linux security resources (shortlist) was: Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-15 Thread Curious
linux specific: (short list to get you started) Resources: books: http://www.hackinglinuxexposed.com/ http://www.oreilly.com/catalog/puis/ links: http://www.linuxdoc.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/index.html http://www.securityportal.com/lasg/ http://www.linuxsecurity.c

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-14 Thread Conor Daly
On Sun, May 13, 2001 at 11:06:24AM +1000 or so it is rumoured hereabouts, [EMAIL PROTECTED] thought: > > All the screws we borrow all over the place seem to surrender to > the same screwdriver in this house - so far, at least. > > Of course this assumes you're willing to use a flatbladed > scre

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread jenn
Mary Gardiner wrote: > That's incredible Jenn. There's an implicit implication that you have the > right screws there, or that you haven't 'borrowed' screws from all the hard > drives and ethernet cards to build a second machine and that's pretty damn > unusual, where I live. All the screws we

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread Mary Gardiner
On Sat, May 12, 2001 at 05:39:57PM +0100, Telsa Gwynne wrote: > UNIX, as I first met it, was not based on the idea of "one box, keyboard, > monitor and mouse, all in front of you". It was multiple users on multiple > accounts from multiple terminals which were nowhere near the console. > The termi

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread Mary Gardiner
On Sun, May 13, 2001 at 01:46:45AM +1000, [EMAIL PROTECTED] wrote: > Take one screwdriver. > Take one computer. > Discover that your screwdriver is the wrong type. > Get another screwdriver. > Discover that it's the wrong type too. > Look for the right screwdriver. > Remember that you lent that o

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread Magni Onsoien
Telsa Gwynne: > You are indeed evil. This is _exactly_ what happened when we took my > Vaio apart. Sony use -- wait for it -- non-standard screw sizes. Well, > "didn't fit our first two sets" sizes. However, the set of useless > "what are these sizes anyway?" screwdrivers I got at a Linux Expo fr

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread jenn
Telsa Gwynne wrote: > All these terminals. And 'w' showed you people you'd never met and > your friends, and they were on tty this and that. But the root user > (or the operator account, or whatever) was sometimes logged in from > the console. And the console was special. > > (I never really k

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread Telsa Gwynne
On Sun, May 13, 2001 at 01:47:35AM +1000 or thereabouts, Mary Gardiner wrote: > However, it did remind me that Linux is a system with a large enough > public user base to be subject to frequent attacks when on a hostile > network (eg the internet). > > Securing Linux is an important part of ru

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread Telsa Gwynne
On Sun, May 13, 2001 at 01:46:45AM +1000 or thereabouts, [EMAIL PROTECTED] wrote: > > Oh, I'm soo evil! > > > 1) Hardware access exploits (how exactly do you remove a hard drive and gain > > access to its data, how to encrypt one, how to lock a machine up). > > Take one screwdriver.

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread jenn
Mary Gardiner wrote: > Yes, having admitted to said eviilll knowledge Jenn, I'm afraid you must now > brain-dump all your knowledge of: Oh, I'm soo evil! > 1) Hardware access exploits (how exactly do you remove a hard drive and gain > access to its data, how to encrypt one, how to

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread jenn
Mary Gardiner wrote: > Hence it's perfect material for our techtalk FAQ. I don't know whether it > includes much, but I feel inspired to do more. And since I've had CVS access to > it for months now and haven't touched it, it is time to do some work. > > Anyone got any sample Qs and As for me?

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread James Sutherland
On Sat, 12 May 2001, Linda MacPhee-Cobb wrote: > Hi all, > > I don't think you'll convince me this is anything but a disaster. I don't > think turning my linux passwords into the equivalent of Win 95, not even Nt, > passwords to be anything but bad. This isn't the case, as we have already expla

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread Mary Gardiner
On Sun, May 13, 2001 at 01:17:27AM +1000, [EMAIL PROTECTED] wrote: > > I am sure I am not the only person concerned on this list, or lurking, I > > think you should share any other things you are aware of as a system > > admin that allow someone into the system or give root access through > > w

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread Mary Gardiner
On Sat, May 12, 2001 at 10:50:54AM -0400, Linda MacPhee-Cobb wrote: > >There's probably other things which I know of, understand and > >approve of; but which would upset you. The problem is, I can't > >think of what they might be. I'm not *intentionally* not telling > >you .. I just don't know wha

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread jenn
Linda MacPhee-Cobb wrote: > I am sure I am not the only person concerned on this list, or lurking, I > think you should share any other things you are aware of as a system > admin that allow someone into the system or give root access through > ways other than the normal channels as well as t

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-12 Thread jenn
Linda MacPhee-Cobb wrote: > The comment about the janitor was good, and that gets right to the heart > of it. I do not expect the janitor to know enough or be interested > enough to dismantle the beast and pull out the hd to read on another > machine. I do expect something as trivally worke