In Ubuntu, the root password does not have a password by default*; therefore it makes sense to just drop straight to a shell.
* I don't mean you can log on or 'su' with no password, etc. I mean that there is no password in/etc/shadow, therefore nothing supplied by the user will ever hash to a matching value, therefore root can never log on. Same as how the other system users with no passwords (daemon, bin, nobody, etc.) work.
FYI, the split-files config is a Debian, specific mdofication. It can be disabled if you 'dpkg-reconfigure exim4-config' and choose the 'one big config file' option.
You can also completley override the Debian configuration mechanism by creating an/etc/exim4/exim.conf file, which exim will use instead of the Debian configuration mechanism.
The CDDL under which the code in question was released is a slightly modified version of the Mozilla Public License. So if you used Mozilla or firefox or whatever to post that screed, then you've clearly sinned against the church of RMS.
Nonsense; Mozilla is tri-licensed under the GPL, LGPL and MPL.
ForwardAgent
Specifies whether the connection to the authentication agent (if any) will be forwarded to the remote machine. The argument must be "yes" or "no". The default is "no".
So the only people who will be caught out by this are those who:
Blindly enable ForwardAgent without reading the security considerations mentioned in the manual.
Set up ssh-agent without considering how it will expose their private key.
Configuring the agent to prompt the user to confirm any signing request can be as complicated as putting the private key on a smart card (which will make the reader prompt for a PIN whenever the card recieves a signing request) or it can be as simple as using the -c option when calling ssh-add; therefore this does not seem like a big deal to me.
I agree that it's a good idea. They aren't going far enough however. i386 Windows needs this feature far more.
FYI, the fact that drivers are signed means nothing anyway. It is a common pratice in the industry to make your drivers detect that they are undergoing WHQL certification testing and do things the slow, safe, reliable and secure way. MICROS~1 then signs these drivers, which are distributed to the end users, where they revert to doing things the unsafe, unreliable, insecure way for the sake of speed.
It's a shame that this will stifle the development of any Free Software drivers for the Windows platform.
I completly disagree. Windows 2000 was usable with 128 MB of RAM. Unless your only goal is to play with calc.exe, Windows XP grinds to halt while swapping with anything less than 512 MB of RAM.
I'm not sure it's fair to say that Ethereal asks to be run as root. I assume it is your particular distribution that is setting you up for a fall by creating a menu item that launches it as root.
Shortsighted security decisions are made on both platforms. The difference is that on Windows such decisions are the norm.
What if someone finds a buffer overflow in tcpdump?
Then you are screwed. Tcpdump however is vastly less complicated than Ethereal. Ethereal's many protocol disectors have new flaws discovered in them all the time.
I like capturing in ethereal - it's convenient.
Surprise, security is inversely proportional to convenience.
$ sudo mount -t tmpfs -o noexec none/mnt $ cp/bin/bash/mnt $ ls -l/mnt/bash -rwxr-xr-x 1 sam sam 684724 2006-05-21 20:24/mnt/bash $/lib/ld-linux.so.2/mnt/bash/mnt/bash: error while loading shared libraries:/mnt/bash: failed to map segment from shared object: Operation not permitted
Also, the NTFS permissions are useless because files have execute permission by default. It would be like a Unix user running with a umask of 777.
Re:Cool. As a Debian user...
on
Vim 7 Released
·
· Score: 1
Assuming vim 7 makes it into testing in 9 days time, it will be in the Debian 3.2 (Etch) release that might just arrive in December.;)
If you don't want to upgrade from Stable then I suggest you want for vim 7 to enter the backports.org archive; someone will probably upload it at some point soon.
Slashdot Mirror
$ aptitude show sun-java5-jre | grep ^Maintainer
Maintainer: Matthias Klose
Ubuntu distributes the same packages that are in Debian in the multiverse component(? section? archive? what is the correct term here anyway?).
Isn't there an itunes equivalent to freeme?
You are comparing apples to oranges, as they say. Consider this: apt is to yum as dpkg is to rpm.
In Ubuntu, the root password does not have a password by default*; therefore it makes sense to just drop straight to a shell.
/etc/shadow, therefore nothing supplied by the user will ever hash to a matching value, therefore root can never log on. Same as how the other system users with no passwords (daemon, bin, nobody, etc.) work.
* I don't mean you can log on or 'su' with no password, etc. I mean that there is no password in
FYI, the split-files config is a Debian, specific mdofication. It can be disabled if you 'dpkg-reconfigure exim4-config' and choose the 'one big config file' option.
/etc/exim4/exim.conf file, which exim will use instead of the Debian configuration mechanism.
You can also completley override the Debian configuration mechanism by creating an
Ok, I mistakenly thought that identical twins had similar fingerprints... so ignore what I said. :)
Are there no identical twins in the United States?
Perhaps the author of the article should have read the source of the text you quoted. The preceding paragraph:
So the only people who will be caught out by this are those who:
Configuring the agent to prompt the user to confirm any signing request can be as complicated as putting the private key on a smart card (which will make the reader prompt for a PIN whenever the card recieves a signing request) or it can be as simple as using the -c option when calling ssh-add; therefore this does not seem like a big deal to me.
I agree that it's a good idea. They aren't going far enough however. i386 Windows needs this feature far more.
FYI, the fact that drivers are signed means nothing anyway. It is a common pratice in the industry to make your drivers detect that they are undergoing WHQL certification testing and do things the slow, safe, reliable and secure way. MICROS~1 then signs these drivers, which are distributed to the end users, where they revert to doing things the unsafe, unreliable, insecure way for the sake of speed.
It's a shame that this will stifle the development of any Free Software drivers for the Windows platform.
I completly disagree. Windows 2000 was usable with 128 MB of RAM. Unless your only goal is to play with calc.exe, Windows XP grinds to halt while swapping with anything less than 512 MB of RAM.
Lower CPU, memory, and disk consumption is an advantage.
Paul Thurrot? Is that you?
Think before opening (metaphorical) mouth! ;)
8 .html
http://arstechnica.com/news.ars/post/20060201-609
Neither are most 'R'DMBSes ;)
I'm not sure it's fair to say that Ethereal asks to be run as root. I assume it is your particular distribution that is setting you up for a fall by creating a menu item that launches it as root.
Shortsighted security decisions are made on both platforms. The difference is that on Windows such decisions are the norm.
If you run ethereal as root then you're asking to be compromised.
You should be capturing packets with tcpdump (as root), and opening the file it creates with ethereal as an unpriviliged user.
TLS can not guarantee end-to-end privacy. Take the matter in to your own hands. Use PGP.
$ sudo mount -t tmpfs -o noexec none /mnt /bin/bash /mnt /mnt/bash /mnt/bash /lib/ld-linux.so.2 /mnt/bash /mnt/bash: error while loading shared libraries: /mnt/bash: failed to map segment from shared object: Operation not permitted
$ cp
$ ls -l
-rwxr-xr-x 1 sam sam 684724 2006-05-21 20:24
$
Also, the NTFS permissions are useless because files have execute permission by default. It would be like a Unix user running with a umask of 777.
Assuming vim 7 makes it into testing in 9 days time, it will be in the Debian 3.2 (Etch) release that might just arrive in December. ;)
If you don't want to upgrade from Stable then I suggest you want for vim 7 to enter the backports.org archive; someone will probably upload it at some point soon.
$ aptitude show sun-java5-{bin,jre} | grep Size
.debs are 22M and 7.1M respectively. That's some compression!
Uncompressed Size: 66.6M
Uncompressed Size: 15.9M
The original
Was it signed by the boss or the clients?
Colossos of Rhodos? COLOSSOS OF RHODOS??
goddamn lameness filter shut up