Bug#601736: closed by martin f krafft madd...@debian.org (Re: Bug#601736: mdadm: in squeeze the wizard on installation is confusing)

2010-10-29 Thread dave b
No I meant the default... the default is all but the field is said(described) to be none or blank in the text (of the wizard) ... follow? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

[Bug 668130] [NEW] package firefox 3.6.12 build1 nobinonly-0ubuntu0.10.04.1 failed to install/upgrade:

2010-10-28 Thread Dave B
Public bug reported: Binary package hint: firefox v ProblemType: Package DistroRelease: Ubuntu 10.04 Package: firefox 3.6.12+build1+nobinonly-0ubuntu0.10.04.1 ProcVersionSignature: Ubuntu 2.6.32-25.45-generic 2.6.32.21+drm33.7 Uname: Linux 2.6.32-25-generic i686 Architecture: i386 Date: Thu Oct

[Bug 668130] Re: package firefox 3.6.12 build1 nobinonly-0ubuntu0.10.04.1 failed to install/upgrade:

2010-10-28 Thread Dave B
-- package firefox 3.6.12 build1 nobinonly-0ubuntu0.10.04.1 failed to install/upgrade: https://bugs.launchpad.net/bugs/668130 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com

[Bug 668131] [NEW] package freeglut3 2.6.0-0ubuntu2 failed to install/upgrade:

2010-10-28 Thread Dave B
Public bug reported: v ProblemType: Package DistroRelease: Ubuntu 10.04 Package: freeglut3 2.6.0-0ubuntu2 ProcVersionSignature: Ubuntu 2.6.32-25.45-generic 2.6.32.21+drm33.7 Uname: Linux 2.6.32-25-generic i686 Architecture: i386 Date: Thu Oct 28 19:53:06 2010 ErrorMessage: ErrorMessage:

[Bug 668131] Re: package freeglut3 2.6.0-0ubuntu2 failed to install/upgrade:

2010-10-28 Thread Dave B
-- package freeglut3 2.6.0-0ubuntu2 failed to install/upgrade: https://bugs.launchpad.net/bugs/668131 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com

Re: [flashrom] BIOS settings checksum

2010-10-25 Thread Dave B
On 25/10/10 15:53, Gaetan Lord wrote: Hi, Not sure if you can help me on the following, but if I do not ask, I will not get any answer. I have to check +- 400 identical systems. I could do the hardware section, but the only missing pieces is the BIOS setting. I try flashrom on the board

[flashrom] Asus A8N-VM (Pm49FL004) - Flashed OK

2010-10-23 Thread Dave B
. Verifying flash... VERIFIED. d...@k-matrix:/media/SGii/MyData/BIOS/ASUS_AMI/ROMs/0702$ = Really valuable work - thanks again ! Best regards, Dave B ___ flashrom mailing list flashrom@flashrom.org http://www.flashrom.org/mailman/listinfo/flashrom

Bug#599657: is this going in to squeeze?

2010-10-21 Thread dave b
is this going in to squeeze? http://packages.qa.debian.org/x/xorg-server.html states: testing migration excuses: * 10 days old (needed 10 days) * Ignoring block request by freeze, due to unblock request by adsb * out of date on kfreebsd-amd64: xdmx, xdmx-tools, xnest, xserver-common,

Bug#599657: is this going in to squeeze?

2010-10-21 Thread dave b
is this going in to squeeze? http://packages.qa.debian.org/x/xorg-server.html states: testing migration excuses: * 10 days old (needed 10 days) * Ignoring block request by freeze, due to unblock request by adsb * out of date on kfreebsd-amd64: xdmx, xdmx-tools, xnest, xserver-common,

Re: [Full-disclosure] xss in blackboard 8

2010-10-17 Thread dave b
Woops the system Learning System - CE Enterprise License (Release CE 8.0.4) I was testing on was originally 6.X something and got upgraded so my (testing) previous posts still existed :/ In any-case here is an xss against firefox 3 that works against Release CE 8.0.4: bscriptb/balert(1)/script

Bug#552688: actually this is a compiler level bug or feature request

2010-10-17 Thread dave b
actually this is a compiler level bug or feature request. Story: I want to compiler packages hardened As a User of debian I want *anything* I compile (and packaged I install) to be compiled with hardening options. So that I will have some protection against security flaws. THIS IS NOT A DPKG

Bug#552688: actually this is a compiler level bug or feature request

2010-10-17 Thread dave b
actually this is a compiler level bug or feature request. Story: I want to compiler packages hardened As a User of debian I want *anything* I compile (and packaged I install) to be compiled with hardening options. So that I will have some protection against security flaws. THIS IS NOT A DPKG

Re: [Full-disclosure] Filezilla's silent caching of user's credentials

2010-10-16 Thread dave b
On 17 October 2010 01:46, Jeffrey Walton noloa...@gmail.com wrote: Am I the only person who finds it ironic that the same measures leveraged against closed source projects have to be employed against some open source projects? Yet another example, complete with a public pissing contest: XSS in

[Full-disclosure] xss in blackboard 8

2010-10-16 Thread dave b
I don't have access to many blackboard systems but I can confirm that in Blackboard Learning System version 8 (8.0.375.0) and Blackboard Learning System - CE Enterprise License (Release CE 8.0.4) that CVE-2006-4308 was not actually fixed. Any user with access to forums, assignment

[Full-disclosure] xss in trixbox ce (asterisk phonebook) via the contact page and import contacts (csv file).

2010-10-13 Thread dave b
The asterisk phonebook module found in trixbox CE is vulnerable to an xss which can be triggered by importing a contact from a csv file like this: /scriptalert(document.cookie);/script;123123123;12313 FATAL ERROR url is $ip/admin/config.php?type=tooldisplay=phonebook So an import of a csv file

Re: [SLUG] Banning non Australian IP's from Aussie ecommerce site

2010-10-11 Thread dave b
1. Change the ssh port 2. disable password login 3. where do you keep the cookie jar? 4. well you have a number of options - using the geoip database, blockfinder and or other software to block other countries netblocks. Do remember that you might also block people in australia visiting your

Bug#552688: This seems a bit stupid

2010-10-06 Thread dave b
IMHO this is a bit silly you are denying users of debian security features found elsewhere (at least found elsewhere in their packages...). The point is to make the compiler hardened by default not only packages compiled and packaged for debian. Please see http://wiki.debian.org/Hardening and

Bug#552688: This seems a bit stupid

2010-10-06 Thread dave b
IMHO this is a bit silly you are denying users of debian security features found elsewhere (at least found elsewhere in their packages...). The point is to make the compiler hardened by default not only packages compiled and packaged for debian. Please see http://wiki.debian.org/Hardening and

Re: [SLUG] Listing local wifi access points?

2010-10-04 Thread dave b
* get a windows box with a wireless card * grab inssider * run inssider * done/done. ... Yes that works. However, imho the windows part is a real turn off ;) You know kismet runs on a lot of os's ... http://www.kismetwireless.net/screenshot.shtml -- Suspicion always haunts the guilty mind.

[Full-disclosure] Fwd: xss in silverstripe

2010-10-03 Thread dave b
Bugtraq seem to be having problems :/ (this is the only reason I sent this to full disclosure I don't like wasting people's time with xss on this list). -- Forwarded message -- From: dave b db.pub.m...@gmail.com Date: 4 October 2010 13:48 Subject: xss in silverstripe To: bugt

Re: [SLUG] Listing local wifi access points?

2010-10-03 Thread dave b
On 3 October 2010 16:10, Erik de Castro Lopo mle+s...@mega-nerd.com wrote: Erik de Castro Lopo wrote: Does anyone know tool to list all local wifi access points with their channel numbers and encryption types? Preferably command line (but I'm running Gnome with network manager on a Debian

[Full-disclosure] Python ssl handling could be better...

2010-09-29 Thread dave b
Python ssl handling could be better... See http://bugs.python.org/issue1589 for more information. The for example following are vulnerable: 1. hg http://mercurial.selenic.com/bts/issue2407 2. bzr (only if pycurl isn't installed - which by default it isn't)

Re: [Full-disclosure] Python ssl handling could be better...

2010-09-29 Thread dave b
%s/^The//g ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Python ssl handling could be better...

2010-09-29 Thread dave b
On 30 September 2010 01:43, Jeffrey Walton noloa...@gmail.com wrote: Thanks Dave. Out of curiosity, did you burn any bridges, or is this OK for Free Software/Open Source software? If I did the same in private industry, I would probably be fired :/ Sorry I will only reply on the list.

[libcloud] [jira] Created: (LIBCLOUD-55) this python project is vulnerable to MITM as it fails to verify the ssl validity of the remote destination.

2010-09-29 Thread dave b ^^ (JIRA)
://issues.apache.org/jira/browse/LIBCLOUD-55 Project: Libcloud Issue Type: Bug Components: Core Reporter: dave b ^^ this python project is vulnerable to MITM as it fails to verify the ssl validity of the remote destination. urllib / urllib2, httplib.SHTTPConnection do

[Bug 625076] Re: checkbox fails to verify ssl validity in data exchange with launchpad.net

2010-09-29 Thread dave b.
You know what, this bug isn't fixed. You clearly didn't test it. As per http://bugs.python.org/issue1589 you are vulnerable. Test it your self using the test I put above again... all that is different is that now don't follow the redirect to a http:// location from what i can see. So your

[Bug 625076] Re: checkbox fails to verify ssl validity in data exchange with launchpad.net

2010-09-29 Thread dave b.
XXX - - [29/Sep/2010:22:31:30 +1000] POST https://launchpad.net/+hwdb/+submit HTTP/1.1 404 4 https://launchpad.net/+hwdb/+submit; checkbox-gtk/0.9.1 to my host for example ;) -- checkbox fails to verify ssl validity in data exchange with launchpad.net https://bugs.launchpad.net/bugs/625076 You

Re: [Full-disclosure] Gödel and kernel backdoors

2010-09-20 Thread dave b
News flash: Computers are just not secure enough for us to use. But, I don't use computers ... only non-deterministic Turing machines ;) -- But, for my own part, it was Greek to me.               -- William Shakespeare, Julius Caesar ___

Bug#597508: please update qemu-kvm to be 0.13.0-rc1 from qemu-kvm git :)

2010-09-20 Thread dave b
On 20 September 2010 20:59, Michael Tokarev m...@tls.msk.ru wrote: 20.09.2010 13:51, david b wrote: Package: qemu-kvm Severity: wishlist At http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commit;h=72230c523bda18d4dd2f7d16f96cc59e8fbbd6c9  0.13.0-rc1 can be found. This version also

Re: [SLUG] RRDtool efficiency

2010-09-18 Thread dave b
On 19 September 2010 07:50, Jim Donovan j...@aptnsw.org.au wrote: Daniel Pitman said [in the context of Centos updating] That will not help unless you rebuild Cacti to use the older version of RRDTool.  (Also, are you /sure/ it is RRDTool and not something else in the Cacti stack that causes the

Bug#596343: Acknowledgement (dpkg-configure slapd will fail as mkdir cannot create directory /etc/ldpa/slapd.d fail on squeeze)

2010-09-10 Thread dave b
#If you: /etc/init.d/slapd stop #then do dpkg-reconfigure slapd #and in another terminal do: mv /etc/ldap/slapd.d /etc/ldap/slapd.d_old #you can then finish the reconfiguration #then you can finish up with /etc/init.d/slapd stop slapindex chown -R openldap:openldap /var/lib/ldap

Bug#596343: Acknowledgement (dpkg-configure slapd will fail as mkdir cannot create directory /etc/ldpa/slapd.d fail on squeeze)

2010-09-10 Thread dave b
Also please ignore my really broken english in the first email - I am rather tired atm :/ and englishz is directly proportional to my sleep quantityz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: etax 2010 failure to validate remote ssl certificate properly

2010-09-09 Thread dave b
On 8 September 2010 05:17, dave b db.pub.m...@gmail.com wrote: On 8 September 2010 05:09, dave b db.pub.m...@gmail.com wrote: etax 2010[0] Minor edit :) (note: you need a certificate for _any_ domain signed by a CA should be: (note: you need a certificate for a domain that has been signed

etax 2010 failure to validate remote ssl certificate properly

2010-09-08 Thread dave b
etax 2010[0] 1.fails to properly check the remote https server has a valid certificate for the host it claims to be from. Test case: edit the hosts file like this: IP_OF_HTTPS_SERVER_HERE etaxservices10.etax.ato.gov.au e.g. 203.0.178.114 (note: you need a certificate for _any_ domain signed by a

Re: potential issue re in memory django file uploading.

2010-09-03 Thread dave b
Ok no movement :) Lighttpd has a default limit of 2gb, cherokee seems to have the same. Pin it on the httpd all you like - but the default apache has no limit (0 - unlimited :) ). http://httpd.apache.org/docs/2.0/mod/core.html#limitrequestbody -- The better part of valor is discretion.

Re: [OpenAFS-devel] Re: how to use cacheout

2010-09-03 Thread Dave B
So, does someone have a working RHEL4 binary or a working gcc invocation/Makefile for this? -- David William Botsch Programmer/Analyst CNF Computing bot...@cnf.cornell.edu ___

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-03 Thread dave b
first the attacker has to find  a way to reduce system memory to an almost oom condition Say, by attacking several httpd threads and/or unrelated processes to get them to eat up memory. -- Sent from my toaster. If you know something why not share it ;) ? imho Apache is pretty good - so

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-02 Thread dave b
On 2 September 2010 13:29, William A. Rowe Jr. wr...@rowe-clan.net wrote: On 9/1/2010 10:17 PM, dave b wrote: Why not just fix it now and not worry? ... It will help if you can provide a specific use case for graceful failure. A segfault/dereference of NULL pointer provides a very specific

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-02 Thread dave b
And if you can't illustrate a few explicit cases, further abstract arguments are likely to be politely, but firmly, ignored.  There are good C language forums for folks to carry on such religious arguments. Or to put it another way, the dev@ group here is most certainly not worried about the

[twitter-dev] statuses/mentions include_rts

2010-09-01 Thread Dave B
Hello. I'm having a bit of a problem with the include_rts parameter when calling the statuses/mentions API. Either I'm misunderstanding what it's supposed to do, or I'm just having trouble getting it to work. A little help with either would be great! Scenario: * User_A tweets something

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-01 Thread dave b
On 1 September 2010 22:08, Jeff Trawick traw...@gmail.com wrote: On Wed, Sep 1, 2010 at 6:37 AM, Graham Dumpleton graham.dumple...@gmail.com wrote: On 1 September 2010 20:15, Graham Leggett minf...@sharp.fm wrote: On 01 Sep 2010, at 6:07 AM, dave b wrote: What is the rational behind

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-01 Thread dave b
My 2 cents: I doubt that any of the core devs are going to match you for devotion to this topic, but I'm sure we will review patches to trunk to fix somewhat practical scenarios, such as ensuring that memory allocation failures during request processing go through the common abort function,

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-01 Thread dave b
no, I don't want you to do anything for me; I'm just sharing my educated guess at what it takes to make progress on this topic you're apparently very interested in with a little luck you'll be able to find somebody here to analyze the code you pointed out to see which cases actually matter,

Re: [SLUG] High I/O file systems

2010-08-31 Thread dave b
On 31 August 2010 22:41, Max Wright maxwrigh...@gmail.com wrote: Tony - The Oracle one is btrfs, and others are here - http://www.desktoplinux.com/news/NS7212048164.html btrfs is fast. However, there are still problems in the linux kernel ... see

django in combination with mod wsgi on apache on default debian and ubuntu installations does not place any bounds on the maximum size of a file upload

2010-08-31 Thread dave b
Summary: In the default setup of wsgi, apache and django (at least on ubuntu and debian) by default there are no limits on the size of a file that an attacker can upload. http://cwe.mitre.org/top25/#CWE-770 and see example 2 at http://cwe.mitre.org/data/definitions/770.html Vendor response: If

rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-08-31 Thread dave b
What is the rational behind not checking the return value of apr_palloc and apr_pcalloc? code memory/unix/apr_pools.c from apr-1.4.2 APR_DECLARE(void *) apr_pcalloc(apr_pool_t *pool, apr_size_t size); APR_DECLARE(void *) apr_pcalloc(apr_pool_t *pool, apr_size_t size) { void *mem; if

Re: potential issue re in memory django file uploading.

2010-08-30 Thread dave b
> His response is to say he will escalate this to some other security > forum. We can only assume that this is a threat that he will raise > merry hell until we do what he says. Right first: Yes I am sorry for the 9 or so posts :) I am only human. Right. Um no that's not a threat. That's being

Re: potential issue re in memory django file uploading.

2010-08-30 Thread dave b
On 31 August 2010 12:04, Russell Keith-Magee <russ...@keith-magee.com> wrote: >> On 8/30/2010 9:09 PM, dave b wrote: >>> Do not pass go do not collect profit! > ... >>> Put your hands up in the air like you just don't care! > ... >>> blahblahblalbha sss

Re: potential issue re in memory django file uploading.

2010-08-30 Thread dave b
> And, for the record, the fact that Ubuntu or Debian have chosen these > defaults doesn't make Apache insecure either. System defaults exist to > make it easy and obvious to get something started. A responsible > sysadmin for a public-facing webserver shouldn't be using *any* > OS-provided

Re: potential issue re in memory django file uploading.

2010-08-30 Thread dave b
> > From my testing (granted this was run against something pre-1.2 so things > may have changed since then), as soon as you initiate the first file upload, > you're monopolizing the devserver process, preventing further attempts to do > the following 9 uploads until the first has completed

Re: potential issue re in memory django file uploading.

2010-08-30 Thread dave b
>> Secure by default please! > > That's an easy epithet to throw around, but I disagree that it is > appropriate here. "Security" doesn't mean "stops the user from making > mistakes". Look like wsgi, apache2 and django all on ubuntu PLACE no size limits at all by default. Isn't that neat? I think

Re: potential issue re in memory django file uploading.

2010-08-30 Thread dave b
/me rolls eyes. You have a valid point re /tmp, sorry I am used to mounting /tmp as /tmpfs - my mistake :) Ok lets be *really* clear the security problem still exists. An attack can in the limits set on the maximum post by the httpd / module in use upload a large file. > I don't actually use

Re: potential issue re in memory django file uploading.

2010-08-29 Thread dave b
On 30 August 2010 11:04, Russell Keith-Magee <russ...@keith-magee.com> wrote: > On Sun, Aug 29, 2010 at 8:26 PM, dave b <db.pub.m...@gmail.com> wrote: >  1) An actual problem where you can clearly describe the circumstances > or sequence of events that would allow an atta

Re: potential issue re in memory django file uploading.

2010-08-29 Thread dave b
> Anyway, since you have done your civic duty there's a good chance that a > fix will find its way into some future version. Thanks for being a good > citizen. Django is an awesome project and. However, a bug is a bug. I don't care if it is a security bug or not, a bug *should* get fixed. FYI: I

Re: potential issue re in memory django file uploading.

2010-08-29 Thread dave b
> An attacker could also assemble a powerful explosive device and detonate > it near enough your hosting service to take your site down. What > counter-measures are you going to take against that? Good question. I have two cats and they like to lick people ^^ They are a bit friendly I guess. Do

Re: potential issue re in memory django file uploading.

2010-08-29 Thread dave b
> OK, so you don't believe the advice you are getting, which is that of > the many issues a Django sit will face this is a relatively low > probability attack. That's fair enough - a vulnerability is a > vulnerability, after all, no matter how improbable, and not everyone > will set up their

Bug#561803: This bug affects me after upgrading from lenny to squeeze.

2010-08-29 Thread dave b
This bug affects me after upgrading from lenny to squeeze. Is there a reason why this has stalled ? I cannot use untrusted X either re 565296 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=565296 So this really sucks... I am happy to test and help out if I can :) -- To UNSUBSCRIBE, email to

Bug#561803: This bug affects me after upgrading from lenny to squeeze.

2010-08-29 Thread dave b
You can sort of work around this by binding the number pad to the arrow key behaviour via the gnome gui(keyboard preferences) . I haven't tested but you may also be able to set the arrow keys manually (to work). -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#561803: This bug affects me after upgrading from lenny to squeeze.

2010-08-29 Thread dave b
This bug affects me after upgrading from lenny to squeeze. Is there a reason why this has stalled ? I cannot use untrusted X either re 565296 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=565296 So this really sucks... I am happy to test and help out if I can :) -- To UNSUBSCRIBE, email to

Bug#561803: This bug affects me after upgrading from lenny to squeeze.

2010-08-29 Thread dave b
You can sort of work around this by binding the number pad to the arrow key behaviour via the gnome gui(keyboard preferences) . I haven't tested but you may also be able to set the arrow keys manually (to work). -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of

Re: potential issue re in memory django file uploading.

2010-08-28 Thread dave b
On 29 August 2010 13:33, Graham Dumpleton <graham.dumple...@gmail.com> wrote: > > > On Aug 29, 1:17 pm, dave b <db.pub.m...@gmail.com> wrote: >> On 29 August 2010 08:28, Steve Holden <holden...@gmail.com> wrote: >> >> > On 8/28/2010 6:10 PM, Graham

Re: potential issue re in memory django file uploading.

2010-08-28 Thread dave b
On 29 August 2010 13:17, dave b <db.pub.m...@gmail.com> wrote: > On 29 August 2010 08:28, Steve Holden <holden...@gmail.com> wrote: >> On 8/28/2010 6:10 PM, Graham Dumpleton wrote: >>> On Aug 28, 11:21 pm, dave b <db.pub.m...@gmail.com> wrote: >>>>

Re: potential issue re in memory django file uploading.

2010-08-28 Thread dave b
On 29 August 2010 08:28, Steve Holden <holden...@gmail.com> wrote: > On 8/28/2010 6:10 PM, Graham Dumpleton wrote: >> On Aug 28, 11:21 pm, dave b <db.pub.m...@gmail.com> wrote: >>>>>> So obviously my proposed attack is to simply say "content length is

Re: potential issue re in memory django file uploading.

2010-08-28 Thread dave b
On 28 August 2010 23:21, dave b <db.pub.m...@gmail.com> wrote: > On 28 August 2010 23:09, dave b <db.pub.m...@gmail.com> wrote: >> On 28 August 2010 22:46, Graham Dumpleton <graham.dumple...@gmail.com> wrote: >>> >>> >>> On Aug 28, 7:58 pm,

Re: potential issue re in memory django file uploading.

2010-08-28 Thread dave b
On 28 August 2010 23:09, dave b <db.pub.m...@gmail.com> wrote: > On 28 August 2010 22:46, Graham Dumpleton <graham.dumple...@gmail.com> wrote: >> >> >> On Aug 28, 7:58 pm, "david b." <db.pub.m...@gmail.com> wrote: >>> Ok so I was looking

Re: potential issue re in memory django file uploading.

2010-08-28 Thread dave b
On 28 August 2010 22:46, Graham Dumpleton wrote: > > > On Aug 28, 7:58 pm, "david b." wrote: >> Ok so I was looking through the code and I saw this (in >> django/core/files/uploadhandler.py) : >> >> FileUploadHandler >> ... >> >>    def

Re: [Full-disclosure] so like i hrd python devz like mudkipz?

2010-08-28 Thread dave b
Someone told me my python bug was sent to FD. What kind of lulz is this? I was waiting to read the messages that are not visible on the website(I am not subscribed to this list) before I replied, but I gave up waiting. spamtesterspamtester is not me. Look I link to things on irc and people read

Re: [SLUG] Using a DNS with Dynamic IP

2010-08-28 Thread dave b
On 28 August 2010 23:16, Mike Andy beatbreake...@gmail.com wrote: Hi I've used dyndns for hosting my home server for a while now, but I've finally bitting the bullet and gotten my own real domain with crazy domains now (was dirt cheap) the problem is that I'm not sure I know how to get it to

[Bug 625076] [NEW] checkbox fails to verify ssl validity in data exchange with launchpad.net

2010-08-26 Thread dave b.
*** This bug is a security vulnerability *** Public security bug reported: Binary package hint: checkbox Checkbox collects personal and private system data and sends it to launchpad.net. However, it fails to verify that the ssl certificate for launchpad.net is valid. Here is the relevant code.

[SLUG] Re: [SLUG-ANNOUNCE] Re: SLUG monthly meeting: 27 August 2010

2010-08-24 Thread dave b
On 24 August 2010 21:18, James Polley presid...@slug.org.au wrote: The good news is that this month's SLUG meet is only three sleeps away - and if we're especially lucky, we might even have national a government by then! The bad news is that we already have a main talk (Repositories, Package

Re: [SLUG] Talks for this Friday and suggestions for the future

2010-08-23 Thread dave b
On 23 August 2010 13:59, elliott-brennan m...@elliott-brennan.id.au wrote: Okay, so it may be that some of you are leaving it to the last minute...but just in case. Each SLUG meeting is your opportunity to socialise and hang-out...and that's all fine. However, it is also made up of

Re: [SLUG] Re: Discussion about SLUG meetings and format

2010-08-04 Thread dave b
On 4 August 2010 13:19, elliott-brennan elliottbren...@gmail.com wrote: On 03/08/10 21:09, elliott-brennan wrote: and a wife who has late clients Jon J wrote: So she's an undertaker? Jon. Boom Tish! Clin Psych. If you can't afford one, marry one - that's my motto! ;) James -

Re: [SLUG] Multiple server roles on one box

2010-07-28 Thread dave b
On 28 July 2010 12:23, Matthew Hannigan m...@zip.com.au wrote: On Tue, Jul 27, 2010 at 04:04:05PM +1000, Ben Donohue wrote: [ ] How about a DNS, squid and web server with multiple name based virtual domains on the same box? Is doing the above really dangerous on a fully patched and up

Re: [SLUG] Multiple server roles on one box

2010-07-28 Thread dave b
On 29 July 2010 14:40, Daniel Pittman dan...@rimspace.net wrote: dave b db.pub.m...@gmail.com writes: On 28 July 2010 12:23, Matthew Hannigan m...@zip.com.au wrote: On Tue, Jul 27, 2010 at 04:04:05PM +1000, Ben Donohue wrote: [ ] How about a DNS, squid and web server with multiple name

Re: [SLUG] Multiple server roles on one box

2010-07-28 Thread dave b
On 29 July 2010 15:42, dave b db.pub.m...@gmail.com wrote: On 29 July 2010 14:40, Daniel Pittman dan...@rimspace.net wrote: dave b db.pub.m...@gmail.com writes: On 28 July 2010 12:23, Matthew Hannigan m...@zip.com.au wrote: On Tue, Jul 27, 2010 at 04:04:05PM +1000, Ben Donohue wrote

Re: [SLUG] Multiple server roles on one box

2010-07-27 Thread dave b
On 27 July 2010 16:05, Ben Donohue donoh...@icafe.com.au wrote: Sorry should also have said that they are seen by the outside world. On 27/07/2010 4:04 PM, Ben Donohue wrote: Hi all, just a question... I'm looking at the possibility of consolidating some servers for a client. If an

Re: [SLUG] Reply-to address on SLUG posts

2010-07-26 Thread dave b
On 27 July 2010 14:08, Jon Jermey jonjer...@gmail.com wrote: I've been caught by that a few times, mainly because this is the only mailing list I currently subscribe to (out of a dozen or so) that doesn't automatically set the reply-to address to the list. I have a vague memory of this issue

Re: [SLUG] Reply-to address on SLUG posts

2010-07-26 Thread dave b
On 27 July 2010 15:13, Erik de Castro Lopo mle+s...@mega-nerd.com wrote: Michael Chesterton wrote: Personally I find lists and people setting reply-to annoying. I mean how important are you that you can't be disturbed by an email in your in box. Thats an extremely short-sighted view. I am

Re: BUG: when performing a checkout use the cased url as in the download URL

2010-07-22 Thread dave b
On 22 July 2010 16:49, Stephen Butler sbut...@elego.de wrote: On Jul 22, 2010, at 7:10 , dave b wrote: On 22 July 2010 05:47, Bob Archer bob.arc...@amsi.com wrote: On 22 July 2010 03:12, dave b db.pub.m...@gmail.com wrote: On 22 July 2010 02:58, Bolstridge, Andrew andy.bolstri

Re: BUG: when performing a checkout use the cased url as in the download URL

2010-07-22 Thread dave b
On 22 July 2010 19:55, Stefan Sperling s...@elego.de wrote: On Thu, Jul 22, 2010 at 05:10:01PM +1000, dave b wrote: Perhaps if it is possible, svn on windows can use the posix api? - I don't know how that works :) http://en.wikipedia.org/wiki/Microsoft_Windows_Services_for_UNIX#cite_note-6

Re: BUG: when performing a checkout use the cased url as in the download URL

2010-07-22 Thread dave b
On 22 July 2010 23:08, Stefan Sperling s...@elego.de wrote: On Thu, Jul 22, 2010 at 10:58:44PM +1000, dave b wrote: Can we at least agree that the current state is suboptimal ? Sure, but it's the state of windows that is suboptimal. There simply isn't anything we can reasonably do about

Re: BUG: when performing a checkout use the cased url as in the download URL

2010-07-22 Thread dave b
On 22 July 2010 23:59, Bert Huijben b...@qqmail.nl wrote: -Original Message- From: Matthew Bentham [mailto:mj...@artvps.com] Sent: donderdag 22 juli 2010 15:32 To: s...@stsp.name Cc: dave b; Stephen Butler; Bob Archer; Bolstridge, Andrew; dev@subversion.apache.org Subject: Re: BUG

Fwd: BUG: when performing a checkout use the cased url as in the download URL

2010-07-21 Thread dave b
As per Ulrich Eckhardt's email recommendation I have forwarded this email (bug) to svn. -- Forwarded message -- From: dave b db.pub.m...@gmail.com Date: 21 July 2010 17:19 Subject: BUG: when performing a checkout use the cased url as in the download URL To: us

Re: BUG: when performing a checkout use the cased url as in the download URL

2010-07-21 Thread dave b
On 22 July 2010 02:58, Bolstridge, Andrew andy.bolstri...@intergraph.com wrote: -Original Message- excuse to say we told you so. Considering Windows is case-insensitive, how do you expect to be able to see folder FOO and foo inside folder bar? I think Actually NTFS IS CASE sensitive

Re: BUG: when performing a checkout use the cased url as in the download URL

2010-07-21 Thread dave b
On 22 July 2010 03:12, dave b db.pub.m...@gmail.com wrote: On 22 July 2010 02:58, Bolstridge, Andrew andy.bolstri...@intergraph.com wrote: -Original Message- excuse to say we told you so. Considering Windows is case-insensitive, how do you expect to be able to see folder FOO

Re: BUG: when performing a checkout use the cased url as in the download URL

2010-07-21 Thread dave b
On 22 July 2010 05:47, Bob Archer bob.arc...@amsi.com wrote: On 22 July 2010 03:12, dave b db.pub.m...@gmail.com wrote: On 22 July 2010 02:58, Bolstridge, Andrew andy.bolstri...@intergraph.com wrote: -Original Message- excuse to say we told you so. NTFS supports two slightly

[SLUG] Fwd: RE-ANNOUNCE: July Sydney DevOps Meeting - Thursday 22 July

2010-07-19 Thread dave b
-- Forwarded message -- From: Mick Pollard aussielu...@gmail.com Date: Jul 19, 9:01 am Subject: RE-ANNOUNCE: July Sydney DevOps Meeting - Thursday 22 July To: DevOps Australia Hi All, On Fri, Jul 16, 2010 at 2:26 PM, Lindsay Holmwood lind...@holmwood.id.auwrote: Hey all,

[Bug 607439] [NEW] .asoundrc not used

2010-07-19 Thread Dave-B
Public bug reported: It seems as though an .asoundrc I created in my home directory is not loaded, or the instructions are ignored. I have been trying to get two stereo devices on one card into one four-channel device (M-Audio FastTrack Pro), to use with jack and mixxx [0]. Currently I just

[Bug 607439] Re: .asoundrc not used

2010-07-19 Thread Dave-B
** Attachment added: AlsaDevices.txt http://launchpadlibrarian.net/52178409/AlsaDevices.txt ** Attachment added: AplayDevices.txt http://launchpadlibrarian.net/52178410/AplayDevices.txt ** Attachment added: ArecordDevices.txt http://launchpadlibrarian.net/52178411/ArecordDevices.txt

Re: [SLUG] today's scary thought

2010-07-17 Thread dave b
Hope this helps. (Understanding, that is -- I know it doesn't help solve anything.) Talk is cheap. Show me the code. Linus. So when is google docs getting the time spent actively viewing count for a document? This would be a neat thing to have. So who is going to add this feature to bzr or hg

Re: [SLUG] today's scary thought

2010-07-17 Thread dave b
On 18 July 2010 03:29, dave b db.pub.m...@gmail.com wrote: ...???...  perhaps I didn't want to see the code ;P Bah copy pasta fail - the rest of the email is this: Sure it is neat to talk about stuff like nosql etc. - you still have the interesting syncing problem. imho http://github.com

Re: [SLUG] SLUG monthly meeting: 26 June 2010

2010-06-22 Thread dave b
Tor is a security tool that allows people to access with internet with privacy and security. This presentation will describe how it works, how to set it up as a user, how to set up Firefox to use Tor, how to set up a Tor relay and how to help the Tor project. I will be interested in hearing

[suggest] Re: suggest Digest, Vol 60, Issue 16

2010-06-21 Thread Dave B
perl modules on RHEL4 To: suggest@lists.rpmforge.net Message-ID: 1276783613.3574.10.ca...@hub8071nc4.financial.com Content-Type: text/plain; charset=UTF-8 Am Freitag, den 11.06.2010, 08:19 -0400 schrieb Dave B: Though, perhaps not all of them are broken? I think both myself

Re: [SLUG] ubuntu 10.04

2010-06-17 Thread dave b
On 15 June 2010 22:08, Craig Warner coolum.surfl...@gmail.com wrote: I don't know whether this is correct or not but its working for now add to the following script /etc/network/if-up.d/mtu #!/bin/sh ifconfig eth0 mtu 1300 restart networking now wireshark is not reporting the error and

[suggest] Re: broken dependencies for some perl modules on RHEL4

2010-06-11 Thread Dave B
cma...@gmx.de Subject: Re: [suggest] broken dependencies for some perl modules on RHEL4 To: suggest@lists.rpmforge.net Message-ID: 1276243020.12228.36.ca...@hub8071nc4.financial.com Content-Type: text/plain; charset=UTF-8 Am Donnerstag, den 10.06.2010, 15:01 -0400 schrieb Dave B

Re: [OpenAFS] win7 hangs during login at welcome - afs related?

2010-06-10 Thread Dave B
the AFS share. schrieb Dave B: We skipped over vista... A few questions... 1. are you doing integrated login? 2. are the computers in a domain? 3. are you doing cross-realm mit kerberos logins? On Wed, 2010-06-09 at 16:39 +0200, Michael Richter wrote: We have 32 Vista

Re: [OpenAFS] Microsoft Security Bulletin MS10-020 (KB980232) vs OpenAFS

2010-06-09 Thread Dave B
So, it sounds like we get to choose between.. • many applications crashing due to failure to support the query • many applications terminating due to the null security descriptor being returned Out of curiosity, why can't a not null security descriptor be returned? On Wed, 2010-05-26 at 16:12

[OpenAFS] win7 hangs during login at welcome - afs related?

2010-06-09 Thread Dave B
Anyone else seen this have any thoughts? This is one of those annoying can't reproduce on command might happen many times in a day then not for a couple of weeks type of bugs. I don't know that this issue is afs related but am being asked to investigate that possibility. We have had both oafs

Re: [OpenAFS] win7 hangs during login at welcome - afs related?

2010-06-09 Thread Dave B
of them we have exact the same problem. I couldn't find a difference between these machines so it's a strange problem. Dave B bot...@cnf.cornell.edu schrieb am Wed, 09.06.2010 um 15:50: Anyone else seen this have any thoughts? This is one of those annoying can't reproduce on command

Re: [OpenAFS] win7 hangs during login at welcome - afs related?

2010-06-09 Thread Dave B
is unlikely to be related to either afslogon.dll or kfwlogon.dll. Use Sysinternals procdump to capture a dump file with heap for winlogon.exe and ask Microsoft Support to analyze it. Jeffrey Altman On 6/9/2010 9:50 AM, Dave B wrote: Anyone else seen this have any thoughts? This is one

<    2   3   4   5   6   7   8   9   10   >