Re: dropbox security situation

2019-12-09 Thread Andrei POPESCU
On Lu, 09 dec 19, 14:17:39, John Hasler wrote: > Jonas Smedegaard writes: > > I dislike APG because it generates passwords difficult to remember - > > without aiding in how to deal with that, which has a high risk of > > passwords getting stored on physical notes in the top drawer... > > Bruce Sc

Re: dropbox security situation

2019-12-09 Thread Andrei POPESCU
On Lu, 09 dec 19, 18:35:46, Celejar wrote: > > I understand that many recommend encrypting the password store, but I > haven't yet done this. 'pass', recommended by Jonas in another message > in this thread, uses gpg to do this, and your recommendation of scrypt, > IIUC, would serve a similar goal

Re: Best/Proper way to dist-upgrade Debian Testing except the kernel?

2019-12-09 Thread Andrei POPESCU
On Lu, 09 dec 19, 20:27:28, riveravaldez wrote: > > Just to clarify: How long one could go on upgrading debian-testing > (kernel included) without rebooting? As long as it is acceptable for you to run the system with known security flaws. Kind regards, Andrei -- http://wiki.debian.org/FAQsFrom

Re: iptables firewall and web sites not loading

2019-12-09 Thread Pascal Hambourg
Le 10/12/2019 à 00:01, Nektarios Katakis a écrit : I am running an iptables firewall on an openwrt router I ve got. Which acts as Firewall/gateway and performs NATing for my internal network - debian PCs and android phones. All good but specific web sites are not loading for the machines that a

Re: Best/Proper way to dist-upgrade Debian Testing except the kernel?

2019-12-09 Thread songbird
riveravaldez wrote: ... > Hi, thanks a lot for the answers/info. > > Just to clarify: How long one could go on upgrading debian-testing > (kernel included) without rebooting? why would you not want to reboot? if you aren't going to use the upgrades why are you making them? if you think there a

Re: iptables firewall and web sites not loading

2019-12-09 Thread john doe
On 12/10/2019 12:01 AM, Nektarios Katakis wrote: > Hello, > > I am running an iptables firewall on an openwrt router I ve got. Which > acts as Firewall/gateway and performs NATing for my internal network - > debian PCs and android phones. > > All good but specific web sites are not loading for the

Re: Shouldn't a window manager has xserver as dependency ?

2019-12-09 Thread Roberto C . Sánchez
On Tue, Dec 10, 2019 at 02:04:54AM +0200, aprekates wrote: >sudo apt-cache depends twm >twm >  Depends: menu >  Depends: libc6 >  Depends: libice6 >  Depends: libsm6 >  Depends: libx11-6 >  Depends: libxext6 >  Depends: libxmu6 >  Depends: libxt6 > >$ su

Shouldn't a window manager has xserver as dependency ?

2019-12-09 Thread aprekates
sudo apt-cache depends twm twm   Depends: menu   Depends: libc6   Depends: libice6   Depends: libsm6   Depends: libx11-6   Depends: libxext6   Depends: libxmu6   Depends: libxt6 $ sudo apt-cache show twm Provides: x-window-manager Description-en: Tab window manager  twm is a window mana

Re: dropbox security situation

2019-12-09 Thread Celejar
On Mon, 9 Dec 2019 19:34:29 + Brian wrote: > On Mon 09 Dec 2019 at 14:10:56 -0500, Celejar wrote: ... > > Although I almost always use it with its --secure option, since I > > don't try to memorize passwords, but instead record them (in a plain > > text file) - who can remember hundreds of

Re: Best/Proper way to dist-upgrade Debian Testing except the kernel?

2019-12-09 Thread riveravaldez
On 12/4/19, songbird wrote: > Sven Hartge wrote: >> riveravaldez wrote: >> >>> Because updating the kernel requires to reboot the system -AFAIK- in >>> many cases I would prefer to 'dist-upgrade' (all packages) except the >>> kernel -until a moment in which I can reboot the system-, so: >> >>> 1.

iptables firewall and web sites not loading

2019-12-09 Thread Nektarios Katakis
Hello, I am running an iptables firewall on an openwrt router I ve got. Which acts as Firewall/gateway and performs NATing for my internal network - debian PCs and android phones. All good but specific web sites are not loading for the machines that are sitting behind the home router. When atte

Re: [OT] Google security

2019-12-09 Thread Nicholas Geovanis
On Mon, Dec 9, 2019 at 2:29 PM John Hasler wrote: > Nicholas Geovanis writes: > > You are safe (now) so others' freedoms need not be respected. Your > > first jump down the slippery slope :-) Jefferson the slave-master > > would have said that you have taken one hand off the wolf's ears. > > Goo

Re: [OT] Google security

2019-12-09 Thread Nicolas George
Charles Curley (12019-12-09): > Archaeological record. Are not history. Can we close this useless subthread now?

Re: dropbox security situation

2019-12-09 Thread Jonas Smedegaard
Quoting John Hasler (2019-12-09 21:17:39) > Jonas Smedegaard writes: > > I dislike APG because it generates passwords difficult to remember - > > without aiding in how to deal with that, which has a high risk of > > passwords getting stored on physical notes in the top drawer... > > Bruce Schne

Re: [OT] Google security

2019-12-09 Thread Andrei POPESCU
On Lu, 09 dec 19, 14:28:39, John Hasler wrote: > Nicholas Geovanis writes: > > You are safe (now) so others' freedoms need not be respected. Your > > first jump down the slippery slope :-) Jefferson the slave-master > > would have said that you have taken one hand off the wolf's ears. > > Good luc

Re: [OT] Google security

2019-12-09 Thread Charles Curley
On Mon, 9 Dec 2019 20:01:04 +0100 Nicolas George wrote: > Maybe you have studied a lot of it, but apparently not in depth enough > to know that we have less than 5500 years of it. Archaeological record. -- Does anybody read signatures any more? https://charlescurley.com https://charlescurley.

Re: dropbox security situation

2019-12-09 Thread Jonas Smedegaard
Quoting John Hasler (2019-12-09 20:40:06) > Charles Curley writes: > > There is a handy password generator available on Debian, called APG > > (Automated Password Generator), which will generate passwords for you. > > The default settings yield a fairly strong password, but you can > > modify thos

Re: [OT] Google security

2019-12-09 Thread John Hasler
Charles Curley writes: > How do you know that? Mr. Snowden, among others, has made it > abundantly clear that the US government is perfectly willing to do > mass surveillance and other intrusions without the slightest notice to > the Congress, never mind the public. Read what I actually wrote. I

Re: [OT] Google security

2019-12-09 Thread John Hasler
Nicholas Geovanis writes: > You are safe (now) so others' freedoms need not be respected. Your > first jump down the slippery slope :-) Jefferson the slave-master > would have said that you have taken one hand off the wolf's ears. > Good luck :-) don't let go the other ear or you become the slave

Re: Running sudo without being in sudo group.

2019-12-09 Thread Andrei POPESCU
On Lu, 09 dec 19, 12:54:24, aprekates wrote: > > I'll refreshed my wiki creds. I'll try to use it. Just wasnt sure for that. If in doubt just ask here ;) Kind regards, Andrei -- http://wiki.debian.org/FAQsFromDebianUser signature.asc Description: PGP signature

Re: [OT] Google security

2019-12-09 Thread Andrei POPESCU
On Lu, 09 dec 19, 11:16:32, John Hasler wrote: > Charlie writes: > > Over many years, although, I may not ever be in possession of anything > > of interest to anyone? > > There are two distinct "security" condsiderations here that are often > munged together: > > 1) Our ethical/moral/political ob

Re: dropbox security situation

2019-12-09 Thread John Hasler
Jonas Smedegaard writes: > I dislike APG because it generates passwords difficult to remember - > without aiding in how to deal with that, which has a high risk of > passwords getting stored on physical notes in the top drawer... Bruce Schneier recommends writing passwords down and then keeping t

Re: [OT] Google security

2019-12-09 Thread Brian
On Mon 09 Dec 2019 at 19:50:21 +, Brian wrote: > On Mon 09 Dec 2019 at 11:58:57 -0600, Nicholas Geovanis wrote: > > > On Mon, Dec 9, 2019 at 11:17 AM John Hasler wrote: > > > > > The data trawling activities of my > > > government[2] angers me but when I think about it objectively I realiz

Re: [OT] Google security

2019-12-09 Thread Brian
On Mon 09 Dec 2019 at 11:58:57 -0600, Nicholas Geovanis wrote: > On Mon, Dec 9, 2019 at 11:17 AM John Hasler wrote: > > > The data trawling activities of my > > government[2] angers me but when I think about it objectively I realize > > that it does me no actual harm: I'm simply not someone the

Re: dropbox security situation

2019-12-09 Thread John Hasler
Charles Curley writes: > There is a handy password generator available on Debian, called APG > (Automated Password Generator), which will generate passwords for you. > The default settings yield a fairly strong password, but you can > modify those to make the results even stronger. Considering th

Re: dropbox security situation

2019-12-09 Thread Brian
On Mon 09 Dec 2019 at 14:10:56 -0500, Celejar wrote: > On Mon, 09 Dec 2019 16:31:35 +0100 > Jonas Smedegaard wrote: > > > Quoting Charles Curley (2019-12-09 15:56:26) > > > On Sun, 8 Dec 2019 18:55:12 +0100 (CET) > > > wrote: > > > > > > > Usual advice : use strong passwords (i.e. long enough

Re: dropbox security situation

2019-12-09 Thread Celejar
On Mon, 09 Dec 2019 16:31:35 +0100 Jonas Smedegaard wrote: > Quoting Charles Curley (2019-12-09 15:56:26) > > On Sun, 8 Dec 2019 18:55:12 +0100 (CET) > > wrote: > > > > > Usual advice : use strong passwords (i.e. long enough with high > > > entropy => generated&stored in a dedicated password ma

Re: [OT] Google security

2019-12-09 Thread Nicolas George
Charles Curley (12019-12-09): > Having studied more than ten thousand years of history Maybe you have studied a lot of it, but apparently not in depth enough to know that we have less than 5500 years of it. Regards, -- Nicolas George signature.asc Description: PGP signature

Re: [OT] Google security

2019-12-09 Thread Charles Curley
On Mon, 09 Dec 2019 11:16:32 -0600 John Hasler wrote: > The data trawling activities of my > government[2] angers me but when I think about it objectively I > realize that it does me no actual harm: How do you know that? Mr. Snowden, among others, has made it abundantly clear that the US govern

Re: dropbox security situation

2019-12-09 Thread Brian
On Mon 09 Dec 2019 at 16:31:35 +0100, Jonas Smedegaard wrote: > Quoting Charles Curley (2019-12-09 15:56:26) > > On Sun, 8 Dec 2019 18:55:12 +0100 (CET) > > wrote: > > > > > Usual advice : use strong passwords (i.e. long enough with high > > > entropy => generated&stored in a dedicated password

Re: [OT] Google security

2019-12-09 Thread Nicholas Geovanis
On Mon, Dec 9, 2019 at 11:17 AM John Hasler wrote: > The data trawling activities of my > government[2] angers me but when I think about it objectively I realize > that it does me no actual harm: I'm simply not someone they care about. > You are safe (now) so others' freedoms need not be respec

Re: Authentication for telnet.

2019-12-09 Thread Charles Curley
On Mon, 09 Dec 2019 08:21:27 -0800 pe...@easthope.ca wrote: > > telnetd is INSECURE and SHOULD NOT BE USED unless you have ... > > EXPLICITLY STATED reason. > > Where is that policy published? Where should the description of use > be submitted for approval? I have no idea whose policy you r

Re: [OT] Google security

2019-12-09 Thread John Hasler
Charlie writes: > Over many years, although, I may not ever be in possession of anything > of interest to anyone? There are two distinct "security" condsiderations here that are often munged together: 1) Our ethical/moral/political objections to being tracked and snooped on. 2) Our actual ris

Bullying; was: Re: Authentication for telnet.

2019-12-09 Thread peter
From: Greg Wooledge Date: Wed, 2 Oct 2019 09:11:55 -0400 > They gave you the rope and the instructions. It's up to you to actually > tie the noose around your own neck. > > Just delete the stupidly obvious this-line-is-commented-out-on-purpose > token, and then reload inetd. If you don't know h

Re: dropbox security situation

2019-12-09 Thread Jonas Smedegaard
Quoting Charles Curley (2019-12-09 15:56:26) > On Sun, 8 Dec 2019 18:55:12 +0100 (CET) > wrote: > > > Usual advice : use strong passwords (i.e. long enough with high > > entropy => generated&stored in a dedicated password manager) AND 1 > > different per service, never the same. > > There is a h

Re: dropbox security situation

2019-12-09 Thread Jude DaShiell
On Mon, 9 Dec 2019, Charles Curley wrote: > Date: Mon, 9 Dec 2019 09:56:26 > From: Charles Curley > To: debian-user@lists.debian.org > Subject: Re: dropbox security situation > Resent-Date: Mon, 9 Dec 2019 14:57:02 + (UTC) > Resent-From: debian-user@lists.debian.org > > On Sun, 8 Dec 2019 18

Re: dropbox security situation

2019-12-09 Thread Charles Curley
On Sun, 8 Dec 2019 18:55:12 +0100 (CET) wrote: > Usual advice : use strong passwords (i.e. long enough with high > entropy => generated&stored in a dedicated password manager) AND 1 > different per service, never the same. There is a handy password generator available on Debian, called APG (Auto

Re: Running sudo without being in sudo group.

2019-12-09 Thread aprekates
Thanks all for the usefull feedback. I was finding many related tutorials from popular searchengines some using the method to add to the group and others editing /etc/sudoers I think the remarks made  put the issue in the correct perspective and wiki change  is more correct. I'll refreshed

Re: Is this ALL good advise

2019-12-09 Thread Reco
On Mon, Dec 09, 2019 at 08:46:13PM +1100, Keith Bainbridge wrote: > On 9/12/19 6:57 pm, Reco wrote: > > ll it takes is to look at APNIC record with whois. > > Shows your ISP and a city it's operating at. > > I could dig deeper, but I'm lazy. > Thanks Andrei > > > I got 3 addresses > 2 of them abo

Re: Running sudo without being in sudo group.

2019-12-09 Thread Joe
On Mon, 9 Dec 2019 11:22:56 +0200 aprekates wrote: > In https://wiki.debian.org/sudo it says: > > In order for a user to run sudo, the user must belong to group=sudo. > > But i see that adding a line in /etc/sudoers can allow me execute > sudo without being in the sudo group. > > Do i miss sth

Re: Running sudo without being in sudo group.

2019-12-09 Thread Ansgar
aprekates writes: > In https://wiki.debian.org/sudo it says: > > In order for a user to run sudo, the user must belong to group=sudo. > > But i see that adding a line in /etc/sudoers can allow me execute sudo > without being in the sudo group. > > Do i miss sth or the wiki miss sth? The Wiki isn't

Re: Is this ALL good advise

2019-12-09 Thread Keith Bainbridge
On 9/12/19 6:57 pm, Reco wrote: ll it takes is to look at APNIC record with whois. Shows your ISP and a city it's operating at. I could dig deeper, but I'm lazy. Thanks Andrei I got 3 addresses 2 of them about 3Km away from me (1 in a public park) the 3rd, about 4,500Km away from me, but refer

Re: Running sudo without being in sudo group.

2019-12-09 Thread David
On Mon, 9 Dec 2019 at 20:23, aprekates wrote: > > In https://wiki.debian.org/sudo it says: > > In order for a user to run sudo, the user must belong to group=sudo. This refers to the fact that the sudo group is already configured in the /etc/sudoers file to have certain rights. If you search ins

Running sudo without being in sudo group.

2019-12-09 Thread aprekates
In https://wiki.debian.org/sudo it says: In order for a user to run sudo, the user must belong to group=sudo. But i see that adding a line in /etc/sudoers can allow me execute sudo without being in the sudo group. Do i miss sth or the wiki miss sth? Alexandros.

Re: xdm config

2019-12-09 Thread didier . gaumet
Perhaps wdm would be of interest for you: https://packages.debian.org/buster/wdm

Re: Trying to uninstall xfce4

2019-12-09 Thread john doe
On 12/9/2019 9:06 AM, Reco wrote: > Hi. > > On Mon, Dec 09, 2019 at 09:55:22AM +0200, aprekates wrote: >> In a fresh debian10 installation with xfce4 when i try: >> >>   $ sudo apt-get remove xfce4 >> >> will present me with a maybe a hundred of packages that 'were automatically >> installed

Re: Trying to uninstall xfce4

2019-12-09 Thread Reco
Hi. On Mon, Dec 09, 2019 at 09:55:22AM +0200, aprekates wrote: > In a fresh debian10 installation with xfce4 when i try: > >   $ sudo apt-get remove xfce4 > > will present me with a maybe a hundred of packages that 'were automatically > installed and no longer needed' and that i should

Re: Is this ALL good advise

2019-12-09 Thread Reco
Hi. On Mon, Dec 09, 2019 at 04:05:00PM +1100, Keith Bainbridge wrote: > On 4/12/19 11:11 am, John Hasler wrote: > > Yes. I suggest Newsguy o > > > Um > > Firefox gave me this when I went to their web page > > Warning: Potential Security Risk Ahead Firefox messages are useless for

Re: Trying to uninstall xfce4

2019-12-09 Thread Andrei POPESCU
On Lu, 09 dec 19, 09:55:22, aprekates wrote: > In a fresh debian10 installation with xfce4 when i try: > >   $ sudo apt-get remove xfce4 > > will present me with a maybe a hundred of packages that 'were automatically > installed and no longer needed' and that i should remove if i want with 'apt >