Re: Running another OS under OpenBSD

2008-12-22 Thread Douglas A. Tutty
On Tue, Dec 23, 2008 at 02:41:08AM +0100, Henning Brauer wrote: > * Jussi Peltola [2008-12-11 20:52]: > > On Thu, Dec 11, 2008 at 10:30:50AM -0800, Jeff_1981 wrote: > > That said, OpenBSD base services are extremely secure, compared to the > > competition, when properly configured and patched. N

Re: Running another OS under OpenBSD

2008-12-29 Thread Douglas A. Tutty
On Tue, Dec 23, 2008 at 5:34 AM, Henning Brauer wrote: > * Douglas A. Tutty [2008-12-23 05:45]: > > On Tue, Dec 23, 2008 at 02:41:08AM +0100, Henning Brauer wrote: > > > * Jussi Peltola [2008-12-11 20:52]: > > > > On Thu, Dec 11, 2008 at 10:30:50AM -0800, Jeff_1981

Re: Running another OS under OpenBSD

2008-12-31 Thread Douglas A. Tutty
On Tue, Dec 30, 2008 at 12:23:59PM +0100, Henning Brauer wrote: > * Douglas A. Tutty [2008-12-30 02:39]: > > > crappy applications are still crappy applications on OpenBSD, but > > > worse on pretty much any other OS. > > IIUC, with ports right now, to get sec

Re: TNC Packet Radio for OpenBSD

2009-02-26 Thread Douglas A. Tutty
On Thu, Feb 26, 2009 at 08:09:44AM +0100, Marc Balmer wrote: > Yes. The normal speed for packet radio over UHF/SHV is 1200 or 9600 > bps, over HF usually 300 bps. > > Heck, a very popular tranmission technique on HF, PSK31, uses 31 bps. Thats what, about the same speed as manual-key morse? Do

Re: About Xen: maybe a reiterative question but ..

2007-10-24 Thread Douglas A. Tutty
On Tue, Oct 23, 2007 at 08:35:39PM -0700, Ben Goren wrote: > On 2007 Oct 23, at 5:57 PM, [EMAIL PROTECTED] wrote: > > > Virtualization seems to have a lot of security benefits. > > ``Seems'' is the key word, here. > > On hardware like an IBM mainframe that can acutally support what's > necessar

sanely designed hardware?

2007-10-24 Thread Douglas A. Tutty
After enjoying the Xen thread, and the comments about the horrid mess that is x86 hardware design, I'm wondering what hardware on which OpenBSD will run _is_ well designed. Who makes a hardware architecture that is open (enough) that OpenBSD can run fully on it, that has good performance. I'm ass

Re: new dell install completed, but...

2007-10-24 Thread Douglas A. Tutty
On Wed, Oct 24, 2007 at 08:55:14PM -0400, Nick Holland wrote: > [EMAIL PROTECTED] wrote: > > I have a new Dell Optiplex 745 with an Intel Core 2 Duo. > > > > this system completed the install. Now on boot it hangs after: > > wskbd1: connecting to wsdisplay0 > > > > the only issue I had during i

Re: About Xen: maybe a reiterative question but ..

2007-10-25 Thread Douglas A. Tutty
On Wed, Oct 24, 2007 at 10:07:59PM -0500, Tony Abernethy wrote: > > only an idiot would think that separatey > > physical machines would NOT increase security > > Many IBM PCs vs IBM mainframe Apples and oranges. When people compare one box to many, they're talking about the same arch of box.

Re: About Xen: maybe a reiterative question but ..

2007-10-25 Thread Douglas A. Tutty
On Thu, Oct 25, 2007 at 08:37:02PM +1300, Richard Toohey wrote: > On 25/10/2007, at 8:28 PM, Richard Toohey wrote: > > >You are in charge of getting four ambassadors to a meeting. As > >well as making sure they are happy and fed, you are in charge of > >their security. > > > >All four are hat

Re: Network Time Synchronization using timed or ntpd or a Combination?

2007-10-25 Thread Douglas A. Tutty
On Thu, Oct 25, 2007 at 11:39:28AM -0600, Theo de Raadt wrote: > While those factors do exist, the biggest factor is probably that the > clocking parts are supplied by the lowest bidder, and there is no need > to be higher quality than the competition. Leaky capacitors? Who > cares. Tantalum a

Re: max number of groups

2007-10-25 Thread Douglas A. Tutty
On Thu, Oct 25, 2007 at 10:19:19AM -0600, Theo de Raadt wrote: > > I'm running an OpenBSD server with a lot of users and project groups. > > Each project has its own group or two to protect it's files from other > > users. > > > > How do you guys usually solve this problem when user needs to be

Re: max number of groups

2007-10-26 Thread Douglas A. Tutty
On Fri, Oct 26, 2007 at 09:55:13AM -0700, Ted Unangst wrote: > On 10/25/07, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > On Thu, Oct 25, 2007 at 10:19:19AM -0600, Theo de Raadt wrote: > > > Well, there is no solution. 16 was chosen a lot of years ago as a > > &

Re: max number of groups

2007-10-26 Thread Douglas A. Tutty
On Fri, Oct 26, 2007 at 03:38:51PM -0700, Darren Spruell wrote: > On 10/26/07, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > On Fri, Oct 26, 2007 at 09:55:13AM -0700, Ted Unangst wrote: > > > On 10/25/07, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > &g

Re: Non-x86

2007-10-28 Thread Douglas A. Tutty
On Sun, Oct 28, 2007 at 09:59:43AM -0400, Jeff Quast wrote: > On 10/26/07, Matthew Szudzik <[EMAIL PROTECTED]> wrote: > > > > Where are the choices for non-x86? > > > > > > The only remaining alternative is Sparc. Everything else is either old > > > (macppc) or expensive & unsupported (IA64). > > >

Re: About Xen: maybe a reiterative question but ..

2007-10-28 Thread Douglas A. Tutty
On Sun, Oct 28, 2007 at 05:34:17PM -0400, bofh wrote: > Why would you do that? Go read The Software Conspiracy. The author, > Minasi, got, on the record, interviews from VPs of development at > Microsoft, Netscape, Sun, Oracle, etc basically saying that they don't > give a shit about lousy soft

Re: About Xen: maybe a reiterative question but ..

2007-10-29 Thread Douglas A. Tutty
On Sun, Oct 28, 2007 at 10:31:31PM -0400, Nick Holland wrote: > It's a pretty simple concept, really. > A few years ago, I was giving a talk at a local high school. One of > the students asked me why his computer crashed a lot, "why can't they > build an operating system that doesn't crash?". I

Re: Non-x86

2007-10-29 Thread Douglas A. Tutty
On Mon, Oct 29, 2007 at 06:53:38PM +0200, Lars Nood??n wrote: > Martin SchrC6der wrote: > > 2007/10/26, Lars Noodin <[EMAIL PROTECTED]>: > >> Where are the choices for non-x86? > > > > The only remaining alternative is Sparc. Everything else is either old > > (macppc) or expensive & unsupported (I

Re: About Xen: maybe a reiterative question but ..

2007-10-29 Thread Douglas A. Tutty
On Mon, Oct 29, 2007 at 09:11:01AM -0400, bofh wrote: > On 10/29/07, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > So if nobody makes really good hardware then there's nobody to reward > > for it, so you end up buying bad hardware and rewarding the maker for > &g

Re: Bad MD5 of install42.iso

2007-11-01 Thread Douglas A. Tutty
On Thu, Nov 01, 2007 at 02:58:42PM +0100, Przemys?aw Pawe?czyk wrote: > > I dloaded the file from two different servers. > Here's what I got running md5sum: > > 1) MD5s for downloaded files > md5sum install42.iso > 03dc43a1d18d3003843a1f13b3861917 install42.iso > > Just for checking: > md5sum c

Re: When will OpenBSD support UTF8?

2007-11-02 Thread Douglas A. Tutty
On Fri, Nov 02, 2007 at 09:03:31PM +0100, Marc Espie wrote: > On Fri, Nov 02, 2007 at 07:41:35AM -0400, Juan Miscaro wrote: > > --- Paul Irofti <[EMAIL PROTECTED]> wrote: > > > On Thu, Nov 01, 2007 at 11:22:53AM -0400, Nick Guenther wrote: > > > > On 11/1/07, Juan Miscaro <[EMAIL PROTECTED]> wrote:

Re: What is the "nice" process state?

2007-11-03 Thread Douglas A. Tutty
On Sat, Nov 03, 2007 at 11:45:36AM +0100, Karel Kulhavy wrote: > >From the replies I got (none of which actually answered my question) it looks > like the "nice" state might be a state where the nice value != 0. Or less than > zero would also make sense. But it could be also that OpenBSD has the

Re: Open hardware.

2007-11-03 Thread Douglas A. Tutty
On Sat, Nov 03, 2007 at 07:47:27PM +, Adrian Fisher wrote: > How much modern computer hardware is fully open source or at least has fully > open interfaces that allow anyone to create device drivers? I Sun and > another company (Anglo-Italian firm Simply-RISC) released a processor based > on S

Re: When will OpenBSD support UTF8?

2007-11-05 Thread Douglas A. Tutty
On Mon, Nov 05, 2007 at 10:16:39PM +0100, Marc Espie wrote: > On Mon, Nov 05, 2007 at 04:06:21PM -0500, Juan Miscaro wrote: > > Thank you. I also have a need to be able to write UTF-8 on my non-X > > systems. Do you have any thoughts on the matter? > > We don't have a console that supports utf8

Re: avail mem is only 66% of real mem

2007-11-05 Thread Douglas A. Tutty
On Mon, Nov 05, 2007 at 07:55:42PM -0500, Wade, Daniel wrote: > -Original Message- > From: Ted Unangst [mailto:[EMAIL PROTECTED] > Sent: Mon 11/5/2007 7:43 PM > To: Wade, Daniel > Cc: misc@openbsd.org > Subject: Re: avail mem is only 66% of real mem > > >>On 11/5/07, Wade, Daniel

Re: altroot is not mentioned in FAQ

2007-11-06 Thread Douglas A. Tutty
On Tue, Nov 06, 2007 at 11:54:45AM +0100, Jan Stary wrote: > On Sep 25 10:11:04, Joel Knight wrote: > > --- Quoting Jan Stary on 2007/09/25 at 15:48 +0200: > > > afterboot(8) mentions /altroot, which is a nice feature. > > > > > > But you only learn about /altroot when you read afterboot(8). > > >

Re: altroot is not mentioned in FAQ [diff]

2007-11-06 Thread Douglas A. Tutty
On Tue, Nov 06, 2007 at 08:11:55PM +0100, ropers wrote: > On 06/11/2007, Jan Stary <[EMAIL PROTECTED]> wrote: > > Is using a larger disk in the example a problem? Using a 20G disk makes > > the point of showing how usable the system is even on a small disk, but > > 20G disks don't really exist anym

Re: altroot is not mentioned in FAQ [diff]

2007-11-06 Thread Douglas A. Tutty
On Wed, Nov 07, 2007 at 01:23:55PM +1100, RW wrote: > On Tue, 6 Nov 2007 18:26:04 -0500, Douglas A. Tutty wrote: > > > > >Perhaps there needs to be a new fork: OldBSD: Unix for the Ages. > > s/Ages/Aged/ ?? > > Given that I joined IBM in 1962, I am allowed to ma

Re: I've done something stupid

2007-11-09 Thread Douglas A. Tutty
On Fri, Nov 09, 2007 at 09:35:31AM -0800, new_guy wrote: > Aaron Martinez wrote: > > > > can you log in using single user mode? > > > > boot> boot -s > > > > then change it? > > > > Aaron > > > > I forgot to mention the box was headless. I had to return to the site. I > > was hoping there wa

Re: Security Comparisons

2007-11-09 Thread Douglas A. Tutty
On Fri, Nov 09, 2007 at 02:27:16PM -0800, new_guy wrote: > Darren Spruell wrote: > > > > > > Sadly, justifying the obvious through these means is often a requirement. > > > > Here's an approach you might consider. Take a best practice / > > standards guide such as from NIST: > > > > http://www.

Re: Printing with apsfilter

2007-11-10 Thread Douglas A. Tutty
On Sat, Nov 10, 2007 at 04:30:51AM +, Jacob Meuser wrote: > On Fri, Nov 09, 2007 at 07:15:11PM -0700, Predrag Punosevac wrote: > > Any strong opinion on LPD vs LPRng vs CUPS issue? I am not a > > professional system administrator and there is way too much Linux and > > CUPS around me for my

Re: partition and copy in one line?

2007-11-10 Thread Douglas A. Tutty
On Sat, Nov 10, 2007 at 06:38:38PM +0200, Lars Nood??n wrote: > I had a hard drive die and used the chance to move to 4.2. Since the > 'new' machine is of the same vintage as the one it replaced, I expect it > to start grinding to a halt soon, too. > > Is there a way to copy one entire hard drive

Re: Security Comparisons

2007-11-10 Thread Douglas A. Tutty
On Sat, Nov 10, 2007 at 05:52:03PM +0100, knitti wrote: > On 11/10/07, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > > > of philosophy. Linux is about making all kinds of toys work in a > > hot-plug way and allow people to boast about their uptime. OpenBSD is >

Re: Printing with apsfilter

2007-11-10 Thread Douglas A. Tutty
On Sat, Nov 10, 2007 at 12:04:57PM -0700, Predrag Punosevac wrote: > Douglas A. Tutty wrote: > >On Sat, Nov 10, 2007 at 04:30:51AM +, Jacob Meuser wrote: > >>On Fri, Nov 09, 2007 at 07:15:11PM -0700, Predrag Punosevac wrote: > >The difference between lpd and LPRng

Re: Printing with apsfilter

2007-11-11 Thread Douglas A. Tutty
On Sat, Nov 10, 2007 at 09:57:56PM -0500, William Boshuck wrote: > On Sat, Nov 10, 2007 at 08:46:19PM -0500, Douglas A. Tutty wrote: > > ... > > And this is the big difference between lpd and LPRng. With LPRng you > > can specify who can use what of those printers even if al

Re: partition and copy in one line?

2007-11-11 Thread Douglas A. Tutty
On Sun, Nov 11, 2007 at 10:27:52AM +0200, Lars Nood??n wrote: > Douglas A. Tutty wrote: > > > FAQ#10.2. use dump(8) and restore(8). Or tar(1) > > Nope. I've looked at dump and tar, and have looked at the faq. Those > suggestions seem to only work with the c

Re: Instant reboot / Inappropriate ioctl when trying to access SMART statistics

2007-11-11 Thread Douglas A. Tutty
On Sun, Nov 11, 2007 at 11:28:49AM +0100, Jurjen Oskam wrote: > Hi there, > > I suspect that the harddrive in my new Thinkpad T61p (dmesg below) is > failing, so I tried to examine its SMART statistics. I encountered two > problems. I'm using OpenBSD 4.2-RELEASE (amd64). > > The first problem was

Re: identifying sparse files and get ride of them trick available?

2007-11-11 Thread Douglas A. Tutty
On Sun, Nov 11, 2007 at 09:18:34PM +0100, knitti wrote: > if I'm not completely wrong, you could always tar -czf the sparse file, scp > the > archive and then tar -xzf the file in place in the other side. this should > also > create a new sparse file. of course, you lose the rsyncabilty and you

Re: Support for 3ware 3W 8x00 (8006-2LP) in 4.2

2007-11-16 Thread Douglas A. Tutty
On Fri, Nov 16, 2007 at 08:15:22PM -0500, System Administrator wrote: > On 16 Nov 2007 at 16:36, Pawel Veselov wrote: > > (just trying to find a cheap SATA hardware raid card...) > > Executive summary: Find another card or use soft-raid. > > The long answer: > > The redundancy provided by a RA

Re: [plz. help] constant attack from: 201.244.17.162, 222.231.60.88, 82.207.116.209....

2007-11-26 Thread Douglas A. Tutty
On Mon, Nov 26, 2007 at 06:56:51PM -0800, badeguruji wrote: > I just discovered by chance that, someone is > constantly trying to break into my openbsd box from: > > 201.244.17.162 [corporativos24417-162.etb.net.co] > 203.113.85.26 > 211.20.79.85 > 71.159.221.78 > 82.207.116.209 > > whois details

Re: Best way to automate administration of multiple servers

2007-11-27 Thread Douglas A. Tutty
On 14/11/2007, Mikel Lindsaar <[EMAIL PROTECTED]> wrote: > Hello all, > I want to automate handling them as much as possible and would like > some list suggestions on reading materials, software, or web howtos. Just my idea (never had more than 3 boxes at once): On my main box, I'd have a separat

Re: Dumb 486: Install From Hard Drive?

2007-12-02 Thread Douglas A. Tutty
On Sat, Dec 01, 2007 at 10:59:14PM -0700, L wrote: > But later when I get a clue and admit reality, I'll throw it on a > pentium 600mhz box with 500MB of ram. Well, when you get a clue and don't want the laptops anymore, be sure to advertise them here. One with 32 MB ram would do me just fine

Re: removing sendmail

2007-12-02 Thread Douglas A. Tutty
On Sun, Dec 02, 2007 at 12:56:11PM -0700, Anthony Roberts wrote: > > I have seen several installations of Postfix go catatonic due to spam > > overload, large messages, mailing list expansions, and other undiagnosed > > problems. These were run by Postfix lovers, so I have always assumed > > that t

Re: Skype on the OpenBSD

2007-12-02 Thread Douglas A. Tutty
On Mon, Dec 03, 2007 at 12:30:16AM +0100, ropers wrote: > On 02/12/2007, Jonathan Schleifer <[EMAIL PROTECTED]> wrote: > One of my mainboards has a UniChrome Pro onboard graphics chip, and > there is a fully free and open source Linux driver for that ( > http://www.openchrome.org/ ) and with it,

Re: removing sendmail

2007-12-02 Thread Douglas A. Tutty
On Sun, Dec 02, 2007 at 03:48:14PM -0700, Darren Spruell wrote: > On Dec 2, 2007 2:21 PM, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > On Sun, Dec 02, 2007 at 12:56:11PM -0700, Anthony Roberts wrote: > > > > I have seen several installations of Postfix go catatonic d

Re: Bernstein puts qmail in public domain

2007-12-04 Thread Douglas A. Tutty
On Tue, Dec 04, 2007 at 10:04:54AM +0100, Henning Brauer wrote: > * Tom Bombadil <[EMAIL PROTECTED]> [2007-12-04 03:00]: > > > exim is an insecure piece of shit that makes old sendmail look good. > > > besides, it is not free. > > > > Curiosity here since we are exim users... what makes it insecu

Re: /var/log/messages permissions in 4.2

2007-12-05 Thread Douglas A. Tutty
On Tue, Dec 04, 2007 at 02:30:28PM -0800, Bryan Irvine wrote: > > What would be the rationale for 640? ;) > > Well according to cvs log: > "it can be easily changed if you like it another way. millert," > > So I guess one rationale might be as simple as "because" ;) > Does anything get posted

Re: Code signing in OpenBSD

2007-12-06 Thread Douglas A. Tutty
On Thu, Dec 06, 2007 at 11:48:55AM +0100, Hannah Schroeter wrote: > One risk would be the plans of "online surveillance" of computers e.g. > in Germany. One way to install surveillance even on OpenBSD would be to > actively interfere with the internet connection with the surveilled > person, in t

Re: /var/log/messages permissions in 4.2

2007-12-06 Thread Douglas A. Tutty
On Thu, Dec 06, 2007 at 07:05:07AM -0500, Nick Holland wrote: > Douglas A. Tutty wrote: > > On Tue, Dec 04, 2007 at 02:30:28PM -0800, Bryan Irvine wrote: > >> > What would be the rationale for 640? ;) > >> > >> Well according to cvs log: > >> &quo

Re: Code signing in OpenBSD

2007-12-06 Thread Douglas A. Tutty
On Thu, Dec 06, 2007 at 09:39:35AM -0600, bofh wrote: > You forgot one option. Invite Theo to give a talk, and ask him to > bring the CDs. If you can't trust Theo's CDs, all hope is lost. He doesn't have to bring the CDs, just in the speach give the MD5 (or other more secure [sha?} sum for an .i

Re: Code signing in OpenBSD

2007-12-06 Thread Douglas A. Tutty
On Thu, Dec 06, 2007 at 05:24:40PM +0200, Lars Nood??n wrote: > Douglas A. Tutty wrote: > > Using software from any source without interference from an > > all-pervasive government is a very special,... > > It's not all about governments. Corporate espionage is probab

Re: Putting partition in RAM

2007-12-13 Thread Douglas A. Tutty
On Fri, Dec 07, 2007 at 05:59:21PM -0800, Jake Conk wrote: > > Anyways I don't want to get caught up in that but thanks for your help > Gilbert, it solved my problem :) You wouldn't happen to know what is > the equivalent to this for linux machines would you? Here's my /etc/fstab entry from m

Re: Getting envolved

2007-12-13 Thread Douglas A. Tutty
On Thu, Dec 13, 2007 at 09:40:43AM +0100, Otto Moerbeek wrote: > On Thu, Dec 13, 2007 at 08:44:35AM +0100, Mathieu Stumpf wrote: > > Le mercredi 12 dC)cembre 2007 C 11:22 -0800, Ted Unangst a C)crit : > > > On 12/12/07, Mathieu Stumpf <[EMAIL PROTECTED]> wrote: > > I agree "easy to use" and sampl

Re: Getting envolved

2007-12-13 Thread Douglas A. Tutty
On Thu, Dec 13, 2007 at 08:22:07PM -0700, Theo de Raadt wrote: > > When I read that, it sounded a lot to me like saying "if you're not a > > skilled medical practitioner, you don't deserve decent health care." > > Seems to me one of the better aspects of our society is our ability > > to all

UUCP to mars

2007-12-15 Thread Douglas A. Tutty
On Sat, Dec 15, 2007 at 03:55:59AM -0500, [EMAIL PROTECTED] wrote: > Email and web via UUCP ? I see it making a big comeback when humans > finally colonize mars ;-) Just no serial handshaking. No kidding. Think > of the delays. between here and there. By the time the US gets to Mars, we'll have

Re: Real men don't attack straw men

2007-12-15 Thread Douglas A. Tutty
On Sat, Dec 15, 2007 at 11:55:10PM +0100, Jeroen Massar wrote: > Richard Stallman wrote: > > RMS' statement that OpenBSD endorses non-free software goes too far, > > > > What I said is that the ports system contains recipes for installing > > non-free software. > > Just a quick question then:

BSD vs Debian [Was: Re: Real men don't attack straw men]

2007-12-16 Thread Douglas A. Tutty
On Sun, Dec 16, 2007 at 03:36:21AM +, Gilbert Fernandes wrote: > Where I work right now, we have bsd and debian on servers. > All user computers run debian or mandrake right now (and > we're going to move those to debian). We dont let them choose. > It is mandatory. We use bsd and some debian

Re: Play Nice - Real men don't attack straw men (Theo)

2007-12-16 Thread Douglas A. Tutty
On Sun, Dec 16, 2007 at 09:20:19PM -0500, David H. Lynch Jr. wrote: > So if I write a non-free insecure kernel and install it via ports that > is acceptable. Sure, why not? If you could get the linux kernel (e.g. with the nVidia blob) to compile on OpenBSD and run an OpenBSD userland, why not

Re: come, help me with something more productive

2007-12-16 Thread Douglas A. Tutty
On Sun, Dec 16, 2007 at 09:13:49PM +0100, knitti wrote: > On 12/14/07, bofh <[EMAIL PROTECTED]> wrote: > > Heh. I think we're having far too much fun in the other threads. I > > have a serious question. I'm a mangler in a largish company. We have > > developers, and contractors. No coding stan

Re: CERT Secure Coding Standards

2007-12-18 Thread Douglas A. Tutty
On Tue, Dec 18, 2007 at 12:03:56PM -0800, Ted Unangst wrote: > On Dec 18, 2007 4:36 AM, Gregg Reynolds <[EMAIL PROTECTED]> wrote: > > https://www.securecoding.cert.org/confluence/display/seccode/CERT+Secure+Coding+Standards > > > > Looks pretty good to me, but it's beyond my competence to judge. I

Re: Using the C programming language

2007-12-22 Thread Douglas A. Tutty
On Sat, Dec 22, 2007 at 12:06:34PM +0100, Brian Hansen wrote: > > I address this issue on this list, because a lot of people here are very > skillfull C programmers. > > When looking at some of the different "reasons for security problems" such > as: > http://www.dwheeler.com/secure-programs/Secu

Re: openbsd router hardware

2007-12-27 Thread Douglas A. Tutty
On Mon, Dec 24, 2007 at 01:29:49PM +0100, Joerg Zinke wrote: > - vga-output (because I have no other machine with a serial port to do > the installation) If that is the only time you'll use vga, it may open up lots of non-VGA board options if you get any old cheap/free box to use as a serial ter

Re: Embedding OpenBSD

2007-12-27 Thread Douglas A. Tutty
On Thu, Dec 27, 2007 at 09:34:37PM -0500, Nick Holland wrote: > I've got a little project I'm working on here. > It involves stuffing a computer in a donation box with a > money detector, so every time someone tosses money in the box, > it plays an MP3 file. > > However, this is the first time I

Re: Linus about C++

2007-12-28 Thread Douglas A. Tutty
On Fri, Dec 28, 2007 at 10:16:08AM -0500, Gary Baluha wrote: > I'm also not sold on the concept of object oriented programming in general. > Along the lines of "nothing is impossible with enough layers of > indirection", I think too much abstraction also removes the programmer from > what he/she

Re: Embedding OpenBSD

2007-12-28 Thread Douglas A. Tutty
On Fri, Dec 28, 2007 at 08:34:24AM -0800, Unix Fan wrote: > (Consider a modem, or a net card... so remote maintenance is > possible..) The problem with a net card is that then the end-user would have to set up a dhcp server or some how have the card set up correctly. With a modem, its pretty st

Re: Embedding OpenBSD

2007-12-28 Thread Douglas A. Tutty
On Fri, Dec 28, 2007 at 11:13:18AM -0600, Marco Peereboom wrote: > Do you drive a car? if the answer is yes you have an unconnected > embedded device. Need more examples? Well, actually, my car doesn't include a digital computer. It has an ignition module that is analog but no sensors. Nice co

Re: Embedding OpenBSD

2007-12-29 Thread Douglas A. Tutty
On Sat, Dec 29, 2007 at 12:34:13AM -0500, [EMAIL PROTECTED] wrote: > Gary Baluha wrote: > > On Dec 27, 2007 10:41 PM, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > >> You could have a "Please wait" light to be lit during the reboot. > > This is precisely

Re: fvwm in base and repository with security issues?

2007-12-30 Thread Douglas A. Tutty
On Sun, Dec 30, 2007 at 07:36:47PM +0100, Jan wrote: > I would suggest to remove all window managers from base except twm. > Twm is in all default X installations and could be left in as last > resort. When someone needs a window manager, he can install it from > repo or ports, but it should not

Re: Embedding OpenBSD

2007-12-30 Thread Douglas A. Tutty
On Mon, Dec 31, 2007 at 01:00:24AM +0100, chefren wrote: > On 12/29/07 5:27 PM, Douglas A. Tutty wrote: > > >Summary: > > > >I still suggest a heartbeat monitor and a modem. > > A heartbeat monitor makes the system seriously more complicated and thus > less reli

Re: Embedding OpenBSD

2007-12-31 Thread Douglas A. Tutty
On Mon, Dec 31, 2007 at 03:37:46PM +, Stuart Henderson wrote: > On 2007/12/31 15:07, chefren wrote: > > And look at the workings of your heartbeat monitor: I bet it needs a loop in > > the software that "pings" it. With software failures: Big chance that loop > > still works and thus the heartb

Re: delete deleted data

2008-01-01 Thread Douglas A. Tutty
On Tue, Jan 01, 2008 at 02:14:53PM -0500, Christopher Linn wrote: > On Mon, Dec 31, 2007 at 12:25:02PM -0600, Marco Peereboom wrote: > > On Mon, Dec 31, 2007 at 10:25:25AM -0800, Jon wrote: > > > > > > I see a lot of programs that are available to clean up the disks for > > > Windows OS. Not wipe

Re: fvwm in base and repository with security issues?

2008-01-01 Thread Douglas A. Tutty
On Tue, Jan 01, 2008 at 08:27:43PM +, Owain Ainsworth wrote: > On Sun, Dec 30, 2007 at 09:53:29PM -0500, Okan Demirmen wrote: > > > Is there anything up with newer versions then? Why should it not be > > > brought up to date? > > > > i believe license is the issue. > > Correct. Newer version

Re: fvwm in base and repository with security issues?

2008-01-02 Thread Douglas A. Tutty
On Tue, Jan 01, 2008 at 10:46:43PM -0800, Unix Fan wrote: > Douglas A. Tutty wrote: > > > To satisfy my own curiosity, looking at > > > www.en.wikipedia.org/wiki/Category:Free_X_window_managers which > > provides links to 45 window managers for which there are wiki

Re: Perpetually Current

2008-01-02 Thread Douglas A. Tutty
On Wed, Jan 02, 2008 at 01:42:01PM -0300, Nenhum_de_Nos wrote: > On Dec 27, 2007 11:17 AM, new_guy <[EMAIL PROTECTED]> wrote: > > I would like to install OpenBSD *once* and keep it patched and secured for > > many years there after (5 - 7 years) in a production environment. Would it > > be feasible

Re: Improving disk reliability

2008-01-02 Thread Douglas A. Tutty
On Thu, Jan 03, 2008 at 01:29:38AM +0100, Erik Wikstr??m wrote: > I am setting up a OpenBSD box to act as a router/file-server for my > parents, the box consists mostly of old parts and I try to not spend any > extra money on it. One of my biggest worries is, since it will act as a > file-server wh

Re: Open Source Article Spawns Interesting Ethical Question

2008-01-03 Thread Douglas A. Tutty
On Thu, Jan 03, 2008 at 09:44:00AM -0700, Jack J. Woehr wrote: > A professional peer of mine wrote the following article: > > http://www.networkworld.com/community/node/23417 > > which contains the following paragraph: > >Google's hired great open source developers from projects like >Li

Re: Improving disk reliability

2008-01-03 Thread Douglas A. Tutty
On Thu, Jan 03, 2008 at 05:10:59PM +0100, knitti wrote: > On 1/3/08, Marius Hooge <[EMAIL PROTECTED]> wrote: > > Doug wrote: > > > > >2. I don't know the size of the disk to know the size of the backup > > > media required. However, CD/DVD burners are less than the cost > > > of a

Re: delete deleted data

2008-01-03 Thread Douglas A. Tutty
On Thu, Jan 03, 2008 at 04:08:08PM -0800, Marco S Hyman wrote: > As for disk destruction... I don't know nor pretend to know what can > and can not be recovered. Take a look at > > https://www.dss.mil/portal/ShowBinary/BEA%20Repository/new_dss_internet/isp/odaa/documents/clear_n_san_matrix_062

Re: Open Source Article Spawns Interesting Ethical Question

2008-01-03 Thread Douglas A. Tutty
On Fri, Jan 04, 2008 at 12:48:57PM +1100, Ioan Nemes wrote: > > Ask yourself this question. Do you really believe that someone who > > sells a product which was developed within the lawful frame work is > > unethical? > > You confusing the issue! The software market - where you sell your product

Re: Improving disk reliability

2008-01-03 Thread Douglas A. Tutty
On Thu, Jan 03, 2008 at 11:36:31PM +0100, Henning Brauer wrote: > * Douglas A. Tutty <[EMAIL PROTECTED]> [2008-01-03 23:34]: > > If neither hard drives nor CD/DVDs are a good backup soluton, and > > networking the backup to another computer's hard drive (which then &

Re: Improving disk reliability

2008-01-04 Thread Douglas A. Tutty
On Thu, Jan 03, 2008 at 11:40:44PM -0800, Ted Unangst wrote: > On 1/3/08, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > I thought that there was a trend in the industry away from tapes toward > > hard-drive-based systems, e.g. virtual tape libraries that are basically > &

Re: Advice requested on security issues

2008-01-05 Thread Douglas A. Tutty
On Fri, Jan 04, 2008 at 11:28:18PM -0500, Nick Holland wrote: > Rusty Gadd wrote: > > I am seeking advice on the security aspects of the configuration of my home > > system. I have 2 PC's, connected to the internet via a firewalled NAT > > router. The main PC is an i386 P4 used for general computin

Re: OT YAG Re: delete deleted data

2008-01-05 Thread Douglas A. Tutty
On Sat, Jan 05, 2008 at 12:09:08PM -0700, Diana Eichert wrote: > On Sun, 6 Jan 2008, Shane J Pearson wrote: > SNIP > >Where a mix of humans, transistors, valves, gears and three-phase > >motors/sensors, got the job done.;-) > > > >Shane > > No coal and steam? > > I had to say it. What do yo

Re: Advice requested on security issues

2008-01-05 Thread Douglas A. Tutty
On Sat, Jan 05, 2008 at 10:43:56PM +0200, Jussi Peltola wrote: > On Sat, Jan 05, 2008 at 11:36:04AM -0500, Douglas A. Tutty wrote: > > Perhaps you could use the banking machine as your main access point, > > running apps on the main box via ssh. Would that introduce any > &

Re: Advice requested on security issues

2008-01-05 Thread Douglas A. Tutty
On Sat, Jan 05, 2008 at 07:48:53PM -0800, Ted Unangst wrote: > On 1/5/08, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > Is there anything that, bug-wise, could go wrong with that remote > > browser that would be able to read or alter anything on the local > > machin

Re: Advice requested on security issues

2008-01-07 Thread Douglas A. Tutty
On Mon, Jan 07, 2008 at 07:28:40AM +0200, [EMAIL PROTECTED] wrote: > On Sat, Jan 05, 2008 at 11:38:24PM -0500, Douglas A. Tutty wrote: > > On Sat, Jan 05, 2008 at 07:48:53PM -0800, Ted Unangst wrote: > > > On 1/5/08, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > &

Re: Improving disk reliability

2008-01-07 Thread Douglas A. Tutty
On Mon, Jan 07, 2008 at 01:22:53PM +0100, knitti wrote: > Backup (and/or archiving) is not fire-and-forget. You have to know how > long you want to store this data to choose the right technology and > media. And you have to have a process to verify that your data is good > after this time. If you w

Re: Advice requested on security issues

2008-01-07 Thread Douglas A. Tutty
On Mon, Jan 07, 2008 at 11:32:09AM -0800, Ted Unangst wrote: > On Jan 7, 2008 5:55 AM, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > Right, but when I go from an OpenBSD box via ssh to a debian box to run > > apps, then that doesn't apply and I don't set ForwardX1

Re: Improving disk reliability

2008-01-08 Thread Douglas A. Tutty
On Tue, Jan 08, 2008 at 09:48:03AM +, Khalid Schofield wrote: > On 8 Jan 2008, at 08:08, Nick Guenther wrote: > >On Jan 7, 2008 7:22 AM, knitti <[EMAIL PROTECTED]> wrote: > >>the posting von hannah shows what to do. Ths big picture is this: > >>Backup (and/or archiving) is not fire-and-forget.

Re: Advice requested on security issues

2008-01-08 Thread Douglas A. Tutty
On Mon, Jan 07, 2008 at 07:04:42PM -0500, Douglas A. Tutty wrote: > On Mon, Jan 07, 2008 at 11:32:09AM -0800, Ted Unangst wrote: > > On Jan 7, 2008 5:55 AM, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > > Right, but when I go from an OpenBSD box via ssh to a debian box

Re: Improving disk reliability

2008-01-08 Thread Douglas A. Tutty
On Tue, Jan 08, 2008 at 03:37:36PM +0100, Henning Brauer wrote: > > I know that the FAQ says to just use dump to make backups but what if > > you want a tape of a specific group of files for archiving? When last > > did the dump format change? Since it reads the filesystem directly, I'd > > ass

Re: Improving disk reliability

2008-01-08 Thread Douglas A. Tutty
On Tue, Jan 08, 2008 at 04:42:59PM +, Stuart Henderson wrote: > On 2008/01/08 10:29, Douglas A. Tutty wrote: > > However, if you have one directory you wish to put on tape, e.g. as an > > archive of old OS .iso's (in case the origionals get scratched), as far > > as

Re: Improving disk reliability

2008-01-08 Thread Douglas A. Tutty
> On Jan 8, 2008, at 6:29 AM, Douglas A. Tutty wrote: > > > >I know that the FAQ says to just use dump to make backups but what if > >you want a tape of a specific group of files for archiving? When last > >did the dump format change? Since it reads the filesystem d

Re: Advice requested on security issues

2008-01-08 Thread Douglas A. Tutty
On Tue, Jan 08, 2008 at 07:26:42PM +0200, Jussi Peltola wrote: > On Tue, Jan 08, 2008 at 10:48:41AM -0500, Douglas A. Tutty wrote: > > I suppose the only way to have a "trusted-secure" box and an > > "untrusted-insecure" box with one disply/keyboard would be a

Re: Improving disk reliability

2008-01-08 Thread Douglas A. Tutty
On Tue, Jan 08, 2008 at 06:25:44PM -0800, johan beisser wrote: > For a little while, I've had a project on my plate to create a simple > backup system that'd use rsync to mirror the directory for easy > access, and then have versions going back X-months that can be > archived to tape, etc,

Re: Limiting CPU to a process or process group?

2008-01-14 Thread Douglas A. Tutty
On Mon, Jan 14, 2008 at 01:34:13PM +, Andreas Kahari wrote: > On 14/01/2008, Alexander Schrijver <[EMAIL PROTECTED]> wrote: > > On Jan 14, 2008 1:30 PM, Andreas Kahari <[EMAIL PROTECTED]> wrote: > > > On 14/01/2008, Alexander Schrijver <[EMAIL PROTECTED]> wrote: > > > > On Jan 14, 2008 11:52 AM

most secure graphical browser

2008-01-17 Thread Douglas A. Tutty
I have a box that I want to keep as secure as I can but I also need to be able to use a graphical browser from it (I know that this is a trade-off). There is no graphical browser in base. I don't need or want this browser to do javascript or flash (I have a different box for entertainment). Of

Re: k3b ...is it possible?

2008-01-17 Thread Douglas A. Tutty
On Thu, Jan 17, 2008 at 02:56:29PM -0700, Predrag Punosevac wrote: > Jacob Meuser wrote: > >On Thu, Jan 17, 2008 at 01:06:18PM -0700, Predrag Punosevac wrote: > > > I have heard something about forking cdrtools and dvd+rw probably by > the people who want to enforce GPL license. Maybe somebody

Re: most secure graphical browser

2008-01-17 Thread Douglas A. Tutty
On Thu, Jan 17, 2008 at 05:11:53PM -0500, STeve Andre' wrote: > On Thursday 17 January 2008 03:42:38 pm Douglas A. Tutty wrote: > > I have a box that I want to keep as secure as I can but I also need to > > be able to use a graphical browser from it (I know that thi

Re: most secure graphical browser

2008-01-17 Thread Douglas A. Tutty
On Thu, Jan 17, 2008 at 06:36:27PM -0500, Frank Bax wrote: > Douglas A. Tutty wrote: > >I have a box that I want to keep as secure as I can but I also need to > >be able to use a graphical browser from it (I know that this is a > >trade-off). > Have you considered

Re: most secure graphical browser

2008-01-17 Thread Douglas A. Tutty
On Fri, Jan 18, 2008 at 01:03:07AM +0100, Rico Secada wrote: > On Thu, 17 Jan 2008 18:17:54 -0500 > "Douglas A. Tutty" <[EMAIL PROTECTED]> wrote: > > > On Thu, Jan 17, 2008 at 05:11:53PM -0500, STeve Andre' wrote: > > > On Thursday 17 January 2008

  1   2   3   >