- Legacy - lists.gtalug.org

VPN question (ssh)
by jzygmont-tEQKYFGiemxAYG7eUwYNkWD2FQJk+8+b＠public.gmane.org 21 Dec '03

21 Dec '03

> On December 20, 2003 07:00 pm, Fraser Campbell wrote: > > > If you care about your traffic being private at all some encryption just > > makes sense ... encryption can be at the app layer (ssh, https, secure > > imap, etc.), at the network layer (vpn) or at both the app and network > > layer. > > Also encryption doesn't stop people from being dumb. For example allowing > password based authentication with sshd leaves a rather weak link in the > chain (depending on users to use good passwords), IWO if you use strong > encryption with weak authentication you might as well not bother. but the password is encrypted in transfer right? maybe i'm wrong about this, but doesn't ssh use asymetric encryption initially, then symetric after the session key is established? -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

VPN question
by jzygmont-tEQKYFGiemxAYG7eUwYNkWD2FQJk+8+b＠public.gmane.org 21 Dec '03

21 Dec '03

On Sat, 20 Dec 2003, Fraser Campbell wrote: > On December 20, 2003 01:15 am, Justin Zygmont wrote: > > > Just a thought about VPN's and a hope to get back on topic to fun linux > > things, I was wondering if anyone knows why an encrypted VPN is so > > important using a phone line when it's usually just a point to point link > > with no chance of interception? > > If you're talking about a private phone line dialed onto a private network > then I think you have to be doing some pretty serious data pushing to worry > about encryption ... if you're sending credit card numbers, tax records or > business secrets -- and if it's possible that someone would know that you're > doing it and find value in the information -- then it's probably worth > encrypting for the little overhead involved (cpu utilization for vpn-type > encryption at modem speeds would be a pittance). If your phone line usage is > sporadic and doesn't involve much sensitive information then I wouldn't see > the value in encryption (though I suppose with such low overhead, why not?). > > If however you're phone line is connecting to the Internet then encryption > becomes more important. Let's say your data travels through 10 different > networks (pretty common) to get to it's destination, anyone with admin access > (or at least wire access) can potentially intercept your traffic. If you > care about your traffic being private at all some encryption just makes sense > ... encryption can be at the app layer (ssh, https, secure imap, etc.), at > the network layer (vpn) or at both the app and network layer. > > If by bringing up phone lines you're meaning the old argument of cable being > shared versus DSL not being shared then I don't agree that any distinction > needs to be made in that respect ... either way you're connecting to the > share network known as the Internet. Also, last I had Rogers, it appears > that my cable connection was switched (I only saw my own traffic and > broadcast traffic. I see, that clears things up quite a bit. -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

LF smaller distro to use as foundation to build a custom server onto
by robert-5LEc/6Zm6xCUd8a0hrldnti2O/JbrIOy＠public.gmane.org 20 Dec '03

20 Dec '03

On Sun, 21 Dec 2003, Fraser Campbell wrote: > Debian starts at less than 100MB, how much more than that figure you end > up at depends on the development libraries you will install. When building a server I normally start with a base Debian Stable install and skip both tasksel (low granularity task selection) and dselect (high granularity task selection) and just apt-get exactly what the box needs. The extensive dependency tree built into apt handles it all nicely. Rob -- Robert Brockway B.Sc. email: robert-5LEc/6Zm6xCUd8a0hrldnti2O/JbrIOy at public.gmane.org, zzbrock at uqconnect.net Linux counter project ID #16440 (http://counter.li.org) "The earth is but one country and mankind its citizens" -Baha'u'llah -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

LF smaller distro to use as foundation to build a custom server onto
by opengeometry-FFYn/CNdgSA＠public.gmane.org 20 Dec '03

20 Dec '03

On Sun, Dec 21, 2003 at 12:53:08AM -0500, Teddy Mills wrote: > I guess the subject says it all. > Im looking for a smaller distro to use as a foundation to build a custom > server onto. > > 3 Requirements > > 1) Open source friendly > I will be using all opens-source tars. To compile all that source, it > should have a current GCC, programmers development and libraries. > > 2) Small footprint of 200 to 400MB (no need for X-Windows, but I'll take it > if everythings not too bloated) > I know theres lots of distros out there. I figure there's got to be a mini > distro of about ~200-~400MB that will fit the bill. > > 3) Ease of use > There are some like the Linux from Scratch that will require serious amounts > of work. I want a base to work from. > Not build the base itself. > > > Please reply here with your recommendations. > Thanks TLUG! Slackware -- William Park, Open Geometry Consulting, <opengeometry-FFYn/CNdgSA at public.gmane.org> Linux solution for data management and processing. -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

LF smaller distro to use as foundation to build a custom server onto
by fraser-Txk5XLRqZ6CsTnJN9+BGXg＠public.gmane.org 20 Dec '03

20 Dec '03

On December 21, 2003 12:53 am, Teddy Mills wrote: > 2) Small footprint of 200 to 400MB (no need for X-Windows, but I'll take > it if everythings not too bloated) > I know theres lots of distros out there. I figure there's got to be a > mini distro of about ~200-~400MB that will fit the bill. Debian starts at less than 100MB, how much more than that figure you end up at depends on the development libraries you will install. -- Fraser Campbell <fraser-Txk5XLRqZ6CsTnJN9+BGXg at public.gmane.org> http://www.wehave.net/ Georgetown, Ontario, Canada Debian GNU/Linux -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

LF smaller distro to use as foundation to build a custom server onto
by teddymills-VFlxZYho3OA＠public.gmane.org 20 Dec '03

20 Dec '03

I guess the subject says it all. Im looking for a smaller distro to use as a foundation to build a custom server onto. 3 Requirements 1) Open source friendly I will be using all opens-source tars. To compile all that source, it should have a current GCC, programmers development and libraries. 2) Small footprint of 200 to 400MB (no need for X-Windows, but I'll take it if everythings not too bloated) I know theres lots of distros out there. I figure there's got to be a mini distro of about ~200-~400MB that will fit the bill. 3) Ease of use There are some like the Linux from Scratch that will require serious amounts of work. I want a base to work from. Not build the base itself. Please reply here with your recommendations. Thanks TLUG! /teddy --------------------------------------------------------------- teddy mills http://www.vger.ca VGER directives...To collect...all that is collectable. To sell...all that is saleable.To merchandise...all that is merchandisable. Family Guys, Quagmire "allllllllllllllllllllllllllllllll right" -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

VPN question
by fraser-Txk5XLRqZ6CsTnJN9+BGXg＠public.gmane.org 20 Dec '03

20 Dec '03

On December 20, 2003 07:00 pm, Fraser Campbell wrote: > If you care about your traffic being private at all some encryption just > makes sense ... encryption can be at the app layer (ssh, https, secure > imap, etc.), at the network layer (vpn) or at both the app and network > layer. Also encryption doesn't stop people from being dumb. For example allowing password based authentication with sshd leaves a rather weak link in the chain (depending on users to use good passwords), IWO if you use strong encryption with weak authentication you might as well not bother. -- Fraser Campbell <fraser-Txk5XLRqZ6CsTnJN9+BGXg at public.gmane.org> http://www.wehave.net/ Georgetown, Ontario, Canada Debian GNU/Linux -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

VPN question
by fraser-Txk5XLRqZ6CsTnJN9+BGXg＠public.gmane.org 20 Dec '03

20 Dec '03

On December 20, 2003 01:15 am, Justin Zygmont wrote: > Just a thought about VPN's and a hope to get back on topic to fun linux > things, I was wondering if anyone knows why an encrypted VPN is so > important using a phone line when it's usually just a point to point link > with no chance of interception? If you're talking about a private phone line dialed onto a private network then I think you have to be doing some pretty serious data pushing to worry about encryption ... if you're sending credit card numbers, tax records or business secrets -- and if it's possible that someone would know that you're doing it and find value in the information -- then it's probably worth encrypting for the little overhead involved (cpu utilization for vpn-type encryption at modem speeds would be a pittance). If your phone line usage is sporadic and doesn't involve much sensitive information then I wouldn't see the value in encryption (though I suppose with such low overhead, why not?). If however you're phone line is connecting to the Internet then encryption becomes more important. Let's say your data travels through 10 different networks (pretty common) to get to it's destination, anyone with admin access (or at least wire access) can potentially intercept your traffic. If you care about your traffic being private at all some encryption just makes sense ... encryption can be at the app layer (ssh, https, secure imap, etc.), at the network layer (vpn) or at both the app and network layer. If by bringing up phone lines you're meaning the old argument of cable being shared versus DSL not being shared then I don't agree that any distinction needs to be made in that respect ... either way you're connecting to the share network known as the Internet. Also, last I had Rogers, it appears that my cable connection was switched (I only saw my own traffic and broadcast traffic. -- Fraser Campbell <fraser-Txk5XLRqZ6CsTnJN9+BGXg at public.gmane.org> http://www.wehave.net/ Georgetown, Ontario, Canada Debian GNU/Linux -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

VPN question
by jwtlai-Xhj3G7Rj6JI＠public.gmane.org 20 Dec '03

20 Dec '03

On Sat, 20 Dec 2003, Justin Zygmont wrote: > On Sat, 20 Dec 2003, James Knott wrote: > > Why do you think a phone line has no chance of interception? Phone > > lines have been tapped for years. It is very easy to do, if you know how. > > to intercept data transmission? I don't think so. I never heard of that > happening. It's been done. http://zdnet.com.com/2100-11-501418.html?legacy=zdnn By John Simons The Wall Street Journal Online September 30, 1999, 5:00 PM PT Morris and technicians at the FBI's engineering lab in Quantico, Va., worked together to draft the specifications for the device Morris wanted. It would need to do the reverse of what a computer's modem does. A modem takes digital data from a computer and translates it to analog signals that can be sent via phone lines. Morris's device would intercept the analog signals on Cantrell's phone line and convert those impulses back to digital signals so the FBI's computers could capture and record each of a suspect's keystrokes." I snipped only the relevant paragraph under fair use. The prototype unit cost U$70K in 1994. With Moore's Law, I'm sure the cost has gone way down. Jim -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

DVD Burning and Viewing
by jvetterli-zC6tqtfhjqE＠public.gmane.org 20 Dec '03

20 Dec '03

On Fri, 19 Dec 2003, Taavi Burns wrote: > using just the IDE driver. Your commandline starts to look something > like this (yes, I have but one IDE channel, so hdb is my burner): > cdrecord dev=ATAPI:/dev/hdb speed=24 image.iso Does this setup give you problems? I was under the impression that putting the hard-drive and cd-burner on the same ide channel could lead to buffer underrun errors, since the controller has problems dealing with both devices in use at the same time. JV -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0