Mersenne: Re: Security of prime95

2001-03-13 Thread Steinar H. Gunderson

On Tue, Mar 13, 2001 at 09:32:10PM -, Brian J. Beesley wrote:
Any idea where I could get a freeware SHA checksum utility?

I made one once, but I'm not sure where I have it nowadays. It should be
quite trivial scripting one in Perl using the SHA1 module from CPAN.

/* Steinar */
-- 
Homepage: http://members.xoom.com/sneeze/
_
Unsubscribe  list info -- http://www.scruz.net/~luke/signup.htm
Mersenne Prime FAQ  -- http://www.tasam.com/~lrwiman/FAQ-mers



Mersenne: Re: Security and Prime95/mprime

2000-03-03 Thread Steinar H. Gunderson

On Fri, Mar 03, 2000 at 04:46:30AM -0800, Paul Leyland wrote:
George is an honorable man, I'm sure, and has not knowingly put in any
loopholes.  I'm equally sure that he's not infallible and that he will
freely admit to this.  Do *you* want to bet the security of your site even
more than you are now doing?

Suggestion: Compile mprime from source code. Then you have it all there.
Sure, you won't get credit (since the security codes are zeroed out), but
you will still contribute to the project.

/* Steinar */
-- 
Homepage: http://members.xoom.com/sneeze/
_
Unsubscribe  list info -- http://www.scruz.net/~luke/signup.htm
Mersenne Prime FAQ  -- http://www.tasam.com/~lrwiman/FAQ-mers



Mersenne: Re: Security and Prime95/mprime

2000-03-02 Thread Steinar H. Gunderson

On Thu, Mar 02, 2000 at 02:01:24PM -0500, St. Dee wrote:
Am I creating any security risks by running mprime on the firewall box?

You shouldn't, since mprime doesn't deal with server sockets (only the
occasional HTTP traffic to PrimeNet) at all. The only problem I can think
of, is that it eats a chunk of your RAM, so a DoS attack would probably
be slightly easier (at least if somebody can connect 1 times to your
FTP socket, and inetd fires up a new ftpd dæmon for every new socket).

I run it on a 486sx/16 (24MB RAM, though) just fine, and that machine
serves 3 proxy requests (HTTP) a day :-)

/* Steinar */
-- 
Homepage: http://members.xoom.com/sneeze/
_
Unsubscribe  list info -- http://www.scruz.net/~luke/signup.htm
Mersenne Prime FAQ  -- http://www.tasam.com/~lrwiman/FAQ-mers