April 2024 - WLUG - wlug.mailman3.com

Re: If you use putty or puttygen, update to the latest version..

by Tim Keller

Keith: Putty is an SSH client for windows. On a very cool side note, my co-worker Nick Howgrave-Graham, who a couple years ago came and gave a talk about encryption and math and public private key stuff. The researchers who found this flaw cited his work.. Quote from the PDF: Many works in the literature have exploited side-channel information about (EC)DSA nonces by solving the Hidden Number Problem (HNP), e.g. [65, 19, 55, 12, 70, 75, 71, 63, 80, 46], since the seminal works of Bleichenbacher [18] and Howgrave-Graham and Smart [45]. Nick is a brilliant guy and it's cool that his work is still being used to find flaws. Tim. On Wed, Apr 17, 2024 at 12:40 PM Gregory Boyce <gregory.boyce(a)gmail.com> wrote: > I've mostly seen putty used by Windows users, and Linux users that > recently moved from Windows. > > If you were using it, you would know. You should be good. > > On Wed, Apr 17, 2024, 9:34 AM Keith Wright via WLUG <wlug(a)lists.wlug.org> > wrote: > >> Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: >> >> > Putty just announced that versions earlier than 0.80 were generating >> > ecdsa-sha2-nistp521 that were flawed.. >> > >> > If you have any of these keys lying around, destroy them and regenerate >> keys. >> >> I had never heard of Putty, but this sounded dire. There are many >> things that I never heard of that are installed by my Linux distribution >> (Debian) and are essential for it's operation. Do I have putty keys >> lying around? >> >> I Google search reveals that this question has been asked by many other >> people and answered by many more people who have no idea what they are >> talking about. >> >> My current best guess is that PuTTy is a MeSs-Windows implementation of >> the ssh protocol that has been ported to Linux, for no good reason since >> the ssh program works better. >> >> Therefore I plan to ignore this dire warning. >> >> Does anybody think I am mistaken? >> >> -- Keith >> >> PS: In any case, this particular "security vulnerability" seems like it >> might be something to worry about iff you work for the CIA and think >> that the KGB may be spending mega-$ and years of work to steal your >> secrets. Nobody wants to steal my secrets. I am more worried that some >> random thug might break a window and steal my computer. >> _______________________________________________ >> WLUG mailing list -- wlug(a)lists.wlug.org >> To unsubscribe send an email to wlug-leave(a)lists.wlug.org >> Create Account: https://wlug.mailman3.com/accounts/signup/ >> Change Settings: >> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ >> Web Forum/Archive: >> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/6RYVL… >> > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 19, 2024

Re: Great meeting last night! --- Sorry I couldn't stay

by Jon "maddog" Hall

Keith, >Does jitsi create rooms upon demand from anyone? Jitsi has two main methods of operation that I know of: o create an "on demand" room by generating a unique string that you can pass to the other people and everyone joins via that string o create a "moderated" room which has two URLs generated, one for the "users" and one for the "moderator". You get this type of room by clicking on "book a meeting URL" right under the normal window that says "start meeting" at the top of the Jitsi Meet page. With regards to the sound, I have a Thinkpad X1 and when I use the 3.5mm audio jack on the side I have not been able to get the microphone to work properly, so I use a USB sound card or USB headphones to hear and speak. This requires me to configure the sound options on the system. You can also select which speakers and microphones you want to use in the Jitsi application itself right before you "join the meeting". Just click on "settings". You may have to dicker with the volume a bit in your system settings. On the other hand my X1 now uses solid state storage and has a very soft fan (if it turns on at all) so sometimes I do not use any microphone or speakers other than those with the laptop. md On Fri, Apr 12, 2024 at 12:33 PM Keith Wright via WLUG <wlug(a)lists.wlug.org> wrote: > Kevin Stratton via WLUG <wlug(a)lists.wlug.org> writes: > > > I was able to connect using https://jitsi.uvhash.org/WlugMA%20uvhash.org, > but > > I was the only person (as a moderator) in the lobby at 7:20. Does you > meeting > > start at 7:30? I assumed that the meeting starts at 7:00. > > I connected to https://jitsi.uvhash.org/WlugMA (no %20uvhash) at 7:00 > and found people there. Does jitsi create rooms upon demand from > anyone? > > My problem was that, while I could hear other people (at least while > they were near the microphone and the gloppita-gloppita machine was off) > they could not hear me, except intermittently. Worse, it seemed that > my laptop was generating noise and feedback, so people had to mute me > so that they could hear each other. > > The problem seemed to be in the software or configuration of my Thinpad > with Debian GNU/Linux 12 (bookworm) and Firefox ESR 102.15.1 > of Sept 12, 2023. > > I thought I had tested it the day before. I found a way to make a > recording and recorded a short speech, which I could play back. > It all seemed to work, but when I unplugged it and plugged it back in > it required reconfiguration and I may have missed something and wound > up using the built-in mike. > > The same USB headphone/mike seemed to work when attached to a Windows > machine, but where's the fun in that? > > I checked out early in disgust. Suggestions on how to debug the > mike might be helpful. > > -- Keith > > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/OA5FC… >

April 17, 2024

Re: If you use putty or puttygen, update to the latest version..

by Gregory Boyce

I've mostly seen putty used by Windows users, and Linux users that recently moved from Windows. If you were using it, you would know. You should be good. On Wed, Apr 17, 2024, 9:34 AM Keith Wright via WLUG <wlug(a)lists.wlug.org> wrote: > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > > > Putty just announced that versions earlier than 0.80 were generating > > ecdsa-sha2-nistp521 that were flawed.. > > > > If you have any of these keys lying around, destroy them and regenerate > keys. > > I had never heard of Putty, but this sounded dire. There are many > things that I never heard of that are installed by my Linux distribution > (Debian) and are essential for it's operation. Do I have putty keys > lying around? > > I Google search reveals that this question has been asked by many other > people and answered by many more people who have no idea what they are > talking about. > > My current best guess is that PuTTy is a MeSs-Windows implementation of > the ssh protocol that has been ported to Linux, for no good reason since > the ssh program works better. > > Therefore I plan to ignore this dire warning. > > Does anybody think I am mistaken? > > -- Keith > > PS: In any case, this particular "security vulnerability" seems like it > might be something to worry about iff you work for the CIA and think > that the KGB may be spending mega-$ and years of work to steal your > secrets. Nobody wants to steal my secrets. I am more worried that some > random thug might break a window and steal my computer. > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/6RYVL… >

April 17, 2024

Re: If you use putty or puttygen, update to the latest version..

by Keith Wright

Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > Putty just announced that versions earlier than 0.80 were generating > ecdsa-sha2-nistp521 that were flawed.. > > If you have any of these keys lying around, destroy them and regenerate keys. I had never heard of Putty, but this sounded dire. There are many things that I never heard of that are installed by my Linux distribution (Debian) and are essential for it's operation. Do I have putty keys lying around? I Google search reveals that this question has been asked by many other people and answered by many more people who have no idea what they are talking about. My current best guess is that PuTTy is a MeSs-Windows implementation of the ssh protocol that has been ported to Linux, for no good reason since the ssh program works better. Therefore I plan to ignore this dire warning. Does anybody think I am mistaken? -- Keith PS: In any case, this particular "security vulnerability" seems like it might be something to worry about iff you work for the CIA and think that the KGB may be spending mega-$ and years of work to steal your secrets. Nobody wants to steal my secrets. I am more worried that some random thug might break a window and steal my computer.

April 17, 2024

If you use putty or puttygen, update to the latest version..

by Tim Keller

Putty just announced that versions earlier than 0.80 were generating ecdsa-sha2-nistp521 that were flawed.. If you have any of these keys lying around, destroy them and regenerate keys. Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 16, 2024

Re: Great meeting last night! --- Sorry I couldn't stay

by Robert N. Evans

I connected twice at 7PM, but never seemed to hear anyone. So I also did not stay. Firefox 124.0.2 (Flatpak), on "Pop!_OS 22.04 LTS" (HW is System76 Gazelle laptop) -Bob Evans -----Original Message----- From: Worcester Linux Users' Group General Discussion <wlug(a)lists.wlug.org> Sent: Apr 12, 2024 12:37 PM To: Worcester Linux Users' Group General Discussion <wlug(a)lists.wlug.org> Cc: Keith Wright <kwright(a)keithdiane.us> Subject: [WLUG] Re: Great meeting last night! --- Sorry I couldn't stay Kevin Stratton via WLUG writes: > I was able to connect using https://jitsi.uvhash.org/WlugMA%20uvhash.org, but > I was the only person (as a moderator) in the lobby at 7:20. Does you meeting > start at 7:30? I assumed that the meeting starts at 7:00. I connected to https://jitsi.uvhash.org/WlugMA (no %20uvhash) at 7:00 and found people there. Does jitsi create rooms upon demand from anyone? My problem was that, while I could hear other people (at least while they were near the microphone and the gloppita-gloppita machine was off) they could not hear me, except intermittently. Worse, it seemed that my laptop was generating noise and feedback, so people had to mute me so that they could hear each other. The problem seemed to be in the software or configuration of my Thinpad with Debian GNU/Linux 12 (bookworm) and Firefox ESR 102.15.1 of Sept 12, 2023. I thought I had tested it the day before. I found a way to make a recording and recorded a short speech, which I could play back. It all seemed to work, but when I unplugged it and plugged it back in it required reconfiguration and I may have missed something and wound up using the built-in mike. The same USB headphone/mike seemed to work when attached to a Windows machine, but where's the fun in that? I checked out early in disgust. Suggestions on how to debug the mike might be helpful. -- Keith _______________________________________________ WLUG mailing list -- wlug(a)lists.wlug.org To unsubscribe send an email to wlug-leave(a)lists.wlug.org Create Account: https://wlug.mailman3.com/accounts/signup/ Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/OA5FC…

April 12, 2024

Re: Great meeting last night! --- Sorry I couldn't stay

by Keith Wright

Kevin Stratton via WLUG <wlug(a)lists.wlug.org> writes: > I was able to connect using https://jitsi.uvhash.org/WlugMA%20uvhash.org, but > I was the only person (as a moderator) in the lobby at 7:20. Does you meeting > start at 7:30? I assumed that the meeting starts at 7:00. I connected to https://jitsi.uvhash.org/WlugMA (no %20uvhash) at 7:00 and found people there. Does jitsi create rooms upon demand from anyone? My problem was that, while I could hear other people (at least while they were near the microphone and the gloppita-gloppita machine was off) they could not hear me, except intermittently. Worse, it seemed that my laptop was generating noise and feedback, so people had to mute me so that they could hear each other. The problem seemed to be in the software or configuration of my Thinpad with Debian GNU/Linux 12 (bookworm) and Firefox ESR 102.15.1 of Sept 12, 2023. I thought I had tested it the day before. I found a way to make a recording and recorded a short speech, which I could play back. It all seemed to work, but when I unplugged it and plugged it back in it required reconfiguration and I may have missed something and wound up using the built-in mike. The same USB headphone/mike seemed to work when attached to a Windows machine, but where's the fun in that? I checked out early in disgust. Suggestions on how to debug the mike might be helpful. -- Keith

April 12, 2024

Re: Great meeting last night!

by Kevin Stratton

I was able to connect using https://jitsi.uvhash.org/WlugMA%20uvhash.org, but I was the only person (as a moderator) in the lobby at 7:20. Does you meeting start at 7:30? I assumed that the meeting starts at 7:00. On 4/12/2024 10:17 AM, gmcaplan--- via WLUG wrote: > Hi Tim, > > As you might remember, I attended several WLUG meetings when they were > virtual. > I read a recent email that led me to believe there is still a way for > me t attend virtually. Is that true? If so. I will try attend some > future meetings. > Also, here is question that maybe you or someone in WLUG can help me with. > My computer runs (for now, don't ask why) Ubuntu 18.04 LTS. A > financial institution says I must run a virus scan very soon. I > installed clamav and then ran freshclam. As far as I can tell, > freshclam has been running for 15 hours, and is still running. Is that > typical etc.? > > Thanks. > > George Caplan > P.S. Here is some blatant self-promotion which doubles as recruiting > info for UPchieve, which especially needs Physics and CS coaches > (tutors). It also explains why I am too busy to update my OS ... for > now. (I am now very close to 3000 tutoring session.) > https://upchieve.org/blog/volunteer-math-tutor-george > > > > On 2024-04-12 9:16 am, Tim Keller via WLUG wrote > >> Having our own Jitsi instance was fantastic! >> Jansen got into ollama AI stuff and it was really cool. He's >> expressed interest in doing a full end to end demo. We talked about >> the xz explot and it's entanglement with systemd and OpenSSH. It was >> a great conversation about the history and missteps of systemd and >> how we got to this place where so many pieces of critical software in >> the FOSS are supported by just a few people. >> Next month's meeting will need to be moved around as it conflicts >> with something, I'll give more details as I learn them. >> Thanks, >> Tim. >> -- >> I am leery of the allegiances of any politician who refers to their >> constituents as "consumers". >> >> _______________________________________________ >> WLUG mailing list -- wlug(a)lists.wlug.org >> To unsubscribe send an email to wlug-leave(a)lists.wlug.org >> Create Account: https://wlug.mailman3.com/accounts/signup/ >> Change Settings: >> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ >> Web Forum/Archive: >> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/GEZL2… > > _______________________________________________ > WLUG mailing list --wlug(a)lists.wlug.org > To unsubscribe send an email towlug-leave(a)lists.wlug.org > Create Account:https://wlug.mailman3.com/accounts/signup/ > Change Settings:https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive:https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org…

April 12, 2024

Re: Great meeting last night!

by John Stoffel

>>>>> "gmcaplan---" == gmcaplan--- via WLUG <wlug(a)lists.wlug.org> writes: > Hi Tim, As you might remember, I attended several WLUG meetings when > they were virtual. I read a recent email that led me to believe > there is still a way for me t attend virtually. Is that true? If > so. I will try attend some future meetings. You should be able to find the link on the website for the monthly meetings, and we do still try to make them both virtual and in-person at the same time. So please do join next month! > Also, here is question that maybe you or someone in WLUG can help me > with. My computer runs (for now, don't ask why) Ubuntu 18.04 LTS. A > financial institution says I must run a virus scan very soon. I > installed clamav and then ran freshclam. As far as I can tell, > freshclam has been running for 15 hours, and is still running. Is > that typical etc.? I suspect they're just doing this for all people who connect via a web-browser. But it's hard to know if it's an ok thing because you don't tell us how many files you have and how much data needs to be scanned. And I would also rcommend that you upgrade to 20.04 or 22.04 as soon as you can. Both of those releases should run just fine on a system running 18.04, which is really quite old. It might also just be that you're web browser is old (in the financial institution's eyes) so they want a scan. Is this a laptop with limited memory and/or disk space? Or an old old CPU? More details would help us here. Thanks. > George Caplan > P.S. Here is some blatant self-promotion which doubles as recruiting > info for UPchieve, which especially needs Physics and CS coaches > (tutors). It also explains why I am too busy to update my OS ... for > now. (I am now very close to 3000 tutoring session.) > https://upchieve.org/blog/volunteer-math-tutor-george That would make sense why you're so busy and why you don't want to possibly break thins with an upgrade. It might be simpler to spin up a VM on the system and install the latest version of Ubuntu in there, with a newer web browser and see if your financial institution will be happier then. > On 2024-04-12 9:16 am, Tim Keller via WLUG wrote > Having our own Jitsi instance was fantastic! > Jansen got into ollama AI stuff and it was really cool. He's expressed interest in doing a > full end to end demo. We talked about the xz explot and it's entanglement with systemd and > OpenSSH. It was a great conversation about the history and missteps of systemd and how we got > to this place where so many pieces of critical software in the FOSS are supported by just a > few people. > Next month's meeting will need to be moved around as it conflicts with something, I'll give > more details as I learn them. > Thanks, > Tim. > -- > I am leery of the allegiances of any politician who refers to their constituents as > "consumers". > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/GEZL2… > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/RCJ5L…

April 12, 2024

Re: Great meeting last night!

by gmcaplan＠gmcaplan.org

Hi Tim, As you might remember, I attended several WLUG meetings when they were virtual. I read a recent email that led me to believe there is still a way for me t attend virtually. Is that true? If so. I will try attend some future meetings. Also, here is question that maybe you or someone in WLUG can help me with. My computer runs (for now, don't ask why) Ubuntu 18.04 LTS. A financial institution says I must run a virus scan very soon. I installed clamav and then ran freshclam. As far as I can tell, freshclam has been running for 15 hours, and is still running. Is that typical etc.? Thanks. George Caplan P.S. Here is some blatant self-promotion which doubles as recruiting info for UPchieve, which especially needs Physics and CS coaches (tutors). It also explains why I am too busy to update my OS ... for now. (I am now very close to 3000 tutoring session.) https://upchieve.org/blog/volunteer-math-tutor-george On 2024-04-12 9:16 am, Tim Keller via WLUG wrote > Having our own Jitsi instance was fantastic! > > Jansen got into ollama AI stuff and it was really cool. He's expressed > interest in doing a full end to end demo. We talked about the xz explot > and it's entanglement with systemd and OpenSSH. It was a great > conversation about the history and missteps of systemd and how we got > to this place where so many pieces of critical software in the FOSS are > supported by just a few people. > > Next month's meeting will need to be moved around as it conflicts with > something, I'll give more details as I learn them. > > Thanks, > Tim. > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/GEZL2…

April 12, 2024