gmane.org.user-groups.linux.aklug.general

Re: DNS cache poisoning

Jenkinson, John P (SAIC — 2008-07-24T05:02:41

another good tool to assess your environment https://www.dns-oarc.net/oarc/services/dnsentropy most local ISPs have good to fair randomness on transaction IDs BUT=20 use source port 53/udp =20 -----Original Message----- From: aklug-bounce< at >aklug.org [mailto:aklug-bounce< at >aklug.org] On Behalf Of Jon Reynolds Sent: Wednesday, July 23, 2008 8:52 PM To: AKLUG Subject: [aklug] Re: DNS cache poisoning Jenkinson, John P (SAIC) wrote: That was a very interesting web cast, thanks for posting that John. Jon --------- To unsubscribe, send email to aklug.org> with 'unsubscribe' in the message body.

Re: DNS cache poisoning

Jon Reynolds — 2008-07-24T04:51:32

That was a very interesting web cast, thanks for posting that John. Jon

DNS cache poisoning

Jenkinson, John P (SAIC — 2008-07-24T03:56:32

=20 i sent this but haven't received it as yet. resending as this is important, tho you're probably heard a lot about it already. =20 seems the exploit to the DNS cache poisoning vulnerability that the researcher was so careful to protect until a very well coordinated effort by vendors to patch (mitigation not elimination patch)release has been leaked by someone who was briefed on the exploit in confidence. the leakers claim the leak was a blog post being prepared for release after the scheduled black hat talk Aug 7. anyway some news here from the internet storm center http://isc.sans.org/diary.html?storyid=3D4765 remember the patch just mitigates by making the transaction ID more random.=20 the cryptographic space is still quite small at 16 bits. also be aware that checkpoint firewalls re-order the nice new random source udp port numbers to nice sequential ones. making the attack trivial. the above article shows how to check your queries after they leave your network. a more detailed write up on the alleg

Article: Veteran developer ditches Microsoft for open source

Christopher Howard — 2008-07-23T23:28:17

I thought this article I found at Linux.com was pretty cool: http://www.linux.com/feature/142083?

DNS cache poisoning

Jenkinson, John P (SAIC — 2008-07-23T18:28:41

=20 seems the exploit to the DNS cache poisoning vulnerability that the researcher was so careful to protect until a very well coordinated effort by vendors to patch (mitigation not elimination patch)release has been leaked by someone who was briefed on the exploit in confidence. the leakers claim the leak was a blog post being prepared for release after the scheduled black hat talk Aug 7. anyway some news here from the internet storm center http://isc.sans.org/diary.html?storyid=3D4765 remember the patch just mitigates by making the transaction ID more random.=20 the cryptographic space is still quite small at 16 bits. also be aware that checkpoint firewalls re-order the nice new random source udp port numbers to nice sequential ones. making the attack trivial. the above article shows how to check your queries after they leave your network. a more detailed write up on the alleged specifics of the vulnerability are here: http://blogs.buanzo.com.ar/2008/07/matasano-kaminsky-dns-forgery.html a web cast with Cr

Re: Programming diagramming software

Arthur Corliss — 2008-07-23T06:05:54

You can use just about any diagramming tool for this. One of the more modern ones I've heard of is Dia. Me, I'm still using xfig. Like the others it includes symbol libraries with most of what you'd want. --Arthur Corliss Live Free or Die

Re: Programming diagramming software

Greg Madden — 2008-07-23T06:00:50

Checkout 'dia' . Comes with various symbol libraries (network dia-gramming) and you can make your own.

Re: Programming diagramming software

2008-07-23T05:39:51

The best place to look for free software is freshmeat.net -- every time I go there, I get distracted by all the cool stuff. -- Bryan Medsker bryanm< at >acsalaska.net

Programming diagramming software

Christopher Howard — 2008-07-23T04:55:14

The other day I looked at a programming book and it showed this cool little system for diagramming your programming; uses squares, diamonds, and arrows, and such. I was wondering if anyone knew of any open-source programs that could help me make those diagrams very quickly. I did a Google search but mostly found proprietary packages. I'm mainly interested in programs that work in Linux, but I also wouldn't mind having one for the Windows computer that I (unfortunately am required to) use at work.

Re: Microsoft Haters Blog

Christopher Howard — 2008-07-22T18:50:53

Wait a second... I wonder if this blog is being regularly updated... last post was in June...

Microsoft Haters Blog

Christopher Howard — 2008-07-22T18:48:34

I think you guys were right about what you said earlier about "not feeding the trolls" at the Linux Haters Blog. So, instead, I subscribed to a Microsoft Haters Blog! http://microsofthaters.wordpress.com/ I already hate Microsoft to the inner depths of my soul, so I'll probably enjoy this blog.

Teenbuntu at OSCON

Kristian Erik Hermansen — 2008-07-21T00:50:56

---------- Forwarded message ---------- From: Kristian Erik Hermansen gmail.com> Date: Wed, Jul 16, 2008 at 7:39 PM Subject: Re: [sf-lug] [Fwd: UG News--Going to OSCON?] To: jim well.com> Cc: Linux user Group linuxmafia.com> On Wed, Jul 16, 2008 at 2:04 PM, jim well.com> wrote: Please show your support and give a warm welcome to Andrew Harris, the 15 year old that I was able to coax into giving a talk this year at Ubuntu Live, that was eventually moved to OSCON due to cancellation :-) http://en.oreilly.com/oscon2008/public/schedule/detail/2674 """ Teenbuntu: Reaching Out to Teens Andrew Harris (Teens on Linux.org) 4:30pm Thursday, 07/24/2008 People, Ubuntu Location: D135 This talk is given by Andrew "Tuna" Harris, the teenaged founder of TeensOnLinux.org, and Samuel Baldwin, a 15-year-old hacker from Boston. It will focus on three main points: why we should get teens involved in open source, getting them interested, and making freedom in software matter to them. Te

Re: Ubuntu 8.04: printing to Windows network share

James Zuelow — 2008-07-19T21:58:21

If you know the IP address of the printer, you can print directly to it. This is what I usually do instead of using a Windows print queue. It really is a lot simpler unless the print admin has restricted direct print access. If you have to use the Windows print queue, the Ubuntu print configuration tool is probably interacting with CUPS. The full syntax for a CUPS smb print connecton looks like this: smb://username:password< at >workgroup/servername/printersharename You don't always need every element of the uri. So assuming you've got a good AD machine account you can start off with: smb://servername/printersharename Which is probably what you've tried, since you said you're using the same config as your Windows boxes. If your test page doesn't work, then keep adding elements until it does work. The first things that come to mind is that you accidentally left off the "smb://" part or that you're using backslashes like Windows. You can also try smbclient -L servername to double-check th

Ubuntu 8.04: printing to Windows network share

Christopher Howard — 2008-07-19T20:49:17

Remember that Ubuntu 8.04 box I joined to Active Directory using the Likewise program? Now I'm working on getting printing set up so the Ubuntu box can print to the Windows network printing share. I tried using the default add printer tool in Ubuntu (the smb section of it), but it doesn't seem to be able to recognize the share. I use the same server and share info that works fine on all the Windows and Mac machines. Ubuntu has the correct drivers for the printer (an HP 4300), but can't verify the existence of the share or send a print job to it. (I can ping the print server from command-line). I was wondering if there might be another tool I could install that could do the job. (Maybe even scan AD for printers -- the printer is published.) I tried posting this in the Ubuntu forums, but their forums are so busy that it didn't last two hours before being buried by other questions.

Re: Thought this was kinda interesting

barsalou — 2008-07-18T19:16:47

Quoting "Nathan T. Templeton" gci.net>: I get video not available. Mike B. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

Re: Really cool icons and/or wallpaper?

bdk — 2008-07-18T17:46:32

Tux Factory (http://tux.crystalxp.net/) has hundreds of Tux Avatars that could be used as icons. -Sean Christopher Howard wrote:

Re: Really cool icons and/or wallpaper?

Ben Everitt — 2008-07-18T17:10:32

My method is using google images. I type in the res I'm looking for and the word wallpaper or background. This will show you a very broad range of res specific images. I'd highly suggest keeping the google image filter on and make sure you're wearing your foil helmet - it's the internet out there. -Ben Christopher Howard wrote:

Re: Suggestions

Adam Bultman — 2008-07-18T17:08:40

One of my job references early on in my "career" told a possible employer I was "Lazy. But Larry Wall Lazy". No lie! Luckily, the person calling my reference knew who Larry Wall was, and "got it", and I also got the job. Adam Arthur Corliss wrote:

Re: Really cool icons and/or wallpaper?

Adam Bultman — 2008-07-18T17:06:07

http://www.socwall.com/ Social wallpapering. It's a great site. Christopher Howard wrote:

Re: Really cool icons and/or wallpaper?

Jim MacDonald — 2008-07-18T13:49:20

www.digitalblasphemy.com or artofgregmartin.com for icons etc I use http://www.gnome-look.org/ Christopher Howard wrote:

Really cool icons and/or wallpaper?

Christopher Howard — 2008-07-18T13:44:46

I was wondering if anyone wanted to recommend their favorite sources for cool wallpaper or desktop icons. I've been spending a lot of time lately customizing my desktop look. I really go for the techy, smooth, clean, high-resolution look. I've found a lot of resources googling... though I can't but imagine that there are many cool items that don't pop up in the top-ten list of a google search.