similar to: how safe is "net use" in a batch file? plus some encryption questions

Am 2017-11-11 um 13:36 schrieb Rowland Penny: > As far as I am aware, 'net use' sends the password unencrypted, so if > someone is trying to 'sniff' the password, they will get it, but then > if the password is stored in the bat file unencrypted and anybody can > read the bat file, they wont need to 'sniff' the password. Yes, we know ;-) The thin client with

On Sat, 11 Nov 2017 11:02:31 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > A customer asked me if someone would be able to sniff (wireshark or > something like that) a password if plugging into the same switch as > their samba server. > > They use a desktop icon pointing at a plain old bat-file containing a > "net

On Sat, Nov 11, 2017 at 12:26 PM, Stefan G. Weichinger via samba < samba at lists.samba.org> wrote: > Am 2017-11-11 um 13:36 schrieb Rowland Penny: > > > As far as I am aware, 'net use' sends the password unencrypted, so if > > someone is trying to 'sniff' the password, they will get it, but then > > if the password is stored in the bat file

On Sat, 11 Nov 2017 13:32:31 -0600 Andrew Walker <walker.aj325 at gmail.com> wrote: > I thought "net use" will use ntlm for auth (no clear-text passwords > passing over the wire). At least that's what I see in wireshark on > modern windows. > If you use NTLMv1, you might as well use plain passwords. Given the NTLMv1 password, it would take your average badhat

On Tue, 14 Nov 2017 15:06:01 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> You can make XP use NTLMv2, see here: > >> > >> https://www.imss.caltech.edu/node/396 > > Did these changes on the 2 VMs and rebooted. > > For sure I also have to remove stuff from smb.conf, I run these > non-default settings for

On Sat, 19 Aug 2017 17:56:06 -0700 ToddAndMargo via samba <samba at lists.samba.org> wrote: > The cure was to add to smb.conf > > ; To operate with XP, add the following to the [global] section: > ; lanman auth = yes > ; ntlm auth = yes > lanman auth = yes > ntlm auth = yes > > Sorry, but you seem to have fixed the wrong thing ;-) Did you miss

Hi, I have a small server at home. I like to put it 'online' and secure it as good as possible. The counterside of putting your personal backups on a server is that it might get hacked... and you don't want have to have your personal docs online... Do you think encryption is needed? How to use encryption with rsync? Thanks in advance, ~D

On 10/26/20 7:17 AM, akshay kulkarni wrote: > dear members, > I am a stock trader. I am using R for my research. > > I want to service my laptop, wherein resides all my R code, which, for obvious reasons, has to be secured. I am using Windows 7 Ultimate. > > I cannot encrypt the R data by Bitdefender, as it encrypts the entire drive. Use a file

On 08/20/2017 02:14 AM, ToddAndMargo via samba wrote: > On 08/20/2017 01:20 AM, Rowland Penny via samba wrote: >> On Sat, 19 Aug 2017 17:56:06 -0700 >> ToddAndMargo via samba <samba at lists.samba.org> wrote: >> >>> The cure was to add to smb.conf >>> >>> ; To operate with XP, add the following to the [global] section: >>> ; lanman

Anyone got any experience/suggestions for a way to store a directory of sensitive information on a CentOS box? This directory contains many scripts and output files, I need it backed up but not unencrypted and don't want to store it in a tar file type archive as when it needs to be accessed and have scripts executed/data generated, it needs to be untarred/unencrypted and I don't know the

Hi, Sorry for my english. I configured Samba as DC and when I use win 10, everything is ok, but win xp dosn't attach disks. When I browse \\dc.gryko.org.local, xp can see disks, but dosn't attach them while logging in. Win 10 does. My smb.conf: # Global parameters [global] netbios name = SAMBA realm = GRYKO.ORG.LOCAL server services = s3fs, rpc, nbt, wrepl, ldap,

I've got an application that I can run under wine. It uses SSL to communicate with a server. Since it's using SSL I can't just sniff the network packets. What would be the best way to have wine be able to dump the unencrypted data to a file for analysis? If this requires modifying code, which files should I look at? -- Anish Mistry amistry at am-productions.biz AM Productions

Hi, I've just completed a migration from Courier to a Dovecot 1.0.7 (patched RHE 5) which is working great, except for this weirdness of an issue that is impacting a handful of users. My question is that will turning off maildir_copy_preserve_filename help or hurt in a situation where there are multiple servers with their own local INDEX files (uidlist is shared)? The problem is that a

Dear list, Help! I just upgrade a samba server. Server: Fedora 26 samba-4.6.8-0.fc26.x86_64 Workstations (5 of them): XP Pro SP3 The old server was set up as a Domain controller. I copied the smb.conf over to the new server. The XP workstations can see and mount everything. On the workstations, I removed myself from the old domain and rebooted, powered off the old server,

Am 09.06.2017 um 19:55 schrieb Rowland Penny via samba: >> Can anybody please help me, even by simply giving me some hints to >> point me in the right direction to do a deeper investigation? >> >> Thank you very, very much in advance, >> best regards > > Try adding 'ntlm auth = yes' to smb.conf and restart Samba. > It was changed from 'yes'

if I: ssh -fND localhost:6000 somebody at 192.168.56.5 -p PORTNUMBER from computer "A" to computer "B" [B = 192.168.56.5] then I can set the SOCKS proxy for e.g.: Firefox to use "localhost:6000" on computer "A". Ok. I can surf the web through "B". But: - Can anyone sniff the traffic of "A"? [e.g.: computers on same subnet as

Hi all, As long as I can remember reading various articles/docs, they all say that telnet is not secure because all traffic is in clear text. Well, out of boredom, I try to sniff username and password from a telnet session. The command I use: tcpdump tcp port 23 -vvv -w test.txt Then I read the result: strings test.txt |`D |fD |fD 38400,38400 Red Hat Enterprise Linux ESD Ologin: D 5eE

Hi, As stated on the Dovecot documentation, at rest encryption is possible [1]. However, these keys are present on the system itself and are unprotected. Therefore, if a system is compromised, the attacker has access to the encrypted mail and the keys. There is no security benefit in that situation, except for hoping that the attacker doesn't understand that this is happening and how.

Hi, I am new to dovecot and I am a bit confused with how namespaces/prefixes/separators are handled by the clients and dovecot... I tried to understand the desciption from the conf file but without success. With each conf I create the following path /f1/f2 on the client (thunderbird) and get the following on the dovecot server: PREFIX= and separator=/ => .INBOX.f1.f2 + .INBOXTrash

On 09/30/2017 12:58 AM, Rowland Penny via samba wrote: > On Fri, 29 Sep 2017 18:27:29 -0700 > ToddAndMargo via samba <samba at lists.samba.org> wrote: > >> Dear list, >> >> Help! >> >> I just upgrade a samba server. >> >> Server: >> Fedora 26 >> samba-4.6.8-0.fc26.x86_64 >> >> Workstations (5 of them):