- Legacy - lists.gtalug.org

Debian attacker may have used new exploit
by joehill-rieW9WUcm8FFJ04o6PK0Fg＠public.gmane.org 03 Dec '03

03 Dec '03

On Wed, 03 Dec 2003 00:24:51 -0500 cbbrowne-HInyCGIudOg at public.gmane.org wrote: > But that is rather like finding your home burgled, and, seeing normal > burglary tools lying around, assuming that it was, instead, black-ops > NSA agents trying to make it LOOK like an ordinary burglary. That would be *my* first assumption, 'course I just watched Enemy of the State for the fifteenth time...Tony Scott and Gene Hackman, ya can't go wrong! Back on topic though, I just can't resist the notion that somehow this is an attempt at a smear campaign by "enemy agents". I could see Darl McBride, sitting in a dark office, merc hackers standing at the ready..."See what you can do..." ;-) -- JoeHill ++ ICQ # 280779813 Registered Linux user #282046 Homepage: www.orderinchaos.org +++++++++++++++++++++++++++ "Wealth is the relentless enemy of understanding." -- John Kenneth Galbraith -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

sound & partitions
by aitken-BwLjziHGQLusTnJN9+BGXg＠public.gmane.org 03 Dec '03

03 Dec '03

I am starting my own business with the blessing of hrdc. If anyone is curious for more details you can certainly email me offline. This post will be long enough as it is : ) Two questions and one request: 1. I am reinstalling linux because I whimped out on my last install when I had trouble creating /home as a separate partition (I had the error: could not allocate partition". I settled for only / (9492 MB) and swap (510). Now I have a sick system. I could troubleshoot it, but I would still have an installation with no separate /home partition, which I don't think is a good idea. for a business.There is nothing critical in /home now, so I don't think I will bother troubleshooting just to copy it's contents over the network - no point. But what I do want to do is have /home on a separate partition on my reinstall. I don't want to disturb the existing MS partitions (for better or for worse, for now, I am using Pro Tools Free for the music recording part of my business). I have a C:\ and D:\ partition on the drive. That's only two primary partitions - so, I don't see why I can't create separate partitions for /, /home and swap - albeit they won't all be primary. Does Disk Druid have trouble with such things? Should I take the adult's approach and use fdisk? 2. Keeping in mind that want to get up and running again soon, is the following still my easiest best option?: install rh 7.3 (good multimedia OS, with sound already compiled into the kernel) and upgrade to 8.0 (to get Open Office and other goodies). 3. I could continue to use Pro Tools Free on W98SE for the music recording part of my business, but I would prefer to do everything in linux. This is important to the second phase of this business. I'll keep working through _The BOOK of LINUX MUSIC & SOUND_ by Dave Phillips (no starch press), but that means it'll be a year (I'm not being dramatic) before I'm recording sound in linux. If anyone has done this, I'd love to hear from you. Sincerely, Chris Aitken -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

quiet PC
by aitken-BwLjziHGQLusTnJN9+BGXg＠public.gmane.org 03 Dec '03

03 Dec '03

Chris Aitken wrote: > ------------------------------------------------------------------------ > > Subject: Re: [TLUG]: quiet PC > Date: Mon, 8 Dec 2003 20:39:00 -0500 > From: Peter Hiscocks <phiscock-g851W1bGYuGnS0EtXVNi6w at public.gmane.org> > Reply-To: tlug-lxSQFCZeNF4 at public.gmane.org > To: tlug-lxSQFCZeNF4 at public.gmane.org > References: <3FD51233.6E2F5C25-BwLjziHGQLusTnJN9+BGXg at public.gmane.org> > > I sympathise, many PC's these days are unbearably noisy. I got one that was > unacceptably noisy and simply took it back to OTA the next day and asked for > a quieter fan. They obliged. That's the easiest and simplest solution. Thanks, everybody. I was blown away by the volume of feedback I got from this post. I thought I should let you know how I resolved this - such as it is. Honson would not commit to installing an ultra-quiet fan. The clerk told me that "all fans make some noise". I told her that I'm sure that that is true but that I understand that some fans are so quiet that you can't hear them ; ) She said she would have a tech call me - a tech never did call me. So, I took the PC to Stan at Union Computers (Yonge, South of Eg). He was a little more bullish on quiet fans. So, as is my nature, I let him "pour honey down my ear" (is that really an expression, or did I make that up?). So, for 80 bucks cash, I now have a PC that is definitely quiter (but not near-noiseless), and the noise it does make is at least uniform (not the organ grinder effect I had before). So, it's quieter (better fans) and its sound is uniform now, not pulsing and changing (that's because the fans are new). The PCU fan/heatsink packaging was not saved, so the best information Stan could give me was that it is rated for a 1.5 GHz processor (whereas I only have an 800 MHz one). The PSU fan specs are: Dimension: 80X80X25 Air Flow: 32.5CFM Speed: 2500 RPM Noise: 28.3 bBA Voltage: 12 VDC Current: 0.13 A Power: 1.6 W Thanks again, Chris Aitken -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Debian attacker may have used new exploit
by robert-5LEc/6Zm6xCUd8a0hrldnti2O/JbrIOy＠public.gmane.org 02 Dec '03

02 Dec '03

On Wed, 3 Dec 2003, Chris Keelan wrote: > They've /always/ taken security seriously. The wisest approach to Here here. The Debian people take security very seriously. This is evident all over the distribution. Rob -- Robert Brockway B.Sc. email: robert-5LEc/6Zm6xCUd8a0hrldnti2O/JbrIOy at public.gmane.org, zzbrock at uqconnect.net Linux counter project ID #16440 (http://counter.li.org) "The earth is but one country and mankind its citizens" -Baha'u'llah -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Sendmail for smtp routing..
by jerome-mhXWc29+iYPyG1zEObXtfA＠public.gmane.org 02 Dec '03

02 Dec '03

hi, would it be possible to route all mails to a different mail server whos recipient belongs to mydomain.com only.. TIA, -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Debian attacker may have used new exploit
by cbbrowne-HInyCGIudOg＠public.gmane.org 02 Dec '03

02 Dec '03

> what I don;t understand about this, is how could they know that this was > the exploit the hacker used, what if there is something else? The attacker left some binaries lying around, and an analysis of their contents showed up code pointing at that particular exploit. It is, of course, conceivable that the attacker might have used some other unknown mechanism, and left the binaries around to mislead them into believing that particular attack was used. But that is rather like finding your home burgled, and, seeing normal burglary tools lying around, assuming that it was, instead, black-ops NSA agents trying to make it LOOK like an ordinary burglary. Forgive me if I were to wonder, in such a case, if you were not just a little bit off your rocker... -- let name="cbbrowne" and tld="ntlug.org" in name ^ "@" ^ tld;; http://www3.sympatico.ca/cbbrowne/spreadsheets.html Rules of the Evil Overlord #96. "My door mechanisms will be designed so that blasting the control panel on the outside seals the door and blasting the control panel on the inside opens the door, not vice versa." <http://www.eviloverlord.com/> -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Debian attacker may have used new exploit
by rufmetal-MwcKTmeKVNQ＠public.gmane.org 02 Dec '03

02 Dec '03

On Tue, 2 Dec 2003 18:01:31 -0500 (EST) Justin Zygmont <jzygmont-tEQKYFGiemxAYG7eUwYNkWD2FQJk+8+b at public.gmane.org> wrote: > I guess they're going to take security a bit more seriously now? hehe Read the Debian Investigation Report After Server Compromises at <http://linuxtoday.com/security/2003120202726SCDBSV>. They've /always/ taken security seriously. The wisest approach to is to assume that you're going to get 0wn3d and plan accordingly. Ask yourself: if this were a certain proprietary company, would this news leak out so quickly, and would said organization publish a detailed post-mortem as soon as one is available? I think that Debian getting 0wn3d demonstrates not only that the FS community is committed to security but that this commitment actually pays off. ~ C -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Encrypted filesystems?
by linux-cOjNTMaGA5U＠public.gmane.org 02 Dec '03

02 Dec '03

On Tue, Dec 02, 2003 at 01:54:49PM -0500, Thomas Gibson wrote: > Just curious if anyone on the list knows what's > available(, has had experience, etc) WRT encrypted > filesystems under Linux? I see some older stuff on > the web related to TCFS but was not able to find > anything current. I am looking for a solution in > which all encryption is done in the client. I use loop-aes. http://loop-aes.sf.net/ It's good for swap, as well as for filesystems. - Ian -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

2 1

SMC Cable/DSL 4port router
by james.knott-bJEeYj9oJeDQT0dZR+AlfA＠public.gmane.org 02 Dec '03

02 Dec '03

Madison Kelly wrote: > > Back when those routers first came out SMC was really the only one on > the market and thus I sold a number of them. A -lot- of them later > failed. I switched to using Linksys (now Cisco) and I haven't had a > single failure yet. > > Madison A friend of mine has an SMC Barricade. It's been running well for a couple of years. -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

SMC Cable/DSL 4port router
by james.knott-bJEeYj9oJeDQT0dZR+AlfA＠public.gmane.org 02 Dec '03

02 Dec '03

Tim Writer wrote: > James Knott <james.knott-bJEeYj9oJeDQT0dZR+AlfA at public.gmane.org> writes: > > >>Terry Tanski wrote: >> >>>Hi all, >>>Anyone have any comments on the SMC Cable/DSL 4port router (SMC7004VBR)? >>>How does it compare to the DLINK (604) or the LinkSys (SR41)? Does it have >>>half-decent firewall capabilities? >> >>>Terry >> >>I have the wireless version of that. It seems to be OK. What capabilities >>were you looking for? > > > Well, I worked on the wireless version for a while and was not at all > impressed. The firewalling capabilities are only applicable to the Internet > connection, i.e. you cannot firewall your wireless LAN from your traditional > LAN. You can use MAC based ACLs to prevent wireless users from going out to > the Internet but you can't stop them from accessing your wired LAN. You can > also restrict wireless traffic but you can't implement a deny by default > policy, i.e. you cannot deny everything except the few services you want to > allow, you can only deny specific services. > > The bottom line: as long as you're not using wireless and you're using NAT, > it will give you a basic level of protection simply due to the use of private > IPs with NAT. IOW, it's okay for a simple home setting but I wouldn't use it > in a business setting. > I've got mine between my Linux firewall and cable modem. This way, the only way into my home network, is via CIPE VPN or SSH. Anyone wanting to access the internet will have to get past the 124 (actually 104) bit WEP, and yes I'm aware of it's weakness. It would be nice if you could turn around the firewall part of it, so that you could filter the wireless and plug the WAN side into the local network. -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0