[Florian.Weimer@RUS.UNI-STUTTGART.DE: Re: Linux kernel sysctl() vulnerability]

2001-02-10 Thread An Thi-Nguyen Le
I don't think we have a security advisory out for this particular kernel bug; is anyone working/going to be working on this? -- An Thi-Nguyen Le |QOTD: | "I used to go to UCLA, but then my Dad got a job." --- Begin Message --- Chris Evans <[EMAIL PROTECTED]> writ

[Florian.Weimer@RUS.UNI-STUTTGART.DE: Re: Linux kernel sysctl() vulnerability]

2001-02-10 Thread An Thi-Nguyen Le
I don't think we have a security advisory out for this particular kernel bug; is anyone working/going to be working on this? -- An Thi-Nguyen Le |QOTD: | "I used to go to UCLA, but then my Dad got a job." Chris Evans <[EMAIL PROTECTED]> writes: > There ex

Re: checking security logs

2001-01-23 Thread An Thi-Nguyen Le
hine, probably of absolutely no real concern to you). Port scans aren't always port scans. Sometimes they're direct attempts to attack (for instance, through portmap or ftp), in which case you damn well will do a 'whois' on the IP address and report to the sysadmin listed in the output. -- An Thi-Nguyen Le |I guess it was all a DREAM ... or an episode of HAWAII FIVE-O ...

Re: checking security logs

2001-01-23 Thread An Thi-Nguyen Le
hine, probably of absolutely no real concern to you). Port scans aren't always port scans. Sometimes they're direct attempts to attack (for instance, through portmap or ftp), in which case you damn well will do a 'whois' on the IP address and report to the sysadmin listed in t

Re: System log monitor

2000-12-03 Thread An Thi-Nguyen Le
[An Thi-Nguyen Le - Sat, 2 Dec 2000 11:31:05 PM CST] } [Jacob Kuntz - Sat, 2 Dec 2000 11:22:12 PM CST] } } and just to make things interesting, a vanilla open scan results in } } two log records for each port i hit. i shudder to think what would happen to } } a busy site not using a loghost

Re: System log monitor

2000-12-02 Thread An Thi-Nguyen Le
[Jacob Kuntz - Sat, 2 Dec 2000 11:22:12 PM CST] } from the secret journal of An Thi-Nguyen Le ([EMAIL PROTECTED]): } > There's Psionic's logcheck, which is in both potato and woody. The } > one, the original. Goes well with portsentry (only in woody, can do } > a sourc

Re: System log monitor

2000-12-02 Thread An Thi-Nguyen Le
Psionic's logcheck, which is in both potato and woody. The one, the original. Goes well with portsentry (only in woody, can do a source compile on potato though). -- An Thi-Nguyen Le |If you didn't have to work so hard, you'd have more time to be depressed.

Re: System log monitor

2000-12-02 Thread An Thi-Nguyen Le
[An Thi-Nguyen Le - Sat, 2 Dec 2000 11:31:05 PM CST] } [Jacob Kuntz - Sat, 2 Dec 2000 11:22:12 PM CST] } } and just to make things interesting, a vanilla open scan results in } } two log records for each port i hit. i shudder to think what would happen to } } a busy site not using a loghost

Re: System log monitor

2000-12-02 Thread An Thi-Nguyen Le
[Jacob Kuntz - Sat, 2 Dec 2000 11:22:12 PM CST] } from the secret journal of An Thi-Nguyen Le ([EMAIL PROTECTED]): } > There's Psionic's logcheck, which is in both potato and woody. The } > one, the original. Goes well with portsentry (only in woody, can do } > a sourc

Re: System log monitor

2000-12-02 Thread An Thi-Nguyen Le
Psionic's logcheck, which is in both potato and woody. The one, the original. Goes well with portsentry (only in woody, can do a source compile on potato though). -- An Thi-Nguyen Le |If you didn't have to work so hard, you'd have more time to be depressed. -- To UNSUBSCRIBE,

Re: vixie cron... (fwd)

2000-11-17 Thread An Thi-Nguyen Le
i do not believe debian is vulnerable. Wrong, we *are* vulnerable. Take a look /var/spool/cron/crontabs instead. -- An Thi-Nguyen Le |Nothing takes the taste out of peanut butter quite like unrequited love. | -- Charlie Brown pgpPnhe9tBaTy.pgp Description: PGP signature

Re: vixie cron... (fwd)

2000-11-17 Thread An Thi-Nguyen Le
i do not believe debian is vulnerable. Wrong, we *are* vulnerable. Take a look /var/spool/cron/crontabs instead. -- An Thi-Nguyen Le |Nothing takes the taste out of peanut butter quite like unrequited love. | -- Charlie Brown PGP signature

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread An Thi-Nguyen Le
o protected.fake.fake.xxx (XXX.XXX.XXX.XXX). Escape character is '^]'. 220 protected.fake.fake.xxx ESMTP Postfix HELO urh1000.uiuc.edu 250 protected.fake.fake.xxx MAIL FROM:<[EMAIL PROTECTED]> 250 Ok RCPT TO:<[EMAIL PROTECTED]> 554 <[EMAIL PROTECTED]>: Recipient address reje

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread An Thi-Nguyen Le
o protected.fake.fake.xxx (XXX.XXX.XXX.XXX). Escape character is '^]'. 220 protected.fake.fake.xxx ESMTP Postfix HELO urh1000.uiuc.edu 250 protected.fake.fake.xxx MAIL FROM:<[EMAIL PROTECTED]> 250 Ok RCPT TO:<[EMAIL PROTECTED]> 554 <[EMAIL PROTECTED]>: Recipient address reje

Re: Is Open Source software really more secure?

2000-10-08 Thread An Thi-Nguyen Le
some packages within Debian (e.g. done by actual Debian developers, as opposed to random people as is the case with most rpms). -- An Thi-Nguyen Le |It is only people of small moral stature who have to stand on their dignity.

Re: Is Open Source software really more secure?

2000-10-08 Thread An Thi-Nguyen Le
some packages within Debian (e.g. done by actual Debian developers, as opposed to random people as is the case with most rpms). -- An Thi-Nguyen Le |It is only people of small moral stature who have to stand on their dignity. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]