Re: creative ssh-agent uses

2006-12-09 Thread Rudi Cilibrasi
Dear Ratiu,

I am not sure I understand your situation, but maybe this can help?

When creating an ssh-key using ssh-keygen, it prompts you for a
passphrase.  It isn't so obvious, but you can simply hit return at that
point to have "no passphrase".  This means that the resulting key
is unencrypted on your hard drive, so you have to rely
on unix (chmod) permissions to protect it from being
copied by unauthorized people.  As long as you just press enter when
asked for a passphrase from ssh-keygen, this will ensure that using
that key with ssh-agent and ssh-add will not prompt you for
a passphrase.  This is one way to use ssh-agent with a script
noninteractively.  Just eval `ssh-agent`, ssh-add the unencrypted key,
then do the ssh commands all without a passphrase prompt.

I hope this information is useful to you.  Best regards,

Rudi
--
Give AI a try with Data Compression using http://complearn.org/ today!
Ratiu Petru wrote:
> On Thu, 07 Dec 2006, Stefan Denker wrote:
>
> > On Mon, Dec 04, 2006 at 09:25:38PM +0200, Ratiu Petru wrote:
> > > What I'm thinking is to provide a static string as a challenge and use the
> > > response as the cryptodevice password, but I can't find a program that
> > > allows me to manipulate the socket this way. This mechanism might also be
> > > used for other purposes, stacking public key authentication in a "normal"
> > > password-based login.
> >
> > I do not think this is a good idea. If the challenge is static, the
> > response will be, too. Then you might be vulnerable to replay-Attacks.
> >
> I perfectly understand. However, I _need_ a static password for cryptsetup,
> i just wanted to make it somehow dependent of the agent to skip prompting
> for it in the backup script. I am aware of the fact that someone who knows
> the password can mount the cryptsetup directly, I can't improve that.
>
> I found somewhere a script that was supposed to use ssh-agent like I wanted
> to (encrypt stuff through it), but all it did was to crash my agent :)
>
> The gpg-agent is a nice idea too, but we already have an existing ssh
> infrastructure and not all guys involved have gpg keys, so I'm trying to
> avoid that if possible.
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re:

2006-12-09 Thread wilson
Por favor enviar e-mails para [EMAIL PROTECTED]
Please send mail to [EMAIL PROTECTED]




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Alexander Jäger is out of the office.

2006-12-09 Thread Alexander . Jaeger

Ich werde abwesend sein
Startdatum: 09.12.2006.
Rückkehrdatum: 15.12.2006.


Sehr geehrte Damen und Herren,
ich bin vom 08.12.2006 bis einschließlich 15.12.2006 nicht im Büro
erreichbar.
Ihre E-Mails werde ich nach meiner Rückkehr bearbeiten.
In dringenden Fällen wenden Sie sich bitte an [EMAIL PROTECTED]
Ganz dringende Fälle können mich mobil erreichen.



Re: Bug#401969: please build using hunspell

2006-12-09 Thread Mike Hommey
On Fri, Dec 08, 2006 at 10:58:11PM +0100, Rene Engelhard <[EMAIL PROTECTED]> 
wrote:
> Mike Hommey wrote:
> > On Thu, Dec 07, 2006 at 11:26:34AM +0100, Rene Engelhard <[EMAIL 
> > PROTECTED]> wrote:
> > > There's no big difference in using hunspell and myspell, except that 
> > > hunspell dictionaries
> > > then will also work. And you show that hunspell is used so the security 
> > > team knows
> > > that mozilla needs to be rebuilt (which probably won't happen, no one 
> > > ever found a security bug
> > > in either hunspell or myspell). And in any case, there's already enchant 
> > > and openoffice.org building
> > > with static hunspell (openoffice.org does build far longer than ice*)
> > 
> > How does the security team feel about having to rebuild iceape,
> > iceweasel, icedove (you forgot to file a bug on icedove), OOo and enchant
> 
> No, that would have been my next target (the source already is on my
> disk)
> 
> > if there happens to be a security bug in hunspell ?
> 
> I am sure there won't be, but if it happens it happens. There's some
> static libs in Debian where this is the case, afaik. Of course. not having to
> do that is better, but...
> 
> > How do buildds feel to have to rebuild iceape, iceweasel, icedove, OOo
> > and enchant for every hunspell upload ?
> 
> You don't have to.

So when you fix bugs in hunspell, you want to leave the bugs in the
programs that are statically linked to it. How great.

Mike


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Bug#401969: please build using hunspell

2006-12-09 Thread Davide Prina

Rene Engelhard wrote:
> MySpell is obsolete.
> Please build against Hunspell, which is an improved version of MySpell
> retaining full backwards compatibility. That also would make the usage
> of hunspell-de-* in iceweasel possible.

probably not so full backwards compatibility.

> [ The Problem is that hunspell-de-* is an improved version of the
> MySpell dict for hunspell and it's working in OOo since it uses
> Hunspell

also Italian dictionary in Debian is a very old release ... so obsolete 
than a lot of people ask me to correct a lot of errors, errors that are 
already corrected in the last version.
I think that Debian is the last GNU/Linux distro that have a so old 
Itailian dictionary version.


The last Italian dictionary under GPL license can be downloaded from 
here (2.3 beta 23/07/2006):

http://linguistico.sf.net/wiki/doku.php?id=dizionario_italiano

I have reported a whishlist for that #329971 at Date: Sat, 24 Sep 2005 
23:04:33 +0200


For Italian language there is also a surname dictionary, also it under 
GPL, that can be found here:

http://linguistico.sf.net/wiki/doku.php?id=dizionario_cognomi_italiani

I don't see the hurry to have hunspell used on all programs ... if it is 
so hard or impossible to have recent dictionaries in Debian that are 
other languages than English or maintainer mother language.


Mike Hommey wrote:

On Fri, Dec 08, 2006 at 10:58:11PM +0100, Rene Engelhard wrote:

Mike Hommey wrote:



if there happens to be a security bug in hunspell ?



I am sure there won't be, but if it happens it happens. There's some
static libs in Debian where this is the case, afaik. Of course. not having to
do that is better, but...


How do buildds feel to have to rebuild iceape, iceweasel, icedove, OOo
and enchant for every hunspell upload ?

You don't have to.


So when you fix bugs in hunspell, you want to leave the bugs in the
programs that are statically linked to it. How great.


I have reported some hunspell bugs to László (I don't know if some can 
be security bugs). I don't know if they are already corrected (László 
have told me: "I hope, I will solve the problem this month for OOo 2.1").
For example hunspell can generate more strings or more time the same 
string than myspell starting from the same dictionary.


For hunspell there isn't a program that expand all the dictionary, so it 
is very hard to know if it work as you expected.


Ciao
Davide



Re: creative ssh-agent uses

2006-12-09 Thread Brett Parker
On Sat, Dec 09, 2006 at 12:44:54AM -0800, Rudi Cilibrasi wrote:
> Dear Ratiu,
> 
> I am not sure I understand your situation, but maybe this can help?
> 
> When creating an ssh-key using ssh-keygen, it prompts you for a
> passphrase.  It isn't so obvious, but you can simply hit return at that
> point to have "no passphrase".  This means that the resulting key
> is unencrypted on your hard drive, so you have to rely
> on unix (chmod) permissions to protect it from being
> copied by unauthorized people.  As long as you just press enter when
> asked for a passphrase from ssh-keygen, this will ensure that using
> that key with ssh-agent and ssh-add will not prompt you for
> a passphrase.  This is one way to use ssh-agent with a script
> noninteractively.  Just eval `ssh-agent`, ssh-add the unencrypted key,
> then do the ssh commands all without a passphrase prompt.

Errr, minor point here... but if you haven't got a passphrase on the ssh
key, then there is no reason to use ssh-agent or ssh-add, they're
non-ops for passphraseless keys.

Thanks,
-- 
Brett Parker


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Bug#401969: please build using hunspell

2006-12-09 Thread Rene Engelhard
Hi,

Mike Hommey wrote:
> On Fri, Dec 08, 2006 at 10:58:11PM +0100, Rene Engelhard <[EMAIL PROTECTED]> 
> wrote:
> > Mike Hommey wrote:
> > > On Thu, Dec 07, 2006 at 11:26:34AM +0100, Rene Engelhard <[EMAIL 
> > > PROTECTED]> wrote:
> > > > There's no big difference in using hunspell and myspell, except that 
> > > > hunspell dictionaries
> > > > then will also work. And you show that hunspell is used so the security 
> > > > team knows
> > > > that mozilla needs to be rebuilt (which probably won't happen, no one 
> > > > ever found a security bug
> > > > in either hunspell or myspell). And in any case, there's already 
> > > > enchant and openoffice.org building
> > > > with static hunspell (openoffice.org does build far longer than ice*)
> > > 
> > > How does the security team feel about having to rebuild iceape,
> > > iceweasel, icedove (you forgot to file a bug on icedove), OOo and enchant
> > 
> > No, that would have been my next target (the source already is on my
> > disk)
> > 
> > > if there happens to be a security bug in hunspell ?
> > 
> > I am sure there won't be, but if it happens it happens. There's some
> > static libs in Debian where this is the case, afaik. Of course. not having 
> > to
> > do that is better, but...
> > 
> > > How do buildds feel to have to rebuild iceape, iceweasel, icedove, OOo
> > > and enchant for every hunspell upload ?
> > 
> > You don't have to.
> 
> So when you fix bugs in hunspell, you want to leave the bugs in the
> programs that are statically linked to it. How great.

Bullshit. You are intrepreting stuff everytime I didn't say.
Not every fix in the package/packaging needs a rebuild, neither does a
fix only affecting the hunspell program and not the library.

In the library case, you're right.

Gr��e/Regards,

Ren�
-- 
 .''`.  Ren� Engelhard -- Debian GNU/Linux Developer
 : :' : http://www.debian.org | http://people.debian.org/~rene/
 `. `'  [EMAIL PROTECTED] | GnuPG-Key ID: 248AEB73
   `-   Fingerprint: 41FA F208 28D4 7CA5 19BB  7AD9 F859 90B0 248A EB73



signature.asc
Description: Digital signature


Re: Bug#401969: please build using hunspell

2006-12-09 Thread Rene Engelhard
Hi,

Davide Prina wrote:
> > MySpell is obsolete.
> > Please build against Hunspell, which is an improved version of MySpell
> > retaining full backwards compatibility. That also would make the usage
> > of hunspell-de-* in iceweasel possible.
>
> probably not so full backwards compatibility.

Proof?

> also Italian dictionary in Debian is a very old release ... so obsolete 
> than a lot of people ask me to correct a lot of errors, errors that are 
> already corrected in the last version.
> I think that Debian is the last GNU/Linux distro that have a so old 
> Itailian dictionary version.
> 
> The last Italian dictionary under GPL license can be downloaded from 
> here (2.3 beta 23/07/2006):
> http://linguistico.sf.net/wiki/doku.php?id=dizionario_italiano
> 
> I have reported a whishlist for that #329971 at Date: Sat, 24 Sep 2005 
> 23:04:33 +0200

Irrelevant for this discussion. I can't add GPLed stuff to the
package because it then  would be GPL. The other dictionaries in the OOo
source are LGPL, though.

You can package it externally or make it build from the ispell one, but
I will *not* include it in -dictionaries due it's being GPL.

I told that in the bug report that it's G`PL and can't add it.
If you don't read it/understand it and then complain, well...

> For Italian language there is also a surname dictionary, also it under 
> GPL, that can be found here:
> http://linguistico.sf.net/wiki/doku.php?id=dizionario_cognomi_italiani

GPL, too. See above.

> I don't see the hurry to have hunspell used on all programs ... if it is 

I do. There's hunspell dictionaries in Debian which have to conflict
against all mozillas...

> I have reported some hunspell bugs to Láló don't know if some can
> be security bugs). I don't know if they are already corrected (Lálóve
> told me: "I hope, I will solve the problem this month for OOo 2.1").

Doubt that, there's no new hunspell release and neither does OOo 2.1
correct a new hunspell AFAIS (or he fixed the OOo h unspell copy and
forgot the normal one..)

No one claimed hunsppell hasn't got bugs but it's better than myspell
overall.
And it won't block usage of hunspell dictionaries in OOo.

Gr??e/Regards,

Ren?
-- 
 .''`.  Ren? Engelhard -- Debian GNU/Linux Developer
 : :' : http://www.debian.org | http://people.debian.org/~rene/
 `. `'  [EMAIL PROTECTED] | GnuPG-Key ID: 248AEB73
   `-   Fingerprint: 41FA F208 28D4 7CA5 19BB  7AD9 F859 90B0 248A EB73



signature.asc
Description: Digital signature


Re: Bug#401969: please build using hunspell

2006-12-09 Thread Mike Hommey
On Sat, Dec 09, 2006 at 01:13:27PM +0100, Rene Engelhard <[EMAIL PROTECTED]> 
wrote:
> I do. There's hunspell dictionaries in Debian which have to conflict
> against all mozillas...

I fail to see why. Are the hunspell dictionaries in
/usr/share/myspell/dicts or what ?

Mike


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Bug#401969: please build using hunspell

2006-12-09 Thread Davide Prina

Rene Engelhard wrote:


Davide Prina wrote:

MySpell is obsolete.
Please build against Hunspell, which is an improved version of MySpell
retaining full backwards compatibility. That also would make the usage
of hunspell-de-* in iceweasel possible.



probably not so full backwards compatibility.


Proof?


for example this:

---8<--FILE a.aff-8<-
SET ISO8859-15
TRY aioertnsclmdpgubzfvhàq'ACMSkBGPLxEyRTVòIODNwFéùèìjUZKHWJYQX

SFX B Y 1
SFX B ere ono ere # p

SFX p Y 2
SFX p o i o
SFX p o e o
---8<-8<-

---8<--FILE a.dic-8<-
1
decidere/B
---8<-8<-

---8<--FILE a.txt-8<-
decidere
decidono
decidoni
decidone
---8<-8<-

note that "decidere/B" must generate only "decidono" (with myspell), but 
hunspell generate also "decidoni" and "decidone" that are wrong Italian 
words.


I have see that I can gain the same result with

SFX B ere ono ere anystring p

also if I write

SFX B ere ono ere anystring abcdef

than it is the same that write
decidono/abcdef

also Italian dictionary in Debian is a very old release ... so obsolete 
than a lot of people ask me to correct a lot of errors, errors that are 
already corrected in the last version.
I think that Debian is the last GNU/Linux distro that have a so old 
Itailian dictionary version.


The last Italian dictionary under GPL license can be downloaded from 
here (2.3 beta 23/07/2006):

http://linguistico.sf.net/wiki/doku.php?id=dizionario_italiano

I have reported a whishlist for that #329971 at Date: Sat, 24 Sep 2005 
23:04:33 +0200


Irrelevant for this discussion. I can't add GPLed stuff to the
package because it then  would be GPL. The other dictionaries in the OOo
source are LGPL, though.


I don't have ask to add it to the OOo source, but to the myspell-it package.


You can package it externally or make it build from the ispell one, but
I will *not* include it in -dictionaries due it's being GPL.


If I don't have mistake I intend -dictionaries as a Debian package

interesting ... so you can neither include the German dictionary ... it 
is under GPL license and non-GPL for package that "support the OASIS 
Open Document Format for Office Applications and whose PRIMARY format 
for saving documents is the Open Document Format"
I don't think icedove, iceweasel, ... respect this exception, so for all 
these the German dictionary is only GPL 2.0 or upper


I think theare are lot of other dictionaries/thesaurus that have the 
same problem.



I told that in the bug report that it's G`PL and can't add it.
If you don't read it/understand it and then complain, well...


where? when?

querybts tell me:
---8<---8<---8<---8<---8<
From: Rene Engelhard
Subject: Re: Bug#329971: New Italian dictionary version available
Date: Sat, 24 Sep 2005 23:45:45 +0200

[...]

Aha. Hmm. And OOo 1.9.x/2.0 also contains only 2.1. Will look. When
1.9.x enters sid myspell-it will become 2.1 anyway and I'll look about
updating the copy with 2.2.

[...]

Grüße/Regards,

Rene
---8<---8<---8<---8<---8<

note that the 2.2 version is GPL only

Also the Italian thesaurus is only GPL and there is a recent version in 
Debian ... why?



I have reported some hunspell bugs to Láló don't know if some can
be security bugs). I don't know if they are already corrected (Lálóve
told me: "I hope, I will solve the problem this month for OOo 2.1").


Doubt that, there's no new hunspell release and neither does OOo 2.1
correct a new hunspell AFAIS (or he fixed the OOo h unspell copy and
forgot the normal one..)


you can try the above example to check it

Ciao
Davide

--
Dizionari: http://linguistico.sourceforge.net/wiki
Client di posta: http://www.mozilla.org/products/thunderbird
GNU/Linux User: 302090: http://counter.li.org
Non autorizzo la memorizzazione del mio indirizzo su outlook



Re:

2006-12-09 Thread wilson
Por favor enviar e-mails para [EMAIL PROTECTED]
Please send mail to [EMAIL PROTECTED]




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re:

2006-12-09 Thread Santiago José López Borrazás
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

El 09/12/06 15:53, [EMAIL PROTECTED] escribió:
> Por favor enviar e-mails para [EMAIL PROTECTED]
> Please send mail to [EMAIL PROTECTED]

Wilson:

For desuscribirte, you should send to
[EMAIL PROTECTED] with a blank message, and then,
when receive the message of confirmation, should respond him, so that you
of of drop automatically.

With sincerity.

- --
Slds de Santiago José López Borrazás. Admin de hackindex.com/.es
Conocimientos avanzados en seguridad informática.
Conocimientos avanzados en redes.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
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=GoDv
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re:

2006-12-09 Thread Santiago José López Borrazás
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

El 09/12/06 16:16, Santiago José López Borrazás escribió:
> El 09/12/06 15:53, [EMAIL PROTECTED] escribió:
>> Por favor enviar e-mails para [EMAIL PROTECTED]
>> Please send mail to [EMAIL PROTECTED]
> 
> Wilson:
> 
> desuscribirte,

Unsuscriber.

Check traslation... :-)

- --
Slds de Santiago José López Borrazás. Admin de hackindex.com/.es
Conocimientos avanzados en seguridad informática.
Conocimientos avanzados en redes.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
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=D2im
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Bug#401969: please build using hunspell

2006-12-09 Thread Steve Kemp
On Fri, Dec 08, 2006 at 10:32:50PM +0100, Mike Hommey wrote:

> How does the security team feel about having to rebuild iceape,
> iceweasel, icedove (you forgot to file a bug on icedove), OOo and enchant
> if there happens to be a security bug in hunspell ?

  In general having multiple packages needing a rebuild for a
 single security fix is a problem, and not something we'd like
 to have to deal with.

  (For a specific example think of the pdf/gs updates we had to
 make earlier in the year/last year.  Lots of different programs
 with very similar code which didn't always get spotted at the
 same time.)

  A more recent example would be the links + elinks updates.  Links
 was updated first then we updated elinks afterwards when we learnt
 there was shared code ..  (Obvious in retrospect, but if there are
 a lot of packages which would require a rebuild keeping track of
 all of them can be difficult; especially if we don't know about it
 in advance.)

Steve
-- 


signature.asc
Description: Digital signature


Re: [SECURITY] [DSA 1232-1] New clamav packages fix denial of service

2006-12-09 Thread Milan P. Stanic
On Sat, Dec 09, 2006 at 03:43:33PM +0100, Moritz Muehlenhoff wrote:
> Package: clamav
> Vulnerability  : missing sanity checks
> Problem-Type   : remote
> Debian-specific: no
> CVE ID : CVE-2006-5874
[...]
> For the upcoming stable distribution (etch) this problem has been
> fixed in version 0.86-1.
 ^^ 
> For the unstable distribution (sid) this problem has been fixed in
> version 0.86-1.
^^
Clamav in testing and unstable is version 0.88.6


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: creative ssh-agent uses

2006-12-09 Thread Ratiu Petru
On Sat, 09 Dec 2006, Rudi Cilibrasi wrote:

> Dear Ratiu,
> 
> I am not sure I understand your situation, but maybe this can help?
> 
> When creating an ssh-key using ssh-keygen, it prompts you for a
> passphrase.  It isn't so obvious, but you can simply hit return at that
> point to have "no passphrase".  This means that the resulting key

This is EXACTLY what I want to avoid. I use passphrase-less keys for
some backups already, so I know the procedure. However, I'm trying to
benefit from having the ssh session signed with my personal key, and somehow
use that when mounting the dm-crypt/LUKS device where I backup my files.

There are other people besides me that want to backup their laptops
(containing personal data) to the same storage server, and we decided we
didn't trust each other to the level where we would grant all our data to
whoever knows the passwords. But we're lazy so we want to automate this :)

I know there are other acceptable solutions (having the password written in
a local file, or typing it every time), but they're not as nice. However,
I'll go with one of them until I manage to put together a program that does
what I want.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: [SECURITY] [DSA 1232-1] New clamav packages fix denial of service

2006-12-09 Thread Stephen Gran
This one time, at band camp, Milan P. Stanic said:
> On Sat, Dec 09, 2006 at 03:43:33PM +0100, Moritz Muehlenhoff wrote:
> > Package: clamav
> > Vulnerability  : missing sanity checks
> > Problem-Type   : remote
> > Debian-specific: no
> > CVE ID : CVE-2006-5874
> [...]
> > For the upcoming stable distribution (etch) this problem has been
> > fixed in version 0.86-1.
>  ^^ 
> > For the unstable distribution (sid) this problem has been fixed in
> > version 0.86-1.
> ^^
> Clamav in testing and unstable is version 0.88.6

Yes, and the problem was fixed in version 0.86.  That was the point of
that statement.
-- 
 -
|   ,''`.Stephen Gran |
|  : :' :[EMAIL PROTECTED] |
|  `. `'Debian user, admin, and developer |
|`- http://www.debian.org |
 -


signature.asc
Description: Digital signature