- WLUG - wlug.mailman3.com

Follow up from key signing
by Eric Martin Sept. 19, 2013

Sept. 19, 2013

Hi WLUG and BLU, I have signed all of the keys I have access to. If you haven't received an email from me, it's because either a) I can't get your key, or b) the email with your signed key was lost. Please email me directly if you're expecting a signed key from me. A few people expressed interest in the suite of tools I'm using to make signing easier, and also some visualization tools I'm playing with. They're all based on Debian's pgp-tools which can be called keysigning-party on your distribution. Hands down, the most useful tool is CA Fire and Forget or caff. It's in most distributions, and if it's not in your distro (or you're on a Mac) it's pretty easy to build. Just checkout it out from svn://svn.debian.org/svn/pgp-tools/trunk, and do a make all && make install clean Now that you have caff installed on your machine, it's time for some tweaks. Go ahead and run caff by typing caff at the command prompt. This will setup the folders and files you need that we'll be tweaking. 1) I *highly* suggest making a symlink from ~/.gnupg/gpg.conf -> ~/.caff/gnupghome/ via ln -s ~/.gnupg/gpg.conf ~/.caff/gnupghome This will have caff use your preferences in gpg.conf and it makes it easier to configure / use the way you want to. 2) edit ~/.gnupg/gpg.conf and set your default key, default keyserver (most of them sync with each other so it's not a big deal, but I prefer pool.sks-keyservers.net since it handles subkeys very well.) Also to note, keys can prefer certain servers so don't worry if gpg is asking a few different servers where things are. Also, if you haven't already, set your preferences for algorithms, hashes, and compression. *NOTE* this only applies to making new keys. You should still set the proper preferences on your key via gpg --edit-key <KEYID>. Lastly, I like to add ask-cert-level so gpg (and therefore caff) ask me what certification level to give to each signature 3) edit your ~/.caffrc file to customize your name, email address, and email template / procedure for signing keys. Caff looks for 16 digit keyids, not 8 so punch in the last 16 of your fingerprint for you key. Also, I like to bcc myself on the emails in case a message gets bounced so I can resend it easily via Thunderbird 4) Once those are edited and saved, you're all set! Grab your trusted list, and feed caff one or more keyids to handle via caff <KEYID> <KEYID> <KEYID...> Don't forget to verify the fingerprint caff / gpg show you with your trusted list. I'm attaching my gpg.conf and .caffrc files for those of you who are interested. I should probably put this up as a wiki / blog post at some point in time to I can go back and update / clarify it. Also, check out: sig2dot (included in pgp-tools / keysigning-party) which is a visualizer for the Web of Trust http://pgp.cs.uu.nl/ for PGP trust paths Cheers!

1 0

Ubuntu usb/bluetooth/android
by Bill Mills-Curran Sept. 15, 2013

Sept. 15, 2013

I've had my shiny new HTC One for a while, and I've found that the USB-connected file mount/transfer/etc speed with my Ubuntu (Precious) is atrocious. I've tried both the nautilus (automount) interface and the mtp-mount: both are bad. I'm wondering whether a usb-bluetooth adapter (my laptop does not have bluetooth) would allow me to mount the smartphone filesystem and get decent performance. TIA, Bill

2 1

Next WLUG Meeting: Keysigning Party 9/11/2013
by Eric Martin Sept. 12, 2013

Sept. 12, 2013

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Wednesday, September 11th 2013 I'll be running a PGP Key Signing party. PGP stands for Pretty Good Privacy and was developed by Phil Zimmerman in 1991 for secure communications. Signing keys allows you to say that you trust somebody's key, and extends the Web of Trust which helps everybody. To participate, please bring your public key's fingerprint, and at least (2) forms of ID (Government issued photo ID is the best way to go). If you don't yet have a public key, follow the directions for 'Preparing for the Party' from this [1] Key Signing Party HOWTO. Additionally, please upload your public key to our keyring for this event here [2]. I'll give a brief talk on PGP, and then we'll go through everybody's keys. What not to bring: A computer. Keys are signed at home, we just verify them at the Key Signing. [1] http://www.cryptnet.net/fdp/crypto/keysigning_party/en/keysigning_party.htm… [2] http://biglumber.com/x/web?keyring=4480 - -- Eric Martin Key Fingerprint = C74F 1EBF 2E80 7984 8CB5 064E BF17 D34C C704 B30F -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJSIBdBAAoJEL8X00zHBLMPIP8P/AmMZiaHpVo3Mq72yOXONUbX bUUFKtK2qCFw0g8uAJ63D5hL7kDTbWXlTWsm+73jvkaofsKyTP8hNR0ulr5ni7dw X7EEQYSpK0MufQzEqUpfEoIa6I8Pjfa5qIWNOAuJDJpAwR8+0S2urGcQML0YarFG fys0HHWW69kYG8CTGZw/0ATmBdVZFiZEjXFk6R5wIB33SvXtzuPTLltoded5bpwK svtZf4Fa3QlaEBlg25AKWFpa6OOTt3eUBQU/KNGjhfIrLkhpsbuhcbAD6C6DPtzk 25P/9TWCSaRAcyT29amGG5qLrFEHklAic6UcOjIJtlN6ywcHSbVtHOcxIA4OmBLy e0HeskGlqu/qhqgZxDQMWbvMUdzIRqCa+pMzxGI40+w6tHnlTGPW1MZbZJxhfStW AC720w6U+q/b9iCiZHF634gbvIL6Da3G2G20Vhr4h6s1rOX53sfgIqmoB66A6SPC P6MUkO42oPdEQ7WE+69f7VHGyXgkEnJUaEXGYoBdILV3qyHyNJNKF/X7o0Vtf+xn rJTokOgCEyg5xRtzQFlYpdiIoR/BMHTteKsyki6px2hn4bCsNItOJNhG8IutVo/o qofPVIyJaiA5o7G7z8QNeppy4NBq0h752T0lU/gSs9ojhBzQ9kVuhR4PNL6QcZ98 +rLxS3s1fEsTmakIpo2G =lNN3 -----END PGP SIGNATURE-----

4 7

Next WLUG meeting August 14th!?!
by Tim Keller Aug. 13, 2013

Aug. 13, 2013

Hey Gang! Whose up for having a WLUG meeting, talking shop and eating some pizza?!? If someone has a topic they'd like to talk about please step forward otherwise this will just be a general discussion meeting. Chuck / Doug... When is this going to be? Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

6 5

Re: [Wlug] Next WLUG meeting August 14th!?!
by joel d Aug. 13, 2013

Aug. 13, 2013

I will not be there this month as I am out of town. Looking forward to September and following month meetings.

1 0

Greetings from Matt C
by Matt Curcio Aug. 13, 2013

Aug. 13, 2013

Hi all, I recently joined the listserve. Where do you have the meetings? and at what time? I would like to stop by. -- Thank You, Matt Curcio M: 401-316-5358 E: matt.curcio.ri(a)gmail.com

2 2

Next WLUG meeting August 14th!?!
by Robert Schwein Aug. 9, 2013

Aug. 9, 2013

I'll definitely be there. Bob

1 0

MIT Fleamarket
by The Hammer July 13, 2013

July 13, 2013

I am thinking of checking out the MIT Flea Market to be held on July 21 http://www.mitflea.com/ I've never been. Could any one tell me more about it? Do you recommend? Ron

5 6

Did anybody make it to the meeting last night?
by Tim Keller July 12, 2013

July 12, 2013

I hope somebody showed up! -- Sent from my mobile device I am leery of the allegiances of any politician who refers to their constituents as "consumers".

3 2

Unable to make it tonight...
by Tim Keller July 12, 2013

July 12, 2013

Hey Gang, Unfortunately I have had something come up and I'll be unable to make it... Sorry for the short notice. Thanks, Tim.

3 3

Seeking volunteer to help with local non-profit's website
by Mike Peckar July 8, 2013

July 8, 2013

Literacy Volunteers of Greater Worcester, lvgw.org, is seeking a volunteer for a one-off project to refresh their website. This is not an ongoing commitment. Not sure if the backend tools the use for site management are linux-based, but I suspect they are not. Their goals are: 1. Updating LVGW's website to make it more user friendly, interactive and functional 2. The current website needs some work to make it easier to use and update. This person would also mentor a staff member about these issues Please contact me offline if you are interested. They are also separately looking for a volunteer archivist to create an online database of their historical and research data. Hope you don't think this crosses the line of fair use of this list, but it is for a good cause. Mike

1 0

Are we having a meeting on the 10th?
by Tim Keller July 8, 2013

July 8, 2013

Hey Gang, I presume we're actually going to have a WLUG meeting this month? Would anybody like to step forward and give a talk? Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

3 2

Release cycle for RHEL / CentOS 6
by Eric Martin July 2, 2013

July 2, 2013

Hi All, The subversion server at my office is on a CentOS 6 server, and a software developer wrote a hook in python for it. The hook requires python 2.7, but CentOS 6 only has 2.6.6 (python-2.6.6-36.el6 to be exact). I grabbed python-2.7.2-5.2.fc16.src.rpm from Fedora 16 and am trying to roll my own via instructions I found on the CentOS wiki. All is good except that it requires db4.8, and that's not out for RHEL6 either. >From where I stand, it looks like my options are: 1) wait this out until either Python or a dependency are pushed up, but when is that? 2) rebuild this package with the deps, but I'm not quite sure how to roll a -devel package 3) roll my own package from scratch 4) install python 2.7 in an alternate location and point to it for this script Since this is a production server, I'd rather no do any hacks on this. Does anybody know how the release schedule works, or have any other advice? Thanks in advance, -- Eric Martin

4 5

new to Worcester UNIX community
by Arjan van der Velde July 2, 2013

July 2, 2013

Hi all, I'm new to the Worcester area and I would like to know how active the UNIX community is around here and possibly contribute. I am particularly interested in the BSDs but also Linux. -- Arjan

2 1

InfoSec position opening at WPI
by Frank Sweetser June 19, 2013

June 19, 2013

Hey all, just wanted to share a position that opened up here at WPI. The short version is the position will oriented around security analysis, with a mix of small to medium programming projects and system administration (all heavily linux based, of course!). Anyone interested can view the full details, as well as submit an application, on our HR jobs site: https://careers.wpi.edu/postings/739 -- Frank Sweetser fs at wpi.edu | For every problem, there is a solution that Manager of Network Operations | is simple, elegant, and wrong. Worcester Polytechnic Institute | - HL Mencken

1 0

Did anybody show up last night?
by Tim Keller June 14, 2013

June 14, 2013

Did anybody show up to last night meeting? Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

6 6

Announce: Today's WLUG Meeting is canceled
by Chuck Anderson June 13, 2013

June 13, 2013

Hi folks, Sorry for the late notice. I will not be available this evening, so I'm canceling the WLUG meeting tonight. Are people interested in having a WLUG BBQ this year? If so, we should start planning for June or July or August. Chuck

3 3

spamd
by brad May 20, 2013

May 20, 2013

Hi All, i've been getting more spam over the last couple of days. It appears spamd is not running on my ubuntu 10.04 server; however the headers of the spam messages have X-Spam-* flags. I'm not sure what might be adding the spam headers, perhaps its upstream (or clamav). I wanted to start using spam assassin, but that appears to crash when i run the following, which i dug out from the init scripts, sudo /usr/bin/perl -T -w /usr/sbin/spamd --create-prefs \ --max-children 5 --helper-home-dir --pidfile=/var/run/spamd.pid This line results in the following output: May 19 17:50:03.557 [8665] info: rules: meta test T_SUBJ_BRKN_WORDNUMS has dependency 'DKIM_SIGNED' with a zero score May 19 17:50:03.626 [8665] info: collectd: Insecure dependency in connect while running with -T switch at /usr/lib/perl/5.10/IO/Socket.pm line 114. May 19 17:50:03.726 [8665] info: spamd: server started on port 783/tcp (running version 3.3.1) May 19 17:50:03.726 [8665] info: spamd: server pid: 8665 May 19 17:50:03.729 [8665] info: spamd: server successfully spawned child process, pid 8743 May 19 17:50:03.733 [8665] info: spamd: server successfully spawned child process, pid 8744 May 19 17:50:03.736 [8665] info: prefork: child states: IS May 19 17:50:03.736 [8665] info: prefork: child states: II [1] 8665 alarm sudo /usr/bin/perl -T -w /usr/sbin/spamd --create-prefs --max-children 5 I'm not sure what 'alarm' means. I tried running it with debugging messages, none of which seemed useful. Below are the relavent heads from one spam message, X-Virus-Scanned: Ubuntu Server Edition amavisd-new at ithryn.com X-Spam-Flag: NO X-Spam-Score: 3.25 X-Spam-Level: *** X-Spam-Status: No, score=3.25 required=3.5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.377, MIME_HTML_ONLY=0.723, RCVD_IN_BRBL_LASTEXT=1.449, SPF_PASS=-0.1] autolearn=no Anyone have advice to get spamd running correctly? thanks, - brad

2 1

Announcing OpenShift Origin Community Day June 9th.
by Daniel J Walsh May 14, 2013

May 14, 2013

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 If you are interested, I attended and presented at the Community Day in Portland, a few weeks ago. It is a pretty good event. https://openshiftboston-estw.eventbrite.com/# Learn about PAAS (Platform as a Service) and how you can influence and contribute to this event. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlGSkJoACgkQrlYvE4MpobNnigCgzJq79KYqbNOw5OSM45OV/5hG R+QAn0978PD+C+1q+10iNqQk4Ol3AvQ4 =WuUQ -----END PGP SIGNATURE-----

1 0

Scanning someone's head and printing it?
by John Stoffel May 14, 2013

May 14, 2013

Guys, Anyone know of a hacker space or other place in the Worcester/Marlborough area where I can get someone's head scanned to be 3-d printed? I found this one place, http://www.teslaract.org, down in Webster Square, but they seem idle. Thanks, John

3 3

Less than 1 week! (Prizes!) LOPSA-East 2013! (formerly PICC) May 3-4, 2013, New Brunswick, NJ
by LOPSA-East 2013 April 28, 2013

April 28, 2013

Less than one week left! http://lopsa-east.org Space still available! "The most talked about sysadmin community conference of the year! Don't miss it!" Next week is LOPSA-East 2013, May 3-4, at the Hyatt Regency hotel in New Brunswick, NJ. Register "at the door" or on-line. Some sessions filling fast: To be guaranteed your spot, register now! KEYNOTE: Marcus J. Ranum, Chief Security Officer, Tenable Network Security, Inc. will be presenting the opening keynote address on Friday night. His talk is titled "Wanted: Generalists (because the easy stuff is done)" Computer security has done a fairly good job of picking the "low hanging fruit" with knowledge-bases and engines to execute against them. But that's the easy stuff. Let's talk about what's next. PRIZES: Three giveaways during the event! Twelve lucky attendees will win a book from O'Reilly, three will go home with LISA tech session passes, and one will leave with a year membership to USENIX/LISA! You must be present to win, and must be registered to be eligible. So register now! http://lopsa-east.org/2013/registration/ TRAINING: Sessions on Linux, Windows, Puppet, Team Efficiency, WordPress, PowerShell, Virtualization, and much more! Follow us on Twitter! http://twitter.com/lopsaeast --------------------------------------- FRIDAY: An entire day of training offered by world class instructors. FRIDAY NIGHT: Dinner, Keynote and 'birds of a feather' sessions. SATURDAY: More training sessions plus 45 minute presentations from invited speakers, 5 minute lightning talks. Full schedule: http://lopsa-east.org/2013/schedule/ --------------------------------------- LOPSA-East (http://lopsa-east.org) is produced by The New Jersey chapter (http://lopsanj.org) of the League of Professional System Administrators (LOPSA) (http://lopsa.org) This will be the 4th annual conference, being held May 3-4, 2013 at the Hyatt Regency hotel in New Brunswick, NJ.

1 0

MySQL Replication Expert Needed
by Michael Long April 26, 2013

April 26, 2013

I know someone who is looking for some short term help. They are looking for someone "whom I can hot-drop into a problem we have with a production server pair, and have him fix it *within 30* *days*. This person should be VERY experienced with MySQL Replication, Linux, and Apache." Please email me directly if you think you can help them out. Thanks, Mike

1 0

Announce: Change in tonight's WLUG meeting
by Chuck Anderson April 10, 2013

April 10, 2013

Sadly, Jim Gettys has been ill and will be unable to speak at tonight's meeting. We'll still meet and have an informal discussion and answer any Linux/FOSS support questions people have. We'll also raffle off some books and go out for pizza afterwards. I hope to reschedule Jim for a future meeting. ----- Forwarded message from Chuck Anderson <cra(a)WPI.EDU> ----- Date: Tue, 2 Apr 2013 15:02:27 -0400 From: Chuck Anderson <cra(a)WPI.EDU> To: wlug(a)wlug.org Subject: [Wlug] Announce: WLUG Meeting Wed 4/10 7PM Jim Gettys on Internet buffer bloat Precedence: list Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org> Hi folks, The next Worcester Linux Users' Group (WLUG) meeting will be held at its regularly scheduled time: the 2nd Wednesday of the month, which is Wednesday, April 10, at 7PM. The location will be the WPI Campus Center, Mid-Centry Room 331. This month we will have Jim Gettys from Bell Labs talk about Internet buffer bloat. "Internet buffer bloat, by Jim Gettys (Bell Labs) VOIP and teleconferencing often perform much more poorly on today's Internet than the Internet of a decade ago, despite great gains in bandwidth. Lots of fiber, cheap memory, smart hardware, variability of wireless goodput, changes in web browser behaviour, changes in TCP implementations, and a focus on benchmarking Internet performance solely by bandwidth, and engineer's natural reluctance to drop packets have conspired to encourage papering over problems by adding buffers; each of which may introduce latency when filled. The mistaken quest to never drop packets has destroyed interactivity under load, and often results in actual higher packet loss, as TCP's congestion avoidance algorithms have been defeated by these buffers. The lessons of the "RED manifesto" of 1997 have been forgotten or never learned by a new generation of engineers." Wednesday, April 10, 7:00 - 10:00 PM WPI Campus Center, Mid-Centry Room 331 I will also be raffling off some more items. Afterwards, we will go out for pizza. See you there, Chuck President, Worcester Linux Users' Group http://www.wlug.org/ _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug ----- End forwarded message -----

1 0

Keynote speaker announced! LOPSA-East (formerly PICC) May 3-4, 2013, New Brunswick, NJ
by LOPSA-East 2013 April 4, 2013

April 4, 2013

[Note: "Early-bird" price ends in 4 days! Don't lose the discount!] The LOPSA-East committee is excited to announce our opening keynote speaker: Marcus J. Ranum, Chief Security Officer, Tenable Network Security, Inc. will be presenting the opening keynote address on Friday night. Marcus J. Ranum is a world-renowned expert on security system design and implementation. He is recognized as an early innovator in firewall technology, and the implementor of the first commercial firewall product. Since the late 1980's, he has designed a number of groundbreaking security products including the DEC SEAL, the TIS firewall toolkit, the Gauntlet firewall, and NFR's Network Flight Recorder intrusion detection system. He has been involved in every level of operations of a security product business, from developer, to founder and CEO of NFR. Marcus has served as a consultant to many FORTUNE 500 firms and national governments, as well as serving as a guest lecturer and instructor at numerous high-tech conferences. In 2001, he was awarded the TISC "Clue" award for service to the security community, and the ISSA Lifetime Achievement Award. Marcus is Chief Of Security for Tenable Security, Inc., where he is responsible for research in open source logging tools, and product training. He serves as a technology advisor to a number of start-ups, established concerns, and venture capital groups. Conference Summary ------------------------ LOPSA-East begins Friday with an entire day of training offered by world class instructors. We have half day sessions on Team Efficiency, Configuration Management, Basic and Advanced PowerShell, IPV6 migration, and much more! The conference continues on Saturday, with more half day training sessions along with 45 minute presentations from invited speakers, 5 minute lightning talks, and 'birds of a feather' discussions on participant selected topics. (The entire training schedule can be found at http://lopsa-east.org/2013/lopsa-east-training/) Register now! Save up to $197 by registering during the extended Early Bird pricing! Even larger discounts are available for students. For more information and to register visit http://lopsa-east.org --------------------------------------- LOPSA-East (http://lopsa-east.org) is produced by The New Jersey chapter (http://lopsanj.org) of the League of Professional System Administrators (LOPSA) (http://lopsa.org) This will be the 4th annual conference, being held May 3-4, 2013 at the Hyatt Regency hotel in New Brunswick, NJ.

1 0

Announce: WLUG Meeting Wed 4/10 7PM Jim Gettys on Internet buffer bloat
by Chuck Anderson April 2, 2013

April 2, 2013

Hi folks, The next Worcester Linux Users' Group (WLUG) meeting will be held at its regularly scheduled time: the 2nd Wednesday of the month, which is Wednesday, April 10, at 7PM. The location will be the WPI Campus Center, Mid-Centry Room 331. This month we will have Jim Gettys from Bell Labs talk about Internet buffer bloat. "Internet buffer bloat, by Jim Gettys (Bell Labs) VOIP and teleconferencing often perform much more poorly on today's Internet than the Internet of a decade ago, despite great gains in bandwidth. Lots of fiber, cheap memory, smart hardware, variability of wireless goodput, changes in web browser behaviour, changes in TCP implementations, and a focus on benchmarking Internet performance solely by bandwidth, and engineer's natural reluctance to drop packets have conspired to encourage papering over problems by adding buffers; each of which may introduce latency when filled. The mistaken quest to never drop packets has destroyed interactivity under load, and often results in actual higher packet loss, as TCP's congestion avoidance algorithms have been defeated by these buffers. The lessons of the "RED manifesto" of 1997 have been forgotten or never learned by a new generation of engineers." Wednesday, April 10, 7:00 - 10:00 PM WPI Campus Center, Mid-Centry Room 331 I will also be raffling off some more items. Afterwards, we will go out for pizza. See you there, Chuck President, Worcester Linux Users' Group http://www.wlug.org/

1 0