Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Jeff Knaggs
Well I guess Dvorak users would be safe from an attack like this until the saboteur caught on. Maybe the paranoid could pry out the keys everyday and use a randomized keymap.

Re: sudo vulnerability

2005-06-20 Thread Uwe Dippel
On Mon, 20 Jun 2005 22:44:11 -0600, Todd C. Miller wrote: > In message <[EMAIL PROTECTED]> > so spake Steffen Kluge (kluge): > >> Is it recommendable to fetch and install 1.6.8p9 straight away? > > No, you should grab the OpenBSD patch, as announced on the > security-announce list. > >

Re: sudo vulnerability

2005-06-20 Thread Todd C. Miller
> No, you should grab the OpenBSD patch, as announced on the > security-announce list. > > ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.6/common/018_sudo.patch > ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/003_sudo.patch ftp.openbsd.org is having problems at the moment but the pat

Re: sudo vulnerability

2005-06-20 Thread Todd C. Miller
In message <[EMAIL PROTECTED]> so spake Steffen Kluge (kluge): > Is it recommendable to fetch and install 1.6.8p9 straight away? No, you should grab the OpenBSD patch, as announced on the security-announce list. ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.6/common/018_sudo.patch

Re: raid controllers (3ware vs. intel and lsi)

2005-06-20 Thread J.C. Roberts
On Mon, 20 Jun 2005 16:58:10 -0400, Rob Foster <[EMAIL PROTECTED]> wrote: >3ware raid controllers don't have an audible speaker when a drive fails. > >What SATA raid card (>2 drives) is the easiest to deal with under errors? > >I hear the intel and ami(lsi) cards are recommended, but is it 6 of >o

sudo vulnerability

2005-06-20 Thread Steffen Kluge
Hi all, I was wondering whether sudo 1.6.8p8 as found in -current has the pathname validation vulnerability reported recently (e.g. at http://www.auscert.org.au/render.html?it=5193). Its version number would suggest it does, however OBSD might contain patches that are not included upstream, or oth

Re: Eric Raymond talks about GPL and BSD licenses on MyFreeBSD.com

2005-06-20 Thread Steffen Kluge
On Mon, 2005-06-20 at 22:20 -0500, Jeff Bachtel wrote: > You know, I've often been accused of being unable to read, but to my > eyes it appears Raymond was positing that the GPL was not needed, and > that software should be released under a BSD license. Actually, he said "GPL is based on the belie

Re: How do we disable console output temporarily.

2005-06-20 Thread Bob Beck
Changes have been commited to the example syslog.conf in -current to address this, mainly, stop spewing useless crap to root and the console. -Bob * John Draper <[EMAIL PROTECTED]> [2005-06-20 19:47]: > Stuart Henderson wrote: > > >On 2005/06/18 14:41:10, John Draper wrote: > >

Re: Eric Raymond talks about GPL and BSD licenses on MyFreeBSD.com

2005-06-20 Thread Jeff Bachtel
On Mon, Jun 20, 2005 at 12:06:02AM +1000, Steffen Kluge wrote: > Johan M:son Lindman wrote: > >http://www.catb.org/~esr/guns/ http://www.myfreebsd.com.br/static/raymond-20050604.html > Thanks for pointing that out, Johan. > > Of course, ESR being a gun nut makes his opinion about software > lic

Re: S-Video TV Hookup

2005-06-20 Thread Dan Smythe
I set up the ports tree and did a make and make install in the /usr/ports/x11/gatos-bin directory. Is there something special I have to do to get my hookup to work? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Re: port truncating

2005-06-20 Thread Gustavo Rios
Any advance on this matter? On 2/10/05, Aaron Glenn <[EMAIL PROTECTED]> wrote: > On Thu, 10 Feb 2005 18:00:09 -0200, Gustavo Rios <[EMAIL PROTECTED]> wrote: > > Does OBSD support aggregating a dual port 1 Gigabit ethernet nic into > > a single channel of 2 Gigabit port? I am considering Intel and

Re: ATi XPRESS

2005-06-20 Thread Brad
On Mon, Jun 20, 2005 at 11:21:41PM +0200, Peter Huncar wrote: > Hi > > I know that the chipset isn't supported yet, but one funny thing: > > When I boot my MSI MB with ATi XPRESS chipset using the floppy, it runs very > well ;) Networking works, even installing the system from some sources > (tri

ral0 problem

2005-06-20 Thread Matt Brenneke
With the upgrade to OpenBSD 3.7, I decided it was time to upgrade from 802.11b to 802.11g. I went out and bought a linksys card (Ralink RT2560 based). I pulled out my old wi0 card and put in the ral0 card, updated my pf rules and hostname.if file, and tried to connect, but KisMAC and iStumbler do

Re: altq priq Anomaly?

2005-06-20 Thread Melameth, Daniel D.
I sent this email back in February when I was running 3.5 and didn't look into this further because this was an older release--but now I'm running 3.7 and I have the same issue. Any ideas? Melameth, Daniel D. wrote: > I implemented altq's priq a while back in the hope of "speeding up" my > overal

Re: How do we disable console output temporarily.

2005-06-20 Thread John Draper
Stuart Henderson wrote: On 2005/06/18 14:41:10, John Draper wrote: Quickest way is probably 'pkill syslogd' (or 'kill `cat /var/run/syslogd.pid`' if you don't have pkill). ...or just login as a user other than root, and use "sudo" to execute the commands... Ok, if I do that, t

Re: How do we disable console output temporarily.

2005-06-20 Thread John Draper
Moritz Grimm wrote: I cannot do that - the box is over 500KM away from me. Well, okay, but calling the ISP for help in case of DoS is still something you should do - if the source(s) of the attack come from a reasonably small portion of the 'net, they can null-route those networks, giving

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Joseph C. Bender
On Tue, 21 Jun 2005, Jeremy Bowen wrote: > Why else would anyone incorporate it in there, when a cheap Korean > manufacturer could save $5 by leaving such a device out. (Or are you > suggesting the NSA are in the business of subsidising keyboard sales :-) > Of course, at this point, I'd

Audio

2005-06-20 Thread Ray Percival
I have a nforce mobo with built in sound. Dmesg shows auich0 at pci0 dev 6 function 0 "Nvidia nForce AC-97 Audio" rev 0xc2: irq 5, nForce AC97 audio0 at auich0 So I'm pretty sure the drivers are loaded and the card is supported. I think the problem is that /dev/sound is lrwx-- 1 root wheel

Re: No man pages after installing bash

2005-06-20 Thread Tony
Check /etc/man.conf from fresh 3.7 install (with bash and a few others installed) ?? Did you install the man pages ?? bash-3.00$ cat /etc/man.conf # $OpenBSD: man.conf,v 1.8 2001/04/05 19:05:49 millert Exp $ # Sheer, raging paranoia... _versionBSD.2 # The whatis/apropos database. _

Re: Proxy arp needed for NAT?

2005-06-20 Thread Stephen Marley
On Mon, Jun 20, 2005 at 04:23:51PM -0700, Michael Favinsky wrote: > I was reading through the pf documentation and found the following example > of NATing several internal IP addresses to two external IP addresses: > > nat on $ext_if inet from any to any -> 192.0.2.4/31 source-hash > > Let's say

Re: Proxy arp needed for NAT?

2005-06-20 Thread Stuart Henderson
--On 20 June 2005 16:23 -0700, Michael Favinsky wrote: I was reading through the pf documentation and found the following example of NATing several internal IP addresses to two external IP addresses: nat on $ext_if inet from any to any -> 192.0.2.4/31 source-hash Let's say the external IP addr

Re: Asymmetric gigabit speeds at full load / OpenBSD 3.7

2005-06-20 Thread Sean Knox
Frederic BRET wrote: Hi all, This is my first post to this list. I'm trying to understand why our OpenBSD PF router is not able to cope correctly with needed gigabit speeds On our gigabit firewall, I've found that it's able to forward traffic at ~920 Mb/s (69.2% interrupt, 110,844/11

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 07:29 am, Jeremy Bowen wrote: > On Monday 20 June 2005 11:55 pm, Dave Feustel wrote: > > If you read the FAQ carefully you would note that the keylogger chip is > > now being installed in oem equipment for the company marketing the > > keyboard. Buying a unit off the shelf do

Proxy arp needed for NAT?

2005-06-20 Thread Michael Favinsky
I was reading through the pf documentation and found the following example of NATing several internal IP addresses to two external IP addresses: nat on $ext_if inet from any to any -> 192.0.2.4/31 source-hash Let's say the external IP address of my firewall is 192.0.2.1. Do I need to configure p

Re: raid controllers (3ware vs. intel and lsi)

2005-06-20 Thread Jim Razmus
* Rob Foster <[EMAIL PROTECTED]> [050620 17:06]: > 3ware raid controllers don't have an audible speaker when a drive fails. > > What SATA raid card (>2 drives) is the easiest to deal with under errors? > > I hear the intel and ami(lsi) cards are recommended, but is it 6 of > one and a half dozen

Re: No man pages after installing bash

2005-06-20 Thread Timothy Horie
Nevermind. I installed man37.tgz and now everything works. Timothy Horie wrote: Hello, I can't use man pages for some reason after I installed bash and login using bash. I typed 'man dump' and it says that it can't find a manual page for that. I looked at some help on the web and there's a

Re: customised network installation...

2005-06-20 Thread Stephan Wehner
Did you look at http://openbsd.org/faq/faq4.html#site Stephan

customised network installation...

2005-06-20 Thread poncenby
Greetings all, I need to build an OpenBSD box completely stripped down, so I don't want any kind of C compiler. If one cannot use pkg_add in a custom installation script then how does one push customised applications onto clients? Does a method exist for OpenBSD which is analogous to kickstart

No man pages after installing bash

2005-06-20 Thread Timothy Horie
Hello, I can't use man pages for some reason after I installed bash and login using bash. I typed 'man dump' and it says that it can't find a manual page for that. I looked at some help on the web and there's a MANPATH but I'm not sure what to set it to. I also looked at the /etc/man.conf bu

Re: Printers?

2005-06-20 Thread Johan P . Lindström
Almost all HP lasers you can find nowadays will do PCL 4 or better, don't go for the PS rendering it's often done in the printer driver. On 6/20/05, Ryan Corder <[EMAIL PROTECTED]> wrote: > > On Sat, 2005-06-18 at 11:58 -0700, Brian wrote: > > I would be looking for laser printer under $300. > > >

Re: Authpf Help

2005-06-20 Thread Mark Uemura
Now I understand why you guys need an rdr rule. I'm port forwarding my RDC connections through ssh. This eliminates the need for rdr. However, if you don't port forward, then I can see why the rdr rule is needed. I assumed too much before in my previous post. Sorry for that. If you're allowing

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread auto275911
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Someone here made referrence to 'nazis'. http://en.wikipedia.org/wiki/Godwin's_law -BEGIN PGP SIGNATURE- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.4 wkYEARECAAYFAkK3NOIACgkQSNwPY+UhpH+xLwCguY5FoJ

ATi XPRESS

2005-06-20 Thread Peter Huncar
Hi I know that the chipset isn't supported yet, but one funny thing: When I boot my MSI MB with ATi XPRESS chipset using the floppy, it runs very well ;) Networking works, even installing the system from some sources (tried ftp and CD). But after restarting and booting from the disk, it hangs dur

Re: mcopy -s foo a:

2005-06-20 Thread Terry
On Mon, Jun 20, 2005 at 11:00:35PM +0200, chefren wrote: > What's wrong (besides the stupidity of using a floppy...): > > Insert an empty floppy > # cd /tmp > # mkdir foo > # echo aap >foo/aa-test-1.xml > # mcopy -s foo a: > # mount -t msdos -o -l /dev/fd0c /mnt > # mkdir bar > # cp -R /mnt/foo

Re: Authpf Help

2005-06-20 Thread Steven Bowers
Brandon, I have authpf working for RDP to my machine at the house. It needed these lines to work for me. Hopefully they will help you too. /etc/authpf/users/steve/authpf.rules #variables ext_if = "fxp0" xp_machine = "192.168.1.107" # redirection to ms rdp rdr on $ext_if inet proto tc

raid controllers (3ware vs. intel and lsi)

2005-06-20 Thread Rob Foster
3ware raid controllers don't have an audible speaker when a drive fails. What SATA raid card (>2 drives) is the easiest to deal with under errors? I hear the intel and ami(lsi) cards are recommended, but is it 6 of one and a half dozen of the other? Is there anyway in openbsd 3.7 to tell when a

mcopy -s foo a:

2005-06-20 Thread chefren
What's wrong (besides the stupidity of using a floppy...): Insert an empty floppy # cd /tmp # mkdir foo # echo aap >foo/aa-test-1.xml # mcopy -s foo a: # mount -t msdos -o -l /dev/fd0c /mnt # mkdir bar # cp -R /mnt/foo bar cp: /mnt/foo/aa-test-1.xml: No such file or directory Or for cut&past

Re: Encrypted Swap

2005-06-20 Thread Ray Percival
On Mon, Jun 20, 2005 at 09:17:55PM +0200, Rogier Krieger wrote: > On 6/20/05, Ray Percival <[EMAIL PROTECTED]> wrote: > > Setting up GPG and I thought I enabled encrypted swap with sysctl -w > > vm.swapencrypt.enable=1 > > You're already there; only GPG doesn't know about that. I suspect you > misr

Re: Encrypted Swap

2005-06-20 Thread Rogier Krieger
On 6/20/05, Ray Percival <[EMAIL PROTECTED]> wrote: > Setting up GPG and I thought I enabled encrypted swap with sysctl -w > vm.swapencrypt.enable=1 You're already there; only GPG doesn't know about that. I suspect you misread the instructions. GPG will whine about insecure memory so long as it do

Re: snort homedir ?

2005-06-20 Thread mess-mate
Clint M. Sand <[EMAIL PROTECTED]> wrote: | On Sun, Jun 19, 2005 at 03:17:48PM +0200, mess-mate wrote: | > Hi, | > i've installed snort and created the user/group snort. | > Since snort runs as a daemon a homdir is not necessary, isn't ? | > How can i remove / setup the user snort without a homedir

Encrypted Swap

2005-06-20 Thread Ray Percival
Setting up GPG and I thought I enabled encrypted swap with sysctl -w vm.swapencrypt.enable=1 it threw a message telling me that it was changing it. I also uncommented it in /etc/sysctl.conf but have not booted since doing that. Looking thorugh the archives and the faq I thought that should make gpg

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 10:43 am, Tobias Weingartner wrote: > On Monday, June 20, Dave Feustel wrote: > > > > I just read the man page for skey, but I still don't quite understand > > how it works. Would I use a calculator to generate a response that I > > type in response to a challenge, or what?

Re: Ftp-proxy

2005-06-20 Thread N.J. Reuvers
Replace this: pass in on $ext_if inet proto tcp from any port 20 to ($ext_if) \ port 55000 >< 57000 user proxy flags S/SA keep state By this: pass in on $ext_if inet proto tcp from any to $ext_if \ user proxy keep state -Oorspronkelijk bericht- Van: [EMAIL PROTECTE

Ftp-proxy

2005-06-20 Thread Timothy Horie
I can't seem to get ftp-proxy working. I've looked at quite a few websites and mailing list messages and I think I'm really close. But something isn't right. When a lan computer tries to ftp, it connects but when it does "ls" or "dir" it says 200 PORT command successful - not using PASV, eh? Co

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Marti Martinez
On 6/19/05, Timothy A. Napthali <[EMAIL PROTECTED]> wrote: > I'm fairly sure this is a hoax. I have seen this referenced several > times over the past few weeks and I have seen no evidence to indicate > and truth to the matter. > > Apart from the obvious legal implications outside of the US how lo

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 08:05 am, Alexander Bochmann wrote: > ...on Mon, Jun 20, 2005 at 07:24:16AM -0500, Dave Feustel wrote: > > > Here is a relevant link: > > http://www.rumormillnews.com/cgi-bin/forum.cgi?read=73190 > > That's just the same thing all over. > > > We may get to find out - se

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Eric Zylstra
On Jun 20, 2005, at 9:11 AM, Marco Peereboom wrote: nazis Invalid invocation! It must be a genuine, spontaneous reference. Now you damn us to dozens more messages in this thread because we all are now aware of the risk. EZ ;-)

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread J.C. Roberts
On Mon, 20 Jun 2005 17:45:53 +0200, Dimitry Andric <[EMAIL PROTECTED]> wrote: >On 2005-06-20 at 17:00:57 Artur Grabowski wrote: > >> the data, nothing prevents them from installing a keylogger (surprise) >> or a camera that will film the keyboard or a microphone that will >> record the keyboard cl

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 08:14 am, Otto Moerbeek wrote: > > On Mon, 20 Jun 2005, Dave Feustel wrote: > > > > One Time Passwords such as skey(1) are also good for insecure > > > environments. > > > > > > Ben. > > > > I just read the man page for skey, but I still don't quite understand > > how it

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread jared r r spiegel
On Mon, Jun 20, 2005 at 07:49:47AM -0500, Dave Feustel wrote: > > I *would* like to see some pictures of a keylogger chip installed in a > keyboard. also might be a good idea to find some pictures of the underside of a keyboard. phillips head screws and all... for me, it's time to edi

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dimitry Andric
On 2005-06-20 at 17:00:57 Artur Grabowski wrote: > the data, nothing prevents them from installing a keylogger (surprise) > or a camera that will film the keyboard or a microphone that will > record the keyboard clicks so that they can analyze the clicks and > steal your password from that. They c

Re: Authpf Help

2005-06-20 Thread Brandon Mercer
Mark Uemura wrote: >>like to be able to log in to their machine. I've tried setting up >>specific rules that rdr to their machines to no avail. Here are some >>things I've tried: >> >> > >I'm not quite sure why you are using the rdr rule? I've got the >same requirements as you have describ

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Artur Grabowski
Dave Feustel <[EMAIL PROTECTED]> writes: > On Monday 20 June 2005 12:33 am, Chris Zakelj wrote: > > Dave Feustel wrote: > > > > >I thought you had more insight. All of OpenBSD's security is at risk with > > >this technology. > > > > > The security features of an OS will not stop a physical attack

Re: Authpf Help

2005-06-20 Thread Mark Uemura
> like to be able to log in to their machine. I've tried setting up > specific rules that rdr to their machines to no avail. Here are some > things I've tried: I'm not quite sure why you are using the rdr rule? I've got the same requirements as you have described above but no need for rdr. I

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Tobias Weingartner
On Monday, June 20, Dave Feustel wrote: > > I just read the man page for skey, but I still don't quite understand > how it works. Would I use a calculator to generate a response that I > type in response to a challenge, or what? Or what. --Toby. PS: Google for a tutorial, a howto, whatever. Ju

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Tobias Weingartner
On Monday, June 20, Dave Feustel wrote: > > I thought you had more insight. All of OpenBSD's security is at risk with > this technology. Nope, he has lots of insight. You on the other hand are the security risk here... well, you were, and maybe, just maybe, if you smarten up and realize what yo

bug or bad disk?

2005-06-20 Thread Rob Foster
http://mail-index.netbsd.org/current-users/2001/01/20/0010.html http://mail-index.netbsd.org/port-i386/2001/04/16/0001.html is this the same as the netbsd bug from 2001, or do I have a bad disk? There are no smart errors. # dd if=/dev/rwd0c of=/dev/rwd1c bs=1m dd: /dev/rwd0c: Input/output error 7

Re: Printers?

2005-06-20 Thread Ryan Corder
On Sat, 2005-06-18 at 11:58 -0700, Brian wrote: > I would be looking for laser printer under $300. > > Any suggestions? check out the HP LaserJet 1012 or 1320. I have a 1012 myself at home and there are several 1320 models deployed at work. The 1012 can be had for US $199 and the 1320 is curren

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Marco Peereboom
nazis

Re: A system for "patches"....

2005-06-20 Thread Tobias Weingartner
On Monday, June 20, [EMAIL PROTECTED] wrote: > > Somebody could write a shellscript wich includes the Checksums for a > compiled (and patched) binary for each architecture. Sure, my company could do that. The rate I've quoted you before. Or you could do it yourself... only to findout that the

Authpf Help

2005-06-20 Thread Brandon Mercer
Hello Group, I've been playing around with authpf and got things working pretty well with it. Now I've got a request to make things work even better and that's where I got stuck. My setup is that I authenticate users on our gateway before allowing an incoming Remote Desktop connection from them.

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Rod.. Whitworth
On Mon, 20 Jun 2005 07:32:09 -0500, Dave Feustel wrote: >On Monday 20 June 2005 01:32 am, Ben Hooper wrote: >> |>I thought you had more insight. All of OpenBSD's security is >> |at risk with >> |>this technology. >> |> >> |The security features of an OS will not stop a physical attack, no >> |ma

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Alexander Bochmann
...on Mon, Jun 20, 2005 at 07:24:16AM -0500, Dave Feustel wrote: > Here is a relevant link: > http://www.rumormillnews.com/cgi-bin/forum.cgi?read=73190 That's just the same thing all over. > We may get to find out - see the above link which is apparently the source > material for the snopes

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Otto Moerbeek
On Mon, 20 Jun 2005, Dave Feustel wrote: > > One Time Passwords such as skey(1) are also good for insecure environments. > > > > Ben. > > I just read the man page for skey, but I still don't quite understand > how it works. Would I use a calculator to generate a response that I > type in respons

Re: S-Video TV Hookup

2005-06-20 Thread Josh Grosse
On Sun, Jun 19, 2005 at 08:21:11PM -0700, Dan Smythe wrote: > ...I did look into the gatos program, and I got an error message > saying I needed an updated linux kernel. How do I go about using > the ports copy of gatos-bin? I extracted the ports file in the > /home directory and went into the g

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 07:14 am, Chris Zakelj wrote: > Dave Feustel wrote: > > >If you read the FAQ carefully you would note that the keylogger chip is > >now being installed in oem equipment for the company marketing the keyboard. > >Buying a unit off the shelf does not guarantee that there is no

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Alexander Bochmann
...on Mon, Jun 20, 2005 at 07:32:09AM -0500, Dave Feustel wrote: > > One Time Passwords such as skey(1) are also good for insecure environments. > I just read the man page for skey, but I still don't quite understand > how it works. Would I use a calculator to generate a response that I > type

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 07:17 am, Marc Espie wrote: > On Mon, Jun 20, 2005 at 07:08:18AM -0500, Dave Feustel wrote: > > If one-time passwords capability is built into OpenBSD, where can I read > > about > > how to use them? > > RTFM comes to mind. > > apropos otp > gives you valid pointers. Than

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Rod.. Whitworth
On Mon, 20 Jun 2005 07:08:18 -0500, Dave Feustel wrote: >On Monday 20 June 2005 06:36 am, Marc Espie wrote: >> On Mon, Jun 20, 2005 at 12:07:13AM -0500, Dave Feustel wrote: >> > On Sunday 19 June 2005 08:51 pm, Nick Holland wrote: >> > > Dave Feustel wrote: >> > > > http://www.amecisco.com/faq_har

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 06:06 am, Nick Holland wrote: > Building a keyboard logger into a keyboard is nothing new. We put one > in your keyboard two years ago. :) Good thing I replaced the keyboard twice since then. :-) But wait a minute! I might have bought a replacement keyboard which already h

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Alexander Bochmann
...on Mon, Jun 20, 2005 at 07:08:18AM -0500, Dave Feustel wrote: > If one-time passwords capability is built into OpenBSD, where can I read > about > how to use them? skey(1) will start you off. Alex.

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 01:32 am, Ben Hooper wrote: > |>I thought you had more insight. All of OpenBSD's security is > |at risk with > |>this technology. > |> > |The security features of an OS will not stop a physical attack, no > |matter how well designed. This is no different than the admin lea

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Chris Zakelj
Dave Feustel wrote: You are making fact out of fiction and also dealing with the wrong scenario. If everyone's keystrokes are monitored by a builtin keylogger in each computer, then the computer of any 'person of interest' is an open book to any 3-letter agency that decides to find out what that

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Chris Zakelj
Dave Feustel wrote: If you read the FAQ carefully you would note that the keylogger chip is now being installed in oem equipment for the company marketing the keyboard. Buying a unit off the shelf does not guarantee that there is no keylogger chip installed in the keyboard. No, but it does m

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 12:23 am, Timothy A. Napthali wrote: > I'm fairly sure this is a hoax. I have seen this referenced several > times over the past few weeks and I have seen no evidence to indicate > and truth to the matter. Here is a relevant link: http://www.rumormillnews.com/cgi-bin/forum.c

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Marc Espie
On Mon, Jun 20, 2005 at 07:08:18AM -0500, Dave Feustel wrote: > If one-time passwords capability is built into OpenBSD, where can I read about > how to use them? RTFM comes to mind. apropos otp gives you valid pointers. After that, I think you're a big boy, you can figure it out yourself...

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 06:36 am, Marc Espie wrote: > On Mon, Jun 20, 2005 at 12:07:13AM -0500, Dave Feustel wrote: > > On Sunday 19 June 2005 08:51 pm, Nick Holland wrote: > > > Dave Feustel wrote: > > > > http://www.amecisco.com/faq_hardwarekeylogger.htm#Q1 > > > > > > This has nothing to do with

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 01:26 am, Rod.. Whitworth wrote: > I thought that might have a brain. > > All of OpenBSD's security at risk? How, in your wildest chemically > induced dreams, could it be? This rejoinder does not deserve a response and will get none from me. Grow Up.

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 12:43 am, Chris Zakelj wrote: > Dave Feustel wrote: > > >The device is obviously not new. What *is* new is that it is being installed > >as oem equipment inside of keyboards for HP and Dell systems and also inside > >of 'used keyboards which can be unobtrusively switched i

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 12:52 am, Brett Lymn wrote: > On Mon, Jun 20, 2005 at 12:06:02AM -0500, Dave Feustel wrote: > > > > So far I see no defense against this spying > > technique of password capture. > > > > Regardless of whether they are built in or not - one possible way to > get around keyl

Re: using hatchet

2005-06-20 Thread Jason Dixon
On Jun 20, 2005, at 5:37 AM, C. L. Martinez wrote: Hi all, Somebody has used hatchet when all openbsd logs are redirected to a centrel syslog server based on Linux/Solaris??? This really belongs on the hatchet-users mailing list (http://dixongroup.net/mailman/listinfo/hatchet-users). I've

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Dave Feustel
On Monday 20 June 2005 12:33 am, Chris Zakelj wrote: > Dave Feustel wrote: > > >I thought you had more insight. All of OpenBSD's security is at risk with > >this technology. > > > The security features of an OS will not stop a physical attack, no > matter how well designed. This is no different

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Marc Espie
On Mon, Jun 20, 2005 at 12:07:13AM -0500, Dave Feustel wrote: > On Sunday 19 June 2005 08:51 pm, Nick Holland wrote: > > Dave Feustel wrote: > > > http://www.amecisco.com/faq_hardwarekeylogger.htm#Q1 > > > > This has nothing to do with OpenBSD. > > It isn't new. > > It isn't unique. > > In effect,

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Nick Holland
Dave Feustel wrote: > On Sunday 19 June 2005 08:51 pm, Nick Holland wrote: >> Dave Feustel wrote: >> > http://www.amecisco.com/faq_hardwarekeylogger.htm#Q1 >> >> This has nothing to do with OpenBSD. >> It isn't new. >> It isn't unique. >> In effect, you just spammed the list, advertising someone's

using hatchet

2005-06-20 Thread C. L. Martinez
Hi all, Somebody has used hatchet when all openbsd logs are redirected to a centrel syslog server based on Linux/Solaris??? Thank you for your help. -- C.L. Martinez [EMAIL PROTECTED]

Re: OT: Programming portability

2005-06-20 Thread VaX#n8
In message <[EMAIL PROTECTED]>, Chris Zakelj writes: >That is, how >does one figure out what needs to be changed in order to make OpenNTPD >work on Linux? If you know what is available on Linux and what is used on the code, you can do this manually, but usually it involves trying to compile it o

Re: Why timezone it is always incorrect??

2005-06-20 Thread Travis H.
> Is not possible to adjust clock under OpenBSD correctly??? I do not > understand why cmos clock needs to leave at UTC. why? Just as a tip, it's a bad idea to use the CMOS clock as something other than UTC. I don't recall all the details, but it is especially problematic around DST adjustments

Re: IPSec Vulnerabilidade

2005-06-20 Thread Dunceor .
This maillist is english-speaking and it would help if you just didn't assume that every one understands your language. On 6/20/05, Andre Siqueira de Cordova <[EMAIL PROTECTED]> wrote: > Alguim sabe como solucionar a Vulnerabilidade encontrada no protocolo ESP do > IPSec ? > > > Andri