On Wed, 2020-04-08 at 13:55 -0400, Allan Streib wrote:
> My (default) smtpd.conf says:
>
> listen on lo0
>
> So how might that be remotely exploitable?
I can disable all network connections on an unpatched Windows 95
laptop - oh, this would make it s secure ... Hint: a server,
which provid
On 09.04.20 11:55, Rudolf Leitgeb wrote:
> As soon as your server does anything useful, it will
> present an attack vector to the outside world, and one needs to
> be aware of it.
>
just to add to your argument: your server does not even have to do
anything ... the interface driver or just the tc
On Wed, Apr 08, 2020 at 07:03:29PM +0200, Sigi Rudzio wrote:
> Am Mi., 8. Apr. 2020 um 08:37 Uhr schrieb Otto Moerbeek :
> >
> > On Wed, Apr 08, 2020 at 01:11:29AM +0200, Sigi Rudzio wrote:
> >
> > > Hello misc@,
> > >
> > > while testing the FFS2 patches by otto@ I noticed that I was unable
> > >
6.7-BETA (today's snapshot).
Lenovo ThinkPad P1 2nd gen with two NVMe inside.
Windows on /dev/sd1
Installed OpenBSD on /dev/sd0 (a 1TB Samsung 970 pro)
/dev/sd0 has had FreeBSD and Arch Linux on it successfully.
Installed via USB just fine. Fresh [W]hole disk install.
Just default install, no en
On 2020-04-09 10:55, Rudolf Leitgeb wrote:
> My point was, that security is an ongoing effort. Flaws and new
> exploit venues are discovered. There will be different numbers
> of flaws for different operating systems, but none remains unscathed
> for years. As soon as your server does anything usef
On Thu, Apr 09, 2020 at 11:39:08PM +1200, Derek Sivers wrote:
> 6.7-BETA (today's snapshot).
>
> Lenovo ThinkPad P1 2nd gen with two NVMe inside.
>
> Windows on /dev/sd1
> Installed OpenBSD on /dev/sd0 (a 1TB Samsung 970 pro)
> /dev/sd0 has had FreeBSD and Arch Linux on it successfully.
>
> Ins
On Tue, Apr 07, 2020 at 11:29:50PM -0400, Daniel Jakots wrote:
> On Wed, 8 Apr 2020 13:12:54 +1000, Stuart Longland
> wrote:
>
> > Silly question… how do you install the dependencies of a port from
> > binaries automatically?
>
> https://man.openbsd.org/bsd.port.mk#FETCH_PACKAGES but it doesn't
> Conversely, if everything was easily hackable then we probably wouldn't use
> computers, at all.
Being hacked is a risk everybody is ready to accept, some knowingly, some
unknowingly.
There may be people here, who have never done business with any of these
entities
listed here, but they are ce
On Thu, Apr 09, 2020 at 02:25:49PM +0200, Otto Moerbeek wrote:
> You did not tell if you were using EFI or MBR boot. You couldn try the
> other one. I never got my X1 6th gen booting with EFI boot.
Thank you Otto, and sorry everyone else. I thought I had tried all of
the BIOS settings. You're ri
> Now this whole debate boils down to "how much effort is someone willing to
> invest
> into hacking Cord's computers?", and that's something I can't answer.
And how competent Cord is at defending his computer because they may not be able
to if he is competent enough, which is my point; It is
@Gregory: the configuration is just an example, is not a LAB but i changed IP
information for privacy
@Claudio: Yes there are lots of ways to achieve this, for example "depends on"
options that annonunce a route via BGP only if interface link is up (in terms
of carp MASTER)
let me be more clear
Are you using PF rules with "overload"? If so, try removing that.
On 2020-03-06, Jyri Hovila [Turvamies.fi] wrote:
> Hi!
>
>> Thanks, and sorry I missed in your previous mail that things were working
>> OK before. In which case it doesn't sound like a configuration problem
>> which I wasn't sur
On Thu, Apr 09, 2020 at 04:24:34PM +0100, Kevin Chadwick wrote:
>
> > Now this whole debate boils down to "how much effort is someone willing to
> > invest
> > into hacking Cord's computers?", and that's something I can't answer.
>
> And how competent Cord is at defending his computer because t
Hello Misc,
I noticed Ethernet channel "Marvell Yukon 88E8072" freezes within a
minute unless network speed is set to 100baseTX in "hostname.msk0":
media 100baseTX
dhcp
During installation the "msk0" got DHCP address spuriously,
ifconfig down/up does not help.
FreeBSD has had the same proble
most of you already know this.
tldr - inferring system requirements from the "user-agent" http header
is useless/dangerous/silly, and your site/page stop (nothing new
here...not sure why certain sites trust the user-provided data).
This is not OpenBSD specific, but hopefully helpful for anyone wa
> > change target. Then a victim that describe a situation outside of this
> > schema most
> > probably will be classified as a paranoid or a troll.
>
> Do you have reason to believe, that this evil person has control over your
> hardware
> deliveries? Do you have some procurement process in pl
16 matches
Mail list logo