Re: [vox-tech] Need help securing a simple perl CGI

2002-02-18 Thread Matt Roper
I think someone can still access files outside your WWW directory by requesting a file called .\./somefile. When your script first checks for instances of ".." in the URL, it doesn't find any since the periods are separated by a backslash. The script then removes all backslashes, changing the UR

Re: [vox-tech] ssh remote commands

2002-02-18 Thread nbs
On Mon, Feb 18, 2002 at 06:25:42AM -0800, Charles Polisher wrote: > Can you clear the SUID bit and add the device > to fstab with user-mountable permissions? Maybe > even use a chrooted mount-point? Just thinking out > loud... It doesn't access the rio via a /dev/ device. It accesses it _direc

[vox-tech] module loading at suse kernel initialization and usb woes

2002-02-18 Thread Peter Jay Salzman
hey erik, yeah. not crazy. in fact, i learned quite a bit about usb at the installfest. pretty amazing we had this conversation the day before i got to see it in action. :) the deal is that the device itself isn't recognized as "scsi". the scsi system doesn't register the device, usb does.

Re: [vox-tech] usb woes

2002-02-18 Thread Erik Mullinix
Cool Im not a complete nutcase. Well Not complete. Dangit.. I missed Sundays IF. witch was on calander. oki back to complete nutcase. Hesp ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech

Re: [vox-tech] ssh remote commands

2002-02-18 Thread Charles Polisher
On Mon, Feb 18, 2002 at 03:19:43AM -0800, nbs wrote: > I'm trying to set up remote access to the PC on my LAN which has the > Rio MP3 player connected to it. Unfortunately, the command which talks > to it, "rio", requires root access. > > As an exercise in safety, I'd like to set up password-les

Re: [vox-tech] ssh remote commands

2002-02-18 Thread nbs
On Mon, Feb 18, 2002 at 03:19:43AM -0800, nbs wrote: > > Looking at these issues, and the fact that one will need to be scp'ing > files back and forth to the host with the Rio connected to it ANYWAY, > I'm thinking ssh or ssh/sudo isn't going to be what I need. > > > I guess I should look int

[vox-tech] ssh remote commands

2002-02-18 Thread nbs
I'm trying to set up remote access to the PC on my LAN which has the Rio MP3 player connected to it. Unfortunately, the command which talks to it, "rio", requires root access. As an exercise in safety, I'd like to set up password-less access to the '/usr/bin/rio' command on that system via SSH.

[vox-tech] Two libstdc++'s?

2002-02-18 Thread nbs
It appears that the game Terminus is linked to libstdc++.so.2.8. The newer version I have (3.0.2 I believe) isn't compatible, so making a symb. link won't do. The folks at Vicarious Visions said that the only way to get it to work is to install the older version of libstdc++. I'm using Debian te

Re: [vox-tech] usb woes

2002-02-18 Thread nbs
On Mon, Feb 18, 2002 at 01:57:12AM -0800, nbs wrote: > On Mon, Feb 18, 2002 at 01:45:36AM -0800, Peter Jay Salzman wrote: > > turns out that USB hard drives are accessed via scsi device files. > > Yep. My CF card reader (which connects via USB) appears as /dev/sda1 PS - Interestingly, the CF ca

Re: [vox-tech] usb woes

2002-02-18 Thread nbs
On Mon, Feb 18, 2002 at 01:45:36AM -0800, Peter Jay Salzman wrote: > turns out that USB hard drives are accessed via scsi device files. Yep. My CF card reader (which connects via USB) appears as /dev/sda1 -bill! ___ vox-tech mailing list [EMAIL PROTEC

Re: [vox-tech] usb woes

2002-02-18 Thread Peter Jay Salzman
turns out that USB hard drives are accessed via scsi device files. never knew that. well, supposedly they do. someone had one at the IF today, but we never did get it working... pete begin Erik Mullinix <[EMAIL PROTECTED]> > Im so used to suse. > It allows me to check on devices like windows