CLOSED: Re: security: wted?

2025-02-26 Thread home user via users
bash.9[~]: - - - - - - duck-duck-go and google gave me nothing useful. What is "wted", and is there a security problem? My apologies for the delay in closing this. As recommended, I no longer run chkrootkit. As recommended, I no longer run rkhunter. As recommended, I re-installed fail2ban

Re: security: wted?

2025-02-22 Thread Stephen Morris
On 14/2/25 10:17, home user via users wrote: On 2/13/25 3:11 PM, home user via users wrote: On 2/13/25 2:40 PM, Jonathan Billings wrote: On Feb 13, 2025, at 12:51, home user via users wrote: [snip] What is "wted", and is there a security problem? The “wted” function in the

Re: security: wted?

2025-02-15 Thread Tim via users
On Fri, 2025-02-14 at 15:24 -0700, home user via users wrote: > I use Firefox. There's that little shield icon just to the left of > the address bar. I'm amazed (and concerned) at how many web sites > that shield "says" are trying to track, cross-site track, and > fingerprint. ...and how many si

Re: security: wted?

2025-02-15 Thread Tim via users
Tim: > > Having said all that, most people don't serve websites from their own > > PC any more, few ISPs allow it. Patrick O'Callaghan: > I do run a small family webserver on my desktop, but I also have > Fail2Ban installed. It registers multiple failed connection attempts > every day, mainly fr

Re: security: wted?

2025-02-14 Thread home user via users
On 2/14/25 9:59 AM, Patrick O'Callaghan wrote: On Sat, 2025-02-15 at 02:19 +1030, Tim via users wrote: Having said all that, most people don't serve websites from their own PC any more, few ISPs allow it. I do run a small family webserver on my desktop, but I also have Fail2Ban installed. It r

Re: security: wted?

2025-02-14 Thread home user via users
alware products are good at stopping people who do that. There's very little of things just slipping in without your help. There's the obvious route of a miscreant giving someone advice to download and install BADTHING from their website, which might be a website with fake how-to-solve

Re: security: wted?

2025-02-14 Thread Patrick O'Callaghan
e never used either of them and have had no > > consequences as a result. Linux can have security issues of course, but > > my feeling is that they are much more likely to come from phishing or > > from supply-chain attacks, which rootkit detectors aren't going to > > ca

Re: security: wted?

2025-02-14 Thread home user via users
On 2/13/25 11:15 PM, Michael D. Setzer II wrote: On 13 Feb 2025 at 20:39, home user via users wrote: [snip] So looks like 0.58 has some added things. rkhunter seems to have the same version as sourceforge site. Thank-you Michael. My information came from "dnf history" and the tools' website

Re: security: wted?

2025-02-14 Thread home user via users
On 2/14/25 3:49 AM, Patrick O'Callaghan wrote: On Thu, 2025-02-13 at 23:32 -0800, Samuel Sieb wrote: Those tools are not going to provide any useful help. I tend to agree. I've never used either of them and have had no consequences as a result. Linux can have security issues of cour

Re: security: wted?

2025-02-14 Thread Patrick O'Callaghan
On Sat, 2025-02-15 at 02:19 +1030, Tim via users wrote: > Having said all that, most people don't serve websites from their own > PC any more, few ISPs allow it.  I do run a small family webserver on my desktop, but I also have Fail2Ban installed. It registers multiple failed connection attempts

Re: security: wted?

2025-02-14 Thread George N. White III
On Fri, Feb 14, 2025 at 11:50 AM Tim via users wrote: > > > Most of the time anti-malware running on Linux was to protect Windows > machines on the same network. Such as scanning incoming mail before > the Windows machines got it. > Decades ago at work many of us had email on IRIX64 or NextStep a

Re: security: wted?

2025-02-14 Thread Tim via users
alware products are good at stopping people who do that. There's very little of things just slipping in without your help. There's the obvious route of a miscreant giving someone advice to download and install BADTHING from their website, which might be a website with fake how-to-solve s

Re: security: wted?

2025-02-14 Thread Patrick O'Callaghan
On Thu, 2025-02-13 at 23:32 -0800, Samuel Sieb wrote: > Those tools are not going to provide any useful help. I tend to agree. I've never used either of them and have had no consequences as a result. Linux can have security issues of course, but my feeling is that they are much more l

Re: security: wted?

2025-02-13 Thread Samuel Sieb
On 2/13/25 7:39 PM, home user via users wrote: On 2/13/25 7:33 PM, Tim wrote: On Thu, 2025-02-13 at 10:50 -0700, home user via users wrote: When I ran chkrootkit, I got the following (including a few lines of context) regarding Is there a reason you feel the need to check for rootkits? I'm u

Re: security: wted?

2025-02-13 Thread Michael D. Setzer II via users
On 13 Feb 2025 at 20:39, home user via users wrote: Date sent: Thu, 13 Feb 2025 20:39:23 -0700 Subject:Re: security: wted? To: Community support for Fedora users Send reply to: Community support for Fedora users From

Re: security: wted?

2025-02-13 Thread home user via users
On 2/13/25 7:33 PM, Tim wrote: On Thu, 2025-02-13 at 10:50 -0700, home user via users wrote: When I ran chkrootkit, I got the following (including a few lines of context) regarding Is there a reason you feel the need to check for rootkits? I'm under the impression that if you don't install th

Re: security: wted?

2025-02-13 Thread Tim via users
On Thu, 2025-02-13 at 10:50 -0700, home user via users wrote: > When I ran chkrootkit, I got the following (including a few lines of > context) regarding Is there a reason you feel the need to check for rootkits? I'm under the impression that if you don't install things from outside of the repos,

Re: security: wted?

2025-02-13 Thread home user via users
On 2/13/25 3:11 PM, home user via users wrote: On 2/13/25 2:40 PM, Jonathan Billings wrote: On Feb 13, 2025, at 12:51, home user via users wrote: [snip] What is "wted", and is there a security problem? The “wted” function in the chkrootkit script runs “chwtmp -f /var/log/w

Re: security: wted?

2025-02-13 Thread home user via users
:05:51 AM MST. Error: No matching Packages to list bash.9[~]: - - - - - - duck-duck-go and google gave me nothing useful. What is "wted", and is there a security problem? The “wted” function in the chkrootkit script runs “chwtmp -f /var/log/wtmp` (the executable is part of the p

Re: security: wted?

2025-02-13 Thread home user via users
On 2/13/25 1:15 PM, Barry wrote: On 13 Feb 2025, at 17:51, home user via users wrote: When I ran chkrootkit I cannot find evidence of this tool being maintained. But I did find people saying its reports contain false positives. Barry Thank-you, Barry. I "patch" weekly. dnf says this

Re: security: wted?

2025-02-13 Thread home user via users
ackages to list bash.9[~]: - - - - - - duck-duck-go and google gave me nothing useful. What is "wted", and is there a security problem? You didn't try but I did: # dnf provides */wted No matches found. Sorry, no answer to your real question. Thank-you, Dave. -- _

Re: security: wted?

2025-02-13 Thread Jonathan Billings
for wted > bash.8[~]: dnf info wted > Last metadata expiration check: 0:23:46 ago on Thu 13 Feb 2025 10:05:51 AM > MST. > Error: No matching Packages to list > bash.9[~]: > - - - - - - > duck-duck-go and google gave me nothing useful. > > What is "wted", and is

Re: security: wted?

2025-02-13 Thread Barry
> On 13 Feb 2025, at 17:51, home user via users > wrote: > > When I ran chkrootkit I cannot find evidence of this tool being maintained. But I did find people saying its reports contain false positives. Barry -- ___ users mailing list -- users@l

Re: security: wted?

2025-02-13 Thread Dave Close
n check: 0:23:46 ago on Thu 13 Feb 2025 10:05:51 AM MST >. >Error: No matching Packages to list >bash.9[~]: >- - - - - - >duck-duck-go and google gave me nothing useful. > >What is "wted", and is there a security problem? You didn't try but I did: # dnf pro

security: wted?

2025-02-13 Thread home user via users
gave me nothing useful. What is "wted", and is there a security problem? -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedora

Re: security issue?

2024-11-29 Thread Stephen Morris
On 29/11/24 10:59, Barry wrote: On 28 Nov 2024, at 22:45, Stephen Morris wrote: being /usr/bin/egrep and /usr/bin/fgrep because it has said they have been replaced by a script, is that standard Fedora? Did you check what was in the files and where they were installed from? The scripts print

Re: [closed] Re: security issue?

2024-11-29 Thread Patrick O'Callaghan
On Fri, 2024-11-29 at 20:37 +, Will McDonald wrote: > Indeed. I've jumped between RH-based and Debian-based distros a little in > the last few years. I started tracking some of the deltas here: > https://github.com/wmcdonald404/distrosetta-stone You might want to change the yum references to d

Re: [closed] Re: security issue?

2024-11-29 Thread Will McDonald
On Fri, 29 Nov 2024 at 20:01, George N. White III wrote: > On Fri, Nov 29, 2024 at 3:09 PM Will McDonald wrote: > >> On Fri, 29 Nov 2024 at 18:20, home user via users < >> users@lists.fedoraproject.org> wrote: >> There's a lot of commonality across most distros, so while something (the >> link I

Re: [closed] Re: security issue?

2024-11-29 Thread George N. White III
On Fri, Nov 29, 2024 at 3:09 PM Will McDonald wrote: > On Fri, 29 Nov 2024 at 18:20, home user via users < > users@lists.fedoraproject.org> wrote: > There's a lot of commonality across most distros, so while something (the > link I referenced, for example) was from an Ask Ubuntu branch of > Stack

Re: [closed] Re: security issue?

2024-11-29 Thread Will McDonald
On Fri, 29 Nov 2024 at 18:20, home user via users < users@lists.fedoraproject.org> wrote: > On 11/28/24 10:24 AM, home user via users wrote: > > (f-40, stand-alone workstation, gnome) > > > > A few times in the past couple of months, I've received the following > warning from "chkrootkit": > > - -

[closed] Re: security issue?

2024-11-29 Thread home user via users
On 11/28/24 10:24 AM, home user via users wrote: (f-40, stand-alone workstation, gnome) A few times in the past couple of months, I've received the following warning from "chkrootkit": - - - - - - bash.1[~]: chkrootkit ROOTDIR is `/' Checking `amd'... not found [snip] Checking `bindshell'... no

Re: security issue?

2024-11-28 Thread Will McDonald
On Thu, 28 Nov 2024 at 17:38, Jeffrey Walton wrote: > On Thu, Nov 28, 2024 at 12:25 PM home user via users > wrote: > > Checking `lkm'... You have 1 process hidden for ps command > > > > What's going on with that lkm warning? > > Do you really need us to google it for you? > And what Jeffer

Re: security issue?

2024-11-28 Thread Barry
> On 28 Nov 2024, at 22:45, Stephen Morris wrote: > > being /usr/bin/egrep and /usr/bin/fgrep because it has said they have been > replaced by a script, is that standard Fedora? Did you check what was in the files and where they were installed from? The scripts print a warning message then r

Re: security issue?

2024-11-28 Thread Patrick O'Callaghan
On Fri, 2024-11-29 at 09:45 +1100, Stephen Morris wrote: > I've run chkrootkit and it said there were no issues, but rkhunter has > reported two suspect files, being /usr/bin/egrep and /usr/bin/fgrep > because it has said they have been replaced by a script, is that > standard Fedora? fgrep and

Re: security issue?

2024-11-28 Thread Stephen Morris
On 29/11/24 04:37, Jeffrey Walton wrote: On Thu, Nov 28, 2024 at 12:25 PM home user via users wrote: (f-40, stand-alone workstation, gnome) A few times in the past couple of months, I've received the following warning from "chkrootkit": - - - - - - bash.1[~]: chkrootkit ROOTDIR is `/' Checking

Re: security issue?

2024-11-28 Thread Jeffrey Walton
On Thu, Nov 28, 2024 at 12:25 PM home user via users wrote: > > (f-40, stand-alone workstation, gnome) > > A few times in the past couple of months, I've received the following > warning from "chkrootkit": > - - - - - - > bash.1[~]: chkrootkit > ROOTDIR is `/' > Checking `amd'... not found > [snip

security issue?

2024-11-28 Thread home user via users
(f-40, stand-alone workstation, gnome) A few times in the past couple of months, I've received the following warning from "chkrootkit": - - - - - - bash.1[~]: chkrootkit ROOTDIR is `/' Checking `amd'... not found [snip] Checking `bindshell'... not infected Checking `lkm'... You have 1 proce

Re: redhat-lsb-submod-security ???

2023-11-17 Thread ToddAndMargo via users
On 11/16/23 20:39, Tim via users wrote: On Thu, 2023-11-16 at 18:36 -0800, ToddAndMargo via users wrote: $ dnf info redhat-lsb-submod-security Last metadata expiration check: 3:57:51 ago on Thu 16 Nov 2023 02:37:19 PM PST. Installed Packages Name : redhat-lsb-submod-security Version

Re: redhat-lsb-submod-security ???

2023-11-16 Thread Tim via users
On Thu, 2023-11-16 at 18:36 -0800, ToddAndMargo via users wrote: > $ dnf info redhat-lsb-submod-security > > Last metadata expiration check: 3:57:51 ago on Thu 16 Nov 2023 02:37:19 > PM PST. > Installed Packages > Name : redhat-lsb-submod-security > Version : 4.

Re: redhat-lsb-submod-security ???

2023-11-16 Thread ToddAndMargo via users
On 11/16/23 02:57, ToddAndMargo via users wrote: Hi All, I am in the process of purging all the fc38 packages from my fc39 install. What is "redhat-lsb-submod-security"? And do I need it on fc39?  No other package is dependent on it. Many thanks, -T $ dnf info redhat-lsb-submo

Re: redhat-lsb-submod-security ???

2023-11-16 Thread ToddAndMargo via users
found in the other email. Well, when dnf got updated from 38 to 39 in a recent update, and consequently crashed, it became a stellar idea to get all the packages it needed updated to 39. I will wait a bit and see if redhat-lsb-submod-security gets rebuilt

Re: redhat-lsb-submod-security ???

2023-11-16 Thread Samuel Sieb
uot;redhat-lsb-submod-security"? And do I need it on fc39?  No other package is dependent on it. It's part of the lsb (Linux Standard Base, a compatibility package). If you don't need it, then you can remove it. I think there was a devel email about the lsb or parts o

redhat-lsb-submod-security ???

2023-11-16 Thread ToddAndMargo via users
Hi All, I am in the process of purging all the fc38 packages from my fc39 install. What is "redhat-lsb-submod-security"? And do I need it on fc39? No other package is dependent on it. Many thanks, -T -- ~~ Computers are like air conditio

Re: sudoers security question

2023-10-30 Thread ToddAndMargo via users
evil deeds, and boom, you are hacked. Am I missing something? If the bad guy can overwrite the executable, then you have a bigger security problem. I can see if someone is not careful so make sure the programs in sudoers are not locked to root, you would get in trouble, as you did state

Re: sudoers security question

2023-10-30 Thread ToddAndMargo via users
that program with his evil deeds, and boom, you are hacked. Am I missing something? If the bad guy can overwrite the executable, then you have a bigger security problem. True. But also, /etc/sudoers should not be readable by anyone other than root: On f37: $ rpm -qlv sudo | grep /etc

Re: sudoers security question

2023-10-30 Thread Todd Zullinger
gt;> overwrite that program with his evil deeds, and boom, >> you are hacked. >> >> Am I missing something? > > If the bad guy can overwrite the executable, then you have a bigger security > problem. True. But also, /etc/sudoers should not be readable by anyone

Re: sudoers security question

2023-10-30 Thread Samuel Sieb
. Am I missing something? If the bad guy can overwrite the executable, then you have a bigger security problem. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of

sudoers security question

2023-10-30 Thread ToddAndMargo via users
Hi All, It seems to me that since /etc/sudoers is visible from a standard user account, that all a bad guy has to do is cat the file, find some program that is elevated, then overwrite that program with his evil deeds, and boom, you are hacked. Am I missing something? -T -- ~~

On the security of the Linux disk encryption LUKS

2023-05-05 Thread Jeffrey Walton
Here's some interesting reading. "On the security of the Linux disk encryption LUKS," https://dys2p.com/en/2023-05-luks-security.html: Background On April 17, 2023 Matthew “mjg59” Garrett published an appeal to change the key derivation function (KDF) of LUKS-encrypted volumes: PS

Re: Security context for Apache

2023-04-07 Thread Patrick O'Callaghan
On Fri, 2023-04-07 at 10:17 -0400, Todd Zullinger wrote: >     semanage fcontext -a -t httpd_sys_content_t "/web(/.*)?" >     restorecon -R -v /web > That seems to do the trick, thanks. > Yes, if you knew what command to use, finding the manpage >  [...] The old UNIX joke was that any man page

Re: Security context for Apache

2023-04-07 Thread Todd Zullinger
Patrick O'Callaghan wrote: > I've set up a simple web server for private use (though I will enable > https access from outside the network), but I want some of the content > to be outside the default /var/www/html tree. When I do this, I get > file access errors when SElinux is enabled, but not whe

Security context for Apache

2023-04-07 Thread Patrick O'Callaghan
I've set up a simple web server for private use (though I will enable https access from outside the network), but I want some of the content to be outside the default /var/www/html tree. When I do this, I get file access errors when SElinux is enabled, but not when I set 'setenforcing=0'. I'd pref

Re: Help Needed Identifying a File and a Security Failure on it.

2022-12-28 Thread Stephen Morris
ame of the file, itself, to do a job. Stephen Morris: What I'm trying to determine is why journal-offline get a security failure on that file and not the equivalent file that has system before the @, especially when all 4 files in /var/log/journal are owned by root. If the ".#" i

Re: Help Needed Identifying a File and a Security Failure on it.

2022-12-24 Thread Tim via users
the >> name of the file, itself, to do a job. > Stephen Morris: > What I'm trying to determine is why journal-offline get a security > failure on that file and not the equivalent file that has system before > the @, especially when all 4 files in /var/log/journal are owne

Re: Help Needed Identifying a File and a Security Failure on it.

2022-12-24 Thread Stephen Morris
;file" would try to identify it, the others will just show you the contents for you to try and identify it. If it's zero bytes in size, the system is probably just using the name of the file, itself, to do a job. What I'm trying to determine is why journal-offline get a security

Re: Help Needed Identifying a File and a Security Failure on it.

2022-12-23 Thread Tim via users
On Sat, 2022-12-24 at 10:33 +1100, Stephen Morris wrote: > How do I identify what file > .#user-1000@7668ca11a5184a26bcf4a7c1858f9574-0a42-0005ef6078e3e7f0.journalc7d37931ac52343c > > is? You could use the file, less, cat, or hexdump commands. "file" would try to identify it, the o

Re: Help Needed Identifying a File and a Security Failure on it.

2022-12-23 Thread Stephen Morris
On 24/12/22 12:28, Samuel Sieb wrote: On 12/23/22 17:27, Samuel Sieb wrote: On 12/23/22 15:33, Stephen Morris wrote: Hi, How do I identify what file .#user-1000@7668ca11a5184a26bcf4a7c1858f9574-0a42-0005ef6078e3e7f0.journalc7d37931ac52343c is? The component before the "@" in

Re: Help Needed Identifying a File and a Security Failure on it.

2022-12-23 Thread Samuel Sieb
On 12/23/22 17:27, Samuel Sieb wrote: On 12/23/22 15:33, Stephen Morris wrote: Hi, How do I identify what file .#user-1000@7668ca11a5184a26bcf4a7c1858f9574-0a42-0005ef6078e3e7f0.journalc7d37931ac52343c is? The component before the "@" in the file name looks like the file may be

Re: Help Needed Identifying a File and a Security Failure on it.

2022-12-23 Thread Samuel Sieb
On 12/23/22 15:33, Stephen Morris wrote: Hi,     How do I identify what file .#user-1000@7668ca11a5184a26bcf4a7c1858f9574-0a42-0005ef6078e3e7f0.journalc7d37931ac52343c is? The component before the "@" in the file name looks like the file may be relative to my userid. I'm using an F3

Help Needed Identifying a File and a Security Failure on it.

2022-12-23 Thread Stephen Morris
Hi,     How do I identify what file .#user-1000@7668ca11a5184a26bcf4a7c1858f9574-0a42-0005ef6078e3e7f0.journalc7d37931ac52343c is? The component before the "@" in the file name looks like the file may be relative to my userid. I'm using an F37 system upgraded from F36.     Also how

Re: If venv is a reality can I build a program python wit it for more security ?

2022-02-26 Thread Dorian ROSSE
Sorry I were speak to Samuel instead gordon, Regards. Dorian Rosse. From: Dorian ROSSE Sent: Saturday, February 26, 2022 9:41:45 AM To: Community support for Fedora users Subject: Re: If venv is a reality can I build a program python wit it for more security

Re: If venv is a reality can I build a program python wit it for more security ?

2022-02-26 Thread Dorian ROSSE
ild a program python wit it for more security ? On 2/25/22 00:55, Dorian ROSSE wrote: > I hope in some month buy a VMware license I have an Intel i9 10 core and > 20 thread, Why vmware? Fedora comes with a virtualization system already. If you want really simple, you can try using

Re: If venv is a reality can I build a program python wit it for more security ?

2022-02-26 Thread Dorian ROSSE
Rosse. From: Samuel Sieb Sent: Friday, February 25, 2022 10:54:57 PM To: users@lists.fedoraproject.org Subject: Re: If venv is a reality can I build a program python wit it for more security ? On 2/25/22 00:55, Dorian ROSSE wrote: > I hope in some month buy a VMware license I have an Intel i9

Re: If venv is a reality can I build a program python wit it for more security ?

2022-02-25 Thread Samuel Sieb
On 2/25/22 00:55, Dorian ROSSE wrote: I hope in some month buy a VMware license I have an Intel i9 10 core and 20 thread, Why vmware? Fedora comes with a virtualization system already. If you want really simple, you can try using Gnome Boxes. ___

Re: If venv is a reality can I build a program python wit it for more security ?

2022-02-25 Thread Dorian ROSSE
@lists.fedoraproject.org Subject: Re: If venv is a reality can I build a program python wit it for more security ? On 2/24/22 02:33, Dorian ROSSE wrote: > If venv is a reality can I build a program python wit it for more > security ? No, venv won't give you any additional security if a python module ha

Re: If venv is a reality can I build a program python wit it for more security ?

2022-02-24 Thread Gordon Messmer
On 2/24/22 02:33, Dorian ROSSE wrote: If venv is a reality can I build a program python wit it for more security ? No, venv won't give you any additional security if a python module has malicious code. If you don't fully trust a python module but you want to run it anyway,

If venv is a reality can I build a program python wit it for more security ?

2022-02-24 Thread Dorian ROSSE
Hello, If venv is a reality can I build a program python wit it for more security ? Thanks you in advance for your answer, Regards. Dorian Rosse. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le

Re: Security hole in MATE?

2021-11-27 Thread Ed Greshko
n F34) desktop requests  it. This Missing password request in MATE seems to be a security hole. Your opinion? When you say "suspended" do you mean the system has gone into suspend mode or just that the screensaver becam active? Hi Ed, I suspended my machine actively by "sudo syste

Re: Security hole in MATE?

2021-11-27 Thread Samuel Sieb
On 11/27/21 00:08, Joachim Backes wrote: I'm running my F35 desktop with MATE. If I wake up after having suspended the box using some key, no password is requested, whereas the Cinnamon (I used it in F34) desktop requests it. This Missing password request in MATE seems to be a security

Re: Security hole in MATE?

2021-11-27 Thread Ed Greshko
On 27/11/2021 16:08, Joachim Backes wrote: I'm running my F35 desktop with MATE. If I wake up after having suspended the  box using some key, no password is requested, whereas the Cinnamon (I used it in F34) desktop requests  it. This Missing password request in MATE seems to be a security

Re: Security hole in MATE?

2021-11-27 Thread Ed Greshko
On 27/11/2021 16:08, Joachim Backes wrote: I'm running my F35 desktop with MATE. If I wake up after having suspended the  box using some key, no password is requested, whereas the Cinnamon (I used it in F34) desktop requests  it. This Missing password request in MATE seems to be a security

Security hole in MATE?

2021-11-27 Thread Joachim Backes
Hi Guys, I'm running my F35 desktop with MATE. If I wake up after having suspended the box using some key, no password is requested, whereas the Cinnamon (I used it in F34) desktop requests it. This Missing password request in MATE seems to be a security hole. Your opinion? Kind re

Re: Security Flaw - Thunderbird FYI

2021-09-21 Thread Ed Greshko
hat every app/program needs to take security/privacy into consideration when being developed. If a app/program is going to implement a securityprivacy feature (which encryption is) then best practices should be followed with them being the default.  Then, let the end user decide if they want to o

Re: Security Flaw - Thunderbird FYI

2021-09-20 Thread Fernando Cassia
On Mon., 20 Sep. 2021, 23:44 Ed Greshko, wrote: > > > This means if you get an encrypted message, walk away from you system, and > forget to secure it > anyone can click on an encrypted message it will be displayed. > . If you walk away from your system and forget to secure it and you don't trus

Security Flaw - Thunderbird FYI

2021-09-20 Thread Ed Greshko
Latest version of Thunderbird does integrate OpenPGP and does provide end-to-end encryption. There is, IMO, a security flaw. The "Generate Key" function they supply does not have the option to create a private key with a pass phrase. This means if you get an encrypted message, walk

Re: Security Software Hack vs. Fedora

2020-12-17 Thread Todd Zullinger
Roberto Ragusa wrote: > and then the best: > - installs with: "curl http://random_site/install_script | sudo bash" Owww, my eyes! Please, make it stop. Any software I see which recommends that idiom in their instructions is immediately on the "never install this crapware under any circumstances.

Re: Security Software Hack vs. Fedora

2020-12-17 Thread Roberto Ragusa
On 12/17/20 6:58 PM, Jorge Fábregas wrote: Yes... and how the malicious bits were delivered thru the update mechanism...a nice reminder for us on how careful we need to be when adding 3rd-party repos be it yum repos, flatpak repos, container repos and so on. True. Even a single gpgcheck=0 is a

Re: Security Software Hack vs. Fedora

2020-12-17 Thread Garry T. Williams
On Thursday, December 17, 2020 10:08:54 AM EST Jonathan Ryshpan wrote: > I read that there has been a major security hack of at least two > companies, FireEye and SolarWinds, which supply security software > to the US Government and to major corporations. (see: > https://www.nytimes

Re: Security Software Hack vs. Fedora

2020-12-17 Thread Jorge Fábregas
On 12/17/20 1:41 PM, stan via users wrote: > The deeper issue is that this illustrates how easy it is for skilled > programmers to insert malicious code into software so that it does > nefarious things while not being detected. That certainly affects > Fedora because it affects any system using co

Re: Security Software Hack vs. Fedora

2020-12-17 Thread stan via users
On Thu, 17 Dec 2020 07:08:54 -0800 Jonathan Ryshpan wrote: > I read that there has been a major security hack of at least two > companies, FireEye and SolarWinds,  which supply security software to > the US Government and to major corporations. >  (see: > https://www.nytimes

Re: Security Software Hack vs. Fedora

2020-12-17 Thread Matthew Miller
On Thu, Dec 17, 2020 at 07:08:54AM -0800, Jonathan Ryshpan wrote: > I read that there has been a major security hack of at least two > companies, FireEye and SolarWinds,  which supply security software to > the US Government and to major corporations. >  (see:  > https://www.nytimes

Security Software Hack vs. Fedora

2020-12-17 Thread Jonathan Ryshpan
I read that there has been a major security hack of at least two companies, FireEye and SolarWinds,  which supply security software to the US Government and to major corporations.  (see:  https://www.nytimes.com/2020/12/16/opinion/fireeye-solarwinds-russia-hack.html  ).  Does this have any effect

Re: modifications to sshd_config for security/hardening

2020-05-01 Thread Tim via users
On Fri, 2020-05-01 at 21:37 -0500, Chris Adams wrote: > FYI: "UseDNS no" has been the default in OpenSSH for a while now. Though, if you have a specific need, sometimes it is a good idea to specify them. Defaults can change. Or defaults applied by distribution-installed config files might not be

Re: modifications to sshd_config for security/hardening

2020-05-01 Thread Chris Adams
Once upon a time, Cameron Simpson said: > The UseDNS one is only slightly security - by disabling DNS lookup > of incoming clients we (a) speed things up, particularly on high > latency links and (b) stop leaking information about who is > connecting to use to upstream DNS servers (

Re: modifications to sshd_config for security/hardening

2020-05-01 Thread Cameron Simpson
: - PermitRootLogin no - PasswordAuthentication no - AllowUsers just specific logins names here - UseDNS no The UseDNS one is only slightly security - by disabling DNS lookup of incoming clients we (a) speed things up, particularly on high latency links and (b) stop leaking information about who is connecting to

modifications to sshd_config for security/hardening

2020-05-01 Thread bruce
Hi. Looking through lots of online sites for making changes/mods to sshd_config files to harden/secure the process. Would it be cool to post the changes here for comment? Also, anyone have suggestions as well? thanks ___ users mailing list -- users@lis

Re: Things to monitor/scan for security on a Fed VM

2020-04-24 Thread George N. White III
es of their ";logon:" magazine public a year after publication. These contain reports from security interest groups, book reviews, and articles highlighting tools for security monitoring. > I'm thinking the monitoring/scanning process needs to check for, > or handle the followi

Things to monitor/scan for security on a Fed VM

2020-04-24 Thread bruce
Hi/Morning. This is a continuation of my looking to nail down what should be Monitored/Scanned to secure a Fed server/VM. I've looked over a number of Monitor apps (Solarwinds/Nagios/Zabbix/etc). Can't really find a good list of the things that should be monitored, so I've compiled the following

Re: system monitoring/security - possibly off topic

2020-04-22 Thread Mauricio Tavares
On Wed, Apr 22, 2020 at 10:45 AM bruce wrote: > > > > . > . > . > Hey Mauricio, > > researching Security Onion, never hear of "zeek' >> You might have heard of it in its old name, bro. https://securityonion.readthedocs.io/en/latest/zeek.html &

Re: system monitoring/security - possibly off topic

2020-04-22 Thread bruce
. . . Hey Mauricio, researching Security Onion, never hear of "zeek' > >>> zeek? Security Onion? > I'm putting together a list of scanning tools that would run on the "client" server, but I'm tying to wrap my head around how all of the resulti

Re: system monitoring/security - possibly off topic

2020-04-21 Thread Mauricio Tavares
On Tue, Apr 21, 2020 at 12:23 PM bruce wrote: > > Hey Ed. > > Thanks for the reply. > > Regarding the security/monitoring issue. > > Here's my use case: > > I'm looking to have multiple servers. > Servers would be running different apps for differen

Re: system monitoring/security - possibly off topic

2020-04-21 Thread bruce
Hey Ed. Thanks for the reply. Regarding the security/monitoring issue. Here's my use case: I'm looking to have multiple servers. Servers would be running different apps for different purposes. All Servers running Fed -DB Server -mysql/mariadb -Server running webapps/httpd -Serve

Re: system monitoring/security - possibly off topic

2020-04-21 Thread Ed Greshko
On 2020-04-21 21:33, bruce wrote: > Not willing to step on toes. Is asking for opinions on tools to do > system/security monitoring off topic? Been doing research, thought I'd ask > here as well - if it's acceptable? Not off topic at all. Fedora supplies tools used in the

system monitoring/security - possibly off topic

2020-04-21 Thread bruce
Hey. Not willing to step on toes. Is asking for opinions on tools to do system/security monitoring off topic? Been doing research, thought I'd ask here as well - if it's acceptable? thanks ___ users mailing list -- users@lists.fedoraproj

Re: quick (I hope) e-mail security question. [SOLVED]

2019-07-16 Thread Tim via users
r address in a similar way (e.g. john...@gmail.com versus john@gmail.com versus jo.hnd...@gmail.com), or use them to simply make combined names more readable. At times you'll find some service that doesn't accept plus addressing, claiming it's for some kind of (crap) security reas

Re: quick (I hope) e-mail security question. [SOLVED]

2019-07-16 Thread home user via users
(responding to Samuel, George, and Tim) > If you're not sure and it's important, then try contacting > them to verify it. Use an alternate method if possible. That's how the message that triggered this thread was ultimately solved. But sometimes that's not available. I have several foreign fr

Re: quick (I hope) e-mail security question. [SOLVED]

2019-07-16 Thread George N. White III
On Mon, 15 Jul 2019 at 22:52, Samuel Sieb wrote: [...] > Are you going to change your email accounts every time some spammer > starts using the address? My email address has been used by virii and > spam for at least 15 years. It was funny because when this started to > be a thing, I got a few

Re: quick (I hope) e-mail security question. [SOLVED]

2019-07-15 Thread Samuel Sieb
On 7/15/19 8:28 PM, Tim via users wrote: One day someone might think to create a plug-in that checks links with two different addresses in such links, and red flags them. Thunderbird warns me about some links. I'm not sure what its criteria are, but it asks if I'm sure that I want to go to th

Re: quick (I hope) e-mail security question. [SOLVED]

2019-07-15 Thread Tim via users
Tim: >> I think he means: >> 1. Look at the lines up to and including the next received line. >> 2. Repeat the process, upwards. >> 3. Otherwise, stop looking any further, it's spam. Bill: > Parse Error! My mind incorrectly parsed what Tony said. I didn't find the language too clear, either. Bu

Re: quick (I hope) e-mail security question. [SOLVED]

2019-07-15 Thread Samuel Sieb
server got it straight from the Fedora mailman server. Before that it bounced around in the Fedora infrastructure a few times, but eventually you see that they got it from a Yahoo server. The Yahoo server doesn't say where it got it from, so maybe it was webmail or else they hide the client IP a

  1   2   3   4   5   6   7   8   >