search for: compromized

...entropy required for generating unpredicatable keys. In fact it appearss that the only source for entropy was the process ID of the process generating a key, which is chosen from a very small range and is predictable. As such, all keys generated using the Debian OpenSSL library should be considered compromized. Programs that use OpenSSL include OpenSSH and OpenVPN. Note that GnuPG and GNU TLS do not use OpenSSL, so they are not affected. This vulnerability can affect CentOS machines through the use of keys that were generated with the OpenSSL package from Debian. For instance, if a user uses OpenSSH pub...

Hello, I would like to run other services like messaging services on my firewall machine too. Does it make sense to run shorewall, openvpn and the pppoe package in a chroot jail? And is it possible to run these programs as an other user? Ciao Hugo

...entropy required for generating unpredicatable keys. In fact it appearss that the only source for entropy was the process ID of the process generating a key, which is chosen from a very small range and is predictable. As such, all keys generated using the Debian OpenSSL library should be considered compromized. Programs that use OpenSSL include OpenSSH and OpenVPN. Note that GnuPG and GNU TLS do not use OpenSSL, so they are not affected. This vulnerability can affect CentOS machines through the use of keys that were generated with the OpenSSL package from Debian. For instance, if a user uses OpenSSH pub...

>> The Number of listeners *has* to remain in, it's up to the directory >> server to do whatever they want with it. >I disagree. It's fundamentally a different kind of data. It's >time-dependent. All the other information is not. >jack. I'd just like to say that time-dependent information is very important to a listener. Removing it from the directory would be

I have a drive being shared with smb (it's a vfat drive, btw) and whenever I go to create a new folder from any of the clients to that shared drive, it gives me a message that the folder allready exists, but it still does create a new folder, and then i have to rename "new folder" to whatever I want, same goes with copying/moving folders, it says the folder allready exists (when it

> Again, it would be nice to be able to make this reasonably free form > name/value pairs - one extra that has occurred to me is... > > icon_url - to let directoy listings jazz up their displays by permitting > station logos (For speed reasons it's probably nicer for the directory > server to manage teh icons locally...) I'm trying to think of a good way to map

Hi Chris, > There's a couple of headless systems on the LAN where login security > is important to me and I've been thinking about the relative merits of > password and public-key authentication. > <snip> At home, I have a smaller LAN than you, but at $DAYJOB I work with much bigger fleets. Whether at home or work, everything is Linux-based, and OpenSSH is the primary

Hello all, This is to announce the creation of R-sig-wiki, a new R SIG (Special Interest Group) mailing list dedicated to the elaboration and maintenance of a R Wiki. You can subscribe at: https://stat.ethz.ch/mailman/listinfo/r-sig-wiki. There is currently a prototype for a new R Wiki at http://www.sciviews.org/_rgui/wiki (temporary address). The main idea is to offer a site where users

Hi folks, we'd like to provision new Samba servers (file sharing only) with the system keytab. It will precreated by some other process (msktutil) because we don't have direct access to a domain admin account. Is there any degragation in functionality by not using "secrets and keytab" and not doing "net ads join"? This is somewhat similiar to my question from

I have a small LAN at home with nine or ten systems on it running various varieties of Linux. I 'do things' on the LAN either from my dekstop machine or from my laptop, both run Xubuntu 24.04 at the moment. There's a couple of headless systems on the LAN where login security is important to me and I've been thinking about the relative merits of password and public-key