Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Adrian Sevcenco
On 01/03/2014 03:28 AM, Jitse Klomp wrote: > 2014/1/3 David Benfell > >> I was unable to find an associated vulnerability in Linux. I trust the >> OpenSSL folks would be on top of this faster than you can blink an eye >> if it were a current issue. They have not, from what I've seen, >> reacted t

Re: [CentOS] Disappearing directory

2014-01-03 Thread Leon Fauster
Am 03.01.2014 um 08:57 schrieb Mauricio Tavares : > On Thu, Jan 2, 2014 at 10:19 PM, Leon Fauster > wrote: >> Am 02.01.2014 um 20:34 schrieb Ken Smith : >>> Fred Smith wrote: >>> The bash commands in the earlier post are manually entered in a >>> terminal. The cron job isn't active. Even if I set

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Karanbir Singh
On 01/03/2014 11:01 AM, Adrian Sevcenco wrote: > i was just blew away by this: > "What almost all commentators have missed is > that hidden away in the small print (and subsequently confirmed by our > specific query) is that if you want to be FIPS 140-2 compliant you MUST > use the compromised poin

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Adrian Sevcenco
On 01/03/2014 01:15 PM, Karanbir Singh wrote: > On 01/03/2014 11:01 AM, Adrian Sevcenco wrote: >> i was just blew away by this: >> "What almost all commentators have missed is >> that hidden away in the small print (and subsequently confirmed by our >> specific query) is that if you want to be FIPS

[CentOS] CentOS-announce Digest, Vol 107, Issue 1

2014-01-03 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ..

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Ahmed Hassan
One thing you need to understand. There is a huge difference between asymmetric encryption and cryptographically secure pseudo-random number generator. EC is secure, the default random number generator on Linux is /dev/urandom. It does not use the backdoored NSA PRNG. On Fri, Jan 3, 2014 at 6:

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Timothy Murphy
Adrian Sevcenco wrote: > i was just blew away by this: > "What almost all commentators have missed is > that hidden away in the small print (and subsequently confirmed by our > specific query) is that if you want to be FIPS 140-2 compliant you MUST > use the compromised points." I'm a complete in

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Luigi Rosa
Ahmed Hassan said the following on 03/01/2014 13:47: > There is a huge difference between asymmetric encryption and > cryptographically secure pseudo-random number generator. EC is secure, the > default random number generator on Linux is /dev/urandom. It does not use > the backdoored NSA PRNG.

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Timothy Murphy
Luigi Rosa wrote: >> With headless and/or virtual servers the issue is even bigger because > Linux could not be able to collect enough entropy to seed /dev/urandom Is this a meaningful statement? How do you measure the "entropy" of a seed (which I take to be a string)? And if you can, is it true

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Luigi Rosa
Timothy Murphy said the following on 03/01/2014 14:20: > Is this a meaningful statement? How do you measure the "entropy" of a seed > (which I take to be a string)? And if you can, is it true that you can > decrypt a string with low entropy? The mathematic behind a PRNG (or DRNG to use NIST termi

Re: [CentOS] Disappearing directory

2014-01-03 Thread Ken Smith
Leon Fauster wrote: > Am 03.01.2014 um 08:57 schrieb Mauricio Tavares: > >> On Thu, Jan 2, 2014 at 10:19 PM, Leon Fauster >> wrote: >> >>> Am 02.01.2014 um 20:34 schrieb Ken Smith: >>> Fred Smith wrote: {snip} >> Even though it is a workaround - I myself like to use >

Re: [CentOS] Disappearing directory

2014-01-03 Thread Leon Fauster
Am 03.01.2014 um 15:04 schrieb Ken Smith : > Leon Fauster wrote: >> Am 03.01.2014 um 08:57 schrieb Mauricio Tavares: >> >>> On Thu, Jan 2, 2014 at 10:19 PM, Leon Fauster >>> wrote: >>> > {snip} >>> Even though it is a workaround - I myself like to use >>> /export/backup -- I do not think t

Re: [CentOS] Disappearing directory

2014-01-03 Thread Dennis Jacobfeuerborn
On 03.01.2014 15:37, Leon Fauster wrote: > Am 03.01.2014 um 15:04 schrieb Ken Smith : >> Leon Fauster wrote: >>> Am 03.01.2014 um 08:57 schrieb Mauricio Tavares: >>> On Thu, Jan 2, 2014 at 10:19 PM, Leon Fauster wrote: >> {snip} Even though it is a workaround - I myself

[CentOS] SSSD and usermod

2014-01-03 Thread Mitja Mihelič
Hi! How to get usermod working with SSSD/389DS ? We have SSSD set up on our server and it uses 389DS. SSSD was enabled with the following command: authconfig --enablesssd --enablesssdauth --ldapbasedn=dc=example,dc=com --enableshadow --enablemkhomedir --enablelocauthorize --update Running for

[CentOS] New company name

2014-01-03 Thread kwazi mavuso
Good day I'm on the verge of starting a Data and Analytics company. We'll start small with a few systems running CentOS Linux  and developing our software using python. However, we still haven't decided on a name for the business. Please go to the following link to help me choose a most appropr

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Timothy Murphy
Luigi Rosa wrote: >> Is this a meaningful statement? How do you measure the "entropy" of a >> seed (which I take to be a string)? And if you can, is it true that you >> can decrypt a string with low entropy? You deleted the statement I queried. Here it is "With headless and/or virtual servers th

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread John R Pierce
On 1/3/2014 8:37 AM, Timothy Murphy wrote: > I'm asking what you meant by it. Entropy has a standard meaning in computer science, see http://en.wikipedia.org/wiki/Information_entropy for an introductory discussion with various references. -- john r pierce

Re: [CentOS] Disappearing directory

2014-01-03 Thread David G . Miller
Fred Smith writes: > > On Thu, Jan 02, 2014 at 07:05:31PM +, Ken Smith wrote: > > Hi All and happy new year, > > > > Via a cron job a USB disk is mounted on a Centos 6.4 machine for backup > > and dismounted after. I've noticed this failing. See below, the backup > > directory that was in

[CentOS] Need help with spec file for Apache-2.4.7

2014-01-03 Thread James B. Byrne
I am trying to build an RPM for Apache-2.4.7-1 on Centos-6.5-i86_64. I am using mock. The are three build dependencies that I am trying to resolve. One, mod_socache_dc / distcache, I have simply removed from the spec file. The other two are arp and apr-utils. Since httpd-2.4.7 needs arp >= 1.4

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread David Benfell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 01/03/2014 03:36 AM, Adrian Sevcenco wrote: IMHO underlying problem is not > that a cipher/process/code was compromised but that the > supervising _trustworthy_ entity is in fact not trustworthy at > all! It will be interesting to see how this p

Re: [CentOS] Disappearing directory

2014-01-03 Thread Ken Smith
Dennis Jacobfeuerborn wrote: > On 03.01.2014 15:37, Leon Fauster wrote: > >> Am 03.01.2014 um 15:04 schrieb Ken Smith: >> >>> Leon Fauster wrote: >>> Am 03.01.2014 um 08:57 schrieb Mauricio Tavares: > On Thu, Jan 2, 2014 at 10:19 PM, Leon Fauster >

Re: [CentOS] Disappearing directory

2014-01-03 Thread Ron Loftin
I'd suggest looking into the config for automount. On Fri, 2014-01-03 at 22:48 +, Ken Smith wrote: > Dennis Jacobfeuerborn wrote: > > On 03.01.2014 15:37, Leon Fauster wrote: > > > >> Am 03.01.2014 um 15:04 schrieb Ken Smith: > >> > >>> Leon Fauster wrote: > >>> > Am 03.

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread Timothy Murphy
John R Pierce wrote: > Entropy has a standard meaning in computer science, see > http://en.wikipedia.org/wiki/Information_entropy for an introductory > discussion with various references. Shannon entropy only makes sense when applied to a random variable. It cannot be applied to a single string,

Re: [CentOS] Elliptic curve on Centos 6.x

2014-01-03 Thread John R Pierce
On 1/3/2014 4:25 PM, Timothy Murphy wrote: > Shannon entropy only makes sense when applied to a random variable. > It cannot be applied to a single string, as in this case. the seed of a algorithm like /dev/urandom is not a single variable, its a big array of variables. these have to be created

Re: [CentOS] Need help with spec file for Apache-2.4.7

2014-01-03 Thread Markus Falb
On 03.Jan.2014, at 21:24, James B. Byrne wrote: > I am trying to build an RPM for Apache-2.4.7-1 on Centos-6.5-i86_64. I am > using mock. > > The are three build dependencies that I am trying to resolve. One, > mod_socache_dc / distcache, I have simply removed from the spec file. The > other

Re: [CentOS] New company name

2014-01-03 Thread Dan Hitt
Good luck with your company! But the link does not work for me (i don't think it's just the space in it, as i tried removing the space). dan On Fri, Jan 3, 2014 at 8:34 AM, kwazi mavuso wrote: > Good day > > I'm on the verge of starting a Data and Analytics company. We'll start small > with a