May 2008 - WLUG - wlug.mailman3.com

JOB opening - Sr Embedded Linux/Linux kernel - 6+ mth contract

by John Spencer

Our client in northern MA has a 6+ mth contract opening for a Sr Embedded Linux/Linux kernel engineer. Details as follows: The candidate should posses following skills: - Good understanding of Linux kernel and Real Time OS environment including installation, configuration, tools, utilities, debugging tools such as Code Warrior, WindRiver debugging tools. - Deep Understanding & Knowledge of embedded Linux 2.6 kernel a must. - Experience with U-boot, Linux device drivers, NAND Flash, Flash File System, File System Wear Leveling, and Designing & Implementing System Frameworks applications. - Must possess strong debugging and analytical skills. - Expertise with system level programming. Experience with C/C++. - Should be familiar with fine tuning Linux WindRiver Performance, Characterization & Optimizations including Kernel/User Space Latencies, Memory & Process Management. - Ability to work with others to get the problems solved. - Good Team Player, Independent worker and should posses good Communication Skills. Regards, Optimal Engineering Partners Inc. is now Symphony Services! John Spencer Office: 978-256-1113 ext 7608 Fax: 978-256-1184 jspencer(a)symphonysv.com Symphony Services 1 Technology Park Drive Westford , MA 01886 www.symphonysv.com <blocked::file:///C:\Documents%20and%20Settings\hripley-boyd\Application %20Data\Microsoft\Signatures\www.symphonysv.com>

May 29, 2008

Reminder: Meeting Wednesday 21-may-2008

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Everybody, We have a WLUG meeting scheduled for Wednesday, 21-may-2008, at 7:00 PM in the Access Grid room on the WPI campus in Worcester, MA USA. I can't update the website...it is currently unreachable. This will be a "Birds of a Feather" meeting where any and all topics related to Linux will be fair game. If anybody has one of those Asus Eee PCs running Linux, bring it along (so I can raffle it). ;-) We should also start planning for our summer BBQ. If anybody would like to host the BBQ, please let us know. Naturally, we'll go out for food after the meeting. See ya there! Andy - -- Andy Stewart, Founder Worcester Linux Users' Group (http://www.wlug.org) Chelmsford Linux Meetup Group (http://linux.meetup.com/393) Amateur Radio: KB1OIQ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFIM5NTHl0iXDssISsRAix1AJoDTSEeR6V4/9HFt+a7PRiApkU/fgCfVhIY hFcDwRvajBPGNmCr7S67FmM= =tTZY -----END PGP SIGNATURE-----

May 21, 2008

Re: [Wlug] Part time contractor

by Mike Leo

3 to 6 months during normal business hours...9-5pm EST'ish I don't know about the $. ----- Original Message ---- From: "johnmalloy(a)comcast.net" <johnmalloy(a)comcast.net> To: Worcester Linux Users Group <wlug(a)mail.wlug.org> Sent: Tuesday, May 20, 2008 3:10:11 PM Subject: Re: [Wlug] Part time contractor I am a Linux sys admin living in Cambridge. What hours do you need someone and for how long? What is the pay rate? -- Thanks! John Malloy johnmalloy AT comcast DOT net -------------- Original message ---------------------- From: Mike Leo <mleo963(a)yahoo.com> > We are deploying many Linux desktops in Cambridge Mass. > > We are looking for at least 1 temp contractor to assist. > > If anyone is interested, please email me directly at mleo963(a)yahoo.com

May 20, 2008

Re: [Wlug] Part time contractor

by johnmalloy＠comcast.net

I am a Linux sys admin living in Cambridge. What hours do you need someone and for how long? What is the pay rate? -- Thanks! John Malloy johnmalloy AT comcast DOT net -------------- Original message ---------------------- From: Mike Leo <mleo963(a)yahoo.com> > We are deploying many Linux desktops in Cambridge Mass. > > We are looking for at least 1 temp contractor to assist. > > If anyone is interested, please email me directly at mleo963(a)yahoo.com

May 20, 2008

Part time contractor

by Mike Leo

We are deploying many Linux desktops in Cambridge Mass. We are looking for at least 1 temp contractor to assist. If anyone is interested, please email me directly at mleo963(a)yahoo.com

May 20, 2008

Self-Introduction and LinuxGlobe Invitation

by Markus McLaughlin

Hello everyone, my name is Markus McLaughlin, I am both a member of the Fedora Project and a Linux blogger with a blog at http://linuxglobe.wordpress.com. About 5 years ago, I became a fan of Linux but did not actually use it until I bought my first Mac, which was a Mini, I now use an Intel iMac and I run Fedora 9, Ubuntu 8.04, and openSUSE in VMware Fusion. I want to reach out to other Linux hobbyists AND writers who want to promote Linux. What I want to do with my blog is to add other Writers who want to both promote Linux and help those who don't know what to do with it, with columns. Hopefully, Red Hat, Novell, and other companies will want to help fund a major Linux Magazine right here in North America. I want to help fill a niche that needs to be filled and HELP those who can't afford a Windows/Mac computer have free tools, internet access, and an inexpensive used laptop/desktop. Anyway, if anyone here has any ideas on what we can do together to promote Linux in this part of Massachusetts, PLEASE contact me. Fedora 9, IMHO, is much better than Ubuntu, so please check out the Fedora site at http://fedoraproject.orgsoon! Onward and forward!!! *Mark McLaughlin Hudson, MA*

May 17, 2008

Re: [Wlug] Debian/*ubuntu security bug and a question...

by Chuck Anderson

On Thu, May 15, 2008 at 10:39:51AM -0400, Theo Van Dinter wrote: > On Thu, May 15, 2008 at 10:32:32AM -0400, Brian A. Dewhirst wrote: > > I'm afraid my head spins a bit when I try to make sense of what > > corrective measures should be taken... has Ubuntu already rolled out a > > bug fix which will take care of the problem? If not, what needs to be > > done to fix my machine? > > In short if you've generated any keys with OpenSSL (ie: certificates, > ssh keys, etc,) on Debian or its derivatives at anytime in at least the > last 2 years, you will want to regenerate them after you upgrade to the > fixed version. > > Updating will solve the weak key generation issue, but not do anything about > the already generated keys in use. Also, if you've used SSH Password Authentication to log into to any system whose SSH host keys were generated with the vulnerable OpenSSL (likely any Debian, Ubuntu, or derivative systems), then you should change your password. Any data that was transferred over SSH to a system with a vulnerable key could have been compromised.

May 15, 2008

Re: [Wlug] Debian/*ubuntu security bug and a question...

by Lee Keyser-Allen

Brian, This particular problem is only related (as far as I can tell) to RSA key generation. If you've not done this, then you should be okay. I would still recommend bringing your OpenSSL lib up-to-date, as it is, indeed, used for secure web browsing as well (although firefox may statically link with it's own version to avoid just such problems ... ) So yeah, in short, if you don't have a key that you use to sign e-mail or for access to another computer, then you're probably fine. This is still probably of interest to the rest of the group, though, since there was recently a key-signing party, and with the proliferation of Ubuntu and Debian, I'm betting that a significant number of those keys will be compromised. Cheers, Lee On Thu, May 15, 2008 at 11:34 AM, Brian A. Dewhirst <b.dewhirst(a)gmail.com> wrote: > On Thu, May 15, 2008 at 10:39 AM, Theo Van Dinter <felicity(a)kluge.net> wrote: >> On Thu, May 15, 2008 at 10:32:32AM -0400, Brian A. Dewhirst wrote: >>> I'm afraid my head spins a bit when I try to make sense of what >>> corrective measures should be taken... has Ubuntu already rolled out a >>> bug fix which will take care of the problem? If not, what needs to be >>> done to fix my machine? >> >> In short if you've generated any keys with OpenSSL (ie: certificates, >> ssh keys, etc,) on Debian or its derivatives at anytime in at least the >> last 2 years, you will want to regenerate them after you upgrade to the >> fixed version. >> >> Updating will solve the weak key generation issue, but not do anything about >> the already generated keys in use. > > Well, pretend you're talking to a linux novice for a minute... does > that mean that if I don't think I've done any cryptography that I'm > fine, or is OpenSSL used for lots of other programs... for example, > does Firefox use it when someone logs into their checking account? > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > -- Lee Keyser-Allen (lkeyser(a)alum.wpi.edu)

May 15, 2008

Re: [Wlug] Debian/*ubuntu security bug and a question...

by Brian A. Dewhirst

On Thu, May 15, 2008 at 10:39 AM, Theo Van Dinter <felicity(a)kluge.net> wrote: > On Thu, May 15, 2008 at 10:32:32AM -0400, Brian A. Dewhirst wrote: >> I'm afraid my head spins a bit when I try to make sense of what >> corrective measures should be taken... has Ubuntu already rolled out a >> bug fix which will take care of the problem? If not, what needs to be >> done to fix my machine? > > In short if you've generated any keys with OpenSSL (ie: certificates, > ssh keys, etc,) on Debian or its derivatives at anytime in at least the > last 2 years, you will want to regenerate them after you upgrade to the > fixed version. > > Updating will solve the weak key generation issue, but not do anything about > the already generated keys in use. Well, pretend you're talking to a linux novice for a minute... does that mean that if I don't think I've done any cryptography that I'm fine, or is OpenSSL used for lots of other programs... for example, does Firefox use it when someone logs into their checking account?

May 15, 2008

Re: [Wlug] Debian/*ubuntu security bug and a question...

by Barış Hasdemir

On Thu, 2008-05-15 at 10:32 -0400, Brian A. Dewhirst wrote: > So, someone directed me at this bug report: > > http://metasploit.com/users/hdm/tools/debian-openssl/ > > I'm afraid my head spins a bit when I try to make sense of what > corrective measures should be taken... has Ubuntu already rolled out a > bug fix which will take care of the problem? If not, what needs to be > done to fix my machine? > > Thanks, > > Brian Hi, Yes, a security update was released on 14th. See http://www.ubuntu.com/usn/usn-612-5 baris

May 15, 2008