July 2018 - Talk - lists.gtalug.org

Re: [GTALUG] Specific question about mailing list management
by Alvin Starr 25 Jul '18

25 Jul '18

Another thing is to make sure you have a valid email address by sending an activation message. Lots of people will provide bogus addresses either deliberately or accidentally. You also need to monitor your outgoing email or track the bounce backs for email addresses that go away. One of the problems you will face is that conventional wisdom is that responding to an un-subscribe button is just a way that the spammers validate your email address. Also People will just tag the messages as spam causing you to get black-listed. Every few years I get blacklisted because I have someone running a small mail-list related to a Knitting e-commerce web site. The site admin is a good friend and I know they are very careful about the mail addresses in the list but bad emails still leak in. On 07/25/2018 02:06 AM, ac via talk wrote: > Hi Evan, > > The quick answer is that there is no agreement on best practise for > unsub messages, the amount of verification (and time span of) and a > number of other abuse related issues. > > Here is what I personally (wrongly or correctly) do: > Subscription (Opt in message / Confirm email message - 1 per day max > three days) > Unsubscribe - no message - just unsubscribe > > never send any email from noreply@ I am not Google or Microsoft > (and even the dentist around the corner is now doing that *sigh*) > > When subscriber does anything on a link (Web) - send a confirm your > request email > > hth > > Andre > > > On Wed, 25 Jul 2018 00:30:58 -0400 > Evan Leibovitch via talk <talk(a)gtalug.org> wrote: > >> Hi all. >> >> This question is asked of anyone who administers a mailing list about >> policies. I'm setting up a campaign-based mailing system using >> phplist (as opposed to a forum-type MLM such as Mailman) and I'm >> interested to know what policies or best practices you might have in >> place to address this specific question: >> >> When a list subscriber goes to a link to change their preferences or >> unsubscribe, from what email address does the confirmation (for >> changes) or "sorry to see you go" message (for unsubscriptions) >> originate. >> >> Does such administrative email come from: >> a) an identifiable member or the organization's staff? >> b) a postmaster-type alias? >> c) a do-not-reply address? >> >> Any feedback is appreciated. >> > --- > Talk Mailing List > talk(a)gtalug.org > https://gtalug.org/mailman/listinfo/talk -- Alvin Starr || land: (905)513-7688 Netvel Inc. || Cell: (416)806-0133 alvin(a)netvel.net ||

2 1

I have 6 GWU523 IOGEAR wireless adapters NIB for sale
by Dave Cramer 22 Jul '18

22 Jul '18

See subject... $20 each Dave Cramer

5 7

looking for a tool to transform table relationships
by Alex Volkov 21 Jul '18

21 Jul '18

Hey Everyone, I'm looking for a tool to transform (possibly migrate) data from one postgres db to another. I have two postgres databases -- old (not normalized) has all the data and new (normalized with some major schema changes) has no data. The new db has more tables and table relationship structured differently, some data residing in old db is in text column in csv format, whereas in new database it's a separate table, and so on. I've been thinking of writing a script that would just transform data from one format to the other, but before writing a bunch of code that's going to be run exactly once, I'm wondering if there a tool out there which I can use to express one-way transformation rules for these databases. Thanks, Alex.

7 8

seeking web developer, UI/UX focus
by John Sellens 20 Jul '18

20 Jul '18

Hi - hope no one minds a job posting - apologies if so. We're looking for a web developer with a UI/UX focus to join our small team. We're based in Newmarket, and meet in person once a week. Full-time, permanent, likely looking for junior/intermediate, but we're flexible for the right candidate. Lots of home-grown code, PHP, postgresql, etc. Since I joined, a year ago, we've been working on moving closer to CI/CD, more modularity, and all the rgular goodness. Job posting is here, and I'm happy to answer any questions: https://www.aecdaily.com/careers/ Thanks - cheers John jsellens(a)syonex.com

1 0

Web hosting companies providing Linux shell accounts?
by Karen Lewellen 19 Jul '18

19 Jul '18

Hi All, The organization for whom I work presently has a shared hosting account with dreamhost. Recently though they made a change that prevents me from accessing my work shell account with the combination of adaptive technology tools I must use. so, I am seeking a new hosting that includes shell accounts with their offerings, Dreamhost used Ubuntu, but I have done this with freebsd as well. Ideas of where to start? Thanks, Karen

9 9

Presentation Followup -- API triggers for Gitlab CI
by Alex Volkov 18 Jul '18

18 Jul '18

Hello everyone, I have a followup for a talk I gave on Gitlab CI back in June. I was asked a question on whether it's possible to trigger a CI job with an API call, and in fact it is. There's an option available in Community Edition in Gitlab; it's located in Project Settings -> CI/CD -> Section Triggers In that section Gitlab will let you create tokens that can be used to trigger pipelines. Documentation on how to create and run triggers can be found here -- https://docs.gitlab.com/ee/ci/triggers/ Cheers, Alex.

1 0

SSL Server Certificate
by Peter King 18 Jul '18

18 Jul '18

I'm puzzled about how to set up server certificate validation in getting my email, which isn't surprising given that I understand next to nothing about the way certificates work. Here's the particular issue. I want to check over ssl/tls to see that the server certificate is valid, and that it matches a fingerprint I have for it. So, I know just enough to get the certificate from the server, in this case from Google: $ openssl s_client -connect pop.gmail.com:995 -showcerts > ~/gmail.openssl.txt By inspection I can see that the certificate is provided by GlobalSign. So I do a quick check: $ ls -l /etc/ssl/certs/GlobalSign* Lo and behold, there is an obvious hit: GlobalSign_Root_CA.pem. So I put that down as the certificate for the server. Then, I can get the fingerprint for it from the same file, like so: $ openssl x509 -fingerprint -sha256 -noout -in ~/gmail.openssl.txt > gmail.fingerprint.txt (Getmail uses sha256 as its preferred algorithm.) I take the fingerprint from the file and use that to certify the server. Thing is, the technique doesn't work. First I get an unhelpful error message saying that the certificate, GlobalSign_Root_CA.pem, gives an authentication error. Well, okay. If I take that out of the equation I then get told that the fingerprint is wrong, but this time at least I'm told what the correct fingerprint is -- and if I put the correct one in all seems well. The example above is about gmail, but I have the same problem with rogers and other servers. Oddly, the Office365 servers work exactly as they should. Two questions, which most of you undoubtedly know the answer to: [1] If the email gets fetched with the fingerprint, is there any need for validating the server certificate? [2] How can I find out what the correct server certificate is? -- Peter King peter.king(a)utoronto.ca Department of Philosophy 170 St. George Street #521 The University of Toronto (416)-978-3311 dept Toronto, ON M5R 2M8 CANADA http://individual.utoronto.ca/pking/ ========================================================================= GPG keyID 0x7587EC42 (2B14 A355 46BC 2A16 D0BC 36F5 1FE6 D32A 7587 EC42) gpg --keyserver pgp.mit.edu --recv-keys 7587EC42

3 6

Internet Bots with Don Tai talk is on youtube.
by Alex Volkov 17 Jul '18

17 Jul '18

Hello everyone, You can now watch our July 2018 meeting -- Internet Bots with Don Tai. https://youtu.be/lk5BpbGRyG8 Alex.

1 0

Fetchmail and Office365 and backslashes, oh my!
by Peter King 17 Jul '18

17 Jul '18

Recently we were forcibly "migrated" to Office365 for our email services, and with the change numerous things were broken. One of the last things I cannot figure out how to solve is how to pass an alias email address to the MS server. So in .fetchmailrc I have a line like this: user "prof.bozo@utoronto.ca\department.chair@utoronto.ca" there with password "XYZZY" is bozo here But this fails, and in the fetchmail logfiles it represents the username as not having a backslash: Jul 4 14:35:14 fetchmail[13829]: IMAP> A0002 LOGIN "prof.bozo@utoronto.camedieval.philosophy@utoronto.ca" * Jul 4 14:35:14 fetchmail[13829]: IMAP< A0002 NO LOGIN failed. Jul 4 14:35:14 fetchmail[13829]: IMAP> A0003 LOGOUT If I double-backslash it, though, I get a double backslash in the username. Ditto for triple, quadruple, and quintuple backslashes. Nor does it work if I single-quote the backslash. According to the fetchmail manual, the backslash is used to communicate via ASCII sequences and codes with fetchmail, and it's pretty clear that this is part of the problem. Google turned up a few people with the same problem, but they seemed to have their problems (from 7+ years ago) fixed by multiple backslashes, which clearly aren't working for me. Any ideas? Our local people maintaining the MS Office365 nonsense dont' support fetchmail and are not interested in helping ... -- Peter King peter.king(a)utoronto.ca Department of Philosophy 170 St. George Street #521 The University of Toronto (416)-978-3311 dept Toronto, ON M5R 2M8 CANADA http://individual.utoronto.ca/pking/ ========================================================================= GPG keyID 0x7587EC42 (2B14 A355 46BC 2A16 D0BC 36F5 1FE6 D32A 7587 EC42) gpg --keyserver pgp.mit.edu --recv-keys 7587EC42

7 14

Hacklab trash freedom (;-))
by David Collier-Brown 16 Jul '18

16 Jul '18

I'm wondering about doing a local dead-technology day at Index Exchange, and delivering the interesting stuff to hacklab. Do satellite days sound logical? Relevant to GTALUG (ie, should we do a satellite)? --dave -- David Collier-Brown, | Always do right. This will gratify System Programmer and Author | some people and astonish the rest davecb(a)spamcop.net | -- Mark Twain

1 0