- Legacy - lists.gtalug.org

Debian attacker may have used new exploit
by jzygmont-tEQKYFGiemxAYG7eUwYNkWD2FQJk+8+b＠public.gmane.org 02 Dec '03

02 Dec '03

I guess they're going to take security a bit more seriously now? hehe On Tue, 2 Dec 2003, Robert Brockway wrote: > On Tue, 2 Dec 2003, Justin Zygmont wrote: > > > what I don;t understand about this, is how could they know that this was > > the exploit the hacker used, what if there is something else? > > I believe the attacker left some clues such as binaries lying around and > these were reverse engineered, revealing the exploit. I understand the > Redhat & Suse security teams worked with the Debian developers on this > one. > > It isn't impossible that there is another exploit but I consider it > unlikely. Occam's Razor suggests it is likely only one exploit was used. > If I leave the front door open and the back door open a burglar will > probably only enter through one of them. The burglar may not even > discover the other is open. > > There might be other exploits on the Debian servers but that is as likely > to be the case as on any other box. A properly patched box shouldn't have > any known security problems. > > Rob > > -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

SOT: shitfs in spam trends and topics
by jzygmont-tEQKYFGiemxAYG7eUwYNkWD2FQJk+8+b＠public.gmane.org 02 Dec '03

02 Dec '03

I was toying with an ICQ bot the other night, it would answer the same questions with different answers, I was hoping I could hack it and find a way to take control of it. Anyone know if that's possible? I mean there has to be a way of controlling it. -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Encrypted filesystems?
by cbbrowne-HInyCGIudOg＠public.gmane.org 02 Dec '03

02 Dec '03

> Just curious if anyone on the list knows what's > available(, has had experience, etc) WRT encrypted > filesystems under Linux? I see some older stuff on > the web related to TCFS but was not able to find > anything current. I am looking for a solution in > which all encryption is done in the client. I use CFS, which is fairly widely available in packaged form, which "plays" as an NFS server. It's a bit slow, but it is pretty portable, requiring no kernel mods, which strikes me as a win. -- (format nil "~S@~S" "aa454" "freenet.carleton.ca") http://cbbrowne.com/info/linuxxian.html "You can only examine 10 levels of pushdown, because that's all the fingers you have to stick in the listing." -- Anonymous programmer - "TOPS-10 Crash Analysis Guide" -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Toronto FreeNet stable now; wish it were co-op, tho
by taavi-LbuTpDkqzNzXI80/IeQp7B2eb7JE58TQ＠public.gmane.org 02 Dec '03

02 Dec '03

On Tue, Dec 02, 2003 at 04:25:04PM -0500, Lennart Sorensen wrote: > I would think the line will let you call *whatever it is to activate a > line, AND 911. I think the 911 access was a reason they started leaving > a dial tone on unused lines. The simpler activation method is probably > another reason. I suspected as much, but was not about to test it directly. ;) > Now can users of Sprint phone lines get DSL yet? AFAIK that's not been the problem...it was that Bell refused to give Sympatico service to Sprint users. I was pretty sure the CRTC smacked them down for that, though. -- taa /*eof*/ -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Linux a multiarchitecture system
by cbbrowne-HInyCGIudOg＠public.gmane.org 02 Dec '03

02 Dec '03

> On Sat, Nov 29, 2003 at 11:31:59PM -0500, cbbrowne-HInyCGIudOg at public.gmane.org wrote: > > Hmm? > > > > % ls /usr/src/linux/arch > > alpha cris ia64 mips parisc ppc64 s390x sparc x86_64 > > arm i386 m68k mips64 ppc s390 sh sparc64 > > > > Linux runs on at least 15 architectures NOT produced by Intel. > > Well technically intel does produce alpha and arm, i386 and ia64. :) They _manufacture_ Alpha and StrongARM, after having purchased rights from Digital. > I will give you the other 13. intel only invented 2 of them, but make 4 > of them. Whether or not we quibble over 2 of the architectures, there are still a LOT more non-Intel architectures than there are Intel architectures. -- (format nil "~S@~S" "cbbrowne" "cbbrowne.com") http://www3.sympatico.ca/cbbrowne/spreadsheets.html We all live in a yellow subroutine, a yellow subroutine, a yellow subroutine... -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

GUI
by lsorense-1wCw9BSqJbv44Nm34jS7GywD8/FfD2ys＠public.gmane.org 02 Dec '03

02 Dec '03

On Sat, Nov 29, 2003 at 11:31:59PM -0500, cbbrowne-HInyCGIudOg at public.gmane.org wrote: > Hmm? > > % ls /usr/src/linux/arch > alpha cris ia64 mips parisc ppc64 s390x sparc x86_64 > arm i386 m68k mips64 ppc s390 sh sparc64 > > Linux runs on at least 15 architectures NOT produced by Intel. Well technically intel does produce alpha and arm, i386 and ia64. :) I will give you the other 13. intel only invented 2 of them, but make 4 of them. Lennart Sorensen -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Toronto FreeNet stable now; wish it were co-op, tho
by lsorense-1wCw9BSqJbv44Nm34jS7GywD8/FfD2ys＠public.gmane.org 02 Dec '03

02 Dec '03

On Tue, Dec 02, 2003 at 04:07:19PM -0500, Taavi Burns wrote: > I'm in the same boat as you. I have a friend who works the helpdesk > for Telus in Alberta, and they do not offer such a service there. > > It's technically feasible (no reason you can't run DSL on "dry copper"), they > just "don't do it." I suspect Bell/other DSL providers are the same. > > > (now you see, the funny part is that my phone line isn't "dry"...it actually > HAS a dialtone...it just won't let you dial anyone but Bell's sales department.) > > I should probably go ask them or something. I would think the line will let you call *whatever it is to activate a line, AND 911. I think the 911 access was a reason they started leaving a dial tone on unused lines. The simpler activation method is probably another reason. Now can users of Sprint phone lines get DSL yet? Lennart Sorensen -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Toronto FreeNet stable now; wish it were co-op, tho
by taavi-LbuTpDkqzNzXI80/IeQp7B2eb7JE58TQ＠public.gmane.org 02 Dec '03

02 Dec '03

On Tue, Dec 02, 2003 at 03:47:45PM -0500, Jason Slaughter wrote: > DSL looks great, and it can be faster than Rogers, but the cost of DSL isn't > so hot when I have to tack on $20+/month for a phone line I don't need. I'm in the same boat as you. I have a friend who works the helpdesk for Telus in Alberta, and they do not offer such a service there. It's technically feasible (no reason you can't run DSL on "dry copper"), they just "don't do it." I suspect Bell/other DSL providers are the same. (now you see, the funny part is that my phone line isn't "dry"...it actually HAS a dialtone...it just won't let you dial anyone but Bell's sales department.) I should probably go ask them or something. -- taa /*eof*/ -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Toronto FreeNet stable now; wish it were co-op, tho
by jason-2F8E0OLjuh154TAoqtyWWQ＠public.gmane.org 02 Dec '03

02 Dec '03

Slightly OT: The Tororonto FreeNet sounds great, and I'd be interested in using them for DSL (I'm on Rogers Cable now). I'm curious though--is it possible to get DSL access these days without a Bell land line? Both myself and my girlfriend use cellphones exclusively, so we have no land line in our apartment. There is (of course) a physical phone jack and wire that has to go to the central office, but is it possible to get DSL on this without paying Bell for home phone service? DSL looks great, and it can be faster than Rogers, but the cost of DSL isn't so hot when I have to tack on $20+/month for a phone line I don't need. Jason -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Debian attacker may have used new exploit
by robert-5LEc/6Zm6xCUd8a0hrldnti2O/JbrIOy＠public.gmane.org 02 Dec '03

02 Dec '03

On Tue, 2 Dec 2003, Justin Zygmont wrote: > what I don;t understand about this, is how could they know that this was > the exploit the hacker used, what if there is something else? I believe the attacker left some clues such as binaries lying around and these were reverse engineered, revealing the exploit. I understand the Redhat & Suse security teams worked with the Debian developers on this one. It isn't impossible that there is another exploit but I consider it unlikely. Occam's Razor suggests it is likely only one exploit was used. If I leave the front door open and the back door open a burglar will probably only enter through one of them. The burglar may not even discover the other is open. There might be other exploits on the Debian servers but that is as likely to be the case as on any other box. A properly patched box shouldn't have any known security problems. Rob -- Robert Brockway B.Sc. email: robert-5LEc/6Zm6xCUd8a0hrldnti2O/JbrIOy at public.gmane.org, zzbrock at uqconnect.net Linux counter project ID #16440 (http://counter.li.org) "The earth is but one country and mankind its citizens" -Baha'u'llah -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0