Re: Subject: IMPORTANT: Mandatory password and ssh key change by 2011-11-30

2011-10-13 Thread Callum Lerwick
On Thu, Oct 13, 2011 at 11:25 PM, Paul Wouters wrote: > On Thu, Oct 13, 2011 at 10:55:59PM -0500, Callum Lerwick wrote: > >> Its the only right way to do it. As a general rule, a private ssh key >> should NEVER be transferred off the machine it was generated on. > > Ye

Re: Subject: IMPORTANT: Mandatory password and ssh key change by 2011-11-30

2011-10-13 Thread Callum Lerwick
On Thu, Oct 13, 2011 at 11:18 PM, Toshio Kuratomi wrote: > On Thu, Oct 13, 2011 at 10:55:59PM -0500, Callum Lerwick wrote: >> On Thu, Oct 13, 2011 at 12:18 PM, Adam Williamson >> wrote: >> > On Thu, 2011-10-13 at 10:43 +0200, Gerd Hoffmann wrote: >> >> One

Re: Subject: IMPORTANT: Mandatory password and ssh key change by 2011-11-30

2011-10-13 Thread Callum Lerwick
On Thu, Oct 13, 2011 at 12:18 PM, Adam Williamson wrote: > On Thu, 2011-10-13 at 10:43 +0200, Gerd Hoffmann wrote: >> One ssh key per machine makes alot more sense.  For outgoing ssh >> connections from -- say -- shell.fedoraproject.org I wouldn't just copy >> my private key from my laptop but gen

Re: Subject: IMPORTANT: Mandatory password and ssh key change by 2011-11-30

2011-10-13 Thread Callum Lerwick
On Thu, Oct 13, 2011 at 2:45 AM, Callum Lerwick wrote: > Personally I've been generating passwords with "pwgen -s 12 1", or for > really important stuff (like online banking), "pwgen -s 12 1". Erk, that should be "pwgen -s -y 12" for the important stuff.

Re: Subject: IMPORTANT: Mandatory password and ssh key change by 2011-11-30

2011-10-13 Thread Callum Lerwick
On Wed, Oct 12, 2011 at 1:37 PM, Przemek Klosowski wrote: > Length beats out larger character set, which is nicely illustrated by > the XKCD cartoon > > http://imgs.xkcd.com/comics/password_strength.png Be careful, that xkcd strip glosses over how that phrase was actually generated. If you just p

Re: noexec on /dev/shm

2011-01-19 Thread Callum Lerwick
On Thu, Dec 23, 2010 at 11:26 AM, drago01 wrote: > Well /tmp should be mounted tmpfs anyway (I have been doing this for > years and it is working just fine). > tmp isn't a persistent storage so it makes a lot of sense, and it is > *not* a dumping ground for giant files (apps that try to do that ar

Re: openjpeg-1.4, abi break

2011-01-04 Thread Callum Lerwick
On Mon, Jan 3, 2011 at 2:59 PM, Rex Dieter wrote: > I plan on importing openjpeg-1.4 into rawhide soonish (say early next week), > which involves an abi break.  Affected packages that will require rebuilding > include: > > blender > blenderplayer > freeimage > gdcm > koffice > openslide > poppler

Re: [HEADS-UP] Moving /var/run and /var/lock to tmpfs in Rawhide

2010-11-24 Thread Callum Lerwick
On Tue, Nov 23, 2010 at 5:15 PM, Nicholas Miell wrote: > On 11/23/2010 02:54 PM, Lennart Poettering wrote: >> On Tue, 23.11.10 13:41, Nicholas Miell (nmi...@gmail.com) wrote: >>> On 11/23/2010 12:48 PM, Lennart Poettering wrote: Heya! I hereby want to let everybody know that in the