Re: X11 exploit info

2006-02-13 Thread Craig M
Regarding Dave's postings to misc@:
I posted here about Dave's trollisms and recommended that he read 
page 17 of Absolute OpenBSD - Unix for the practical paranoid 
(By Michael Lucas - ISBN: 1886411999)

That post I made, might have been a little naive, as I have just 
read the 'Acknowledgements' section. And LO! it turns out that 
Dave Feustel is mentioned on that very page. I apologise if this is 
already common knowledge among list users, but I'm not that well 
informed on particular individuals who are involved in the OpenBSD 
and similar 'movements'.

However, it has raised my suspicions to a higher level. The book is 
copyrighted in 2003, long before I subscribed to this list and maybe 
even heard of OpenBSD really. Thing is, why would somebody who has 
assisted in the writing of this excellent book, be posting such 
troll-like pieces to this list?

Maybe Dave, or somebody with better knowledge on these matters, would 
like to enlighten me on this? It just seems very strange to me.

Regards,

Craig M

On Sat, 2006-02-11 at 06:03 -0500, Dave Feustel wrote:
 at http://www.hackinglinuxexposed.com/articles/ 
 is a 3-part series on X-11 exploits which those who
 think they understand x11 security might wish to
 read and comment upon. I clearly don't understand 
 x11 security so I have no comments, but I will read
 with great interest comments by anyone else.
 
 05-Jul-2004: SSH Users beware: The hazards of X11 forwarding
  Logging into another machine can compromise your desktop...
 
 08-Jun-2004: The ease of (ab)using X11, Part 2
  Abusing X11 for fun and passwords.
 
 13-May-2004: The ease of (ab)using X11, Part 1
  X11 is the protocol that underlies your graphical desktop environment, and 
 you need to be aware of its security model.
 
 Dave Feustel



Re: bash: delete key sends ~ instead of [del]

2006-02-11 Thread Craig M
I just installed bash to test this.
Then I created /etc/.inputrc with the contents:
\e[3~: delete-char
rebooted, got an xterm up, started bash and the delete key works.
It produced a tilde, prior to the reboot.

HTH.

Regards,

Craig

On Sun, 2006-02-12 at 00:05 +0100, Martin Schrvder wrote:
 On 2006-02-11 23:37:31 +0100, Juan J. Martmnez wrote:
  Or look what says google:
  http://www.google.es/search?q=delete+key+bash
 
 I did.
 
   On 2/11/06, Martin Schrvder martin@ wrote:
Hi,
on my freshly installed 3.7 in bash the delete key sends an ~
instead of [del]. How can I fix this?
   
Sorry if this is a FAQ, but Google et.al. don't allow searching
for ~ :-(
  
  Yes... search for: delete key bash
 
 I did. Did you look at the results? They only discuss problems
 with delete and backspace. Did you find anything on ~?
 
 Best
 Martin



Re: bash: delete key sends ~ instead of [del]

2006-02-11 Thread Craig M
CORRECTION

I just installed bash to test this.
Then I created ~/.inputrc with the contents:
\e[3~: delete-char
logged out of X, or log out if you are in console mode, and then 
your del key will work as required.

HTH.

Regards,

CraigOn Sun, 2006-02-12 at 00:05 +0100, Martin Schrvder wrote:
 On 2006-02-11 23:37:31 +0100, Juan J. Martmnez wrote:
  Or look what says google:
  http://www.google.es/search?q=delete+key+bash
 
 I did.
 
   On 2/11/06, Martin Schrvder martin@ wrote:
Hi,
on my freshly installed 3.7 in bash the delete key sends an ~
instead of [del]. How can I fix this?
   
Sorry if this is a FAQ, but Google et.al. don't allow searching
for ~ :-(
  
  Yes... search for: delete key bash
 
 I did. Did you look at the results? They only discuss problems
 with delete and backspace. Did you find anything on ~?
 
 Best
 Martin



Re: bash: delete key sends ~ instead of [del]

2006-02-11 Thread Craig M
On Sun, 2006-02-12 at 00:53 +0100, Martin Schrvder wrote:
 On 2006-02-11 23:36:11 +, Craig M wrote:
  I just installed bash to test this.
  Then I created /etc/.inputrc with the contents:
  \e[3~: delete-char
  rebooted, got an xterm up, started bash and the delete key works.
  It produced a tilde, prior to the reboot.
 
 ~/.inputrc does the trick here, /etc/.inputrc or /etc/inputrc is
 useless here. 
 
CORRECTION

I just installed bash to test this.
Then I created ~/.inputrc with the contents:
\e[3~: delete-char
logged out of X, or log out if you are in console mode, and then 
your del key will work as required.

 Thanks!
 
 I had testet it before, but only with bind -- it didn't work
 then.
 
 Btw: Why reboot?
 
Yes, sorry about that. I got all excited at actually being able to 
provide a solution and went about it a little wrong. Reboot was not 
required, just needed to log out and back in, as far as I can tell. 
That will teach me to stay calm and not get carried away. ;) 
 Best
 Martin

Regards,

Craig



Re: OT: wrt OpenBSD, what's a good laptop

2006-02-09 Thread Craig M
I've been searching for a long time, for a usable laptop to dedicate to
OpenBSD usage and after trawling the archives, it looks like IBM
Thinkpads are a good bet for OpenBSD. I'm looking for something with
wired network connectivity and I don't care for wireless. CPU speed, RAM
and drive space aren't hugely important, but I would like to be able to
run a basic X, if at all possible. It would primarily be to use whilst
sat in bed at night, so being reasonably quiet is more important to most
other considerations.

My main question really, is does anybody know of a decent place to buy a
used laptop for OpenBSD use, in the UK? Or does anybody on the list have
one for sale? A reasonable little laptop would complete my list of
hardware must haves for me, but I just can't find anything very
suitable.

Any advice would be greatly appreciated,

Regards,
Craig

On Sun, 2006-01-15 at 14:08 -0600, Julesg wrote:
 I want aircard support of course (which lets out DELL and a few other 
 manufactuer's.)
 
 So what's the best?  Why?
 
 BTW:  I suspect, but have zero affirming data, that SSH2 has been cracked.  I 
 had numerous security incidents on another laptop (not running Obsd,) so I 
 don't know if the problem was Fbsd or SSH, though the Fbsd OS was 
 re-installed several times and serurity oriented folks tightened down Fbsd 
 for me (out of the box, it's a joke!)
 
 Now I'm getting into laptop's again and want to make the right choices!  
 Which means Obsd first and foremost, so I ask:  which laptop??
 
 --jg



Re: OT: wrt OpenBSD, what's a good laptop

2006-02-09 Thread Craig M
Sorry people.

I should have stated that I'm after something really cheap, hence why I
don't expect much power or features out of it. So I'd like a used laptop
of say 300MHz or better with 64MB or better and wired networking.

I don't like eBay, as I've had too many bad experiences with them and as
a result haven't traded on there for over a year now.

Thanks anyway. I'll check out MicroMart and see what that turns up.

Regards,

Craig

On Thu, 2006-02-09 at 15:37 +, Craig M wrote:
 I've been searching for a long time, for a usable laptop to dedicate to
 OpenBSD usage and after trawling the archives, it looks like IBM
 Thinkpads are a good bet for OpenBSD. I'm looking for something with
 wired network connectivity and I don't care for wireless. CPU speed, RAM
 and drive space aren't hugely important, but I would like to be able to
 run a basic X, if at all possible. It would primarily be to use whilst
 sat in bed at night, so being reasonably quiet is more important to most
 other considerations.
 
 My main question really, is does anybody know of a decent place to buy a
 used laptop for OpenBSD use, in the UK? Or does anybody on the list have
 one for sale? A reasonable little laptop would complete my list of
 hardware must haves for me, but I just can't find anything very
 suitable.
 
 Any advice would be greatly appreciated,
 
 Regards,
 Craig
 
 On Sun, 2006-01-15 at 14:08 -0600, Julesg wrote:
  I want aircard support of course (which lets out DELL and a few other 
  manufactuer's.)
  
  So what's the best?  Why?
  
  BTW:  I suspect, but have zero affirming data, that SSH2 has been cracked.  
  I had numerous security incidents on another laptop (not running Obsd,) so 
  I don't know if the problem was Fbsd or SSH, though the Fbsd OS was 
  re-installed several times and serurity oriented folks tightened down Fbsd 
  for me (out of the box, it's a joke!)
  
  Now I'm getting into laptop's again and want to make the right choices!  
  Which means Obsd first and foremost, so I ask:  which laptop??
  
  --jg