrote:
 Hey people!
 
   Not too long ago we had a rather prolonged discussion about whether
 political stuff like this appropriate for this forum.  While a formal
 vote was not taken, informally, a clear majority voiced the opinion
 that this stuff is better discussed elsewhere.  Someone even went so
 far as to create a separate forum where this kind of stuff was
 explicitly allowed.

If you really want it to stop, I think you're going to have to
moderate the list, plain and simple.  The reality is that the type of
people on this list are more likely than the average bear to care
about these kinds of issues, and whether any given person is personally 
interested in them or not, obviously a lot of people here are -- and
they're interested in discussing them with the people who are here.  I
think if you look, you'll find that even some of the people who
complain about this occasionally participate...

I'm not actually trying to argue that the list shouldn't ban political
discussions (though I wouldn't vote in favor of it).  I'm only trying
to point out the futility of it.  People are going to do it anyway,
and it's NOT about being rude, and it's NOT about being irresponsible.
It's about doing what comes natural in an environment that lends
itself to having exactly those kinds of discussions, and the passions
of the people who hang out here.  This particular topic was started
specifically by someone, but often they arise quite naturally from
something someone said in a post that was entirely acceptable to
everyone.  It's unavoidable.

Note that as with most political issues that surface on the list, this
topic IS at least tangentially related -- it's about the politics of
technology.  In our modern world, politics and technology are
inexorably intertwined...  Any and all OTHER discussions related to
technology, Linux-related or not, are happily endured; personally I
see no reason why these shouldn't be also, even if many people aren't
interested in them.  Many people aren't also interested in ham radio,
but that's ok here.  Linux advocacy is ok here too, but I don't see
how you can separate that from politics.  These discussions arise
very naturally on lists like this, and asking the type of people who
hang out here not to discuss them is like asking the average person
not to breathe, or at least like asking someone who's devoutly
religious not to talk about God.  It's just something you do...

Frankly it's a wonder to me that OT discussions don't happen here a
lot more often than they do...  I remember once when I was on the DHCP
mailing list, there was this endless thread about flying turbo props.
I found it annoying, but ultimately I had a lot of methods of just
ignoring it, so that's what I did.

Ben, you have been on mailing lists long enough to know that having
topic police rarely helps...  By the time someone speaks up, a dozen
people have already replied, and those replies breed more replies,
before anyone ever even sees the topic cop's complaints.  And even
after they see it, there will be those who feel passionately enough
about the topic (whatever it is) to feel compeled to respond to
something someone said anyway.

Moving topics off list also generally doesn't work.  Discussions
happen where they happen, and run their course where they started, or
not at all.

-- 
Derek D. Martinhttp://www.pizzashack.org/   GPG Key ID: 0xDFBEAD02
-=-=-=-=-
This message is posted from an invalid address.  Replying to it will result in
undeliverable mail.  Sorry for the inconvenience.  Thank the spammers.



pgpQnzFDphjUh.pgp
Description: PGP signature


Re: Rookit infections: AARRGH!

2005-05-10 Thread Paul Lussier
Neil Joseph Schelly [EMAIL PROTECTED] writes:

 Does anyone here have any additional insight to the best practice?  I know 
 it's considered best practice, but I never really found it to be logical and 
 most only give the reasoning that is a best practice.

Well, you could disallow root login using a password via ssh and which
mandates the use of keys.  This at least means that a brute force
dictionary attack against the root account won't work.

The other thing you can do is disallow direct access from the internet
to any system via ssh except a specific bastion host.  From this host,
you may log into other systems on the internet.

The bastion host should also be configured to use a *different*
authentication mechanism than the internal systems.  For example, auth
to the bastion host via ssh keys, and auth against internal systems
via Kerberos or LDAP, or something else (obviously ssh key passphrases
and kerberos or LDAP passwords should be different).

-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Help kill the Surveillance State Bill

2005-05-10 Thread Derek Martin
On Tue, May 10, 2005 at 09:38:29AM -0400, Kevin D. Clark wrote:
 Bill Freeman [EMAIL PROTECTED] writes:
 
  You cannot
  prevent organizations, and especially government, from keeping track
  of you and much of what you do.
 
 Last time I checked the US government got its power from the people.
 The people supply it with taxes and votes.  I find the assertion that
 citizens can't influence the government to be flawed.

You're not wrong, but I guess you're not right either.  The government
got its power from the people originally, but have seized more and
more power for themselves while more and more of us have gone to
sleep.  People are too busy fending for themselves and dealing with
the stresses of daily life to care about government, power, and
freedom.

Unfortunately, we have become a nation of sheep.  I think there aren't
enough of us who care to change that any time soon.

Yeah, and um, how 'bout them Linux?  =8^)

-- 
Derek D. Martinhttp://www.pizzashack.org/   GPG Key ID: 0xDFBEAD02
-=-=-=-=-
This message is posted from an invalid address.  Replying to it will result in
undeliverable mail.  Sorry for the inconvenience.  Thank the spammers.



pgpIhBZ1DtHQm.pgp
Description: PGP signature


Re: Rookit infections: AARRGH!

2005-05-10 Thread Kevin D. Clark

Fred [EMAIL PROTECTED] writes:

 I am suspicious that they are somehow breaking in through ssh -- 

  http://www.nytimes.com/2005/05/10/technology/10cisco.html
  
  Internet Attack Called Broad and Long Lasting by Investigators
  By JOHN MARKOFF and LOWELL BERGMAN
  
  Published: May 10, 2005
  
  []
  The crucial element in the password thefts that provided access
  at Cisco and elsewhere was the intruder's use of a corrupted version
  of a standard software program, SSH. The program is used in many
  computer research centers for a variety of tasks, ranging from
  administration of remote computers to data transfer over the Internet.
  [...]




Comment: I designed and implemented a network protocol in one of my
past jobs.  I found it useful to provide my SQA folks with a
bastardized version of the protocol stack, one that allowed them to
basically do everything possible to try to deceive/overrun a valid
protocol endpoint.  I slept well at night knowing that the SQA staff
had the tools to try to crash/overrun a protocol endpoint, but they
never could find a way to do it.  Developing tools to test your own
code is a part of doing a job.

--kevin
-- 
GnuPG ID: B280F24E And the madness of the crowd
alumni.unh.edu!kdc Is an epileptic fit
   -- Tom Waits
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Environmental Monitoring

2005-05-10 Thread David Ecklein
Just a thought...

If you are not looking for deep instrumentation, but merely an alarm system.
a near-zero budget idea would be to pick up those dial-type units that
measure temperature and humidity.  I see them all the time at flea markets
and thrift stores for $5 or less.  Epoxy very small magnet to the pointers,
and thermal-glue reed switches in strategic places - and you can set up
limit-sensing, which may be all you need.

Dave E.

- Original Message - 
From: Ben Scott [EMAIL PROTECTED]
To: gnhlug-discuss@mail.gnhlug.org
Sent: Tuesday, May 10, 2005 11:25 AM
Subject: Re: Environmental Monitoring


 On 5/10/05, mike ledoux [EMAIL PROTECTED] wrote:
  Have any of you done anything like this?

   If you have any APC Smart-UPS units with open expansion slots, APC
 sells a gadget that provides ambient environmental monitoring.  I
 think it's called Measure-UPS.  I've seen them for a few hundred
 dollars.  While that is more then the non-existent budget you
 mentioned allows, it is cheaper then multiple thousands.

   If you're really after the bargin basement stuff, I've seen hacks
 that attach a thermocouple to the parallel port using a simple
 analog/digital converter IC.  I'm told such projects require nothing
 more then some really cheap parts and some skill with a soldering
 iron.  I don't know about humidity sensors, but it's possible the same
 idea applies.

   Keep in mind that polling the parallel port to acquire data like
 this tends to be rather CPU intensive, due to the ancient and
 brain-damaged design of the parallel port, so if you go this route, I
 would put it on a spare junkbox PC, not a busy server.

   This message originated in theory, where everything works.  Reality
 may have other ideas.
 ___
 gnhlug-discuss mailing list
 gnhlug-discuss@mail.gnhlug.org
 http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Environmental Monitoring

2005-05-10 Thread Drew Van Zandt
Oh and for reference a single temp point + single humidity point would be...
$424 + S/H (about $8) - can be expanded to 4 T/H points, hackable for
switch closure etc.

Save you shipping and handling if we meet somewhere for you to pick it
up; company is in Bow, NH, I live in Merrimack, NH.

--Drew
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Environmental Monitoring

2005-05-10 Thread Drew Van Zandt
My company makes these devices... might be out of your budget, but
it's Ethernet-based with several available *nix apps for monitoring,
including Nagios/Netsaint and MRTG.  Also can be done from a perl
script.

Specs:
http://www.sensatronics.com/products_environmental_monitor_em1.php

Pricelist:
http://www.sensatronics.com/products_pricelist_usa.php

Questions?  Ask!

On 5/10/05, Ben Scott [EMAIL PROTECTED] wrote:
 On 5/10/05, mike ledoux [EMAIL PROTECTED] wrote:
  Have any of you done anything like this?
 
   If you have any APC Smart-UPS units with open expansion slots, APC
 sells a gadget that provides ambient environmental monitoring.  I
 think it's called Measure-UPS.  I've seen them for a few hundred
 dollars.  While that is more then the non-existent budget you
 mentioned allows, it is cheaper then multiple thousands.
 
   If you're really after the bargin basement stuff, I've seen hacks
 that attach a thermocouple to the parallel port using a simple
 analog/digital converter IC.  I'm told such projects require nothing
 more then some really cheap parts and some skill with a soldering
 iron.  I don't know about humidity sensors, but it's possible the same
 idea applies.
 
   Keep in mind that polling the parallel port to acquire data like
 this tends to be rather CPU intensive, due to the ancient and
 brain-damaged design of the parallel port, so if you go this route, I
 would put it on a spare junkbox PC, not a busy server.
 
   This message originated in theory, where everything works.  Reality
 may have other ideas.
 ___
 gnhlug-discuss mailing list
 gnhlug-discuss@mail.gnhlug.org
 http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
 


-- 
Drew Van Zandt
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: List topics (was Re: Help kill the Surveillance State Bill)

2005-05-10 Thread Numberwhun
Derek Martin wrote:
having topic police rarely helps...  

Ok, so what about having it posted to the GNHLUG Off Topic mailing 
list that was started a few months ago.  Personally there have been OT 
posts here to the main list, but nobody has bothered to post them 
there.  I think it was a pretty good idea to have a place where the 
group can ask other questions.

Regards,
Jeff Kirkland
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Environmental Monitoring

2005-05-10 Thread Tom Buskey
http://www.midondesign.com/index.html has a box w/ temp  humidity
sensing to serial port for ~ $135.  They also sell the parts so you
can make your own for less.

Nagios touts http://www.nagios.org/products/environmental/esensors/em01.php
which is ethernet/web based for temp, humidity, light.  It's around
$330.

http://www.spiderplant.com/hlt/index.html used to sell something for
around $100.  They now have schematics and code.  They focus on Linux.
 I worked with one of the owners.  Alas, they no longer sell stuff but
you can use their plans.

You might be able to use X10 based stuff.  I imagine once you get all
the parts it'll be more expensive.

You'll see Dallas and 1-wire interface alot in your search. 
Unfortunately, if you want inexpensive, you'll have to roll your own.

On 5/10/05, mike ledoux [EMAIL PROTECTED] wrote:
 I need to devise a system to monitor (at least) temperature and
 humidity at various points in my machine room.  Budget for this
 project is non-existant.  My hope is that devices exist that I can
 attach to key servers (all Linux, mostly RHEL) to monitor their
 immediate environment, which would be 'good enough' for my purposes.
 
 Have any of you done anything like this?  Any recommendations?  My
 quick google searches have only found solutions in the multiple
 thousand range, but which do much more than I need.
 
 Thanks,
 
 --
 [EMAIL PROTECTED]  OpenPGP KeyID 0x57C3430B
 Holder of Past Knowledge   CS, O-
 Put your wasted CPU cycles to use: http://www.distributed.net/
 Profanity is the inevitable linguistic crutch of the inarticulate
  motherfucker.  Bruce Sherrod
 ___
 gnhlug-discuss mailing list
 gnhlug-discuss@mail.gnhlug.org
 http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: List topics (was Re: Help kill the Surveillance State Bill)

2005-05-10 Thread Derek Martin
On Tue, May 10, 2005 at 09:57:13PM -0400, Numberwhun wrote:
 Derek Martin wrote:
 
 having topic police rarely helps...  
 
 
 Ok, so what about having it posted to the GNHLUG Off Topic mailing 
 list that was started a few months ago.  Personally there have been OT 
 posts here to the main list, but nobody has bothered to post them 
 there.  I think it was a pretty good idea to have a place where the 
 group can ask other questions.

I think this really misses the point, which was that people want to
discuss them here, with this group of people.  I believe (relatively)
no one will use the other list, just as no one is now.  The
discussions happen here.  Personally, I'm already on too many mailing
lists, and signing up for another just doesn't interest me.  I'd
imagine a lot of people would feel the same way.

-- 
Derek D. Martinhttp://www.pizzashack.org/   GPG Key ID: 0xDFBEAD02
-=-=-=-=-
This message is posted from an invalid address.  Replying to it will result in
undeliverable mail.  Sorry for the inconvenience.  Thank the spammers.



pgph4xMcVWhX6.pgp
Description: PGP signature


Yet Another Perl Conference final details

2005-05-10 Thread Gerard Lim
Hi everyone...

This email could be of interest to people interested in the
Perl programming language.  I know that in Toronto there is a
good-sized overlap between Linux people and Perl people (we
occasionally hold joint sessions of our user group meetings)
so we hoped to share this information with Linux folks more widely.

There have been some recent developments on the YAPC::NA front,
and it has been suggested to us that a reminder might be helpful
to some people, so here's a quick summary of the event.

Summary
---

YAPC::NA 2005 (Yet Another Perl Conference, North America)
in Toronto, Canada, Monday - Wednesday 27 - 29 June, 2005

Home page:  http://yapc.org/America/

Conference Location:  http://89chestnut.com/
  A facility of the University of Toronto

Accommodations
--
Normally registration information would come first, but
accommodations are the bottleneck -- our main group reservation
(at the conference hotel) expires at the end of the week, and as
the conference approaches it will be extremely difficult to find
a hotel anywhere in the city.

Info on how to book at:

http://yapc.org/America/accommodations-2005.shtml


Registration


Register now!  :-)   We are on track to break attendance records
at YAPC::NA this year, and we could even sell out before the
conference starts.  The price for the full 3 days is USD$85.
We keep it insanely low through many generous sponsorships
and the all-volunteer organizational and speaking crews.

Registration info: http://yapc.org/America/register-2005.shtml

Direct registration link:

http://donate.perlfoundation.org/index.pl?node=registrant%20infoconference_id=423


Conference Speaking Schedule


We've got an excellent selection of talks and speakers for Perl
programmers of all levels, beginner through expert.  We are
fortunate enough to have presentations coming from some of the
most recognizable names in Perl programming today, including
Larry Wall, Chip Salzenberg, Dan Sugalski, Autrijus Tang and
brian d foy.

Summary -- http://yapc.org/America/schedule-2005/summary.html

Day 1   -- http://yapc.org/America/schedule-2005/day1.html
Day 2   -- http://yapc.org/America/schedule-2005/day2.html
Day 3   -- http://yapc.org/America/schedule-2005/day3.html


Lightning Talks
---
These short (5 minutes each) talks, presented by the conference
attendees, are a YAPC tradition.  If you're interested please
read more about them and sign up:

http://www.justanotherperlhacker.org/lightning/

[ This message was sent by Gerard Lim [EMAIL PROTECTED] on
  behalf of the YAPC::NA 2005 Conference organizing committee
  of the Toronto Perl Mongers.  Thanks for your patience and
  support. ]

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss