Encryption and Distro Hopping
Debian etch comes with lvm/luks in the installer. I have looked at Arch Linuxs information about preparing the hdd first by writing random data to it THEN installing an OS. It makes it harder to read. Encryption is something I'm concerned about right now and if Lenny supported my hardware then I might give it another go. In the mean time I use the kernel option FUSE and ENCFS which basically creates a hidden directory that the file names and contents are encrypted by various methods. I think Blowfish is the default. Works great you just have to remember to umount the encfs first before making backups or the directory that is used to unencrypt is in the open. I looked at the Truecyrpt site but they only have *bunt* deb and not Debian deb so with entrusting my data to being scrambled I don't want to loose it with their naming conventions and other adjustments they make to debs. I guess I could compile the source for it if needed. --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: setting variables in ubuntu 7.10
On Fri, Feb 22, 2008 at 7:20 AM, Matt Graham <[EMAIL PROTECTED]> wrote: > From: "Kristian Erik Hermansen" <[EMAIL PROTECTED]> > > > On Thu, Feb 21, 2008 at 10:10 PM, Bob Holtzman <[EMAIL PROTECTED]> wrote: > > >> I can use "export and run my > >> news reader immediately after with no problem. As soon as I exit the > >> reader (slrn) and close the xterm window the server name is lost. > > >> In RH the variables are in ~/.bashrc but ubuntu doesn't have this file. > >> There is a ~/.profile file that appears to be the equivalent. Is this > >> typical of debian based distros? > > > Just create it... > > http://www.tux.org/~mayer/linux/book/node217.html > > .profile should be sourced by bash when it's invoked as a login shell. > .bashrc should be sourced by bash when it's invoked as a non-login shell. > In general, people want the same behavior in both login and non-login > bash, so often .profile is one line that just tests whether .bashrc > exists and sources it if it does. I don't know why they did something > different in Ubuntu. For info on what bash does at startup and how, > "man bash" and grep for INVOCATION. HTH, > > Just to be clear to other readers, the only thing different in ubuntu (and I assume debian) is that .profile is named .bash_profile. Presumably someone thought it made more sense especially if .profile was going to source .bashrc -- Man is the only animal that laughs and weeps, for he is the only animal that is struck with the difference between what things are and what they ought to be. - William Hazlitt --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
OT: Computers for Sale
All, I have 2 desktop computers for sale. Dell Optiplex GX150 1.2 Ghz Pentium 384Mb ram 20Gb Hard disk 10/100 Ethernet CD-ROM Floppy Drive Keybrd and mouse included Ghz PIII 256Mb ram 20Gb hard disk CD-ROM drive 10/100 Ethernet keyboard & mouse included Both these computers run very quiet and would make excellent routers/firewalls. They would also make great kid computers. Asking $45 each or $75 for both. Or make me an offer, I want to get rid of these things. I'll be around most of the weekend. Contact me by phone would be best. Peter 480-246-7014 --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: here come the marketroids: MSFT Gives Open Source A Hug
On Fri, 2008-02-22 at 14:42 -0700, [EMAIL PROTECTED] wrote: > > [quote] > Microsoft is providing a covenant not to sue open source developers for > development or non-commercial distribution of implementations of these > protocols. These developers will be able to use the documentation for free to > develop products. Companies that engage in commercial distribution of these > protocol implementations will be able to obtain a patent license from > Microsoft, as will enterprises that obtain these implementations from a > distributor that does not have such a patent license. > [/quote] > > That's some pretty strong language. So we develop Mono per M$'s API docs, > and even if the docs are labeled "patented" as long as Mono remains free > (beer) no one gets sued? yeah, and I've got some condo's in Irvine I'd love to sell you... Craig --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: here come the marketroids: MSFT Gives Open Source A Hug
[quote] Microsoft is providing a covenant not to sue open source developers for development or non-commercial distribution of implementations of these protocols. These developers will be able to use the documentation for free to develop products. Companies that engage in commercial distribution of these protocol implementations will be able to obtain a patent license from Microsoft, as will enterprises that obtain these implementations from a distributor that does not have such a patent license. [/quote] That's some pretty strong language. So we develop Mono per M$'s API docs, and even if the docs are labeled "patented" as long as Mono remains free (beer) no one gets sued? --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: Steve Ballmer said: "Our goal is to promote greater interoperability....."
On Thu, 2008-02-21 at 12:55 -0700, jordi laforge wrote: > Anyone seen this? > > > Microsoft set to open up software: > > http://news.bbc.co.uk/2/hi/business/7257411.stm considering that the OOXML vote is just 3 days off, it does seem a bit suspect...and the article had no mention of that minor detail - journalists curious sidebar shows in the above link...Microsoft in Court - Latest News... Microsoft loses anti-trust appeal Decision looms in EU row $1.5bn damages order dropped Microsoft in EU Vista stand-off Microsoft EU fines 'inevitable' Brussels poised to fine Microsoft Microsoft's EU appeal case ends Microsoft fights to keep secrets EU ruling on Microsoft 'flawed' New blow for Microsoft in EU row not very flattering... note the next link - the first paragraph "One the eve of a key vote"... http://www.informationweek.com/windows/showArticle.jhtml?articleID=206801223 then of course, there are the fervent anti-Microsoft, anti-Novell perspectives... http://boycottnovell.com/2008/02/15/mono-contamination-in-ubuntu/ I think Microsoft's new found embrace of open source software is lost on them (and me too). Craig --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: Sprint Broadband and VPN's
On Fri, Feb 22, 2008 at 12:55 AM, Wayne Davis <[EMAIL PROTECTED]> wrote: > Has anyone here on the list successfully created a VPN between a Sprint > Aircard on a portable and their cox network home IP? I use a Sprint Merlin 620p on my linux laptop to connect to my work VPN using IPSec. Good luck! Tony --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: Encryption and Distro Hopping
Down with Fedora! Long live Debian! Release the Vogon Hordes! Errj/k. All hail r33nix of choice. On Fri, Feb 22, 2008 at 10:04 AM, Marc <[EMAIL PROTECTED]> wrote: > When I moved into an apartment last October, I looked around for distros > that did total drive encryption (basically Debian and Ubuntu). I read > the article, but since I power off my machine when not using it, I don't > feel too worried about someone cracking it. > > I installed Gutsy on the machine, but haven't really been too happy with > it. I seem to encounter my share of bugs in it. I guess I'm a little > bitter about my TV server at the house that won't connect to an > externally mounted NTFS partition. I found a bug report and it > basically said it would be fixed in the next release. That just sounds > wrong. > > Anyway, I see that Fedora 9 is coming out and it does offer full drive > encryption. I haven't used Fedora in years and was curious if people > have any comments about it? > > I really like Mandriva as it is quick, easy to set up, but they don't > offer drive encryption yet. They have a bug report, but nothing will > happen in the near future. > > I'm not trying to start a flame war or anything, just want some ideas. > > My requirements for the distro. > > 1. Drive encryption - must. To backup my important files I use a thumb > drive encrypted with Truecrypt. > 2. Truecrypt - must. With the release of version 5, it looks like this > is easier than ever to use under Linux. > 3. MythTV - must. Since I'm running MythDora, I assume this wouldn't > be difficult. > 4. ProjectX/Java/Avidemux - To clean up and burn recorded shows that I > like. > > I have the Fedora 9 live CD, but several of the extra packages aren't > ready yet. I'm just curious how people feel about existing Fedora > computers. > > Thanks. I hope I don't start anything horrible. > --- > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us > To subscribe, unsubscribe, or to change your mail settings: > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss > -- "A man is defined by the questions that he asks; and the way he goes about finding the answers to those questions is the way he goes through life." --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Encryption and Distro Hopping
When I moved into an apartment last October, I looked around for distros that did total drive encryption (basically Debian and Ubuntu). I read the article, but since I power off my machine when not using it, I don't feel too worried about someone cracking it. I installed Gutsy on the machine, but haven't really been too happy with it. I seem to encounter my share of bugs in it. I guess I'm a little bitter about my TV server at the house that won't connect to an externally mounted NTFS partition. I found a bug report and it basically said it would be fixed in the next release. That just sounds wrong. Anyway, I see that Fedora 9 is coming out and it does offer full drive encryption. I haven't used Fedora in years and was curious if people have any comments about it? I really like Mandriva as it is quick, easy to set up, but they don't offer drive encryption yet. They have a bug report, but nothing will happen in the near future. I'm not trying to start a flame war or anything, just want some ideas. My requirements for the distro. 1. Drive encryption - must. To backup my important files I use a thumb drive encrypted with Truecrypt. 2. Truecrypt - must. With the release of version 5, it looks like this is easier than ever to use under Linux. 3. MythTV - must. Since I'm running MythDora, I assume this wouldn't be difficult. 4. ProjectX/Java/Avidemux - To clean up and burn recorded shows that I like. I have the Fedora 9 live CD, but several of the extra packages aren't ready yet. I'm just curious how people feel about existing Fedora computers. Thanks. I hope I don't start anything horrible. --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
[Reminder] Installfest @ Sat Feb 23 10am - 4pm (plug-discuss@lists.plug.phoenix.az.us)
plug-discuss@lists.plug.phoenix.az.us, this is a reminder for Title: Installfest Time: Sat Feb 23 10am - 4pm (Timezone: Mountain Time - Arizona) Where: University of Advancing Technology loc: 2625 W Baseline Tempe, AZ 85283 Calendar: plug-discuss@lists.plug.phoenix.az.us Description: The Phoenix Linux User's Group and would like to invite you to our monthly Linux Installfest. Bring your PC, Mac, or other for one-on-one help to get your machine running Linux, and to learn how to use Linux. RSVP is strongly encouraged to ensure the right volunteers will be available for your needs, but not required. Please RSVP to [EMAIL PROTECTED] with the following information: Your computer with specs and equipment you wish to run, and what you hope to accomplish and learn by installing Linux. Installations take over two hours, please arrive within the first few hours. PLUG: http://plug.phoenix.az.us/ Checklist: o Computer with all cards, like network card or modem. o Monitor, keyboard, mouse. o Other/optional: printer, scanner, speakers, joystick or gamepad, ELF radio antenna. o An open mind! You can view this event at http://www.google.com/calendar/event?action=VIEW&eid=YWU3aTNmdTRkaW9qN2F0NTRzaHFqNTFsaW9fMjAwODAyMjNUMTcwMDAwWiBwbHVnLWRpc2N1c3NAbGlzdHMucGx1Zy5waG9lbml4LmF6LnVz&tok=NTIjYjA0MmpnMnVrYmJob21vY3U3c2w2bjFobWtAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbTczNGE3ZTg2NGZkYmIzNjE3NTZiNWYxZGJkZjZhNDQzNDc3YzJlZTc&ctz=America%2FPhoenix&hl=en You are receiving this courtesy email at the account plug-discuss@lists.plug.phoenix.az.us because you are an attendee of this event. To stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google Calendar account at http://www.google.com/calendar/ and control your notification settings for your entire calendar. --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: Disk encryption may not be secure enough, new research finds
Essentially, if you are more concerned with someone who steals your laptop having a can of CO2 in hand and a similar laptop with VERY specialized tools installed on it nearby...Well, I think you have much bigger problems at that point than worrying if the NSA sees that you do indeed enjoy the occasional anime porn and maybe you cheated a little on your taxes last year. I'm talking about the "you're about to be pushed into a van when it rolls up next to you" variety. These attacks are completely impractical against a moderately hardened linux laptop. 1) Shutdown your laptop after every use 2) Strip the heads of the screws over internal components (This should frustrate such an attacker long enough to let your memory fade) 3) Use an OpenPGP smartcard for crypto key storage ( http://www.g10code.com/p-card.html) Share and Enjoy On Fri, Feb 22, 2008 at 6:55 AM, Joshua Zeidner <[EMAIL PROTECTED]> wrote: > On Thu, Feb 21, 2008 at 11:34 PM, Ted Gould <[EMAIL PROTECTED]> wrote: > > On Thu, 2008-02-21 at 15:48 -0700, Stephen P Rufle wrote: > > > http://www.news.com/8301-13578_3-9876060-38.html?tag=nefd.lede > > > > > > In Linux would an effective counter to this type of attack be > scrabbled > > > the RAM on shutdown? I also am not sure if the people that steal > laptops > > > would have the skills to do what the researchers are doing. > > > > No, because when shutting down there is no issue. The concern here is > > suspend and hibernate. If you are very worried about security, > > hibernate is probably not a great idea. Suspend, unless you're keeping > > something from the NSA I wouldn't worry too much. It's kinda like GPG > > keys over a couple thousand bits today, sure the NSA can probably crack > > them if they wanted, but are YOU important enough to fill out all that > > paperwork? > > > > looks like you're trying to prompt another telecom immunity > discussion... :) > > - http://www.joshuazeidner.com/ > --- > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us > To subscribe, unsubscribe, or to change your mail settings: > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss > -- "A man is defined by the questions that he asks; and the way he goes about finding the answers to those questions is the way he goes through life." --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: Sprint Broadband and VPN's
Uh...that tech is full of it. I have used VPN with various sprint data network offerings for years. Not only does it work, I'm pretty sure its *supported*. Why else would companies pay for Sprint Wireless dedicated data cards? On a different note: I prefer to use a combination of: 1) GrandCentral phone number 2) Gizmo SIP "Land Line" 3) Sprint Treo 755p 4) Unlimited Tethered Data Package (EvDO) With this setup, I can sit on my laptop online and receive phone calls and work via my VPN. Works great! Reasons I find this setup superior: 1) Nothing to stick in/out of my laptop 2) Only 1 device to carry 3) Treo's are sweet (I watch my DVD's and MythTV via TCPMP and MythStreamTV, plus SSH client, always on IM, and of course there's Palm's very mature PDA features) 4) Callers only ever see/use the one GrandCentral phone number which is also very convenient. I am using a hardware appliance (Juniper) on one end and OpenVPN on the other. As I explained to Shawn in an earlier post this week, I do the tethering via bluetooth. I'd recommend my setup or finding a competent tech. On Fri, Feb 22, 2008 at 12:55 AM, Wayne Davis <[EMAIL PROTECTED]> wrote: > Has anyone here on the list successfully created a VPN between a Sprint > Aircard on a portable and their cox network home IP? > > I called a Sprintard and he told me they do not support it. When asked > specifically if it was that the system is incapable or if they simple do > not provide customer support for the steps, he told me the SYSTEM will > not support it. > > A definite deal-killer for me. :'( > > In the event he was in fact correct, Any alternates? > --- > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us > To subscribe, unsubscribe, or to change your mail settings: > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss > -- "A man is defined by the questions that he asks; and the way he goes about finding the answers to those questions is the way he goes through life." --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: here come the marketroids: MSFT Gives Open Source A Hug
With Microsoft's track record and budget for lawyers, a high degree of suspicion is more than reasonable. OTOH I would think that any insight on the inside of M$ software that will not get you dragged into court should be welcomed. It might make it more difficult to claim hands off if you write code to accomplish the same task. There are some things that are claimed as patents that should not be allowed. There are only so many ways to add two and two that have not already been done, are obvious and part of prior knowledge, yet I have a recollection that someone applied for a patent on the procedure. Harold On Thu, 2008-02-21 at 11:18 -0700, Joshua Zeidner wrote: > "Specifically, Microsoft is implementing four new interoperability > principles and corresponding actions across its high-volume business > products: (1) ensuring open connections; (2) promoting data > portability; (3) enhancing support for industry standards; and (4) > fostering more open engagement with customers and the industry, > including open source communities." > > http://joshuazeidner-news.blogspot.com/2008/02/here-come-marketroids-msft-gives-open.html > > -jmz > > --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: setting variables in ubuntu 7.10
From: "Kristian Erik Hermansen" <[EMAIL PROTECTED]> > On Thu, Feb 21, 2008 at 10:10 PM, Bob Holtzman <[EMAIL PROTECTED]> wrote: >> I can use "export and run my >> news reader immediately after with no problem. As soon as I exit the >> reader (slrn) and close the xterm window the server name is lost. >> In RH the variables are in ~/.bashrc but ubuntu doesn't have this file. >> There is a ~/.profile file that appears to be the equivalent. Is this >> typical of debian based distros? > Just create it... > http://www.tux.org/~mayer/linux/book/node217.html .profile should be sourced by bash when it's invoked as a login shell. .bashrc should be sourced by bash when it's invoked as a non-login shell. In general, people want the same behavior in both login and non-login bash, so often .profile is one line that just tests whether .bashrc exists and sources it if it does. I don't know why they did something different in Ubuntu. For info on what bash does at startup and how, "man bash" and grep for INVOCATION. HTH, --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
Re: Disk encryption may not be secure enough, new research finds
On Thu, Feb 21, 2008 at 11:34 PM, Ted Gould <[EMAIL PROTECTED]> wrote: > On Thu, 2008-02-21 at 15:48 -0700, Stephen P Rufle wrote: > > http://www.news.com/8301-13578_3-9876060-38.html?tag=nefd.lede > > > > In Linux would an effective counter to this type of attack be scrabbled > > the RAM on shutdown? I also am not sure if the people that steal laptops > > would have the skills to do what the researchers are doing. > > No, because when shutting down there is no issue. The concern here is > suspend and hibernate. If you are very worried about security, > hibernate is probably not a great idea. Suspend, unless you're keeping > something from the NSA I wouldn't worry too much. It's kinda like GPG > keys over a couple thousand bits today, sure the NSA can probably crack > them if they wanted, but are YOU important enough to fill out all that > paperwork? > looks like you're trying to prompt another telecom immunity discussion... :) - http://www.joshuazeidner.com/ --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
