INSCRIPCIONES ABIERTAS: CONGRESO NACIONAL PARA SERVIDORES PÚBLICOS

2010-06-22 Thread Gabriela Ruiz
PMS DE MC XICO PRESENTA: Congreso Nacional para Servidores PC:blicos 29-30 De Julio 2010/ MC)xico D.F. PMS CapacitaciC3n Efectiva de MC)xico B. tiene el placer de invitarle a participar en este magno evento . Nuestro congreso cuenta con un exclusivo programa que le brindara herramientas

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Martin Schröder
2010/6/22 mark hellewell : > "Companies who release IT products with security vulnerabilities > should be open to claims for compensation by consumers", apparently. Doesn't seem like Apple cares. Best Martin

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Manuel Ravasio
> Nobody at OpenBSD would claim that they could guarantee > that there is no exploit waiting to be found in the OS. > They just make better efforts than anybody else to reduce > the chances. > The errata page shows that they are forever responding to > possible problems publically rather than s

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Jacob Yocom-Piatt
mark hellewell wrote: http://www.news.com.au/technology/no-anti-virus-software-no-internet-connecti on/story-e6frfro0-1225882656490 "Companies who release IT products with security vulnerabilities should be open to claims for compensation by consumers", apparently. Illegal to run without antivi

Re: Intel PRO/1000 QP on Dell R610 and OpenBSD 4.7

2010-06-22 Thread Frédéric URBAN
Le 18/06/2010 16:43, w...@wootsie.com a icrit : The same issue here - with different hardware - Supermicro X8DTU and it's built-in dual Intel 82576 nics. Running 4.7-patch. Fails to initialize most of the time at boot (always em1), now and then it works (initializes and gets link after boot).

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Adam M. Dutko
> when ford sold the pinto with the 'exploding' gas tank, it just paid money > out to settle claims after many people were burned to death. although i > don't believe there is a precedent for it, possibly until now, many software > companies have been doing the same thing: selling crap products tha

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Jan Stary
> one way to look at the explosion of software development in the past > 30-40 years is that it is an industry lacking sufficient regulation and > thus a very lucrative area to do business. because there is no > regulation you can get some random idiot in whatever country to write > your co

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Chris Bennett
Adam M. Dutko wrote: when ford sold the pinto with the 'exploding' gas tank, it just paid money out to settle claims after many people were burned to death. although i don't believe there is a precedent for it, possibly until now, many software companies have been doing the same thing: selling cr

Re: Any ideas on this crash?

2010-06-22 Thread Tobias Ulmer
On Mon, Jun 21, 2010 at 03:41:21PM -0400, STeve Andre' wrote: >My package builder died this weekend when I couldn't get to it. > I may have hardware problems--I'm not sure. Below is the relevent > data typed in. Any ideas? This is an i386-current system compiled > on June 15th. > > Thanks,

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Stefan Wollny
>> one way to look at the explosion of software development in the past >> 30-40 years is that it is an industry lacking sufficient regulation and >> thus a very lucrative area to do business. because there is no >> regulation you can get some random idiot in whatever country to write >> yo

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Adam M. Dutko
> I disagree with this. How many times a year are motor vehicles recalled? >> >> They don't replace the car, they fix it. > Why can't defective software get a recall or a hefty fine if they refuse to > fix it? This is a major reason I walked away from the paid software world, > impossible to pay fo

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Marco Peereboom
On Tue, Jun 22, 2010 at 08:44:45AM -0400, Adam M. Dutko wrote: > > when ford sold the pinto with the 'exploding' gas tank, it just paid money > > out to settle claims after many people were burned to death. although i > > don't believe there is a precedent for it, possibly until now, many software

Unable to ping routes learnt via BGP (OpenBSD 4.7)

2010-06-22 Thread rhsv6
Hello List, I'm sure I'm missing something fairly obvious but don't know where to start. First, forgive my ASCII art : [BSD A] <--> [PEER A] ^ | v [BSD B] <--> [PEER B] The following works OK : - eBGP - iBGP - Routing to and from machines behind the BSD boxes - Pinging internet routes learn

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Adam M. Dutko
> This is obviously not the intent. The intent is to have software that > is reasonably crafted by software engineers. Not some slapped together > turd with peanuts from different development teams. I agree it shouldn't be slapped together but you strike upon an interesting debate... Should de

Re: Unable to ping routes learnt via BGP (OpenBSD 4.7)

2010-06-22 Thread Frans Haarman
On 22 June 2010 18:55, wrote: > Hello List, > > I'm sure I'm missing something fairly obvious but don't know where > to start. > > > First, forgive my ASCII art : > > [BSD A] <--> [PEER A] > ^ > | > v > [BSD B] <--> [PEER B] > > > The following works OK : > - eBGP > - iBGP > - Routing to and from

openBSD hangs on install

2010-06-22 Thread Jason Wagstaff
I have a sparc64 t2000+ box and during installation of release 4.7 it hangs while installing the sets. When it hangs it is at a random spot each time. I have tried to install from cd, ftp, http and a local http mirror. All of them fail at some point during the installation of the sets. Any

Re: openBSD hangs on install

2010-06-22 Thread Tomas Bodzar
Did you try latest snapshot? Just to be sure that there is not some "repair" available or that problem is still same. On Tue, Jun 22, 2010 at 7:43 PM, Jason Wagstaff wrote: > I have a sparc64 t2000+ box and during installation of release 4.7 B it > hangs while installing the sets. B When it hangs

Re: openBSD hangs on install

2010-06-22 Thread Neal Hogan
On Tue, Jun 22, 2010 at 12:43 PM, Jason Wagstaff wrote: > I have a sparc64 t2000+ box and during installation of release 4.7 it > hangs while installing the sets. When it hangs it is at a random spot > each time. I have tried to install from cd, ftp, http and a local > http mirror. All of th

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread VICTOR TARABOLA CORTIANO
> http://www.news.com.au/technology/no-anti-virus-software-no-internet-connecti > on/story-e6frfro0-1225882656490 > > "Companies who release IT products with security vulnerabilities > should be open to claims for compensation by consumers", apparently. > > Illegal to run without antivirus ... disc

Re: openBSD hangs on install

2010-06-22 Thread Neal Hogan
On Tue, Jun 22, 2010 at 12:53 PM, Neal Hogan wrote: > On Tue, Jun 22, 2010 at 12:43 PM, Jason Wagstaff wrote: >> I have a sparc64 t2000+ box and during installation of release 4.7 it >> hangs while installing the sets. When it hangs it is at a random spot >> each time. I have tried to install

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Marco Peereboom
On Tue, Jun 22, 2010 at 01:23:14PM -0400, Adam M. Dutko wrote: > > This is obviously not the intent. The intent is to have software that > > is reasonably crafted by software engineers. Not some slapped together > > turd with peanuts from different development teams. > > > I agree it shouldn't

Re: Processeur Atom ?

2010-06-22 Thread Henning Brauer
* E.T [2010-06-12 10:56]: > why pay 100dollars/month, 1200dollars/yaer for a server ???. because you get what you pay for. maintaining a sane & secure & reliable data center isn't exactly cheap. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service

Re: Processeur Atom ?

2010-06-22 Thread Henning Brauer
* Tomas Bodzar [2010-06-12 11:55]: > See tables with consumption > http://www.thinkwiki.org/wiki/Intel_Mobile_Pentium_III-M (especially > ultra-low-voltage models). And it's far more powerful then Atom. looking at my PIII-based (yes, kinda the last ones, onethousandtwohundredsomething mhz) storag

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Chris Bennett
Marco Peereboom wrote: Microsoft spends $10B on R&D. That is nearly the ENTIRE budget of NASA. They are the classic example of organizations that are completely out of control and rely entirely on some process that is "good enough". Anyone who has written code that directly interacts with the

Re: Processeur Atom ?

2010-06-22 Thread E.T
Yes Small webiste personal = server at home big project = datacenter We agree >> why pay 100dollars/month, 1200dollars/yaer for a server ???. > > because you get what you pay for. > > maintaining a sane & secure & reliable data center isn't exactly > cheap. -- @plus

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread E.T
One hangover :) On Tue, 22 Jun 2010 13:24:43 -0500, Chris Bennett wrote: > Marco Peereboom wrote: >> >> >> Microsoft spends $10B on R&D. That is nearly the ENTIRE budget of NASA. >> They are the classic example of organizations that are completely out of >> control and rely entirely on some pro

Re: [openbsd] fwd: [dera...@cvs.openbsd.org: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/]

2010-06-22 Thread pourlori
Hello misc, I was wondering if these accusations against OpenBSD were true, I doubt he is lying, maybe he is just not telling the whole truth. http://www.uaoug.org.ua/archive/msg01088.html The first part is irrelevant, Linux may have implemented the sysctl switch before OpenBSD. However, thei

Re: Processeur Atom ?

2010-06-22 Thread Henning Brauer
* Nick [2010-06-13 18:43]: > >> that might be (I am not convinced tho) with the electricity price in > >> the US, but certainly isn't universal. > > The calculations are. $/kWh isn't... > Cost of money (i.e., interest rate), watts saved (if any), cost of a > kWh, initial costs, etc. Plug in yo

Re: Processeur Atom ?

2010-06-22 Thread Henning Brauer
* Stuart Henderson [2010-06-12 23:59]: > On 2010-06-12, Henning Brauer wrote: > > * Nick [2010-06-11 12:55]: > >> If you want low power consumption and low cost, I'd suggest a small > >> PIII or Celeron based system, hard to beat for the price (usually, > >> free!). IF the new, cool stuff has a

Re: [openbsd] fwd: [dera...@cvs.openbsd.org: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/]

2010-06-22 Thread Aaron Glenn
On Tue, Jun 22, 2010 at 7:26 PM, wrote: > > I do not wish to begin a troll-like thread, I just want the truth. yes you do; no you don't. no one cares; please go away.

Re: [openbsd] fwd: [dera...@cvs.openbsd.org: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/]

2010-06-22 Thread E.T
Quote from theo : - " our kernels have no bugs " On Tue, 22 Jun 2010 21:26:18 +0200, pourl...@hushmail.com wrote: > Hello misc, > > I was wondering if these accusations against OpenBSD were true, > I doubt he is lying, maybe he is just not telling the whole truth. > > http://www.uaoug.org.ua/

Re: openBSD hangs on install

2010-06-22 Thread Jason Wagstaff
Tomas, Yes it does work with the latest snapshot and the last snapshot before the 4.7 release. It just doesn't work with the released version of 4.7. It hangs most often during bas47.tgz and comp47.tgz. >From the local mirror using http it gets to base47.tgz and never starts the download. bsd

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Kevin Chadwick
On Tue, 22 Jun 2010 12:55:10 -0500 Marco Peereboom wrote: > Getting a bunch of kids from college with some degree or another > or outsourcing code is a recipe for disaster. If the developers have no > vested interest in the success of the code a project will nearly always > fail. And ironicall

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Theo de Raadt
> How come the university acting as proxy, got so much of OpenBSDs DARPA > grant? What was the justification? Graft, influence trading, and patronage are institutionalized in the relationship between universities, research grants, and the government in the US to roughly the same level as anywhere

Re: [openbsd] fwd: [dera...@cvs.openbsd.org: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/]

2010-06-22 Thread Nick Holland
pourl...@hushmail.com wrote: ...rehashed old crap... Anyone can say, "I want a car that flies" or "I want a non-polluting power source". There is no skill in this, by itself. The first bit of magic is coming up with a demonstration doing it. The next bit of magic is actually making it practi

Re: Processeur Atom ?

2010-06-22 Thread andres
Quoting Henning Brauer : > * Nick [2010-06-13 18:43]: >> >> that might be (I am not convinced tho) with the electricity price in >> >> the US, but certainly isn't universal. >> >> The calculations are. > > $/kWh isn't... > >> Cost of money (i.e., interest rate), watts saved (if any), cost of a >>

Re: pfctl: Cannot allocate memory and spamd-setup -bd

2010-06-22 Thread Stuart Henderson
On 2010-06-21, Ruy Bento wrote: > spamd_black=YES # set to YES to run spamd without greylisting you don't want blacklist-only mode if you have limited RAM.

Re: Processeur Atom ?

2010-06-22 Thread Henning Brauer
* and...@msu.edu [2010-06-23 01:34]: > Dell made some incredible Optiplex models that were white, using P3's > from 450MHz to about 1.2Ghz. I have several at work in production > service, and some of them are 10 years old. heck, I have systems that old in production. the point is - new setups us

Mailing list headers

2010-06-22 Thread Casey Allen Shobe
Why do the OpenBSD lists have no List-ID header? With the existing set of headers, it's impossible to filter the mail in gmail and other lame mail clients that don't allow arbitrary headers to be entered. I know, the world doesn't revolve around GMail, much as Google might like that to be the c

Re: openBSD hangs on install

2010-06-22 Thread patrick keshishian
On Tue, Jun 22, 2010 at 12:41 PM, Jason Wagstaff wrote: > Tomas, > > Yes it does work with the latest snapshot and the last snapshot before > the 4.7 release. It just doesn't work with the released version of > 4.7. Sounds similar to what was discussed here: http://www.mail-archive.com/misc@ope

Best Practices for tun(4) and gif(4)

2010-06-22 Thread Matt S
I apologize in advance if this subject has been addressed but I was unable to turn up anything from a Google search and the manual pages did not quite yield enough information. IPv6 needs aside, what is the primary difference between tun(4) and gif(4)? When is it preferrable to use gif(4) over tu

Re: Mailing list headers

2010-06-22 Thread patrick keshishian
On Tue, Jun 22, 2010 at 5:24 PM, Casey Allen Shobe wrote: > Why do the OpenBSD lists have no List-ID header? > > With the existing set of headers, it's impossible to filter the mail in gmail > and other lame mail clients that don't allow arbitrary headers to be entered. I use gmail and I filter

Re: Best Practices for tun(4) and gif(4)

2010-06-22 Thread Claudio Jeker
On Tue, Jun 22, 2010 at 08:05:31PM -0700, Matt S wrote: > I apologize in advance if this subject has been addressed but I was unable > to turn up anything from a Google search and the manual pages did not quite > yield enough information. IPv6 needs aside, what is the primary difference > between

Re: Mailing list headers

2010-06-22 Thread Todd Alan Smith
On Tue, Jun 22, 2010 at 10:11 PM, patrick keshishian wrote: > I use gmail and I filter on: > > B B B B Matches: to:(misc@openbsd.org) > > same for ports@, x11@, tech@, etc. It work just fine. > > --patrick Same here. Works great.

Re: OpenBSD sends RSTs for gratuitous traffic

2010-06-22 Thread Henning Brauer
* LeviaComm Networks NOC [2010-06-15 08:07]: > On 6/13/2010 9:50 PM, Patrick Coleman wrote: > >For some reason however, on one particular VLAN the switch is > >erroneously forwarding traffic from a particular host (203.135.184.10) > >to the OpenBSD box. The traffic is forwarded even when the desti

Re: pf.conf: "match" seems to clean up previous "log" statements.

2010-06-22 Thread Henning Brauer
* william dunand [2010-06-14 11:03]: > Dear list, > > I just noticed something strange with pf (4.7) and I wondered if > someone could help me to understand it. > > Let's consider the following simple rule-set: > > > set skip on lo0 > pass all > block out log on bge0 inet proto tcp from any to

Re: pf.conf: "match" seems to clean up previous "log" statements.

2010-06-22 Thread Henning Brauer
* Stuart Henderson [2010-06-15 13:00]: > That relates to logging only. 'match log' is special as it is > handled immediately when the match rule is processed. you wish. i wish. that is what it should be, but we didn't get this changed to that yet. i know of at least two little bugs with logging a

Re: Best Practices for tun(4) and gif(4)

2010-06-22 Thread Matt S
Claudio, Thank you for clarifying that. I somehow missed that tidbit. On Tue, Jun 22, 2010 at 9:11 PM, Claudio Jeker wrote: > On Tue, Jun 22, 2010 at 08:05:31PM -0700, Matt S wrote: > > I apologize in advance if this subject has been addressed but I was > unable > > to turn up anything from a G

Re: Any ideas on this crash?

2010-06-22 Thread STeve Andre'
On Tuesday 22 June 2010 09:20:12 Tobias Ulmer wrote: > On Mon, Jun 21, 2010 at 03:41:21PM -0400, STeve Andre' wrote: > >My package builder died this weekend when I couldn't get to it. > > I may have hardware problems--I'm not sure. Below is the relevent > > data typed in. Any ideas? This is

Re: Mailing list headers

2010-06-22 Thread Casey Allen Shobe
On Tuesday 22 June 2010 11:11:59 pm you wrote: > I use gmail and I filter on: > > Matches: to:(misc@openbsd.org) A mail that is sent to misc@openbsd.org, and CC to my personal address, should have the mailing list copy filtered to my misc folder, and the personal copy deliverede to my inbo

MIME support for mail

2010-06-22 Thread Predrag Punosevac
This question is inspired by the recent discussion on nail-devel mailing list http://sourceforge.net/mailarchive/forum.php?forum_name=nail-devel as well as a private discussion Martin, William, and me had, which you can read below. The only reason I personally chose to use nail over mail from

Re: Mailing list headers

2010-06-22 Thread Alexander Schrijver
On Wed, Jun 23, 2010 at 01:16:38AM -0400, Casey Allen Shobe wrote: > On Tuesday 22 June 2010 11:11:59 pm you wrote: > > I use gmail and I filter on: > > > > Matches: to:(misc@openbsd.org) > > A mail that is sent to misc@openbsd.org, and CC to my personal address, > should > have the mailing

Re: Mailing list headers

2010-06-22 Thread Casey Allen Shobe
On Wednesday 23 June 2010 02:10:56 am Alexander Schrijver wrote: > I use the Sender: header. How is it that you manage to filter on that in gmail? Because it's not documented anywhere that I can find, and the only undocumented parameters I could find are replyto, deliveredto, and listid. A sea