Re: [SLUG] Penetration Test

2009-11-01 Thread Daniel Pittman
Rick Phillips r...@greyheads.net writes: Just of out of interest, what kind of server are you talking about ? Briefly, we have been running this server for 5 years principally to serve learning materials to students. Initially, the server was sanctioned by the Education Department and it

Re: [SLUG] Penetration Test

2009-11-01 Thread Daniel Pittman
db db.pub.m...@gmail.com writes: G'day DB. Daniel um ... ok. I don't see how a security audit is any different to any other(audit). Audits should be done. Absolutely. We are in complete agreement here. Now I just have one last question, to help me understand what you are trying to say: what

Re: [SLUG] Penetration Test

2009-11-01 Thread Rick Phillips
Daniel, First, let me say that I am sorry you didn't appreciate the response, and the implied criticism of your plan. It was absolutely not my intention to offend, but rather to continue to question my own assumptions in the face of someone who disagreed with me. I regret that my

Re: [SLUG] Penetration Test

2009-11-01 Thread Jake Anderson
The department is employing a white hat to do a penetration test at the end of this month and we thought it would be better to be fore armed. This LMS is very important to us and has significantly helped our student base lift their average results to be near the top for the state. They have

Re: LTS worth anything? (was: Re: [SLUG] Announcement roundup from October meeting)

2009-11-01 Thread Amos Shapira
2009/11/1 Robert Collins robe...@robertcollins.net: https://wiki.ubuntu.com/LTS To get the LTS updated a 'stable release update' is needed - SRU: https://wiki.ubuntu.com/StableReleaseUpdates. When an individual fix is backported its called an SRU - see below for 'backports', which is a whole

Re: [SLUG] Penetration Test

2009-11-01 Thread Tony Sceats
IMHO something like this is best done by hiring professionals, as some random person may or may not have the experience and skills they may or may not suggest, giving you a false sense of security in their findings. Anyway, having said that, having a poke around yourself is always fun and

Re: [SLUG] Penetration Test

2009-11-01 Thread Daniel Pittman
Tony Sceats tony.sce...@gmail.com writes: IMHO something like this is best done by hiring professionals, as some random person may or may not have the experience and skills they may or may not suggest, giving you a false sense of security in their findings. Rick enquired about professionals.

Re: [SLUG] Penetration Test

2009-11-01 Thread Daniel Pittman
Rick Phillips r...@greyheads.net writes: First, let me say that I am sorry you didn't appreciate the response, and the implied criticism of your plan. It was absolutely not my intention to offend, but rather to continue to question my own assumptions in the face of someone who disagreed with

Re: LTS worth anything? (was: Re: [SLUG] Announcement roundup from October meeting)

2009-11-01 Thread Del
Amos Shapira wrote: The goal of trying to stick with LTS was to get a stable system - one where Skype will work with my webcam, mic and speaker, Firefox won't blow up on me and play Flash. I'm now with 9.04 which took a while to get Speaker working and mic doesn't work, I don't know whether

Re: [SLUG] Announcement roundup from October meeting

2009-11-01 Thread Del
James Polley wrote: - Or, you could buy it on a USB stick from the everythinglinux store which has just reopened. Online at http://www.elx.com.au/, or visit the store at 102/38 Oxley Street St Leonards. Just to correct that, the shop is at shop 3, 41 Oxley St Crows Nest. The above address

Re: LTS worth anything? (was: Re: [SLUG] Announcement roundup from October meeting)

2009-11-01 Thread Robert Collins
On Mon, 2009-11-02 at 11:14 +1100, Del wrote: One of the things that the stable distros tend to miss out on is having the latest updated device drivers. What it sounds like you're doing is trying to get stuff working that while not bleeding-edge, probably does require updated kernels

Re: LTS worth anything? (was: Re: [SLUG] Announcement roundup from October meeting)

2009-11-01 Thread Adrian Chadd
On Mon, Nov 02, 2009, Robert Collins wrote: Ubuntu LTS gets 6 monthly driver-only updates :). Which can be a good and bad thing. Adrian, who has been bitten once or twice in the past from the driver updates to LTS. Stupid SCSI firmware. -- SLUG - Sydney Linux User's Group Mailing List -

[SLUG] Pulse Audio

2009-11-01 Thread Heracles
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 After upgrading to Ubuntu 9.10 I no longer have sound. lspci recognises my Creative Labs Live card but I get nothing out of it. Last time this happened I fixed it by the complete removal of Pulse Audio. Is there a simple fix or do I just have to

Re: [SLUG] Pulse Audio

2009-11-01 Thread Robert Collins
On Mon, 2009-11-02 at 12:36 +1100, Heracles wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 After upgrading to Ubuntu 9.10 I no longer have sound. lspci recognises my Creative Labs Live card but I get nothing out of it. Last time this happened I fixed it by the complete removal of

Re: [SLUG] Pulse Audio

2009-11-01 Thread Daniel Pittman
Heracles herac...@iprimus.com.au writes: After upgrading to Ubuntu 9.10 I no longer have sound. lspci recognises my Creative Labs Live card but I get nothing out of it. Last time this happened I fixed it by the complete removal of Pulse Audio. What was PulseAudio doing that caused you to

Re: [SLUG] Pulse Audio

2009-11-01 Thread Heracles
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks Robert, It was a little more complicated than that but you gave me the clues. I have several different distros on my system and the grub I needed was in a different filesystem. All fixed now I think. Haven't tried sound in utube as yet but

[SLUG] vmware server / debian kernel (testing)

2009-11-01 Thread Daniel Bush
Anyone successfully compiled or seen any docs on compiling vmware server 2.0.1 or 2.0.2 kernel modules for a stock standard debian kernel 2.6.30-2-686 ? Regards, -- Daniel Bush -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs:

Re: [SLUG] Pulse Audio

2009-11-01 Thread Heracles
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sorry Daniel if I offended your favourite program. It is just that I have had to re-setup my sound several times now with each ubuntu upgrade and it has almost always been a problem that could be lain at the feet of PulseAudio. I have been able to

Re: [SLUG] Pulse Audio

2009-11-01 Thread Daniel Pittman
Heracles herac...@iprimus.com.au writes: G'day Heracles. Sorry Daniel if I offended your favourite program. If I was particularly fond of PulseAudio I wouldn't have described it in the terms I chose at the end. Just sayin' It is just that I have had to re-setup my sound several times now

Re: LTS worth anything? (was: Re: [SLUG] Announcement roundup from October meeting)

2009-11-01 Thread Amos Shapira
2009/11/2 Del d...@babel.com.au One of the things that the stable distros tend to miss out on is having the latest updated device drivers.  What it sounds like you're doing is trying to get stuff working that while not bleeding-edge, probably does require updated kernels and recent device

[SLUG] advice on security compliance

2009-11-01 Thread Daniel Bush
I was following Rick's recent post about penetration testing with some interest. I'm looking at complying with anz e-gate for e-commerce transactions. ANZ has this declaration form for internet sites that you have to sign. One of the tick boxes says Do you operate a firewall that is regularly

Re: [SLUG] Pulse Audio

2009-11-01 Thread Daniel Bush
2009/11/2 Daniel Pittman dan...@rimspace.net Heracles herac...@iprimus.com.au writes: G'day Heracles. Sorry Daniel if I offended your favourite program. If I was particularly fond of PulseAudio I wouldn't have described it in the terms I chose at the end. Just sayin' It is just that

Re: [SLUG] advice on security compliance

2009-11-01 Thread Robert Collins
On Mon, 2009-11-02 at 16:28 +1100, Daniel Bush wrote: I was following Rick's recent post about penetration testing with some interest. I'm looking at complying with anz e-gate for e-commerce transactions. ANZ has this declaration form for internet sites that you have to sign. One of the

[SLUG] Help -- I cannot boot into Ubuntu..

2009-11-01 Thread Scott Waller
Hi Fellow Slugger, Sorry for kinda dissapearing this year, just had some stuff on, and I am currently in the US. I really need someone expert help. I have a new setup on a laptop. It's a very nice Dell Precision M4400. I have been running Ubuntu 9.04 for 3 weeks now with no problems.

Re: [SLUG] advice on security compliance

2009-11-01 Thread Daniel Bush
Rob, 2009/11/2 Robert Collins robe...@robertcollins.net On Mon, 2009-11-02 at 16:28 +1100, Daniel Bush wrote: I was following Rick's recent post about penetration testing with some interest. I'm looking at complying with anz e-gate for e-commerce transactions. ANZ has this declaration