Re: the calculus of encrypting non-textual data (was Re: concrete steps for improving apt downloading security and privacy)

2014-07-08 Thread Gunnar Wolf
Joel Rees dijo [Tue, Jul 08, 2014 at 11:11:09PM +0900]: > >> Did you know that encrypting a picture sometimes results in a picture > >> that looks like it has been through a random color-permuting filter? > > > > Can you proof it? > > Memory of coursework in encryption. The professor did some simp

Re: concrete steps for improving apt downloading security and privacy

2014-07-08 Thread Daniel
On Mon, Jul 07, 2014 at 02:54:15PM -0400, Hans-Christoph Steiner wrote: > > Do you have another idea for making it difficult for network observers to keep > track of the software people are using? > Well, you can always mirror the entire repository and configure your server/desktop to use that in

Re: concrete steps for improving apt downloading security and privacy

2014-07-08 Thread Hans-Christoph Steiner
On 07/07/2014 06:43 PM, Jeremie Marguerie wrote: > On Mon, Jul 7, 2014 at 3:15 PM, Lou RUPPERT wrote: >>> If I'm looking at a catalog page from a shoe store on my table, >>> connected via the phone network, getting close to my 2G cap for my >>> wireless router for the month. My battery's getting

Re: the calculus of encrypting non-textual data

2014-07-08 Thread Peter Makholm
Joel Rees writes: >>> Did you know that encrypting a picture sometimes results in a picture >>> that looks like it has been through a random color-permuting filter? >> >> Can you proof it? > > Memory of coursework in encryption. The professor did some simple > encryption on uncompressed images an

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Jason Fergus
Of course, a guy who uses a gmail account wouldn't be interested in the security of Debian. :D You know you can unsubscribe to it at anytime, right? https://lmddgtfy.net/?q=how+to+unsubscribe+debian+mailing+list On Tue, 2014-07-08 at 09:27 +0200, Fabrizio Marocchini wrote: > Please remove me

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Jason Fergus
Of course, a guy who uses a gmail account wouldn't be interested in the security of Debian. :D You know you can unsubscribe to it at anytime, right? https://lmddgtfy.net/?q=how+to+unsubscribe+debian+mailing+list On Tue, 2014-07-08 at 09:27 +0200, Fabrizio Marocchini wrote: > Please remove me

the calculus of encrypting non-textual data (was Re: concrete steps for improving apt downloading security and privacy)

2014-07-08 Thread Joel Rees
On Tue, Jul 8, 2014 at 5:13 AM, Andrea Zwirner wrote: > On 07/07/2014 13:09, Joel Rees wrote: > > Sorry Joel, I almost totally disagree with your vision on privacy and > security, but I really i don't want to go into the merit of it, because > I think Lou is representing my vision already; I only

RE: [alerts-security] [SECURITY] [DSA 2973-1] vlc security update

2014-07-08 Thread Xiwen Cheng
N/A -Original Message- From: mendix-alerts-security [mailto:mendix-alerts-security-boun...@lists.knorrie.org] On Behalf Of Moritz Muehlenhoff Sent: Monday, July 07, 2014 11:38 PM To: debian-security-annou...@lists.debian.org Subject: [alerts-security] [SECURITY] [DSA 2973-1] vlc security

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Tomasz Ciolek
On Tue, Jul 08, 2014 at 08:51:09AM +0100, Adam D. Barratt wrote: > On 2014-07-08 8:13, Tomasz Ciolek wrote: > >Perhaps the best way is to sumbmit these patches to the Debian > >fail2ban maintainer? > > You mean the person who started this thread? :) > Duh. having a fail. :) Tomasz -- Tomasz

Re: concrete steps for improving apt downloading security and privacy

2014-07-08 Thread Elias-Daniel Eizenstein
I don't understand why so much noise on this subject. Https for Debian mirrors and a server centralized, maintained and owned by Debian for debsig-verify / debsums packages it will be enough, at least for the next years. PS: from now on I will filter out any email regarding nsa, debian mirr

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Armen Igitian
Yaroslav is the maintainer of fail2ban if I am not mistaken On Tue, Jul 8, 2014 at 10:13 AM, Tomasz Ciolek wrote: > > Hi guys > > Perhaps the best way is to sumbmit these patches to the Debian fail2ban > maintainer? > > > On Mon, Jul 07, 2014 at 04:41:04PM -0600, Jason Fergus wrote: > > I run a

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Adam D. Barratt
On 2014-07-08 8:13, Tomasz Ciolek wrote: Perhaps the best way is to sumbmit these patches to the Debian fail2ban maintainer? You mean the person who started this thread? :) Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Tr

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Fabrizio Marocchini
Please remove me from this list thanks a lot On 8 July 2014 09:13, Tomasz Ciolek wrote: > > Hi guys > > Perhaps the best way is to sumbmit these patches to the Debian fail2ban > maintainer? > > > On Mon, Jul 07, 2014 at 04:41:04PM -0600, Jason Fergus wrote: > > I run a postfix at home, and I j

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Tomasz Ciolek
Hi guys Perhaps the best way is to sumbmit these patches to the Debian fail2ban maintainer? On Mon, Jul 07, 2014 at 04:41:04PM -0600, Jason Fergus wrote: > I run a postfix at home, and I just installed your new package. It does > look pretty good so far. Also reminds me I should pay more at