May 2008 - WLUG - wlug.mailman3.com

Re: [Wlug] Debian/*ubuntu security bug and a question...

by Theo Van Dinter

On Thu, May 15, 2008 at 10:32:32AM -0400, Brian A. Dewhirst wrote: > I'm afraid my head spins a bit when I try to make sense of what > corrective measures should be taken... has Ubuntu already rolled out a > bug fix which will take care of the problem? If not, what needs to be > done to fix my machine? In short if you've generated any keys with OpenSSL (ie: certificates, ssh keys, etc,) on Debian or its derivatives at anytime in at least the last 2 years, you will want to regenerate them after you upgrade to the fixed version. Updating will solve the weak key generation issue, but not do anything about the already generated keys in use. -- Randomly Selected Tagline: Leela: "Great. We're two days from earth with no food." Bender: "Problem solved. You two fight to the death and I'll cook the loser."

May 15, 2008

Debian/*ubuntu security bug and a question...

by Brian A. Dewhirst

So, someone directed me at this bug report: http://metasploit.com/users/hdm/tools/debian-openssl/ I'm afraid my head spins a bit when I try to make sense of what corrective measures should be taken... has Ubuntu already rolled out a bug fix which will take care of the problem? If not, what needs to be done to fix my machine? Thanks, Brian

May 15, 2008

Re: [Wlug] Wlug Digest, Vol 55, Issue 4

by Simeon MacMillen

Thanks Andy! I will set this up as soon as I have a chance. Simeon MacMillen KC2THZ On Mon, May 12, 2008 at 12:00 PM, <wlug-request(a)mail.wlug.org> wrote: > Send Wlug mailing list submissions to > wlug(a)mail.wlug.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://mail.wlug.org/mailman/listinfo/wlug > or, via email, send a message with subject or body 'help' to > wlug-request(a)mail.wlug.org > > You can reach the person managing the list at > wlug-owner(a)mail.wlug.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Wlug digest..." > > > Today's Topics: > > 1. port security question (Simeon MacMillen) > 2. Re: port security question (Andy Stewart) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 11 May 2008 23:00:53 -0400 > From: "Simeon MacMillen" <penguinem(a)gmail.com> > Subject: [Wlug] port security question > To: wlug(a)mail.wlug.org > Message-ID: > <4bffb9c50805112000i6096280cx82e1a8316b14b92e(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > I'm trying to set up Echolink (amateur radio software) on Ubuntu > (through WINE). My computer failed the firewall tests -the > troubleshooting material recommended the following: > > Allow UDP destination ports 5198-5199 between Internet and PC in both directions > Allow TCP (source port any, destination port 5200) from PC to Internet > > What security risks do I introduce by doing this? (Is it worth the risk?) > > Thanks, > Simeon MacMillen > > P.S. I've been on the Wlug mailing list for a year, though I've only > managed to make it to one meeting so far. > > > ------------------------------ > > Message: 2 > Date: Mon, 12 May 2008 07:16:16 -0400 > From: Andy Stewart <andystewart(a)comcast.net> > Subject: Re: [Wlug] port security question > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Message-ID: <48282700.6040704(a)comcast.net> > Content-Type: text/plain; charset=ISO-8859-1 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Simeon MacMillen wrote: > > I'm trying to set up Echolink (amateur radio software) on Ubuntu > > (through WINE). My computer failed the firewall tests -the > > troubleshooting material recommended the following: > > > > Allow UDP destination ports 5198-5199 between Internet and PC in both directions > > Allow TCP (source port any, destination port 5200) from PC to Internet > > > > What security risks do I introduce by doing this? (Is it worth the risk?) > > > > Hi Simeon, > > For those who may not know, "EchoLink? software allows licensed Amateur > Radio stations to communicate with one another over the Internet, using > voice-over-IP (VoIP) technology." (from www.echolink.org) > > I'm wondering if EchoLinux would do the job for you instead of using > WINE. See http://cqinet.sourceforge.net/. > > I don't think there should be a problem opening these ports for EchoLink > use. On my machine, the ports are unassigned. > > Have fun, and 73, > > Andy > > - -- > Andy Stewart, Founder > Worcester Linux Users' Group (http://www.wlug.org) > Chelmsford Linux Meetup Group (http://linux.meetup.com/393) > Amateur Radio: KB1OIQ > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2 (GNU/Linux) > Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org > > iD8DBQFIKCcAHl0iXDssISsRAsoyAJwIN0qNy84466h/70yMPe/qnAu5bgCeMNJ6 > wwDuk25YYaCWVxvMiN+t71Y= > =D1kk > -----END PGP SIGNATURE----- > > > ------------------------------ > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > > End of Wlug Digest, Vol 55, Issue 4 > *********************************** >

May 12, 2008

Re: [Wlug] port security question

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Simeon MacMillen wrote: > I'm trying to set up Echolink (amateur radio software) on Ubuntu > (through WINE). My computer failed the firewall tests -the > troubleshooting material recommended the following: > > Allow UDP destination ports 5198-5199 between Internet and PC in both directions > Allow TCP (source port any, destination port 5200) from PC to Internet > > What security risks do I introduce by doing this? (Is it worth the risk?) > Hi Simeon, For those who may not know, "EchoLink® software allows licensed Amateur Radio stations to communicate with one another over the Internet, using voice-over-IP (VoIP) technology." (from www.echolink.org) I'm wondering if EchoLinux would do the job for you instead of using WINE. See http://cqinet.sourceforge.net/. I don't think there should be a problem opening these ports for EchoLink use. On my machine, the ports are unassigned. Have fun, and 73, Andy - -- Andy Stewart, Founder Worcester Linux Users' Group (http://www.wlug.org) Chelmsford Linux Meetup Group (http://linux.meetup.com/393) Amateur Radio: KB1OIQ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFIKCcAHl0iXDssISsRAsoyAJwIN0qNy84466h/70yMPe/qnAu5bgCeMNJ6 wwDuk25YYaCWVxvMiN+t71Y= =D1kk -----END PGP SIGNATURE-----

May 12, 2008

port security question

by Simeon MacMillen

I'm trying to set up Echolink (amateur radio software) on Ubuntu (through WINE). My computer failed the firewall tests -the troubleshooting material recommended the following: Allow UDP destination ports 5198-5199 between Internet and PC in both directions Allow TCP (source port any, destination port 5200) from PC to Internet What security risks do I introduce by doing this? (Is it worth the risk?) Thanks, Simeon MacMillen P.S. I've been on the Wlug mailing list for a year, though I've only managed to make it to one meeting so far.

May 12, 2008

Re: [Wlug] Meeting Topic Idea - MythTV

by John Stoffel

All, Sorry if this is going off topic, since we're not talking Linux much here.... thought Myth is linux, and Tivo is linux with additions, so it's sorta kinda maybe relevant. :] John >>>>> <bkn(a)ithryn.net> writes: > On Wed, 7 May 2008 08:30:12 -0400, "John Stoffel" <john(a)stoffel.org> wrote: >>>>>>> "Eric" == Eric Martin <freak4uxxx(a)gmail.com> writes: >> Eric> I have a mythbox but can't bring it in as my wife would *KILL* Eric> me. I can however talk about a few things although I don't see Eric> it going past 20 minutes. If anybody's interested in it I could Eric> throw something together for a later date... >> > I also have am mythtv box. > Someone was asking about a distro earlier. The latest ubuntu appears to > have ivtv support built into the kernel and the lirc code built into the > kernel. The former is a driver for the hauppauge tv cards the the latter is > for the remote. Until very recently ivtv and lirc were a challenge to get > working because it meant you had to recompile your kernel every time > something changed. > Other challenges for old tube-style TV is to get it to display to > the TV correctly. I believe you need a special X11 driver for > this. The new LCD TVs are much more friendly when it comes to > plugging-in a computer. Right now I've just got a plain old JVC Tube TV, which has worked great for years and years. No plans to replace until it's dead dead dead. Not HD plans either... it would be a waste on a 32" TV screen. >> >> Now my big questions, since I can't make the meeting due to other >> commitments, is as follows: >> >> - do people use their TiVo remotes with Myth? >> > I use the remote that came with my pvr card. It works really well. I > need to use the TV remote to turn the TV on, but once the TV is on, > i only use the mythtv remote to control TV. I also use mythtv and > the mythtv remote to play DVDs using xine, which is the only media > player i could find that has decent DVD menu support. Does the PVR remote not have the ability to turn on the TV power? My TiVo talks quite well to my TV, except for changing channels when I'm on the TV Tuner input, and not on the TiVo tuner. >> - anyone hack a TiVo to be a Myth frontend box? > I believe their tv tuners is propriety, but i could be wrong on > this. The hauppauge cards are well supported under linux many of > them have hardware decoders and encoders which alleviate the load on > the CPU for converting the TV streams. I don't want to use the TiVo as the backend in this case, I just want to use it to read streams off the backend Myth box and display them to the TV. Seems like a perfect use for an old Series 1 or series 2 Tivo which you don't want to pay the monthly fee for any more. Ideally, if I setup a Myth server, I'd have my TiVo as the front end, along with it's remote. Ideally. >> - which capture cards work with Digital cable? >> > I don't know of any, read more below ... I know they must exist, but I honestly haven't researched this much at all. Nor do I care for HD Digital cable either. It's just not worth the money to me. Though when my Wife see the RedSox on high def, she just might want it badly enough! *grin* But the real goal is simplicity. And minimum number of remotes. >> - does it need to be downstream of the cable box? > Yes. I did set this up at my place just to test it. With my setup > using comcast, i had a serial cable plugged into the mythtv box and > the cable box. I was able to change the channels on the digital > cable box. There is significant lag -- i mean more so than lag than > usual digital cable. Since i don't want anything that comes through > on the digital channels i just setup the analog side to go to my > mythtv box. That gets me all the channels i want. We're ok with Analog too, except for BBC America is up over 100, so we need Digital to get that. And I'm bummed at the slowness of the Tivo changing channels on my Digital Cable box (using the IR doohickey), it's really annoying. >> I was just at my mom's house and she has a new Sony LCD HD TV. >> Realize that my mom is clueless about technology, so much so that they >> took advantage of her and sold her a Toshiba HD DVD player too. >> Sigh... > ouch. I would definitely take it back, where did she get this? I > would go find their manager. that's really absurd. It's too late now, it's been two months since she got this setup, my first time down to visit and see it. I wasn't too impressed with the picture quality, nor with the Sony TV in terms of configurability, etc. Not to say I'm still not pissed at them for this. The annoying part is that the TV has 8+ inputs, but she only uses two of them, and I cannot turn off the rest of them so she can't see them by default. Total pain in the butt. I'm thinking the Harmony remote with the two buttons that say "Watch TV" and "Watch a movie", properly programmed, would be a life saver for her, and for me. >> All she wants is a big screen so she can watch TV and DVDs. That's >> it. Now she has to juggle three friggin remotes to do this. A >> logitech Harmony remote is in her future I think. :] >> > As i mentioned above, i only need to use the TV remote to turn the TV on > for all other tasks i just use the mythtv remote. A friend of mine has a > nice LCD HDTV with mythtv setup (although he only gets standard def TV); > he's TV goes into sleep mode with it's been inactive and the mythtv remote > will wake the TV up; so he only needs the one remote. >> But this just shows how complicated it can be to setup a simple >> setup. So, how do people deal with multiple inputs, remotes, >> digital/analog cable, etc. > I hope this question is somehow explained above. The remotes that > come with the hauppauge PRV cards are well supported under linux. It > took me some configuration to get it working, but i can explain that > at a later time if necessary; that is if i can remember how to do > it; it's been so long. As long as they're supported, I can deal I think. I just really really really like the Tivo remote and how it feels in the hand. And being able to use it with Myth would make my wife and kids accept it all the more easily. >> All in regards to Myth, since when my TiVo finally bites the dust, >> I'll need to put something up ASAP to keep the family happy. >> > i can understand that. It's hard to go back to watching regular TV. It's impossible. :] John

May 7, 2008

Re: [Wlug] Meeting Topic Idea - MythTV

by bkn＠ithryn.net

On Wed, 7 May 2008 08:30:12 -0400, "John Stoffel" <john(a)stoffel.org> wrote: >>>>>> "Eric" == Eric Martin <freak4uxxx(a)gmail.com> writes: > > Eric> I have a mythbox but can't bring it in as my wife would *KILL* > Eric> me. I can however talk about a few things although I don't see > Eric> it going past 20 minutes. If anybody's interested in it I could > Eric> throw something together for a later date... > I also have am mythtv box. Someone was asking about a distro earlier. The latest ubuntu appears to have ivtv support built into the kernel and the lirc code built into the kernel. The former is a driver for the hauppauge tv cards the the latter is for the remote. Until very recently ivtv and lirc were a challenge to get working because it meant you had to recompile your kernel every time something changed. Other challenges for old tube-style TV is to get it to display to the TV correctly. I believe you need a special X11 driver for this. The new LCD TVs are much more friendly when it comes to plugging-in a computer. > > Now my big questions, since I can't make the meeting due to other > commitments, is as follows: > > - do people use their TiVo remotes with Myth? > I use the remote that came with my pvr card. It works really well. I need to use the TV remote to turn the TV on, but once the TV is on, i only use the mythtv remote to control TV. I also use mythtv and the mythtv remote to play DVDs using xine, which is the only media player i could find that has decent DVD menu support. > - anyone hack a TiVo to be a Myth frontend box? > I believe their tv tuners is propriety, but i could be wrong on this. The hauppauge cards are well supported under linux many of them have hardware decoders and encoders which alleviate the load on the CPU for converting the TV streams. > - which capture cards work with Digital cable? > I don't know of any, read more below ... > - does it need to be downstream of the cable box? > Yes. I did set this up at my place just to test it. With my setup using comcast, i had a serial cable plugged into the mythtv box and the cable box. I was able to change the channels on the digital cable box. There is significant lag -- i mean more so than lag than usual digital cable. Since i don't want anything that comes through on the digital channels i just setup the analog side to go to my mythtv box. That gets me all the channels i want. > > I was just at my mom's house and she has a new Sony LCD HD TV. > Realize that my mom is clueless about technology, so much so that they > took advantage of her and sold her a Toshiba HD DVD player too. > Sigh... > ouch. I would definitely take it back, where did she get this? I would go find their manager. that's really absurd. > All she wants is a big screen so she can watch TV and DVDs. That's > it. Now she has to juggle three friggin remotes to do this. A > logitech Harmony remote is in her future I think. :] > As i mentioned above, i only need to use the TV remote to turn the TV on for all other tasks i just use the mythtv remote. A friend of mine has a nice LCD HDTV with mythtv setup (although he only gets standard def TV); he's TV goes into sleep mode with it's been inactive and the mythtv remote will wake the TV up; so he only needs the one remote. > But this just shows how complicated it can be to setup a simple > setup. So, how do people deal with multiple inputs, remotes, > digital/analog cable, etc. > I hope this question is somehow explained above. The remotes that come with the hauppauge PRV cards are well supported under linux. It took me some configuration to get it working, but i can explain that at a later time if necessary; that is if i can remember how to do it; it's been so long. > All in regards to Myth, since when my TiVo finally bites the dust, > I'll need to put something up ASAP to keep the family happy. > i can understand that. It's hard to go back to watching regular TV. - brad

May 7, 2008

Re: [Wlug] Meeting Topic Idea - MythTV

by John Stoffel

>>>>> "Eric" == Eric Martin <freak4uxxx(a)gmail.com> writes: Eric> I have a mythbox but can't bring it in as my wife would *KILL* Eric> me. I can however talk about a few things although I don't see Eric> it going past 20 minutes. If anybody's interested in it I could Eric> throw something together for a later date... My wife feels the same way about our TiVo box. Now my big questions, since I can't make the meeting due to other commitments, is as follows: - do people use their TiVo remotes with Myth? - anyone hack a TiVo to be a Myth frontend box? - which capture cards work with Digital cable? - does it need to be downstream of the cable box? I was just at my mom's house and she has a new Sony LCD HD TV. Realize that my mom is clueless about technology, so much so that they took advantage of her and sold her a Toshiba HD DVD player too. Sigh... All she wants is a big screen so she can watch TV and DVDs. That's it. Now she has to juggle three friggin remotes to do this. A logitech Harmony remote is in her future I think. :] But this just shows how complicated it can be to setup a simple setup. So, how do people deal with multiple inputs, remotes, digital/analog cable, etc. All in regards to Myth, since when my TiVo finally bites the dust, I'll need to put something up ASAP to keep the family happy. Cheers. John

May 7, 2008

Re: [Wlug] Meeting Topic Idea - MythTV

by Eric Stein

Thanks! I'll check those out. Eric Conner Finlay wrote: > Might want to check out - > Mythdora(http://distrowatch.com/table.php?distribution=mythdora) or > Mythbuntu(http://distrowatch.com/table.php?distribution=mythbuntu) > > On Wed, May 7, 2008 at 12:11 AM, Eric Stein <eastein(a)wpi.edu > <mailto:eastein@wpi.edu>> wrote: > > I would love to set up a mythbox sometime this summer or fall, when I > have cable again. Are there any distributions that are not all manual > for setting it up? I want to be able to just make it work, and > hack on > it later if I want to change the default config. I remember it > being a > pain to build. > > Eric >

May 7, 2008

Re: [Wlug] Meeting Topic Idea - MythTV

by Conner Finlay

Might want to check out - Mythdora( http://distrowatch.com/table.php?distribution=mythdora) or Mythbuntu( http://distrowatch.com/table.php?distribution=mythbuntu) On Wed, May 7, 2008 at 12:11 AM, Eric Stein <eastein(a)wpi.edu> wrote: > I would love to set up a mythbox sometime this summer or fall, when I > have cable again. Are there any distributions that are not all manual > for setting it up? I want to be able to just make it work, and hack on > it later if I want to change the default config. I remember it being a > pain to build. > > Eric > > Eric Martin wrote: > > joel d wrote: > >> WLUG'ers, > >> > >> I have a meeting topic idea but very little knowledge of the proposed > >> topic, MythTV. > >> > >> I have a DVR through my cable provider, Charter, but am unhappy with > >> it's features and capacity. > >> I am ready to buy a capture card, re-dedicate some PC hardware and > >> commit to building a Myth box. > >> > >> I know this was covered back in 2003 by Tim Keller, but my lack of > >> recall has me missing details of his excellent presentation. > >> > >> Any others think this is a good idea for a meeting topic? > >> > >> If so, would anyone indulge by presenting Myth with their knowledge, > >> hardware info (PC spec and video spec) and setup & install details? > >> > >> Joel > > > > I have a mythbox but can't bring it in as my wife would *KILL* me. I > > can however talk about a few things although I don't see it going past > > 20 minutes. If anybody's interested in it I could throw something > > together for a later date... > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > -- Conner Finlay

May 7, 2008