Re: Security Support for Debian 4.0 to be terminated

2010-01-24 Thread Bret Busby
On Sat, 23 Jan 2010, green wrote: Date: Sat, 23 Jan 2010 16:19:54 -0600 From: green To: debian-user@lists.debian.org Subject: Re: Security Support for Debian 4.0 to be terminated Bret Busby wrote at 2010-01-23 00:03 -0600: On Thu, 21 Jan 2010, Alexander Reichle-Schmehl wrote: 1: http

Re: Security Support for Debian 4.0 to be terminated

2010-01-23 Thread green
Bret Busby wrote at 2010-01-23 00:03 -0600: > On Thu, 21 Jan 2010, Alexander Reichle-Schmehl wrote: > > 1: http://www.debian.org/releases/lenny/releasenotes > > In trying to follow the [...] instructions for > the [...] upgrade, [...] > I am [...] prevented from performing > the required upgrade f

Re: Security Support for Debian 4.0 to be terminated

2010-01-22 Thread Bret Busby
On Thu, 21 Jan 2010, Alexander Reichle-Schmehl wrote: Date: Thu, 21 Jan 2010 11:04:24 +0100 From: Alexander Reichle-Schmehl To: debian-annou...@lists.debian.org Subject: Security Support for Debian 4.0 to be terminated Resent-Date: Thu, 21 Jan 2010 10:04:41 + (UTC) Resent-From: debian-annou

Re: Security support for Squeeze delayed

2009-09-17 Thread Jesús M. Navarro
Hi, Matus: On Thursday 17 September 2009 17:46:56 Matus UHLAR - fantomas wrote: > > On Monday 20 July 2009 17:09:57 Soren Orel wrote: > > > So is Debian Squeeze not up-to-date by security fixes? wow. :S:S > > On 21.07.09 03:39, Jesús M. Navarro wrote: > > Why should it? It's "testing", after all:

Re: Security support for Squeeze delayed

2009-09-17 Thread Matus UHLAR - fantomas
> On Monday 20 July 2009 17:09:57 Soren Orel wrote: > > So is Debian Squeeze not up-to-date by security fixes? wow. :S:S On 21.07.09 03:39, Jesús M. Navarro wrote: > Why should it? It's "testing", after all: too much work for too short a > benefit. because some time ago security support was pro

Re: security problem with proftpd

2009-07-30 Thread Matus UHLAR - fantomas
On 26.06.09 10:35, Jesus arteche wrote: > I'm working with proftpd, it works right, the users make login and access to > the directories with the right permmission, but when they access to their > directoris they can also see the others directories from other users. How > can i do to make them just

Re: Security support for Squeeze delayed

2009-07-20 Thread Jesús M. Navarro
Hi: On Monday 20 July 2009 17:09:57 Soren Orel wrote: > So is Debian Squeeze not up-to-date by security fixes? wow. :S:S Why should it? It's "testing", after all: too much work for too short a benefit. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsub

Re: Security support for Squeeze delayed

2009-07-20 Thread Soren Orel
So is Debian Squeeze not up-to-date by security fixes? wow. :S:S On Mon, Jul 20, 2009 at 4:11 PM, Soren Orel wrote: > http://wiki.debian.org/DebianSqueeze > Is it still actual? > thank you >

Re: Security support for Squeeze delayed

2009-07-20 Thread Wolodja Wentland
On Mon, Jul 20, 2009 at 16:11 +0200, Soren Orel wrote: > http://wiki.debian.org/DebianSqueeze > Is it still actual? I wondered about that as well and was told on #debian-security (OFTC) yesterday that security support for squeeze is still suspended. I am not sure about the reasons for that though

Re: security problem with proftpd

2009-06-26 Thread Andrei Popescu
On Fri,26.Jun.09, 10:35:25, Jesus arteche wrote: > Hello, > > I'm working with proftpd, it works right, the users make login and access to > the directories with the right permmission, but when they access to their > directoris they can also see the others directories from other > users. And how

Re: [SECURITY] [DSA 1751-1] New xulrunner packages fix several vulnerabilities

2009-03-24 Thread Andrei Popescu
On Tue,24.Mar.09, 10:05:06, Douglas A. Tutty wrote: > For how long have I been running a (knowingly) insecure Iceweasel? It seems to me as you haven't. I searched through my archive of debian-security-announce and I don't see any other related message. Did you try searching the archives of deb

Re: [SECURITY] [DSA 1751-1] New xulrunner packages fix several vulnerabilities

2009-03-24 Thread Douglas A. Tutty
On Mon, Mar 23, 2009 at 07:57:11PM +0200, Andrei Popescu wrote: > On Sun,22.Mar.09, 18:35:21, wrote: > > Hello all, > > > > I'm running Etch, and use Iceweasel. I'm concerned about this security > > advisory. It says that the Etch release notes said that the Mozilla > > products would have to b

Re: [SECURITY] [DSA 1751-1] New xulrunner packages fix several vulnerabilities

2009-03-23 Thread Andrei Popescu
On Sun,22.Mar.09, 18:35:21, wrote: > Hello all, > > I'm running Etch, and use Iceweasel. I'm concerned about this security > advisory. It says that the Etch release notes said that the Mozilla > products would have to be stopped prior to the end of the Etch support > period. I don't see this.

Re: [SECURITY] [DSA 1751-1] New xulrunner packages fix several vulnerabilities

2009-03-23 Thread Christofer C. Bell
On Sun, Mar 22, 2009 at 5:35 PM, wrote: > > Did anyone hear that Iceweasel has stopped getting security updates in > Etch? > The closest I could come in a few minutes of Googling was this announcement from Mozilla: http://www.mozilla.com/en-US/firefox/all-older.html This terminated support for F

Re: security (malware) issues in Linux bases OSes

2009-02-22 Thread Emanoil Kotsev
Ron Johnson wrote: >>> Hooking file-roller into gksu and dpkg wouldn't be that hard. >>> >>> In fact, I wouldn't be surprised if that weren't already the case. >>> >> >> I think Ubuntu does it. > > Why am I *not* surprised? me neither :x tried kubuntu for about 3 months :x - never ever regar

Re: security (malware) issues in Linux bases OSes

2009-02-22 Thread Emanoil Kotsev
H.S. wrote: > Hello, > > In the last some weeks I recall reading in one of the mailing lists that > it is just a matter of popularity that we are not seeing bad intentioned > debs or rpms on the internet. If Debian/Ubuntu/Fedora were to become > sufficiently popular, the claim is that it would be

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Ron Johnson
On 02/16/2009 06:55 PM, JoeHill wrote: [snip] No, popularity has very little to do with it. Windows is compromised a lot because it is trivial to do so. Linux could have twice the market share as Windows, and it would still be less prone to invasion, simply because it is more difficult to do so.

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Celejar
On Mon, 16 Feb 2009 16:05:27 -0600 Ron Johnson wrote: > On 02/16/2009 03:55 PM, H.S. wrote: > > Ron Johnson wrote: > > > >> Sure. The keylogger would have to add itself to the "autostart folder", > >> but that's no mean feat. > >> > > > > I am sorry, what is an auto start folder in relation to

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread JoeHill
H.S. wrote: > Hello, > > In the last some weeks I recall reading in one of the mailing lists that > it is just a matter of popularity that we are not seeing bad intentioned > debs or rpms on the internet. If Debian/Ubuntu/Fedora were to become > sufficiently popular, the claim is that it would b

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Dotan Cohen
sudo rm -rf / is trapped and subject to special handling. At least, it should be, IMHO. >>> >>> I don't believe it. Show us! >> >> Ron, why don't you try to command and see for yourself? Its easy >> enough to do it. I just don't have the time. Cough. Cough. > > Boyd(?) asserted the

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Ron Johnson
On 02/16/2009 06:11 PM, Paul E Condon wrote: On 2009-02-16_10:29:02, Ron Johnson wrote: On 02/16/2009 08:26 AM, Paul E Condon wrote: On 2009-02-15_17:26:23, Boyd Stephen Smith Jr. wrote: On Sunday 15 February 2009 15:48:37 Ron Johnson wrote: [W]hat's to stop Joe Wannabe from doing this?

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Paul E Condon
On 2009-02-16_10:29:02, Ron Johnson wrote: > On 02/16/2009 08:26 AM, Paul E Condon wrote: >> On 2009-02-15_17:26:23, Boyd Stephen Smith Jr. wrote: >>> On Sunday 15 February 2009 15:48:37 Ron Johnson wrote: [W]hat's to stop Joe Wannabe from doing this? $ sudo dpkg -i NakedBrittan

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Dennis Wicks
Dave Ewart wrote the following on 02/16/2009 10:42 AM: On Monday, 16.02.2009 at 16:37 +, Avi Greenbury wrote: Ron Johnson wrote: I don't believe it. Show us! In the interests of satisfying my curiosity: vm-linux2:/# rm -rf / rm: cannot remove root directory `/' vm-linux2:/# That's ra

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Ron Johnson
On 02/16/2009 03:55 PM, H.S. wrote: Ron Johnson wrote: Sure. The keylogger would have to add itself to the "autostart folder", but that's no mean feat. I am sorry, what is an auto start folder in relation to Debian or Ubuntu? The same people who would install NakedBrittany.deb are the sam

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread H.S.
Ron Johnson wrote: > > Sure. The keylogger would have to add itself to the "autostart folder", > but that's no mean feat. > I am sorry, what is an auto start folder in relation to Debian or Ubuntu? I would expect it to put a line in .bashrc to start automatically when user logs in or perhaps

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Ron Johnson
On 02/16/2009 12:40 PM, H.S. wrote: Ron Johnson wrote: On 02/16/2009 04:30 AM, Dave Sherohman wrote: On Sun, Feb 15, 2009 at 04:22:37PM -0300, Eduardo M KALINOWSKI wrote: But neither of these help in case a stupid user receives an e-mail saying: Run 'sudo dpkg -i FreePornPics.deb to see 's se

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Dotan Cohen
> In the interests of satisfying my curiosity: > > vm-linux2:/# rm -rf / Here I hold my breath! > rm: cannot remove root directory `/' > vm-linux2:/# > Here I sigh and change my pants. And of course, the ob: http://xkcd.com/242/ -- Dotan Cohen http://what-is-what.com http://gibberish.co.il א

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread H.S.
Ron Johnson wrote: > On 02/16/2009 04:30 AM, Dave Sherohman wrote: >> On Sun, Feb 15, 2009 at 04:22:37PM -0300, Eduardo M KALINOWSKI wrote: >>> But neither of these help in case a stupid user receives an e-mail >>> saying: >>> >>> Run 'sudo dpkg -i FreePornPics.deb to see 's >>> secret sex tape'. >

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread David Jardine
On Mon, Feb 16, 2009 at 04:42:18PM +, Dave Ewart wrote: > On Monday, 16.02.2009 at 16:37 +, Avi Greenbury wrote: > > > In the interests of satisfying my curiosity: > > > > vm-linux2:/# rm -rf / > > rm: cannot remove root directory `/' > > vm-linux2:/# > > That's rather annoying. If I wan

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Dave Ewart
On Monday, 16.02.2009 at 16:37 +, Avi Greenbury wrote: > Ron Johnson wrote: >> >> I don't believe it. Show us! >> > > In the interests of satisfying my curiosity: > > vm-linux2:/# rm -rf / > rm: cannot remove root directory `/' > vm-linux2:/# That's rather annoying. If I want to shoot mysel

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Ron Johnson
On 02/15/2009 11:39 PM, T o n g wrote: On Sun, 15 Feb 2009 15:48:37 -0600, Ron Johnson wrote: Anyway, twice in the past few years, Debian servers have been compromised. One time it was thru a weak DD user password, You implication seems to be "Debian is not secure enough", "Debian" can be

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Avi Greenbury
Ron Johnson wrote: I don't believe it. Show us! In the interests of satisfying my curiosity: vm-linux2:/# rm -rf / rm: cannot remove root directory `/' vm-linux2:/# -- -- Avi Greenbury http://aviswebsite.co.uk ;) http://aviswebsite.co.uk/asking-questions -- To UNSUBSCRIBE, email to debi

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Ron Johnson
On 02/16/2009 08:26 AM, Paul E Condon wrote: On 2009-02-15_17:26:23, Boyd Stephen Smith Jr. wrote: On Sunday 15 February 2009 15:48:37 Ron Johnson wrote: [W]hat's to stop Joe Wannabe from doing this? $ sudo dpkg -i NakedBrittany.deb What's to stop Joe Wannabe from doing this? sudo rm -rf

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Ron Johnson
On 02/16/2009 04:30 AM, Dave Sherohman wrote: On Sun, Feb 15, 2009 at 04:22:37PM -0300, Eduardo M KALINOWSKI wrote: But neither of these help in case a stupid user receives an e-mail saying: Run 'sudo dpkg -i FreePornPics.deb to see 's secret sex tape'. No, but it still wouldn't get far becau

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread H.S.
Paul E Condon wrote: > On 2009-02-16_09:37:55, H.S. wrote: >> Paul E Condon wrote: >>> unaware. I suspect that the security is pretty good. Early on, there >>> were powerful organizations that would have benefitted handsomely if >>> Debian had been disrupted, and it wasn't disrupted. But there is >

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Paul E Condon
On 2009-02-16_09:37:55, H.S. wrote: > Paul E Condon wrote: > > unaware. I suspect that the security is pretty good. Early on, there > > were powerful organizations that would have benefitted handsomely if > > Debian had been disrupted, and it wasn't disrupted. But there is > > Interesting. Care to

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread H.S.
Paul E Condon wrote: > unaware. I suspect that the security is pretty good. Early on, there > were powerful organizations that would have benefitted handsomely if > Debian had been disrupted, and it wasn't disrupted. But there is Interesting. Care to elaborate a bit? Thanks. -- Please reply

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Dave Sherohman
On Mon, Feb 16, 2009 at 07:26:38AM -0700, Paul E Condon wrote: > And, without testing it, I'm pretty sure that > > sudo rm -rf / > > is trapped and subject to special handling. At least, it should be, > IMHO. Only one way to find out whether it is or not... Try it! *evil grin* (Well, OK, you

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Paul E Condon
On 2009-02-15_17:26:23, Boyd Stephen Smith Jr. wrote: > On Sunday 15 February 2009 15:48:37 Ron Johnson wrote: > > [W]hat's to stop Joe Wannabe from doing this? > > > > $ sudo dpkg -i NakedBrittany.deb > > What's to stop Joe Wannabe from doing this? > sudo rm -rf The Great American Novell / M

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Paul E Condon
On 2009-02-15_19:51:11, Tzafrir Cohen wrote: > On Sun, Feb 15, 2009 at 04:33:53PM -0300, Eduardo M KALINOWSKI wrote: > > Tzafrir Cohen wrote: > > > A Debian user should not be expected to install just any .deb file. > > > > > > > Ideally speaking, I'd say this holds for any OS: Users should not

Re: security (malware) issues in Linux bases OSes

2009-02-16 Thread Dave Sherohman
On Sun, Feb 15, 2009 at 04:22:37PM -0300, Eduardo M KALINOWSKI wrote: > But neither of these help in case a stupid user receives an e-mail saying: > > Run 'sudo dpkg -i FreePornPics.deb to see 's > secret sex tape'. No, but it still wouldn't get far because, unlike all the major Windows malware t

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread H.S.
T o n g wrote: > You implication seems to be "Debian is not secure enough", but my conclusion > from above incident is quite the opposite from yours -- Debian is *amazingly* > secure. > > If a Windoze PC is taken over by someone or some new malware that no > existing anti-virus software can detec

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread T o n g
On Sun, 15 Feb 2009 15:48:37 -0600, Ron Johnson wrote: > Anyway, twice in the past few years, Debian servers have been > compromised. One time it was thru a weak DD user password, You implication seems to be "Debian is not secure enough", but my conclusion from above incident is quite the opposi

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread H.S.
Ron Johnson wrote: > > *Maybe* not on Debian, since Debian users *tend* to be more Yup, I agree. > sophisticated, but what's to stop Joe Wannabe from doing this? > > $ sudo dpkg -i NakedBrittany.deb This is more likely since some of the present day popular packages are commonly downloaded

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread Ron Johnson
On 02/15/2009 05:26 PM, Boyd Stephen Smith Jr. wrote: On Sunday 15 February 2009 15:48:37 Ron Johnson wrote: [W]hat's to stop Joe Wannabe from doing this? $ sudo dpkg -i NakedBrittany.deb What's to stop Joe Wannabe from doing this? sudo rm -rf The Great American Novell / Movie Neither i

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread Boyd Stephen Smith Jr.
On Sunday 15 February 2009 15:48:37 Ron Johnson wrote: > [W]hat's to stop Joe Wannabe from doing this? > > $ sudo dpkg -i NakedBrittany.deb What's to stop Joe Wannabe from doing this? sudo rm -rf The Great American Novell / Movie Neither is an actual security issue. > and the > other thru a

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread Ron Johnson
On 02/15/2009 01:11 PM, T o n g wrote: On Sun, 15 Feb 2009 13:25:35 -0500, H.S. wrote: In the last some weeks I recall reading in one of the mailing lists that it is just a matter of popularity that we are not seeing bad intentioned debs or rpms on the internet. If Debian/Ubuntu/Fedora were to

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread Tzafrir Cohen
On Sun, Feb 15, 2009 at 04:33:53PM -0300, Eduardo M KALINOWSKI wrote: > Tzafrir Cohen wrote: > > A Debian user should not be expected to install just any .deb file. > > > > Ideally speaking, I'd say this holds for any OS: Users should not just > install (or click, or run) everything they see. >

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread Eduardo M KALINOWSKI
Tzafrir Cohen wrote: > A Debian user should not be expected to install just any .deb file. > Ideally speaking, I'd say this holds for any OS: Users should not just install (or click, or run) everything they see. In practice things happen differently, especially in the Windows world. -- A la

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread Tzafrir Cohen
On Sun, Feb 15, 2009 at 04:22:37PM -0300, Eduardo M KALINOWSKI wrote: > T o n g wrote: > > On Sun, 15 Feb 2009 13:25:35 -0500, H.S. wrote: > > > > > >> In the last some weeks I recall reading in one of the mailing lists that > >> it is just a matter of popularity that we are not seeing bad inten

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread Eduardo M KALINOWSKI
T o n g wrote: > On Sun, 15 Feb 2009 13:25:35 -0500, H.S. wrote: > > >> In the last some weeks I recall reading in one of the mailing lists that >> it is just a matter of popularity that we are not seeing bad intentioned >> debs or rpms on the internet. If Debian/Ubuntu/Fedora were to become >>

Re: security (malware) issues in Linux bases OSes

2009-02-15 Thread T o n g
On Sun, 15 Feb 2009 13:25:35 -0500, H.S. wrote: > In the last some weeks I recall reading in one of the mailing lists that > it is just a matter of popularity that we are not seeing bad intentioned > debs or rpms on the internet. If Debian/Ubuntu/Fedora were to become > sufficiently popular, the c

Re: [Security] First practical attack on WPA (Mathematical breakthrough)

2008-11-08 Thread Chris Bannister
On Sun, Nov 09, 2008 at 02:26:46AM +1300, Chris Bannister wrote: > Hi, > > Just when you thought it was safe to go back in the water ... > > http://www.itworld.com/security/57285/once-thought-safe-wpa-wi-fi-encryption-cracked http://arstechnica.com/articles/paedia/wpa-cracked.ars "The reports e

Re: security question

2008-10-21 Thread Ron Johnson
On 10/21/08 12:10, Paul Johnson wrote: Bogdan wrote: This is stupid! Any decent web developer would make his app work at least with IE, Firefox and Safari ( my opinion )! That's stupid. Nobody should ever be coding with only specific browsers in mind. Get it to validate on http://validator

Re: security question

2008-10-21 Thread Dotan Cohen
2008/10/18 Carl Fink <[EMAIL PROTECTED]>: > One other possibility: install virtualbox-ose, and run an occasional Windows > session inside Debian when you need to bank. That's what I do with some > specific software I need for my job. > What software is that, Carl? -- Dotan Cohen http://what-is

Re: security question

2008-10-21 Thread Dotan Cohen
2008/10/18 Bogdan <[EMAIL PROTECTED]>: > Hey, > > Although I don't like it, the bank i work with only offers Internet Banking > that works only under Internet Explorer. So, unfortunately, if I want to > check out my account I see myself obliged to boot Windows :(. I know that IE > can be installed

Re: security question

2008-10-21 Thread Paul Johnson
Bogdan wrote: > This is stupid! Any decent web developer would make his app work at > least with IE, Firefox and Safari ( my opinion )! That's stupid. Nobody should ever be coding with only specific browsers in mind. Get it to validate on http://validator.w3.org/ Then if it doesn't work, it's

Re: security question

2008-10-21 Thread Tzafrir Cohen
On Sat, Oct 18, 2008 at 08:12:53PM +0300, Bogdan wrote: > Paul Johnson wrote: >> Douglas A. Tutty wrote: >> >>> On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: >>> Although I don't like it, the bank i work with only offers Internet Banking that works only under Internet

Re: security question

2008-10-20 Thread Emanoil Kotsev
Bogdan wrote: > Emanoil Kotsev wrote: >> Bogdan wrote: >> >> >>> Paul Johnson wrote: >>> Douglas A. Tutty wrote: > On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: > > > >> Although I don't like it, the bank i work with o

Re: security question

2008-10-19 Thread Ron Johnson
On 10/19/08 06:02, Bogdan wrote: [snip] This is stupid! Any decent web developer would make his app work at least with IE, Firefox and Safari ( my opinion )! I really don't understand why these, let's face it, hugely funded internet banking applications restrict you to the weakest browser in

Re: security question

2008-10-19 Thread Andrei Popescu
On Sun,19.Oct.08, 14:02:11, Bogdan wrote: > Andrei, I didn't know that Unicredit Tiriac works with Firefox, I was > meaning ING :D. There might be others as well. You could search the archives of rlug (offtopic), as this subject comes up regularly. Regards, Andrei -- If you can't explain it s

Re: security question

2008-10-19 Thread Paul Johnson
Carl Fink wrote: > On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: > >> Although I don't like it, the bank i work with only offers Internet >> Banking that works only under Internet Explorer. So, unfortunately, if I >> want to check out my account I see myself obliged to boot Windows

Re: security question

2008-10-19 Thread Bogdan
Emanoil Kotsev wrote: Bogdan wrote: Paul Johnson wrote: Douglas A. Tutty wrote: On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: Although I don't like it, the bank i work with only offers Internet Banking that works only under Internet Explorer. So,

Re: security question

2008-10-18 Thread Emanoil Kotsev
Bogdan wrote: > Paul Johnson wrote: >> Douglas A. Tutty wrote: >> >>> On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: >>> >>> Although I don't like it, the bank i work with only offers Internet Banking that works only under Internet Explorer. So, unfortunately, if

Re: security question

2008-10-18 Thread Emanoil Kotsev
Bogdan wrote: > Hey, > > Although I don't like it, the bank i work with only offers Internet > Banking that works only under Internet Explorer. So, unfortunately, if I > want to check out my account I see myself obliged to boot Windows :(. I > know that IE can be installed through wine but no one

Re: security question

2008-10-18 Thread Andrei Popescu
On Sat,18.Oct.08, 20:12:53, Bogdan wrote: > Thanks for your answers! > Although i really like my bank, I considered switching because of this > reason, but as far as I can tell, there is only one bank in Romania that > offers Internet Banking with Firefox :(, and I don't like it. Unicredit Țiri

Re: security question

2008-10-18 Thread Carl Fink
On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: > > Although I don't like it, the bank i work with only offers Internet > Banking that works only under Internet Explorer. So, unfortunately, if I > want to check out my account I see myself obliged to boot Windows :(. I > know that IE c

Re: security question

2008-10-18 Thread Osamu Aoki
On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: > Hey, > > Although I don't like it, the bank i work with only offers Internet > Banking that works only under Internet Explorer. So, unfortunately, if I > want to check out my account I see myself obliged to boot Windows :(. I > know th

Re: security question

2008-10-18 Thread Ron Johnson
On 10/18/08 11:51, Bogdan wrote: Hey, Although I don't like it, the bank i work with only offers Internet Banking that works only under Internet Explorer. So, unfortunately, if I want to check out my account I see myself obliged to boot Windows :(. I know that IE can be installed through wine

Re: security question

2008-10-18 Thread Bogdan
Paul Johnson wrote: Douglas A. Tutty wrote: On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: Although I don't like it, the bank i work with only offers Internet Banking that works only under Internet Explorer. So, unfortunately, if I want to check out my account I see myself

Re: security question

2008-10-18 Thread Paul Johnson
Douglas A. Tutty wrote: > On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: > >> Although I don't like it, the bank i work with only offers Internet >> Banking that works only under Internet Explorer. So, unfortunately, if I >> want to check out my account I see myself obliged to boot Wi

Re: security question

2008-10-18 Thread Paul Johnson
Bogdan wrote: > Although I don't like it, the bank i work with only offers Internet > Banking that works only under Internet Explorer. Time to switch banks, and tell them why. signature.asc Description: OpenPGP digital signature

Re: security question

2008-10-18 Thread Douglas A. Tutty
On Sat, Oct 18, 2008 at 07:51:38PM +0300, Bogdan wrote: > Although I don't like it, the bank i work with only offers Internet > Banking that works only under Internet Explorer. So, unfortunately, if I > want to check out my account I see myself obliged to boot Windows :(. I > know that IE can be

Re: security risk of having a long list of services in inetd

2008-09-01 Thread Tim Edwards
Paul Dufresne wrote: > 2008/8/30 Thomas Weinbrenner <[EMAIL PROTECTED]>: > Well, it is more than just a name. man inetd says: > "inetd should be run at boot time by /etc/rc (see rc(8)). It then > listens > for connections on certain internet sockets. When a connection is found >

Re: security risk of having a long list of services in inetd

2008-08-30 Thread Martin
Forgot to add, if it wasn't clear enough: man inetd doesn't necessarily have _anything_ to do with /etc/services, totally depends on which inetd you use and wether your inetd even cares about information in /etc/services (netstat can use this information as someone else already told you). /martin

Re: security risk of having a long list of services in inetd

2008-08-30 Thread Martin
Hi, 2008/8/30 Paul Dufresne <[EMAIL PROTECTED]>: > 2008/8/30 Thomas Weinbrenner <[EMAIL PROTECTED]>: > Well, it is more than just a name. man inetd says: It's simply the information that says: smtp is on port 25 ssh is on port ... ... nothing more nothing less. It depends on inetd (and only in

Re: security risk of having a long list of services in inetd

2008-08-30 Thread Paul Dufresne
2008/8/30 Thomas Weinbrenner <[EMAIL PROTECTED]>: > Paul Dufresne <[EMAIL PROTECTED]> schrieb: >>> From: Paul Dufresne <[EMAIL PROTECTED]> Looking to /etc/services, I found that Debian seems to like to have a very big file with all known services rather than just add the services nee

Re: security risk of having a long list of services in inetd

2008-08-30 Thread Eduardo M KALINOWSKI
Paul Dufresne wrote: > Yes, I know. But as I see it, each mapping is like a *possible* door > to the Internet. > When there is so much, it become too hard to look at each door to see > if there is a program behind, > and if it does what it should. > > Taken from http://en.wikipedia.org/wiki/Inetd

Re: security risk of having a long list of services in inetd

2008-08-30 Thread Thomas Weinbrenner
Paul Dufresne <[EMAIL PROTECTED]> schrieb: >> From: Paul Dufresne <[EMAIL PROTECTED]> >>> Looking to /etc/services, I found that Debian seems to like to have a >>> very big file with all known services rather than just add the >>> services needed. I don't even knows if other distributions does just

Re: security best practice

2008-05-03 Thread phobot
On May 2, 8:20 pm, ChadDavis <[EMAIL PROTECTED]> wrote: > I'd like some advice from the admins. I'm a developer who admins my own > environment in a home office. I get things done, but perhaps not in the > best fashion. > > For instance, I just installed the tomcat server via the debian > reposit

Re: security best practice

2008-05-02 Thread Sergio Cuéllar Valdés
2008/5/2 ChadDavis <[EMAIL PROTECTED]>: > I'd like some advice from the admins. I'm a developer who admins my own > environment in a home office. I get things done, but perhaps not in the > best fashion. > > For instance, I just installed the tomcat server via the debian > repositories. By defau

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-10 Thread Florian Kulzer
On Mon, Mar 10, 2008 at 08:49:04 -0400, Mitchell Laks wrote: > On 18:09 Sun 09 Mar , Mike Bird wrote: [...] > > Sorry Mitchell, there was a slight mistake in the advice given to you. > > You should not install linux-image-2.6 but rather linux-image-2.6-486 > > or linux-image-2.6-686 (or one o

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-10 Thread Mitchell Laks
On 18:09 Sun 09 Mar , Mike Bird wrote: > On Sun March 9 2008 11:40:57 Mitchell Laks wrote: > > On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: > > > Do you have the linus-image-2.6 meta-package installed? If you only > > > have an actual linux-image deb installed, it will never be upgraded.

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Daniel Burrows
On Sun, Mar 09, 2008 at 06:01:50PM -0400, "Douglas A. Tutty" <[EMAIL PROTECTED]> was heard to say: > On Sun, Mar 09, 2008 at 01:52:50PM -0500, Ron Johnson wrote: > > Every time I see that kind of message, I just pick the "real" base > > package that I want. > > So does this mean that those metapa

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Mike Bird
On Sun March 9 2008 11:40:57 Mitchell Laks wrote: > On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: > > Do you have the linus-image-2.6 meta-package installed? If you only > > have an actual linux-image deb installed, it will never be upgraded. > > The meta-package will always depend on the most

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/09/08 17:01, Douglas A. Tutty wrote: > On Sun, Mar 09, 2008 at 01:52:50PM -0500, Ron Johnson wrote: >> On 03/09/08 13:40, Mitchell Laks wrote: > >>> I use apt not aptitude ( :( ). I am used to it. >>> When I try to do >>> apt-get install linux

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Douglas A. Tutty
On Sun, Mar 09, 2008 at 01:52:50PM -0500, Ron Johnson wrote: > On 03/09/08 13:40, Mitchell Laks wrote: > > I use apt not aptitude ( :( ). I am used to it. > > When I try to do > > apt-get install linux-image-2.6 it tell me that it is a virtual package > > provided by (the long list of packages).

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Daniel Burrows
On Sun, Mar 09, 2008 at 02:40:57PM -0400, Mitchell Laks <[EMAIL PROTECTED]> was heard to say: > On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: > > Do you have the linus-image-2.6 meta-package installed? If you only > > have an actual linux-image deb installed, it will never be upgraded. > > Th

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Mitchell Laks
On 13:52 Sun 09 Mar , Ron Johnson wrote: > Every time I see that kind of message, I just pick the "real" base > package that I want. > I agree Ron, I would like to select it myself also. However, I kind of thought that when you do apt-get dist-upgrade against security and there is a major k

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Mitchell Laks
On 18:37 Sun 09 Mar , Tzafrir Cohen wrote: > Do you actually have packages from contrib / non-free? > > If not, remove those sources and save a few seconds on each update. If > you do, you better have non-free updates as well. > Tzafrir, Thank you. You have sharp eyes. On this, hopefully s

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/09/08 13:40, Mitchell Laks wrote: > On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: >> Do you have the linus-image-2.6 meta-package installed? If you only >> have an actual linux-image deb installed, it will never be upgraded. >> The meta-pack

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Mitchell Laks
On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: > Do you have the linus-image-2.6 meta-package installed? If you only > have an actual linux-image deb installed, it will never be upgraded. > The meta-package will always depend on the most recent version and will > be updated at the time that the

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Tzafrir Cohen
Unrelated comment: On Sun, Mar 09, 2008 at 01:08:00PM -0400, Mitchell Laks wrote: > Hi, > > I am running a minimal install debian machine as a firewall and I would > like to keep it secure and up to date. > > I included > > deb http://ftp.us.debian.org/debian/ etch main non-free > deb http:/

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Douglas A. Tutty
On Sun, Mar 09, 2008 at 01:08:00PM -0400, Mitchell Laks wrote: > I am running a minimal install debian machine as a firewall and I > would like to keep it secure and up to date. > > I included > > deb http://ftp.us.debian.org/debian/ etch main non-free deb > http://security.debian.org etch/upd

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Graham
On Sun, 9 Mar 2008 13:08:00 -0400 Mitchell Laks <[EMAIL PROTECTED]> wrote: > Hi, > > I am running a minimal install debian machine as a firewall and I > would like to keep it secure and up to date. > > I included > > deb http://ftp.us.debian.org/debian/ etch main non-free > deb http://securi

Re: security concerns for home work network

2008-02-08 Thread Chris Bannister
On Tue, Feb 05, 2008 at 03:56:35PM -0800, Andrew Sackville-West wrote: > On Tue, Feb 05, 2008 at 01:14:37PM -0700, ChadDavis wrote: > > This may a bit off topic, but I am talking about a debian base network, and > > I sense that many of the people on this list have admin expertise. > > > > I have

Re: security concerns for home work network

2008-02-07 Thread Russell L. Harris
* ChadDavis <[EMAIL PROTECTED]> [080207 21:42]: > > You could place an old machine on the "dmz" port of your > firewall/router (you DO have a firewall, don't you?), and copy client > software to that machine, for access by your clients. > > I don't have a firewall software, but i have

Re: security concerns for home work network

2008-02-07 Thread ChadDavis
> You could place an old machine on the "dmz" port of your > firewall/router (you DO have a firewall, don't you?), and copy client > software to that machine, for access by your clients. > I don't have a firewall software, but i have the DSL router and nothing comes through unless i port forward.

Re: security keys

2008-02-06 Thread tom arnall
i ended up doing the routine described at: http://debian-multimedia.org/ tom arnall arcata -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: security keys

2008-02-06 Thread Jochen Schulz
tom arnall: > > W: GPG error: http://www.debian-multimedia.org etch Release: The following > signatures couldn't be verified because the public key is not available: > NO_PUBKEY 07DC563D1F41B907 > W: You may want to run apt-get update to correct these problems These messages are not very helpfu

<    1   2   3   4   5   6   7   8   9   10   >