Re: on potato's proftpd

2002-04-06 Thread Petro
On Sat, Apr 06, 2002 at 08:48:59AM +, Martin WHEELER wrote: > On Fri, 5 Apr 2002, Petro wrote: > > > You *like* upgrading 100 servers every few days? > > You'll have to ask the scripts that do that stuff for me :) So you don't mind verifying ever c

Re: on potato's proftpd

2002-04-06 Thread Petro
On Sat, Apr 06, 2002 at 08:48:59AM +, Martin WHEELER wrote: > On Fri, 5 Apr 2002, Petro wrote: > > > You *like* upgrading 100 servers every few days? > > You'll have to ask the scripts that do that stuff for me :) So you don't mind verifying ever c

Re: on potato's proftpd

2002-04-05 Thread Petro
On Thu, Apr 04, 2002 at 06:24:18PM +, Martin WHEELER wrote: > On Wed, Apr 03, 2002 at 09:22:34AM +, Martin WHEELER wrote: > > "Release early; release often." > > On Wed, 3 Apr 2002, Petro wrote: > > > > NO > > > > Measure twice,

Re: on potato's proftpd

2002-04-05 Thread Petro
On Thu, Apr 04, 2002 at 06:24:18PM +, Martin WHEELER wrote: > On Wed, Apr 03, 2002 at 09:22:34AM +, Martin WHEELER wrote: > > "Release early; release often." > > On Wed, 3 Apr 2002, Petro wrote: > > > > NO > > > > Measure twice,

Re: on potato's proftpd

2002-04-03 Thread Petro
On Wed, Apr 03, 2002 at 09:22:34AM +, Martin WHEELER wrote: > "Release early; release often." NO Measure twice, cut once. -- Share and Enjoy. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: on potato's proftpd

2002-04-03 Thread Petro
On Wed, Apr 03, 2002 at 10:56:32AM +0900, Howland, Curtis wrote: > I would bet that the vast majority of "flame wars" begin because someone > mistakes "terse" or "concise" for hostility. > > The reverse, being the endless spewing of meaningless words, all the while > saying nothing at all or eve

Re: on potato's proftpd

2002-04-03 Thread Petro
On Wed, Apr 03, 2002 at 09:22:34AM +, Martin WHEELER wrote: > "Release early; release often." NO Measure twice, cut once. -- Share and Enjoy. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: on potato's proftpd

2002-04-03 Thread Petro
On Wed, Apr 03, 2002 at 10:56:32AM +0900, Howland, Curtis wrote: > I would bet that the vast majority of "flame wars" begin because someone mistakes >"terse" or "concise" for hostility. > > The reverse, being the endless spewing of meaningless words, all the while saying >nothing at all or even

Re: Re: iptables filtering rules

2002-03-27 Thread Petro
On Mon, Mar 25, 2002 at 06:01:45AM -0300, Luiz Carlos Santos de Alencar wrote: > Andrew Tait wrote: > I've checked up one of that IPs; it's being used right now by a web > server pretty much infected with I-Worm.Nimda.A! AVG identification. > The standard page delivers a "readme.eml" file in a pop-

Re: Re: iptables filtering rules

2002-03-27 Thread Petro
On Mon, Mar 25, 2002 at 06:01:45AM -0300, Luiz Carlos Santos de Alencar wrote: > Andrew Tait wrote: > I've checked up one of that IPs; it's being used right now by a web > server pretty much infected with I-Worm.Nimda.A! AVG identification. > The standard page delivers a "readme.eml" file in a pop

Re: failed ssh breakins on my exposed www box ..

2002-03-25 Thread Petro
On Mon, Mar 25, 2002 at 04:50:17PM -0500, Gary MacDougall wrote: > Agreed. > I'll never understand why people will let "crackers" reap havoc > on a network without issue, but if someone comes up and tries > to break into my house, the police will be there in 2 seconds. Hate to break it to you,

Re: failed ssh breakins on my exposed www box ..

2002-03-25 Thread Petro
On Mon, Mar 25, 2002 at 04:50:17PM -0500, Gary MacDougall wrote: > Agreed. > I'll never understand why people will let "crackers" reap havoc > on a network without issue, but if someone comes up and tries > to break into my house, the police will be there in 2 seconds. Hate to break it to you

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Petro
On Sun, Mar 24, 2002 at 07:24:18PM +0100, andreas mayer wrote: > > We seriouslly need a US branch of the law-enforcement to deal > > with this sort of stuff. ?I think if more people got prosecuted for > > trying to crack into a site, the level of BS would drop to zero. > Yeah! And what if the atta

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Petro
On Sun, Mar 24, 2002 at 12:28:17PM -0500, timothy bauscher wrote: > > We seriouslly need a US branch of the law-enforcement to deal > > with this sort of stuff. > I respect your opinion, but i would hate to > have a new branch of government wasting my > tax dollars. If these types of "attacks" can

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Petro
On Sun, Mar 24, 2002 at 07:24:18PM +0100, andreas mayer wrote: > > We seriouslly need a US branch of the law-enforcement to deal > > with this sort of stuff. ?I think if more people got prosecuted for > > trying to crack into a site, the level of BS would drop to zero. > Yeah! And what if the att

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Petro
On Sun, Mar 24, 2002 at 12:28:17PM -0500, timothy bauscher wrote: > > We seriouslly need a US branch of the law-enforcement to deal > > with this sort of stuff. > I respect your opinion, but i would hate to > have a new branch of government wasting my > tax dollars. If these types of "attacks" can

Re: Problems with tripwire:

2002-03-13 Thread Petro
On Wed, Mar 13, 2002 at 04:31:01PM +0100, Michel Verdier wrote: > Petro <[EMAIL PROTECTED]> a ?crit : > > | > The last match is used, try to switch these ones > | > | I did, that is the second. I'll try it again. > > In fact you have 3 /var statement

Re: Problems with tripwire:

2002-03-13 Thread Petro
On Wed, Mar 13, 2002 at 04:31:01PM +0100, Michel Verdier wrote: > Petro <[EMAIL PROTECTED]> a écrit : > > | > The last match is used, try to switch these ones > | > | I did, that is the second. I'll try it again. > > In fact you have 3 /var statement

Re: [SECURITY] [DSA 122-1] New zlib & other packages fix buffer overflow

2002-03-13 Thread Petro
On Wed, Mar 13, 2002 at 10:36:15AM +, David Hart wrote: > On Wed, Mar 13, 2002 at 01:47:57AM +, David Hart wrote: > Duh, sorry. As someone else has kindly pointed out, > 'potato/woody'/'stable/testing' should be transposed :) (I really > shouldn't post at 1:45 in the morning) Why? Ha

Re: [SECURITY] [DSA 122-1] New zlib & other packages fix buffer overflow

2002-03-13 Thread Petro
On Wed, Mar 13, 2002 at 10:36:15AM +, David Hart wrote: > On Wed, Mar 13, 2002 at 01:47:57AM +, David Hart wrote: > Duh, sorry. As someone else has kindly pointed out, > 'potato/woody'/'stable/testing' should be transposed :) (I really > shouldn't post at 1:45 in the morning) Why? H

Re: Problems with tripwire:

2002-03-12 Thread Petro
On Tue, Mar 12, 2002 at 08:57:40PM +0100, Michel Verdier wrote: > Petro <[EMAIL PROTECTED]> a ?crit : > > | !/var/log/ksymoops/ > | /var/log@@LOGSEARCH > | > | Now, according to my understanding, the ! in front of /var/log/ksymoops/ > | should be telling trip

Re: Problems with tripwire:

2002-03-12 Thread Petro
On Tue, Mar 12, 2002 at 08:59:08AM +0100, Martin Peikert wrote: > Petro wrote: > > >Is there a file-security scanner like tripwire (or like AIDE) that > >works across a network? I'm envisioning something that does local > >file scanning, then transmits th

Re: Problems with tripwire:

2002-03-12 Thread Petro
On Tue, Mar 12, 2002 at 08:57:40PM +0100, Michel Verdier wrote: > Petro <[EMAIL PROTECTED]> a écrit : > > | !/var/log/ksymoops/ > | /var/log@@LOGSEARCH > | > | Now, according to my understanding, the ! in front of /var/log/ksymoops/ > | should be telling trip

Re: Problems with tripwire:

2002-03-12 Thread Petro
On Tue, Mar 12, 2002 at 08:59:08AM +0100, Martin Peikert wrote: > Petro wrote: > > >Is there a file-security scanner like tripwire (or like AIDE) that > >works across a network? I'm envisioning something that does local > >file scanning, then transmits th

Problems with tripwire:

2002-03-11 Thread Petro
I have tripwire installed on one of my servers (Debian Stable), and I've managed to get the configuration pretty quiet, but I'm having a little problem with one or two of them. The particular section of tw.config looks like: /var@@AW !/var/log/ksymoops/ /var/log@@LOGSEARCH /

Problems with tripwire:

2002-03-11 Thread Petro
I have tripwire installed on one of my servers (Debian Stable), and I've managed to get the configuration pretty quiet, but I'm having a little problem with one or two of them. The particular section of tw.config looks like: /var@@AW !/var/log/ksymoops/ /var/log@@LOGSEARCH

Security implications of chpasswd.

2002-02-28 Thread Petro
For some very good reasons I had to do a mass change of passwords on one of our exposed login machines (no breach/hack, different reason). There is a utility included in Debian Stable (and the others) to do this called chpasswd. I believe there may be some security issue

Security implications of chpasswd.

2002-02-28 Thread Petro
For some very good reasons I had to do a mass change of passwords on one of our exposed login machines (no breach/hack, different reason). There is a utility included in Debian Stable (and the others) to do this called chpasswd. I believe there may be some security issu

Re: CERT Advisory CA-2002-05 Multiple Vulnerabilities in PHP fileupload

2002-02-28 Thread Petro
On Thu, Feb 28, 2002 at 08:37:45AM -, Jeff wrote: > I received this CERT Advisory about 6 hours ago, regarding PHP. > The php website confirms the details: www.php.net > I think this is going to be a problem for us, due to the way > the Debian packaging works - > I guess that the immediate so

Re: CERT Advisory CA-2002-05 Multiple Vulnerabilities in PHP fileupload

2002-02-28 Thread Petro
On Thu, Feb 28, 2002 at 08:37:45AM -, Jeff wrote: > I received this CERT Advisory about 6 hours ago, regarding PHP. > The php website confirms the details: www.php.net > I think this is going to be a problem for us, due to the way > the Debian packaging works - > I guess that the immediate s

Re: webhosting

2002-02-25 Thread Petro
On Mon, Feb 25, 2002 at 02:18:29PM -0700, Jerry Lynde wrote: > True, true... > But Michael was asking for secure, not non-anal licensing... I don't expect > he was gonna > try and hack BIND or djbdns or anything else... > I just wouldn't suggest anyone use BIND is the same sense that I wouldn't

Re: webhosting

2002-02-25 Thread Petro
On Mon, Feb 25, 2002 at 02:18:29PM -0700, Jerry Lynde wrote: > True, true... > But Michael was asking for secure, not non-anal licensing... I don't expect > he was gonna > try and hack BIND or djbdns or anything else... > I just wouldn't suggest anyone use BIND is the same sense that I wouldn't

Re: Un-installing inetd on Woody.

2002-02-14 Thread Petro
On Wed, Feb 13, 2002 at 09:39:02PM -0800, Ted Cabeen wrote: > You shouldn't use the update-rc.d script to remove init.d scripts. If you > do, when you upgrade the package, all of the scripts should be reinstalled. > Read the man page for update-rc.d for info on how to turn off a service and > ensu

Re: Un-installing inetd on Woody.

2002-02-14 Thread Petro
On Wed, Feb 13, 2002 at 09:39:02PM -0800, Ted Cabeen wrote: > You shouldn't use the update-rc.d script to remove init.d scripts. If you > do, when you upgrade the package, all of the scripts should be reinstalled. > Read the man page for update-rc.d for info on how to turn off a service and > ens

Re: securid logins

2002-01-21 Thread Petro
On Mon, Jan 21, 2002 at 06:16:34AM -0800, martin f krafft wrote: > assuming i have SecurID tokens with licenses, can i make linux > authenticate based on these *without* the use of external or commercial > software (like ACE/Server)? any experience anyone? I don't think so. But I'd be in

Re: securid logins

2002-01-21 Thread Petro
On Mon, Jan 21, 2002 at 06:16:34AM -0800, martin f krafft wrote: > assuming i have SecurID tokens with licenses, can i make linux > authenticate based on these *without* the use of external or commercial > software (like ACE/Server)? any experience anyone? I don't think so. But I'd be i

Re: Secure 2.4.x kernel

2001-12-28 Thread Petro
On Fri, Dec 28, 2001 at 11:18:35AM +0300, Nyarlathotep wrote: > On Fri, 2001-12-28 at 03:22, Howland, Curtis wrote: > > Naa, it's simian posturing. It happens with humans everywhere. I > > enjoyed watching it in Good Will Hunting, and two days ago rented > > Finding Forrester (same movie, differe

Re: Secure 2.4.x kernel

2001-12-28 Thread Petro
On Fri, Dec 28, 2001 at 11:18:35AM +0300, Nyarlathotep wrote: > On Fri, 2001-12-28 at 03:22, Howland, Curtis wrote: > > Naa, it's simian posturing. It happens with humans everywhere. I > > enjoyed watching it in Good Will Hunting, and two days ago rented > > Finding Forrester (same movie, differ

Re: cdimages.debian.org

2001-12-20 Thread Petro
On Thu, Dec 20, 2001 at 12:42:17PM -0800, Petro wrote: > Is this host offline for good? > Shouldn't there be an obvious mirror of this somewhere? I got my answer to the "obvious mirror" part, and found the information (if not the file) that I was looking for

Re: cdimages.debian.org

2001-12-20 Thread Petro
On Thu, Dec 20, 2001 at 04:54:01PM -0800, Brian Bilbrey wrote: > On Thu, Dec 20, 2001 at 12:42:17PM -0800, Petro wrote: > > Is this host offline for good? > h. Try cdimage.debian.org (there's no 's' in the url as you put it > in the subject: line). However

Re: cdimages.debian.org

2001-12-20 Thread Petro
On Thu, Dec 20, 2001 at 12:42:17PM -0800, Petro wrote: > Is this host offline for good? > Shouldn't there be an obvious mirror of this somewhere? I got my answer to the "obvious mirror" part, and found the information (if not the file) that I was looking

Re: cdimages.debian.org

2001-12-20 Thread Petro
On Thu, Dec 20, 2001 at 04:54:01PM -0800, Brian Bilbrey wrote: > On Thu, Dec 20, 2001 at 12:42:17PM -0800, Petro wrote: > > Is this host offline for good? > h. Try cdimage.debian.org (there's no 's' in the url as you put it > in the subject: line). However

cdimages.debian.org

2001-12-20 Thread Petro
Is this host offline for good? Shouldn't there be an obvious mirror of this somewhere? -- Share and Enjoy.

cdimages.debian.org

2001-12-20 Thread Petro
Is this host offline for good? Shouldn't there be an obvious mirror of this somewhere? -- Share and Enjoy. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Spam?!?

2001-12-17 Thread Petro
On Mon, Dec 17, 2001 at 11:48:13PM +0900, Yooseong Yang wrote: > >can you speak korean? if so give them a call or a nasty email for us. > I am be shameful of this kinda spam stuffs as a korean. > I send an email to hanmail mail administrator about this kinda > problem. If I got some mails from who

Re: Spam?!?

2001-12-17 Thread Petro
On Mon, Dec 17, 2001 at 11:48:13PM +0900, Yooseong Yang wrote: > >can you speak korean? if so give them a call or a nasty email for us. > I am be shameful of this kinda spam stuffs as a korean. > I send an email to hanmail mail administrator about this kinda > problem. If I got some mails from wh

Re: Exim mail

2001-12-14 Thread Petro
On Fri, Dec 14, 2001 at 06:22:03PM -0600, Daniel Rychlik wrote: > How do I stop this from happening. Apparently my bud telented to port 25 > and somehow sent mail from my root account. Any suggestions, white papers > or links? Id would like to block the telnet application all together, but I > d

Re: Exim mail

2001-12-14 Thread Petro
On Fri, Dec 14, 2001 at 06:22:03PM -0600, Daniel Rychlik wrote: > How do I stop this from happening. Apparently my bud telented to port 25 > and somehow sent mail from my root account. Any suggestions, white papers > or links? Id would like to block the telnet application all together, but I >

Re: Deducing key from encrypted & original data

2001-12-11 Thread Petro
On Tue, Dec 11, 2001 at 01:33:41AM +, Andrew Bolt wrote: > ...unless you are from Hollywood - in which case a good encryption > scheme is one that can be cracked by having lots of digits flash > up on the screen, and gradually have individual digits lock into > the correct key. Some wierd

Re: Deducing key from encrypted & original data

2001-12-11 Thread Petro
On Tue, Dec 11, 2001 at 01:33:41AM +, Andrew Bolt wrote: > ...unless you are from Hollywood - in which case a good encryption > scheme is one that can be cracked by having lots of digits flash > up on the screen, and gradually have individual digits lock into > the correct key. Some wierd

Re: Can a daemon listen only on some interfaces?

2001-12-08 Thread Petro
On Sat, Dec 08, 2001 at 01:40:06AM -0800, [EMAIL PROTECTED] wrote: > After reading a previous thread about stopping services from listening > on certains ports, I decided to investigate things a little further for > my system. > So, what I can figure out is that it seems that I have only the > foll

Re: Can a daemon listen only on some interfaces?

2001-12-08 Thread Petro
On Sat, Dec 08, 2001 at 01:40:06AM -0800, [EMAIL PROTECTED] wrote: > After reading a previous thread about stopping services from listening > on certains ports, I decided to investigate things a little further for > my system. > So, what I can figure out is that it seems that I have only the > fol

Re: shutdown user and accountability

2001-11-29 Thread Petro
On Thu, Nov 29, 2001 at 05:59:40PM +, Niall Walsh wrote: > Carel Fellinger wrote: > >On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: > >>I can't resist it! > >me too:) > >>Add a usb digital camera to the box and only allow people who are not > >I've thought of this too, but reject

Re: shutdown user and accountability

2001-11-29 Thread Petro
On Thu, Nov 29, 2001 at 05:59:40PM +, Niall Walsh wrote: > Carel Fellinger wrote: > >On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: > >>I can't resist it! > >me too:) > >>Add a usb digital camera to the box and only allow people who are not > >I've thought of this too, but rejec

Re: shutdown user and accountability

2001-11-28 Thread Petro
On Wed, Nov 28, 2001 at 10:58:47AM +0900, Olaf Meeuwissen wrote: > Blake Barnett <[EMAIL PROTECTED]> writes: > > > Can't you give a group sudo access? If so, just add everyone to a group > > and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. > > That's exactly what my sudo setup

Re: shutdown user and accountability

2001-11-28 Thread Petro
On Wed, Nov 28, 2001 at 10:58:47AM +0900, Olaf Meeuwissen wrote: > Blake Barnett <[EMAIL PROTECTED]> writes: > > > Can't you give a group sudo access? If so, just add everyone to a group > > and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. > > That's exactly what my sudo setu

Re: is 3des secure??

2001-11-27 Thread Petro
On Tue, Nov 27, 2001 at 12:44:23PM +0100, Janusz A. Urbanowicz wrote: > Petro wrote/napisa?[a]/schrieb: > > On Mon, Nov 26, 2001 at 12:17:32PM +1100, Steve Smith wrote: > > > 3DES is generally considered strong enough. However, it is slow, and > > > can effect performan

Re: is 3des secure??

2001-11-27 Thread Petro
On Tue, Nov 27, 2001 at 12:44:23PM +0100, Janusz A. Urbanowicz wrote: > Petro wrote/napisa?[a]/schrieb: > > On Mon, Nov 26, 2001 at 12:17:32PM +1100, Steve Smith wrote: > > > 3DES is generally considered strong enough. However, it is slow, and > > > can effect pe

Re: is 3des secure??

2001-11-26 Thread Petro
On Mon, Nov 26, 2001 at 12:17:32PM +1100, Steve Smith wrote: > 3DES is generally considered strong enough. However, it is slow, and > can effect performance. Try doing large 'scp's and switch between DES/3DES was designed to be implemented in hardware, doing a software-only implementatio

Re: is 3des secure??

2001-11-26 Thread Petro
On Mon, Nov 26, 2001 at 12:17:32PM +1100, Steve Smith wrote: > 3DES is generally considered strong enough. However, it is slow, and > can effect performance. Try doing large 'scp's and switch between DES/3DES was designed to be implemented in hardware, doing a software-only implementati

Re: is 3des secure??

2001-11-25 Thread Petro
On Mon, Nov 26, 2001 at 09:04:59AM +0900, Howland, Curtis wrote: > > While this may be whipping a greasy stain on the road, it is true that > 3DES was created "by the government" back when private cryptology was > difficult or unknown. I believe it is prudent to consider that it was > allowed to b

Re: is 3des secure??

2001-11-25 Thread Petro
On Mon, Nov 26, 2001 at 09:04:59AM +0900, Howland, Curtis wrote: > > While this may be whipping a greasy stain on the road, it is true that > 3DES was created "by the government" back when private cryptology was > difficult or unknown. I believe it is prudent to consider that it was > allowed to

Re: Mail-server config

2001-11-21 Thread Petro
On Wed, Nov 21, 2001 at 04:34:46PM +0100, Johannes Weiss wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > Hi @all, > I plan to install a mailserver for ca. 800 users, now I planned to make 800 > users with shell /bin/bash, home /dev/nul,... > So, I ask you ;)), if this is a good solution

Re: Mail-server config

2001-11-21 Thread Petro
On Wed, Nov 21, 2001 at 04:34:46PM +0100, Johannes Weiss wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > Hi @all, > I plan to install a mailserver for ca. 800 users, now I planned to make 800 > users with shell /bin/bash, home /dev/nul,... > So, I ask you ;)), if this is a good solutio

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-21 Thread Petro
On Tue, Nov 20, 2001 at 08:25:36PM -0800, Nathan E Norman wrote: > On Tue, Nov 20, 2001 at 12:01:32PM -0800, J C Lawrence wrote: > > On Mon, 19 Nov 2001 21:57:05 -0600 > > Nathan E Norman wrote: > > > On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: > > >&

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 08:25:36PM -0800, Nathan E Norman wrote: > On Tue, Nov 20, 2001 at 12:01:32PM -0800, J C Lawrence wrote: > > On Mon, 19 Nov 2001 21:57:05 -0600 > > Nathan E Norman wrote: > > > On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: > > >&

Re: WAY OT (Re: In Praise of Dos (RE: Mutt & tmp files))

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 01:00:58PM -0800, Vineet Kumar wrote: > * J C Lawrence ([EMAIL PROTECTED]) [011120 12:04]: > > On Mon, 19 Nov 2001 21:57:05 -0600 > > Nathan E Norman wrote: > > > On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: > > >> But his

Re: WAY OT (Re: In Praise of Dos (RE: Mutt & tmp files))

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 01:00:58PM -0800, Vineet Kumar wrote: > * J C Lawrence ([EMAIL PROTECTED]) [011120 12:04]: > > On Mon, 19 Nov 2001 21:57:05 -0600 > > Nathan E Norman wrote: > > > On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: > > >> But his

Re: Mutt & tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 03:34:54PM +0100, Rolf Kutz wrote: > Alexander Clouter ([EMAIL PROTECTED]) wrote: > > > I am the root guy of my own laptop and I can trust myself :) However a lot > > of countries (uk/us and probably others, lots in the eu I would imagine) > > have > > encryption laws, no

Re: Mutt & tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 02:47:56PM +0100, Florian Bantner wrote: > On Die, 20 Nov 2001, Rolf Kutz wrote: > > Florian Bantner ([EMAIL PROTECTED]) wrote: > > > A fact about which I'm concerned > > > even more than about a hack from outside via the internet etc. is > > > real physical access to the bo

Re: Mutt & tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 12:13:05PM +0100, Rolf Kutz wrote: > Florian Bantner ([EMAIL PROTECTED]) wrote: > > > A fact about which I'm concerned > > even more than about a hack from outside via the internet etc. is > > real physical access to the box. Something hackers normaly don't pay > > enough a

Re: Mutt & tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 03:34:54PM +0100, Rolf Kutz wrote: > Alexander Clouter ([EMAIL PROTECTED]) wrote: > > > I am the root guy of my own laptop and I can trust myself :) However a lot > > of countries (uk/us and probably others, lots in the eu I would imagine) have > > encryption laws, not pr

Re: Mutt & tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 02:47:56PM +0100, Florian Bantner wrote: > On Die, 20 Nov 2001, Rolf Kutz wrote: > > Florian Bantner ([EMAIL PROTECTED]) wrote: > > > A fact about which I'm concerned > > > even more than about a hack from outside via the internet etc. is > > > real physical access to the b

Re: Mutt & tmp files -- Root is not my Enemy

2001-11-20 Thread Petro
On Tue, Nov 20, 2001 at 12:13:05PM +0100, Rolf Kutz wrote: > Florian Bantner ([EMAIL PROTECTED]) wrote: > > > A fact about which I'm concerned > > even more than about a hack from outside via the internet etc. is > > real physical access to the box. Something hackers normaly don't pay > > enough

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-20 Thread Petro
On Mon, Nov 19, 2001 at 07:57:05PM -0800, Nathan E Norman wrote: > On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: > > But his is hugely off topic, and I'll go no futher down this road. > > Could you at least honor my Mail-Followup-To: header? I would have if

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 07:57:05PM -0800, Nathan E Norman wrote: > On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: > > But his is hugely off topic, and I'll go no futher down this road. > > Could you at least honor my Mail-Followup-To: header? I would have if

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 02:14:54PM -0800, Nathan E Norman wrote: > On Mon, Nov 19, 2001 at 01:47:40PM -0800, Petro wrote: > > > enviroments and applications to figure out what it takes to make a > > > system really consistent and usable for you. Even if you pick some >

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 12:46:21PM -0800, James Hamilton wrote: > My Gnome/X/Debian GNU/Linux Desktop is much "slicker" than > anything I have ever been able to do with Windows. The Gnome > apps have a fairly consistent interface as well. There is a steeper and > longer learning curve to learn h

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 02:14:54PM -0800, Nathan E Norman wrote: > On Mon, Nov 19, 2001 at 01:47:40PM -0800, Petro wrote: > > > enviroments and applications to figure out what it takes to make a > > > system really consistent and usable for you. Even if you pick some >

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 12:30:34AM -0800, Martin Christensen wrote: > >>>>> "Petro" == Petro <[EMAIL PROTECTED]> writes: > Petro> On Mon, Nov 19, 2001 at 10:24:05AM +0900, Howland, Curtis > Petro> wrote: > >> ps: From a personal perspective,

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 12:46:21PM -0800, James Hamilton wrote: > My Gnome/X/Debian GNU/Linux Desktop is much "slicker" than > anything I have ever been able to do with Windows. The Gnome > apps have a fairly consistent interface as well. There is a steeper and > longer learning curve to learn

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-19 Thread Petro
On Mon, Nov 19, 2001 at 12:30:34AM -0800, Martin Christensen wrote: > >>>>> "Petro" == Petro <[EMAIL PROTECTED]> writes: > Petro> On Mon, Nov 19, 2001 at 10:24:05AM +0900, Howland, Curtis > Petro> wrote: > >> ps: From a personal perspec

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-18 Thread Petro
On Mon, Nov 19, 2001 at 10:24:05AM +0900, Howland, Curtis wrote: > ps: From a personal perspective, I think Linux is about where Windows > 3.0 was. This is not a troll, just a usability thing. No, it's about where win3.11 was in a lot of ways. Modulo the stability &&etc. -- Share and En

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-18 Thread Petro
On Mon, Nov 19, 2001 at 10:24:05AM +0900, Howland, Curtis wrote: > ps: From a personal perspective, I think Linux is about where Windows > 3.0 was. This is not a troll, just a usability thing. No, it's about where win3.11 was in a lot of ways. Modulo the stability &&etc. -- Share and E

Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Petro
On Fri, Nov 16, 2001 at 05:39:43PM +0100, Mathias Gygax wrote: > On Fre, Nov 16, 2001 at 08:23:27AM -0800, Micah Anderson wrote: > > There is no way, nor any reason why, to setup a system in such a way > > that the maintainer of the system cannot maintain it. > maintainer is someone else. root is

Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Petro
On Fri, Nov 16, 2001 at 02:36:30PM +0100, Mathias Gygax wrote: > On Fre, Nov 16, 2001 at 04:13:16AM -0900, Ethan Benson wrote: > > > > Root is God. Anything you do on the system is potentially visible to > > > > root. > this is, with the right patches applied, not true. And who has to apply th

Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Petro
On Fri, Nov 16, 2001 at 05:39:43PM +0100, Mathias Gygax wrote: > On Fre, Nov 16, 2001 at 08:23:27AM -0800, Micah Anderson wrote: > > There is no way, nor any reason why, to setup a system in such a way > > that the maintainer of the system cannot maintain it. > maintainer is someone else. root is

Re: Root is God? (was: Mutt & tmp files)

2001-11-16 Thread Petro
On Fri, Nov 16, 2001 at 02:36:30PM +0100, Mathias Gygax wrote: > On Fre, Nov 16, 2001 at 04:13:16AM -0900, Ethan Benson wrote: > > > > Root is God. Anything you do on the system is potentially visible to > > > > root. > this is, with the right patches applied, not true. And who has to apply t

Re: Mutt & tmp files

2001-11-16 Thread Petro
On Thu, Nov 15, 2001 at 11:09:41PM -0800, Craig Dickson wrote: > Wade Richards wrote: > > >I still say the bottom line is, if you don't trust root, don't use his > > >machine. > > This is the sort of absolutist nonsense that gives security experts a > > bad name. After all, anyone armed with a cha

Re: Mutt & tmp files

2001-11-16 Thread Petro
On Thu, Nov 15, 2001 at 10:17:39PM -0800, Wade Richards wrote: > Also, what makes you thing root "knows what he's doing?" I suspect that > many people with the "root" password could not install a tty sniffer or > any other spying tool unless they could type "apt-get install ttysniffer". dud

Re: Mutt & tmp files

2001-11-15 Thread Petro
On Thu, Nov 15, 2001 at 11:09:41PM -0800, Craig Dickson wrote: > Wade Richards wrote: > > >I still say the bottom line is, if you don't trust root, don't use his > > >machine. > > This is the sort of absolutist nonsense that gives security experts a > > bad name. After all, anyone armed with a ch

Re: Mutt & tmp files

2001-11-15 Thread Petro
On Thu, Nov 15, 2001 at 10:17:39PM -0800, Wade Richards wrote: > Also, what makes you thing root "knows what he's doing?" I suspect that > many people with the "root" password could not install a tty sniffer or > any other spying tool unless they could type "apt-get install ttysniffer". du

Re: Vulnerable SSH versions

2001-11-12 Thread Petro
On Mon, Nov 12, 2001 at 05:54:04PM -0800, Ethan Benson wrote: > On Tue, Nov 13, 2001 at 10:10:10AM +0900, Howland, Curtis wrote: > > I will gladly grant that the tar file may not exist for the boot > > floppies, and that I do not have on hand the CD to check it. It also > may > > have been a Potato

Re: Vulnerable SSH versions

2001-11-12 Thread Petro
On Mon, Nov 12, 2001 at 05:54:04PM -0800, Ethan Benson wrote: > On Tue, Nov 13, 2001 at 10:10:10AM +0900, Howland, Curtis wrote: > > I will gladly grant that the tar file may not exist for the boot > > floppies, and that I do not have on hand the CD to check it. It also > may > > have been a Potat

Re: FTP and security

2001-11-08 Thread Petro
On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: > Is there a decent Windows FTP application that supports sftp? Unfortunately, > I have to use Windows at work. :/ Well, there's always cygwin. It almost makes Windows liveable. > On Thu, Nov 08, 2001 at 10:55:17PM +0100, Wich

Re: FTP and security

2001-11-08 Thread Petro
On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: > Is there a decent Windows FTP application that supports sftp? Unfortunately, I have >to use Windows at work. :/ Well, there's always cygwin. It almost makes Windows liveable. > On Thu, Nov 08, 2001 at 10:55:17PM +0100, Wich

Re: Questions regarding the Security Secretary Position

2001-10-22 Thread Petro
On Mon, Oct 22, 2001 at 09:40:45AM +0300, Lauri Tischler wrote: > Matt Zimmerman wrote: > > > > > I think the security secretary, if we have one, should be a Debian > > > developer. > > > > We have two of them, and they are both card-carrying developers. > > > Unnghhh... > 'Card-carrying' sounds

Re: Questions regarding the Security Secretary Position

2001-10-21 Thread Petro
On Mon, Oct 22, 2001 at 09:40:45AM +0300, Lauri Tischler wrote: > Matt Zimmerman wrote: > > > > > I think the security secretary, if we have one, should be a Debian > > > developer. > > > > We have two of them, and they are both card-carrying developers. > > > Unnghhh... > 'Card-carrying' sound

Re: central administration techniques

2001-10-19 Thread Petro
On Fri, Oct 19, 2001 at 09:41:22AM -0700, nrvale0 wrote: > > maybe have a look at cfengine? > > or apt-cache search / freshmeat / google for other options > > I was down this road just a few months ago. cfengine is nice except > that the author doesn't believe that 'administrative information' is

Re: central administration techniques

2001-10-19 Thread Petro
On Fri, Oct 19, 2001 at 09:41:22AM -0700, nrvale0 wrote: > > maybe have a look at cfengine? > > or apt-cache search / freshmeat / google for other options > > I was down this road just a few months ago. cfengine is nice except > that the author doesn't believe that 'administrative information' is

  1   2   >