Re: OpenSSH vulnerability?

2009-07-08 Thread H. Kurth Bemis
On Wed, 2009-07-08 at 21:18 -0400, Michael ODonnell wrote:
> 
> >The best I can find is just the obvious rumor stuff at:
> >http://isc.sans.org/diary.html?storyid=6742
> >
> >Anyone here have any more information?
> 
> This *might* be an indication of what it's about:
> 
>http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt
> 
> ...but that's based on some *very* unscientific rummaging around
> in on some of the full-disclosure archives, so take it FWIW...
>  
> ___
> gnhlug-discuss mailing list
> gnhlug-discuss@mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/

Right.  It's all speculation and guessing ATM.

Also on LWN: http://lwn.net/Articles/340483/

~k


___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: Boston Linux Meeting Wed, July 15, 2009 Another Look at MythTV and MythDora

2009-07-08 Thread Jarod Wilson
On Wednesday 08 July 2009 21:57:01 Jerry Feldman wrote:
> When:  July 15, 2009 7PM (6:30PM for Q&A)
> Topic: Building an open-source PVR (TiVo workalike) with Fedora
> Moderator: Jarod Wilson
> Location:  MIT Building E51, Room 315
> 
> Jarod discusses the current state of MythTV, which is expected to
> have a new release (MythTV 0.22) shortly before the date of this meeting.
> 
> Jarod is involved in the MythDora project, which maintains a simple
> installation ISO image based on Fedora. Back in January 2009, the
> MythDora project announced that MythDora had finally been updated to
> catch up with the Fedora baseline, and as of the 10.21 release, MythDora
> was now based on the still-new Fedora 10.
> 
> With luck, a new release of MythDora based on Fedora 11 and MythTV
> 0.22 may be released before the date of this meeting.

Wow, this sorta... Snuck up on me. MythTV 0.22 won't be released by
next week, and there won't be a new MythDora release just yet, but I
think there's still plenty to talk about... :)

Now, I don't actually have anything prepared yet, so hey, why not get
the ball rolling now: what exactly do people planning to attend most
want to hear about? VDPAU? The HD PVR? New and interesting things in
the world of LIRC? Potential commercial ventures utilizing MythTV?

-- 
Jarod Wilson
ja...@wilsonet.com
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: OpenSSH vulnerability?

2009-07-08 Thread VirginSnow
Neil Schelly  writes:

> I guess I'm just out of the underground loop for security exploits.

You can find out a lot of the latest and greatest such stuff by
hanging out on #crypto.
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Boston Linux Meeting Wed, July 15, 2009 Another Look at MythTV and MythDora

2009-07-08 Thread Jerry Feldman
When:  July 15, 2009 7PM (6:30PM for Q&A)
Topic: Building an open-source PVR (TiVo workalike) with Fedora
Moderator: Jarod Wilson
Location:  MIT Building E51, Room 315

Jarod discusses the current state of MythTV, which is expected to
have a new release (MythTV 0.22) shortly before the date of this meeting.

Jarod is involved in the MythDora project, which maintains a simple
installation ISO image based on Fedora. Back in January 2009, the
MythDora project announced that MythDora had finally been updated to
catch up with the Fedora baseline, and as of the 10.21 release, MythDora
was now based on the still-new Fedora 10.

With luck, a new release of MythDora based on Fedora 11 and MythTV
0.22 may be released before the date of this meeting.

For further information and directions please consult the BLU Web site
http://www.blu.org
Please note that there is usually plenty of free parking in the E-51
parking lot at 2 Amherst St, or on Amherst St.

We will adjourn to the Cambridge Brewery for our after meeting meeting.
-- 
Jerry Feldman 
Boston Linux and Unix
PGP key id: 537C5846
PGP Key fingerprint: 3D1B 8377 A3C0 A5F2 ECBB  CA3B 4607 4319 537C 5846



























signature.asc
Description: OpenPGP digital signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: OpenSSH vulnerability?

2009-07-08 Thread Michael ODonnell


>The best I can find is just the obvious rumor stuff at:
>http://isc.sans.org/diary.html?storyid=6742
>
>Anyone here have any more information?

This *might* be an indication of what it's about:

   http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt

...but that's based on some *very* unscientific rummaging around
in on some of the full-disclosure archives, so take it FWIW...
 
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


OpenSSH vulnerability?

2009-07-08 Thread Neil Schelly
I've been looking around for more information about OpenSSH's rumored 
vulnerability.  I guess I'm just out of the underground loop for security 
exploits.  The best I can find is just the obvious rumor stuff at: 
http://isc.sans.org/diary.html?storyid=6742

Anyone here have any more information?
-N
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: It appears that Cisco has decided to deep six the Linksys line...

2009-07-08 Thread Hewitt_Tech
Ben Scott wrote:
> On Wed, Jul 8, 2009 at 11:02 AM, Alex Hewitt wrote:
>> Or at least they've made getting information on Linksys products a lot
>> harder by completely changing the Linksys web site.
> 
>   Like this is the first time a company's ever done that.  As Gerry
> Hull says, "Typical marketing stuff".
> 
>   I'd be amazed if Cisco canceled LinkSys.  It remains one of the most
> popular consumer networking brands.
> 
> -- Ben
> ___
> gnhlug-discuss mailing list
> gnhlug-discuss@mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/
> 
Yup. Big company buys smaller company. Keeps things the same for a while 
then screws up web site and makes it harder for their customers. Been 
there, seen that, worked for similar big companies ;^)

-Alex

P.S. It's not like Linksys had great support. I don't know if they ever 
did but it's pretty much useless now. I base that on clueless support 
personnel that told the customer to "press and hold the reset button for 
  15 seconds" and thus erased the existing configuration (VPN tunnel and 
ISP setup). One story among hundreds (maybe thousands - who knows).

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: It appears that Cisco has decided to deep six the Linksys line...

2009-07-08 Thread Ben Scott
On Wed, Jul 8, 2009 at 11:02 AM, Alex Hewitt wrote:
> Or at least they've made getting information on Linksys products a lot
> harder by completely changing the Linksys web site.

  Like this is the first time a company's ever done that.  As Gerry
Hull says, "Typical marketing stuff".

  I'd be amazed if Cisco canceled LinkSys.  It remains one of the most
popular consumer networking brands.

-- Ben
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: Ok, so help me fix OpenVPN (was: WAP/Router...)

2009-07-08 Thread Mark Komarinski
On 07/07/2009 04:40 PM, John Abreau wrote:
> Here are the scripts I use to start and stop 50 tap# interfaces.
>
>   
Between going over the scripts and something else (not sure what, which 
makes me a bit nervous), I got it working with my netbook.  Next step is 
to get my workstation and the wife's netbook set up.  Thanks everyone 
for their help, though I'm a bit surprised the answer to "Hey, I want to 
buy some new hardware, what should I get" was "solve it with the 
software you already have".  Though that ASUS WL-500g looks interesting...

-Mark
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: It appears that Cisco has decided to deep six the Linksys line...

2009-07-08 Thread Gerry Hull
Not at all... I was at Cisco Live! in SF last week.   They are just
re-labeling and repackaging Linksys... Typical marketing stuff which is a
PITA for us!

Gerry

On Wed, Jul 8, 2009 at 11:02 AM, Alex Hewitt wrote:

> Or at least they've made getting information on Linksys products a lot
> harder by completely changing the Linksys web site. I just spent a good
> ten minutes tracking down information on the RVL200 (SSL VPN router).
>
> Quite painful and not a good way to sell products or perhaps that's the
> idea...
>
> -Alex
>
> ___
> gnhlug-discuss mailing list
> gnhlug-discuss@mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/
>
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


It appears that Cisco has decided to deep six the Linksys line...

2009-07-08 Thread Alex Hewitt
Or at least they've made getting information on Linksys products a lot 
harder by completely changing the Linksys web site. I just spent a good 
ten minutes tracking down information on the RVL200 (SSL VPN router).
 
Quite painful and not a good way to sell products or perhaps that's the 
idea...

-Alex

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/