Re: X11 exploit info
Regarding Dave's postings to misc@: I posted here about Dave's trollisms and recommended that he read page 17 of Absolute OpenBSD - Unix for the practical paranoid (By Michael Lucas - ISBN: 1886411999) That post I made, might have been a little naive, as I have just read the 'Acknowledgements' section. And LO! it turns out that Dave Feustel is mentioned on that very page. I apologise if this is already common knowledge among list users, but I'm not that well informed on particular individuals who are involved in the OpenBSD and similar 'movements'. However, it has raised my suspicions to a higher level. The book is copyrighted in 2003, long before I subscribed to this list and maybe even heard of OpenBSD really. Thing is, why would somebody who has assisted in the writing of this excellent book, be posting such troll-like pieces to this list? Maybe Dave, or somebody with better knowledge on these matters, would like to enlighten me on this? It just seems very strange to me. Regards, Craig M On Sat, 2006-02-11 at 06:03 -0500, Dave Feustel wrote: at http://www.hackinglinuxexposed.com/articles/ is a 3-part series on X-11 exploits which those who think they understand x11 security might wish to read and comment upon. I clearly don't understand x11 security so I have no comments, but I will read with great interest comments by anyone else. 05-Jul-2004: SSH Users beware: The hazards of X11 forwarding Logging into another machine can compromise your desktop... 08-Jun-2004: The ease of (ab)using X11, Part 2 Abusing X11 for fun and passwords. 13-May-2004: The ease of (ab)using X11, Part 1 X11 is the protocol that underlies your graphical desktop environment, and you need to be aware of its security model. Dave Feustel
Re: bash: delete key sends ~ instead of [del]
I just installed bash to test this. Then I created /etc/.inputrc with the contents: \e[3~: delete-char rebooted, got an xterm up, started bash and the delete key works. It produced a tilde, prior to the reboot. HTH. Regards, Craig On Sun, 2006-02-12 at 00:05 +0100, Martin Schrvder wrote: On 2006-02-11 23:37:31 +0100, Juan J. Martmnez wrote: Or look what says google: http://www.google.es/search?q=delete+key+bash I did. On 2/11/06, Martin Schrvder martin@ wrote: Hi, on my freshly installed 3.7 in bash the delete key sends an ~ instead of [del]. How can I fix this? Sorry if this is a FAQ, but Google et.al. don't allow searching for ~ :-( Yes... search for: delete key bash I did. Did you look at the results? They only discuss problems with delete and backspace. Did you find anything on ~? Best Martin
Re: bash: delete key sends ~ instead of [del]
CORRECTION I just installed bash to test this. Then I created ~/.inputrc with the contents: \e[3~: delete-char logged out of X, or log out if you are in console mode, and then your del key will work as required. HTH. Regards, CraigOn Sun, 2006-02-12 at 00:05 +0100, Martin Schrvder wrote: On 2006-02-11 23:37:31 +0100, Juan J. Martmnez wrote: Or look what says google: http://www.google.es/search?q=delete+key+bash I did. On 2/11/06, Martin Schrvder martin@ wrote: Hi, on my freshly installed 3.7 in bash the delete key sends an ~ instead of [del]. How can I fix this? Sorry if this is a FAQ, but Google et.al. don't allow searching for ~ :-( Yes... search for: delete key bash I did. Did you look at the results? They only discuss problems with delete and backspace. Did you find anything on ~? Best Martin
Re: bash: delete key sends ~ instead of [del]
On Sun, 2006-02-12 at 00:53 +0100, Martin Schrvder wrote: On 2006-02-11 23:36:11 +, Craig M wrote: I just installed bash to test this. Then I created /etc/.inputrc with the contents: \e[3~: delete-char rebooted, got an xterm up, started bash and the delete key works. It produced a tilde, prior to the reboot. ~/.inputrc does the trick here, /etc/.inputrc or /etc/inputrc is useless here. CORRECTION I just installed bash to test this. Then I created ~/.inputrc with the contents: \e[3~: delete-char logged out of X, or log out if you are in console mode, and then your del key will work as required. Thanks! I had testet it before, but only with bind -- it didn't work then. Btw: Why reboot? Yes, sorry about that. I got all excited at actually being able to provide a solution and went about it a little wrong. Reboot was not required, just needed to log out and back in, as far as I can tell. That will teach me to stay calm and not get carried away. ;) Best Martin Regards, Craig
Re: OT: wrt OpenBSD, what's a good laptop
I've been searching for a long time, for a usable laptop to dedicate to OpenBSD usage and after trawling the archives, it looks like IBM Thinkpads are a good bet for OpenBSD. I'm looking for something with wired network connectivity and I don't care for wireless. CPU speed, RAM and drive space aren't hugely important, but I would like to be able to run a basic X, if at all possible. It would primarily be to use whilst sat in bed at night, so being reasonably quiet is more important to most other considerations. My main question really, is does anybody know of a decent place to buy a used laptop for OpenBSD use, in the UK? Or does anybody on the list have one for sale? A reasonable little laptop would complete my list of hardware must haves for me, but I just can't find anything very suitable. Any advice would be greatly appreciated, Regards, Craig On Sun, 2006-01-15 at 14:08 -0600, Julesg wrote: I want aircard support of course (which lets out DELL and a few other manufactuer's.) So what's the best? Why? BTW: I suspect, but have zero affirming data, that SSH2 has been cracked. I had numerous security incidents on another laptop (not running Obsd,) so I don't know if the problem was Fbsd or SSH, though the Fbsd OS was re-installed several times and serurity oriented folks tightened down Fbsd for me (out of the box, it's a joke!) Now I'm getting into laptop's again and want to make the right choices! Which means Obsd first and foremost, so I ask: which laptop?? --jg
Re: OT: wrt OpenBSD, what's a good laptop
Sorry people. I should have stated that I'm after something really cheap, hence why I don't expect much power or features out of it. So I'd like a used laptop of say 300MHz or better with 64MB or better and wired networking. I don't like eBay, as I've had too many bad experiences with them and as a result haven't traded on there for over a year now. Thanks anyway. I'll check out MicroMart and see what that turns up. Regards, Craig On Thu, 2006-02-09 at 15:37 +, Craig M wrote: I've been searching for a long time, for a usable laptop to dedicate to OpenBSD usage and after trawling the archives, it looks like IBM Thinkpads are a good bet for OpenBSD. I'm looking for something with wired network connectivity and I don't care for wireless. CPU speed, RAM and drive space aren't hugely important, but I would like to be able to run a basic X, if at all possible. It would primarily be to use whilst sat in bed at night, so being reasonably quiet is more important to most other considerations. My main question really, is does anybody know of a decent place to buy a used laptop for OpenBSD use, in the UK? Or does anybody on the list have one for sale? A reasonable little laptop would complete my list of hardware must haves for me, but I just can't find anything very suitable. Any advice would be greatly appreciated, Regards, Craig On Sun, 2006-01-15 at 14:08 -0600, Julesg wrote: I want aircard support of course (which lets out DELL and a few other manufactuer's.) So what's the best? Why? BTW: I suspect, but have zero affirming data, that SSH2 has been cracked. I had numerous security incidents on another laptop (not running Obsd,) so I don't know if the problem was Fbsd or SSH, though the Fbsd OS was re-installed several times and serurity oriented folks tightened down Fbsd for me (out of the box, it's a joke!) Now I'm getting into laptop's again and want to make the right choices! Which means Obsd first and foremost, so I ask: which laptop?? --jg