Re: SATA RAID card: the cheapest

2006-07-09 Thread Rogier Krieger
On 7/9/06, Jacob Yocom-Piatt <[EMAIL PROTECTED]> wrote: i'm building a machine on the cheap for colocation. what is the most affordable card that will do hardware SATA RAID? i've seen ~220 usd for the MegaRAID 150-4. If you're using it for co-location, remember that the 150-4 isn't exactly low

em(4) remains in unknown link state until inserting a cable

2006-07-09 Thread Matthew R. Dempsky
On my laptop, starting at reboot and until I have inserted an ethernet cable, em(4) leaves its if_link_state as LINK_STATE_UNKNOWN. This causes problems for me because when trunk(4) is setup to use em(4) as the master port, it will not failover to the secondary port until if_link_state changes

Default ghostscript doesn't work in OpenBSD 3.9?

2006-07-09 Thread Karel Kulhavy
Hello Please try with your OpenBSD 3.9 and default ghostscript install this: [EMAIL PROTECTED]:~$ gs /usr/local/share/ghostscript/7.05/examples/alphabet.ps It's a 1551-byte simple example postscript that comes with Ghostscript and fails for me. I am getting the message Error: /invalidfileaccess

PowerPC G3 Power saving modes

2006-07-09 Thread Peter Philipp
Hi, At this URL (http://active-hardware.com/english/archives/arc0-2001.html) there is talks about a G3 having 3 modes: nap, doze (with bus snoop), and sleep. Are any of these implemented in OpenBSD? Is it worth it to implement them? Anyhow if anyone has links that explain exactly what these

OT: how far are light based logic gates?

2006-07-09 Thread Peter Philipp
How far in development are CPU's that only use light as their input and have a series of optical logic gates to do processing? Alternatively they have electric inputs to power laser emitting diodes. Does something exist yet in the 21st century? I'd imagine it would have incredible power savings

3.9, NFS client freezes with: short receive (0/4) from nfs server...

2006-07-09 Thread Dimitar Kodjabachev
I have an NFS server /i386,FC4/ and two OpenBSD /i386,3.9-stable/ NFS clients. At irregular intervals, not corresponding to heavy load or other network/system issues, the two clients start complaining with the message: short receive (0/4) from nfs server server.domain.tld:/exported/dire

USB keyboards / encryption

2006-07-09 Thread Peter Philipp
I know that wireless keyboards have built-in encryption, but do wired keyboards or specifically USB keyboards exist that encrypt the typed input for the USB bus? I suspect something like public key encryption on the keyboard which choses a random key for the key-input and exchanges it securely wi

Re: OT: how far are light based logic gates?

2006-07-09 Thread Floor Terra
I don't think it's a real OpenBSD question, but let me try to answer. As far as I know there are no real (useful) optical processors yet. A while ago there was an new company who promised the EnLight 256. An optical processor for highly specialized tasks, but i never heard about the device bei

Re: USB keyboards / encryption

2006-07-09 Thread Joachim Schipper
On Sun, Jul 09, 2006 at 02:25:12PM +0200, Peter Philipp wrote: > I know that wireless keyboards have built-in encryption, but do wired > keyboards or specifically USB keyboards exist that encrypt the typed > input for the USB bus? > > I suspect something like public key encryption on the keyboard

SOCK_RAW description

2006-07-09 Thread Karel Kulhavy
Hello " The types SOCK_RAW, which is available only to the superuser, and SOCK_RDM, which is planned, but not yet implemented, are not described here." (man socket) Where is SOCK_RAW described, then? Why is not at least a pointer to the description included in the manpage? I would like to port a

Re: SOCK_RAW description

2006-07-09 Thread Jason McIntyre
On Sun, Jul 09, 2006 at 03:32:41PM +0200, Karel Kulhavy wrote: > > " The types SOCK_RAW, which is available only to the superuser, and SOCK_RDM, > which is planned, but not yet implemented, are not described here." > (man socket) > > Where is SOCK_RAW described, then? Why is not at least a pointe

Re: SOCK_RAW description

2006-07-09 Thread Peter Philipp
On Sun, Jul 09, 2006 at 03:32:41PM +0200, Karel Kulhavy wrote: > Hello > > " The types SOCK_RAW, which is available only to the superuser, and SOCK_RDM, > which is planned, but not yet implemented, are not described here." > (man socket) > > Where is SOCK_RAW described, then? Why is not at least

Re: USB keyboards / encryption

2006-07-09 Thread Peter Philipp
On Sun, Jul 09, 2006 at 03:08:19PM +0200, Joachim Schipper wrote: > On Sun, Jul 09, 2006 at 02:25:12PM +0200, Peter Philipp wrote: > > I know that wireless keyboards have built-in encryption, but do wired > > keyboards or specifically USB keyboards exist that encrypt the typed > > input for the USB

Re: SATA RAID card: the cheapest

2006-07-09 Thread Marco Peereboom
Some 3ware cards may be cheaper but I doubt you'd do better with them. Personally, I'm quite happy with the 150-4 card. It suits my needs fine and bioctl(8) is of course a splendid bonus. I'm not using it in a co-located environment, so I can't tell you whether it would fit into a 19" chassis. A

What (stream) ciphers exist in the kernel?

2006-07-09 Thread Peter Philipp
Hi, I'm looking for a stream cipher in the kernel that is fairly secure. Does it exist? Alternatively I'm looking for a block cipher that does CFB (Cipher Feedback Mode). There is a prototype stub for DES CFB in /sys/crypto/des.h but I don't see a des.c file in the 3.9 sources, is it taken ou

Re: USB keyboards / encryption

2006-07-09 Thread Joachim Schipper
On Sun, Jul 09, 2006 at 04:22:29PM +0200, Peter Philipp wrote: > On Sun, Jul 09, 2006 at 03:08:19PM +0200, Joachim Schipper wrote: > > On Sun, Jul 09, 2006 at 02:25:12PM +0200, Peter Philipp wrote: > > > I know that wireless keyboards have built-in encryption, but do wired > > > keyboards or specif

Re: What (stream) ciphers exist in the kernel?

2006-07-09 Thread Joachim Schipper
On Sun, Jul 09, 2006 at 05:34:12PM +0200, Peter Philipp wrote: > Hi, > > I'm looking for a stream cipher in the kernel that is fairly secure. Does it > exist? Alternatively I'm looking for a block cipher that does CFB > (Cipher Feedback Mode). There is a prototype stub for DES CFB in > /sys/c

Re: USB keyboards / encryption

2006-07-09 Thread Darrin Chandler
On Sun, Jul 09, 2006 at 06:01:43PM +0200, Joachim Schipper wrote: > > You are, possibly, confusing a world in which people are out to get you > with one where (most of) the rest of the world doesn't particularly care > what happens to you. I'm not saying we're living in a wonderland, but > it's hi

Re: USB keyboards / encryption

2006-07-09 Thread Rod Dorman
On Sunday, July 9, 2006, 10:22:29, Peter Philipp wrote: > On Sun, Jul 09, 2006 at 03:08:19PM +0200, Joachim Schipper wrote: >> ... >> I am not aware of any keyboard of the sort you describe, nor do I see >> the use of such a thing. Seriously, what are you trying to protect >> against? Hardware ke

Re: USB keyboards / encryption

2006-07-09 Thread Peter Philipp
On Sun, Jul 09, 2006 at 06:01:43PM +0200, Joachim Schipper wrote: > > Well I'm more or less wondering if anyone has ever done it. I'm looking > > for experiences here. If I rewire my keyboard that's my business (I did > > buy it after all, it is not partially owned by any government, corporation,

Re: USB keyboards / encryption

2006-07-09 Thread Peter Philipp
On Sun, Jul 09, 2006 at 09:38:21AM -0700, Darrin Chandler wrote: > Well, it's very hard to say that someone isn't trying to bug his > keyboard. It might be a valid concern. However, if someone *is* then you > have to look at all the other possibilities as well. A small audio bug > can be enough to

Re: USB keyboards / encryption

2006-07-09 Thread Darrin Chandler
On Sun, Jul 09, 2006 at 07:21:33PM +0200, Peter Philipp wrote: > On Sun, Jul 09, 2006 at 09:38:21AM -0700, Darrin Chandler wrote: > > have to look at all the other possibilities as well. A small audio bug > > can be enough to pick up key clicks, and some interesting work has been > > done in recons

restarting DHCP not described in manpages

2006-07-09 Thread Karel Kulhavy
I read man dhcp and man dhclient and wasn't able to determine how to restart the DHCP process (or the whole network) if my cable modem with DHCP server crashes and I have to reboot it. I suggest this information to be added, but I don't know where it belongs. CL<

Re: USB keyboards / encryption

2006-07-09 Thread Jacob Yocom-Piatt
>Sounds like a good research topic, but I suspect it would foil attempts >in the short run only. > >> Pretend you're travelling with a zaurus like device and you take an external >> USB keyboard with you including a USB hub and shitloads of little USB >> devices >> that you can then use in the ho

Re: USB keyboards / encryption

2006-07-09 Thread Tobias Ulmer
On Sun, Jul 09, 2006 at 07:21:33PM +0200, Peter Philipp wrote: > On Sun, Jul 09, 2006 at 09:38:21AM -0700, Darrin Chandler wrote: > > Well, it's very hard to say that someone isn't trying to bug his > > keyboard. It might be a valid concern. However, if someone *is* then you > > have to look at all

Re: restarting DHCP not described in manpages

2006-07-09 Thread Han Boetes
Karel Kulhavy wrote: > I read man dhcp and man dhclient and wasn't able to determine > how to restart the DHCP process (or the whole network) if my > cable modem with DHCP server crashes and I have to reboot it. I > suggest this information to be added, but I don't know where it > belongs. Default

Re: restarting DHCP not described in manpages

2006-07-09 Thread Paul de Weerd
On Sun, Jul 09, 2006 at 08:31:46PM +0159, Han Boetes wrote: | Karel Kulhavy wrote: | > I read man dhcp and man dhclient and wasn't able to determine | > how to restart the DHCP process (or the whole network) if my | > cable modem with DHCP server crashes and I have to reboot it. I | > suggest this

Re: USB keyboards / encryption

2006-07-09 Thread Stuart Henderson
On 2006/07/09 14:25, Peter Philipp wrote: > I know that wireless keyboards have built-in encryption, Some do, not all.

Re: restarting DHCP not described in manpages

2006-07-09 Thread Matthew R. Dempsky
On Sun, Jul 09, 2006 at 08:31:23PM +0159, Han Boetes wrote: > Karel Kulhavy wrote: > > I read man dhcp and man dhclient and wasn't able to determine > > how to restart the DHCP process (or the whole network) if my > > cable modem with DHCP server crashes and I have to reboot it. I > > suggest this

Re: restarting DHCP not described in manpages

2006-07-09 Thread Jim Capozzoli
On 7/9/06, Karel Kulhavy <[EMAIL PROTECTED]> wrote: I read man dhcp and man dhclient and wasn't able to determine how to restart the DHCP process (or the whole network) if my cable modem with DHCP server crashes and I have to reboot it. I suggest this information to be added, but I don't know whe

Re: restarting DHCP not described in manpages

2006-07-09 Thread Todd Alan Smith
On 7/9/06, Matthew R. Dempsky <[EMAIL PROTECTED]> wrote: On Sun, Jul 09, 2006 at 08:31:23PM +0159, Han Boetes wrote: > Karel Kulhavy wrote: > > I read man dhcp and man dhclient and wasn't able to determine > > how to restart the DHCP process (or the whole network) if my > > cable modem with DHCP

Re: USB keyboards / encryption

2006-07-09 Thread Peter Philipp
On Sun, Jul 09, 2006 at 08:22:10PM +0200, Tobias Ulmer wrote: > Encrypting data from the keyboard is also not a real option, > because you need a shared secret (or something like hostkeys, how do > you know that the usb sniffer can't do MITM attacks?). The keyboard > needs to be pretty "intelligent

Re: restarting DHCP not described in manpages

2006-07-09 Thread Paul de Weerd
On Sun, Jul 09, 2006 at 06:57:35PM +, Todd Alan Smith wrote: | Actually, the way I read the original post, the OP is already | restarting the DHCP server when he/she power cycles the "cable modem | with DHCP server". Thus, he/she just wants to restart the DHCP client. | Is there not an equivale

Re: What (stream) ciphers exist in the kernel?

2006-07-09 Thread Peter Philipp
On Sun, Jul 09, 2006 at 06:06:35PM +0200, Joachim Schipper wrote: > > I'm looking for a stream cipher in the kernel that is fairly secure. Does > > it > > exist? Alternatively I'm looking for a block cipher that does CFB > > (Cipher Feedback Mode). There is a prototype stub for DES CFB in > >

Re: What (stream) ciphers exist in the kernel?

2006-07-09 Thread Matthew R. Dempsky
On Sun, Jul 09, 2006 at 09:37:12PM +0200, Peter Philipp wrote: > I'm trying to encrypt a stream, per byte (8 bit) instead of per block (usually > 8 bytes) in the kernel. CFB and OFB ciphers are ok if they are a block cipher > as they pretty well can encrypt per byte according to applied cryptograp

Re: USB keyboards / encryption

2006-07-09 Thread Joachim Schipper
On Sun, Jul 09, 2006 at 09:17:00PM +0200, Peter Philipp wrote: > On Sun, Jul 09, 2006 at 08:22:10PM +0200, Tobias Ulmer wrote: > > Encrypting data from the keyboard is also not a real option, > > because you need a shared secret (or something like hostkeys, how do > > you know that the usb sniffer

Re: What (stream) ciphers exist in the kernel?

2006-07-09 Thread Joachim Schipper
On Sun, Jul 09, 2006 at 09:37:35PM +0200, Peter Philipp wrote: > On Sun, Jul 09, 2006 at 06:06:35PM +0200, Joachim Schipper wrote: > > > I'm looking for a stream cipher in the kernel that is fairly secure. > > > Does it > > > exist? Alternatively I'm looking for a block cipher that does CFB > >

Re: restarting DHCP not described in manpages

2006-07-09 Thread Matthew R. Dempsky
On Sun, Jul 09, 2006 at 09:22:05PM +0200, Paul de Weerd wrote: > Sure, just 'dhclient ${if}'. When 'something' (even another dhclient > process) touches the networking config of a dhclient-configured > interface, dhclient will exit (as not to change the new config later). Not true. I started fiv

Re: restarting DHCP not described in manpages

2006-07-09 Thread Matthew R. Dempsky
(I tried sending a similar email to this one about an hour ago, but it has not turned up yet, while other emails sent since then have appeared on the mailing list. I apologize if this results in redundant mail.) On Sun, Jul 09, 2006 at 09:22:05PM +0200, Paul de Weerd wrote: > Sure, just 'dhclie

Re: What (stream) ciphers exist in the kernel?

2006-07-09 Thread Peter Philipp
On Sun, Jul 09, 2006 at 02:53:29PM -0500, Matthew R. Dempsky wrote: > > as they pretty well can encrypt per byte according to applied cryptography > > from > > schneier. > > What about CTR? OpenBSD can do AES-CTR. Oh wow my applied cryptography second edition is getting old. ;) There is no m

Re: USB keyboards / encryption

2006-07-09 Thread Tobias Ulmer
On Sun, Jul 09, 2006 at 09:17:00PM +0200, Peter Philipp wrote: > On Sun, Jul 09, 2006 at 08:22:10PM +0200, Tobias Ulmer wrote: > > Encrypting data from the keyboard is also not a real option, > > because you need a shared secret (or something like hostkeys, how do > > you know that the usb sniffer

Re: Default ghostscript doesn't work in OpenBSD 3.9?

2006-07-09 Thread Andreas Kahari
I can not reproduce this on my current (as of last night) i386 machine. Regards, Andreas On 09/07/06, Karel Kulhavy <[EMAIL PROTECTED]> wrote: Hello Please try with your OpenBSD 3.9 and default ghostscript install this: [EMAIL PROTECTED]:~$ gs /usr/local/share/ghostscript/7.05/examples/alphabe

Re: USB keyboards / encryption

2006-07-09 Thread Peter Philipp
On Sun, Jul 09, 2006 at 10:23:15PM +0200, Joachim Schipper wrote: > Because if it's eventually read by a human, a human that bothered to bug > your keyboard in the first place, it can be easily decoded. Of course. That's not my point of doing this though, as I had tried to explain. Just because

Re: USB keyboards / encryption

2006-07-09 Thread Peter Philipp
On Sun, Jul 09, 2006 at 10:55:47PM +0200, Tobias Ulmer wrote: > Depends on your needs. If want to protect against a casual attacker, it > may just be enough, but it's wasted time if some TLA tries to shut > down your international muslim terrorist attack planing mailinglist server > somewhere in ru

Re: USB keyboards / encryption

2006-07-09 Thread Joachim Schipper
On Sun, Jul 09, 2006 at 11:51:56PM +0200, Peter Philipp wrote: > On Sun, Jul 09, 2006 at 10:55:47PM +0200, Tobias Ulmer wrote: > > Depends on your needs. If want to protect against a casual attacker, it > > may just be enough, but it's wasted time if some TLA tries to shut > > down your internation

Re: USB keyboards / encryption

2006-07-09 Thread Peter Philipp
On Mon, Jul 10, 2006 at 12:11:25AM +0200, Joachim Schipper wrote: > Did you find an actual consumer-grade USB device that blows up if you > enter terrorist words? Al Quaeda is really cool, we're going to bomb > those American pigs - well, this one still works. Must be because it's a > pre-9/11 keyb

Re: What (stream) ciphers exist in the kernel?

2006-07-09 Thread Matthew R. Dempsky
On Sun, Jul 09, 2006 at 10:47:54PM +0200, Peter Philipp wrote: > I'm talking about this: > > for (i = 0; i < AESCTR_BLOCKSIZE; i++) > data[i] ^= keystream[i]; Hm, I'm not familiar with OpenBSD's crypto layer, but CTR mode should not require padding. Perhaps its a limitat

Re: USB keyboards / encryption

2006-07-09 Thread Tobias Ulmer
On Sun, Jul 09, 2006 at 11:51:56PM +0200, Peter Philipp wrote: > On Sun, Jul 09, 2006 at 10:55:47PM +0200, Tobias Ulmer wrote: > > Depends on your needs. If want to protect against a casual attacker, it > > may just be enough, but it's wasted time if some TLA tries to shut > > down your internation

kerberos debugging troubles

2006-07-09 Thread Jacob Yocom-Piatt
kerberos is setup to authenticate ssh sessions on my local network. it works fine to and from all the machines on the network except for the KDC itself. kerberos auth fails when sshing to or from the KDC. the logs of these failures from /var/heimdal/kdc.log, /var/log/authlog and ssh -vvv outputs ar

Re: USB keyboards / encryption

2006-07-09 Thread Eric Furman
This has to be one of the most retarded threads I've read on this mailing list. And there has been a lot of them. -- Eric Furman [EMAIL PROTECTED]

Re: USB keyboards / encryption

2006-07-09 Thread Tony Abernethy
Peter Philipp wrote: [snip] > > But little change by little change will isolate > insecurities until a system is secure, right? (didn't somene coin the > phrase "security is a process"?) Little change by little change will isolate little insecurities. Little change by little change will e

Re: the best way to view pflogs ?

2006-07-09 Thread Joseph Le-Phan
Sorry, I don't fully understand your question. Are you simply trying to view logged packets (by pf)? If so, tcpdump -n -e -ttt -r /var/log/pflog Thus spake DonKoyote ([EMAIL PROTECTED]): > Hi > > Thanx for answers ... > > Another Q is ... What is the best way to view pflogs ? > > > Thanx >

Re: Bridge wireless and wired networks.

2006-07-09 Thread Jan Johansson
kami petersen <[EMAIL PROTECTED]> wrote: > Jan Johansson skrev: > >kami petersen <[EMAIL PROTECTED]> wrote: > >>well, it should work. however, you should set an address on either of > >>the interfaces that constitutes the bridge, not the bridge itself. > >> > >>but you don't say exactly where you

Re: USB keyboards / encryption

2006-07-09 Thread Darrin Chandler
On Sun, Jul 09, 2006 at 09:17:09PM -0500, Tony Abernethy wrote: > Peter Philipp wrote: > > [snip] > > > > But little change by little change will isolate > > insecurities until a system is secure, right? (didn't somene coin the > > phrase "security is a process"?) > > Little change by lit