Re: [SLUG] More on Allchin's comments about open source
Stuart Cooper wrote: 1+2+3 = Microsoft Linux(TM): a non-GPL non-free proprietary derived work featuring embrace and extend specials for the Intel platform. The education campaign can mention that MacOS X did it with BSD software. You heard it here first. Hmmm ... has there ever been a test case regarding the GPL? If legal action is required, who is the plaintiff? The author of the GPL'd software? How would that author take on a behemoth like MS in the courts? How would the courts view the GPL? Hopefully, copyright law ultimately protects the copyright owner according to the licence he or she has published alongside their work of art. "Starting Java" - the two most feared words on the Internet. "Shutting down NT" - the three most welcome words on the Internet (( even if the process does take fourteen hours )) Ops! Does that mean B-E-E_E_E_E_E_E_E_E_E_E_E_E_E_E-E-E-R? -- Rick Welykochy || Praxis Services Pty Limited "We don't do VB around here. Nor do we drink it." -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Re: Slug M 0.8
My problem is I can't *send* mail using it which worked with 0.7. I can read my Imap mail just fine, but it refuses to send a message. Sure it lets me fill in all the data but when I send it it comes back with a dialog error message send failed. Even changed my outgoing smtp server but no luck, and no useful error on the terminal window, I'm using mozilla 0.8 for mail and have had no problems. If Ximian's Evolution works out then I may switch to that. Trouble is with Evoltion 0.7 and 0.8 I have never been able to play with it.I've always had god awful trouble just getting the additional packages to play nice with each other and have given up in frustration. Shaun -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] FW: [ISN] SSH remote root exploit was released
FYI, upgrade/patch now if you haven't already.
Cheers,
Marty
-Original Message-
From: InfoSec News [SMTP:[EMAIL PROTECTED]]
Sent: Wednesday, February 21, 2001 8:34 PM
To: [EMAIL PROTECTED]
Subject: [ISN] SSH remote root exploit was released
-- Forwarded message --
Date: Tue, 20 Feb 2001 11:48:39 -0800 (PST)
From: Tom Perrine [EMAIL PROTECTED]
To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], Pat Wilson [EMAIL PROTECTED],
Brian Kantor [EMAIL PROTECTED]
Subject: SSH remote root exploit was released
-BEGIN PGP SIGNED MESSAGE-
A claimed exploit for the long-rumored SSHD remote root exploit was
released on BUGTRAQ about an hour ago. This is the bug in deattack.c
that allowed a 16-bit numeric overflow :-) (Nobody could do anything
with 16 bits, could they? :-( )
There is followup dicussion that seems to indicate that this is a real
exploit.
This was originally reported through various channels about 6-7 Feb,
and showed up on BUGTRAQ 8 Feb.
There is a claim that Earthlink was "seriously compromised", possibly
via this exploit. See http://www.cotse.com/2152001.html for details
(This was reported on ISN this morning.)
Try this URL for the BUGTRAQ summary:
http://www.securityfocus.com/frames/?content=/vdb/bottom.html%3Fvid%3D2347
BUGTRAQ claims that all these are vulnerable:
OpenSSH OpenSSH 2.2
OpenSSH OpenSSH 2.1.1
OpenSSH OpenSSH 2.1
OpenSSH OpenSSH 1.2.3
OpenSSH OpenSSH 1.2.2
SSH Communications SSH 1.2.31
SSH Communications SSH 1.2.30
SSH Communications SSH 1.2.29
SSH Communications SSH 1.2.28
SSH Communications SSH 1.2.27
SSH Communications SSH 1.2.26
SSH Communications SSH 1.2.25
SSH Communications SSH 1.2.24
For SSH-1.2.27, the patch is in deattack.c:
*** deattack.c.orig Wed Feb 14 15:59:25 2001
- --- deattack.cWed Feb 14 15:59:45 2001
***
*** 79,85
detect_attack(unsigned char *buf, word32 len, unsigned char *IV)
{
static word16 *h = (word16 *) NULL;
! static word16 n = HASH_MINSIZE / HASH_ENTRYSIZE;
register word32 i, j;
word32 l;
register unsigned char *c;
- --- 79,85
detect_attack(unsigned char *buf, word32 len, unsigned char *IV)
{
static word16 *h = (word16 *) NULL;
! static word32 n = HASH_MINSIZE / HASH_ENTRYSIZE;
register word32 i, j;
word32 l;
register unsigned char *c;
Your mileage may vary. For repairs/workarounds other versions of SSH,
check the BUGTRAQ notice.
"Patch early, patch often."
- --tep
- --
Tom E. Perrine ([EMAIL PROTECTED]) | San Diego Supercomputer Center
http://www.sdsc.edu/~tep/ | Voice: +1.858.534.5000
"Libertarianism is what your mom taught you: 'Behave yourself
and don't hit your sister."' - Kenneth Bisson of Angola, Ind.
-BEGIN PGP SIGNATURE-
Version: 2.6.2
Comment: Processed by Mailcrypt 3.5.4, an Emacs/PGP interface
iQCVAwUBOpLJ/BTSxpWcaAFRAQGBxAQAjpA2Tn/eu+ssKPwSoEIk44KBmBfHMGYj
Ka6oFafJglVZhGmZ0O/6foepzEoREf6yEl5tOaGj/Kf8aLHcuBTSzkevQHGfGaZh
941Da0WT3XSAS8Qk6F0jTxxOD2bG/3bPUGfIxMkQpkJmN/DXxWOd0G+T9dzl1tGB
e5F4Vo5/eZA=
=5n69
-END PGP SIGNATURE-
---
The above message comes from the sdriw-announcements mailing list.
To stop receiving these mailings, send email to [EMAIL PROTECTED]
with the line "unsubscribe sdriw-announcements" as the first line
of the message.
---
ISN is hosted by SecurityFocus.com
---
To unsubscribe email [EMAIL PROTECTED] with a message body of
"SIGNOFF ISN".
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Hardware recommendation
snipt To second the motion, I have had some intermittent problems with the intel 82559. On a Slackware 7.1 box, it seemed to work fine for a week or more but would occasionally dump the interface with errors similar to RX buffer not available TX buffer not available Rebooting (eek!) was necessary to bring it back on line. It might have been a driver issue... but I would have thought 7.1 would be fairly up to date... Anyways I ripped it out and threw in a cheapy Netgear which is doing very well. ;) IIRC One of the Netgear cards is tulip based.. The tulip cards are pretty rock solid (at least I've never had a problem with them and apparently that's what Donald Becker was using for a long time hence the highly optimised drivers) and the Netgear cards are nice and cheap.. Not a bad combo.. BTW incase you dont know the tulip is the DEC 21XXX (plenty of variants and manufacturers) dan. -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] deltree equivalent OK
On Thursday 22 February 2001 12:12, Howard Lowndes wrote: More like: find new job cd / rm -rf * get even newer job breaking rocks for 10 years Nah - not if you do it right. (can you trigger that with a cron job that destroys itself ?) -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] deltree equivalent OK
quote who="Jon Biddell" Nah - not if you do it right. (can you trigger that with a cron job that destroys itself ?) Yeah Jon, do it like this: jon@xena:~$ crontab -e No one will *ever* suspect that *you* did it. :) - Jeff -- [EMAIL PROTECTED] --- http://linux.conf.au/ -- Ye shall be cursed to fall in love so easily, and yet be so cold of heart as never to express it. -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Wierdness - or maybe I need sleep
On Thursday 22 February 2001 02:16, Ian Tester wrote: On Wed, 21 Feb 2001, Jon Biddell wrote: On A, user 1 has a UID of 500, user 2 has a UID of 501 On B, user 1 has a UID of 501, user 2 has a UID of 500 I didn't think UID's mattered across NFS mounts ? Well, they do! From what I understand, only UID's are passed around with NFS. The UID=username mapping is done on each host from their local /etc/passwd. So get them UID's synched up! But this has only JUST started happening Anyweay, I changed the UIDs on B to match A, and it seems fine now. Jon -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] kernel traffic
for those who read it... kernel traffic has moved to http://kt.zork.net/ the guy who writes it was part of the layoffs at linuxcare due to the turbolinux merger... later marty "I can't buy what I want because it's free. Can't be what they want because I'm me." - Corduroy, Pearl Jam -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] Correcting documents
There is a group called [EMAIL PROTECTED] that can provide help with all GNU manuals. If you own a manual and would like it to be checked, then please submit a request to them (includes me). This is one of the quietest lists I am on, about 8 messages in 12 months. KenF -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Correcting documents
On Thu, Feb 22, 2001 at 11:44:49PM +1100, Ken Foskey wrote: There is a group called [EMAIL PROTECTED] that can provide help with all GNU manuals. If you own a manual and would like it to be checked, then please submit a request to them (includes me). This is one of the quietest lists I am on, about 8 messages in 12 months. What format are the submissions you receive in? Do you deal with manuals formatted via DocBook ? Paul. -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] 3Com 509B Options
Steven Kerr wrote: SNIP Any ideas of the module options string in conf.modules options 3c509 ??? modinfo -p (modulename) will give you all the options you can pass when insmod'ing a module Daniel -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] 3Com 509B Options
Steven Kerr Wrote: The default settings for this module seems to be 10baseT as seen when doing a insmod. Any ideas of the module options string in conf.modules options 3c509 ??? Steve I have been unable to get this to work with the card set in 'Auto' mode. It appears that maybe the Windows Driver senses voltage on the either interface and configures the card accordingly. The Linux driver never seems to want to go to BNC - always wanting the TP. There maybe a unless there is a hidden option. My solution was to get the Installation Disks (#2 I think) and run the 3c5x9cfg program and force the card to be a BNC not Auto Select. Worked for me. PW -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Correcting documents
There are no real rules like any good open source project :-} Submissions are typically made by dropping the document on a web site, emailing the list with a review request and a URL. The problem is to cut down the response, not the reverse.Typically they use a card deck analogy to select a random card, is it the 2 of clubs (or whatever) so that the author is not overwhelmed. KenF -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] Personal sacrifice and free software
Jeff's email (which brightened my day considerably) points out that in our battle against dishonesty and dictatorship; being for freedom, beauty and truth, nothing is a foregone conclusion "Everyone says they like Free Software - not everyone is ready to make the tough choices to make it happen." - Maciej Stachowiak, GNOME Hacker What are the tough choices? I think most of us are faced with compromises daily; I know I make my feelings plain, usually I am met with polite indifference. Is there an element of personal sacrifice being espoused here? To some extent; but I would caution against excessive sacrifice. The notion of Free Software doesn't stand on the efforts of a single individual. One person can make a difference, but the essence of what we are trying to achieve will come about by the smaller and greater efforts of many people. Together, all of us believing in the right thing, and doing what we can; some of us only a little, others in comparison, by dint of their talents, a huge amount, - together - we will achieve something far greater than the sum of our parts. Like a light that radiates in the darkness, we can allow others to see. So, yes, sometimes the going is tough. Mostly though, the rewards are many and varied for people who make the decision. What decision is that? I'd put it this way: In ways within my power I want to support and give practical help to the goals, ideas and projects of Free Software. Hence, Jeff's earlier post about a call for help on the documentation project is pertinent. If you have a little spare time, it's a good project. http://lwn.net/daily/ldp-20010221.php3 Jamie -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] 3Com 509B Options
|The default settings for this module seems to be 10baseT as seen when |doing a insmod. | |Any ideas of the module options string in conf.modules | |options 3c509 ??? None should be used. The 509 is one of the few ISA cards where the driver can autodetect the card settings. In fact, applying an option can prevent the driver from running. |BTW The ISA card does work when configure for 10BaseT , I just need to |get it to use the BNC To change the card settings, use the 3c5x9cfg program from 3com's web site (DOS program, in a "disk" of config and diagnostic programs), or use Donald Becker's Linux program. -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Personal sacrifice and free software
I think that we should try for a name change. The trouble with "free" in the English language is that it has two meanings. We need to the emphasize "Freedom" and not "costs nothing" which implies cheaper than cheap, which then implies poor quality. Terms like "Freedom software" or "Liberty Software" are closer to the desired meaning but don't sound very catchy. Where's that damn thesaurus. How 'bout "Libelle Software"? If the right term can be found, then it will catch on in the media and make it much easier to paint "Freedom (of choice) Software" as being the democratic/consumer choice/"american way" for software. Closed source then becomes "dictatorial/stalinist". (And please don't start a thread on the accuracy of those terms, Joe public is a very simple creature, free choice/democracy == good, communisim/stalin/dictator == bad, our job is to get Open source associated with the first in Joe's mind and closed source associated with second. Accuracy and marketing have nothing to do with each other). rgds Pete -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Personal sacrifice and free software
Peter Rundle [EMAIL PROTECTED] writes: I think that we should try for a name change. The trouble with "free" in the English language is that it has two meanings. We need to the emphasize "Freedom" and not "costs nothing" which implies cheaper than cheap, which then implies poor quality. Terms like "Freedom software" or "Liberty Software" are closer to the desired meaning but don't sound very catchy. Where's that damn thesaurus. How 'bout "Libelle Software"? "Libre" software seems to be in widespread use in the US. Problem is it's not catchy, and I haven't seen it being used outside the US. "Libre" is spanish for "liberated". "Gratis" is spanish for "no cost". -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Personal sacrifice and free software
On Fri, 23 Feb 2001 11:45:52 +1100, Peter Rundle wrote: I think that we should try for a name change. The trouble with "free" in the English language is that it has two meanings. We need to the emphasize "Freedom" and not "costs nothing" which implies cheaper than cheap, which then implies poor quality. "Emancipated Software" Regards -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Personal sacrifice and free software
English has no clear alternative, and "libre" is already in some use in the US (and not just by spanish speaking people). you will find a lot of people in the US speak spanish or interact regularly with people who do or become exposed one way or another (large proportion of immigrants, mexico just over the border) can we say the same about other countries? I admit it's not perfect - it's not catchy, and it's awkward - but it's better than what we currently have IMO. your right, because people assume they know what "free" means, so they don't bother to question what it really means in a particular context... people who don't know what "libre" means will, at best, learn what it means and, at worst, remain confused (but at least avoid of any of the negative "free" associations) Maybe some other language has a catchier word for "libre". What do they say in finland? maybe run it every which way through babelfish... ;) later marty -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Personal sacrifice and free software
This one time, at band camp, Peter Rundle said: "Freedom (of choice) Software" DEVO Software. "Use your freedom of choice, freedom of choice!" -- jamesw -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Personal sacrifice and free software
Peter Faulks wrote: "Emancipated Software" "Emaciated Software" -- Rick Welykochy || Praxis Services Pty Limited "We don't do VB around here. Nor do we drink it." -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] hi, Try This ONe
I Was Sent TO This Site Last Week. Defenitely Worth Looking At!! http://www.geocities.com/cashoffferzzz -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
