Dumb question

2001-02-25 Thread Matthew Sherborne
What's chroot ?

Dumb question

2001-02-25 Thread Matthew Sherborne
What's chroot ? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Benign crackers?

2001-02-21 Thread Matthew Sherborne
Daniel Stark wrote: > You wouldn't actually imply that hackers are out their providing a > welcome service do you? I can see if you asked for your network to > be stress tested, but to go as far as saying they provide a welcome > service? Come on! Yeah, they might have found a security w

Re: Benign crackers?

2001-02-21 Thread Matthew Sherborne
Daniel Stark wrote: You wouldn't actually imply that hackers are out their providing a welcome service do you? I can see if you asked for your network to be stress tested, but to go as far as saying they provide a welcome service? Come on! Yeah, they might have found a security whole, bu

Anti Virus for Debian

2001-02-19 Thread Matthew Sherborne
Are there any gpl or similar anti-virus programs for linux ? Any reccomendations ? GBY

Re: Debian or Redhat 7???

2001-02-19 Thread Matthew Sherborne
It may get too heavy to not mirror the security update packages. Why don't we put signature verification into apt and dpkg and mirror everything ? And perhaps have a tool that checks a bunch of known mirrors for discrepencies in the keyring packages ? And have a single URL, location aware,

Anti Virus for Debian

2001-02-19 Thread Matthew Sherborne
Are there any gpl or similar anti-virus programs for linux ? Any reccomendations ? GBY -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Debian or Redhat 7???

2001-02-19 Thread Matthew Sherborne
It may get too heavy to not mirror the security update packages. Why don't we put signature verification into apt and dpkg and mirror everything ? And perhaps have a tool that checks a bunch of known mirrors for discrepencies in the keyring packages ? And have a single URL, location aware, lo

Re: Debian or Linux 7???

2001-02-19 Thread Matthew Sherborne
Steve Rudd wrote: Hi Steve, It's not just the kernel that can get hacked. Is it Linux 7 or Redhat 7 ? (I'm pretty sure it's Redhat 7). Anyway, I'm pretty new to Debian and Linux so anyone please feel free to correct me. An example of the different methodologies between Redhat and Debian: t

Re: Debian or Linux 7???

2001-02-19 Thread Matthew Sherborne
Steve Rudd wrote: Hi Steve, It's not just the kernel that can get hacked. Is it Linux 7 or Redhat 7 ? (I'm pretty sure it's Redhat 7). Anyway, I'm pretty new to Debian and Linux so anyone please feel free to correct me. An example of the different methodologies between Redhat and Debian: the

Re: sources.list

2001-02-08 Thread Matthew Sherborne
I ran apt-setup and it automatically added my local mirrors. I'm not sure if it wipes your previous sources.list though... GBY

Re: sources.list

2001-02-08 Thread Matthew Sherborne
I ran apt-setup and it automatically added my local mirrors. I'm not sure if it wipes your previous sources.list though... GBY -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

insecure temporary file creation

2001-02-06 Thread Matthew Sherborne
I just wanted to bring this to that attention of those who care... Because there were quite a few insecure temp file creation reports a while ago, perhaps some of us should use this tool to find more ASAP. It was in the fresh meat mailing list: ---

Re: The Next Yahoo

2001-02-06 Thread Matthew Sherborne
Who is the list maintainer ? GBY

insecure temporary file creation

2001-02-06 Thread Matthew Sherborne
I just wanted to bring this to that attention of those who care... Because there were quite a few insecure temp file creation reports a while ago, perhaps some of us should use this tool to find more ASAP. It was in the fresh meat mailing list: --

Re: The Next Yahoo

2001-02-06 Thread Matthew Sherborne
Who is the list maintainer ? GBY -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: mirroring security.debian.org?

2001-02-04 Thread Matthew Sherborne
What about having a nightly email out of updates (with GPG) for those that really need them and charging the subscribers (except contributors)? I would imagine corporate sites subscribing. That way there'll be more bandwidth for the developers, and the income can be used for the Debian project.

Re: ISPs offering ssl-encrypted e-mail?

2001-02-04 Thread Matthew Sherborne
> I think that has a lot to do with the fact that they don't explicitly say > to run something else, or give a URI for a different mail client. A news > story that said, "... your email is insecure ... run this to make it better > http://debian.org/ :)", might get some people using non-outlook, e

Re: mirroring security.debian.org?

2001-02-04 Thread Matthew Sherborne
What about having a nightly email out of updates (with GPG) for those that really need them and charging the subscribers (except contributors)? I would imagine corporate sites subscribing. That way there'll be more bandwidth for the developers, and the income can be used for the Debian project.

Re: ISPs offering ssl-encrypted e-mail?

2001-02-04 Thread Matthew Sherborne
> I think that has a lot to do with the fact that they don't explicitly say > to run something else, or give a URI for a different mail client. A news > story that said, "... your email is insecure ... run this to make it better > http://debian.org/ :)", might get some people using non-outlook,

Re: ISPs offering ssl-encrypted e-mail?

2001-02-04 Thread Matthew Sherborne
> 1) Because the vast majority of users are completely ignorant of security > issues, or simply don't care. It's true, I worked for a company that made an email client, which shipped with a service, the client is for portable use (like hotmail) but not web based. The program runs off the floppy,

Re: ISPs offering ssl-encrypted e-mail?

2001-02-04 Thread Matthew Sherborne
> 1) Because the vast majority of users are completely ignorant of security > issues, or simply don't care. It's true, I worked for a company that made an email client, which shipped with a service, the client is for portable use (like hotmail) but not web based. The program runs off the floppy,

Re: ISPs offering ssl-encrypted e-mail?

2001-02-04 Thread Matthew Sherborne
You gave me a brain wave :) Perhaps email security having four stages: 1 MIME 2 SSL 3 SSL + Encrypted storage on mail server 4 PGP/GPG/S-MIME I don't think anyone offers number 3. I heard there was a PGP like WEB mail service where they generate your private key for you and store it on there se

Re: ISPs offering ssl-encrypted e-mail?

2001-02-04 Thread Matthew Sherborne
You gave me a brain wave :) Perhaps email security having four stages: 1 MIME 2 SSL 3 SSL + Encrypted storage on mail server 4 PGP/GPG/S-MIME I don't think anyone offers number 3. I heard there was a PGP like WEB mail service where they generate your private key for you and store it on there s

Re: checking security logs

2001-01-24 Thread Matthew Sherborne
> Is it not normal for nameservers to "talk" to each other? > Or are nameservers only supposed to "talk" to their listed forwarders? Perhaps your server is listed as a up-stream server for someone elses server ? > What about [A-M].ROOT-SERVERS.NET? DNS servers are only supposed to talk to their

Re: checking security logs

2001-01-24 Thread Matthew Sherborne
> Is it not normal for nameservers to "talk" to each other? > Or are nameservers only supposed to "talk" to their listed forwarders? Perhaps your server is listed as a up-stream server for someone elses server ? > What about [A-M].ROOT-SERVERS.NET? DNS servers are only supposed to talk to their