Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Ethan Benson
g. root is there for serving purposes. with > LIDS, you're sealing the kernel to not accept potentially malicious > input from root. or the legit maintainer, no remote admin capabilities.. doesn't sound new sounds like NT. -- Ethan Benson http://www.alaska.net/~erbenson/ pgp5cSV8jvJW9.pgp Description: PGP signature

Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Ethan Benson
g. root is there for serving purposes. with > LIDS, you're sealing the kernel to not accept potentially malicious > input from root. or the legit maintainer, no remote admin capabilities.. doesn't sound new sounds like NT. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04251/pgp0.pgp Description: PGP signature

Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Ethan Benson
On Fri, Nov 16, 2001 at 02:36:30PM +0100, Mathias Gygax wrote: > On Fre, Nov 16, 2001 at 04:13:16AM -0900, Ethan Benson wrote: > > > > > Root is God. Anything you do on the system is potentially visible to > > > > root. > > this is, with the right patches appl

Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Ethan Benson
e? root usually has physical access to the hardware anyway. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpw93WLrRTEZ.pgp Description: PGP signature

Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Ethan Benson
On Fri, Nov 16, 2001 at 02:36:30PM +0100, Mathias Gygax wrote: > On Fre, Nov 16, 2001 at 04:13:16AM -0900, Ethan Benson wrote: > > > > > Root is God. Anything you do on the system is potentially visible to > > > > root. > > this is, with the right patche

Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Ethan Benson
e? root usually has physical access to the hardware anyway. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04231/pgp0.pgp Description: PGP signature

Re: 2.4.x boot floppies, was: Vulnerable SSH versions

2001-11-14 Thread Ethan Benson
On Wed, Nov 14, 2001 at 12:42:10PM +0100, Goswin Brederlow wrote: > > People with such old hardware are probably better of with bo or hamm > or potato. They probably need the low-mem target too. which are not (or will not in potato's case) be supported with security updates. --

Re: 2.4.x boot floppies, was: Vulnerable SSH versions

2001-11-14 Thread Ethan Benson
On Wed, Nov 14, 2001 at 12:42:10PM +0100, Goswin Brederlow wrote: > > People with such old hardware are probably better of with bo or hamm > or potato. They probably need the low-mem target too. which are not (or will not in potato's case) be supported with security updates. --

Re: Vulnerable SSH versions

2001-11-13 Thread Ethan Benson
On Tue, Nov 13, 2001 at 01:09:46PM +0100, Jørgen Hermanrud Fjeld wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Tuesday 13 November 2001 09:52, Ethan Benson wrote: > > 2.4 is also especially problematic on i386 since you have to fit it on > > all these arc

Re: Vulnerable SSH versions

2001-11-13 Thread Ethan Benson
On Tue, Nov 13, 2001 at 01:09:46PM +0100, Jørgen Hermanrud Fjeld wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Tuesday 13 November 2001 09:52, Ethan Benson wrote: > > 2.4 is also especially problematic on i386 since you have to fit it on > > all these

Re: Vulnerable SSH versions

2001-11-13 Thread Ethan Benson
On Tue, Nov 13, 2001 at 09:02:46AM +0100, Stefan Schwandter wrote: > On Mon, Nov 12, 2001 at 04:54:04PM -0900, Ethan Benson wrote: > > > > Which makes me wonder, why ship Woody with 2.2.20 at all? Oh well, not > > > my decision. > > > because 2.4 is not stable

Re: Vulnerable SSH versions

2001-11-13 Thread Ethan Benson
On Tue, Nov 13, 2001 at 09:02:46AM +0100, Stefan Schwandter wrote: > On Mon, Nov 12, 2001 at 04:54:04PM -0900, Ethan Benson wrote: > > > > Which makes me wonder, why ship Woody with 2.2.20 at all? Oh well, not > > > my decision. > > > because 2.4 is not stable

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
exist. yes releases before woody uses a base tarball. thats not done anymore, base tarballs are obsolete. > Which makes me wonder, why ship Woody with 2.2.20 at all? Oh well, not > my decision. because 2.4 is not stable yet. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpiHMwRxTruy.pg

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
on conflicts and missing modules. woody will, and is of course installed with 2.4 capable modutils as for transitions of pcmcia related stuff you have to take that up with the maintainers of the relevant packages. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpHSCnb7IBvH.pgp Description: PGP signature

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
ies? what tarfile? woody will ship with 2.2.20, but it will fully support 2.4 kernels, i don't know whats so difficult about installing one. -- Ethan Benson http://www.alaska.net/~erbenson/ pgp4sMLzlcrfJ.pgp Description: PGP signature

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
(that and potato only has 6(?) architectures woody will have something like 12 or more). expect to have two months to upgrade your potato boxes before being on your own in regards to security updates. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpbXfbo3CZy6.pgp Description: PGP signature

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
exist. yes releases before woody uses a base tarball. thats not done anymore, base tarballs are obsolete. > Which makes me wonder, why ship Woody with 2.2.20 at all? Oh well, not > my decision. because 2.4 is not stable yet. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04162/pgp000

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
on conflicts and missing modules. woody will, and is of course installed with 2.4 capable modutils as for transitions of pcmcia related stuff you have to take that up with the maintainers of the relevant packages. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04160/pgp0.pgp Description: PGP signature

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
l realities? what tarfile? woody will ship with 2.2.20, but it will fully support 2.4 kernels, i don't know whats so difficult about installing one. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04157/pgp0.pgp Description: PGP signature

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
(that and potato only has 6(?) architectures woody will have something like 12 or more). expect to have two months to upgrade your potato boxes before being on your own in regards to security updates. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04155/pgp0.pgp Description: PGP signature

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
to whatever version is in stable, they don't just slop new upstream versions into stable to take care of security bugs. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpFKqK4VNhsJ.pgp Description: PGP signature

Re: Vulnerable SSH versions

2001-11-12 Thread Ethan Benson
rsion is in stable, they don't just slop new upstream versions into stable to take care of security bugs. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04143/pgp0.pgp Description: PGP signature

Re: Which ssh should I have?

2001-11-09 Thread Ethan Benson
s to potato however. -- Ethan Benson http://www.alaska.net/~erbenson/ pgp0b1P2F7F59.pgp Description: PGP signature

Re: Debconf and noexec on /tmp

2001-11-09 Thread Ethan Benson
ss. as soon as everyone uses noexec all script kiddie scripts will run everything with ld to bypass it. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpTvwOiuvyIS.pgp Description: PGP signature

Re: Which ssh should I have?

2001-11-09 Thread Ethan Benson
s to potato however. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04116/pgp0.pgp Description: PGP signature

Re: Debconf and noexec on /tmp

2001-11-09 Thread Ethan Benson
s worthless. as soon as everyone uses noexec all script kiddie scripts will run everything with ld to bypass it. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04115/pgp0.pgp Description: PGP signature

Re: Debconf and noexec on /tmp

2001-11-09 Thread Ethan Benson
On Fri, Nov 09, 2001 at 02:08:17AM +0100, Wichert Akkerman wrote: > Previously Ethan Benson wrote: > > sorry i don't leave known security holes wide open on my boxes. only > > an idiot does that. > > If you think your box does not have currently unknown holes you are

Re: Debconf and noexec on /tmp

2001-11-09 Thread Ethan Benson
On Fri, Nov 09, 2001 at 02:08:17AM +0100, Wichert Akkerman wrote: > Previously Ethan Benson wrote: > > sorry i don't leave known security holes wide open on my boxes. only > > an idiot does that. > > If you think your box does not have currently unknown holes you are

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
if you think thats the only kind of attacker your naive. -- Ethan Benson http://www.alaska.net/~erbenson/ pgp4uiK3NK7BA.pgp Description: PGP signature

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
if you think thats the only kind of attacker your naive. -- Ethan Benson http://www.alaska.net/~erbenson/ msg04110/pgp0.pgp Description: PGP signature

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
On Thu, Nov 08, 2001 at 03:43:56PM +0100, Wichert Akkerman wrote: > Previously Ethan Benson wrote: > > its not, it provides you NO extra security whatsoever, and will break > > many many things. > > It breaks a fair number of scripts that script-kiddies use, and as > su

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
ally the same thing as running /bin/sh /tmp/evilshellscript instead of just /tmp/evilshellscript -- Ethan Benson http://www.alaska.net/~erbenson/ pgpGI2VOLo0LA.pgp Description: PGP signature

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
On Thu, Nov 08, 2001 at 03:43:56PM +0100, Wichert Akkerman wrote: > Previously Ethan Benson wrote: > > its not, it provides you NO extra security whatsoever, and will break > > many many things. > > It breaks a fair number of scripts that script-kiddies use, and as > su

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
ally the same thing as running /bin/sh /tmp/evilshellscript instead of just /tmp/evilshellscript -- Ethan Benson http://www.alaska.net/~erbenson/ msg04072/pgp0.pgp Description: PGP signature

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-28 Thread Ethan Benson
neither is the `real' file; they both are. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpCr3HQUkF0p.pgp Description: PGP signature

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-28 Thread Ethan Benson
neither is the `real' file; they both are. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Ethan Benson
n you get all the suids in those directories in the chroot, you also need /etc for the global config files many programs use. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpdzIHVkJvzK.pgp Description: PGP signature

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Ethan Benson
sr/bin you get all the suids in those directories in the chroot, you also need /etc for the global config files many programs use. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Ethan Benson
On Wed, Oct 24, 2001 at 01:18:52AM +, Martin WHEELER wrote: > On Tue, 23 Oct 2001, Ethan Benson wrote: > > > kernels are never upgraded automatically by apt, you have to do it > > yourself: > > That's not quite true -- should you recompile your own kernel, and fo

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-23 Thread Ethan Benson
On Wed, Oct 24, 2001 at 01:18:52AM +, Martin WHEELER wrote: > On Tue, 23 Oct 2001, Ethan Benson wrote: > > > kernels are never upgraded automatically by apt, you have to do it > > yourself: > > That's not quite true -- should you recompile your own kernel, a

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-23 Thread Ethan Benson
-- > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- Ethan Benson http://www.alaska.net/~erbenson/ pgpaEw6bSymt2.pgp Description: PGP signature

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-23 Thread Ethan Benson
-- > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-23 Thread Ethan Benson
this) of course that particular example would be noticed since the existing accounts would be gone.. but you get the idea. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpdKvhWaCgMt.pgp Description: PGP signature

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-23 Thread Ethan Benson
this) of course that particular example would be noticed since the existing accounts would be gone.. but you get the idea. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: ssh vulernability

2001-10-21 Thread Ethan Benson
On Sun, Oct 21, 2001 at 04:41:17PM -0500, Mike Renfro wrote: > On Fri, Oct 19, 2001 at 03:26:18PM -0800, Ethan Benson wrote: > > On Fri, Oct 19, 2001 at 06:06:34PM -0400, [EMAIL PROTECTED] wrote: > > > Has debian released a new ssh dpkg yet? > > > > no > >

Re: ssh vulernability

2001-10-21 Thread Ethan Benson
On Sun, Oct 21, 2001 at 04:41:17PM -0500, Mike Renfro wrote: > On Fri, Oct 19, 2001 at 03:26:18PM -0800, Ethan Benson wrote: > > On Fri, Oct 19, 2001 at 06:06:34PM -0400, [EMAIL PROTECTED] wrote: > > > Has debian released a new ssh dpkg yet? > > > > no > >

Re: ssh vulernability

2001-10-19 Thread Ethan Benson
On Fri, Oct 19, 2001 at 06:06:34PM -0400, [EMAIL PROTECTED] wrote: > Hello, > > Has debian released a new ssh dpkg yet? no -- Ethan Benson http://www.alaska.net/~erbenson/ pgpKxRSjHMTTx.pgp Description: PGP signature

Re: ssh vulernability

2001-10-19 Thread Ethan Benson
On Fri, Oct 19, 2001 at 06:06:34PM -0400, [EMAIL PROTECTED] wrote: > Hello, > > Has debian released a new ssh dpkg yet? no -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: /dev/log

2001-10-05 Thread Ethan Benson
ing which is worse). the syslog man page describes how to deal with lusers behaving in this manner, it involves sucker rod. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpJwFH9aYtks.pgp Description: PGP signature

Re: /dev/log

2001-10-05 Thread Ethan Benson
ing which is worse). the syslog man page describes how to deal with lusers behaving in this manner, it involves sucker rod. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: other chroot things

2001-10-05 Thread Ethan Benson
passwd > > root::0:0:root:/root:/bin/bash > mail::8:8:mail:/var/spool/mail:/bin/bash > pippo::100:100::/home/pippo:/bin/bash ls requires /lib/libnss_files.so.2 in order to map uid/gids to symbolic names. -- Ethan Benson http://www.alaska.net/~erbenson/ pgp4TFHOc7HWj.pgp Description: PGP signature

Re: other chroot things

2001-10-05 Thread Ethan Benson
passwd > > root::0:0:root:/root:/bin/bash > mail::8:8:mail:/var/spool/mail:/bin/bash > pippo::100:100::/home/pippo:/bin/bash ls requires /lib/libnss_files.so.2 in order to map uid/gids to symbolic names. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: password expire and sshd doesn't allow ppl to change it

2001-09-23 Thread Ethan Benson
ed in i386 security.debian.org (perhaps others, powerpc has an uninstallable update). -- Ethan Benson http://www.alaska.net/~erbenson/ pgp8hBYfHOj1y.pgp Description: PGP signature

Re: password expire and sshd doesn't allow ppl to change it

2001-09-23 Thread Ethan Benson
ed in i386 security.debian.org (perhaps others, powerpc has an uninstallable update). -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: password expire and sshd doesn't allow ppl to change it

2001-09-22 Thread Ethan Benson
On Sat, Sep 22, 2001 at 11:14:43AM -0400, Hubert Chan wrote: > As root: > # apt-get build-dep openssh that doesn't work on pototo's apt. you have to do it the old way: cd openssh-* grep ^Build debian/control look at list and apt-get install each package. -- E

Re: password expire and sshd doesn't allow ppl to change it

2001-09-22 Thread Ethan Benson
an/control and install all listed build-depends packages. > This leaves you with custom ssh packages: this is the only way until > the new version is backported. which will never happen, except possibly by someone doing it unofficially. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpVkJ59j1ymC.pgp Description: PGP signature

Re: password expire and sshd doesn't allow ppl to change it

2001-09-22 Thread Ethan Benson
On Sat, Sep 22, 2001 at 11:14:43AM -0400, Hubert Chan wrote: > As root: > # apt-get build-dep openssh that doesn't work on pototo's apt. you have to do it the old way: cd openssh-* grep ^Build debian/control look at list and apt-get install each package. -- E

Re: password expire and sshd doesn't allow ppl to change it

2001-09-22 Thread Ethan Benson
debian/control and install all listed build-depends packages. > This leaves you with custom ssh packages: this is the only way until > the new version is backported. which will never happen, except possibly by someone doing it unofficially. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: password expire and sshd doesn't allow ppl to change it

2001-09-22 Thread Ethan Benson
ce some packages use dpkg features not present in potato, or use new features in debhelper not present in potato. anyone with basic shell scripting and a bit of Makefile experience should be able to handle that with not much difficulty. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpFGc1mKqqWy.pgp Description: PGP signature

Re: password expire and sshd doesn't allow ppl to change it

2001-09-22 Thread Ethan Benson
ce some packages use dpkg features not present in potato, or use new features in debhelper not present in potato. anyone with basic shell scripting and a bit of Makefile experience should be able to handle that with not much difficulty. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: password expire and sshd doesn't allow ppl to change it

2001-09-22 Thread Ethan Benson
denies access flat out. your only option is either upgrading to woody or backporting the woody ssh package to potato (probably not very hard at all). i recommend backporting the sid ssh packages to potato. if someone hasn't already done that... -- Ethan Benson http://www.alaska.net/~er

Re: password expire and sshd doesn't allow ppl to change it

2001-09-22 Thread Ethan Benson
denies access flat out. your only option is either upgrading to woody or backporting the woody ssh package to potato (probably not very hard at all). i recommend backporting the sid ssh packages to potato. if someone hasn't already done that... -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: setuid changes

2001-09-21 Thread Ethan Benson
I missing something? > > Micah > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- Ethan Benson http://www.alaska.net/~erbenson/ pgpBsIAzS6zjF.pgp Description: PGP signature

Re: setuid changes

2001-09-21 Thread Ethan Benson
I missing something? > > Micah > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: Is ident secure?

2001-09-01 Thread Ethan Benson
On Fri, Aug 31, 2001 at 08:09:23PM -0700, Scott Sawyer wrote: > Hey dude, > > the advice was fairly clear and didn't seem to be derogatory that I read. > Just remember we all started out as clueless. not THAT clueless! -- Ethan Benson http://www.alaska.net/~erbenson/

Re: Layne (was: Re: Is ident secure?)

2001-09-01 Thread Ethan Benson
7;t buy it for one minute that he just magically got subscribed by no effort of himself. -- Ethan Benson http://www.alaska.net/~erbenson/ pgprfmtuPOVHS.pgp Description: PGP signature

Re: Is ident secure?

2001-08-31 Thread Ethan Benson
On Fri, Aug 31, 2001 at 08:09:23PM -0700, Scott Sawyer wrote: > Hey dude, > > the advice was fairly clear and didn't seem to be derogatory that I read. > Just remember we all started out as clueless. not THAT clueless! -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: Layne (was: Re: Is ident secure?)

2001-08-31 Thread Ethan Benson
don't buy it for one minute that he just magically got subscribed by no effort of himself. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: Is ident secure?

2001-08-31 Thread Ethan Benson
it would be a good idea to make /home unreadable by all its users for `security' reasons, of course this makes everyones shell puke when it cannot properly ascertain the pwd so they seem to have changed thier minds on this. (that and cat /etc/passwd will reveal everything ls

Re: Is ident secure?

2001-08-31 Thread Ethan Benson
roublesome user, he can then supply log snippets relevant to the alleged transgressions, complete with ident responses from your machines, if you configured your identd not to lie, and not to allow your users to make it lie you will most likely have an accurate pointer to the troublemaker so you c

Re: Is ident secure?

2001-08-31 Thread Ethan Benson
t the actual username is really isn't useful nor important. security through obscurity is all your really gaining. i am more concerned that the services i run are properly configured and have all security updates applied then whether someone knows what userid they are running as. -- E

Re: Is ident secure?

2001-08-31 Thread Ethan Benson
ught it would be a good idea to make /home unreadable by all its users for `security' reasons, of course this makes everyones shell puke when it cannot properly ascertain the pwd so they seem to have changed thier minds on this. (that and cat /etc/passwd will reveal everything ls -l /hom

Re: Is ident secure?

2001-08-31 Thread Ethan Benson
roublesome user, he can then supply log snippets relevant to the alleged transgressions, complete with ident responses from your machines, if you configured your identd not to lie, and not to allow your users to make it lie you will most likely have an accurate pointer to the troublemaker so you c

Re: Is ident secure?

2001-08-31 Thread Ethan Benson
t the actual username is really isn't useful nor important. security through obscurity is all your really gaining. i am more concerned that the services i run are properly configured and have all security updates applied then whether someone knows what userid they are running as. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: Sniffing SSH and HTTPS

2001-08-29 Thread Ethan Benson
ey wrench in this whole `sniffing encrypted sessions' nonsense. Solar Designer's analysis talked about this iirc. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpAlAQsZTN3c.pgp Description: PGP signature

Re: Sniffing SSH and HTTPS

2001-08-29 Thread Ethan Benson
a monkey wrench in this whole `sniffing encrypted sessions' nonsense. Solar Designer's analysis talked about this iirc. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Ethan Benson
unstable is 2.9p2, testing (woody) has 2.5.2p2, these are unreleased versions of debian though. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpvabTD2hvz8.pgp Description: PGP signature

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Ethan Benson
unstable is 2.9p2, testing (woody) has 2.5.2p2, these are unreleased versions of debian though. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: pop3

2001-07-29 Thread Ethan Benson
gt; mutt. Anyone know why? not configuring $EDITOR correctly. mutt doesn't have an editor, it uses vi, emacs or whatever you set $EDITOR to. for emacs add this to your ~/.emacs: (setq auto-mode-alist (cons '("/tmp/mutt*" . auto-fill-mode)

Re: pop3

2001-07-29 Thread Ethan Benson
ike > mutt. Anyone know why? not configuring $EDITOR correctly. mutt doesn't have an editor, it uses vi, emacs or whatever you set $EDITOR to. for emacs add this to your ~/.emacs: (setq auto-mode-alist (cons '("/tmp/mutt*" . auto-fill-mode)

Re: umask for init

2001-07-24 Thread Ethan Benson
er is the correct solution, i tend to agree to that, but i don't agree that the kernel should start processes with a broken umask to begin with. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpGQRIPxC2av.pgp Description: PGP signature

Re: umask for init

2001-07-24 Thread Ethan Benson
the latter is the correct solution, i tend to agree to that, but i don't agree that the kernel should start processes with a broken umask to begin with. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: umask for init

2001-07-23 Thread Ethan Benson
including this in your find will clutter the output to the point of unusability) -- Ethan Benson http://www.alaska.net/~erbenson/ pgppiPWysg2pl.pgp Description: PGP signature

Re: umask for init

2001-07-23 Thread Ethan Benson
6 so including this in your find will clutter the output to the point of unusability) -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sun, Jul 22, 2001 at 07:11:04PM +1000, CaT wrote: > On Sun, Jul 22, 2001 at 02:08:36AM -0700, Jacob Meuser wrote: > > I mentioned that OpenBSD has a policy of not starting services by > > default. Ethan Benson went off on how OpenBSD is "rubbish". As no i said the

Re: red worm amusement

2001-07-22 Thread Ethan Benson
ignorance and incompetence onto debian because you installed a zillion services and didn't know what they did thus opening lots of `security holes'. yeah whatever. what part of `don't install the service if you don't need it/don't know how to configure it' don&

Re: red worm amusement

2001-07-22 Thread Ethan Benson
response i expect from a marketing person. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpHxdeRowuRT.pgp Description: PGP signature

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sun, Jul 22, 2001 at 07:11:04PM +1000, CaT wrote: > On Sun, Jul 22, 2001 at 02:08:36AM -0700, Jacob Meuser wrote: > > I mentioned that OpenBSD has a policy of not starting services by > > default. Ethan Benson went off on how OpenBSD is "rubbish". As no i said the

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sat, Jul 21, 2001 at 11:39:36PM -0700, Jacob Meuser wrote: > I think it is quite fitting. i think is a 21st century varient of Godwin's law developing. -- Ethan Benson http://www.alaska.net/~erbenson/ pgp4AnOA3mFuw.pgp Description: PGP signature

Re: red worm amusement

2001-07-22 Thread Ethan Benson
[No][Abort] > > > > Do you want something like that? or: WARNING: Coffee is served HOT! [0] -- Ethan Benson http://www.alaska.net/~erbenson/ [0] for those who don't remember there was a case some years ago where a woman sued McDonalds after she spilled a cup of thie

Re: red worm amusement

2001-07-22 Thread Ethan Benson
alled an OpenBSD box you would see that is not true. as for debian services are only started if you install them, a very logical assumption. criticising debian's choices in regards to what services are priority: standard could be a valid argument. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpcIUb0NnbrZ.pgp Description: PGP signature

Re: red worm amusement

2001-07-22 Thread Ethan Benson
ignorance and incompetence onto debian because you installed a zillion services and didn't know what they did thus opening lots of `security holes'. yeah whatever. what part of `don't install the service if you don't need it/don't know how to configure it' don&

Re: red worm amusement

2001-07-22 Thread Ethan Benson
response i expect from a marketing person. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: red worm amusement

2001-07-21 Thread Ethan Benson
On Sat, Jul 21, 2001 at 11:39:36PM -0700, Jacob Meuser wrote: > I think it is quite fitting. i think is a 21st century varient of Godwin's law developing. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: red worm amusement

2001-07-21 Thread Ethan Benson
[No][Abort] > > > > Do you want something like that? or: WARNING: Coffee is served HOT! [0] -- Ethan Benson http://www.alaska.net/~erbenson/ [0] for those who don't remember there was a case some years ago where a woman sued McDonalds after she spilled a cup of thie

Re: red worm amusement

2001-07-21 Thread Ethan Benson
alled an OpenBSD box you would see that is not true. as for debian services are only started if you install them, a very logical assumption. criticising debian's choices in regards to what services are priority: standard could be a valid argument. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: red worm amusement

2001-07-21 Thread Ethan Benson
h `but they are not exploitable' which is rubbish of course. go annoy someone else. i can change nothing in debian, i am not a debian developer, go annoy one of them. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpUsKNsqyfYb.pgp Description: PGP signature

Re: red worm amusement

2001-07-21 Thread Ethan Benson
unning the next time they reboot. well people need to learn. you can't treat computers like toasters anymore. deal with it. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpIC130b3ULJ.pgp Description: PGP signature

Re: red worm amusement

2001-07-21 Thread Ethan Benson
h `but they are not exploitable' which is rubbish of course. go annoy someone else. i can change nothing in debian, i am not a debian developer, go annoy one of them. -- Ethan Benson http://www.alaska.net/~erbenson/ PGP signature

Re: red worm amusement

2001-07-21 Thread Ethan Benson
gain after all of these years i think ill bring up another timeless quote: "fool me once, shame on you, fool me twice shame on me" -- Ethan Benson http://www.alaska.net/~erbenson/ pgp4aYTtRhbva.pgp Description: PGP signature

  1   2   3   4   5   >