Re: [ilugd] [COMMERCIAL]: Require Python,html+forms developer

2005-11-04 Thread Kenneth Gonsalves
On Friday 04 Nov 2005 1:21 pm, Nitin Chandra wrote:
 --- Kenneth Gonsalves [EMAIL PROTECTED] wrote:

 Strangly enough, Django was the only word u read.

actualy i understood it as Django *with* mod_python (django can run on 
fastcgi also, but mod_python is recommended for production servers). 
And i wasnt trying to flame you - i am mighty pleased that ppl have 
started using django in production
-- 
regards
kg

http://www.livejournal.com/users/lawgon
tally ho! http://avsap.org.in
ಇಂಡ್ಲಿನಕ್ಸ வாழ்க!

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] [COMMERCIAL]: Require Python,html+forms developer

2005-11-04 Thread Nitin Chandra

Please accept my humble apologies, Kenneth.
my mistake on assuming, you were flaming.

Regards

Nitin Chandra Srivastava

 
 actualy i understood it as Django *with* mod_python
 (django can run on 
 fastcgi also, but mod_python is recommended for
 production servers). 
 And i wasnt trying to flame you - i am mighty
 pleased that ppl have 
 started using django in production
 -- 
 regards
 kg




__ 
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



[ilugd] [Commercial] Positions open at Red Hat

2005-11-04 Thread Sankarshan Mukhopadhyay
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

Apologies for the cross post.

The following positions are open at Red Hat to be based out of Pune.

Those interested may please send in the CV in preferably OpenOffice.org
format to [EMAIL PROTECTED] with the position code in the subject line
within 12th November 2005

Regards
Sankarshan


Software Engineer
- -

[SWENGG]

Designs, modifies, develops, writes software programming applications.
Participates in the testing process through test review and analysis,
test witnessing and certification of software. Works on moderately
complex problems where analysis of situations or data requires a review
of a variety of factors. Exercises good judgement and initiative to
determine appropriate action. Has sufficient understanding of subject
area to advise and provide guidance within area of expertise.

Skillsets: GNOME, GTk, Pango, exposure to unit testing and regression
testing, exposure to automated testing suites and writing test scripts,
strong skills in C/C++ and GCC toolchain. Strong communication skills
with an ability to adhere to established procedures, best known methods
and guidelines.

Relevant Experience: 2 years (Desirable)

Quality Assurance Engineer
- --

[QAENGG]

Debugs software products through the use of systematic tests to develop,
apply and maintain quality standards for the company products. Develops
and executes software test plans. Analyses and writes test standards and
procedures. Maintains documentation of test results to assist in
debugging and modification of software. Analyses test results to ensure
existing functionality and recommends corrective action. Consults with
development engineers in resolution of problems. Has sufficient
understanding of subject area to advise and provide guidance within area
of expertise.

Skillsets: Exposure to Unit Testing and Regression testing with strong
skills in automated test suites and scripted testing methods. Capable of
adapting Best Known Methods towards obtaining stated objectives. Strong
documentation skills. Exposure to C/C++, GCC, CVS/SVN and strong
communication skills

Relevant Experience: 2 years (Desirable)

Technical Writer
- 

[TECHWRITER]

Creates, develops, plans, writes and edits operational, instructional,
maintenance or test procedures for paper, multimedia or web-based
publication. Researches and translates technical information into
manuals and/or web-based documents for nontechnical and technical users.
May document engineering processes and specifications. Recommends
formats responsive to technical and customer
requirements. Produces products that conform to the company
documentation and quality assurance standards. Follows standard
practices and procedures in analyzing situations or data from which
answers can be readily obtained.

Skillsets: DocBook, XML, Authoring Tools, CVS/SVN, exposure to Style
Manuals, strong communication skills

Relevant Experience: 2 years (Desirable)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org

iD8DBQFDazyy+g4kmZ76nyERAna7AKCAi8TtDx0FibyrZ9ya96j5CplijQCff+94
Th++G1lsK5QqFx8RHfB6XVU=
=Twbo
-END PGP SIGNATURE-

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] best tools for web development

2005-11-04 Thread Anupam Jain
On 11/4/05, Kenneth Gonsalves [EMAIL PROTECTED] wrote:
 On Thursday 03 Nov 2005 5:37 pm, Anupam Jain wrote:
  Hi everyone,
 
  I want to host an interactive (possibly database oriented) website
  from a spare PC over a dedicated broadband net connection.. In your
  opinion, which would be a better option to develop the server side
  program - Python or Java? Esp in terms of better (free) development
  tools and maintainability.. I just love python as a language but
  using Netbeans/Eclipse for java and the vast java libraries  (maybe
  with Jython) seems to be a tempting possibility off late..

 try django+postgresql. Django is the new python kid on the block.

Hmm.. It's new alright.. Just checked out the Django homepage.. It's
still in pre-release with no guarantee of backward compatibility and
the code only available through subversion repositories.. Scary!

I've used python on my projects before so I understand all the
advantages in terms of ease and clarity.. But what about Using Jython
from within Java? Seems like I'll get the best of both worlds.. Can
anyone having used Jython in a web development scenario give me some
idea about it's suitability?

Thanks

- AJ

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] best tools for web development

2005-11-04 Thread Kenneth Gonsalves
On Friday 04 Nov 2005 5:43 pm, Anupam Jain wrote:

 
  try django+postgresql. Django is the new python kid on the block.

 Hmm.. It's new alright.. Just checked out the Django homepage.. It's
 still in pre-release with no guarantee of backward compatibility and
 the code only available through subversion repositories.. Scary!

i have two production sites under django - and i am not worried, even 
though i have limited programming skills. You want open source - stick 
to pure scripting languages. (i have also gone through two major 
non-backward-compatible upgrades of django without scars).Django rocks 
- bigtime


-- 
regards
kg

http://www.livejournal.com/users/lawgon
tally ho! http://avsap.org.in
ಇಂಡ್ಲಿನಕ್ಸ வாழ்க!

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



[ilugd] ILUG-D activity in last 7 days

2005-11-04 Thread nkapoor
Fri 4-Nov-2005
ILUG-D activity in last 7 days:
=
New/recent events: 0   Total events:48
=
New Discussion forum postings: 5   Total postings: 747
-
1. Category: Desktop Linux   Author: Rohit 
Subject: Firewall (firestarter)
Date: Oct 28, 2005
Hi

I am using the firewall, firestarter, on Fedora Core 4. The problem is that I 
want the firewall to start minimized in the tray on atrtup for all users (so 
that I can know if I am attacked and by whom!). The firewall website at 
http://www.fs-security...

2. Category: Networking   Author: Rohit 
Subject: Cyberoam problem!
Date: Oct 28, 2005
My ISP (read cablewallah) uses the Cyberoam software to manage internet access. 
However I have observed that I can't access the LAN without logging on to my 
ISP's server first. Whats more, I can download from other subscribers on the 
LAN only at the speed...

3. Category: Job Openings   Author: Mukesh Bhanu
Subject: Launch my career in Linux
Date: Nov 02, 2005
Friends, I wish to launch my career in programming in linux environment. I felt 
my inclination towards programming only recently after leaving my previous job 
as Production Engineer. I have some knowledge of Shell programming (Bash, 
Tcsh), C and basics of...

4. Category: Desktop Linux   Author: Karambir Rohilla
Subject: RE:Fedora1.0
Date: Nov 03, 2005
dear ranjan

i am a font developer . I have aprox 400 font in all indian language. i have 
also developed opentype (UNICODE) font indian language

karambir
9313807014
delhi 110042...

5. Category: Job Openings   Author: Ravi Chamria
Subject: Linux and Open Source solutions at linux4india.com
Date: Nov 03, 2005
Hi,
  we are dedicated team of professionals working in Linux and Open Source 
Solutions. Be it be installation, customisation or development of open source 
solutions like Ecommerce, Content Management Systems (Portals), Forums, Image 
Galleries etc, we ar...

=
New News items: 2   Total items:194
-
1. Category: Job Openings   Author: Lakshmi Chirravuri
Subject: Very Urgent Requirement for Senior J2EE Team Leads(3+ years)-Multiple 
Openings
Date: Nov 04, 2005
ComCreation Technologies is a USA based ISO 9001 Certified IT Services Company. 
We have been in business for about Five years with our HQ in Dallas, TX. We 
have strong IT services practices in the areas of Bio-Informatics  Wireless. 
We are now expanding ...

2. Category: -News/Announcements   Author: Niraj Sahay
Subject: LINUX For You [Commercial]
Date: Oct 31, 2005
This communication aims to inform the Linux community about the information 
contained in the magazine, and we hope that it will be taken positively.

Dear Linux enthusiasts,

With the November issue of LINUX For You - Asia's only magazine on Linux and...

=
New comments:0Total comments:177
=
New downloads:0   Total downloads:83
=
New members:10   Total members:4585
-
1. Ashutosh Pradhan, Novice, India
2. Electron , Novice, India
3. Karambir Rohilla, Novice, new delhi, India
4. Kashyap sharma, Novice, punjab, India
5. Kuldeep sharma, User, m.p., India
6. Lakshmi Chirravuri, Novice, Karnataka, India
7. Rohit , Novice, India
8. S.Mahesh , Novice, Karnarataka, India
9. Shaji Joseph, Novice, India
10. Sunny ajmera, Novice, India
=
Send your suggestions, comments or feedback to admin_at_linux-delhi_dot_org

--
This email is brought to you by http://www.linux-delhi.org/ - India Linux Users 
Group - Delhi.
 

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] *nix Internals

2005-11-04 Thread Sanjeev \ghane\ Gupta
Abhijit Menon-Sen wrote:
 At 2005-10-24 12:40:06 +0530, [EMAIL PROTECTED] wrote:

 Can anybody suggest a good reading/ decent book for UNIX Internals?

 The Design of the Unix Operating System, Maurice J. Bach.

By far the best book I have read on the Unix System(s).  And I have read 
quite a few in 2 decades.

Please note that the book is dated, so do not use it to show off your 
knowledge of the Linux kernel.  You can still win quizzes, because the 
quiz-master is probably getting the questions from it, too :-)

--
Sanjeev ghane Gupta 



___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] [OT] Fwd: [cc-lessigletter] CC in Review: LawrenceLessig on How it All Began

2005-11-04 Thread Sanjeev \ghane\ Gupta
Linux Lingam wrote:
 newton did not have 'proprietory' rights over his laws and
 equations. he published them to share them.

No, he did not.  He was so worried about others, often Hooke, stealing his 
ideas it took the Royal Society nearly 30 years to convince him to publish 
his second volume to the Principia.  Notes to his first volume were 
published the year Hooke dies, despite being ready a decade earlier.

Newton also refused to publish his calculus (he caled it fluxion) openly, 
only hinting at it in solved answers to problems.  We know that he had 
worked out the basics by 1666 (he was solving problems for Halley which 
could only have been done with these tools), but he published the methods 
only in 1687.  By that time, Liebniz had published his methods, and Newton 
spent the next 30 years hounding Liebniz for stealing his idea.  Under 
pressure from its President, Newton, the Royal Society in 1714 declared that 
Liebniz had stolen Newton's work; and until 1820s refused to recognize 
foreign scientists.  There were rumours of an additional volume of the 
Principia, lost in Manuscript, and never published because Newton did not 
want to share the glory.

In short, Newton is a bad example to cite.

Even his quotation, If I have seen farther than others, it is because I 
have stood on the shoulders of giants is a dig at Hooke, who was a short 
man.

 even earlier, leonardo di
 vinci
 did not have proprietory rights over his inventions and genius.

da Vinci was so worried about stolen ideas, he used to write with mirror 
writing.  This seems stupid to us, used to typeface, but the reflection of 
a page in cursive script, with abbreviations, can be non-intutive.

--
Sanjeev ghane Gupta



___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] 17 plasma/lcd monitor recommendations

2005-11-04 Thread Sanjeev \ghane\ Gupta
Gora Mohanty wrote:
 --- Mithun Bhattacharya [EMAIL PROTECTED] wrote:
 [...]
 Also fast moving images dont render too well on a
 TFT unless you are ready to sell your kingdom for it
 :).
 
 Raj has a kingdom? Damn, I should have been nicer to
 him.

... and a daughter, half of whose hand he is willing to give ...

--
Sanjeev ghane Gupta


___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] Acers laptop ads

2005-11-04 Thread Sanjeev \ghane\ Gupta
Sandip Bhattacharya wrote:
 I wonder how many folks here have read the fine print in the latest
 of Acer's 
 Sub 40k notebook ads. They bundle Linux on them, and mention at the
 bottom 
 in small print, something like this:
 
 The linux that is preloaded is a free version and would have limited
 functionality until another operating system is installed.
 
 Is this another way for these hardware vendors to appease Microsoft

No

 while 
 trying to sell budget notebooks bundled with Linux?

Yes.

--
Sanjeev ghane Gupta


___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



[ilugd] (fwd) [SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file

2005-11-04 Thread Raj Mathur
[Please upgrade thttpd on all distributions -- Raju]

This is an RFC 1153 digest.
(1 message)
--

Message-Id: [EMAIL PROTECTED]
From: [EMAIL PROTECTED] (Martin Schulze)
Sender: [EMAIL PROTECTED]
To: debian-security-announce@lists.debian.org (Debian Security Announcements)
Cc: 
Subject: [Full-disclosure] [SECURITY] [DSA 883-1] New thttpd packages fix
insecure temporary file
Date: Fri, 4 Nov 2005 17:52:13 +0100 (CET)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

- --
Debian Security Advisory DSA 883-1 [EMAIL PROTECTED]
http://www.debian.org/security/ Martin Schulze
November 4th, 2005  http://www.debian.org/security/faq
- --

Package: thttpd
Vulnerability  : insecure temporary file
Problem type   : local
Debian-specific: no
CVE ID : CVE-2005-3124

Javier Fernández-Sanguino Peña from the Debian Security Audit team
discovered that the syslogtocern script from thttpd, a tiny webserver,
uses a temporary file insecurely, allowing a local attacker to craft a
symlink attack to overwrite arbitrary files.

For the old stable distribution (woody) this problem has been fixed in
version 2.21b-11.3.

For the stable distribution (sarge) this problem has been fixed in
version 2.23beta1-3sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 2.23beta1-4.

We recommend that you upgrade your thttpd package.


Upgrade Instructions
- 

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- 

  Source archives:

http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b-11.3.dsc
  Size/MD5 checksum:  545 ba3c0bb15f6212db97bcf6d6524d4780

http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b-11.3.diff.gz
  Size/MD5 checksum:12672 47c8093a645102ea2f328455195e763c

http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b.orig.tar.gz
  Size/MD5 checksum:   127157 9c1512664cf70c286331243ab622173e

  Alpha architecture:


http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b-11.3_alpha.deb
  Size/MD5 checksum:67624 465efe17c6bf662b1b191b91c8cd8491

http://security.debian.org/pool/updates/main/t/thttpd/thttpd-util_2.21b-11.3_alpha.deb
  Size/MD5 checksum:27940 3830272b2dae0993fa96b4bb014feb09

  ARM architecture:


http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b-11.3_arm.deb
  Size/MD5 checksum:54272 fd2de8fb819e11c5a0a91ad4546d3b07

http://security.debian.org/pool/updates/main/t/thttpd/thttpd-util_2.21b-11.3_arm.deb
  Size/MD5 checksum:23384 9a02e239a4d792547e088b2e7047d08a

  Intel IA-32 architecture:


http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b-11.3_i386.deb
  Size/MD5 checksum:51996 5c6c5f4bda6ecf89c095595ae7d47e0a

http://security.debian.org/pool/updates/main/t/thttpd/thttpd-util_2.21b-11.3_i386.deb
  Size/MD5 checksum:23732 b86b4669f89ea162f965430181004097

  Intel IA-64 architecture:


http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b-11.3_ia64.deb
  Size/MD5 checksum:78060 ae4c37cfeb4bb00aabe86fb53ac8d320

http://security.debian.org/pool/updates/main/t/thttpd/thttpd-util_2.21b-11.3_ia64.deb
  Size/MD5 checksum:29732 3f7102053a50f0c67edc8d566e3707e8

  HP Precision architecture:


http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b-11.3_hppa.deb
  Size/MD5 checksum:59244 1b007a6734c854b6a313e3a48c59b5d3

http://security.debian.org/pool/updates/main/t/thttpd/thttpd-util_2.21b-11.3_hppa.deb
  Size/MD5 checksum:25618 1c4087f8fa972c8ec9364fb422b1f399

  Motorola 680x0 architecture:


http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b-11.3_m68k.deb
  Size/MD5 checksum:49632 f1cc7d708bbcf9fc34fe5382b8370bd3

http://security.debian.org/pool/updates/main/t/thttpd/thttpd-util_2.21b-11.3_m68k.deb
  Size/MD5 checksum:23386 4b6af55203f640969e0ca8fadd3ebf7d

  Big endian MIPS architecture:


http://security.debian.org/pool/updates/main/t/thttpd/thttpd_2.21b-11.3_mips.deb
  Size/MD5 checksum:58302 e6c7222513bd7b96a09fb53f16447552

http://security.debian.org/pool/updates/main/t/thttpd/thttpd-util_2.21b-11.3_mips.deb
  Size/MD5 checksum:24670 

[ilugd] (fwd) [SECURITY] iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability

2005-11-04 Thread Raj Mathur
[Please upgrade ClamAV on all distributions.  Vendor packages should
be ready soon -- Raju]

This is an RFC 1153 digest.
(1 message)
--

Message-ID: [EMAIL PROTECTED]
From: iDEFENSE Labs [EMAIL PROTECTED]
Sender: [EMAIL PROTECTED]
To: bugtraq@securityfocus.com, [EMAIL PROTECTED],
full-disclosure@lists.grok.org.uk
Cc: 
Subject: [Full-disclosure] iDEFENSE Security Advisory 11.04.05: Clam
AntiVirus Cabinet-file handling Denial of Service Vulnerability
Date: Fri, 4 Nov 2005 18:16:13 -0500

Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability

iDEFENSE Security Advisory 11.04.05
http://www.idefense.com/application/poi/display?type=vulnerabilities
November 4, 2005

I. BACKGROUND

Clam AntiVirus is a GPL anti-virus toolkit for Unix.

II. DESCRIPTION

Remote exploitation of a design error in Clam AntiVirus ClamAV allows
attackers to cause a denial of service (DoS) condition.

The vulnerability specifically exists with the libmspack library, which
is included in ClamAV. The vulnerability can be found in the cabd_find
function within mspack/cabd.c:

for (offset = 0; offset  flen; offset += length) {
length = flen - offset;

[... read length from file ...]

for (p = buf[0], pend = buf[length]; p  pend; ) {
  switch (state) {
[ ... ]
case 19:
= header has been completely read, cablen has been read from bytes 8-11

  [...]

  /* likely cabinet found -- try reading it */
  cab = sys-alloc(sys, sizeof(struct mscabd_cabinet_p); = an
mscabd_cabinet_p entry will be allocated each time

  /* cabinet read correctly! */
  offset = caboff + cablen;
= if cablen (and caboff) == 0, offset will be equal to 0

  [...]

  /* restart search */
  [...]
  length = 0;
  p = pend;
  state = 0;
= if offset == 0, we will restart at the beginning of the file =
(because length == 0, so offset will still be zero in the next
  iteration)
  break;
  }
}
  }



If this function is called with a length value of zero, an infinite loop
occurs. The comments above explain the scenario.

III. ANALYSIS

Successful exploitation requires an attacker to send a specially
constructed CAB file through a mail gateway or personal anti-virus
client utilizing the ClamAV scanning engine. 

The infinite loop will cause the ClamAV software to use all available
processor resources, resulting in a denial of service or severe
degradation of system performance. Ultimately, the OOM handler will
terminate a task in order to alleviate the stress on the system. 

IV. DETECTION

iDEFENSE has confirmed this vulnerability on ClamAV 0.86.1. All previous
versions are suspected vulnerable to this issue. 

V. WORKAROUND

Archive file analysis can be disabled (--no-archive) but this can have
severe impacts on the virus detection functionality.

VI. VENDOR RESPONSE

The vendor has released clamav 0.87.1 to address this vulnerability. It
is available for download at:

 
http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?download

VII. CVE INFORMATION

A Mitre Corp. Common Vulnerabilities and Exposures (CVE) number has not
been assigned yet.

VIII. DISCLOSURE TIMELINE

10/07/2005  Initial vendor notification
10/12/2005  Initial vendor response
11/04/2005  Coordinated public disclosure

IX. CREDIT

The discoverer of this vulnerability wishes to remain anonymous.

Get paid for vulnerability research
http://www.idefense.com/poi/teams/vcp.jsp

Free tools, research and upcoming events http://labs.idefense.com

X. LEGAL NOTICES

Copyright (c) 2005 iDEFENSE, Inc.

Permission is granted for the redistribution of this alert
electronically. It may not be edited in any way without the express
written consent of iDEFENSE. If you wish to reprint the whole or any
part of this alert in any other medium other than electronically, please
email [EMAIL PROTECTED] for permission.

Disclaimer: The information in the advisory is believed to be accurate
at the time of publishing based on currently available information. Use
of the information constitutes acceptance for use in an AS IS condition.
There are no warranties with regard to this information. Neither the
author nor the publisher accepts any liability for any direct, indirect,
or consequential loss or damage arising from use of, or reliance on,
this information.
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

--

End of this Digest
**

-- 
Raj Mathur[EMAIL PROTECTED]  http://kandalaya.org/
   GPG: 78D4 FC67 367F 40E2 0DD5  0FEF C968 D0EF CC68 D17F
  It is the mind that moves

___
ilugd mailinglist -- 

Re: [ilugd] best tools for web development

2005-11-04 Thread Sandip Bhattacharya
I will bite.

On Friday, 4 Nov 2005 6:23 pm, Kenneth Gonsalves wrote:
 On Friday 04 Nov 2005 5:43 pm, Anupam Jain wrote:
   try django+postgresql. Django is the new python kid on the block.
 
  Hmm.. It's new alright.. Just checked out the Django homepage.. It's
  still in pre-release with no guarantee of backward compatibility and
  the code only available through subversion repositories.. Scary!

 i have two production sites under django - and i am not worried, even
 though i have limited programming skills. 

Well, it seems that you would not be worried. But if you are involved in any 
corporate deployments, the clients and the managers would be worrying. Will 
any organizations which want to use the web app to manage their internal 
accounting use such a software? I dont think so.

Maybe when you are running a non-critical web app, you can afford to be so 
short sighted.

 You want open source - stick 
 to pure scripting languages. (i have also gone through two major
 non-backward-compatible upgrades of django without scars).

You are using alpha software which is not even backward compatible among 
releases? That is reason enough to look elsewhere.


- Sandip

-- 
Sandip Bhattacharya  *Puroga Technologies   * [EMAIL PROTECTED]
Work: http://www.puroga.com  *   Home/Blog: http://www.sandipb.net/blog

PGP/GPG Signature: 51A4 6C57 4BC6 8C82 6A65 AE78 B1A1 2280 A129 0FF3

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/



Re: [ilugd] [OT] Fwd: [cc-lessigletter] CC in Review: LawrenceLessig on How it All Began

2005-11-04 Thread Linux Lingam
[snip]

sanjeev, thanks so much for these enlightening insights into newton and
leonardo. these insights are too remarkable and make me wonder, are these
the hallmarks of modern civilization, or just a particular civilization?

for instance, the chinese are known to have invented several things in their
civilization, you know the usual: gunpowder, sails, etc. what has been their
attitude towards knowledge they discover or inventions they make? what about
india, as in ancient india? i wonder what was the attitude towards knowledge
of ancient indian scientists, whether in mathematics, or ayurveda, or
whatever else? am trying to see this from a timeframe that precedes the
arrival of the British to india. I do know that Jagdish Chandra Bose, for
instance, refused to patent wireless, but that's one exception.

what about brazilian ethnic knowledge, or of red-indians, or whoever else?
what has been their attitudes towards knowledge and inventions?

niyam
___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/