RE: [SLUG] Question about PGP

2004-05-07 Thread Visser, Martin
Steven,

I assume you are referring to the PGP signatures appearing at the bottom
of some postings. (They are not keys as you mentioned).

These signatures allows you as the reader to verify two things

1. That the sender in fact is who he/she says he/she is.
2. That the message contents is as was sent (it is unaltered from when
they signed it)

For the signature to be useful, you need to have the sender's public PGP
key. You would normally obtain this from them personally, or from their
web site, or some other secure means (often via another signed document
from someone you already trust - this is known as a certificate). You
then run the received message through the PGP application, together with
the purported sender's public key, which will then confirm that the
private key of the sender was used to sign the message (the public is
generated from the private key by the sender). You then can be sure the
message is as it says.

Why would you need to use PGP to sign a message? The answer would vary,
but I imagine most signers do it simply to assure themselves that what
they have said is what is read. Whether you need to do this depends on
how much you trust the mail and transport systems used to convey the
message between sender and receiver. 

Most of us just have a reasonable level of trust that things won't go
wrong - either malevolent or otherwise. I imagine it will take a few
nice public cases of email tampering and we might all start signing.

Martin
 

Martin Visser ,CISSP
Network and Security Consultant
Technology  Infrastructure - Consulting  Integration
HP Services

3 Richardson Place
North Ryde, Sydney NSW 2113, Australia

Phone: +61-2-9022-1670   
Mobile: +61-411-254-513
Fax: +61-2-9022-1800
E-mail: [EMAIL PROTECTED]
  

 




From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Steven Chang-Lin Yu
Sent: Friday, 7 May 2004 3:17 PM
To: [EMAIL PROTECTED]
Subject: [SLUG] Question about PGP



Hi, I would like to know the benefit of using PGP?  I have
notice some of the SLUG member uses PGP key on their message, is there
any advantage???

 


__
Steven Chang-Lin Yu
MEngSc of Telecommunications
ICQ#: 66369374

Current ICQ status:  





( Home Tel#:  +61 0401043641
( Work Tel#:  +61 0401043641
+  More ways to contact me http://wwp.icq.com/66369374 
   http://wwp.icq.com/target= 

 


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.677 / Virus Database: 439 - Release Date: 4/05/2004



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Question about PGP

2004-05-07 Thread Michael Lake
Steven Chang-Lin Yu wrote:
Hi, I would like to know the benefit of using PGP?  I have notice some of
the SLUG member uses PGP key on their message, is there any advantage???
Here is a real situation that cropped up this week for me where PGP (or 
GPG - the freer version) would have been useful if everyone was using it.

I have a database where we are changing servers and about a dozen users 
who have 'advanced access' haven't had a password change in two years so 
its about time I dropped their password and created a new one for them. 
The problem is how to get their password to them securely when they are 
in various States. Last time I just emailed them the passwords and got 
told off - and rightly so. This time we will use the telephone or 
stamped self-addressed envelopes and trust Aust Post :-)

Here is what I could do if we all had public/private keys.

I generate a password for a user and encrypt it using their public_key 
from their web page or from an email that they send me. I attach the 
encrypted password to an email to the user and sign the email that I 
send out using my private key.

The user recieves the email and checks the signature on it using my 
public_key. Now they KNOW it is from me and not from an interloper. They 
extract the encrypted password and unencrypt it using their private key. 
Anyone that did intercept that email will not be able to decrypt that 
password.

But alas these dozen people dont know about public/private key stuff nor 
PGP so we will use snail mail. That shows one of the advantages of PGP.

Interestingly I only downloaded GnuPG yesterday and have just generated 
my keypair. I SLUG tutorial would be great if someone could run one next 
month.

--
Mike Lake
Caver, Linux enthusiast and interested in anything technical.
--
UTS CRICOS Provider Code:  00099F
DISCLAIMER: This email message and any accompanying attachments may contain
confidential information.  If you are not the intended recipient, do not
read, use, disseminate, distribute or copy this message or attachments.  If
you have received this message in error, please notify the sender immediately
and delete this message. Any views expressed in this message are those of the
individual sender, except where the sender expressly, and with authority,
states them to be the views the University of Technology Sydney. Before
opening any attachments, please check them for viruses and defects.
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [bedel@allmail.net: Re: [SLUG] Linux on an xbox]

2004-05-07 Thread Shane Anderson
Yes.

If you are only after it to put linux on your xbox, then you're best bet 
is looking for it on Ebay.

Mech Assault is also available for $50 new (which you can also use). I 
got mine from K-Mart.

Shane

Dave wrote:

How about 007?

Can you get that one in Australia?

http://xbox-linux.sourceforge.net/docs/howtoexploit.html



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Require advice on Biblio software

2004-05-07 Thread Minh Van Le
Hello :)

I've spent a few hours searching sourceforge.com and Google for open source
library systems for Linux and managed to testdrive some biblio projects via
their online PHP demos. I was looking for some of the same standard and
functionality found in most council/state library catalog systems.

It seems that most ILS (Integrated Library Systems) are web-based nowadays -
and found OpenBiblio, Emilda, and Koha.

Emilda seems premature and requires more testing.

OpenBiblio seems nice, with membership ID card support, MARC support (a
standard created for cataloging books or other documents used in a library
eg. ISBN, Title/Author/Subject) etc, membership database, circulation,
fines/penalty, due dates etc.

Koha seems more extensive than OpenBiblio with aquisition support
((re)order, receive, budgeting), member search  borrow history information
which is accessible by members via a member access plugin.

I need an application to inventory, track member loans and borrowings mainly
for paper material types (because most of our property is paper based) eg.
books, magazines, cds, and anything you could probably detail using biblio
cataloging standards like MARC, Z39.50 etc for a chess club. Our club also
stocks non-biblio material like computer equipment, chess sets and pieces,
and demonstration kits that require inventory - mainly to track missing
stuff and keep a list of what we have, where it is, who currently is/isn't
responsible/ownership etc.

At this stage, due to the slightly different nature and purpose of the type
of things (1. books, 2. equipment), and method, and possibly insufficent
awareness of the full capabilities of existing software mentioned above (et
al), I was conceiving tracking books with a biblio system, and using an
Excel spreadsheet to track equipment.

I'm thinking about proposing OpenBiblio as our solution. Does anybody
suggest a good library system ? Maybe an all-in-one biblio  stock inventory
system ?


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[slug] Re: spam filters not working

2004-05-07 Thread Nicholas Tomlin
Hell sluggers,

Seems like I´ve started something with this spelling business, no, I´m not a 
spelling nazi, though I do appreciate people who can spell correctly.

Here is a slightly more challenging filtration system:

Gibberish filters
Context filters

I suppose both would tend to work hand in hand as words out of context could 
be classified as gibberish.

I thank everyone for their suggestions, now to apply spam assassin, since I am 
a mere workstation user with scant programming knowledge this could be 
interesting.

Thank you,

Nicholas Tomlin.

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


RE: [SLUG] Linux on an xbox

2004-05-07 Thread Ramon Buckland
Ben,

If you need a hand give me a yell, Ive installed linux on three Xbox's now
All were mod'd but that was because, well we geeks need to really mod it
to make it work ;)

The 007 and Mech tricks apparently work quite well.

somewhere on here www.thebuckland.com you can read my pain of installing
Linux on my XBox, it was sure a while a go now though.
And it's still running to this day. makes great cheap (sub $300) File
Server.
(or webserver)

cheers.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Behalf Of Ben de Luca (bedel)
Sent: Wednesday, 5 May 2004 2:07 PM
To: [EMAIL PROTECTED]
Cc: SLUG
Subject: Re: [SLUG] Linux on an xbox


Im ok will running it but i dont have a modded xbox and I know you can
install it with out opening the box. I just dont have the software to
do that and wondering if any one does?


On 05/05/2004, at 11:03 AM, Andrewd wrote:



 You could try http://www.dynebolic.org/ it is a live CD that boots
 Linux on
 a modded XBox

 HEre is the blurb from the website
 You don't need to install anything, you don't even need an harddisk to
 run a
 whole free software operating system running out of the box on your
 PC! Download
 the ISO-image, burn your own CD, reboot your machine and you'll get
 back true
 love ;^)
 dyne:bolic is shaped on the needs of media activists, artists and
 creatives,
 being a practical tool for multimedia production: you can manipulate
 and broadcast
 both sound and video with tools to record, edit, encode and stream,
 all using
 only free software!

 dyne:bolic is a GNU/Linux distribution simply running from a CD,
 without the
 need to install anything, able to recognize most of your devices and
 periferals:
 sound, video, TV, network cards, firewire, usb devices and more.

 It is optimized to run on slower computers, turning it into a full
 media station:
 the minimum you need is a pentium1 or k5 PC 64Mb RAM and IDE CD-ROM,
 or a modded
 XBOX game console - and if you have more than one, you can easily do
 clusters.





 Im considering installing linux on an xbox I have and I was wondering
 if there might be some one who can give me a hand setting it up. I
 would like to do the software install that is mentioned on the xbox
 page on source forge. But i cant find the mech game.


 If there is some one who can give me a hand in sydney let me know.

 --
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

 ---Safe
 Stamp---

 Your Anti-virus Service scanned this email. It is safe from known
 viruses.

 For more information regarding this service, please contact your
 service provider.




--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html



---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.678 / Virus Database: 440 - Release Date: 6/05/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.678 / Virus Database: 440 - Release Date: 6/05/2004

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Symantec AVF detected that you sent a message with a prohibited attachment name(SYM:39693675300450551621)

2004-05-07 Thread netadmin
Subject of the message: Delivery failure notice (ID-2C3A)
Recipient of the message: [EMAIL PROTECTED] [EMAIL PROTECTED]
Prohibited attachment: www.moline.il.us.smason.session-2C3A.com



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] REMITENTE ! Virus encontrado en su mensaje enviado !

2004-05-07 Thread kavadm
Usted envio un mensaje con VIRUS al usuario [EMAIL PROTECTED]
==
KAV Report:
==
archive: Mail 
/html   suspicion: Exploit.IFrame.FileDownload 
infected: I-Worm.NetSky.q 

==
Adios !

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] USB HID IR device - how generic can I go?

2004-05-07 Thread Jeff Waugh
Hey gang,

So I got this USB IR port and remote bundled with my DVB card. I'd kinda
like a generic IrDA port to use with my phone and iPaq, so I'm wondering if
I can use this one.

What worries me is that it comes up as a USB HID mouse and keyboard device,
which is kinda cool for use with the remote, but I don't know if that'll let
me use it with the IrDA stack. I get the vague impression from some Googling
that the HID stuff is just a layer on top of the standard IrDA stuff that
the hardware already does, and Linux might be able to talk to both at the
same time. *attempts to wave hands intelligently*

I've popped lsusb -v output for it at the bottom of this mail. Here's what
/var/log/messages says:

  May  8 10:19:53 lazarus kernel: usb 1-2.2: new low speed USB device using address 4
  May  8 10:19:53 lazarus kernel: input: USB HID v1.10 Keyboard [Twinhan Tech Remote 
Control] on usb-:02:00.0-2.2
  May  8 10:19:53 lazarus kernel: input: USB HID v1.10 Mouse [Twinhan Tech Remote 
Control] on usb-:02:00.0-2.2

Hoping someone groks IrDA and stuff like this - I've never really played
with it much. :-)

Thanks,

- Jeff

Bus 001 Device 006: ID 6253:0100  
Device Descriptor:
  bLength18
  bDescriptorType 1
  bcdUSB   1.10
  bDeviceClass0 (Defined at Interface level)
  bDeviceSubClass 0 
  bDeviceProtocol 0 
  bMaxPacketSize0 8
  idVendor   0x6253 
  idProduct  0x0100 
  bcdDevice1.00
  iManufacturer   1 
  iProduct2 
  iSerial 3 
  bNumConfigurations  1
  Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength   59
bNumInterfaces  2
bConfigurationValue 1
iConfiguration  4 
bmAttributes 0xa0
  Remote Wakeup
MaxPower  100mA
Interface Descriptor:
  bLength 9
  bDescriptorType 4
  bInterfaceNumber0
  bAlternateSetting   0
  bNumEndpoints   1
  bInterfaceClass 3 Human Interface Devices
  bInterfaceSubClass  1 Boot Interface Subclass
  bInterfaceProtocol  1 Keyboard
  iInterface  0 
  Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81  EP 1 IN
bmAttributes3
  Transfer TypeInterrupt
  Synch Type   None
  Usage Type   Data
wMaxPacketSize 0x0008  bytes 8 once
bInterval  10
HID Device Descriptor:
  bLength 9
  bDescriptorType33
  bcdHID   1.10
  bCountryCode0 Not supported
  bNumDescriptors 1
  bDescriptorType34 Report
  wDescriptorLength  63
Interface Descriptor:
  bLength 9
  bDescriptorType 4
  bInterfaceNumber1
  bAlternateSetting   0
  bNumEndpoints   1
  bInterfaceClass 3 Human Interface Devices
  bInterfaceSubClass  1 Boot Interface Subclass
  bInterfaceProtocol  2 Mouse
  iInterface  0 
  Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x82  EP 2 IN
bmAttributes3
  Transfer TypeInterrupt
  Synch Type   None
  Usage Type   Data
wMaxPacketSize 0x0004  bytes 4 three times
bInterval  10
HID Device Descriptor:
  bLength 9
  bDescriptorType33
  bcdHID   1.10
  bCountryCode0 Not supported
  bNumDescriptors 1
  bDescriptorType34 Report
  wDescriptorLength  52

-- 
GVADEC 2004: Kristiansand, Norwayhttp://2004.guadec.org/
 
 Ah, now we see the violence inherent in the system. - From Monty
  Python to ESR, by way of Al Viro
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] spam filters not working

2004-05-07 Thread Angus Lees
At Fri, 7 May 2004 11:04:55 +1000, Mary Gardiner wrote:
 I train it on all my spam and non-spam, and I train it every week on
 mail received during that week. (With a cronjob, I just need to make
 sure false negatives and positives are moved into an appropriate
 folder.) I don't delete the existing token database ever.

.. so with all that manual spam/ham classification/archiving, is there
actually any point running an automatic spam filter anymore?

From what I can see any spam filter that needs training is missing the
point - but I've never actually run any of the Bayesian filters so its
purely ignorant prejudice ;)

-- 
 - Gus
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Desktops

2004-05-07 Thread James Gregory
Hey all,

I've been getting a lot of requests from people for whom I've setup
Linux desktops who are becoming increasingly frustrated with the fact
that their Linux box doesn't behave like windows. There's a bunch of
ways this manifests, but most commonly I field complaints that
OpenOffice is completely unusable on the basis that menu items are
arranged differently. Another complaint was on the basis that OOCalc
required an '=' prefix on formulae -- apparently Microsoft Excel will
recognise formulae if they start with a '+'. I did review the various
office apps available on Linux some time ago and ultimately concluded
that OpenOffice was the best migration path from Windows - Linux -- if
there's something better out there though, I'd like to hear about it.

Anyway, my question: what steps can I take to make a Linux box behave
more like Microsoft products? I'm interested in all kinds of approaches
here -- switching distributions (though I'd need to see some pretty
compelling reasons to do so), bizarro patches, whatever.

I am aware that MS-Office will run under WINE -- I'm giving that due
consideration.

Thanks guys,

James.

-- 
James Gregory [EMAIL PROTECTED]

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] spam filters not working

2004-05-07 Thread Mary Gardiner
On Sat, May 08, 2004, Angus Lees wrote:
 .. so with all that manual spam/ham classification/archiving, is there
 actually any point running an automatic spam filter anymore?

Well, depends on what you mean by all that. About three times a week,
a mail ends up in the wrong folder. (That's an error rate of about
0.15%.) I move those three mails to the right folder so that they get
learned correctly. Once a week a cronjob fires and learns whatever
happens to be in my mail folders at the time. I'm happy with manually
moving three mails a week.

I spend more time 'training' procmail than I do training my Bayesian
filter. (Please do not wave the magical procmail rule at me, because the
Linguist List don't put the right headers in their mails and therefore
it is not the solution to the problem I'm thinking of.)

The time investment is considerably less than all that manual spam
deleting, for example.

 From what I can see any spam filter that needs training is missing the
 point - but I've never actually run any of the Bayesian filters so its
 purely ignorant prejudice ;)

Well, it depends on what the point is.

If the point is it is easy to tell spam from non spam with rules that
are already in existence then contribute your rules to the SpamAssassin
project because many people are finding that their rules degrade in
effectiveness over time. SA, untrained, would miss about 15% of the spam
I currently receive.

If the point is it should be possible to tell spam from non spam with
rules with an acceptable error rate that will not degrade for a long
period of time you're probably right, but my suspicion is that coming
up with those rules is like a lot of natural language problems: hard.

If the point is spam just doesn't annoy me that much, and I'd rather
just delete the stuff than spend more than 1 minute setting up a filter
then we're different.

-Mary
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] spam filters not working

2004-05-07 Thread Jamie Wilkinson
This one time, at band camp, Angus Lees wrote:
At Fri, 7 May 2004 11:04:55 +1000, Mary Gardiner wrote:
 I train it on all my spam and non-spam, and I train it every week on
 mail received during that week. (With a cronjob, I just need to make
 sure false negatives and positives are moved into an appropriate
 folder.) I don't delete the existing token database ever.

.. so with all that manual spam/ham classification/archiving, is there
actually any point running an automatic spam filter anymore?

From what I can see any spam filter that needs training is missing the
point - but I've never actually run any of the Bayesian filters so its
purely ignorant prejudice ;)

I occasionally hit S in mutt which trains bogofilter and saves the
message to my spam corpus.  the reply, list-reply, and group-reply
commands are bound to train bogofilter that the message i'm replying to
is not spam.  So, I only half-manually train my bogofilter, and that's
the only filter i'm using.

I rarely see spam get past my filters nowadays, and I rarely see false
positives in my spambox on the few occasions that I check it.

The time spent training my bogomonster is much less time than it takes
to open the debian-devel folder and mark it all as read.

-- 
[EMAIL PROTECTED]   http://spacepants.org/jaq.gpg
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html