Re: Debian Users Can't Download CD's Integrity/Sign or file-Signing PubKey, Over HTTPS/HKPS Encrypted Connection

2016-07-26 Thread Neil McGovern
On Tue, Jul 26, 2016 at 06:35:11PM +0200, Weber wrote: > https://igurublog.wordpress.com/2014/04/08/julian-assange-debian-is-owned-by-the-nsa/ > Debunked, many times. https://twitter.com/wikileaks/status/454261872704094208?lang=en-gb Neil

Re: Debian APT Key Revocation Procedure

2013-11-01 Thread Neil McGovern
On Fri, Nov 01, 2013 at 08:27:03AM -0500, Jordon Bedwell wrote: > On Fri, Nov 1, 2013 at 8:23 AM, Paul Tagliamonte wrote: > > I take issue with this. I find this attitude really crappy. I'd strongly > > invite you to reconsider this tone and belief. > > I invite you to jump back down to earth and

Re: Compromising Debian Repositories

2013-08-23 Thread Neil McGovern
On Thu, Aug 22, 2013 at 06:11:35PM -0400, Paul Henning wrote: > Nope, not gonna do that. He can come right out and deny it himself, so it's > on record. He's had weeks to do it and except for one personal reply has > been tight lipped about it. Furthermore, I'm curious how that sabotage got > by f

Re: [SECURITY] [DSA 1249-1] New xfree86 packages fix privilege escalation

2007-01-16 Thread Neil McGovern
On Tue, Jan 16, 2007 at 12:41:55PM +1300, Dale Allan ([EMAIL PROTECTED]) wrote: > Hi, > > I'm afraid that spam has become such a problem that I have resorted to > using Zerospam, and as a result, a recent email that you sent me has > been quarantined. > I'm afraid that backscatter from this sort

Re: ProFTPD still vulnerable (Sarge)

2006-11-30 Thread Neil McGovern
On Thu, Nov 30, 2006 at 09:05:54PM +, Neil McGovern wrote: > On Thu, Nov 30, 2006 at 12:57:53PM +0100, Stefan Fritsch wrote: > > NOTE: Users of etch/sid should upgrade to 1.3.0-16 *NOW*. > > > > For users of etch, the fixed packages should be going in in two days. If >

Re: ProFTPD still vulnerable (Sarge)

2006-11-30 Thread Neil McGovern
On Thu, Nov 30, 2006 at 12:57:53PM +0100, Stefan Fritsch wrote: > NOTE: Users of etch/sid should upgrade to 1.3.0-16 *NOW*. > For users of etch, the fixed packages should be going in in two days. If it doesn't, I'll issue a DTSA. Neil -- [..] But, up to now, this Friday was the best Debconf day

Re: drupal security fix bronkens drupal website

2006-07-27 Thread Neil McGovern
On Wed, Jul 26, 2006 at 08:31:09PM -0300, Felipe Augusto van de Wiel (faw) wrote: > On 07/26/2006 08:27 PM, Felipe Augusto van de Wiel (faw) wrote: > > [...] > > BTW, it is also reported as #380022: > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380022 > Sorry about this, th

Re: autoreplies

2006-07-11 Thread Neil McGovern
On Tue, Jul 11, 2006 at 10:52:34AM +0200, Matej Kovac wrote: > On Tue, Jul 11, 2006 at 12:55:04AM +0200, Evgeni Golov wrote: > > On 10 Jul 2006 18:23:26 -0400 [EMAIL PROTECTED] wrote: > > > > > Je serai absent du bureau jusqu'au 13 juillet. Pour toute affaire > > > urgente vous pouvez communiquer

Re: Bogus DNS data from several debian.org authoritative servers

2006-05-29 Thread Neil McGovern
I'm forwarding this over to debian-admin, as they're the people who can fix this :) Neil On Mon, May 29, 2006 at 10:57:06AM +0200, Bjørn Mork wrote: > First, not so serious, but still an error: All debian.org servers have > a mismatch between the delegation and the served data, adding > samosa.de

Re: PMASA-2005-6 when "register_globals = on"

2005-11-15 Thread Neil McGovern
On Tue, Nov 15, 2005 at 05:54:32PM +0100, Piotr Roszatycki wrote: > http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6 reports > that sarge's phpmyadmin package has a security flaw which is occured only if > "register_globals = on" setting is used. > > This feature is disabled i

Re: Antispam

2005-11-04 Thread Neil McGovern
On Fri, Nov 04, 2005 at 05:11:42PM +0100, Jan Bakuwel wrote: > Hoi all, > > Can someone please unsubscribe Mr Stephen Blacksapphire > ([EMAIL PROTECTED]) from the list? His automatic responses > pollute the list unnecessarily. > Hi there, I've emailed the [EMAIL PROTECTED], so I'm sure this'l

Re: [MuellServer N0tification] To External Sender: a v1rus was found and action taken.

2005-08-22 Thread Neil McGovern
On Mon, Aug 22, 2005 at 01:46:21PM +0200, Michelle Konzack wrote: > Hi Evgeni, > > Am 2005-08-22 12:39:02, schrieb Evgeni Golov: > > > The original message was no SPAM. If your filter has wiped it out, than > > it's bad ;-) > > No ist not bad, becasue Anti-Anti-Virus messages ARE spam. > I get p

Re: [MailServer Notification] To External Sender: a virus was found a nd action taken.

2005-08-22 Thread Neil McGovern
On Mon, Aug 22, 2005 at 09:13:15AM +0200, System Attendant wrote: > ScanMail for Microsoft Exchange took action on the message. The message > details were: My finger on behalf of myself took action on the message. The message details were: > Sender = debian-security@lists.debian.org > Recipient

Re: policy change is needed to keep debian secure

2005-08-21 Thread Neil McGovern
On Sat, Aug 20, 2005 at 09:02:47PM -0400, Daniel Sterling wrote: > Keeping Debian stable by not changing things is great. > > Except maybe its not so great when you're trying to maintain a complicated, > buggy, high profile program that handles sensitive user data and untrusted > input. > > Debi

Re: chkrootkit - possible bad news`

2004-02-24 Thread Neil McGovern
On Tue, Feb 24, 2004 at 10:37:44AM -0500, Noah Meyerhans wrote: > On Tue, Feb 24, 2004 at 09:14:05AM +0200, Sneferu wrote: > > > > Looks like there are a lot of false positives on it. > > > > It looks like there are a lot of false positives with chkrootkit in > general. Seriously, has anybody h

Re: chkrootkit - possible bad news`

2004-02-24 Thread Neil McGovern
On Tue, Feb 24, 2004 at 10:37:44AM -0500, Noah Meyerhans wrote: > On Tue, Feb 24, 2004 at 09:14:05AM +0200, Sneferu wrote: > > > > Looks like there are a lot of false positives on it. > > > > It looks like there are a lot of false positives with chkrootkit in > general. Seriously, has anybody h

Re: security.debian.org

2004-02-09 Thread Neil McGovern
On Mon, Feb 09, 2004 at 06:17:01PM +0100, Konstantin Filtschew wrote: > security.debian.org seems to be down [EMAIL PROTECTED]:~$ ping security.debian.org PING security.debian.org (130.89.175.33): 56 data bytes 64 bytes from 130.89.175.33: icmp_seq=0 ttl=51 time=68.8 ms 64 bytes from 130.89.175.33

Re: security.debian.org

2004-02-09 Thread Neil McGovern
On Mon, Feb 09, 2004 at 06:17:01PM +0100, Konstantin Filtschew wrote: > security.debian.org seems to be down [EMAIL PROTECTED]:~$ ping security.debian.org PING security.debian.org (130.89.175.33): 56 data bytes 64 bytes from 130.89.175.33: icmp_seq=0 ttl=51 time=68.8 ms 64 bytes from 130.89.175.33

Re:

2004-01-29 Thread Neil McGovern
On Tue, Jan 27, 2004 at 09:20:33AM -0200, Eduardo Almeida wrote: >McAfee AVERT - Anti Virus Research, Analysis, and Outbreak Management >visit us at www.avertlabs.com CERT have also released an advisory: http://www.us-cert.gov/cas/techalerts/TA04-028A.html Regards, Neil McGovern

Re:

2004-01-29 Thread Neil McGovern
On Tue, Jan 27, 2004 at 09:20:33AM -0200, Eduardo Almeida wrote: >McAfee AVERT - Anti Virus Research, Analysis, and Outbreak Management >visit us at www.avertlabs.com CERT have also released an advisory: http://www.us-cert.gov/cas/techalerts/TA04-028A.html Regards, Neil McGovern

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Neil McGovern
tant updates residing on that server. > > [...] > > PS: Yes, I've already tested apt-cacher ;-> > How about apt-proxy? HTH, HAND etc, Neil McGovern -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key - http://www.halon.org.uk/pubkey.txt ; the.earth.li 8DEC67C5

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Neil McGovern
tant updates residing on that server. > > [...] > > PS: Yes, I've already tested apt-cacher ;-> > How about apt-proxy? HTH, HAND etc, Neil McGovern -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key - http://www.halon.org.uk/pubkey.t

Re: ScanMail Message to recipient: eManager settings were matched and action was taken.

2003-08-30 Thread Neil McGovern
On Sat, Aug 30, 2003 at 12:28:26PM +0100, Thomas Horsten wrote: > Who are mpuk and why are they censoring debian's mailing list, apparently > from several different senders? > Bear in mind that tese message could simply be a result of spam. Neil -- A. Because it breaks the logical sequence of d

Re: ScanMail Message to recipient: eManager settings were matched and action was taken.

2003-08-30 Thread Neil McGovern
On Sat, Aug 30, 2003 at 12:28:26PM +0100, Thomas Horsten wrote: > Who are mpuk and why are they censoring debian's mailing list, apparently > from several different senders? > Bear in mind that tese message could simply be a result of spam. Neil -- A. Because it breaks the logical sequence of d

GNU project FTP server compromised

2003-08-14 Thread Neil McGovern
http://www.cert.org/advisories/CA-2003-21.html Looks like GNU was root compromised. Neil -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key - http://www.halon.org.uk/pubkey.txt ; the.earth.li 8DEC67C5 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] wit

GNU project FTP server compromised

2003-08-14 Thread Neil McGovern
http://www.cert.org/advisories/CA-2003-21.html Looks like GNU was root compromised. Neil -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key - http://www.halon.org.uk/pubkey.txt ; the.earth.li 8DEC67C5

Perfect.BR Team

2003-05-29 Thread Neil McGovern
Taken from news://blueyonder.comp.linux - > A friend of mine has his Debian box r00ted. It only seems to have been > brought to his attention after seeing a file being wgetted and > compiled > within his Apache error log. > > He brought it to my attention as he originally suspected that there >

Perfect.BR Team

2003-05-28 Thread Neil McGovern
Taken from news://blueyonder.comp.linux - > A friend of mine has his Debian box r00ted. It only seems to have been > brought to his attention after seeing a file being wgetted and > compiled > within his Apache error log. > > He brought it to my attention as he originally suspected that there >