Re: [techtalk] Almost arrested for using telnet

2001-05-14 Thread Magni Onsoien
Mary Gardiner: > It would have two problems that I can see: > > 1) If you connect to it remotely in http, not https, your password/phrase will > pass to the webserver in clear text, negating the whole point of ssh. Mindterm is a java applet, so it runs on your machine (i.e. in your local browse

Re: [techtalk] GTK+ Prob - Mandrake 8

2001-05-14 Thread Almut Behrens
On Sat, May 12, 2001 at 08:14:00PM -0400, Phil Savoie wrote: > Hi All, > > Have anyone ever seen this? How does one create a "helper" > program to get the x program cdroast to run? > > GTK+WARNING **: This process is currently running setuid or setgid. > This is not a supported use of GTK+. Y

Re: [techtalk] Linux security suggestions

2001-05-14 Thread Magni Onsoien
Brian Sweeney: > "The life expectancy of an unpatched, default installation of Red Hat 6.2 > server is three days. The last time we attempted to confirm this, the system > was compromised in eight hours." > -The Honeynet Project One of the sysadmins at my *old* job left his laptop with Windows 20

Re: [techtalk] Etymology (was Re: Layman's Guides to Computer Security)

2001-05-14 Thread Magni Onsoien
[EMAIL PROTECTED]: > > In Old High German, there were two major types of "men": "wo-men" and > > "wer-men". "Wo-men" were female and "wer-men" male. The "wer" in > > "wer-man" is cognate with the Latin "vir", which also means "man" (in > > our current sense of "adult male human"). > > I've hea

Re: [techtalk] Linux security suggestions

2001-05-14 Thread James Sutherland
On Sun, 13 May 2001, Brian Sweeney wrote: > Last week, against our direct order, a user at my organization put a (near > as we can tell) unpatched RHL6.2 box on the network. He was compromised in > under 12 hours; I haven't gotten the chance to recover the logs to figure > out exactly when. It'

Re: [techtalk] Re: techtalk digest, Vol 1 #449 - 9 msgs

2001-05-14 Thread Conor Daly
On Sun, May 13, 2001 at 11:06:24AM +1000 or so it is rumoured hereabouts, [EMAIL PROTECTED] thought: > > All the screws we borrow all over the place seem to surrender to > the same screwdriver in this house - so far, at least. > > Of course this assumes you're willing to use a flatbladed > scre

Re: [techtalk] GTK+ Prob - Mandrake 8

2001-05-14 Thread Conor Daly
On Sat, May 12, 2001 at 08:14:00PM -0400 or so it is rumoured hereabouts, Phil Savoie thought: > Hi All, > > Have anyone ever seen this? How does one create a "helper" > program to get the x program cdroast to run? > > GTK+WARNING **: This process is currently running setuid or setgid. > This

Re: [techtalk] PDA

2001-05-14 Thread Catie Flick
On 9 May, Mary E. Mulderrig wrote: > Hi: > > It's called the Agenda VR series of PDA's. Try linuxmall. THey have them > listed for ? $249.00 I know this is a little old, but I have an Agenda (and am about to give a talk on it to the local LUG (Sydney LUG - http://www.slug.org.au)) and it a) doe

Re: [techtalk] Linux security suggestions

2001-05-14 Thread coldfire
brian, you didn't really leave anything out hehe .. for the average user, or rather, anyone using linux as a workstation .. there's only 3 real keys to keeping your box secure. disable any services that aren't to be used, get that firewall setup, and keep your software up to date. :) abe On Su

Re: [techtalk] GTK+ Prob - Mandrake 8

2001-05-14 Thread coldfire
> #!/bin/bash > > ssh -l root localhost '/usr/bin/xcdroast $*' > > ## end ## > > save that as xcdroast.sh i don't believe this script will work .. if 'xcdrgtk' is run by root, it would return a "connection to refused by server" unless properly configured. which would be m

Re: [techtalk] PDA

2001-05-14 Thread Catie Flick
On 14 May, To: [EMAIL PROTECTED] wrote: > On 9 May, Mary E. Mulderrig wrote: >> Hi: >> >> It's called the Agenda VR series of PDA's. Try linuxmall. THey have them >> listed for ? $249.00 > > I know this is a little old, but I have an Agenda (and am about to give > a talk on it to the local LUG

Re: [techtalk] GTK+ Prob - Mandrake 8

2001-05-14 Thread Phil Savoie
Thank you all for your help. As it turns out removing the setuid bit of the executable helped but the program hung. When I have time I will try the other suggestions and let you know what if any worked Thank you, Phil coldfire wrote: > > > #!/bin/bash > > > > ssh -l root localhost '/usr/bin/x

Re: [techtalk] "Developing not Fixing"

2001-05-14 Thread David Merrill
On Mon, May 14, 2001 at 12:28:16AM -0500, Jeff Dike wrote: > [EMAIL PROTECTED] said: > >From memory there is a Linux specific one: > > I probably am not going to be the only person to post a pointer to the whole > thing, but maybe I'll be first :-) > > http://lark.cc.ukans.edu/~pauljohn/linux/

Re: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread J-Mag Guthrie
> > 2. Yes, I'm using 'layman' rather than 'lay person'. I needed > > SOMETHING to signify that they're aimed at people who aren't > > computer specialists, and 'for dummies' and 'idiots guide to' > > always strikes me as insulting. Given that layman doesn't seem to be in > common usage either, I

Re: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread Ms. Piglet
The ones that stick in my mind were "Chemistry for Poetry Majors" and "Physics for Poetry Majors". --pig On Mon, 14 May 2001, J-Mag Guthrie wrote: > Novice? Newbie? When I was in college, lo these many years ago, there > were math and engineering classes that were specifically for "non-major

[techtalk] Must write better subject lines(WAS Linux security suggestions)

2001-05-14 Thread Brian Sweeney
Hey guys- Thanks for all the suggestions, but I just wanted to clarify: the example about the 6.2 box was just an example for other people. I didn't mean to imply that I didn't know why that box got hacked, just wanted to show to anyone who was curious what can happen when you don't A) Setup som

RE: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread Brian Sweeney
I read a really good book a while back called "Physics for the Rest of Us"(HIGHLY recommended for those curious about modern physics) Good way to say newbie without saying "dummie", I thought. -Brian > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of

[techtalk] Re: techtalk digest, Vol 1 #457 - 14 msgs

2001-05-14 Thread A Kozic
Kai MacTane wrote: > In Old High German, there were two major types of "men": "wo-men" and > "wer-men". "Wo-men" were female and "wer-men" male. The "wer" in > "wer-man" is cognate with the Latin "vir", which also means "man" (in > our current sense of "adult male human"). I just finished readin

Re: [techtalk] About prettyphysicslady on the linuxchix techtalk list...

2001-05-14 Thread Caitlyn Martin
> > > Fourth, perhaps you should think a bit harder about what you are doing > > when you make sexist remarks about the presumed physical appearance and > > social habits of female scientists on women's forum of all places? > > Actually, it struck me as reasonable to assume that someone who > op

Re: [techtalk] About prettyphysicslady on the linuxchix techtalk list...

2001-05-14 Thread Caitlyn Martin
> > I beg to differ. You are running Windows, using Outlook Express, I'm > not certain that you're any sort of authority on Linux operating > standards. Linda currently has her box configured in the following > manner: > > Port State Service > 21/tcp openftp > 22/tcp o

Re: [techtalk] Stupid Question: Troll?

2001-05-14 Thread Caitlyn Martin
Hi, Keith, > > And I have still had no luck installing Caldera's OpenLinux eDesktop 2.4. > Some day, maybe... > Please describe the problems you have had with the install specifically. Perhaps we can help you get it to work. Caldera is usually a good choice for newbies because of the ease of

RE: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread Samuel Tesla
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 14 May 2001, Brian Sweeney wrote: > I read a really good book a while back called "Physics for the Rest of > Us"(HIGHLY recommended for those curious about modern physics) Good way to > say newbie without saying "dummie", I thought. > One of

Re: [techtalk] Re: techtalk digest, Vol 1 #457 - 14 msgs

2001-05-14 Thread Kai MacTane
At 5/14/01 10:44 AM , A Kozic wrote: >I just finished reading Egalia's Daughters by Gerd Brantenberg >(ISBN:0-93118-8342). It is a "White Man's Burden" style role reversal, >covering the "masculinist movement" in a matriarchal society. They use >"wim"/"wom", "menwim"/"menwom", and "huwom" (Though

Re: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread minae
> On Mon, 14 May 2001, Brian Sweeney wrote: > > > I read a really good book a while back called "Physics for the Rest of > > Us"(HIGHLY recommended for those curious about modern physics) Good way to > > say newbie without saying "dummie", I thought. > > > > One of the books I like to recommend wh

RE: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread Brian Sweeney
Not to turn this into a physics list, but yeah, I heard that "The Elegant Universe" was a good one. I'll check that out and "The Dancing Wu Li Masters" as well. Thanks for the recommendations. *UNINTENTIONALLY PLUG-LIKE COMMENT AHEAD* It helps that I work for a physics department that claimed 2

[techtalk] Physics and Film reommendation

2001-05-14 Thread Lilly S.
If people haven't seen it yet, rent "MindWalk".. It's a phenomenal film based on the theories of Fritjof Capra (The Tao of Physics).. It's really really good. L. On Mon, 14 May 2001, Brian Sweeney wrote: > Not to turn this into a physics list, but yeah, I heard that "The Elegant > Universe" was

Re: [techtalk] Re: techtalk digest, Vol 1 #457 - 14 msgs

2001-05-14 Thread Magni Onsoien
A Kozic: > I just finished reading Egalia's Daughters by Gerd Brantenberg > (ISBN:0-93118-8342). It is a "White Man's Burden" style role reversal, > covering the "masculinist movement" in a matriarchal society. They use > "wim"/"wom", "menwim"/"menwom", and "huwom" (Though "wom" is a perfectly > a

Re: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread jenn
J-Mag Guthrie wrote: > Novice? Newbie? I want something which clearly states that I know it's not necessarily something they *want* to learn. Like I don't want motor-mechanics-for-the-novice because I'm not intending to be a motor mechanic. I'd say 'for the home user', except that this is

Re: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread David Merrill
On Tue, May 15, 2001 at 08:24:14AM +1000, [EMAIL PROTECTED] wrote: > J-Mag Guthrie wrote: > > > > Novice? Newbie? > > I want something which clearly states that I know it's not > necessarily something they *want* to learn. Like I don't want > motor-mechanics-for-the-novice because I'm not in

[techtalk] Re: Caldera Open Linux eDesktop 2.4 Installation

2001-05-14 Thread wny-tc
Hello all, Keith here in the Depths of the Great Bergen Swamp A bit more info on my attempts to install my Caldera distro. I am trying to install it for dual-boot capabilities using the 'Quick Install' feature. I have gone through the section on 'Checking Resources' and verifying the hardware

Re: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread jenn
David Merrill wrote: > I like `backgrounder' or `introduction to...'. I don't particularly > like `layman', mostly because after reading your docs I don't think > they are useful only to laymen. But ymmv and all that... I'm flattered. :) Hm. I'll think about it - I want them to be used by laym

Re: [techtalk] Re: Caldera Open Linux eDesktop 2.4 Installation

2001-05-14 Thread Caitlyn Martin
Hi, Keith, OK, I know exactly what is happening. What it is asking for is the registered version (the one that costs money) of Partition Magic. The copy provided with Caldera OpenLinux 2.4 is very, very limited. It doesn't like your FAT32 partition. You're trying to shrink your Windows par

[techtalk] Eric Raymond, MS security, and open source..

2001-05-14 Thread clburke
foolish and dangerous it is to rely on closed-source software for any security-critical use. As the security advantages of open source become clearer, managers who persist in this mistake may find they are putting their own jobs at risk. And deserving to lose them... [1] <http://smallbusine

Re: [techtalk] Re: Caldera Open Linux eDesktop 2.4 Installation

2001-05-14 Thread Daniel Manrique
> You have three options: 1) Actually beg, borrow, buy, or steal a copy of > Partition Magic or any other equivalent program, 2) add a second hard drive > and install Linux on that, leaving your Windows drive intact. I highly > recommend this option, as there is little or no chance of destroy

Re: [techtalk] Eric Raymond, MS security, and open source..

2001-05-14 Thread Melissa Plunkett
e fundamentally than > that, though, it reveals how deeply foolish and dangerous it is to > rely on closed-source software for any security-critical use. > > As the security advantages of open source become clearer, managers who > persist in this mistake may find they are putting their o

Re: [techtalk] Eric Raymond, MS security, and open source..

2001-05-14 Thread Kai MacTane
At 5/14/01 05:52 PM , [EMAIL PROTECTED] wrote: >I can't find any references online currently to the MS IIS backdoor ESR >refers to. Have any of you heard of the backdoor, or seen security or >press coverage of it? It's not on buqtraq or securityfocus or slashdot >or... yet. It is on Slashdot,

Re: [techtalk] Eric Raymond, MS security, and open source..

2001-05-14 Thread Daniel Manrique
> I just got this note from Eric Raymond in my inbox. I must be on his > PR list. > > I can't find any references online currently to the MS IIS backdoor ESR > refers to. Have any of you heard of the backdoor, or seen security or > press coverage of it? It's not on buqtraq or securityfocu

RE: Re: [techtalk] Eric Raymond, MS security, and open source..

2001-05-14 Thread clburke
Indeed Slashdot has it. Still wondering why this can of worms suddenly popped open today. Hmm.. C http://www.fscinternet.com http://www.sercureXpert.com http://diary.carolyn.org ___ techtalk mailing list [EMAIL PROTECTED] http://www.linux.org.uk/ma

Re: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread Raven, corporate courtesan
Heya -- > I want something which clearly states that I know it's not > necessarily something they *want* to learn. Like I don't want > motor-mechanics-for-the-novice because I'm not intending to be > a motor mechanic. [tongue-in-cheek] Perhaps "for the Unwilling Beginner"? >> so maybe s

Re: [techtalk] Layman's Guides to Computer Security

2001-05-14 Thread James Sutherland
On Tue, 15 May 2001 [EMAIL PROTECTED] wrote: > David Merrill wrote: > > > > I like `backgrounder' or `introduction to...'. I don't particularly > > like `layman', mostly because after reading your docs I don't think > > they are useful only to laymen. But ymmv and all that... > > I'm flattered. :