Re: Possible buffer overflows = security problem?

2003-09-08 Thread Preben Randhol
Wade Richards [EMAIL PROTECTED] wrote on 08/09/2003 (10:10) : The safest approach is always to ensure that the answer to the first question is no, so you don't need to worry about the second one. And the only approach! Never take calculated risks in these matter when one is dealing with C/C++

Re: Strongest linux - kernel patches

2003-07-02 Thread Preben Randhol
Alvin Oga [EMAIL PROTECTED] wrote on 02/07/2003 (12:46) : rest of the kernel hardening patches http://linux-sec.net/Harden/kernel.gwif.html What about: http://www.nsa.gov/selinux/ ? -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php -- To

Re: Strongest linux - kernel patches

2003-07-02 Thread Preben Randhol
Alvin Oga [EMAIL PROTECTED] wrote on 02/07/2003 (12:46) : rest of the kernel hardening patches http://linux-sec.net/Harden/kernel.gwif.html What about: http://www.nsa.gov/selinux/ ? -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php

Why is proftpd always started when one update it?

2003-06-30 Thread Preben Randhol
understand why this is still the default behaviour of Debian GNU/Linux. If somebody could explain why it is like this it would be nice. Thanks in advance. Preben Randhol -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php -- To UNSUBSCRIBE, email

Why is proftpd always started when one update it?

2003-06-30 Thread Preben Randhol
understand why this is still the default behaviour of Debian GNU/Linux. If somebody could explain why it is like this it would be nice. Thanks in advance. Preben Randhol -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php

Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
Hi I'm looking for a way to log into my computer via ssh and a web browser. I see mindterm can do this, but last I checked it used ssh 2.0, and I understood that there where security issues with this. Is that correct? Are there any replacement software for mindterm? Thanks of any hints in

Re: Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
Anne Carasik [EMAIL PROTECTED] wrote on 13/05/2002 (17:55) : Security issues? Can you be more specific? There aren't any security issues (yet) with the SSH 2.0 protocol. From what I know, there aren't any issues using mindterm for 2.0 either :) But the Mindterm package in Debian does

Re: Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
for. I guess there are no mindterm clones out there with SSH 2.0 support (Open Source/Free Software of course)? -- Preben Randhol --- http://www.pvv.org/~randhol/ -- «For me, Ada95 puts back the joy in programming.» -- To UNSUBSCRIBE, email to [EMAIL PROTECTED

Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
Hi I'm looking for a way to log into my computer via ssh and a web browser. I see mindterm can do this, but last I checked it used ssh 2.0, and I understood that there where security issues with this. Is that correct? Are there any replacement software for mindterm? Thanks of any hints in

Re: Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
Anne Carasik [EMAIL PROTECTED] wrote on 13/05/2002 (17:55) : Security issues? Can you be more specific? There aren't any security issues (yet) with the SSH 2.0 protocol. From what I know, there aren't any issues using mindterm for 2.0 either :) But the Mindterm package in Debian does

Re: Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
for. I guess there are no mindterm clones out there with SSH 2.0 support (Open Source/Free Software of course)? -- Preben Randhol --- http://www.pvv.org/~randhol/ -- «For me, Ada95 puts back the joy in programming.» -- To UNSUBSCRIBE, email to [EMAIL PROTECTED

Re: ssh and scp and odd log reporting

2002-02-05 Thread Preben Randhol
Vineet Kumar [EMAIL PROTECTED] wrote on 05/02/2002 (11:23) : * Preben Randhol ([EMAIL PROTECTED]) [020202 05:22]: The Accepted keyboard-interactive bit is given by your ssh server. It's just letting you know that krutt connected using the keyboard-interactive authentication method. Other

Re: ssh and scp and odd log reporting

2002-02-05 Thread Preben Randhol
Vineet Kumar [EMAIL PROTECTED] wrote on 05/02/2002 (11:23) : * Preben Randhol ([EMAIL PROTECTED]) [020202 05:22]: The Accepted keyboard-interactive bit is given by your ssh server. It's just letting you know that krutt connected using the keyboard-interactive authentication method. Other

ssh and scp and odd log reporting

2002-02-02 Thread Preben Randhol
-existent entry; MAIL and on the other machine it says: stdin: is not a tty. If I use scp towards another machine (not a Debian) I dont see the: stdin: is not a tty -- Preben Randhol «For me, Ada95 puts back the joy in programming.» -- To UNSUBSCRIBE, email to [EMAIL PROTECTED

Re: Exim Relay

2002-02-02 Thread Preben Randhol
Laurent Luyckx [EMAIL PROTECTED] wrote on 01/02/2002 (16:30) : In exim.conf, put hosts_accept_relay with a list of authorized IP. ex: hosts_accept_relay = localhost:192.168.0.0/24 ^^^ why this IP? -- Preben Randhol

ssh and scp and odd log reporting

2002-02-02 Thread Preben Randhol
and delete non-existent entry; MAIL and on the other machine it says: stdin: is not a tty. If I use scp towards another machine (not a Debian) I dont see the: stdin: is not a tty -- Preben Randhol «For me, Ada95 puts back the joy in programming.»

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
And if one do: procedure example is type C_String_Type is array (1..10) of Character; a : C_String_type; begin a := ('1','2','3','4','5','6','7','8','9','A','B','C','D'); end example; then when compiling: % gnatmake example.adb gnatgcc -c example.adb

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
CONSTRAINT_ERROR : example.adb:26 So as the compiler said the code would not run without a constraint error being raised at line 26 which is the faulty code. Preben Randhol -- «For me, Ada95 puts back the joy in programming.»

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
And if one do: procedure example is type C_String_Type is array (1..10) of Character; a : C_String_type; begin a := ('1','2','3','4','5','6','7','8','9','A','B','C','D'); end example; then when compiling: % gnatmake example.adb gnatgcc -c example.adb

Re: the su - user thread [Potential Debian Security Issue]

2002-01-22 Thread Preben Randhol
Adam Warner [EMAIL PROTECTED] wrote on 22/01/2002 (10:00) : Here's how you can reproduce it (running Debian unstable): 1. Log in as root 2. su - user if you here write whoami instead of starting X what does it say? Preben -- () Join the worldwide campaign to protect fundamental human

Re: the su - user thread [Potential Debian Security Issue]

2002-01-22 Thread Preben Randhol
Adam Warner [EMAIL PROTECTED] wrote on 22/01/2002 (10:00) : Here's how you can reproduce it (running Debian unstable): 1. Log in as root 2. su - user if you here write whoami instead of starting X what does it say? Preben -- () Join the worldwide campaign to protect fundamental human

Re: protection against buffer overflows

2002-01-19 Thread Preben Randhol
Tim Uckun [EMAIL PROTECTED] wrote on 19/01/2002 (10:16) : Has anyone any interesting comments about theses methods ? There are also alternative languages like cyclone http://www.research.att.com/projects/cyclone/ (which is based on C) and of course you could use a high level anguage

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Dietmar Braun [EMAIL PROTECTED] wrote on 14/01/2002 (12:21) : Anybody residing near to the korean border who can take the great scissor and cut off the cable from korea to the civilized world? Nothing but spam coming from this foolish idiots... Well if one should do like you say then one

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Oystein Viggen [EMAIL PROTECTED] wrote on 14/01/2002 (15:24) : * [Oystein Viggen] :0 * ^Content-Type: text/html|\ ^Subject:.*=\?ks_c_5601-1987\? Spambox Why not simply: :0 * ^Content-Type: text/html Spambox I have never gotten a html mail worth reading. Preben -- «.., chaos is found

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Oystein Viggen [EMAIL PROTECTED] wrote on 14/01/2002 (17:14) : Note the |, thats an OR. My rule kills all html-mail but also (I believe), all that unintelligible Korean spam. Ah I missed that. Preben -- () Join the worldwide campaign to protect fundamental human rights. '||} {||'

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Dietmar Braun [EMAIL PROTECTED] wrote on 14/01/2002 (12:21) : Anybody residing near to the korean border who can take the great scissor and cut off the cable from korea to the civilized world? Nothing but spam coming from this foolish idiots... Well if one should do like you say then one

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Oystein Viggen [EMAIL PROTECTED] wrote on 14/01/2002 (15:24) : * [Oystein Viggen] :0 * ^Content-Type: text/html|\ ^Subject:.*=\?ks_c_5601-1987\? Spambox Why not simply: :0 * ^Content-Type: text/html Spambox I have never gotten a html mail worth reading. Preben -- «.., chaos is found

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Oystein Viggen [EMAIL PROTECTED] wrote on 14/01/2002 (17:14) : Note the |, thats an OR. My rule kills all html-mail but also (I believe), all that unintelligible Korean spam. Ah I missed that. Preben -- () Join the worldwide campaign to protect fundamental human rights. '||} {||'

Re: I've been hacked by DevilSoul

2002-01-11 Thread Preben Randhol
reinstall programs too. You should reinstall programs from the net/CD distro and update all programs that has security fixes. You should only install user files and not configuration files without checking. -- Preben Randhol --- http://www.pvv.org/~randhol

Re: I've been hacked by DevilSoul

2002-01-11 Thread Preben Randhol
reinstall programs too. You should reinstall programs from the net/CD distro and update all programs that has security fixes. You should only install user files and not configuration files without checking. -- Preben Randhol --- http://www.pvv.org/~randhol

Re: mounting /tmp noexec

2002-01-03 Thread Preben Randhol
Alexey Vyskubov [EMAIL PROTECTED] wrote on 03/01/2002 (09:23) : [terrapin] 08:46:52 ~$ sudo mount -o remount,noexec /tmp Password: [terrapin] 08:47:11 ~$ touch /tmp/a [terrapin] 08:47:14 ~$ chmod +x /tmp/a [terrapin] 08:47:17 ~$ ls -l /tmp/a -rwxr-xr-x1 alexey alexey 0 ñÎ×

Re: mounting /tmp noexec

2002-01-03 Thread Preben Randhol
Tollef Fog Heen [EMAIL PROTECTED] wrote on 03/01/2002 (18:09) : * Preben Randhol | what happens if you do: | | sh -x /tmp/a It works just fine. That is part of why noexec is pointless. Just as I thought. Preben -- () Join the worldwide campaign to protect fundamental human rights

Re: mounting /tmp noexec

2002-01-03 Thread Preben Randhol
Alexey Vyskubov [EMAIL PROTECTED] wrote on 03/01/2002 (09:23) : [terrapin] 08:46:52 ~$ sudo mount -o remount,noexec /tmp Password: [terrapin] 08:47:11 ~$ touch /tmp/a [terrapin] 08:47:14 ~$ chmod +x /tmp/a [terrapin] 08:47:17 ~$ ls -l /tmp/a -rwxr-xr-x1 alexey alexey 0 ñÎ×

Re: mounting /tmp noexec

2002-01-03 Thread Preben Randhol
Tollef Fog Heen [EMAIL PROTECTED] wrote on 03/01/2002 (18:09) : * Preben Randhol | what happens if you do: | | sh -x /tmp/a It works just fine. That is part of why noexec is pointless. Just as I thought. Preben -- () Join the worldwide campaign to protect fundamental human rights

Re: Exim mail

2001-12-16 Thread Preben Randhol
Daniel Rychlik [EMAIL PROTECTED] wrote on 15/12/2001 (12:34) : Thanks for the reply on this. I just found the header info. It does appear that he sent it from a remailer. Thanks again, Sorry for the stupidity. You may want to read: http://mail-abuse.org/tsi/ though. -- () Join

Re: Exim mail

2001-12-16 Thread Preben Randhol
Daniel Rychlik [EMAIL PROTECTED] wrote on 15/12/2001 (12:34) : Thanks for the reply on this. I just found the header info. It does appear that he sent it from a remailer. Thanks again, Sorry for the stupidity. You may want to read: http://mail-abuse.org/tsi/ though. -- () Join