Re: Linux on an AS/400?

2006-03-28 Thread Paul Tykodi
Dear Dan,

This web page gives a rather good overview of the steps required to create a
logical partition where Linux can be hosted on an IBM iSeries - AS/400
server.
http://www.midrangeserver.com/mpo/mpo052203-story03.html

Because of the way in which this particular server manages delivering
hardware resources to an OS, you are required to use a Linux distro
specially crafted to work with the iSeries hardware.

HTH

Best Regards,

/Paul
--
Paul Tykodi
Principal Consultant
TCS - Tykodi Consulting Services LLC

Tel/Fax: 603-343-1820
Mobile:  603-866-0712
E-mail:  [EMAIL PROTECTED]
WWW: http://www.tykodi.com

Date: Sun, 26 Mar 2006 15:13:25 -0500
From: Dan Coutu [EMAIL PROTECTED]
To: GNHLUG mailing list gnhlug-discuss@mail.gnhlug.org
Subject: Linux on an AS/400?

I have access to a fairly cheap AS/400 and am wondering if Linux will in
fact run on it. Preliminary research indicates that it might but I thought
I'd ask here in case anyone actually has experience with it. Do I need a
version of Linux, like RHEL, that is blessed by IBM?

Dan

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Paul Lussier
Python [EMAIL PROTECTED] writes:

 Would it help to convert to 32-bit integers?  

I might.  I'll try that.

 I think I understand the arithmetic.  I do not really understand what
 you are trying to do.

That's okay, neither do I ;)

(If you really want the long convoluted discussion, I'll be glad to
post it, I just figured no on would care.  Of course, I also often
misunderstimate the intellectual curiosity of fellow geeks :)
-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Paul Lussier
Ben Scott [EMAIL PROTECTED] writes:

   I tried

   perl -we '$a = inet_addr(192.0.2.42);'

 but it complained that inet_addr is not defined.  I suspect there's a
 module somewhere you need to pull in.  Hopefully this is enough to get
 you started.

You likely need to use -MSocket, and then figure out which of the
correct functions in there are analogous to inet_addr.  The ones which
leap to mind are inet_ntoa and inet_aton.  There doesn't seem to be an
inet_addr.
-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Jason Stephenson

Paul Lussier wrote:

Python [EMAIL PROTECTED] writes:


Would it help to convert to 32-bit integers?  



I might.  I'll try that.


It will definitely help. If you get the netmask and address both in 
32-bit integers, then calculating the network and broadcast addresses is 
very straightforward. Here's some sample code:


network = address  netmask;
broadcast = address | ~netmask;

The above is C, but should work in Perl, too.

Of course, after looking back through the thread, I see Ben has already 
pretty much answered the above. ;)






I think I understand the arithmetic.  I do not really understand what
you are trying to do.



That's okay, neither do I ;)

(If you really want the long convoluted discussion, I'll be glad to
post it, I just figured no on would care.  Of course, I also often
misunderstimate the intellectual curiosity of fellow geeks :)


I think Paul explained it pretty well in his first post. Let me explain 
to see if I really understand.


Paul is using a network that is restricted to using a /19 netmask for 
addressing, but it is really using a /16 when configured. So, he wants 
to limit address to 10.0.32.0/19 but needs to configure broadcast and 
network addresses for 10.0.32.0/16. Why he needs to do that, I have no 
idea and wouldn't need to know. ;)


Ben's previous message pretty much explains how to solve this.

It seems to me that the answer is that your IP addresses are limited to 
the range of 10.0.32.0 to 10.0.63.255 with 10.0.0.0 being the network 
address and 10.255.255.255 being the broadcast address, no?


Cheers,
Jason
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Bluetooth Serial port?

2006-03-28 Thread Brian Chabot
I got my new BT dongle running easy enough... it pairs fine with my BT GPS...

...The BT Serial port monitor sees the data...

...but anyone know how I can figure out which /dev/ it's using?  I'm at a 
loss.  

(This is on a fully up to date Mandriva 2006 install)

Any clues?  dmesg is silent... so is /var/log/messages.  They just tell me the 
dongle is a HID and the modules loaded OK.

Brian
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Ben Scott
On 3/28/06, Paul Lussier [EMAIL PROTECTED] wrote:
 If you really want the long convoluted discussion, I'll be glad to
 post it, I just figured no on would care.

  Well, everyone here knows *I* thrive on long, convoluted
discussions.  I'm also curious if you're trying to route packets
through a non-existant gateway again.  ;-)

   perl -we '$a = inet_addr(192.0.2.42);'

 but it complained that inet_addr is not defined.

 You likely need to use -MSocket, and then figure out which of the
 correct functions in there are analogous to inet_addr.  The ones which
 leap to mind are inet_ntoa and inet_aton.  There doesn't seem to be an
 inet_addr.

  Hmmm Well, I just tried that quickly, but it looks like Perl's
inet_aton() function results in something that Perl thinks is a
string, not a long integer.  (Probably because inet_aton() is defined
in terms of a pointer to character(s), in typical C fashion.)  I don't
know how to tell Perl to treat the result as the integer it is (so I
can do binary operations on it).

  Or maybe I'm using it wrong.

-- Ben

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Bluetooth Serial port?

2006-03-28 Thread Neil Schelly
On Tuesday 28 March 2006 10:50 am, Brian Chabot wrote:
 I got my new BT dongle running easy enough... it pairs fine with my BT
 GPS...

 ...The BT Serial port monitor sees the data...

 ...but anyone know how I can figure out which /dev/ it's using?  I'm at a
 loss.

In my case, it's configured as follows in rfcomm.conf to use /dev/rfcomm0 as 
the serial port. And the major/minor device numbers are below that 
configuration.  The binary rfcomm reads this file and binds the necessary 
device to the bluetooth serial.
-N

neilmobile:/etc/bluetooth# cat rfcomm.conf
#
# RFCOMM configuration file.
#
# $Id: rfcomm.conf,v 1.1 2002/10/07 05:58:18 maxk Exp $
#

rfcomm0 {
bind yes;
device 01:CC:20:61:37:15;
channel 1;
comment Treo 650;
}
neilmobile:/etc/bluetooth# ls -al /dev/rfcomm0
crw-rw-rw-  1 root dialout 216, 0 Jul  9  2005 /dev/rfcomm0
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Ben Scott
On 3/28/06, Jason Stephenson [EMAIL PROTECTED] wrote:
 Of course, after looking back through the thread, I see Ben has already
 pretty much answered the above. ;)

  Repetition is the very soul of the net. -- from alt.config

 Paul is using a network that is restricted to using a /19 netmask for
 addressing, but it is really using a /16 when configured. So, he wants
 to limit address to 10.0.32.0/19 but needs to configure broadcast and
 network addresses for 10.0.32.0/16. Why he needs to do that, I have no
 idea and wouldn't need to know. ;)

  Well... okay... but it's the *why* that makes me wonder.  :)

  I hope it's something interesting, and not just that he's trying to
say that he's been assigned the addresses in the range 10.0.32.0/19 on
the 10.0.0.0/16 network.  That would be *so* boring.  :)

 It seems to me that the answer is that your IP addresses are limited to
 the range of 10.0.32.0 to 10.0.63.255 with 10.0.0.0 being the network
 address and 10.255.255.255 being the broadcast address, no?

  Well, /16 means the first two octets are the network portion and the
last two octets are the host portion.  So the broadcast address (with
CIDR)  would be 10.0.255.255.  Of course, 10.0.32.0/16 would normally
be written 10.0.0.0/16, because, again, the third octet is part of the
host portion.  The host portion is really irrelevant when talking
about network numbers.  Convention says we fill the host portion with
zeros.

-- Ben

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Bluetooth Serial port?

2006-03-28 Thread Brian Chabot
On Tuesday 28 March 2006 11:09 am, Neil Schelly wrote:

 In my case, it's configured as follows in rfcomm.conf to use /dev/rfcomm0
 as the serial port. And the major/minor device numbers are below that
 configuration.  The binary rfcomm reads this file and binds the necessary
 device to the bluetooth serial.

That's definitely a start in the right direction.

The entire file is commented out though.

I'll play with it and see what happens.

Thanks!

Brian
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Bluetooth Serial port?

2006-03-28 Thread Cole Tuininga
On Tue, 2006-03-28 at 10:50 -0500, Brian Chabot wrote:
 I got my new BT dongle running easy enough... it pairs fine with my BT GPS...
 
 ...The BT Serial port monitor sees the data...
 
 ...but anyone know how I can figure out which /dev/ it's using?  I'm at a 
 loss.  
 
 (This is on a fully up to date Mandriva 2006 install)
 
 Any clues?  dmesg is silent... so is /var/log/messages.  They just tell me 
 the 
 dongle is a HID and the modules loaded OK.

You could also try using lsof...

-- 
Cole Tuininga [EMAIL PROTECTED]

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Linux on an AS/400?

2006-03-28 Thread Bill McGonigle

On Mar 26, 2006, at 15:13, Dan Coutu wrote:

I have access to a fairly cheap AS/400 and am wondering if Linux will 
in fact run on it. Preliminary research indicates that it might but I 
thought I'd ask here in case anyone actually has experience with it. 
Do I need a version of Linux, like RHEL, that is blessed by IBM?


Just make sure to check on the models.  I've worked with old clunky 
(slow slow slow) hardware called an AS/400 and a new dual/quad-core 
Power 5 box called an AS/400 (at least by the IBM field guys).  They're 
also called iSeries and if it can run OS/400 it's often called an 
AS/400.


Those new Power 5 boxes are super sweet.  They have a hypervisor that 
explicitly supports linux.  I understand folks are using linux tools to 
manage/backup the OS/400 data.  The hypervisor lets you share virtual 
disks among OS's.


-Bill

-
Bill McGonigle, Owner   Work: 603.448.4440
BFC Computing, LLC  Home: 603.448.1668
[EMAIL PROTECTED]   Cell: 603.252.2606
http://www.bfccomputing.com/Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: People still interested in shared colo?

2006-03-28 Thread Bill McGonigle


On Mar 16, 2006, at 10:45, Brian wrote:


As part of this setup you would get:
Rackspace
Power
Remote power-switch access for reboots
*minimal* amount of hot-hands work if needed
Bandwidth (we'll say unlimited for now, but this setup is NOT for
mega-torrent hosting, pr0n serving, etc.  You CAN run a commercial site
though).
Primary DNS server access


What are folks using for serial consoles these days?  I have an old 
Xyplex box but it only supports telnet. :)


You'd think a basic linux box with a multiport serial card would 
suffice.  But building a whole PC for a serial console seems like 
overkill (but maybe not economically).


-Bill

-
Bill McGonigle, Owner   Work: 603.448.4440
BFC Computing, LLC  Home: 603.448.1668
[EMAIL PROTECTED]   Cell: 603.252.2606
http://www.bfccomputing.com/Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Registrars hoarding domain names?

2006-03-28 Thread Bill McGonigle
I read another the Internet is about to collapse story today, so not 
finding the site that catalogues such predictions and makes fun of the 
pundits, I figured it would be a good idea to put one up.  The domain 
name that came to mind immediately was 'collapse.net'.


So, first stop, firefox - no website there.  Next stop WHOIS... UH WHAT?

Output attached - if you go to register.com and try to register it it 
says it's unavailable but they offer to let you bid on it for $200 or 
more.


This seems entirely unkosher.   I've seen the 60-90 day grace period 
holds, but nothing like this.  Anybody see this before?  You'd think 
ICANN would be putting the smackdown on this kind of operation.


-Bill

   Organization:
  register.com
  Unpaid Names Department-R
  575 Eighth Avenue
  New York, NY 10018
  US
  Phone: 212-798-9200
  Fax..: 212-594-9876
  Email: [EMAIL PROTECTED]

   Registrar Name: Register.com
   Registrar Whois...: whois.register.com
   Registrar Homepage: http://www.register.com

   Domain Name: COLLAPSE.NET

  Created on..: Thu, Oct 07, 2004
  Expires on..: Wed, May 19, 2004
  Record last updated on..: Sat, Oct 09, 2004


-
Bill McGonigle, Owner   Work: 603.448.4440
BFC Computing, LLC  Home: 603.448.1668
[EMAIL PROTECTED]   Cell: 603.252.2606
http://www.bfccomputing.com/Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Co-op co-lo server?

2006-03-28 Thread Ben Scott
Hello, world!

  I've had this idea that I've been tossing around inside my head, and
I decided I wanted to toss it out here to see what people think.

  I'd like to have a Linix box on a real IP feed (symmetric,
reliable, etc.), with proper power, cooling, and all that, that I
could put my own spare-time projects and such on.  Something I could
host my personal email on, maybe a vanity website, some other website
ideas I've had, plus a place to SSH to for utility purposes.  Sort of
a $HOME away from home, if you will.

  I've even got some hardware (a nice 1U box) to throw at the idea.

  However, I don't want to pay any serious amount of money for this. 
Even Brian (karas.net)'s very nice $50/month is more than I want to
spend.  This is basically for play, when it comes right down to it.

  But then I started thinking, there's prolly others who'd like the
same thing, but who are also cheap bastards like me.  If, say, ten
people signed up for this, and we could get a rate like that $50/month
for the colo, well, $5/month I could easily throw away on a play box.

  So: Would anyone here be interested in co-op for a colo server for
this kind of thing?

  Right off the bat, I'd have to say there is no guarantee of
reliability. It would prolly have to be personal only -- no
businesses.  General bandwidth demands would have to be fairly
minimal, too -- no hosting a Red Hat mirror or streaming MP3's for
your band or anything.  (Occasional big file transfer would be fine,
it's the big picture I'd be worried about.)

  We'd have to work out some kind of internal governance for things
like root access and software install and that kind of thing, to keep
it from turning into a disaster.  But in general, I'd hope to keep it
as open as possible.

  Comments, commendations, condemnations, suggestions, interest, etc.?

-- Ben What am I getting myself into? Scott

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Registrars hoarding domain names?

2006-03-28 Thread Ben Scott
On 3/28/06, Bill McGonigle [EMAIL PROTECTED] wrote:
 Output attached - if you go to register.com and try to register it it
 says it's unavailable but they offer to let you bid on it for $200 or
 more.

  It appears you're not the first to encounter this.

http://www.google.com/search?q=%22Unpaid+Names+Department%22

  Register.com has something of a bad rep anyway, from what I hear.

 You'd think
 ICANN would be putting the smackdown on this kind of operation.

  BWWHAHAHAHAAHAH

-- Ben

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: People still interested in shared colo?

2006-03-28 Thread Bill McGonigle

On Mar 28, 2006, at 13:07, Drew Van Zandt wrote:


I'd suggest maybe people could
buddy up and set up a serial crossover cable between two systems...


That's perfect.  Brilliant suggestion. (I was waaay inside the box)

Marlboro, MA isn't the right place for my server (ya can't get thar 
from here) but I suspect I'll use that trick wherever I find a home.


Thanks,
-Bill
-
Bill McGonigle, Owner   Work: 603.448.4440
BFC Computing, LLC  Home: 603.448.1668
[EMAIL PROTECTED]   Cell: 603.252.2606
http://www.bfccomputing.com/Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Co-op co-lo server?

2006-03-28 Thread Bill McGonigle

On Mar 28, 2006, at 13:11, Ben Scott wrote:


Something I could
host my personal email on, maybe a vanity website, some other website
ideas I've had, plus a place to SSH to for utility purposes.  Sort of
a $HOME away from home, if you will.


You might also be interested in a VPS instead of running a coop (the 
somebody-else-runs-the-coop model)


Lloyd swears by Tummy:

  http://www.tummy.com/Hosting/virtual.html

though they're $25 a month for a 50MB of RAM package which might get 
tricky under RH/Fedora (how do they do that?)


I'm paying $49 a month for my server but that ISP now charges $99/mo 
for the same class machine for new accounts.  I'm seeing the same thing 
with SSL Certs - I used to get InstantSSL certs for $49 now they're 
$99.  DynDNS is even charging more than Thawte!


The pendulum certainly seems to be swinging back to the DYI-is-cheaper 
side.


-Bill

-
Bill McGonigle, Owner   Work: 603.448.4440
BFC Computing, LLC  Home: 603.448.1668
[EMAIL PROTECTED]   Cell: 603.252.2606
http://www.bfccomputing.com/Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Password compromise in Ubuntu

2006-03-28 Thread Bill Sconce
I meant to post this when I first encountered it -- by now everyone may
already know about it.  But if not...

Ubuntu Breezy's installer keeps a log of what you tell it during the
question-and-answer dialogue.  This unfortunately includes the password 
you create for the first user.  The first user has sudo privileges.

I've used shred(1) on the log files on my Ubuntu systems.  In the future
I think it'll be a good idea to DELETE that first user after getting
the real users set up.  (In addition to  trusting Ubuntu to have fixed
the problem, which they have for Dapper.)  You may want to adopt yet 
another approach.  But for sure anyone running Ubuntu should know about
the vulnerability.

One URL:

  http://digg.com/linux_unix/Ubuntu_password_bug_fixed_in_just_a_few_hours

-Bill
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: People still interested in shared colo?

2006-03-28 Thread Drew Van Zandt
Oh, that dodge also brings this to mind...

http://www.servercase.com/miva/miva?/Merchant2/merchant.mv+Screen=PRODStore_Code=SCProduct_Code=CK147Category_Code=1UE

Neat, eh?

--DTVZ

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Registrars hoarding domain names? (Summary)

2006-03-28 Thread Bill McGonigle

On Mar 28, 2006, at 13:18, Ben Scott wrote:


  It appears you're not the first to encounter this.


Ah-ha!  I bow to your superior Google-Fu, benscott-san.

Summary:

* Network Solutions and Register.com are known for doing this.
* They've been doing it since at least 2002.
	* ICANN gets its $6 a year regardless so it doesn't care ( I assumed 
they weren't paid so they'd care, but they are).
	* The registrars are hedging bets against someone going to a different 
registrar, plus they'd like the auction/escrow fees  $250
	* Some people have had success calling Register.com on the telephone 
and asking them to release the domain into the deletion pool
	* This issue isn't specifically addressed in any of ICANN's website 
FAQ's
	* There is no definition of how and when domains are to be released 
back into the pool in ICANN's contract with registrars.  All the good 
registrars who are doing it the right way are just being ethical.


The last one seems to be the problem.  I might write the appropriate 
office at the FTC suggesting that be required.  The current policy 
breaks any chance for an efficient market.


-Bill

-
Bill McGonigle, Owner   Work: 603.448.4440
BFC Computing, LLC  Home: 603.448.1668
[EMAIL PROTECTED]   Cell: 603.252.2606
http://www.bfccomputing.com/Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: People still interested in shared colo?

2006-03-28 Thread Neil Schelly
On Tuesday 28 March 2006 01:57 pm, Drew Van Zandt wrote:
 Oh, that dodge also brings this to mind...

 http://www.servercase.com/miva/miva?/Merchant2/merchant.mv+Screen=PRODStor
e_Code=SCProduct_Code=CK147Category_Code=1UE

 Neat, eh?


Definitely has neato factor, but not much utility.  A single, even just 
reasonably powerful, server in that box would outperform that by far and you 
could run several virtual machines in it to get the multiple machine feel.  
I've been playing with Xen a bunch lately and it's proven quite flexible and 
powerful.  You could get a typical 1U server with dual procs or something and 
RAID together two hard drives, and then run 4 or more virtual machines that 
would each outperform those two ITX platforms.
-N
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Registrars hoarding domain names? (Summary)

2006-03-28 Thread Bill Sconce
On Tue, 28 Mar 2006 14:01:54 -0500
Bill McGonigle [EMAIL PROTECTED] wrote:

   * There is no definition of how and when domains are to be released 
 back into the pool in ICANN's contract with registrars.  All the good 
 registrars who are doing it the right way are just being ethical.


So one shouldn't do business with Netowrk Solutions?

Oh wait.  One already shouldn't.

-Bill
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Password compromise in Ubuntu

2006-03-28 Thread Sarunas
Bill Sconce wrote:
 I meant to post this when I first encountered it -- by now everyone may
 already know about it.  But if not...
 
 Ubuntu Breezy's installer keeps a log of what you tell it during the
 question-and-answer dialogue.  This unfortunately includes the password 
 you create for the first user.  The first user has sudo privileges.
 
 I've used shred(1) on the log files on my Ubuntu systems.  In the future
 I think it'll be a good idea to DELETE that first user after getting
 the real users set up.  (In addition to  trusting Ubuntu to have fixed
 the problem, which they have for Dapper.)  You may want to adopt yet 
 another approach.  But for sure anyone running Ubuntu should know about
 the vulnerability.
As far as my experience tells, this only applies if non-expert install
mode was used.

-- 
Sarunas Burdulis
Systems Administrator
Department of Mathematics
313 Bradley Hall, Dartmouth College
(603) 646-9255

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


OT - designed for Internet Explorer

2006-03-28 Thread Bill Sconce
Move over, Boston Globe --

In the last week or so an unnamed credit union of which I'm a member
has been rumoured to have lost control of their PIN list -- someone
took it home on a PC, somewhow someone else got hold of the PINs,
and eventually a depositor noticed that their account had been cleaned 
out.  (All of this is just rumour, part of the chuckle.)

A few minutes ago, when I went to check a balance (this credit union
has an online, designed for Internet Explorer Web facility) where
the login page should have been was a page saying we periodically 
require that all PINs be changed, enter your old PIN and a new one 
in the form below and click SAVE, etc.)

Just like the notices I've been getting from Wells Fargo, and Chase,
and everywhere else I don't have an account.   

Wait,

I do have an account here.  And the software IS maintained by folks who
think works with IE is acceptance testing...  

So I called the credit union.  Answer: the PIN change is indeed being 
requested  by the credit union; it's not a man-in-the-middle attack.  (This
time.)  So much for legitimate instututions will we'll never ask you for
your personal information on line, yadda yadda.  (Yes, I know, there's a
difference, but this is just too funny.) 

And I guess it IS  periodic.  There has to be a first time.  Right after
a breach would be a good time to start...   :)

As I say, for amusement purposes only.  No names named.  Still, it's
supposed to be wise to check one's accounts from time to time at ANY
institution, since there's a time window for reporting errors...

-Bill


Update:  phone conversation with a rep a few minutes ago.  They did
experience a loss.  That part's not rumour.

Update II:  the telephone-response system, which used the same
PINs, isn't being updated.  (Can't -- different operating system, doesn't
talk to the IIS system.)  So the PINs stolen in the PC episode are now
only useful to the criminals via the TouchTone system. 

Wouldn't Joseph Heller be proud?
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Password compromise in Ubuntu

2006-03-28 Thread Bill Sconce
On Tue, 28 Mar 2006 14:19:51 -0500
Sarunas [EMAIL PROTECTED] wrote:


 As far as my experience tells, this only applies if non-expert install
 mode was used.


Quite possibly.  It got ME.   :)

-Bill
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Paul Lussier
Jason Stephenson [EMAIL PROTECTED] writes:

 It seems to me that the answer is that your IP addresses are limited
 to the range of 10.0.32.0 to 10.0.63.255 with 10.0.0.0 being the
 network address and 10.255.255.255 being the broadcast address, no?

Err, you've got the IP addresses wrong.  It's 10.32.0.0/16, but
segmented on a /19 boundary. I need to be able to calculate the next
network, which for 10.32.0.0/19, would be 10.64.0.0/19, then take the
host portion and add it to this new network such that any given host
has the same host portion on all networks it may exist on.
-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Paul Lussier
Ben Scott [EMAIL PROTECTED] writes:

   Well... okay... but it's the *why* that makes me wonder.  :)

   I hope it's something interesting, and not just that he's trying to
 say that he's been assigned the addresses in the range 10.0.32.0/19 on
 the 10.0.0.0/16 network.  That would be *so* boring.  :)

Well, since you've asked, I'm sure you'll regret it :)

I'll try to be as brief and concise, yet clear as possible.
It's confusing.

We have no internal router.  Just a legacy BSD box acting as a firewall.

The internal network, for there really is only one, is 10.0.0.0/16.

When it was set up, the 10.0.0 space was allocated along CIDR
boundaries on the premise that someday we would have a router to
separate un-like network traffic.  As a result, we have something like
this:

Address/CIDR block| Function | Address Range Defined
--
10.0.0/22 | Dev/infrastructure servers   | 10.0.0.0  - 10.0.3.255
10.0.4/22 | Mgmt/admin desktops, Mac laptops | 10.0.4.0  - 10.0.7.255
10.0.8/22 | Dev desktops | 10.0.8.0  - 10.0.11.255
10.0.12/24| Network hardware | 10.0.12.0 - 10.0.12.255
10.0.13/24| Printers | 10.0.13.0 - 10.0.13.255
10.0.14/24| MS-OS systems| 10.0.14.0 - 10.0.14.255
10.0.32/19| Dev lab systems  | 10.0.32.0 - 10.0.63.255


This allocates a generous portion of addresses to various uses, and,
if need be, subdivide based on /24 boundaries if we wanted to. 

The 10.0.32/19 is an interesting beast.  The systems which live on it
have 2 NICs, the primary eth0, which *always* have a 10.0.32/19 based
address (currently restricted to 10.0.33/24 for some reason?!), and a
secondary eth1 which has a primary address of 10.106.XX.YY where XX.YY
are the same as the 10.0.XX.YY, and where XX is currently always
33. i.e.  host 10.0.33.124 has an eth1 IP of 10.106.33.124.

Here's the *really* confusing part.  Every system's eth1 *also* has 10
virtual/alias IPs of 10.[96-105].XX.YY.  If you recall, I mentioned
not having a router.  Have I mentioned that the number of hosts in the
10.33/16 range is somewhere around 300, with another 50-100 being
added in the next 2 months? :) Both NICs in all systems are
essentially on one ethernet network!

At any given time, these hosts can have both eth0 and eth1 up, plus
any number of the 10 alias IPs up.  We are actually about to cut over
to a new network configuration this week.  However, as the saying
goes, There's nothing more permanent than a temporary solution. and
dev has basically evolved their testing infrastructure to *require*
this flat network scheme.  I'm currently testing things to make sure
nothing breaks in the transition.  One of the things our product
does is look at the list of currently configured interfaces, take the
highest IP and add 1 to the network portion to obtain a new IP on
a different network, but retaining the host portion of the IP.
Basically, there's a multi-host negotiation which takes place and
figures out a back-channel to communicate over.  Since name
resolution is not possible either via DNS, /etc/hosts, or other means,
the only reliable means any two hosts have of reliably talking to each
other is making sure that any given host keeps the same host portion
of it's IP address on all networks.

Does this help clarify things?  Ultimately, the ability to support
network addition using something wacky like a /19 is entirely my own
intellectual curiosity, since in-house everything is on a /16 making
it trivial.  But it's one of those problems I can neither figure out,
nor let go of :)

As someone said to me yesterday, IP addresses were never designed to
be manipulated, merely assigned and used! :)

-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Paul Lussier
Ben Scott [EMAIL PROTECTED] writes:

 On 3/28/06, Paul Lussier [EMAIL PROTECTED] wrote:
 If you really want the long convoluted discussion, I'll be glad to
 post it, I just figured no on would care.

   Well, everyone here knows *I* thrive on long, convoluted
 discussions.  I'm also curious if you're trying to route packets
 through a non-existant gateway again.  ;-)

Errr, no, just the opposite actually.  Trying to *prevent* routing
from a very existent router :)
-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


car box

2006-03-28 Thread Christopher Chisholm

Hey Everyone,

Over the past few months as my 90' celica has been inching steadily 
closer to its ultimate demise, I've been thinking a lot about where we 
are with certain technologies, and how I could obtain them in a future 
car.  One thing I've always wanted but had never been willing to spend a 
lot of money on has been a GPS unit.  Recently I've been made aware with 
a sort of peripheral vision that there are an increasing number of 
software-based GPS solutions, utilizing a pretty cheap receiver that can 
be plugged in through USB and used in conjunction with some sort of map 
software.  This got me thinking... why not set up a small microATX 
system to serve as a music player/GPS navigator/notepad/anything else i 
wanted?


Right now I'm calling the design idea CarBox 0.1.  I picture one of 
those really small boxy mATX cases sitting (mounted would be a better 
word probably) under one of the seats, with a touchscreen LCD either 
mounted in the glovebox or somewhere along the dash or front panel.  I'd 
get a decent soundcard so it could output to the amazing stereo setup 
I'll be obliged to install,  and power it with inverters and wires 
carefully hidden to make it look decent.  I'd opt for a setup that 
generates as little heat as possible so the box wouldn't melt in the 
summer, but I'd also want the system to boot as quickly as possible (I 
don't want to wait two whole minutes for my precious, precious tunes).  
It would also be cool if it could be hooked in to the 
speedometer/odometer/tachometer for statistical purposes (and to damn 
myself with evidence should the police stumble across the system when I 
accidentally slide into a convenience store in the winter).


what do you guys think?  does anyone know anything about touchscreen 
LCDs or GPS software?  Any comments on the idea in general?  Would 
temperature extremes render an LCD useless in the winter?  I'm confident 
with the right setup the CPU temps wouldn't be too much of a problem.  
I'd also want whatever OS I'd use to handle hard shutdowns fairly 
gracefully.  Are there any linux file systems well-suited to this task 
as well as quick boot-ups?


-chris

that fellow at radioshack said i was mad... well who's mad now?!
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: car box

2006-03-28 Thread Andrew W. Gaunt





what do you guys think?  does anyone know anything about touchscreen 
LCDs or GPS software?  Any comments on the idea in general?  Would 
temperature extremes render an LCD useless in the winter?  I'm 
confident with the right setup the CPU temps wouldn't be too much of a 
problem.  I'd also want whatever OS I'd use to handle hard shutdowns 
fairly gracefully.  Are there any linux file systems well-suited to 
this task as well as quick boot-ups?


-chris



I remember having this fantasy a few years ago (I'm due to revisit it 
again) and recall that
there were a number of web sites dedicated to the building and supply of 
parts for
what was nominally a 'carputer.' I would expect that if you do a google 
on 'carputer'

you will find what your looking for.

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: car box

2006-03-28 Thread Jerry Feldman
On Tuesday 28 March 2006 2:55 pm, Christopher Chisholm wrote:
 Hey Everyone,

 Over the past few months as my 90' celica has been inching steadily
 closer to its ultimate demise, I've been thinking a lot about where we
 are with certain technologies, and how I could obtain them in a future
 car.  One thing I've always wanted but had never been willing to spend a
 lot of money on has been a GPS unit. 
I currently have GPS running on my Palm Treo using a BlueTooth GPS receiver 
for a total cost of well under $300. The maps come on an SD card. While I 
use this in my car, I can throw the receiver in a shirt pocket. There are a 
number of companies, such as Mapopolis and TomTom that supply the mapping 
software. I rejected TomTom out of hand because the only way to install the 
maps is via Windows. 

The current retail units run for about $800 for the top of the line Garmin 
and Magellan units to under $500. 

Some friends have mapping software on their laptops using either wired or 
wireless GPS receivers. 

One of the major differences in the low cost GPS maps I have and the top of 
the line Gramin is that the Garmin can set waypoints, subscribe to traffic 
bulletins, and look up hotels, restaurants and brothels. With the 
Mapopolis, I simply enter an address or mark an end point. It has settings 
for highway, highway neutral, avoid highways, as does most other units. 

In general, the after-market units like the Garmin and Magellan have more 
features than the more expensive built-in units. 

A friend of mine very much prefers the size of the laptop screen to the 
smaller commercial units and my Palm, but he lives in a motor home. 
-- 
Jerry Feldman [EMAIL PROTECTED]
Boston Linux and Unix user group
http://www.blu.org PGP key id:C5061EA9
PGP Key fingerprint:053C 73EC 3AC1 5C44 3E14 9245 FB00 3ED5 C506 1EA9
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Password compromise in Ubuntu

2006-03-28 Thread Bill Freeman
Bill Sconce writes Ubuntu saving the administrator password in a file.:

Perhaps it would be wise, with whatever distribution, to
always install with a dummy password, then, immediately upon
completing the installation, change the password with passwd at a
command line.  If passwd is compromised, then all bets are off no
matter what.  But this strategy gives some protection from features
naively added to installers and usability improvements.

Bill
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: car box

2006-03-28 Thread Drew Van Zandt
http://www.mini-box.com/s.nl/sc.8/category.12/.f

Unfortunately, the m-100 is *just* too wide to fit in a standard stereo slot.

ext2 noatime,sync is recommended for compactflash filesystems, I
think... I've found CF cards to vary wildly for performance, a 512MB I
have is achingly slow compared to a 256MB that's officially rated as
slower.  Haven't figured that one out yet...

I would think if you used someting Knoppix-like you could have pretty
much everything you wanted on the CF, except the music... spin the
hard drive up only to load the next 5 mp3's or so from the playlist
into RAM.  Ideally you'd add an accelerometer so you knew not to spin
it up during jouncing, of course.

There are also things like the StompBox, but the CPUs are a bit slow
for my tastes...

--DTVZ

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: People still interested in shared colo?

2006-03-28 Thread Drew Van Zandt
On the other hand, a single server has only one motherboard.  I like
the idea of being able to do a full *cold* boot of the hardware while
the other half is still running.  I know there are servers with
redundant power supplies etc. that would be as reliable as two
entirely separate systems (except for physically being in the same
box, they even use separate power supplies)...

Also, you can run a Pentium M on mini-ITX boards these days, at least.
 That's not *too* weak a processor.

--DTVZ

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: car box

2006-03-28 Thread Christopher Chisholm



nice, I found a couple great things on that site!  I was thinking of 
using a laptop drive, something designed to withstand some movement.  
not a bad idea about the compact flash though... i could use that and 
system RAM for the main OS, then have a laptop drive that holds media, 
that way it wouldn't be spinning nearly as much. 


-chris


Drew Van Zandt wrote:

http://www.mini-box.com/s.nl/sc.8/category.12/.f

Unfortunately, the m-100 is *just* too wide to fit in a standard stereo slot.

ext2 noatime,sync is recommended for compactflash filesystems, I
think... I've found CF cards to vary wildly for performance, a 512MB I
have is achingly slow compared to a 256MB that's officially rated as
slower.  Haven't figured that one out yet...

I would think if you used someting Knoppix-like you could have pretty
much everything you wanted on the CF, except the music... spin the
hard drive up only to load the next 5 mp3's or so from the playlist
into RAM.  Ideally you'd add an accelerometer so you knew not to spin
it up during jouncing, of course.

There are also things like the StompBox, but the CPUs are a bit slow
for my tastes...

--DTVZ



  


___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: car box

2006-03-28 Thread fj1200

 -- Original message --
From: Christopher Chisholm [EMAIL PROTECTED]
 Hey Everyone,
 
 Over the past few months as my 90' celica has been inching steadily 
 closer to its ultimate demise, I've been thinking a lot about where we 
 are with certain technologies, and how I could obtain them in a future 
 car.  One thing I've always wanted but had never been willing to spend a 
 lot of money on has been a GPS unit.  Recently I've been made aware with 
 a sort of peripheral vision that there are an increasing number of 
 software-based GPS solutions, utilizing a pretty cheap receiver that can 
 be plugged in through USB and used in conjunction with some sort of map 
 gnhlug-discuss mailing list
 gnhlug-discuss@mail.gnhlug.org
 http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


This forum is just what you are looking for.


http://www.mp3car.com/vbulletin/showthread.php?s=5da0c6a2b59bc6ec5c38375d74d9eafct=72302goto=nextoldest

or 

http://tinyurl.com/pg8u5

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Jason Stephenson

Paul Lussier wrote:

Jason Stephenson [EMAIL PROTECTED] writes:



It seems to me that the answer is that your IP addresses are limited
to the range of 10.0.32.0 to 10.0.63.255 with 10.0.0.0 being the
network address and 10.255.255.255 being the broadcast address, no?



Err, you've got the IP addresses wrong.  It's 10.32.0.0/16, but
segmented on a /19 boundary. I need to be able to calculate the next
network, which for 10.32.0.0/19, would be 10.64.0.0/19, then take the
host portion and add it to this new network such that any given host
has the same host portion on all networks it may exist on.


Doesn't matter. I got the network address wrong, too. ;)

You want to interpolate the address of one host to another network, is 
that it?



___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: People still interested in shared colo?

2006-03-28 Thread Bill McGonigle

On Mar 28, 2006, at 15:31, Drew Van Zandt wrote:


Also, you can run a Pentium M on mini-ITX boards these days, at least.
 That's not *too* weak a processor.


I have an embedded 1.7(8?) GHz Pentium-M-based appliance I'm working on 
and it's really nice.  Cool, quiet, quick.  On the other hand the board 
at that link is an 800MHz Via C3.  I have one of those as my Asterisk 
server, and it's, well, it's an i686 missing a few instructions so you 
have to compile as i586 for everything which isn't automatically 
detected.  The performance is fine for what it is, probably like a 
500MHz P3.


Still, that box might suck for performance, but if you had a mission 
critical app (thinking physical security, monitoring a nuclear power 
plant, etc.) it would be great to have a cookie-cutter box with a 
heartbeat between mobos with a linux-HA thing and maybe Oracle's new 
clusterfs on it.


-Bill

-
Bill McGonigle, Owner   Work: 603.448.4440
BFC Computing, LLC  Home: 603.448.1668
[EMAIL PROTECTED]   Cell: 603.252.2606
http://www.bfccomputing.com/Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Jason Stephenson

Paul Lussier wrote:


Errr, no, just the opposite actually.  Trying to *prevent* routing
from a very existent router :)


Sounds to me like what you really need is a router with VLAN capability. 
If I understand correctly, it sounds like you're trying to implement VLANs.


Your setup actually sounds very similar to something that we're 
designing for all the libraries in our consortium. Right now, each site 
has a Class C (/24) on a 10.10.*. In the near future, we plan to 
implement each site having a Class B (/16) with different class Cs for 
each VLAN. For example, if a site is now on 10.10.32.0, it will move to 
10.32.0.0 with something like 10.32.0.0/24 reserved for network 
equipment, 10.32.10.0/24 for the staff, 10.32.20.0/24 for the public, 
10.32.30.0/24 for staff wireless, 10.32.40.0/24 for public wireless, 
etc.--The Dracut Public Library will be our first test case, since 
they're moving (back) into their renovated building next month.


Without VLANs setup in the router, I can't imagine how that would work 
to prevent traffic among the various 10.32.0.0 subnets. I suppose you 
could simulate it with some really complicated routing rules.


At this point, my knowledge on the matter of networking begins to recede 
into nothingness. I can set up a simple Linux or *BSD router/firewall. I 
can do the math (poorly, but that's what computers are for). I can even 
use the socket() interface, but configuring fancy-shmancy, complicated 
network topologies is beyond my current abilities.


I didn't design the above mentioned topology, nor did I figure out the 
configuration in the Cisco routers that we buy. However, I'm promised by 
our contractor that they'll show me enough so I can break things. ;)


Long story made slightly longer, I'd suggest looking up how to configure 
VLANs on whatever you're using for a router.--I know you mentioned a 
FreeBSD firewall earlier.


Cheers,
Jason Can't-the-network-for-the-wires Stephenson
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


mini-box mini-itx

2006-03-28 Thread Drew Van Zandt
The mini-box is pretty decent - I have the fanless 533 MHz motherboard
(not the nifty box, just the MB) and have successfully run a 3-disk
RAID serving up MP3's and general mass storage to the house, for which
it was plenty beefy.

Now, if I wanted beef in mini-ITX...
http://www.mini-itx.com/2006/03/10/aopens-i945gtt-vfa-intel-viiv-mini-itx-board

--DTVZ

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Flash as spyware

2006-03-28 Thread Bill Sconce
I just came across this.  (Thanks to Bill McGonigle)

http://wiki.mozilla.org/Roadmap_Scratchpad

...Cookies provide limited storage space (on the order of a few 
kilobytes), require the application developer to manually encode
and decode any structure more complex than a simple string, and
are transmitted back to the server on each request. In response
to these limitations, some application developers are using the
Flash plugin simply to gain access to a reliable and capable 
local store.


If there hadn't been reasons to avoid Flash before, that's one. 
Cookies which even the browser doesn't know about.  Sweet.

(Did anyone here know that installing Flash gives websites the
ability to write to and read from your hard disk?  I didn't.)

A reliable and capable local store.  Botmasters must *love*
Flash.

-Bill
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: perl and network addresses

2006-03-28 Thread Paul Lussier
Jason Stephenson [EMAIL PROTECTED] writes:

 I'd suggest looking up how to configure VLANs on whatever you're
 using for a router.--I know you mentioned a FreeBSD firewall
 earlier.

You must have missed the part where I said we don't have a router,
we're migrating to a comletely new network, and, most importantly:

   Ultimately, the ability to support network addition using
something wacky like a /19 is entirely my own intellectual
curiosity

:)

-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Flash as spyware

2006-03-28 Thread Paul Lussier
Bill Sconce [EMAIL PROTECTED] writes:

 (Did anyone here know that installing Flash gives websites the
 ability to write to and read from your hard disk?  I didn't.)

Yup, discovered it when I was debugging why flash wasn't working for
some inexplicable and long since forgotten reason.  But if you watch
/tmp when you click on a flash widget to load it, you'll see a new
file pop into existence, which you can the copy off and run whenever
you want :)

But this is nothing new.  Websites have always had the ability to
write to local disk, you're browser does that for them, how do you
think your .[mozilla,galeon, whatever]/cache directory fills up with
so much crap?  You tell your browser to go download all that crap at
somepoint...  From there it's trivial to craft a website to stick
things in different locations based on the OS type *your* browser
communicates to the server.  When you connect, you open a socket, the
server is at the other end, it now just needs to stuff things down
that pipe and ask your browser to deposit it somewhere on your system.

How do you think all those ActiveXploits work :)

-- 

Seeya,
Paul
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss