main

main@lists.alug.org.uk

10364 discussions

Security problems (was Lurkers)
by MJ Ray 24 Aug '01

24 Aug '01

xsprite(a)bigfoot.com writes: > ssh: mitm, key stroke analysis (which seems to have been "discovered" lately > but i thought it was obvious to anyone sitting down with tcpdump > and an ethernet with ssh...) Can someone clue me in on how MITM attack would work here? Am I right in thinking it's only when the user types their password into the remote machine? > The problem with certificate based approaches is that in order to be What alternatives are there to certificates? I'm probably just hard-of-thinking this morning.

3 2

FW: I thought you might want this
by Earl Brannigan 24 Aug '01

24 Aug '01

Anyone got a few grand to spare.... http://cgi.ebay.co.uk/aw-cgi/eBayISAPI.dll?ViewItem&item=1181583482 Cheers Earl

2 1

Re: [Alug] Announce ALUG 2001.5
by Jenny_Hopkins＠toby-churchill.com 24 Aug '01

24 Aug '01

Alexis Lee has the sig: >The early bird gets the worm. The second mouse gets the cheese. - Jen Hopkins Wow! Did I really say that? ;-) I'll offer up a laptop for a debian install, but it was pretty tricky when i put redhat on there. Jen

1 0

Re: [Alug] tty puzzle
by Jenny_Hopkins＠toby-churchill.com 24 Aug '01

24 Aug '01

Adam Bower wrote: >It sounds like control characters are getting written to the console or >something? try booting it in single user mode and see if it lets you login >then? OK, thanks for all the comments on this - turns out it is a hardware problem; bios is all screwed up too - graphics card, maybe, or a BUS thing. I'll have to try and get my hands on some other bits when i'm back. Perhaps leaving it running overnight caused bad connections to loosen further if they warmed up. The errorlog postgres thing must be a coincidental error causing a red herring . Jenny.

1 0

Re: Window managers // was Re: [Alug] Website
by MJ Ray 24 Aug '01

24 Aug '01

jo(a)yee-ha.demon.co.uk writes: > While I see your point, and mostly agree with it, I can understand that > some people who spend a lot of time at their conputer may be of the > opinion that it may as well be a nice environment to look at, right? Why > do people decorate their houses? Well, that's what X gave you a root window for. With all due respect, <rant>most theming equates more to taking all the door handles off and replacing them with a small button 20cm above the bottom hinge-side corner of the door than giving it a new coat of paint. Yes, I put graphics on my root window (xplanet with cloud maps at home, random web images from a script I wrote at work) and change the colours of various parts of the system. I even skin gkrellm. I don't change the way all controls work every time, though.</rant> > As for spare CPU cycles, I thought everyone was running seti@home these > days.. ;) distributed.net, surely?

1 0

Re: [Alug] Announce ALUG 2001.5
by David Freeman 24 Aug '01

24 Aug '01

On 23 Aug 2001 22:06:50 +0100 MJ Ray wrote: > John Woodard <mail(a)johnwoodard.co.uk> writes: > > > > 1. John Woodard -- "Why I can't install Debian" > > Mine was more of a question than a talk. I fear the talk would be > rather > > short along the lines of "I can't install deb coz I'm a total > plonker!" at > > leat in the eyes of MJR I am. :-) > > Oh, OK, we're looking for a new talk, people ;-) > > A list of problems might be a good challenge to end the block on, > though. I'm sure with the hard drive swapping, there's more than > enough to draw on for 5 mins or so. > > And no, John, you're not a plonker from where I'm standing. There's > someone far ahead in that contest ;-) /me wonders who you are refering to here :o) Thanks D > _______________________________________________ > alug, the Anglian Linux User Group list > Send list replies to alug(a)stu.uea.ac.uk > http://www.anglian.lug.org.uk/ http://rabbit.stu.uea.ac.uk/cgi-bin/listinfo/alug > See the website for instructions on digest or unsub! -- "Your house sounds like a fire hazard" Peter Clarke

2 1

Re: [Alug] tty puzzle
by Jenny_Hopkins＠toby-churchill.com 23 Aug '01

23 Aug '01

Jonathan McDowell wrote: >Pet hate. It's Jonathan. That's the most common way of spelling the >name. There are some Jonathon's but they're vastly in the minority. Sorry about that. >> Will I have to crash out here? Bum. >If you have Magic SysRQ support compiled in try: >ALT-SysRQ-r >and see if that helps. If it doesn't: >ALT-SysRQ-s ALT-SysRQ-u >to sync and remount reonly the disks. >Or if you can log in remotely: >reset < /dev/tty1 >perhaps. No ctl-alt-del, no response from ALT-SysRQ-*, can't log in remotely, connection refused. Can't ping from other boxes. Can't log in blind as no response from many keys, including the "n" key which all my passwords contain. Cold reboot and box is still behaving the same - i.e. can't do anything with it. I don't understand - I go home leaving it switched on, come back next morning and it is kaput. Don't tell me there is no solution except a reinstall? Why me? I think I'll give up computers and take up the bass again. :-( Or take up absailing. Bricklaying. Cycling. Knitting. Jen.

3 2

Re: [Alug] tty puzzle
by John Seago 23 Aug '01

23 Aug '01

Perhaps you should try Slackware, I understand from having bought the disks and scanned the various web-sites on installation and configuration, that it's even more complicated/difficult than Debian, (I've put it to one side until I understand what I'm trying to do with what I've got). Note that the one recent mention of Slackware 8 was from someone who wanted to buy it with the manual! It could provide a challenge even greater than abseiling! And no don't ask me I can't even work out how to get at my second disk! John Seago

1 0

Re: [Alug] Lurkers (was new subscriber introductions)
by David Freeman 23 Aug '01

23 Aug '01

On Wed, 22 Aug 2001 10:00:28 +0100 xsprite(a)bigfoot.com wrote: > on Wed, Aug 22, 2001 at 12:11:05AM +0000, David Freeman scribbled: > > > > Web server of anything outside of a firewall == OpenBSD > > > Why OpenBSD? > It doesn't even have a mature firewalling system at the momement, let > alone an > easy to use isakmp daemon. > Oh, and they've also dropped qmail, djbdns, publicfile, as well as ipf. Security, lack of wholes. > Even Linux has security-orientated code audits performed on it now. > So how is it more secure/a better choice? I wan't aware that Linux had audits like this. Maybe Linux would be a better choice. > It's hellishly slow on most low spec stuff that you would normally > love to use > as a dedicated firewall/small webserver. A p100 with 8 megs of ram > crawls under > openbsd. The task scheduler pretty crappy. The same box flies under > NetBSD. > Oh, and NetBSD runs under about 44 architectures. But how well audited is netBSD? how many wholes are there in it? Thanks D > _______________________________________________ > alug, the Anglian Linux User Group list > Send list replies to alug(a)stu.uea.ac.uk > http://www.anglian.lug.org.uk/ http://rabbit.stu.uea.ac.uk/cgi-bin/listinfo/alug > See the website for instructions on digest or unsub! -- "Your house sounds like a fire hazard" Peter Clarke

2 1

Re: [Alug] Lurkers (was new subscriber introductions)
by David Freeman 23 Aug '01

23 Aug '01

On 23 Aug 2001 22:05:12 +0100 MJ Ray wrote: > David Freeman <david_freeman(a)alug.org.uk> writes: > > > I know you need to do an exam for a VHF license (got mine soon) but for > > 802.11 you don't it sits in the Industrial, Scientific and Medical (ISM) > > 802.11? Airsnort! see http://lwn.net/ security section amongst > others. Hey get with the picture, WEP was cracked ages ago. It is known to be easy to crack. As for Airsnort its just a free version of a package I saw for windows which did all the same stuff. If you run 802.11 then you need to run IPSec over the top, its the only way of making it secure. Thanks D -- "Your house sounds like a fire hazard" Peter Clarke

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

main