October 2001 - WLUG - wlug.mailman3.com

RE: [Wlug] Vunerable Machine
by Long, Mike Oct. 5, 2001

Oct. 5, 2001

If you can determine that the machine has not been hacked then you could bring up the security holes you found to the big-wigs in the following way. The decision to use Linux was a very good one. Machine X was configured in a way that left it vulnerable to being compromised. However, because it is a Linux box and not a windows box it has not been compromised so far. The techniques for compromising a Linux server are more complex than those used to compromise a windows server. Since the tools for securing a Linux server are much more robust than those used to secure a windows server it will be virtually impossible to compromise the companies network through this server once it has been properly configured. A little spin can go a long way. :) Mike -----Original Message----- From: Marc Hughes [mailto:hughesm@tomsnyder.com] Sent: Friday, October 05, 2001 1:53 PM To: wlug(a)mail.wlug.org Subject: RE: [Wlug] Vunerable Machine On Fri, 2001-10-05 at 13:40, Keller, Tim wrote: > step 1: Change the root password Done > step 2: Remove all those "holy" services Done > step 3: Install SSH Still have to do ... getting weird library conflicts > step 4: Firewall the machine so that it only accepts SMTP traffic from the > outside world and SSH traffic from a couple of specific addresses TODO > step 5: Use a tool like tripwire to make a snapshot, wait a week, rerun it > again and see if anything changes. > Good, but still, how do I tell if it's already been rooted by 3l33t h4x0rs? And I guess an even bigger concern is the office politics things. How do I bring this to the big-wigs in a "good" light? _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Issue with CD's...
by Keller, Tim Oct. 4, 2001

Oct. 4, 2001

Hey All, I was able to make the cds with random linux stuff on them, but my other jobs to make the redhat cds and the debian cds got dropped because legitimate orders had to be run... So if people have the Redhat 7.1 and the Debian cd's bring them along. BTW, I've already scheduled an hour to use the burner to make the 10 copies for Staroffice so I should have them for the wlug meeting. Sorry for the screw up. Tim.

1 0

RE: [Wlug] StarOffice 6.0beta
by Keller, Tim Oct. 3, 2001

Oct. 3, 2001

Andy, that would be great. If people are interested, I could throw it in the bulk copier and bring 20 copies to the wlug meeting. Tim. -----Original Message----- From: Andy Stewart [mailto:andystewart@mediaone.net] Sent: Tuesday, October 02, 2001 8:12 PM To: wlug(a)mail.wlug.org Subject: [Wlug] StarOffice 6.0beta Should I bring a few copies of this to the Install Fest on Thursday? -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

2 1

StarOffice 6.0beta
by Andy Stewart Oct. 3, 2001

Oct. 3, 2001

Should I bring a few copies of this to the Install Fest on Thursday? -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

2 1

Install fest with WPILA on Thursday!
by Andy Stewart Oct. 2, 2001

Oct. 2, 2001

Hi everybody, We will be having an install fest at WPI on Thursday, October 4th from 6 - 10 PM. I have several folks who have volunteered to make CDs and be installers - thanks gang! The main target of this install fest is the WPI community, but I won't turn away folks in need as long as there is room. I am, however, lacking in RSVPs from prospective installees. If you wish to have Linux installed on your machine, please send me an e-mail so that I can handle the logistics. Let's get the word out and hope for a great turnout! Later, Andy -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

3 4

installfest?
by Jeffrey Michael Reed Oct. 2, 2001

Oct. 2, 2001

hey doodz... oi...andy...i hear you met my other half...he's that whacky spaniard guy named christian...he used to work @ ScreamDesign? :) anyway, what's the dilly with the installfest? is it still on for wednesday night? hope so...that would be SWEET! i would like to attend. i would like to chug grog with fellow gear/penguin/devil heads. give me da heads up!!! peace and GOD BLESS THE FREAKIN' WORLD... terrorism sucks... -- ==//> Jeffrey Michael Reed ==//> Metro West Boston Linux User Group ==//> Co-founder/Administrator ==//> HTML, PHP, GNU/Linux ==//> ==//> Phunky Phresh stuff about... ==//> GNU/Linux, Hacking, Humor, ==//> Movies, Music, Programming, ==//> and Underground News about ==//> the Revolution... ==//> ==//> http://www.linuxbusca.com ==//> ==//> Favorite OS: Debian ==//> Favorite food: Lasagna ==//> Favorite brew: Guinness ==//> Favorite music: Mr. Bungle

1 0

Re: [Wlug] *nix humor
by Tim Trachimowicz Oct. 1, 2001

Oct. 1, 2001

thinkgeek already has that on t-shirts. pretty funny. --track >From: Bill Mills-Curran <subssn594(a)charter.net> >Reply-To: wlug(a)mail.wlug.org >To: Worcester Linux Users Group <wlug(a)mail.wlug.org> >Subject: [Wlug] *nix humor >Date: Mon, 1 Oct 2001 11:52:31 -0400 (EDT) > >Seen on an I495 bumper: > > rm -rf /bin/laden > >Bill > >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

5 4

Stuff for sale...
by John Stoffel Oct. 1, 2001

Oct. 1, 2001

Hi guys, I've ust bought a new (to me!) system, a dual PIII 550mhz Xeon system with 512mb of ram, graphics and some raid stuff. It's a Dell Precision 610 workstation. Very nice box. It came with a Adaptec ALO-1130U RAIDport PCI card with 16mb of ram. Unfortunately its unusable with Linux. Anyone interested in this card for their Windows server? Drivers are available, and it does work, since it passes the bios boot stuff. I've also got a video board that I want to get rid of, its a paired set of full length boards, one AGP, one PCI hooked together. It's an "Intense3d Wildcat 4000" board, and it's supposed to be a screammer with OpenGL. 64mb of video ram, etc. And of course, no Linux drivers. It does work under Linux as an X display, but since the boards are full size, I've decided to go with my AGP G450 instead. Much smaller. *grin* And it's better supported. So I realize you guys might not be too interested in this stuff, but if you do know of anyone who is looking for stuff like this, please let me know. Right now I'm looking for a good high quality KVM switch with ideally four ports. Something that can talk to a MAC and Sun as well as PCs would be ideal. Willing to trade! I'll also have some other stuff available down the line, like a pair of matched PIII 450mhz processors and possibly a case with possibly broken motherboard to pass on for free. Other odds and ends, send me email if you're looking and I'll see what I can find. John

1 0

*nix humor
by Bill Mills-Curran Oct. 1, 2001

Oct. 1, 2001

Seen on an I495 bumper: rm -rf /bin/laden Bill

1 0

WPI Install Fest
by Andy Stewart Oct. 1, 2001

Oct. 1, 2001

Hi Everybody, We will be having an install fest at WPI on Thursday evening, October 4th, from 6 PM to 10 PM in "the Discovery Classroom", aka Higgins Labs room 218. I am mainly aiming this at WPI students, but certainly anybody else who wants to get Linux installed is most welcome to join us. I don't know if I've seen this classroom...could somebody from WPI tell me how many computers we could reasonably accomodate in this room? This is just in case we get overwhelmed with folks requesting installations. I am seeking volunteers to do installations as well as folks who wish to get Linux installed fo the first time. I'll give preference to full installs, but if there are some folks who need to have some piece of Linux configured, we can do that on a space available basis. As in the past, I would like to suggest a $10 donation for installees. This will help to defray the cost of making CDs which you can take with you after the install fest. If you have your own Linux CDs, we'll do our best to get that version installed for you. If you are interested in attending, either as an installer, installee, or voyeur, please send me an e-mail. Thanks! Andy -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

8 7