- WLUG - wlug.mailman3.com

Re: [Wlug] encrypted files

by Stephen C. Daukas

Chuck hit the nail on the head... The general question that is best to begin with is 'what do you want to protect and what is it worth?' The common metaphor used in security is 'how much does it cost to build the wall versus the value of what the wall protects.' In other words, long keys and the time to encrypt/decrypt, etc., etc., is probably not what you want for your everyday files. It this really is required for everyday files, you are into a model similar to what government agencies do (google "Orange Book" - the nickname for the US standards for computing security - at least when I was into this stuff - but the concepts remain the same). If there are a few things that are really vital, then compartmentalize them and apply lots of security to them (i.e., don't keep them on a hard drive that is on a network - physical security - or encrypt them on removable media - soft and physical security). Depending on what the value is, you can start getting into all kinds of systems that are a real pain to use (and that is another reason why they are more secure). There are lots of other ways to make security easier and still useful. Another approach is "something you have and something you know" - that is how ATMs work. You could put your rings on a thumb drive (like the ATM card) that you unlock with a simple key (pin) that gets you to the next step - using the ring for the encryption you were after to begin with. Retinal and finger print scanners (biometrics in general) are essentially this model. If you loose either piece of the system, the other is no longer useful. Another approach is a so-called "smart card" - these are used in Europe for money, but variations are also used to turn the "key" into something approaching a "one time pad"... The card calculates a decay sequence of some sort (a non-linear countdown with a seed you select) that is also calculated on the system you want access to. You type in the calculated value as *part* of the password (valid for say 5 seconds to allow for boundary conditions) and if the system has the same pattern - your are in. I personally think encrypting entire file systems is far less secure than you might think - it is better to protect several areas with several different methods so that compromise of the entire system with one successful attempt doesn't happen. To be honest with you, my bias is towards physical security - I use a thumb drive and then only parts of it are encrypted. Steve Chuck Anderson wrote: >On Wed, Jan 11, 2006 at 06:22:53PM -0500, Bill Mills-Curran wrote: > > >>Symmetric? (gpg -c) This seems the most secure and flexible, but I'm >>getting tired of typing the key so often. >> >>Public/private? This seems enticing, because encryption is done >>without needing to type a password. However, the keyring is on the >>same system as the encrypted file, and thus is vulnerable. >> >> > >Symmetric keys may be more secure with a caveat: you have to pick a >very good key. This is harder than it seems, since it should be long >and have lots of entropy. English text doesn't have much entropy per >character. So in practice, using a passphrase to unlock a good, long, >randomly generated key that you would never remember is better. You >can always store the keyring on a removable device, like a USB flash >drive and keep that in your safe... >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug > > > >

Jan. 14, 2006

Re: [Wlug] RedHat ISOs

by Theo Van Dinter

On Thu, Jan 12, 2006 at 08:02:45AM -0500, Jeff Kinz wrote: > > Friends, any idea where can I download the isos for RHEL AS 4, ES 4 ? > You probably can't, since those are RedHat's "for money only" releases. > Yes, they are still open source, You can download the source, but no > ISOs are available. Yeah, that's pretty much it. My understanding is that the ISOs are only available via RHN's Easy ISO area. I don't recall if you can get a RHN account without purchasing some version of RHEL, but I'd guess not. > Another option is White Box Linux, a distro based on the RedHat source > code. There's also CentOS. I believe both of them essentially take the source rpms, change any appropriate bits, and redistribute. -- Randomly Generated Tagline: Futurama is brought to you by Thompson's Teeth, the only teeth strong enough to eat other teeth.

Jan. 14, 2006

Re: [Wlug] google video...

by Clint Moyer

Oh god! I thought that had finally died... ---- "Keller wrote: > Last night I had mentioned the Christmas light display. > Open Browser > Goto google video and search for "Christmas Lights" it'll be the first > result returned. > > Tim. > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 13, 2006

google video...

by Keller, Tim

Last night I had mentioned the Christmas light display. Open Browser Goto google video and search for "Christmas Lights" it'll be the first result returned. Tim.

Jan. 13, 2006

Re: [Wlug] RedHat ISOs

by Bill Mills-Curran

On Thu, Jan 12, 2006 at 08:02:45AM -0500, Jeff Kinz wrote: > On Thu, Jan 12, 2006 at 10:50:53AM +0700, Aramico wrote: > > > > Friends, any idea where can I download the isos for RHEL AS 4, ES 4 ? > > You probably can't, since those are RedHat's "for money only" releases. > Yes, they are still open source, You can download the source, but no > ISOs are available. > > Closest you can come would be FC4 (Fedora Core 4) or FC5 now in final > test. > > Another option is White Box Linux, a distro based on the RedHat source > code. Dunno if its really equivalent to the RedHat Enterprise products > you are asking about but that seems to be their goal, whereas the FC > series are not intended to be the same as the enterprise products. > The FC series goal is to be a leading edge, community development > platform for RedHat, ie - free labor pool for RedHat. :-) > > > -- > Jeff Kinz, Emergent Research, Hudson, MA. <snip> Another vendor is centos.org. The take the RH source rpm's and build a free distro. Bill

Jan. 12, 2006

Re: [Wlug] RedHat ISOs

by Jeff Kinz

On Thu, Jan 12, 2006 at 10:50:53AM +0700, Aramico wrote: > > Friends, any idea where can I download the isos for RHEL AS 4, ES 4 ? You probably can't, since those are RedHat's "for money only" releases. Yes, they are still open source, You can download the source, but no ISOs are available. Closest you can come would be FC4 (Fedora Core 4) or FC5 now in final test. Another option is White Box Linux, a distro based on the RedHat source code. Dunno if its really equivalent to the RedHat Enterprise products you are asking about but that seems to be their goal, whereas the FC series are not intended to be the same as the enterprise products. The FC series goal is to be a leading edge, community development platform for RedHat, ie - free labor pool for RedHat. :-) -- Jeff Kinz, Emergent Research, Hudson, MA. speech recognition software may have been used to create this e-mail "The greatest dangers to liberty lurk in insidious encroachment by men of zeal, well-meaning but without understanding." - Brandeis To think contrary to one's era is heroism. But to speak against it is madness. -- Eugene Ionesco

Jan. 12, 2006

RedHat ISOs

by Aramico

Friends, any idea where can I download the isos for RHEL AS 4, ES 4 ? cheers, Aramico

Jan. 12, 2006

Re: [Wlug] encrypted files

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bill Mills-Curran wrote: > I have a question about using gpg to encrypt private files on my > system. > > Which encryption is the preferred for file storage? > > Symmetric? (gpg -c) This seems the most secure and flexible, but I'm > getting tired of typing the key so often. > > Public/private? This seems enticing, because encryption is done > without needing to type a password. However, the keyring is on the > same system as the encrypted file, and thus is vulnerable. Why not use an encrypted file system? One passphrase unlocks the entire file system. Later, Andy - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDxbP8Hl0iXDssISsRAgo5AJoDvWtovKVEPxE8P1prRrag1EGH/gCcC3eM mk1g81CYnoNF5BdDqndWN60= =Q7Ok -----END PGP SIGNATURE-----

Jan. 12, 2006

Re: [Wlug] encrypted files

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bill Mills-Curran wrote: > I have a question about using gpg to encrypt private files on my > system. > > Which encryption is the preferred for file storage? > > Symmetric? (gpg -c) This seems the most secure and flexible, but I'm > getting tired of typing the key so often. Your typing will get faster with repetition. Or, maybe you shouldn't have picked such a long key. Oh yeah, I forgot, longer keys are more secure, now aren't they? ;-) - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDxapXHl0iXDssISsRAizbAJ90yHj66nmE9XLJwpjubhKSOoGGGwCfYQzK 6gJJFb9kjg+Sm15b9z0hm5I= =z8Bh -----END PGP SIGNATURE-----

Jan. 12, 2006

Re: [Wlug] server outage

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Frank Sweetser wrote: > In case anyone noticed any problems with the mailing list, the server hosting > it ate yet another hard drive. It's been restored from backups, though (which > I may do as a meeting topic one month, if there's interest) and everything > should be back up now. > Thanks for taking care of this, Frank! Andy - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDxanIHl0iXDssISsRAnxeAJ0TIRYiC7RuHPquCiFoPu4CCny6ZgCeI/0M 3ZVP1707eXm+nWDdMSMuaqU= =h06k -----END PGP SIGNATURE-----

Jan. 12, 2006

server outage

by Frank Sweetser

In case anyone noticed any problems with the mailing list, the server hosting it ate yet another hard drive. It's been restored from backups, though (which I may do as a meeting topic one month, if there's interest) and everything should be back up now. -- Frank Sweetser fs at wpi.edu | For every problem, there is a solution that WPI Network Engineer | is simple, elegant, and wrong. - HL Mencken GPG fingerprint = 6174 1257 129E 0D21 D8D4 E8A3 8E39 29E3 E2E8 8CEC

Jan. 12, 2006

encrypted files

by Bill Mills-Curran

I have a question about using gpg to encrypt private files on my system. Which encryption is the preferred for file storage? Symmetric? (gpg -c) This seems the most secure and flexible, but I'm getting tired of typing the key so often. Public/private? This seems enticing, because encryption is done without needing to type a password. However, the keyring is on the same system as the encrypted file, and thus is vulnerable. Thanks, Bill

Jan. 11, 2006

reminder: meeting thursday january 12 2006 7:00 pm

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HI Everybody, We'll be having a WLUG meeting this coming Thursday evening, at 7:00 PM, on January 12, 2006 in the Access Grid room on the WPI campus in Worcester, MA USA. At this meeting, there is currently no single scheduled topic, so this means that ALL topics are freely available for discussion (thanks, Walt). Bring along your questions and maybe somebody in the room will have answers. Bring up any Linux related topic and we can discuss it as a group. Here are some topics we might discuss: Nokia 770 - http://www.nokia.com/770 Linux World Conference and Expo coming to Boston in April 2006 Richard Stallman will speak at WPI on January 13th Xen in the Linux kernel (see also Xenoppix) Next month (Feb 2006), I'll probably put together a presentation discussing my experience using a Routerboard 532 and making a firewall out of it using GPL software which I pieced together. Stay tuned. After the meeting, we'll go out for pizza and soda at our favorite pizza place (Tech Piza) on Highland Street. We always have lively and interesting discussions there. Come one, come all, and bring your friends, too! Andy - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDxF0+Hl0iXDssISsRAvLOAJ9fl9cSwJxVJ9sRZElNA8OZRm0mRgCdHFrM kCin6TULv47cw6RhqOq6zok= =0lzd -----END PGP SIGNATURE-----

Jan. 11, 2006

RE: [Wlug] Stallman at WPI, 1/13 @ 11am

by James Gray

I think my message got lost the first time around. I contacted WPI and got a response that sounded like the event would be open to the public. -----Original Message----- From: wlug-bounces(a)mail.wlug.org on behalf of Jared Greenwald Sent: Mon 1/9/2006 11:51 PM To: Worcester Linux Users Group Subject: Re: [Wlug] Stallman at WPI, 1/13 @ 11am Yea, I can imagine this would bring a packed house... -Jared On 1/9/06, Mike Leo <mleo963(a)yahoo.com> wrote: > any wpi'rs here? > > Do we need tickets? Can the wlug get us "in"? Is > anyone welcome? > > thanks > mike > > --- Theo Van Dinter <felicity(a)kluge.net> wrote: > > > I happened to be poking around and found this off > > the main WPI page. I don't > > remember it coming by here yet, so ... > > > > > http://www.cs.wpi.edu/News/Colloquium/20056/stallman.html > > > > -- > > Randomly Generated Tagline: > > "Leadership is a potent combination of strategy and > > character. > > But if you must be without one, be without > > strategy." > > - General H. Norman Schwarzkopf > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Jan. 10, 2006

Re: [Wlug] Stallman at WPI, 1/13 @ 11am

by Michelle Vadeboncoeur

On Mon, Jan 9, 2006, Theo Van Dinter <felicity(a)kluge.net> said: > I happened to be poking around and found this off the main WPI page. I don= > 't > remember it coming by here yet, so ... > > http://www.cs.wpi.edu/News/Colloquium/20056/stallman.html It's also in the Social Web event calendar: http://www.socialweb.net/Events/36537 According to the WPI CS Dept's Colloquium main page, all full time graduate students are required to attend. The "more information" email address is csevents(a)cs.wpi.edu -- -mrv(a)kluge.net

Jan. 10, 2006

RE: [Wlug] Stallman at WPI, 1/13 @ 11am

by James Gray

I found a contact address for events @ wpi and recieved this response, good news. >From Michael C Voorhis <mvoorhis(a)cs.wpi.edu>: I'm not aware of any restrictions on the audience. The event description doesn't imply any restrictions (I just looked) and I would believe RMS to be opposed to any restrictions in any case. James Gray writes: > Hi, is the Stallman event open to the public or are only WPI > students/faculty allowed? I am part of the campus GNU/Linux users > group if that makes any difference. Thanks! On 1/9/06, Mike Leo <mleo963(a)yahoo.com> wrote: > any wpi'rs here? > > Do we need tickets? Can the wlug get us "in"? Is > anyone welcome? > > thanks > mike >

Jan. 10, 2006

Re: [Wlug] Stallman at WPI, 1/13 @ 11am

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HI all, I heard Richard Stallman speak at Holy Cross several years ago. I would highly recommend attending if at all possible. Richard is an excellent speaker, and his ideas are well thought. Whether or not you agree with him, I think it is still quite worthwhile to hear him. Later, Andy - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDw7lHHl0iXDssISsRArDiAJ9XS+9QaCAbbAiVcjxpJw6AluZdTgCfbqVO CfVUHNbufnsdEJetjQwS+EQ= =jj89 -----END PGP SIGNATURE-----

Jan. 10, 2006

Re: [Wlug] Stallman at WPI, 1/13 @ 11am

by Jared Greenwald

Yea, I can imagine this would bring a packed house... -Jared On 1/9/06, Mike Leo <mleo963(a)yahoo.com> wrote: > any wpi'rs here? > > Do we need tickets? Can the wlug get us "in"? Is > anyone welcome? > > thanks > mike > > --- Theo Van Dinter <felicity(a)kluge.net> wrote: > > > I happened to be poking around and found this off > > the main WPI page. I don't > > remember it coming by here yet, so ... > > > > > http://www.cs.wpi.edu/News/Colloquium/20056/stallman.html > > > > -- > > Randomly Generated Tagline: > > "Leadership is a potent combination of strategy and > > character. > > But if you must be without one, be without > > strategy." > > - General H. Norman Schwarzkopf > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Jan. 10, 2006

Re: [Wlug] Stallman at WPI, 1/13 @ 11am

by Mike Leo

any wpi'rs here? Do we need tickets? Can the wlug get us "in"? Is anyone welcome? thanks mike --- Theo Van Dinter <felicity(a)kluge.net> wrote: > I happened to be poking around and found this off > the main WPI page. I don't > remember it coming by here yet, so ... > > http://www.cs.wpi.edu/News/Colloquium/20056/stallman.html > > -- > Randomly Generated Tagline: > "Leadership is a potent combination of strategy and > character. > But if you must be without one, be without > strategy." > - General H. Norman Schwarzkopf > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Jan. 10, 2006

Stallman at WPI, 1/13 @ 11am

by Theo Van Dinter

I happened to be poking around and found this off the main WPI page. I don't remember it coming by here yet, so ... http://www.cs.wpi.edu/News/Colloquium/20056/stallman.html -- Randomly Generated Tagline: "Leadership is a potent combination of strategy and character. But if you must be without one, be without strategy." - General H. Norman Schwarzkopf

Jan. 10, 2006

Re: [Wlug] Wlug Indexed Archieves

by Michelle Vadeboncoeur

On Mon, Jan 9, 2006, Aramico <aramico(a)duahati.com> said: > All, can I find all the wlug archieves defined by subject ? > I think I've submitted this case arround 2003, but I forgot whats the month > ? > Im lookin' for how to change the date in linux using command date where its > said that we have to use "`" http://mail.wlug.org/pipermail/wlug/ You'll probably have to check a couple of months, but there is a sorting by subject... -- -mrv(a)kluge.net

Jan. 9, 2006

Wlug Indexed Archieves

by Aramico

All, can I find all the wlug archieves defined by subject ? I think I've submitted this case arround 2003, but I forgot whats the month ? Im lookin' for how to change the date in linux using command date where its said that we have to use "`" regards, aramic Regards

Jan. 9, 2006

Re: [Wlug] vcalendar client program

by brad

On Tue, Jan 03, 2006 at 05:27:56PM -0500, Chuck Anderson wrote: > I've been using KOrganizer from the kdepim package for a couple years > now to store my appointments and todo lists, but I've recently been > having issues with the timezone not being applied, causing all > appointment times to be shifted into the future. The Configure Time & > Date option does nothing at all, and the Configure KOrganizer dialog > is an Empty Page (it literally says "Empty Page" on it!). > you mean it looks something like so? http://bugs.kde.org/attachment.cgi?id=8218&action=view this was reported in the kde bugs database here: http://bugs.kde.org/show_bug.cgi?id=92909 The bug reporter found success by deinstalling/reinstalling kdepim. I can't say for certain that will work. Before you try that, i would try kill all instances of korganizer (logging out of kde may be best too, as i think it used load a korganizer instance in the background), backing-up korganizer's config file then start korganizer. $ cp ~/.kde/share/config/korganizerrc ~/.kde/share/config/korganizerrc.back $ korganizer > Since I'd rather not be without my calendar for long, does anyone have > any recommendations for a replacement program that can read the files > made by KOrganizer? I gather that it uses a standard file format > called "vcalendar". > the files created by korganizer are a vcalender format, probably version 2, a standard calendar format. I believe almost all calendar programs can read those files (located in ~/.kde/share/apps/korganizer/*.ics: Evolution, Mozilla's calendar program, sylpheed, i think even the ipod can read those files, and probably many others. --brad

Jan. 7, 2006

Re: [Wlug] vcalendar client program

by Bradley Noyes

> I've been using KOrganizer from the kdepim package for a couple years > now to store my appointments and todo lists, but I've recently been > having issues with the timezone not being applied, causing all > appointment times to be shifted into the future. The Configure Time & > Date option does nothing at all, and the Configure KOrganizer dialog > is an Empty Page (it literally says "Empty Page" on it!). > you mean it looks something like so? http://bugs.kde.org/attachment.cgi?id=8218&action=view this was reported in the kde bugs database here: http://bugs.kde.org/show_bug.cgi?id=92909 The bug reporter found success by deinstalling/reinstalling kdepim. I can't say for certain that will work. Before you try that, i would try kill all instances of korganizer (logging out of kde may be best too, as i think it used load a korganizer instance in the background), backing-up korganizer's config file then start korganizer. $ cp ~/.kde/share/config/korganizerrc ~/.kde/share/config/korganizerrc.back $ korganizer > Since I'd rather not be without my calendar for long, does anyone have > any recommendations for a replacement program that can read the files > made by KOrganizer? I gather that it uses a standard file format > called "vcalendar". > the files created by korganizer are a vcalender format, probably version 2, a standard calendar format. I believe almost all calendar programs can read those files (located in ~/.kde/share/apps/korganizer/*.ics: Evolution, Mozilla's calendar program, sylpheed, i think even the ipod can read those files, and probably many others.

Jan. 7, 2006

RE: [Wlug] Job Openings in Maynard MA

by JONATHAN BEALL

Along those lines, I had a friend in the recruiting industry contact me regarding a Senior QA Position at Akamai technology in Cambridge. The only issue I came across for the job is the requirement of extensive Perl knowledge (something I know I don't have). If anyone is interested, let me know and I'll forward the Job Description along. - Jonathan Beall >From: "Evans, Robert" <Robert.Evans(a)stratus.com> >Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org> >To: <wlug(a)mail.wlug.org> >Subject: [Wlug] Job Openings in Maynard MA >Date: Thu, 5 Jan 2006 16:07:20 -0500 > >Stratus Technologies has several openings in the Linux >development group in Maynard MA. One job is already >posted on www.stratus.com. The other two should be >on the web site within a week. > >We develop and support a fault tolerant version of Linux >on Stratus' fault tolerant Intel architecture hardware. >This work involves PCI hot-plug support (surprise removal >of devices), bug fixing and hardening of Linux drivers to >make them fault tolerant, and additions to Stratus' user >mode monitoring and diagnosis capabilities. > > Robert N. Evans > Software Engineer >Stratus Technologies > Maynard, MA 01754 > > > >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

Jan. 5, 2006