- Talk - lists.gtalug.org

[GTALUG-Announce] Linux in the Park this Saturday at 2pm in Dufferin Grove Park
by Myles Braithwaite 18 Jul '16

18 Jul '16

<http://gtalug.org/picnics/2016/> GTALUG is having the annual Linux in the Park Potluck this year at Dufferin Grove Park on 23rd July at 2pm. Things we will provide: Plates, Cutlery, Serviettes, Cups, and Garbage bags. Things you might want to bring: chairs, tasty beverages (that are non-alcoholic, as the city prohibits alcoholic beverages in the park), food stuffs that you would like to share and enjoy, tarp/blanket, sunscreen, hats, things to help survive the warmth of the Canadian Wilderness. We will doing this in a pot-luck style. Thus, please bring enough food and drink for yourself and your guests, and try to bring enough to share with others in the group. We are using the GTALUG wiki to organise everything: <https://gtalug.org/picnics/2016/>. Note that if you forget anything you needed, Dufferin Mall is across the street, featuring a supermarket (No-Frills) department store (WalMart), as well as other speciality stores. ## Location Dufferin Grove Park 875 Dufferin Street Toronto, Ontario Five minute walk from the Dufferin Subway Station. <http://osm.org/go/ZX6BHsVZx-?layers=N&way=15703371> <https://goo.gl/maps/hnGg5> ## Social Media Links Facebook: <https://www.facebook.com/events/1738615543061007/> ## Code of Conduct We want a productive happy community that can welcome new ideas, improve every process every year, and foster collaboration between individuals with differing needs, interests and skills. We gain strength from diversity, and actively seek participation from those who enhance it. This code of conduct exists to ensure that diverse groups collaborate to mutual advantage and enjoyment. We will challenge prejudice that could jeopardize the participation of any person in the community. The Code of Conduct governs how we behave in public or in private whenever the Linux community will be judged by our actions. We expect it to be honored by everyone who represents the community officially or informally, claims affiliation, or participates directly. It applies to activities online or offline. We invite anybody to participate. Our community is open. Please read more about the GTALUG Code of Conduct here: <http://gtalug.org/about/code-of-conduct/>. If you have any questions, comments, or concerns about the GTALUG Code of Conduct please contact one of the GTALUG Board Members @ <board(a)gtalug.org>. --- GTALUG Announce mailing list announce(a)gtalug.org https://gtalug.org/mailman/listinfo/announce

1 0

Re: [GTALUG] Are you on the watch list?
by Chris F.A. Johnson 18 Jul '16

18 Jul '16

On Mon, 18 Jul 2016, ac via talk wrote: ... > beer? someone say beer? > > Seeing as we are polling opinions here (and I know too little to > contribute much to CA/US/Mexico political discussions) but I know a lot > about beer! > > Who makes the best beer? The beer situation is Toronto is excellent these days. My favourites brewed in and around Toronto include: Mill St.: Tankhouse Ale Junction: Conductor's Ale Red Racer: Copper Ale Black Oak: Pale Ale Flying Monkeys: Hoptical Illusion Muskoka: Mad Tom IPA Amsterdam: Boneshaker IPA Amsterdam: Cruiser All Day PaleAle Wellington: Arkell Best Bitter -- Chris F.A. Johnson, <http://cfajohnson.com>

4 3

Re: [GTALUG] Are you on the watch list?
by Daniel Villarreal 17 Jul '16

17 Jul '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 >> ... Perhaps we can discuss this over a beer sometime. >> > beer? someone say beer? > > Who makes the best beer? I've very little experience over beers here in Canada, but there's a little micro-brewery in the Falls that I like... I've only been there once. > and, if you think the answer is simple, it is not! This question is > far more complex than the political issues! > > For example: In Vermont US, they brew a maple syrup infusion and > this competes head to head with those excellent brews from Barrie > (On) Flying Monkeys Craft Brewery (Peter Chiodo) - who is sadly > (since 2013) not making the city & colour (maple syrup infused) > brew any longer... - I believe there are other craft beers that > combine vanilla and maple syrup, but sadly I have to wait another > 10 weeks to go and find them. > > side note: Am wondering if the US beers use Canadian Maple Syrup? > > Andre Wow, sounds very interesting. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXjFe5AAoJEPJRiTioPntJd5UIAK11NpZag9ConIrtF4QWlCfJ edLYxL/DCp5sK37KYFty7IiusQwDHHqmnT9qwfqoTjExoOjPykm3tXdJQFP4vndi MNPAj8oI1iclyngpTScTVb0q1gchTRyushaJ3cwpTu2ZjKvLmadfK1zKsTkCRq1Y 2bJSZImgbRYdSDvjkF7lshA0JDHnOj8poItiguFIGi5SI8yZ/4M0UoHSSf81oUBx Fks8XHb8DJXUA5pD1Wr2opxqZOBNprGSlOTIYkVoCATn4R5ujDkLCQv9OrGegWsY ltZ+ExC+08Hqv0HZ76EyT7/xjQXfxWb5DLLAguUTxRtoLKusteatoTfzZuWlv94= =wbaX -----END PGP SIGNATURE-----

1 0

Are you on the watch list?
by Evan Leibovitch 17 Jul '16

17 Jul '16

Sheesh, Five eyes or not, this is unwelcome. http://www.in.techspot.com/news/security/nsa-classifies-linux-journal-reade… -- Evan Leibovitch Geneva, CH Em: evan at telly dot org Sk: evanleibovitch Tw: el56

8 28

Re: [GTALUG] Are you on the watch list?
by James Knott 17 Jul '16

17 Jul '16

On 07/17/2016 01:17 AM, ac via talk wrote: > many problems humans face has a very simple explanation: greed > (and then the keyword in the above sentence is also:humans) Yep, it all boils down to what humans do, be it Bopal, Lac Megantic, the 2008 bust and much, much more. Far too often it boils down to blatant greed, the consequences be damned.

1 0

Microsoft doesn't have to give US government foreign data, says court - TechRepublic
by James Knott 15 Jul '16

15 Jul '16

http://www.techrepublic.com/article/microsoft-doesnt-have-to-give-us-govern…

1 0

The New Skype Alpha.
by scott＠ss.org 14 Jul '16

14 Jul '16

https://community.skype.com/t5/Linux/Skype-for-Linux-Alpha-and-calling-on-C… Just some initial impressions. This is on a Fedora 19 systems (don't ask, long story..). I don't have a Mic on this system, so I haven't made any test calls yet. Packaging: ========== Packages are 64-bit only... we've been asking and asking, and we get it finally, but 32-bit gets nothing. Irony. Single RPM file. A yum install identified no dependencies (so likely all backed in). The old fedora rpms used to actually use the Fedora libraries. The RPM installs a .repo so yum will automatically pull updates. What is arrogant and sneaky is it also installs an AT script which automatically imports the GPG key for that repo. Additionally, and Google Chrome shares this habit, the .repo file isn't in the file-list. So it's being dynamically generated at install time. Logging in: =========== Asks to store the password in A keyring. I can't tell if this the KDE key-ring, or the GNOME key-ring. But the FAQ says GNOME... I'm a KDE user. Gnome Keyring's dialog also stole focus on the keyboard. Not Skype's fault, but annoying. As I don't use this feature, I clicked cancel and the login continued. But it asks every time you login. https://support.skype.com/en/faq/FA34656/more-information-about-skype-for-l… Settings: ========= Going into settings, I see 6 options. 4 for showing content in messaging, and 2 drop-downs under privacy. In the old skype, you could control audio inputs and outputs, and had a quick launch button for a test call. All of that seem to just not be there. I find this irksome as there are a lot of fake 'skype call testing service' accounts. And I don't want to play in that mine field. Yes. This is defiantly and Alpha. -- Scott Sullivan

6 8

Re: [GTALUG] Email problem and some observations.
by Alvin Starr 14 Jul '16

14 Jul '16

On 07/14/2016 09:55 AM, ac via talk wrote: > On Thu, 14 Jul 2016 09:28:48 -0400 > Alvin Starr via talk <talk(a)gtalug.org> wrote: >> A bitof history to start off. >> Years ago we started putting spf records in our domains and email >> clients domains and that is mostly where things stuck. >> For the most part is was of little help but generally putting a >> correctlyconfigured SPF statement did not hurt. >> > spf records already help a lot with spam/abuse True enough but hype and initial exuberance did not quite pan out the way some claimed. But it does work and helps. > >> I recentlydiscovered DMARC and decided to implement it on my own >> domain as an experiment. > DMARC has real interesting reporting, but many ISP's do not even > respond to abuse@ so... we are a long way off from a perfect world :) Sadly the usual addresses like postmaster and abuse make for an easy target for spammers so its the kind of address that gets quickly ignored. Postmaster is so bad the its almost all noise now. > > Like your SPF v=spf1 mx a:mail.netvel.net ip4:54.236.96.217/32 -all > many email servers will disregard even the -all (and the entire SPF) I was looking at an email problem yesterday and got a message from a spam filtering service that my client uses. "1) The simplest, and since SPF is only beneficial to large corporate domains, we would suggest that they log into their DNS Providers site and delete their SPF record." With that kind of attitude its not surprising that SPF is used at all. > >> After running for a while and looking at the information that came >> back from the other dmarcians I noticed some interesting trends. >> >> 1) Some days there are lots of spam messages sent to google as >> someone on my domain (likely me). >> 2) There are not a whole lot of people who are honouring dmarc and >> sending status messages. > nope... and there are soo many that do not even respond to direct > complaints.. recently on RIPE anti-abuse, an abuse-c record addition > failed, due to simply too many objections... - If people/society does > not even want to accept responsibility for what they transmit - how will > they to co-op with DMARC... I cannot help all those that will not work within the system but enough people are using DMARC that it is causing problems for mail list operators so its gaining some traction. > >> 3) Something in my network is sending mail to CheatCodes.com >> Here is a snippet from my dmarc log. >> >> Wed, 06 Jul 2016 14:47:25 -0400 CheatCodes.com 12 >> Thu, 07 Jul 2016 19:59:59 -0400 google.com 2 >> Thu, 07 Jul 2016 19:59:59 -0400 Yahoo! Inc. 2 >> Fri, 08 Jul 2016 11:29:47 -0400 CheatCodes.com 10 >> Sun, 10 Jul 2016 17:19:04 -0400 CheatCodes.com 3 >> Mon, 11 Jul 2016 19:59:59 -0400 google.com 2 >> Mon, 11 Jul 2016 14:45:57 -0400 CheatCodes.com 12 >> Tue, 12 Jul 2016 12:00:00 -0400 Microsoft Corp. 1 >> Tue, 12 Jul 2016 19:59:59 -0400 google.com 591 >> Tue, 12 Jul 2016 19:59:59 -0400 Yahoo! Inc. 8 >> Tue, 12 Jul 2016 15:22:56 -0400 CheatCodes.com 13 >> Wed, 13 Jul 2016 19:59:59 -0400 google.com 785 >> Wed, 13 Jul 2016 14:49:03 -0400 CheatCodes.com 3 >> >> So about cheatcodes.com. > hmm, looks like this could be a fake reverse zone for a private ip on > your home pvt network? > If you look at my headers I have a pvt range setup with a inaddr to > cow.co.za :) - my DMARC would report "cow.co.za" on the sec gw > 192.168. - otherwise you could have malware, either way - you should > have fun figuring it out :) DMARC reports the sending IP. and in my case the sending ip is my firewall. That is what got me going. I know it cannot be my laptop because that runs Linux and we all know that is impervious to hacks. OOPS. My android phones also run Linux(of sorts)... Possibly its time to re-evaluate this belief. > > -- Alvin Starr || voice: (905)513-7688 Netvel Inc. || Cell: (416)806-0133 alvin(a)netvel.net ||

2 1

Email problem and some observations.
by Alvin Starr 14 Jul '16

14 Jul '16

A bitof history to start off. Years ago we started putting spf records in our domains and email clients domains and that is mostly where things stuck. For the most part is was of little help but generally putting a correctlyconfigured SPF statement did not hurt. I recentlydiscovered DMARC and decided to implement it on my own domain as an experiment. After running for a while and looking at the information that came back from the other dmarcians I noticed some interesting trends. 1) Some days there are lots of spam messages sent to google as someone on my domain (likely me). 2) There are not a whole lot of people who are honouring dmarc and sending status messages. 3) Something in my network is sending mail to CheatCodes.com Here is a snippet from my dmarc log. Wed, 06 Jul 2016 14:47:25 -0400 CheatCodes.com 12 Thu, 07 Jul 2016 19:59:59 -0400 google.com 2 Thu, 07 Jul 2016 19:59:59 -0400 Yahoo! Inc. 2 Fri, 08 Jul 2016 11:29:47 -0400 CheatCodes.com 10 Sun, 10 Jul 2016 17:19:04 -0400 CheatCodes.com 3 Mon, 11 Jul 2016 19:59:59 -0400 google.com 2 Mon, 11 Jul 2016 14:45:57 -0400 CheatCodes.com 12 Tue, 12 Jul 2016 12:00:00 -0400 Microsoft Corp. 1 Tue, 12 Jul 2016 19:59:59 -0400 google.com 591 Tue, 12 Jul 2016 19:59:59 -0400 Yahoo! Inc. 8 Tue, 12 Jul 2016 15:22:56 -0400 CheatCodes.com 13 Wed, 13 Jul 2016 19:59:59 -0400 google.com 785 Wed, 13 Jul 2016 14:49:03 -0400 CheatCodes.com 3 So about cheatcodes.com. All the traffic to cheatcodes is comming from the outside address of my firewall either home or cottage. Since I only email via submission to my external mail-server there is nothing inside my domain that should be sending email. So I blocked ports 25,2525 and a few other well known ports for email but still the mail is flowing. Then I blocked the cheatcodes MX address class C... Still flowing. I noticed that the IP source of the messages moved with my changing location. There are only 3 connected things that will move between these locations. My laptop and 2 Android phones. I guess its time to start more serious tracking of traffic from my portable devices. So someone is connected and sending messages through non-regular channels to CheatCodes.com. This disturbs me. I intend to keep working on this. But it makes me ask the question: Who would go so far as to setup a surreptitious email link and then run it through DMARC? I have to admit that I kind of like DMARC. It is letting me get a feel for how much abuse of my domain is going on and it is way more than I thought. Its by no means a spam solution but it can cut down spam generated in my name. -- Alvin Starr || voice: (905)513-7688 Netvel Inc. || Cell: (416)806-0133 alvin(a)netvel.net ||

2 1

Re: [GTALUG] Heads Up
by Kevin Cozens 13 Jul '16

13 Jul '16

On 16-07-13 01:43 AM, ac via talk wrote: > Just started seeing many email attachments with .html active > javascript ransomware in base64 fully loaded anyway this is going > to be the new normal, disabling javascript on email clients as filtering > these will be challenging) > > so, if you are not using mutt or custom email (like moi) I would > strongly suggest not opening any .html attachments without disabling > Javascript I set my email program to treat all my mail/mailinglist messages as text only. I don't need to act like a web browser and show me nicely formatted pages as I have a separate program for that. Viewing messages as simple text means you don't should not have to worry about any attempt to include something other than simple text. -- Cheers! Kevin. http://www.ve3syb.ca/ |"Nerds make the shiny things that distract Owner of Elecraft K2 #2172 | the mouth-breathers, and that's why we're | powerful!" #include <disclaimer/favourite> | --Chris Hardwick

2 1