Re: Possible buffer overflows = security problem?

2003-09-08 Thread Preben Randhol
Wade Richards <[EMAIL PROTECTED]> wrote on 08/09/2003 (10:10) : > The safest approach is always to ensure that the answer to the first > question is "no", so you don't need to worry about the second one. And the only approach! Never take calculated risks in these matter when one is dealing with C/

Re: Possible buffer overflows = security problem?

2003-09-08 Thread Preben Randhol
Wade Richards <[EMAIL PROTECTED]> wrote on 08/09/2003 (10:10) : > The safest approach is always to ensure that the answer to the first > question is "no", so you don't need to worry about the second one. And the only approach! Never take calculated risks in these matter when one is dealing with C/

Re: Strongest linux - kernel patches

2003-07-02 Thread Preben Randhol
Alvin Oga <[EMAIL PROTECTED]> wrote on 02/07/2003 (12:46) : > rest of the kernel hardening patches > > http://linux-sec.net/Harden/kernel.gwif.html What about: http://www.nsa.gov/selinux/ ? -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php

Re: Strongest linux - kernel patches

2003-07-02 Thread Preben Randhol
Alvin Oga <[EMAIL PROTECTED]> wrote on 02/07/2003 (12:46) : > rest of the kernel hardening patches > > http://linux-sec.net/Harden/kernel.gwif.html What about: http://www.nsa.gov/selinux/ ? -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php --

Re: Why is proftpd always started when one update it?

2003-07-01 Thread Preben Randhol
Ted Cabeen <[EMAIL PROTECTED]> wrote on 01/07/2003 (08:14) : > Individual admins are not supposed to use update-rc.d to disable a > packaged program from starting. I got told earlier that I should use the update tools when doing changes. > update-rc.d is supposed to be for the use of the installe

Re: Why is proftpd always started when one update it?

2003-07-01 Thread Preben Randhol
Ted Cabeen <[EMAIL PROTECTED]> wrote on 01/07/2003 (08:14) : > Individual admins are not supposed to use update-rc.d to disable a > packaged program from starting. I got told earlier that I should use the update tools when doing changes. > update-rc.d is supposed to be for the use of the installe

Why is proftpd always started when one update it?

2003-06-30 Thread Preben Randhol
nd I don't understand why this is still the default behaviour of Debian GNU/Linux. If somebody could explain why it is like this it would be nice. Thanks in advance. Preben Randhol -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php

Why is proftpd always started when one update it?

2003-06-30 Thread Preben Randhol
nd I don't understand why this is still the default behaviour of Debian GNU/Linux. If somebody could explain why it is like this it would be nice. Thanks in advance. Preben Randhol -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php -- To UNS

Re: Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
information, it was that I was looking for. I guess there are no mindterm clones out there with SSH 2.0 support (Open Source/Free Software of course)? -- Preben Randhol --- http://www.pvv.org/~randhol/ -- «For me, Ada95 puts back the joy in programming.» --

Re: Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
Anne Carasik <[EMAIL PROTECTED]> wrote on 13/05/2002 (17:55) : > Security issues? Can you be more specific? > > There aren't any security issues (yet) with the SSH 2.0 protocol. > > From what I know, there aren't any issues using mindterm for 2.0 > either :) > But the Mindterm package in Debian

Re: Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
information, it was that I was looking for. I guess there are no mindterm clones out there with SSH 2.0 support (Open Source/Free Software of course)? -- Preben Randhol --- http://www.pvv.org/~randhol/ -- «For me, Ada95 puts back the joy in programming.» --

Re: Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
Anne Carasik <[EMAIL PROTECTED]> wrote on 13/05/2002 (17:55) : > Security issues? Can you be more specific? > > There aren't any security issues (yet) with the SSH 2.0 protocol. > > From what I know, there aren't any issues using mindterm for 2.0 > either :) > But the Mindterm package in Debia

Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
Hi I'm looking for a way to log into my computer via ssh and a web browser. I see mindterm can do this, but last I checked it used ssh < 2.0, and I understood that there where security issues with this. Is that correct? Are there any replacement software for mindterm? Thanks of any hints in adva

Safe to use Mindterm?

2002-05-13 Thread Preben Randhol
Hi I'm looking for a way to log into my computer via ssh and a web browser. I see mindterm can do this, but last I checked it used ssh < 2.0, and I understood that there where security issues with this. Is that correct? Are there any replacement software for mindterm? Thanks of any hints in adv

Re: ssh and scp and odd log reporting

2002-02-05 Thread Preben Randhol
Vineet Kumar <[EMAIL PROTECTED]> wrote on 05/02/2002 (11:23) : > * Preben Randhol ([EMAIL PROTECTED]) [020202 05:22]: > > The "Accepted keyboard-interactive" bit is given by your ssh server. > It's just letting you know that krutt connected using the > keyboa

Re: ssh and scp and odd log reporting

2002-02-05 Thread Preben Randhol
Vineet Kumar <[EMAIL PROTECTED]> wrote on 05/02/2002 (11:23) : > * Preben Randhol ([EMAIL PROTECTED]) [020202 05:22]: > > The "Accepted keyboard-interactive" bit is given by your ssh server. > It's just letting you know that krutt connected using the > keyboa

ssh and scp and odd log reporting

2002-02-02 Thread Preben Randhol
krutt" and "delete non-existent entry; MAIL" and on the other machine it says: stdin: is not a tty. If I use scp towards another machine (not a Debian) I dont see the: stdin: is not a tty -- Preben Randhol «For me, Ada95 puts back the joy in programming.»

Re: Exim Relay

2002-02-02 Thread Preben Randhol
Laurent Luyckx <[EMAIL PROTECTED]> wrote on 01/02/2002 (16:30) : > In exim.conf, put hosts_accept_relay with a list of authorized IP. > ex: > > hosts_accept_relay = localhost:192.168.0.0/24 ^^^ why t

ssh and scp and odd log reporting

2002-02-02 Thread Preben Randhol
nd "delete non-existent entry; MAIL" and on the other machine it says: stdin: is not a tty. If I use scp towards another machine (not a Debian) I dont see the: stdin: is not a tty -- Preben Randhol «For me, Ada95 puts back the joy in programming.» -- To UNSUBSCRIBE, email

Re: Exim Relay

2002-02-02 Thread Preben Randhol
Laurent Luyckx <[EMAIL PROTECTED]> wrote on 01/02/2002 (16:30) : > In exim.conf, put hosts_accept_relay with a list of authorized IP. > ex: > > hosts_accept_relay = localhost:192.168.0.0/24 ^^^ why t

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
And if one do: procedure example is type C_String_Type is array (1..10) of Character; a : C_String_type; begin a := ('1','2','3','4','5','6','7','8','9','A','B','C','D'); end example; then when compiling: % gnatmake example.adb gnatgcc -c example.adb example.

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
;Standard.integer" defined at line 5 example.adb:28:07: warning: "constraint_error" will be raised at run time gnatbind -x example.ali gnatlink example.ali And if one ignore the wranings and run the program: % ./example a: 123456789 raised CONSTRAINT_ERROR : example.adb:26 So as the compiler said the code would not run without a constraint error being raised at line 26 which is the faulty code. Preben Randhol -- «For me, Ada95 puts back the joy in programming.»

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
And if one do: procedure example is type C_String_Type is array (1..10) of Character; a : C_String_type; begin a := ('1','2','3','4','5','6','7','8','9','A','B','C','D'); end example; then when compiling: % gnatmake example.adb gnatgcc -c example.adb example

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
Standard.integer" defined at line 5 example.adb:28:07: warning: "constraint_error" will be raised at run time gnatbind -x example.ali gnatlink example.ali And if one ignore the wranings and run the program: % ./example a: 123456789 raised CONSTRAINT_ERROR :

Re: the su - user thread [Potential Debian Security Issue]

2002-01-22 Thread Preben Randhol
Adam Warner <[EMAIL PROTECTED]> wrote on 22/01/2002 (10:00) : > Here's how you can reproduce it (running Debian unstable): > > 1. Log in as root > 2. su - user if you here write whoami instead of starting X what does it say? Preben -- () Join the worldwide campaign to protect fundamental hum

Re: the su - user thread [Potential Debian Security Issue]

2002-01-22 Thread Preben Randhol
Adam Warner <[EMAIL PROTECTED]> wrote on 22/01/2002 (10:00) : > Here's how you can reproduce it (running Debian unstable): > > 1. Log in as root > 2. su - user if you here write whoami instead of starting X what does it say? Preben -- () Join the worldwide campaign to protect fundamental hu

Re: protection against buffer overflows

2002-01-19 Thread Preben Randhol
Tim Uckun <[EMAIL PROTECTED]> wrote on 19/01/2002 (10:16) : > > >Has anyone any interesting comments about theses methods ? > > There are also alternative languages like cyclone > http://www.research.att.com/projects/cyclone/ (which is based on C) and of > course you could use a high level angu

Re: protection against buffer overflows

2002-01-19 Thread Preben Randhol
Tim Uckun <[EMAIL PROTECTED]> wrote on 19/01/2002 (10:16) : > > >Has anyone any interesting comments about theses methods ? > > There are also alternative languages like cyclone > http://www.research.att.com/projects/cyclone/ (which is based on C) and of > course you could use a high level ang

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Oystein Viggen <[EMAIL PROTECTED]> wrote on 14/01/2002 (17:14) : > > Note the |, thats an OR. My rule kills all html-mail but also (I > believe), all that unintelligible Korean spam. Ah I missed that. Preben -- () Join the worldwide campaign to protect fundamental human rights. '||} {||'

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Oystein Viggen <[EMAIL PROTECTED]> wrote on 14/01/2002 (15:24) : > * [Oystein Viggen] > > :0 > * ^Content-Type: text/html|\ > ^Subject:.*=\?ks_c_5601-1987\? > Spambox Why not simply: :0 * ^Content-Type: text/html Spambox I have never gotten a html mail worth reading. Preben -- «.., chaos is

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Dietmar Braun <[EMAIL PROTECTED]> wrote on 14/01/2002 (12:21) : > Anybody residing near to the korean border who can take the great scissor > and cut off the cable from korea to the civilized world? > > Nothing but spam coming from this foolish idiots... Well if one should do like you say then o

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Oystein Viggen <[EMAIL PROTECTED]> wrote on 14/01/2002 (17:14) : > > Note the |, thats an OR. My rule kills all html-mail but also (I > believe), all that unintelligible Korean spam. Ah I missed that. Preben -- () Join the worldwide campaign to protect fundamental human rights. '||} {||'

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Oystein Viggen <[EMAIL PROTECTED]> wrote on 14/01/2002 (15:24) : > * [Oystein Viggen] > > :0 > * ^Content-Type: text/html|\ > ^Subject:.*=\?ks_c_5601-1987\? > Spambox Why not simply: :0 * ^Content-Type: text/html Spambox I have never gotten a html mail worth reading. Preben -- «.., chaos is

Re: Once again: Spam (from hananet.net, korea)

2002-01-14 Thread Preben Randhol
Dietmar Braun <[EMAIL PROTECTED]> wrote on 14/01/2002 (12:21) : > Anybody residing near to the korean border who can take the great scissor > and cut off the cable from korea to the civilized world? > > Nothing but spam coming from this foolish idiots... Well if one should do like you say then

Re: I've been hacked by DevilSoul

2002-01-11 Thread Preben Randhol
rom backup is the only secure ^ This is not safe at all if you mean reinstall programs too. You should reinstall programs from the net/CD distro and update all programs that has security fixes. You should only install user files and not conf

Re: I've been hacked by DevilSoul

2002-01-11 Thread Preben Randhol
rom backup is the only secure ^ This is not safe at all if you mean reinstall programs too. You should reinstall programs from the net/CD distro and update all programs that has security fixes. You should only install user files and not conf

Re: mounting /tmp noexec

2002-01-03 Thread Preben Randhol
Tollef Fog Heen <[EMAIL PROTECTED]> wrote on 03/01/2002 (18:09) : > * Preben Randhol > | what happens if you do: > | > | sh -x /tmp/a > > It works just fine. That is part of why noexec is pointless. Just as I thought. Preben -- () Join the worldwide campaign to p

Re: mounting /tmp noexec

2002-01-03 Thread Preben Randhol
Tollef Fog Heen <[EMAIL PROTECTED]> wrote on 03/01/2002 (18:09) : > * Preben Randhol > | what happens if you do: > | > | sh -x /tmp/a > > It works just fine. That is part of why noexec is pointless. Just as I thought. Preben -- () Join the worldwide campaign to p

Re: mounting /tmp noexec

2002-01-03 Thread Preben Randhol
Alexey Vyskubov <[EMAIL PROTECTED]> wrote on 03/01/2002 (09:23) : > > [terrapin] 08:46:52 ~$ sudo mount -o remount,noexec /tmp > Password: > [terrapin] 08:47:11 ~$ touch /tmp/a > [terrapin] 08:47:14 ~$ chmod +x /tmp/a > [terrapin] 08:47:17 ~$ ls -l /tmp/a > -rwxr-xr-x1 alexey alexey

Re: mounting /tmp noexec

2002-01-03 Thread Preben Randhol
Alexey Vyskubov <[EMAIL PROTECTED]> wrote on 03/01/2002 (09:23) : > > [terrapin] 08:46:52 ~$ sudo mount -o remount,noexec /tmp > Password: > [terrapin] 08:47:11 ~$ touch /tmp/a > [terrapin] 08:47:14 ~$ chmod +x /tmp/a > [terrapin] 08:47:17 ~$ ls -l /tmp/a > -rwxr-xr-x1 alexey alexey

Re: Exim mail

2001-12-16 Thread Preben Randhol
Daniel Rychlik <[EMAIL PROTECTED]> wrote on 15/12/2001 (12:34) : > Thanks for the reply on this. I just found the header info. It does appear > that he sent it from a remailer. Thanks again, Sorry for the stupidity. You may want to read: http://mail-abuse.org/tsi/ though. -- () Join

Re: Exim mail

2001-12-16 Thread Preben Randhol
Daniel Rychlik <[EMAIL PROTECTED]> wrote on 15/12/2001 (12:34) : > Thanks for the reply on this. I just found the header info. It does appear > that he sent it from a remailer. Thanks again, Sorry for the stupidity. You may want to read: http://mail-abuse.org/tsi/ though. -- () Joi