Hi Lars,
thanks for your answer.
> Lars Ellenberg <[EMAIL PROTECTED]> [2004-01-10 17:21]:
>
> / 2004-01-10 15:03:46 +0100
> \ Lukas Ruf:
> >
> > I fiddled around with 'edit-key' -- but could not manage to get rid of
> > the duplicated user ID.
> >
> > So, my question: does anyone know
> > a) what
All Release.gpg files except those from woody have disappeared
from the ftp mirrors last night. The files themselves are still there, but
they are all empty. Therefore, it is currently not possible to verify the
authenticity of all packages on the mirror network.
Could someone knowledgable please
On Wed, Jan 14, 2004 at 12:27:41AM -0700, Ryan Bradetich wrote:
> Actually the tigerrc is already loaded when the script execute ... I
> have tested a small patch that should do what you want.
>
> Javi,
>
> Do you see any problem with this method? If not I can work on a patch
> that will update
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dear all,
It is an issue that's been bugging me for some time, and while I have
tried to find good reasons, I have not, so I might as well write them
down. I have a lot of respect for the security team, and I don't think
I have anything to contribu
Kjetil Kjernsmo wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dear all,
It is an issue that's been bugging me for some time, and while I have
tried to find good reasons, I have not, so I might as well write them
down. I have a lot of respect for the security team, and I don't think
Ian Brayshaw wrote:
On Tuesday 13 January 2004 9:29 am, Christian Schuerer wrote:
Since updating my debian server yesterday I get the following error
messages every hour (generated by logcheck):
Jan 13 06:25:01 asterix su[5741]: + ??? root:nobody
I now get similar messages in my log
On Thursday 15 January 2004 17:33, Rich Puhek wrote:
> Depending on what you're doing, pinning actually can work quite well.
Yup, and I do it on my workstation (not that I understand it, it is
rather magic to me).
> Snort is related to you overall system security, yes, but new
> releases of
Kjetil Kjernsmo wrote:
On Thursday 15 January 2004 17:33, Rich Puhek wrote:
Depending on what you're doing, pinning actually can work quite well.
Yup, and I do it on my workstation (not that I understand it, it is
rather magic to me).
Snort is related to you overall system securi
Dear all,
Can anybody explain the following?
My virus scanner reported the following after the scan tonight:
/usr/bin/ssh-copy-id
Found trojan or variant UNIX/Exploit-SSHIDEN !!!
Please send a copy of the file to Network Associates
The file has been renamed.
I u
I copied the binary from a friend's woody box, and ran
f-prot against it, and didn't find anything. I've
included the md5 of hs binary as well.
$ f-prot ./ssh-copy-id
Virus scanning report - 15 January 2004 @ 12:08
F-PROT ANTIVIRUS
Program version: 4.2.1
Engine version: 3.13.4
VIRUS SIGNATURE
Like some others who have mentioned this in the past, I would like
to mirror security.debian.org for internal use due to the large
number of Debian boxes at my company and the inconsistent access
to the important updates residing on that server.
Ideally, I'd like to set up cron to rsync the upda
Hy,
I have the same file on my woody box.
Don't worry about it:
1.
f-prot /usr/bin/ssh-copy-id
Virus scanning report - 15. January 2004 21:26
F-PROT 3.12d
SIGN.DEF created 9. January 2004
SIGN2.DEF created 9. January 2004
MACRO.DEF created 12. January 2004
Search: /usr/
Hi Guys
Am running 2.4.22 kernel on to Debian boxes and notice today that if I
run an lsattr in
the /bin and /sbin dir some of the files are coming up with strange
attributes.
Any ideas why ?> Or has the box more than lightly been exploited ?
Any help would be greatly appreciated at this time.
On Thu, Jan 15, 2004 at 03:45:05PM +0200, Craig Schneider wrote:
>Hi Guys
>
>Am running 2.4.22 kernel on to Debian boxes and notice today that if I
>run an lsattr in
>the /bin and /sbin dir some of the files are coming up with strange
>attributes.
>
>Any ideas why ?> Or has the box more than lightl
On Tuesday 13 January 2004 17:17, Marcus Williams wrote:
> On 13/01/2004, Bill wrote:
> > - make sure your kernel support encrypted loopback & your
> > encryption of choice - configure a crypto loop to your tape
> > device
> >
> > losetup -e twofish /dev/loop0 /dev/nst0
>
> Well, you learn a new th
Yes, 'su' isn't called in the cron files, it's used to run the commands in
the cron files as the specified user.
So for example, my /etc/cron.d/mrtg contains:
0-55/5 ** * * rootif [ -x /usr/bin/mrtg ] && [ -r
/etc/mrtg.cfg ]; then /usr/bin/mrtg /etc/mrtg.cfg
/var/log/mrtg/mrtg
On Thu, 2004-01-15 at 12:34, Klaus Holler wrote:
> > Well, you learn a new thing every day. Never thought you could do
> > that! What happens with media errors on the tape when you read it
> > back?
>
> depends on the cipher mode you use:
... snip ...
> if using CBC (cipher block chaining mode) y
Hi Lars,
thanks for your answer.
> Lars Ellenberg <[EMAIL PROTECTED]> [2004-01-10 17:21]:
>
> / 2004-01-10 15:03:46 +0100
> \ Lukas Ruf:
> >
> > I fiddled around with 'edit-key' -- but could not manage to get rid of
> > the duplicated user ID.
> >
> > So, my question: does anyone know
> > a) what
All Release.gpg files except those from woody have disappeared
from the ftp mirrors last night. The files themselves are still there, but
they are all empty. Therefore, it is currently not possible to verify the
authenticity of all packages on the mirror network.
Could someone knowledgable please
On Wed, Jan 14, 2004 at 12:27:41AM -0700, Ryan Bradetich wrote:
> Actually the tigerrc is already loaded when the script execute ... I
> have tested a small patch that should do what you want.
>
> Javi,
>
> Do you see any problem with this method? If not I can work on a patch
> that will update
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dear all,
It is an issue that's been bugging me for some time, and while I have
tried to find good reasons, I have not, so I might as well write them
down. I have a lot of respect for the security team, and I don't think
I have anything to contribu
Kjetil Kjernsmo wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dear all,
It is an issue that's been bugging me for some time, and while I have
tried to find good reasons, I have not, so I might as well write them
down. I have a lot of respect for the security team, and I don't think
I h
Ian Brayshaw wrote:
On Tuesday 13 January 2004 9:29 am, Christian Schuerer wrote:
Since updating my debian server yesterday I get the following error
messages every hour (generated by logcheck):
Jan 13 06:25:01 asterix su[5741]: + ??? root:nobody
I now get similar messages in my logs afte
On Thursday 15 January 2004 17:33, Rich Puhek wrote:
> Depending on what you're doing, pinning actually can work quite well.
Yup, and I do it on my workstation (not that I understand it, it is
rather magic to me).
> Snort is related to you overall system security, yes, but new
> releases of
Kjetil Kjernsmo wrote:
On Thursday 15 January 2004 17:33, Rich Puhek wrote:
Depending on what you're doing, pinning actually can work quite well.
Yup, and I do it on my workstation (not that I understand it, it is
rather magic to me).
Snort is related to you overall system security, ye
Dear all,
Can anybody explain the following?
My virus scanner reported the following after the scan tonight:
/usr/bin/ssh-copy-id
Found trojan or variant UNIX/Exploit-SSHIDEN !!!
Please send a copy of the file to Network Associates
The file has been renamed.
I use
I copied the binary from a friend's woody box, and ran
f-prot against it, and didn't find anything. I've
included the md5 of hs binary as well.
$ f-prot ./ssh-copy-id
Virus scanning report - 15 January 2004 @ 12:08
F-PROT ANTIVIRUS
Program version: 4.2.1
Engine version: 3.13.4
VIRUS SIGNATURE
Like some others who have mentioned this in the past, I would like
to mirror security.debian.org for internal use due to the large
number of Debian boxes at my company and the inconsistent access
to the important updates residing on that server.
Ideally, I'd like to set up cron to rsync the upda
Hy,
I have the same file on my woody box.
Don't worry about it:
1.
f-prot /usr/bin/ssh-copy-id
Virus scanning report - 15. January 2004 21:26
F-PROT 3.12d
SIGN.DEF created 9. January 2004
SIGN2.DEF created 9. January 2004
MACRO.DEF created 12. January 2004
Search: /usr/bin
On Thu, Jan 15, 2004 at 03:45:05PM +0200, Craig Schneider wrote:
>Hi Guys
>
>Am running 2.4.22 kernel on to Debian boxes and notice today that if I
>run an lsattr in
>the /bin and /sbin dir some of the files are coming up with strange
>attributes.
>
>Any ideas why ?> Or has the box more than lightl
On Tuesday 13 January 2004 17:17, Marcus Williams wrote:
> On 13/01/2004, Bill wrote:
> > - make sure your kernel support encrypted loopback & your
> > encryption of choice - configure a crypto loop to your tape
> > device
> >
> > losetup -e twofish /dev/loop0 /dev/nst0
>
> Well, you learn a new th
Yes, 'su' isn't called in the cron files, it's used to run the commands in
the cron files as the specified user.
So for example, my /etc/cron.d/mrtg contains:
0-55/5 ** * * rootif [ -x /usr/bin/mrtg ] && [ -r
/etc/mrtg.cfg ]; then /usr/bin/mrtg /etc/mrtg.cfg
/var/log/mrtg/mrtg.log
On Thu, 2004-01-15 at 12:34, Klaus Holler wrote:
> > Well, you learn a new thing every day. Never thought you could do
> > that! What happens with media errors on the tape when you read it
> > back?
>
> depends on the cipher mode you use:
... snip ...
> if using CBC (cipher block chaining mode) y
Hi Guys
Am running 2.4.22 kernel on to Debian boxes and notice today that if I
run an lsattr in
the /bin and /sbin dir some of the files are coming up with strange
attributes.
Any ideas why ?> Or has the box more than lightly been exploited ?
Any help would be greatly appreciated at this time.
34 matches
Mail list logo
