[TriLUG] Linux on Alpha...

2005-05-15 Thread Neil Roeth
On May 14, Michael Sh ([EMAIL PROTECTED]) wrote: Hi, For reasons of nostalgia, I went looking for a DEC VAX machine, and ended up with a few DEC Alpha's. (2) servers (an EB64+ and a PC164LX), a DEC 3100 workstation (3000/300L), and a DEC Multia UDB (sort of an early version of a

Re: /dev/random and linux security issues (kinda long)

2005-05-15 Thread aluminumsulfate
Date: Sun, 15 May 2005 02:55:59 -0400 From: mike ledoux [EMAIL PROTECTED] When that simple test shows it is clearly true that /dev/random blocks just as stated in the man page. The kernel's RNG may not be very good, but that is a separate issue. Yes, it's true that the device

Re: /dev/random and linux security issues (kinda long)

2005-05-15 Thread aluminumsulfate
From: [EMAIL PROTECTED] Date: Sun, 15 May 2005 10:18:30 -0400 snip Anyhow, I've gotten a jar and put 128 pennies in it. I'll be sure to let you know if I find any patterns in the data from that, too. ;) Dave Well, I've flipped 512 pennies run them through my base 95 analyzer.

Re: SCSI info

2005-05-15 Thread Benjamin Scott
On May 12 at 12:04pm, Derek Martin wrote: I'm curious if anyone has any really good references to the SCSI debugging information logged by the kernel. From what I've seen, most of what the kernel logs is either details of how the driver is failing to progress (not terribly useful unless you're

Re: /dev/random and linux security issues (kinda long)

2005-05-15 Thread Bill McGonigle
On May 15, 2005, at 12:57, [EMAIL PROTECTED] wrote: Well, I've flipped 512 pennies run them through my base 95 analyzer. :) [EMAIL PROTECTED] cat flips.txt | ./bin2dec.pl | ./dec2base95.pl 7xW#mknuHpMRM*Mp\9R CRM/99HpMz%fHf\Rf/faf9WRpWHH%a\a W4Wu azzuppRWa94f\9f4O Are you sure bin2dec and

Re: List topics (was Re: Help kill the Surveillance State Bill)

2005-05-15 Thread Benjamin Scott
On May 11 at 2:28pm, Jeff Kinz wrote: Shitting on the floor is doing what comes naturally. Discussions about the impacts of technology do come about naturally as part of discussions about technology. The SOTF point is irrelevant and raising it does no one credit. It is not irrelevant, although

Re: KILLTHREAD: Re: [OT] List topics (was Re: Help kill the Surveillance State Bill)

2005-05-15 Thread Benjamin Scott
On May 12 at 12:34am, [EMAIL PROTECTED] wrote: Okay, I'm going to officially request a KILLTHREAD on this topic This thread's grown six heads, four arms, eighteen legs, and just gotten way out of control All in favor, type: !kill -TERM $PPID Okay, but what will that do%+$NO CARRIER

Re: [OT] List topics (was Re: Help kill the Surveillance State Bill)

2005-05-15 Thread Bill McGonigle
Let's just make a list rule that if you post OT stuff without [OT] in the subject then you're asking for us to see if you have a currently patched version of OpenSSL on your server. Simply enforcing [OT] should make most everybody happy. I'll start the ball rolling with a procmail recipe: :0

Re: Rookit infections: AARRGH!

2005-05-15 Thread Bill McGonigle
On May 10, 2005, at 14:30, Kevin D. Clark wrote: The crucial element in the password thefts that provided access at Cisco and elsewhere was the intruder's use of a corrupted version of a standard software program, SSH. So, what's a 'corrupted version'? To add some more paranoia to the fire:

Re: /dev/random and linux security issues (kinda long)

2005-05-15 Thread aluminumsulfate
For those of you who've been waiting to see what patterns I can find in the number pi uh, oh... wrong movie. I have good news: the universe ISN'T falling apart! I recoded my Perl scripts in LISP (the language I should have coded it in, anyway... but I was trying to be a Perl geek and use

Re: /dev/random and linux security issues (kinda long)

2005-05-15 Thread Benjamin Scott
On May 15 at 6:45pm, [EMAIL PROTECTED] wrote: It may seem that way at first thought, but it is not the case. It is entirely possible to randomly generate the same value repeatedly in sequence. Statistically, it is, in fact, equally likely that you will generate 79 '6's as 79 characters

Re: [OT] List topics (was Re: Help kill the Surveillance State Bill)

2005-05-15 Thread Fred
On Sun, 2005-05-15 at 15:41 -0400, Bill McGonigle wrote: Let's just make a list rule that if you post OT stuff without [OT] in the subject then you're asking for us to see if you have a currently patched version of OpenSSL on your server. Simply enforcing [OT] should make most everybody

[OT] Combinatronics WAS Re: /dev/random and linux security issues (kinda long)

2005-05-15 Thread aluminumsulfate
From: Benjamin Scott [EMAIL PROTECTED] Date: Sun, 15 May 2005 20:42:38 -0400 (EDT) snip If the series is statistically random, then the probability of getting *any* set of N characters it the same. If you have a statistically random penny, for example, and you flip it 20

Re: [OT] Combinatronics WAS Re: /dev/random and linux security issues (kinda long)

2005-05-15 Thread David Ecklein
My 2 cents worth... In my wasted youth I experimented with random number generator algorithms of various kinds. One amusing but useful tool that can act as a fairly good eliminator of many such schemes is to convert the output into a graphical plot. It often doesn't matter too much how this is

Re: [OT] Combinatronics WAS Re: /dev/random and linux security issues (kinda long)

2005-05-15 Thread aluminumsulfate
From: David Ecklein [EMAIL PROTECTED] Cc: gnhlug-discuss@mail.gnhlug.org Date: Sun, 15 May 2005 21:49:06 -0400 My 2 cents worth... In my wasted youth I experimented with random number generator algorithms of various kinds. One amusing but useful tool that can act as a fairly

Re: [OT] Combinatronics WAS Re: /dev/random and linux security issues (kinda long)

2005-05-15 Thread Dan Jenkins
[EMAIL PROTECTED] wrote: For a "truly random" source, it might be best to use a good white noise source, such as a properly chosen and biased point contact silicon diode or the like. For something in between and completely accessible to a software approach, the computer clock could be