From spork at bway.net Fri Aug 1 00:15:16 2008 From: spork at bway.net (Charles Sprickman) Date: Fri, 1 Aug 2008 00:15:16 -0400 (EDT) Subject: [nycbug-talk] dedicated server rentals? Message-ID: Hi all, First off, I'm on the fence about going with a "dedicated server" that I rent vs. renting space somewhere and throwing my own hardware in. Ideally, I'd start with the first then move to the latter and keep a VPS elsewhere as a spare (for VPS, Verio seems to be the king of FreeBSD stuff - they also seem to have hacked up 6.x to support multiple IPs in a jail). Does anyone have any suggestions on a hosting company that is friendly to FreeBSD dedicated servers and offers a decent level of service? I'd like a porn/spam/irc/bot-free network, and a very over-provisioned network. An IP KVM would be a great bonus as well. An onsite backup service and a guaranteed time to restore should the hardware blow up would be another bonus. Does such a thing exist for less than $500/month? Bandwidth needs are relatively small, but I'd want an FE or GigE port nonetheless. Thanks, Charles ___ Charles Sprickman NetEng/SysAdmin Bway.net - New York's Best Internet - www.bway.net spork at bway.net - 212.655.9344 From lists at stringsutils.com Fri Aug 1 10:51:07 2008 From: lists at stringsutils.com (Francisco Reyes) Date: Fri, 01 Aug 2008 10:51:07 -0400 Subject: [nycbug-talk] dedicated server rentals? In-Reply-To: References: Message-ID: On 12:15 am 08/01/08 Charles Sprickman wrote: > First off, I'm on the fence about going with a "dedicated server" > that I rent vs. renting space somewhere and throwing my own hardware > in. Check datapipe. http://datapipe.com/Managed_Hosting.aspx So far (about a year) they have been dependable. They are FreeBSD friendly. They have two levels. One where they do most of the work for you (ie install programs like apache, mysql,etc..) and another where they just install the OS and give you access. You do all the work beyond that. The price difference was somewhere in the $500 range so it didn't make sense to go with the "fully managed". Last I checked they didn't have any form of KVM. They backups seemed expensive so we didn't go with them. From jonathan at kc8onw.net Fri Aug 1 11:55:01 2008 From: jonathan at kc8onw.net (Jonathan) Date: Fri, 01 Aug 2008 11:55:01 -0400 Subject: [nycbug-talk] dedicated server rentals? In-Reply-To: References: Message-ID: <489331D5.10802@kc8onw.net> Charles Sprickman wrote: > Hi all, > > First off, I'm on the fence about going with a "dedicated server" that I > rent vs. renting space somewhere and throwing my own hardware in. > Ideally, I'd start with the first then move to the latter and keep a VPS > elsewhere as a spare (for VPS, Verio seems to be the king of FreeBSD > stuff - they also seem to have hacked up 6.x to support multiple IPs in a > jail). I'm also fairly interested in a VPS. I've considered doing colocation but I can't justify the up front expense for the hardware since it's coming out of my own pocket. Right now I have an old desktop on a DSL connection running email for myself and a few others. If anyone knows of a good VPS provider I would definitely consider using them, it sucks when my mail server goes down everytime a thunderstorm rolls through. I don't really need a lot of bandwidth and storage needs would probably be less than 10-20GB for the near term. I do want something I can set up how I like but dedicated and colo both seem too expensive so it seems a good VPS is the way to go for me. Thanks, Jonathan From lists at stringsutils.com Fri Aug 1 13:13:39 2008 From: lists at stringsutils.com (Francisco Reyes) Date: Fri, 01 Aug 2008 13:13:39 -0400 Subject: [nycbug-talk] dedicated server rentals? In-Reply-To: <489331D5.10802@kc8onw.net> References: <489331D5.10802@kc8onw.net> Message-ID: <9af8e69e9196bd721ea896db8190cdb8@stringsutils.com> On 11:55 am 08/01/08 Jonathan wrote: > I don't really need a lot of bandwidth and storage needs would > probably be less than 10-20GB for the near term. I do want something With that much storage this may not be the right solution for you, but check http://hub.org and prices... http://hub.org/en/services/plans.php If you have some small domains that space is not much, that may work. They offer FreeBSD jails. From kacanski_s at yahoo.com Sat Aug 2 09:04:32 2008 From: kacanski_s at yahoo.com (Aleksandar Kacanski) Date: Sat, 2 Aug 2008 06:04:32 -0700 (PDT) Subject: [nycbug-talk] dedicated server rentals? Message-ID: <913101.62459.qm@web53606.mail.re2.yahoo.com> ----- Original Message ---- From: Francisco Reyes To: Charles Sprickman Cc: talk at lists.nycbug.org Sent: Friday, August 1, 2008 10:51:07 AM Subject: Re: [nycbug-talk] dedicated server rentals? On 12:15 am 08/01/08 Charles Sprickman wrote: > First off, I'm on the fence about going with a "dedicated server" > that I rent vs. renting space somewhere and throwing my own hardware > in. Check datapipe. http://datapipe.com/Managed_Hosting.aspx So far (about a year) they have been dependable. They are FreeBSD friendly. They have two levels. One where they do most of the work for you (ie install programs like apache, mysql,etc..) and another where they just install the OS and give you access. You do all the work beyond that. The price difference was somewhere in the $500 range so it didn't make sense to go with the "fully managed". Last I checked they didn't have any form of KVM. They backups seemed expensive so we didn't go with them. ________________________________________________________________________________ My ex company had managed services contract with data pipe. I was not impressed with their expertise and their facilities. At newrark we had symmetrix EMC frame that was in cage with raised floor completely sagging and every time I would go there I worried about frame going under. Funny but scarry... --sasha From ike at lesmuug.org Wed Aug 6 14:29:41 2008 From: ike at lesmuug.org (Isaac Levy) Date: Wed, 6 Aug 2008 14:29:41 -0400 Subject: [nycbug-talk] Soekris/PCEngines-ALIX USB Bug Message-ID: <5FCA2CF4-105C-4E7C-A10D-7E8D5EDC08C3@lesmuug.org> Hi All, I've been searching for answers, but info on lists is confusing the heck out of me. Essentially, I'm working with Soekris and ALIX boards- attempting to get a straight FreeBSD install done. I love these cheap boards, some folks around here know I've been happily deploying PFSense and Monowall on these things all over town for a few years. -- Now, I'm trying to get a full FreeBSD system built on the boxes, I've run into problems with the USB ports. I'm open to using OpenBSD if everything works, but my use will be remotely deployed systems with no/ limited physical access, and the OpenBSD upgrade cycle isn't that appealing to me, (especially as I'm a long-time FreeBSD user). (Comments/flames/etc. on this are welcomed). -- With that, the USB ports on the boards are the only well-known problem affecting stability, so much that FreeBSD kernels are simply compiled without the USB drivers. I would very much like to the USB ports to work on the Soekris/ALIX, (for keyboards, CD-ROM drives, harddrives, etc...). Here's my questions: 1) Has anyone seen *concise* documentation on the problem, (or perhaps a solution), before I sink time into documenting the bugs? 2) Can anyone here confirm that USB works properly on ALIX/Soekris using OpenBSD? Even the shortest responses or URLS sent would be greatly appreciated! Best, .ike From george at ceetonetechnology.com Wed Aug 6 14:37:00 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Wed, 06 Aug 2008 14:37:00 -0400 Subject: [nycbug-talk] Soekris/PCEngines-ALIX USB Bug In-Reply-To: <5FCA2CF4-105C-4E7C-A10D-7E8D5EDC08C3@lesmuug.org> References: <5FCA2CF4-105C-4E7C-A10D-7E8D5EDC08C3@lesmuug.org> Message-ID: <4899EF4C.1070006@ceetonetechnology.com> Isaac Levy wrote: > Hi All, > > I've been searching for answers, but info on lists is confusing the > heck out of me. > > Essentially, I'm working with Soekris and ALIX boards- attempting to > get a straight FreeBSD install done. > > I love these cheap boards, some folks around here know I've been > happily deploying PFSense and Monowall on these things all over town > for a few years. > > -- > Now, I'm trying to get a full FreeBSD system built on the boxes, I've > run into problems with the USB ports. I'm open to using OpenBSD if > everything works, but my use will be remotely deployed systems with no/ > limited physical access, and the OpenBSD upgrade cycle isn't that > appealing to me, (especially as I'm a long-time FreeBSD user). > (Comments/flames/etc. on this are welcomed). > > -- > With that, the USB ports on the boards are the only well-known problem > affecting stability, so much that FreeBSD kernels are simply compiled > without the USB drivers. > > I would very much like to the USB ports to work on the Soekris/ALIX, > (for keyboards, CD-ROM drives, harddrives, etc...). Here's my > questions: > > 1) Has anyone seen *concise* documentation on the problem, (or perhaps > a solution), before I sink time into documenting the bugs? > > 2) Can anyone here confirm that USB works properly on ALIX/Soekris > using OpenBSD? > > Even the shortest responses or URLS sent would be greatly appreciated! > > Best, > .ike Errr. . . I think the ultimate solution with FreeBSD and EHCI (usb 2.0) and the Alix boards is to build a kernel without EHCI support. The USB ports work fine. . . AFAIK without it. I just got to the point where I disabled it in /boot/loader.conf, but still bombed out during boot on EHCI. . . But Ike knows that already, and wondering about other people's input :) Ike. . . maybe email Pascal at PCEngines.ch. . . she's pretty receptive. It says this: FreeBSD (on older versions, may need to disable USB 2.0 in BIOS, or disable the EHCI driver) at: http://www.pcengines.ch/alix.htm But I assume you're running 6 or 7 stable. . . George From ike at lesmuug.org Thu Aug 7 08:33:42 2008 From: ike at lesmuug.org (Isaac Levy) Date: Thu, 7 Aug 2008 08:33:42 -0400 Subject: [nycbug-talk] Soekris/PCEngines-ALIX USB Bug In-Reply-To: <4899EF4C.1070006@ceetonetechnology.com> References: <5FCA2CF4-105C-4E7C-A10D-7E8D5EDC08C3@lesmuug.org> <4899EF4C.1070006@ceetonetechnology.com> Message-ID: <2A4DAE80-E680-4CC7-A955-DB3C113B2CDC@lesmuug.org> Hi All, Let me re-iterate- I *am* wanting to get USB working properly on the ALIX/Soekris boards, using FreeBSD 7.x (REL). On Aug 6, 2008, at 2:37 PM, George Rosamond wrote: > Isaac Levy wrote: >> Hi All, >> I've been searching for answers, but info on lists is confusing >> the heck out of me. >> Essentially, I'm working with Soekris and ALIX boards- attempting >> to get a straight FreeBSD install done. >> I love these cheap boards, some folks around here know I've been >> happily deploying PFSense and Monowall on these things all over >> town for a few years. >> -- >> Now, I'm trying to get a full FreeBSD system built on the boxes, >> I've run into problems with the USB ports. I'm open to using >> OpenBSD if everything works, but my use will be remotely deployed >> systems with no/ limited physical access, and the OpenBSD upgrade >> cycle isn't that appealing to me, (especially as I'm a long-time >> FreeBSD user). (Comments/flames/etc. on this are welcomed). >> -- >> With that, the USB ports on the boards are the only well-known >> problem affecting stability, so much that FreeBSD kernels are >> simply compiled without the USB drivers. >> I would very much like to the USB ports to work on the Soekris/ >> ALIX, (for keyboards, CD-ROM drives, harddrives, etc...). Here's >> my questions: >> 1) Has anyone seen *concise* documentation on the problem, (or >> perhaps a solution), before I sink time into documenting the bugs? >> 2) Can anyone here confirm that USB works properly on ALIX/Soekris >> using OpenBSD? >> Even the shortest responses or URLS sent would be greatly >> appreciated! >> Best, >> .ike > > Errr. . . I think the ultimate solution with FreeBSD and EHCI (usb > 2.0) and the Alix boards is to build a kernel without EHCI support. > > The USB ports work fine. . . AFAIK without it. I'm confused by what you wrote here- does the USB work properly or not? I'm attempting to get *everything* running properly on the boards, and am especially interested in USB information. > I just got to the point where I disabled it in /boot/loader.conf, > but still bombed out during boot on EHCI. . . > > But Ike knows that already, and wondering about other people's > input :) Actually, I don't quite understand what you mean here- perhaps you and I could discuss this off-list? > > > Ike. . . maybe email Pascal at PCEngines.ch. . . she's pretty > receptive. Cool! > > > It says this: (what says this?) > > > FreeBSD (on older versions, may need to disable USB 2.0 in BIOS, or > disable the EHCI driver) > > at: > > http://www.pcengines.ch/alix.htm > > But I assume you're running 6 or 7 stable. . . Yes, FreeBSD 7 stable is the current release, which I'm trying to use. Thanks for the info! Rocket- .ike From nikolai at fetissov.org Thu Aug 7 14:14:12 2008 From: nikolai at fetissov.org (nikolai) Date: Thu, 7 Aug 2008 14:14:12 -0400 (EDT) Subject: [nycbug-talk] August 2008 meeting audio Message-ID: Folks, Audio of Matthew's presentation is online at http://www.fetissov.org/public/nycbug/ -- Nikolai From bonsaime at gmail.com Thu Aug 7 17:35:39 2008 From: bonsaime at gmail.com (Jesse Callaway) Date: Thu, 7 Aug 2008 17:35:39 -0400 Subject: [nycbug-talk] August 2008 meeting audio In-Reply-To: References: Message-ID: Dammit! Missed another meeting... THANKS for the audio Nikolai! On Thu, Aug 7, 2008 at 2:14 PM, nikolai wrote: > Folks, > > Audio of Matthew's presentation is online at > http://www.fetissov.org/public/nycbug/ > > -- > Nikolai > _______________________________________________ > talk mailing list > talk at lists.nycbug.org > http://lists.nycbug.org/mailman/listinfo/talk > From carton at Ivy.NET Fri Aug 8 14:21:44 2008 From: carton at Ivy.NET (Miles Nordin) Date: Fri, 08 Aug 2008 14:21:44 -0400 Subject: [nycbug-talk] Soekris/PCEngines-ALIX USB Bug In-Reply-To: <2A4DAE80-E680-4CC7-A955-DB3C113B2CDC@lesmuug.org> (Isaac Levy's message of "Thu, 7 Aug 2008 08:33:42 -0400") References: <5FCA2CF4-105C-4E7C-A10D-7E8D5EDC08C3@lesmuug.org> <4899EF4C.1070006@ceetonetechnology.com> <2A4DAE80-E680-4CC7-A955-DB3C113B2CDC@lesmuug.org> Message-ID: AIUI, disabling ehci just makes it usb 1.x speed. If you look at how the ports attach, usb 2.0 controllers pretend to be two chips, a 2.0 controller and a 1.x controller. They then pervert the tree of controllers, hubs, hubs, devices before presenting it to the drivers. Depending on the speed of the device plugged to a single port, that device will appear to attach to the hub tree rooted at either one controller or the other. I think it is weirder than that, or not exactly as I've said. The two sides are not mirror images. On one side they pretend to be one controller with a 4-port hub attached, and on the other side to be 4 controllers with no hub attached. :/ i don't know why the Central Committe Controlling USB pulled all this nonsense. maybe it helps the keyboard work at boot without forcing the chinese to rewrite their fragile BIOS's? -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 304 bytes Desc: not available URL: From nycbug at chrisbuechler.com Sun Aug 10 16:39:41 2008 From: nycbug at chrisbuechler.com (Chris Buechler) Date: Sun, 10 Aug 2008 16:39:41 -0400 Subject: [nycbug-talk] Soekris/PCEngines-ALIX USB Bug In-Reply-To: References: <5FCA2CF4-105C-4E7C-A10D-7E8D5EDC08C3@lesmuug.org> <4899EF4C.1070006@ceetonetechnology.com> <2A4DAE80-E680-4CC7-A955-DB3C113B2CDC@lesmuug.org> Message-ID: <489F520D.3030107@chrisbuechler.com> Miles Nordin wrote: > AIUI, disabling ehci just makes it usb 1.x speed. > That's the end result, but the reason for doing it with ALIX boards is so they don't panic at boot. They used to not boot FreeBSD without disabling ehci because of the panic. It's been about a year so my memory of the issue is a bit foggy. This has been fixed though, myself and a couple other pfSense developers worked with Pascal at PC Engines to get these issues resolved and make sure the boards run FreeBSD/pfSense reliably, back before they were available for purchase. Though I can't say I've actually used the USB ports for anything to date. All the cases I have don't even have an opening for the USB ports, though my test boards aren't in a case anyway. Ike - the fix is to make sure you have the latest BIOS on them, I'm not aware of any issues with boards that have the v0.99 BIOS and FreeBSD 6.x and 7.x. You can grab it here. http://pcengines.ch/alix2.htm There is one remaining quirk I'm aware of, they won't boot from a disk > 4 GB due to another BIOS issue. The vr(4) driver in FreeBSD 6.x and 7.x can be less than stellar at times, if you check the commit log on RELENG_7 you'll see a *long* list of vr(4) fixes, so that should get better in the future. There's only one line diff in if_vr.c between RELENG_6_3 and RELENG_7_0 so the issues aren't any better in 7.0 than in 6.3. The issues don't seem to affect the vast majority of people, and I have not had any problems with the ones I have in production, but CARP on them seems to be problematic. If I were building a stock FreeBSD for one, I'd go with RELENG_7 if it proved reliable for the intended usage. Aside from the BIOS issues, which have largely been resolved, they're great little boards. Thankfully to date they haven't had the same issues seen in the Soekris 5501, there have been a few hardware problems with those that require shipping the boards back for repair. BIOS issues are easier to cope with. Can't say I've tried OpenBSD on them though, so I can't offer any suggestions there. best, Chris From ike at lesmuug.org Mon Aug 11 21:14:44 2008 From: ike at lesmuug.org (Isaac Levy) Date: Mon, 11 Aug 2008 21:14:44 -0400 Subject: [nycbug-talk] Soekris/PCEngines-ALIX USB Bug In-Reply-To: References: <5FCA2CF4-105C-4E7C-A10D-7E8D5EDC08C3@lesmuug.org> <4899EF4C.1070006@ceetonetechnology.com> <2A4DAE80-E680-4CC7-A955-DB3C113B2CDC@lesmuug.org> Message-ID: <506BE16E-850F-4489-B9DE-21B8D306866A@lesmuug.org> Wordup Miles, On Aug 8, 2008, at 2:21 PM, Miles Nordin wrote: > AIUI, disabling ehci just makes it usb 1.x speed. That was *precisely* what I wanted to know, thanks! I don't care about USB 2 working, just USB for a keyboard/Memory-Stick/ etc... Rocket- .ike From ike at lesmuug.org Mon Aug 11 21:18:41 2008 From: ike at lesmuug.org (Isaac Levy) Date: Mon, 11 Aug 2008 21:18:41 -0400 Subject: [nycbug-talk] Soekris/PCEngines-ALIX USB Bug In-Reply-To: <489F520D.3030107@chrisbuechler.com> References: <5FCA2CF4-105C-4E7C-A10D-7E8D5EDC08C3@lesmuug.org> <4899EF4C.1070006@ceetonetechnology.com> <2A4DAE80-E680-4CC7-A955-DB3C113B2CDC@lesmuug.org> <489F520D.3030107@chrisbuechler.com> Message-ID: Wow, Thanks Chris, On Aug 10, 2008, at 4:39 PM, Chris Buechler wrote: > Miles Nordin wrote: >> AIUI, disabling ehci just makes it usb 1.x speed. >> > That's the end result, but the reason for doing it with ALIX boards is > so they don't panic at boot. They used to not boot FreeBSD without > disabling ehci because of the panic. It's been about a year so my > memory > of the issue is a bit foggy. > > This has been fixed though, myself and a couple other pfSense > developers > worked with Pascal at PC Engines to get these issues resolved and make > sure the boards run FreeBSD/pfSense reliably, back before they were > available for purchase. Though I can't say I've actually used the USB > ports for anything to date. All the cases I have don't even have an > opening for the USB ports, though my test boards aren't in a case > anyway. > > Ike - the fix is to make sure you have the latest BIOS on them, I'm > not > aware of any issues with boards that have the v0.99 BIOS and FreeBSD > 6.x > and 7.x. You can grab it here. http://pcengines.ch/alix2.htm There is > one remaining quirk I'm aware of, they won't boot from a disk > 4 GB > due > to another BIOS issue. > > The vr(4) driver in FreeBSD 6.x and 7.x can be less than stellar at > times, if you check the commit log on RELENG_7 you'll see a *long* > list > of vr(4) fixes, so that should get better in the future. There's only > one line diff in if_vr.c between RELENG_6_3 and RELENG_7_0 so the > issues > aren't any better in 7.0 than in 6.3. The issues don't seem to affect > the vast majority of people, and I have not had any problems with the > ones I have in production, but CARP on them seems to be problematic. > If > I were building a stock FreeBSD for one, I'd go with RELENG_7 if it > proved reliable for the intended usage. > > Aside from the BIOS issues, which have largely been resolved, they're > great little boards. Thankfully to date they haven't had the same > issues > seen in the Soekris 5501, there have been a few hardware problems with > those that require shipping the boards back for repair. BIOS issues > are > easier to cope with. > > Can't say I've tried OpenBSD on them though, so I can't offer any > suggestions there. > > best, > Chris Yes- I'll be sticking with 7x FreeBSD, perhaps RELENG will be sane- but the vr(4) issues are a definite show stopper for my uses (carp!), and move me towards the Soekris units... Will be testing here... Thanks again- Rocket- .ike From ike at lesmuug.org Mon Aug 11 21:28:34 2008 From: ike at lesmuug.org (Isaac Levy) Date: Mon, 11 Aug 2008 21:28:34 -0400 Subject: [nycbug-talk] Defcon News Blurbs Message-ID: <4BD28883-C82A-4A63-A122-E4BE6E39A1A1@lesmuug.org> Hi All, In the Vegas airport after Defcon 16 with *lots* of time to kill, and thought I'd toss some fun tidbits to the list: OpenBSD and PF in the opening paragraph: http://blog.wired.com/27bstroke6/2008/08/a-first-ever-lo.html FreeBSD jail(8) used again for this year's CTF competition servers, nobody breaks out yet (more on this to come from me in the future...) An interesting talk: Toasterkit, a Modular NetBSD Rootkit Anthony Martinez Systems Administrator, New Mexico Tech Thomas Bowen Systems Administrator, New Mexico Tech https://www.defcon.org/html/defcon-16/dc-16-speakers.html#Martinez Also- ran into a fistfull of folks from the NYCResistor group, hardware hackers who have a space in Downtown Brooklyn: http://www.nycresistor.com/ -- Excellent content this year- truly stellar. More fun to post if I ever get done catching up on my email... Rocket- .ike -- PS: IR File Transfer Port on the Defcon 16 badges: -------------- next part -------------- A non-text attachment was scrubbed... Name: IMG00880.jpg Type: image/jpeg Size: 95106 bytes Desc: not available URL: -------------- next part -------------- The Leaked Story (good pics): http://blog.wired.com/27bstroke6/2008/08/exclusive-defco.html From alex at pilosoft.com Mon Aug 11 21:55:23 2008 From: alex at pilosoft.com (Alex Pilosov) Date: Mon, 11 Aug 2008 21:55:23 -0400 (EDT) Subject: [nycbug-talk] Defcon News Blurbs In-Reply-To: <4BD28883-C82A-4A63-A122-E4BE6E39A1A1@lesmuug.org> Message-ID: You forgot this one: http://www.forbes.com/security/2008/08/10/internet-traffic-routing-tech-cz_tb_0810defcon.html -alex On Mon, 11 Aug 2008, Isaac Levy wrote: > Hi All, > > In the Vegas airport after Defcon 16 with *lots* of time to kill, and > thought I'd toss some fun tidbits to the list: > > OpenBSD and PF in the opening paragraph: > http://blog.wired.com/27bstroke6/2008/08/a-first-ever-lo.html > > FreeBSD jail(8) used again for this year's CTF competition servers, > nobody breaks out yet (more on this to come from me in the future...) > > An interesting talk: > Toasterkit, a Modular NetBSD Rootkit > Anthony Martinez Systems Administrator, New Mexico Tech > Thomas Bowen Systems Administrator, New Mexico Tech > https://www.defcon.org/html/defcon-16/dc-16-speakers.html#Martinez > > Also- ran into a fistfull of folks from the NYCResistor group, > hardware hackers who have a space in Downtown Brooklyn: > http://www.nycresistor.com/ > > -- > Excellent content this year- truly stellar. More fun to post if I > ever get done catching up on my email... > > Rocket- > .ike > > > -- > PS: IR File Transfer Port on the Defcon 16 badges: > From ike at lesmuug.org Mon Aug 11 23:30:08 2008 From: ike at lesmuug.org (Isaac Levy) Date: Mon, 11 Aug 2008 23:30:08 -0400 Subject: [nycbug-talk] Defcon News Blurbs In-Reply-To: References: Message-ID: <28D51CB1-2229-49C7-A85A-05EF93C7D733@lesmuug.org> On Aug 11, 2008, at 9:55 PM, Alex Pilosov wrote: > You forgot this one: > > http://www.forbes.com/security/2008/08/10/internet-traffic-routing-tech-cz_tb_0810defcon.html > > -alex Still at airport- I just read the comments- OMFGROTFL- TSA is staring at me funny now... Rocket- .ike From ike at lesmuug.org Tue Aug 12 18:32:21 2008 From: ike at lesmuug.org (Isaac Levy) Date: Tue, 12 Aug 2008 18:32:21 -0400 Subject: [nycbug-talk] Defcon News Blurbs In-Reply-To: <48A1B333.4070003@ceetonetechnology.com> References: <48A0F165.3050200@ceetonetechnology.com> <4865BA3759BFD444AE478F2F50EB624601A59FCDDC@exmb01.netplexity.local> <48A1B333.4070003@ceetonetechnology.com> Message-ID: <2B9B72F5-35EF-4739-83B7-EDDC83C70E4E@lesmuug.org> On Aug 11, 2008, at 11:30 PM, Isaac Levy wrote: >> http://www.forbes.com/security/2008/08/10/internet-traffic-routing-tech-cz_tb_0810defcon.html > Man, I'm sad I missed this (and missed you entirely Alex!), since it was a last-minute talk, I didn't even know it was happening! -- More press, SANS ISC handler diary says 'I did hear that this WAS the most interesting talk.', for what that's worth: http://isc.sans.org/diary.html?storyid=4862 Rocket- .ike From george at ceetonetechnology.com Wed Aug 13 08:04:15 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Wed, 13 Aug 2008 08:04:15 -0400 Subject: [nycbug-talk] Cyberwar article Message-ID: <48A2CDBF.6040003@ceetonetechnology.com> Good article from the NYT on Georgia-Russia-etc http://tinyurl.com/5ealpr Great quote: Bill Woodcock, research director of the Packet Clearing House, a nonprofit technical organization that tracks Internet traffic, said cyberattacks are so inexpensive that they are almost a certainty in modern warfare. ?It costs about 4 cents per machine,? he said. ?You could fund an entire cyberwarfare campaign for the cost of replacing a tank tread, so you would be foolish not to.? g From jeff at jeffmau.com Wed Aug 13 08:49:40 2008 From: jeff at jeffmau.com (Jeff Mau) Date: Wed, 13 Aug 2008 14:49:40 +0200 Subject: [nycbug-talk] Cyberwar article In-Reply-To: <48A2CDBF.6040003@ceetonetechnology.com> References: <48A2CDBF.6040003@ceetonetechnology.com> Message-ID: <20080813144940.a93jdls6uosks4gg@webhosting.loftmail.com> And this last paragraph is the crux of the issue, like blowing up the only bridge into town: Georgia is dependent on both Russia and Turkey for connections to the global Internet. Georgia, with United States backing, is putting a fiber-optic network link under the Black Sea to connect its port city of Poti to the Bulgarian city of Varna. That connection is scheduled for completion in September. Cheers, Jeff Mau Quoting George Rosamond : > Good article from the NYT on Georgia-Russia-etc > > http://tinyurl.com/5ealpr > > Great quote: > > Bill Woodcock, research director of the Packet Clearing House, a > nonprofit technical organization that tracks Internet traffic, said > cyberattacks are so inexpensive that they are almost a certainty in > modern warfare. "It costs about 4 cents per machine," he said. "You > could fund an entire cyberwarfare campaign for the cost of replacing a > tank tread, so you would be foolish not to." > > g > _______________________________________________ > talk mailing list > talk at lists.nycbug.org > http://lists.nycbug.org/mailman/listinfo/talk > > From george at ceetonetechnology.com Wed Aug 13 08:54:54 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Wed, 13 Aug 2008 08:54:54 -0400 Subject: [nycbug-talk] Cyberwar article In-Reply-To: <20080813144940.a93jdls6uosks4gg@webhosting.loftmail.com> References: <48A2CDBF.6040003@ceetonetechnology.com> <20080813144940.a93jdls6uosks4gg@webhosting.loftmail.com> Message-ID: <48A2D99E.9010405@ceetonetechnology.com> Jeff Mau wrote: > And this last paragraph is the crux of the issue, like blowing up the > only bridge into town: > > Georgia is dependent on both Russia and Turkey for connections to the > global Internet. Georgia, with United States backing, is putting a > fiber-optic network link under the Black Sea to connect its port city > of Poti to the Bulgarian city of Varna. That connection is scheduled > for completion in September. > Yeah. . . the more 'virtual' the world is, the less you realize how it relies on the physical. . . that good old unnoticed layer 0 of the new, improved OSI model. George From skreuzer at exit2shell.com Fri Aug 15 21:32:50 2008 From: skreuzer at exit2shell.com (Steven Kreuzer) Date: Fri, 15 Aug 2008 21:32:50 -0400 Subject: [nycbug-talk] Defcon News Blurbs In-Reply-To: <4BD28883-C82A-4A63-A122-E4BE6E39A1A1@lesmuug.org> References: <4BD28883-C82A-4A63-A122-E4BE6E39A1A1@lesmuug.org> Message-ID: <20080816013250.GA29057@slurry.exit2shell.com> On Mon, Aug 11, 2008 at 09:28:34PM -0400, Isaac Levy wrote: > Hi All, > > In the Vegas airport after Defcon 16 with *lots* of time to kill, and > thought I'd toss some fun tidbits to the list: > > OpenBSD and PF in the opening paragraph: > http://blog.wired.com/27bstroke6/2008/08/a-first-ever-lo.html > > FreeBSD jail(8) used again for this year's CTF competition servers, > nobody breaks out yet (more on this to come from me in the future...) > > An interesting talk: > Toasterkit, a Modular NetBSD Rootkit > Anthony Martinez Systems Administrator, New Mexico Tech > Thomas Bowen Systems Administrator, New Mexico Tech > https://www.defcon.org/html/defcon-16/dc-16-speakers.html#Martinez > > Also- ran into a fistfull of folks from the NYCResistor group, > hardware hackers who have a space in Downtown Brooklyn: > http://www.nycresistor.com/ > > -- > Excellent content this year- truly stellar. More fun to post if I > ever get done catching up on my email... > > Rocket- > .ike > > > -- > PS: IR File Transfer Port on the Defcon 16 badges: > > > The Leaked Story (good pics): > http://blog.wired.com/27bstroke6/2008/08/exclusive-defco.html > A little off topic, but the slides for the talk about hacking the subway system got posted online. http://www-tech.mit.edu/V128/N30/subway/Defcon_Presentation.pdf The talk didn't happen at defcon because a judge slapped a gag order on the presenters. Very interesting read -- Steven Kreuzer http://www.exit2shell.com/~skreuzer From george at ceetonetechnology.com Fri Aug 15 22:22:43 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Fri, 15 Aug 2008 22:22:43 -0400 Subject: [nycbug-talk] Defcon News Blurbs In-Reply-To: <20080816013250.GA29057@slurry.exit2shell.com> References: <4BD28883-C82A-4A63-A122-E4BE6E39A1A1@lesmuug.org> <20080816013250.GA29057@slurry.exit2shell.com> Message-ID: <48A639F3.40303@ceetonetechnology.com> Steven Kreuzer wrote: > On Mon, Aug 11, 2008 at 09:28:34PM -0400, Isaac Levy wrote: >> Hi All, >> >> In the Vegas airport after Defcon 16 with *lots* of time to kill, and >> thought I'd toss some fun tidbits to the list: >> >> OpenBSD and PF in the opening paragraph: >> http://blog.wired.com/27bstroke6/2008/08/a-first-ever-lo.html >> >> FreeBSD jail(8) used again for this year's CTF competition servers, >> nobody breaks out yet (more on this to come from me in the future...) >> >> An interesting talk: >> Toasterkit, a Modular NetBSD Rootkit >> Anthony Martinez Systems Administrator, New Mexico Tech >> Thomas Bowen Systems Administrator, New Mexico Tech >> https://www.defcon.org/html/defcon-16/dc-16-speakers.html#Martinez >> >> Also- ran into a fistfull of folks from the NYCResistor group, >> hardware hackers who have a space in Downtown Brooklyn: >> http://www.nycresistor.com/ >> >> -- >> Excellent content this year- truly stellar. More fun to post if I >> ever get done catching up on my email... >> >> Rocket- >> .ike >> >> >> -- >> PS: IR File Transfer Port on the Defcon 16 badges: > > >> >> The Leaked Story (good pics): >> http://blog.wired.com/27bstroke6/2008/08/exclusive-defco.html >> > > A little off topic, but the slides for the talk about hacking > the subway system got posted online. > > http://www-tech.mit.edu/V128/N30/subway/Defcon_Presentation.pdf > > The talk didn't happen at defcon because a judge slapped a gag > order on the presenters. > > Very interesting read > Yes. . . and a number of people signed a letter to the judge about it. . . The signers include Matt Blaze, Bruce Schneier and Steve Bellovin. . . all mention it in their blogs, except Schneier. Kind of crazy that the 'R' of RSA, Rivest, was their mentor on the project, and there's still no respect given. . . IMHO, I think RSA had more to do with putting Boston on the technology map than anything else in the past 35 years. . . maybe I'm pushing it, but come on, this isn't the RBN. . . g From carton at Ivy.NET Sat Aug 16 00:36:24 2008 From: carton at Ivy.NET (Miles Nordin) Date: Sat, 16 Aug 2008 00:36:24 -0400 Subject: [nycbug-talk] Defcon News Blurbs In-Reply-To: <20080816013250.GA29057@slurry.exit2shell.com> (Steven Kreuzer's message of "Fri, 15 Aug 2008 21:32:50 -0400") References: <4BD28883-C82A-4A63-A122-E4BE6E39A1A1@lesmuug.org> <20080816013250.GA29057@slurry.exit2shell.com> Message-ID: >>>>> "sk" == Steven Kreuzer writes: sk> http://www-tech.mit.edu/V128/N30/subway/Defcon_Presentation.pdf sk> The talk didn't happen at defcon because a judge slapped a gag sk> order on the presenters. great reason to schedule your talk in .ca, .nl, .de instead. Since we have JFK it's about the same price, and you avoid all this bullshit and more (at least for now). That's a huge amount of work they did, though. pretty awesome. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 304 bytes Desc: not available URL: From tekronis at gmail.com Sun Aug 17 22:13:16 2008 From: tekronis at gmail.com (H. G.) Date: Sun, 17 Aug 2008 22:13:16 -0400 Subject: [nycbug-talk] The Next Step Message-ID: <60131f920808171913m17eb04c2gcbe0d11e722755fe@mail.gmail.com> Punishment for using cryptography has now been added to the queue: http://w2.eff.org/Censorship/Terrorism_militias/patriot-act-II-analysis.php Time for us all to go back to using rsh. -------------- next part -------------- An HTML attachment was scrubbed... URL: From ike at lesmuug.org Mon Aug 18 12:04:58 2008 From: ike at lesmuug.org (Isaac Levy) Date: Mon, 18 Aug 2008 12:04:58 -0400 Subject: [nycbug-talk] The Next Step In-Reply-To: <60131f920808171913m17eb04c2gcbe0d11e722755fe@mail.gmail.com> References: <60131f920808171913m17eb04c2gcbe0d11e722755fe@mail.gmail.com> Message-ID: On Aug 17, 2008, at 10:13 PM, H. G. wrote: > Punishment for using cryptography has now been added to the queue: > > http://w2.eff.org/Censorship/Terrorism_militias/patriot-act-II-analysis.php > > Time for us all to go back to using rsh. Astoundingly ridiculous, yet somehow not surprising. Are padlocks next on the list? Do we all need to make copies of our house-keys too, and send them to our local police precinct? -- my .02?: My favorite quote, which I think is the best line yet about our entire American situation: "The government* has an insatiable appetite for data. But the mindless accumulation of data is not intelligence. Intelligence requires focused thinking and focused questions. Instead, we're building a Tower of Babel. If this continues, we'll get the worst of both worlds -- all the disadvantages of widespread privacy invasion with none of the security benefits." (* - insert Google, Amazon, Our Banks, XYZ company/network here and the idea still holds...) I feel this is the best line I've seen on the big picture problems yet, especially since there's no tinfoil hat involved. The problems we're creating today with this are quite simple- and will have long- lasting effects. Rocket- .ike From marco at metm.org Mon Aug 18 12:32:40 2008 From: marco at metm.org (Marco Scoffier) Date: Mon, 18 Aug 2008 12:32:40 -0400 Subject: [nycbug-talk] The Next Step In-Reply-To: References: <60131f920808171913m17eb04c2gcbe0d11e722755fe@mail.gmail.com> Message-ID: <48A9A428.1050903@metm.org> Isaac Levy wrote: > On Aug 17, 2008, at 10:13 PM, H. G. wrote: > > >> Punishment for using cryptography has now been added to the queue: >> >> http://w2.eff.org/Censorship/Terrorism_militias/patriot-act-II-analysis.php >> >> Time for us all to go back to using rsh. >> > > Astoundingly ridiculous, yet somehow not surprising. > > Are padlocks next on the list? Do we all need to make copies of our > house-keys too, and send them to our local police precinct? > "This analysis is of the draft of January 9, 2003." Any idea if this is still being proposed or was it shot down a long time ago? -- Marco From ike at lesmuug.org Mon Aug 18 12:38:43 2008 From: ike at lesmuug.org (Isaac Levy) Date: Mon, 18 Aug 2008 12:38:43 -0400 Subject: [nycbug-talk] The Next Step In-Reply-To: <48A9A428.1050903@metm.org> References: <60131f920808171913m17eb04c2gcbe0d11e722755fe@mail.gmail.com> <48A9A428.1050903@metm.org> Message-ID: Word, On Aug 18, 2008, at 12:32 PM, Marco Scoffier wrote: > Isaac Levy wrote: >> On Aug 17, 2008, at 10:13 PM, H. G. wrote: >> >> >>> Punishment for using cryptography has now been added to the queue: >>> >>> http://w2.eff.org/Censorship/Terrorism_militias/patriot-act-II-analysis.php >>> >>> Time for us all to go back to using rsh. >>> >> >> Astoundingly ridiculous, yet somehow not surprising. >> >> Are padlocks next on the list? Do we all need to make copies of >> our house-keys too, and send them to our local police precinct? >> > > "This analysis is of the draft of January 9, 2003." > > Any idea if this is still being proposed or was it shot down a long > time ago? Ah- good thought, Wikipedia says it went nowhere (am I correct here posting this?): "The draft, which was circulated to 10 divisions of the Department of Justice,[18] proposed to make further extensive modifications to extend the USA PATRIOT Act.[19] It was widely condemned, although the Department of Justice claimed that it was only a draft and contained no further proposals.[20]" http://en.wikipedia.org/wiki/USA_PATRIOT_Act Rocket- .ike From lists at kithalsted.com Mon Aug 18 12:42:16 2008 From: lists at kithalsted.com (Kit Halsted) Date: Mon, 18 Aug 2008 12:42:16 -0400 Subject: [nycbug-talk] The Next Step In-Reply-To: References: <60131f920808171913m17eb04c2gcbe0d11e722755fe@mail.gmail.com> Message-ID: No worries, the precinct doesn't need copies of your keys to get in. :) I call dibs on retooling Yakov Smirnoff's schtick for the new USA. :P At 12:04 PM -0400 8/18/08, Isaac Levy wrote: >On Aug 17, 2008, at 10:13 PM, H. G. wrote: > >> Punishment for using cryptography has now been added to the queue: >> >> http://w2.eff.org/Censorship/Terrorism_militias/patriot-act-II-analysis.php >> >> Time for us all to go back to using rsh. > >Astoundingly ridiculous, yet somehow not surprising. > >Are padlocks next on the list? Do we all need to make copies of our >house-keys too, and send them to our local police precinct? -- Kit Halsted Computers & Networking 917-903-9438 kit at kithalsted.com From george at ceetonetechnology.com Mon Aug 18 23:40:43 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Mon, 18 Aug 2008 23:40:43 -0400 Subject: [nycbug-talk] BSDTalk Message-ID: <48AA40BB.4080702@ceetonetechnology.com> And if anyone hadn't heard. . . Ike and Steve on BSDTalk with Will about NYCBSDCon 2008 http://bsdtalk.blogspot.com/2008/08/bsdtalk156-nycbsdcon-update-with-isaac.html George From lists at stringsutils.com Tue Aug 19 13:49:24 2008 From: lists at stringsutils.com (Francisco Reyes) Date: Tue, 19 Aug 2008 13:49:24 -0400 Subject: [nycbug-talk] Anti-spam services Message-ID: <5cb351577e24604b6e2843ac61e38fd8@stringsutils.com> Anyone happily using an anti-spam, at the MX level, service? Tried Postini and although their price is very reasonable, $3/year/per user, their interface leaves much to be desired. In particular I am looking for something simple enough that one could let a non techie manage directly. One requirement is that it must support some form of Quarantine where the users can check for valid messages and release them. From george at ceetonetechnology.com Tue Aug 19 14:01:04 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Tue, 19 Aug 2008 14:01:04 -0400 Subject: [nycbug-talk] BSDTalk In-Reply-To: <48AA40BB.4080702@ceetonetechnology.com> References: <48AA40BB.4080702@ceetonetechnology.com> Message-ID: <48AB0A60.70707@ceetonetechnology.com> George Rosamond wrote: > And if anyone hadn't heard. . . > > Ike and Steve on BSDTalk with Will about NYCBSDCon 2008 > > http://bsdtalk.blogspot.com/2008/08/bsdtalk156-nycbsdcon-update-with-isaac.html > Strange. . . this shows up in the archives. . . but it didn't come to to talk, AFAIK. George From lists at stringsutils.com Tue Aug 19 14:15:07 2008 From: lists at stringsutils.com (Francisco Reyes) Date: Tue, 19 Aug 2008 14:15:07 -0400 Subject: [nycbug-talk] BSDTalk In-Reply-To: <48AB0A60.70707@ceetonetechnology.com> References: <48AA40BB.4080702@ceetonetechnology.com> <48AB0A60.70707@ceetonetechnology.com> Message-ID: <2d98a72498a933dda1787918a58ef8e8@stringsutils.com> On 2:01 pm 08/19/08 George Rosamond wrote: > Strange. . . this shows up in the archives. . . but it didn't come to > to talk, AFAIK. I think I saw that email earlier. From nycbug at cyth.net Tue Aug 19 14:20:59 2008 From: nycbug at cyth.net (Ray Lai) Date: Tue, 19 Aug 2008 14:20:59 -0400 Subject: [nycbug-talk] BSDTalk In-Reply-To: <48AB0A60.70707@ceetonetechnology.com> References: <48AA40BB.4080702@ceetonetechnology.com> <48AB0A60.70707@ceetonetechnology.com> Message-ID: <7765c0380808191120p42f38fe3g5ebe78478235bc39@mail.gmail.com> On Tue, Aug 19, 2008 at 2:01 PM, George Rosamond wrote: > George Rosamond wrote: >> And if anyone hadn't heard. . . >> >> Ike and Steve on BSDTalk with Will about NYCBSDCon 2008 >> >> http://bsdtalk.blogspot.com/2008/08/bsdtalk156-nycbsdcon-update-with-isaac.html >> > > Strange. . . this shows up in the archives. . . but it didn't come to to > talk, AFAIK. Have you checked your filter? I usually filter all mail from this sender too. -Ray- From KReiter at insidefsi.net Tue Aug 19 15:50:50 2008 From: KReiter at insidefsi.net (Kevin Reiter) Date: Tue, 19 Aug 2008 15:50:50 -0400 Subject: [nycbug-talk] Anti-spam services In-Reply-To: <5cb351577e24604b6e2843ac61e38fd8@stringsutils.com> Message-ID: <0CF59C4890F7A04AAC3B1E798E6F86F303E04319@fsi32.fsidp.insidefsi.com> : Anyone happily using an anti-spam, at the MX level, service? : Tried Postini and although their price is very reasonable, $3/year/per : user, their interface leaves much to be desired. : : In particular I am looking for something simple enough that one could : let a non techie manage directly. : : One requirement is that it must support some form of Quarantine : where the users can check for valid messages and release them. Exchange Defender: http://www.exchangedefender.com They offer a free trial. (DISCLOSURE: I know Vlad) This message may contain confidential or proprietary information and is intended solely for the individual(s) to whom it is addressed. If you are not a named addressee you should not disseminate, distribute or copy this e-mail or act upon the information contained herein. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. From lists at stringsutils.com Tue Aug 19 16:30:08 2008 From: lists at stringsutils.com (Francisco Reyes) Date: Tue, 19 Aug 2008 16:30:08 -0400 Subject: [nycbug-talk] Anti-spam services In-Reply-To: <0CF59C4890F7A04AAC3B1E798E6F86F303E04319@fsi32.fsidp.insidefsi.com> References: <0CF59C4890F7A04AAC3B1E798E6F86F303E04319@fsi32.fsidp.insidefsi.com> Message-ID: On 3:50 pm 08/19/08 "Kevin Reiter" wrote: > Exchange Defender: http://www.exchangedefender.com > They offer a free trial. > (DISCLOSURE: I know Vlad) Thanks. Looks interesting.. if only they would have pricing information.. I don't even see how to sign up. :-) From chsnyder at gmail.com Wed Aug 20 12:21:10 2008 From: chsnyder at gmail.com (csnyder) Date: Wed, 20 Aug 2008 12:21:10 -0400 Subject: [nycbug-talk] Anti-spam services In-Reply-To: <5cb351577e24604b6e2843ac61e38fd8@stringsutils.com> References: <5cb351577e24604b6e2843ac61e38fd8@stringsutils.com> Message-ID: On Tue, Aug 19, 2008 at 1:49 PM, Francisco Reyes wrote: > Anyone happily using an anti-spam, at the MX level, service? > Tried Postini and although their price is very reasonable, $3/year/per > user, their interface leaves much to be desired. > > In particular I am looking for something simple enough that one could let a > non techie manage directly. > > One requirement is that it must support some form of Quarantine where the > users can check for valid messages and release them. > I've used Tuffmail since 1999. It's not overly simple--errs on the side of comprehensive--but you get all the tools you need to fight teh spam. I have plenty of non-techies using it, and they train their own spam filters, but I set up and manage the account settings in most cases. http://www.tuffmail.com/ I know the owner, he's also the engineer and it's a FreeBSD shop. Chris Snyder http://chxor.chxo.com/ From brian.gupta at gmail.com Wed Aug 20 15:20:51 2008 From: brian.gupta at gmail.com (Brian Gupta) Date: Wed, 20 Aug 2008 15:20:51 -0400 Subject: [nycbug-talk] Puppet user meetup. Message-ID: <5b5090780808201220i31954d2aycb7d9c63f9b3ee82@mail.gmail.com> Hey, if you are using puppet, and want to exchange best practices with other puppet users, a few of us are getting together tomorrow night around 7pm. Final details to follow, but it will most likely be somewhere accessible to Penn Station. (No idea where that would be as of yet. I am open to suggestions.) Cheers, Brian P.S. - Food and drink will be on the agenda, in addition to sharing puppet best practices. -- - Brian Gupta From brian.gupta at gmail.com Wed Aug 20 20:09:27 2008 From: brian.gupta at gmail.com (Brian Gupta) Date: Wed, 20 Aug 2008 20:09:27 -0400 Subject: [nycbug-talk] Puppet user meetup. In-Reply-To: <5b5090780808201220i31954d2aycb7d9c63f9b3ee82@mail.gmail.com> References: <5b5090780808201220i31954d2aycb7d9c63f9b3ee82@mail.gmail.com> Message-ID: <5b5090780808201709q65f7642fk1fd6a3d77b4cddc9@mail.gmail.com> Barring any other suggestions, I have reserved a table for 8 at Mustang Sally's at 7pm under the name Brian Gupta: http://www.mustangsallysny.com/ (28th and 7th) Please let me know if you are coming, so that I can adjust the reservation as necessary. Cheers, Brian P.S. - I have 6 people confirmed, and 2 people who have expressed interest. (8 total) So if you are interested in coming, please let me know ASAP. -- - Brian Gupta http://opensolaris.org/os/project/nycosug/ http://www.genunix.org/wiki/index.php/OpenSolaris_New_User_FAQ On Wed, Aug 20, 2008 at 3:20 PM, Brian Gupta wrote: > Hey, if you are using puppet, and want to exchange best practices with > other puppet users, a few of us are getting together tomorrow night > around 7pm. Final details to follow, but it will most likely be > somewhere accessible to Penn Station. (No idea where that would be as > of yet. I am open to suggestions.) > > Cheers, > Brian > > P.S. - Food and drink will be on the agenda, in addition to sharing > puppet best practices. > > -- > - Brian Gupta > -- - Brian Gupta http://opensolaris.org/os/project/nycosug/ http://www.genunix.org/wiki/index.php/OpenSolaris_New_User_FAQ From ike at lesmuug.org Thu Aug 21 05:57:55 2008 From: ike at lesmuug.org (Isaac Levy) Date: Thu, 21 Aug 2008 05:57:55 -0400 Subject: [nycbug-talk] Anti-spam services In-Reply-To: <5cb351577e24604b6e2843ac61e38fd8@stringsutils.com> References: <5cb351577e24604b6e2843ac61e38fd8@stringsutils.com> Message-ID: Hi Francisco, On Aug 19, 2008, at 1:49 PM, Francisco Reyes wrote: > Anyone happily using an anti-spam, at the MX level, service? > Tried Postini and although their price is very reasonable, $3/year/per > user, their interface leaves much to be desired. > > In particular I am looking for something simple enough that one > could let a > non techie manage directly. > > One requirement is that it must support some form of Quarantine > where the > users can check for valid messages and release them. I know it's not *quite* what you're looking for, but Loftmail's email service includes *very* good spam filtering . They're an OpenBSD shop, (I assume spamd is part of their system but I don't know), and the majority of the spam filtering is so good, I barely think about it. They also have custom rules and whitelisting etc... available through the webmail interface, (Horde, I believe). It's really astounding service for the price. (Bruno, one of the Loftmail owners, is of course a long-time NYC*BUG member!) I've run some of my most important email accounts through Loftmail for years now- (they used to be called BizIntegrators), and it's so good, I rarely even think about it. Rocket- .ike From ike at lesmuug.org Thu Aug 21 07:30:27 2008 From: ike at lesmuug.org (Isaac Levy) Date: Thu, 21 Aug 2008 07:30:27 -0400 Subject: [nycbug-talk] Soekris/PCEngines-ALIX USB Bug In-Reply-To: <489F520D.3030107@chrisbuechler.com> References: <5FCA2CF4-105C-4E7C-A10D-7E8D5EDC08C3@lesmuug.org> <4899EF4C.1070006@ceetonetechnology.com> <2A4DAE80-E680-4CC7-A955-DB3C113B2CDC@lesmuug.org> <489F520D.3030107@chrisbuechler.com> Message-ID: <80D62BEC-2654-43C3-A51E-7CC4A7EA36F8@lesmuug.org> Hi Chris, All, On Aug 10, 2008, at 4:39 PM, Chris Buechler wrote: > PCEngines ALIX Boards > Aside from the BIOS issues, which have largely been resolved, they're > great little boards. Thankfully to date they haven't had the same > issues > seen in the Soekris 5501, there have been a few hardware problems with > those that require shipping the boards back for repair. BIOS issues > are > easier to cope with. I'm wondering if anyone has a moment to shed some light the issues mentioned above with the Soekris 5501 boards? I've been using them for about 10 months, with no problems- they've been extremely reliable for me. (The inital BIOS sucked at release, but it all seems sane now....) Best, .ike PS: For reliability, sitting in the 'just plain works' category, I think the Soekris 4801 now gets to sit as my favorite computing device, ever :) From dlavigne6 at sympatico.ca Thu Aug 21 09:57:25 2008 From: dlavigne6 at sympatico.ca (dlavigne6 at sympatico.ca) Date: Thu, 21 Aug 2008 13:57:25 +0000 Subject: [nycbug-talk] BSDA at NYCBSDCon Message-ID: Hello everyone, I know several on this list are interested in taking the exam during the conference, so I'm sending a copy of the email I sent to the bsdcert mailing list: The BSDA will be available at NYCBSDCon (http://www.nycbsdcon.org). The exact times are yet to be determined pending confirmation of the conference schedule, but we are aiming for lunch time on Saturday the 11th and after the closing session on Sunday the 12th so conference attendees will not miss any talks. Note that you do not have to register for the conference to take the exam (though this will be a very good conference). Event details are here: https://register.bsdcertification.org//register/events/nycbsdcon You can register for a BSDCG ID, register to take the exam at this event, and pay for the exam using the links on the event details webpage. Hope to see many of you in NYC in October. Cheers, Dru From george at ceetonetechnology.com Thu Aug 21 10:34:54 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Thu, 21 Aug 2008 10:34:54 -0400 Subject: [nycbug-talk] BSDA at NYCBSDCon In-Reply-To: References: Message-ID: <48AD7D0E.7040506@ceetonetechnology.com> dlavigne6 at sympatico.ca wrote: > Hello everyone, > > I know several on this list are interested in taking the exam during the > conference, so I'm sending a copy of the email I sent to the bsdcert mailing > list: > > The BSDA will be available at NYCBSDCon (http://www.nycbsdcon.org). The > exact times are yet to be determined pending confirmation of the conference > schedule, but we are aiming for lunch time on Saturday the 11th and after > the closing session on Sunday the 12th so conference attendees will not miss > any talks. Note that you do not have to register for the conference to take > the exam (though this will be a very good conference). > > Event details are here: > > https://register.bsdcertification.org//register/events/nycbsdcon > > You can register for a BSDCG ID, register to take the exam at this event, > and pay for the exam using the links on the event details webpage. > > Hope to see many of you in NYC in October. Cool :) And as many of you are aware, we are arranging 'cram session' overviews of Unix topics Saturday. . . quick 15" classes on topics like "Unix Permissions" etc. I strongly encourage people to sign up. . . we have broke lots of new ground with NYCBSDCon before, and a strong turnout for the BSD Cert exam will really propel the cert forward in a big way. George From lists at stringsutils.com Fri Aug 22 11:40:02 2008 From: lists at stringsutils.com (Francisco Reyes) Date: Fri, 22 Aug 2008 11:40:02 -0400 Subject: [nycbug-talk] Anti-spam services In-Reply-To: References: <5cb351577e24604b6e2843ac61e38fd8@stringsutils.com> Message-ID: <3f8303be393ec77a7abaf26a8cdb85ff@stringsutils.com> On 5:57 am 08/21/08 Isaac Levy wrote: > I know it's not *quite* what you're looking for, but Loftmail's email > service includes *very* good spam filtering . I guess I will have to talk to Bruno. The client that is complaining about spam is hosted with loftmail. :-) Maybe I have not looked throught their interface to setup all the right knobs. Will definitely check this. So far looking for a service has been an interesting exercise. Most companies don't even list prices. As affordable as Postini is, I just don't see how people can tolerate such a horrible interface. From george at ceetonetechnology.com Sat Aug 23 21:09:07 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Sat, 23 Aug 2008 21:09:07 -0400 Subject: [nycbug-talk] Anti-spam services In-Reply-To: <3f8303be393ec77a7abaf26a8cdb85ff@stringsutils.com> References: <5cb351577e24604b6e2843ac61e38fd8@stringsutils.com> <3f8303be393ec77a7abaf26a8cdb85ff@stringsutils.com> Message-ID: <48B0B4B3.3030408@ceetonetechnology.com> Francisco Reyes wrote: > On 5:57 am 08/21/08 Isaac Levy wrote: >> I know it's not *quite* what you're looking for, but Loftmail's email >> service includes *very* good spam filtering . > > I guess I will have to talk to Bruno. > The client that is complaining about spam is hosted with loftmail. :-) > Maybe I have not looked throught their interface to setup all the right > knobs. Will definitely check this. > Hmmm. . . I'm surprised. . . We have used Loftmail for years, and they've been excellent for a long while. I mean, my address (es) are all over the place, and I get two or three spams a day. . . I maintained a blacklist with them for a while, but I rarely look at it now. The only issue I have, which we're all aware of, is the delays of spamd, which can be a hassle since some providers don't seem to get the idea of smtp standards. . . But I'd recommend having an offline conversation with Loftmail, since they are receptive. > So far looking for a service has been an interesting exercise. Most > companies don't even list prices. As affordable as Postini is, I just don't > see how people can tolerate such a horrible interface. > I know it's a jumbled world there. . . George From flcora at gmail.com Sun Aug 24 01:32:17 2008 From: flcora at gmail.com (Faysal Cora) Date: Sun, 24 Aug 2008 01:32:17 -0400 Subject: [nycbug-talk] Depenguinator Message-ID: <1d3e12120808232232t217d7911x8ed1b42fe280dc1a@mail.gmail.com> Replace Ubuntu with FreeBSD remotely. This would be a great April fool's joke. :) http://www.daemonology.net/blog/2008-01-29-depenguinator-2.0.html -------------- next part -------------- An HTML attachment was scrubbed... URL: From dan at langille.org Sun Aug 24 08:35:26 2008 From: dan at langille.org (Dan Langille) Date: Sun, 24 Aug 2008 08:35:26 -0400 Subject: [nycbug-talk] Depenguinator In-Reply-To: <1d3e12120808232232t217d7911x8ed1b42fe280dc1a@mail.gmail.com> References: <1d3e12120808232232t217d7911x8ed1b42fe280dc1a@mail.gmail.com> Message-ID: <48B1558E.2060206@langille.org> Faysal Cora wrote: > Replace Ubuntu with FreeBSD remotely. This would be a great April > fool's joke. :) > http://www.daemonology.net/blog/2008-01-29-depenguinator-2.0.html What would be the joke? From carton at Ivy.NET Sun Aug 24 15:11:21 2008 From: carton at Ivy.NET (Miles Nordin) Date: Sun, 24 Aug 2008 15:11:21 -0400 Subject: [nycbug-talk] Depenguinator In-Reply-To: <48B1558E.2060206@langille.org> (Dan Langille's message of "Sun, 24 Aug 2008 08:35:26 -0400") References: <1d3e12120808232232t217d7911x8ed1b42fe280dc1a@mail.gmail.com> <48B1558E.2060206@langille.org> Message-ID: >>>>> "dl" == Dan Langille writes: dl> What would be the joke? opengl apps don't work any more, fsck takes forever every time you yank the cord, suspend2ram doesn't work and hibernate no longer exists, mysql and java run much slower, xen domU's don't come up any more, firewire doesn't work, all your curses apps are no longer i18n'd, it's much harder to keep software current from security vulnerabilities, and only one of the five drives in your sata port multiplier case works. LOLaprilfoolz!!! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 304 bytes Desc: not available URL: From pete at nomadlogic.org Mon Aug 25 13:01:42 2008 From: pete at nomadlogic.org (Pete Wright) Date: Mon, 25 Aug 2008 13:01:42 -0400 Subject: [nycbug-talk] Depenguinator In-Reply-To: References: <1d3e12120808232232t217d7911x8ed1b42fe280dc1a@mail.gmail.com> <48B1558E.2060206@langille.org> Message-ID: <20080825170139.GA12315@sunset.nomadlogic.org> On Sun, Aug 24, 2008 at 03:11:21PM -0400, Miles Nordin wrote: > >>>>> "dl" == Dan Langille writes: > > dl> What would be the joke? > > opengl apps don't work any more, fsck takes forever every time you > yank the cord, suspend2ram doesn't work and hibernate no longer > exists, mysql and java run much slower, xen domU's don't come up any > more, firewire doesn't work, all your curses apps are no longer > i18n'd, it's much harder to keep software current from security > vulnerabilities, and only one of the five drives in your sata port > multiplier case works. LOLaprilfoolz!!! oh i get the joke...talk at nycbug is now nylug. thanks! --pete -- ~~oO00Oo~~ Peter Wright pete at nomadlogic.org www.nomadlogic.org/~pete 310.869.9459 From ike at lesmuug.org Wed Aug 27 11:05:33 2008 From: ike at lesmuug.org (Isaac Levy) Date: Wed, 27 Aug 2008 11:05:33 -0400 Subject: [nycbug-talk] Defcon News Blurbs In-Reply-To: References: Message-ID: <19BB3777-BD8E-4D44-8D02-CDECD588C23A@lesmuug.org> Well I'll be, On Aug 11, 2008, at 9:55 PM, Alex Pilosov wrote: > You forgot this one: > > http://www.forbes.com/security/2008/08/10/internet-traffic-routing-tech-cz_tb_0810defcon.html > > -alex our very own local Alex Pilosov, 'Mr. Nyetwork' made slashdot with a fun one: "The Internet's Biggest Security Hole Revealed" http://it.slashdot.org/it/08/08/27/0141247.shtml cool :) Rocket- .ike From lists at stringsutils.com Wed Aug 27 11:22:04 2008 From: lists at stringsutils.com (Francisco Reyes) Date: Wed, 27 Aug 2008 11:22:04 -0400 Subject: [nycbug-talk] Internet's Biggest Security Hole - research by Alex Pilosof Message-ID: <28cefc0b15514191f4309b01458692fa@stringsutils.com> ISP CEO during the day and it seems security researcher at night... :-) our Alex Pilosoft is featured in an article for having discovered "The Internet's Biggest Security Hole" with Anton "Tony" Kapela http://blog.wired.com/27bstroke6/2008/08/revealed-the-in.html From george at ceetonetechnology.com Wed Aug 27 11:57:55 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Wed, 27 Aug 2008 11:57:55 -0400 Subject: [nycbug-talk] Sept meeting Message-ID: <48B57983.6080806@ceetonetechnology.com> Next week's meeting will be exclusively about NYCBSDCon 2008. We have a bunch of things to go over. . . sponsor status, advertising and publicity, etc. We particularly want to encourage students to attend. . . as we'll have a limited time to hit the campuses. George From george at ceetonetechnology.com Wed Aug 27 20:15:09 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Wed, 27 Aug 2008 20:15:09 -0400 Subject: [nycbug-talk] CVS questions Message-ID: <48B5EE0D.4060507@ceetonetechnology.com> 1. Is there an OpenOffice add-on that integrates CVS? I know we're dealing with binaries here, but I know there is some discussion on this around. 2. If you are using multiple private keys and the non default one is used for remote cvs over ssh, is it possible to specify a different key? Please. . . don't tell me SVN or whatever. . . :) TIA George From okan at demirmen.com Wed Aug 27 20:49:18 2008 From: okan at demirmen.com (Okan Demirmen) Date: Wed, 27 Aug 2008 20:49:18 -0400 Subject: [nycbug-talk] CVS questions In-Reply-To: <48B5EE0D.4060507@ceetonetechnology.com> References: <48B5EE0D.4060507@ceetonetechnology.com> Message-ID: <20080828004918.GA7689@clam.khaoz.org> On Wed 2008.08.27 at 20:15 -0400, George Rosamond wrote: > 1. Is there an OpenOffice add-on that integrates CVS? I know we're > dealing with binaries here, but I know there is some discussion on this > around. no idea. > 2. If you are using multiple private keys and the non default one is > used for remote cvs over ssh, is it possible to specify a different key? see ssh_config(5). > Please. . . don't tell me SVN or whatever. . . :) > > TIA > > George > _______________________________________________ > talk mailing list > talk at lists.nycbug.org > http://lists.nycbug.org/mailman/listinfo/talk From george at ceetonetechnology.com Wed Aug 27 20:54:42 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Wed, 27 Aug 2008 20:54:42 -0400 Subject: [nycbug-talk] CVS questions In-Reply-To: <20080828004918.GA7689@clam.khaoz.org> References: <48B5EE0D.4060507@ceetonetechnology.com> <20080828004918.GA7689@clam.khaoz.org> Message-ID: <48B5F752.3090203@ceetonetechnology.com> Okan Demirmen wrote: > On Wed 2008.08.27 at 20:15 -0400, George Rosamond wrote: >> 1. Is there an OpenOffice add-on that integrates CVS? I know we're >> dealing with binaries here, but I know there is some discussion on this >> around. > > no idea. > >> 2. If you are using multiple private keys and the non default one is >> used for remote cvs over ssh, is it possible to specify a different key? > > see ssh_config(5). I use -i for different identity files all the time with SSH. . . so I assume I should be able to do the same with CVS. . . oh, in my environment variables. . . right? Ahhh. . . George From george at ceetonetechnology.com Wed Aug 27 20:56:54 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Wed, 27 Aug 2008 20:56:54 -0400 Subject: [nycbug-talk] CVS questions In-Reply-To: <48B5F752.3090203@ceetonetechnology.com> References: <48B5EE0D.4060507@ceetonetechnology.com> <20080828004918.GA7689@clam.khaoz.org> <48B5F752.3090203@ceetonetechnology.com> Message-ID: <48B5F7D6.4010204@ceetonetechnology.com> George Rosamond wrote: > Okan Demirmen wrote: >> On Wed 2008.08.27 at 20:15 -0400, George Rosamond wrote: >>> 1. Is there an OpenOffice add-on that integrates CVS? I know we're >>> dealing with binaries here, but I know there is some discussion on this >>> around. >> no idea. >> >>> 2. If you are using multiple private keys and the non default one is >>> used for remote cvs over ssh, is it possible to specify a different key? >> see ssh_config(5). > > I use -i for different identity files all the time with SSH. . . so I > assume I should be able to do the same with CVS. . . oh, in my > environment variables. . . right? > > Ahhh. . . Oh, duh. . . got it. Thanks Okan. I thinking about the problem wrong. Multiple identity files in ssh_config. George From okan at demirmen.com Wed Aug 27 21:39:35 2008 From: okan at demirmen.com (Okan Demirmen) Date: Wed, 27 Aug 2008 21:39:35 -0400 Subject: [nycbug-talk] CVS questions In-Reply-To: <48B5F7D6.4010204@ceetonetechnology.com> References: <48B5EE0D.4060507@ceetonetechnology.com> <20080828004918.GA7689@clam.khaoz.org> <48B5F752.3090203@ceetonetechnology.com> <48B5F7D6.4010204@ceetonetechnology.com> Message-ID: <20080828013935.GA25157@clam.khaoz.org> On Wed 2008.08.27 at 20:56 -0400, George Rosamond wrote: > George Rosamond wrote: > > Okan Demirmen wrote: > >> On Wed 2008.08.27 at 20:15 -0400, George Rosamond wrote: > >>> 1. Is there an OpenOffice add-on that integrates CVS? I know we're > >>> dealing with binaries here, but I know there is some discussion on this > >>> around. > >> no idea. > >> > >>> 2. If you are using multiple private keys and the non default one is > >>> used for remote cvs over ssh, is it possible to specify a different key? > >> see ssh_config(5). > > > > I use -i for different identity files all the time with SSH. . . so I > > assume I should be able to do the same with CVS. . . oh, in my > > environment variables. . . right? > > > > Ahhh. . . > > Oh, duh. . . got it. let the wheel turn, and he'll figure it out... > Thanks Okan. > > I thinking about the problem wrong. > > Multiple identity files in ssh_config. kinda. sure you can use multiple identity files, but i would create a new block instead. From yds at CoolRat.org Thu Aug 28 05:15:58 2008 From: yds at CoolRat.org (Yarema) Date: Thu, 28 Aug 2008 05:15:58 -0400 Subject: [nycbug-talk] Slab Allocator Message-ID: <48B66CCE.3060506@CoolRat.org> A while ago I read on Matt Dillon's DragonFly diary http://www.DragonFlyBSD.org/status/diary.shtml that # DragonFly now has slab allocator for the kernel! The allocator is about 1/3 the size of FreeBSD-5's slab allocator and features per-cpu isolation, mutexless operation, cache sensitivity (locality of reference), and optimized zeroing code. # The core of the slab allocator is MP safe but at the moment we still use the malloc_type structure for statistics reporting which is not yet MP safe, and the backing store (KVM routines) are not MP safe. Even, so making the whole thing MP safe is not expected to be difficult. 1/3 the size of FreeBSD-5's slab allocator?! that's awesome! DragonFly rulez! er, WTF is a Slab Allocator? it's still over my head, but here's where it all started: http://Blogs.Sun.com/bonwick/en_US/category/Slab+Allocator ... by the creator of ZFS no less. Good story. -- Yarema From sjt.kar at gmail.com Thu Aug 28 05:33:57 2008 From: sjt.kar at gmail.com (Sujit Karataparambil) Date: Thu, 28 Aug 2008 15:03:57 +0530 Subject: [nycbug-talk] Slab Allocator In-Reply-To: <48B66CCE.3060506@CoolRat.org> References: <48B66CCE.3060506@CoolRat.org> Message-ID: <921ca19c0808280233j595c0ab6y6580bd464198324a@mail.gmail.com> dragonfly bsd was originally formed to take care NUMA, Core based architectures form freebsd 4.x. So you would expect this sort of an comparision. donot know for sure but the code then was forked to allow per-cpu, per-core systems to be given an better shot than then GIANT lock. regards, Sujit On 8/28/08, Yarema wrote: > A while ago I read on Matt Dillon's DragonFly diary > http://www.DragonFlyBSD.org/status/diary.shtml > that > > # DragonFly now has slab allocator for the kernel! The allocator is > about 1/3 the size of FreeBSD-5's slab allocator and features per-cpu > isolation, mutexless operation, cache sensitivity (locality of > reference), and optimized zeroing code. > # The core of the slab allocator is MP safe but at the moment we still > use the malloc_type structure for statistics reporting which is not yet > MP safe, and the backing store (KVM routines) are not MP safe. Even, so > making the whole thing MP safe is not expected to be difficult. > > 1/3 the size of FreeBSD-5's slab allocator?! that's awesome! DragonFly > rulez! er, WTF is a Slab Allocator? > > it's still over my head, but here's where it all started: > http://Blogs.Sun.com/bonwick/en_US/category/Slab+Allocator > ... by the creator of ZFS no less. Good story. > > -- > Yarema > _______________________________________________ > talk mailing list > talk at lists.nycbug.org > http://lists.nycbug.org/mailman/listinfo/talk > -- --linux(2.4/2.6),bsd(4.5.x+),solaris(2.5+) From okan at demirmen.com Thu Aug 28 09:11:23 2008 From: okan at demirmen.com (Okan Demirmen) Date: Thu, 28 Aug 2008 09:11:23 -0400 Subject: [nycbug-talk] CVS questions In-Reply-To: <20080828013935.GA25157@clam.khaoz.org> References: <48B5EE0D.4060507@ceetonetechnology.com> <20080828004918.GA7689@clam.khaoz.org> <48B5F752.3090203@ceetonetechnology.com> <48B5F7D6.4010204@ceetonetechnology.com> <20080828013935.GA25157@clam.khaoz.org> Message-ID: <20080828131123.GA20706@clam.khaoz.org> On Wed 2008.08.27 at 21:39 -0400, Okan Demirmen wrote: > On Wed 2008.08.27 at 20:56 -0400, George Rosamond wrote: > > George Rosamond wrote: > > > Okan Demirmen wrote: > > >> On Wed 2008.08.27 at 20:15 -0400, George Rosamond wrote: > > >>> 1. Is there an OpenOffice add-on that integrates CVS? I know we're > > >>> dealing with binaries here, but I know there is some discussion on this > > >>> around. > > >> no idea. > > >> > > >>> 2. If you are using multiple private keys and the non default one is > > >>> used for remote cvs over ssh, is it possible to specify a different key? > > >> see ssh_config(5). > > > > > > I use -i for different identity files all the time with SSH. . . so I > > > assume I should be able to do the same with CVS. . . oh, in my > > > environment variables. . . right? > > > > > > Ahhh. . . > > > > Oh, duh. . . got it. > > let the wheel turn, and he'll figure it out... joking of course ;) > > Thanks Okan. > > > > I thinking about the problem wrong. > > > > Multiple identity files in ssh_config. > > kinda. sure you can use multiple identity files, but i would create a > new block instead. to take this one step further; it should be reminded that using multiple identify files is fine, but know that they will count against attempted tries. so if a sshd allows 3 attempts and you have, say 5 keys, ssh will try the identities in order - you'll see where this can be problematic. the same rule applies if one is using ssh-agent; sure you can load 20 keys in there, but something else has to tell the ssh client which identity to send, usually in a ssh_config(5) block. my point is that ssh_config(5) is extremely useful, of course for far more than just managing keys; i only mention this for i have yet to see the masses understand its usefulness yet....or maybe i'm mis-informed. cheers, okan From marco at metm.org Thu Aug 28 10:23:23 2008 From: marco at metm.org (Marco Scoffier) Date: Thu, 28 Aug 2008 10:23:23 -0400 Subject: [nycbug-talk] CVS questions In-Reply-To: <20080828131123.GA20706@clam.khaoz.org> References: <48B5EE0D.4060507@ceetonetechnology.com> <20080828004918.GA7689@clam.khaoz.org> <48B5F752.3090203@ceetonetechnology.com> <48B5F7D6.4010204@ceetonetechnology.com> <20080828013935.GA25157@clam.khaoz.org> <20080828131123.GA20706@clam.khaoz.org> Message-ID: <48B6B4DB.8010803@metm.org> Okan Demirmen wrote: > my point is that ssh_config(5) is extremely useful, of course for far > more than just managing keys; i only mention this for i have yet to see > the masses understand its usefulness yet....or maybe i'm mis-informed. > I have to concur. I log into multiple machines which run ssh on different ports and have svn repositories I have to access using svn+ssh. I used to have a bunch of one-line 'ssh -p 1234 $*' for the different machines, now I have a ssh_config set up and everything works like magic :) it can even replace the hosts file for giving nicknames to machines if you only ssh there. -- Marco From mspitzer at gmail.com Thu Aug 28 12:52:42 2008 From: mspitzer at gmail.com (Marc Spitzer) Date: Thu, 28 Aug 2008 12:52:42 -0400 Subject: [nycbug-talk] Slab Allocator In-Reply-To: <48B66CCE.3060506@CoolRat.org> References: <48B66CCE.3060506@CoolRat.org> Message-ID: <8c50a3c30808280952k762578f1p659757f392fc7a51@mail.gmail.com> On Thu, Aug 28, 2008 at 5:15 AM, Yarema wrote: > A while ago I read on Matt Dillon's DragonFly diary > http://www.DragonFlyBSD.org/status/diary.shtml > that > > # DragonFly now has slab allocator for the kernel! The allocator is > about 1/3 the size of FreeBSD-5's slab allocator and features per-cpu > isolation, mutexless operation, cache sensitivity (locality of > reference), and optimized zeroing code. > # The core of the slab allocator is MP safe but at the moment we still > use the malloc_type structure for statistics reporting which is not yet > MP safe, and the backing store (KVM routines) are not MP safe. Even, so > making the whole thing MP safe is not expected to be difficult. > > 1/3 the size of FreeBSD-5's slab allocator?! that's awesome! DragonFly > rulez! er, WTF is a Slab Allocator? > Iff I remember correctly, it is a in kernel memory allocator that operates under the assumption that I need to allocate lots of things that are the same size. And that a good way to do this is to request a "slab" of memory from the memory allocator thingie and then manage it internally. If the kernel was a deli think of it like the cornedbeef in the steam table. You the deli guy manage the sandwitches locally but when you talk to the kitchen you can only ask for things in terms of a cornedbeef, or brisket, not in terms of I need 20 sandwitches. Let this be a lesson to you do not answer email when hungry. marc > it's still over my head, but here's where it all started: > http://Blogs.Sun.com/bonwick/en_US/category/Slab+Allocator > ... by the creator of ZFS no less. Good story. > > -- > Yarema > _______________________________________________ > talk mailing list > talk at lists.nycbug.org > http://lists.nycbug.org/mailman/listinfo/talk > -- Freedom is nothing but a chance to be better. Albert Camus From yds at CoolRat.org Thu Aug 28 17:01:26 2008 From: yds at CoolRat.org (Yarema) Date: Thu, 28 Aug 2008 17:01:26 -0400 Subject: [nycbug-talk] Slab Allocator In-Reply-To: <8c50a3c30808280952k762578f1p659757f392fc7a51@mail.gmail.com> References: <48B66CCE.3060506@CoolRat.org> <8c50a3c30808280952k762578f1p659757f392fc7a51@mail.gmail.com> Message-ID: <48B71226.1030501@CoolRat.org> Marc Spitzer wrote: > On Thu, Aug 28, 2008 at 5:15 AM, Yarema wrote: >> A while ago I read on Matt Dillon's DragonFly diary >> http://www.DragonFlyBSD.org/status/diary.shtml >> that >> >> # DragonFly now has slab allocator for the kernel! The allocator is >> about 1/3 the size of FreeBSD-5's slab allocator and features per-cpu >> isolation, mutexless operation, cache sensitivity (locality of >> reference), and optimized zeroing code. >> # The core of the slab allocator is MP safe but at the moment we still >> use the malloc_type structure for statistics reporting which is not yet >> MP safe, and the backing store (KVM routines) are not MP safe. Even, so >> making the whole thing MP safe is not expected to be difficult. >> >> 1/3 the size of FreeBSD-5's slab allocator?! that's awesome! DragonFly >> rulez! er, WTF is a Slab Allocator? >> > > If I remember correctly, it is a in kernel memory allocator that > operates under the assumption that I need to allocate lots of things > that are the same size. And that a good way to do this is to request > a "slab" of memory from the memory allocator thingie and then manage > it internally. If the kernel was a deli think of it like the > cornedbeef in the steam table. You the deli guy manage the > sandwitches locally but when you talk to the kitchen you can only ask > for things in terms of a cornedbeef, or brisket, not in terms of I > need 20 sandwitches. > > Let this be a lesson to you do not answer email when hungry. > > marc > >> it's still over my head, but here's where it all started: >> http://Blogs.Sun.com/bonwick/en_US/category/Slab+Allocator >> ... by the creator of ZFS no less. Good story. Seems like the Slab Allocator is forever doomed to being associated with food from the very inception of its name. :) Good deli analogy, BTW. Now I get it much better. Explains why there are Slab Allocators all kinds of file systems as well as kernels. I seem to recall reading that the CODA slab allocator was particularly horrendous and full of "swill". -- Yarema From o_sleep at belovedarctos.com Thu Aug 28 22:30:20 2008 From: o_sleep at belovedarctos.com (No Sleep) Date: Thu, 28 Aug 2008 22:30:20 -0400 Subject: [nycbug-talk] Slab Allocator In-Reply-To: <48B71226.1030501@CoolRat.org> References: <48B66CCE.3060506@CoolRat.org> <8c50a3c30808280952k762578f1p659757f392fc7a51@mail.gmail.com> <48B71226.1030501@CoolRat.org> Message-ID: Yarema wrote: Seems like the Slab Allocator is forever doomed to being associated with food from the very inception of its name. I still think of popcorn whenever anyone mentions the kernel. -Bjorn -------------- next part -------------- An HTML attachment was scrubbed... URL: From mspitzer at gmail.com Thu Aug 28 18:24:56 2008 From: mspitzer at gmail.com (Marc Spitzer) Date: Thu, 28 Aug 2008 18:24:56 -0400 Subject: [nycbug-talk] Slab Allocator In-Reply-To: <48B71226.1030501@CoolRat.org> References: <48B66CCE.3060506@CoolRat.org> <8c50a3c30808280952k762578f1p659757f392fc7a51@mail.gmail.com> <48B71226.1030501@CoolRat.org> Message-ID: <8c50a3c30808281524w480d3060qeaa9eca6bf42967b@mail.gmail.com> On Thu, Aug 28, 2008 at 5:01 PM, Yarema wrote: > > Seems like the Slab Allocator is forever doomed to being associated with > food from the very inception of its name. :) Good deli analogy, BTW. > Now I get it much better. Explains why there are Slab Allocators all > kinds of file systems as well as kernels. I seem to recall reading that > the CODA slab allocator was particularly horrendous and full of "swill". What can I say my genius is is my belly. marc > > > -- > Yarema > -- Freedom is nothing but a chance to be better. Albert Camus From ike at lesmuug.org Fri Aug 29 12:16:23 2008 From: ike at lesmuug.org (Isaac Levy) Date: Fri, 29 Aug 2008 12:16:23 -0400 Subject: [nycbug-talk] A Friday Brain-Teaser, Fwd: (Theory) The BGP exploit: Effects on Tor routing and overall anonymity? Message-ID: <0B0BAC1C-1298-45EF-8604-7DD08C83A011@lesmuug.org> Hi All, So this is a bit of a cross-post, I thought it was relevant/ interesting, since we've all been buzzing about our very own Alex, and the wild Defcon demo on scary BGP re-routing; and many folks here have an interest in the TOR network. ike-summary: - Essentially, the first poster asks if the BGP attack could be used to break TOR anonynimity. - The second poster explains a quick no, and then a sort of 'yes but it's not in the realm of sanity', in good detail. Interesting stuff- sorry again for the cross-post! Best, .ike From the TOR project 'or-talk' mailing list, Their mailing list can be found over here, for the record: On Aug 29, 2008, at 1:21 AM, F. Fox wrote: > Once I read about the recent BGP exploit ( > http://blog.wired.com/27bstroke6/2008/08/revealed-the-in.html ) - > which > has the potential to re-route the traffic of millions of users - I > had a > question, from a theoretical standpoint: > > If such siphoning drew in traffic passing in between Tor nodes, would > this have an effect on reducing anonymity for the users having their > traffic relayed by these nodes? If so, how? > > - -- > F. Fox On Aug 29, 2008, at 1:46 AM, John Brooks responded: > The short answer is no, not much. The long answer is a lot longer > than that, so get ready :P > > This would serve the person intercepting the traffic in near exactly > the same way it does the operator of the node - entry nodes know the > client, middle nodes know the entry and exit nodes, exit nodes know > the destination (and the traffic to that destination). You would > still need to intercept a significant amount of nodes before being > able to break anonymity and tell which users are responsible for > what traffic - which is a problem because the entire reason this > attack works is that it targets more specific IP blocks. That many > announcements (for various nodes) would be pretty easy to see. If an > attacker were able to intercept traffic on the entry and exit nodes, > or the client and destination, they could use timing and bandwidth > correlations to tell (with high probability) that this client is > accessing this destination. But this is no different from an > attacker with control of the entry node or exit/destination. > > The only way to make use of it that doesn't involve guessing at what > nodes are in use would be to start at one end and work backwards or > forwards in realtime. Essentially, you start by intercepting traffic > to a target destination, then intercept traffic to the exit node > contacting that destination, then intercept traffic to the middle > node contacting that exit, then the entry node contacting that > middle node, and finally to the client. The problem here is that > you'd need a consistant (and obvious) traffic pattern sustained > throughout that time (which would be long, due to the large amount > of traffic most nodes handle and that BGP is not instantaneous), > which is not generally true of HTTP requests. The complexity of such > an attack would be problematic, and it still involves quite a lot of > guesswork. > > So no, this isn't a significant risk to tor anonymity, it's at best > a quicker way to intercept traffic and follow a node path to its > source, and I would be amazed if that were pulled off successfully. > Remember that this exploit only allows you to intercept traffic *to* > a specific destination, and in that situation you have no more > information than the real destination does (less, in fact, because > you don't see the traffic going the other direction unless you > intercept that too). > > - John Brooks From alex at pilosoft.com Fri Aug 29 12:32:02 2008 From: alex at pilosoft.com (Alex Pilosov) Date: Fri, 29 Aug 2008 12:32:02 -0400 (EDT) Subject: [nycbug-talk] A Friday Brain-Teaser, Fwd: (Theory) The BGP exploit: Effects on Tor routing and overall anonymity? In-Reply-To: <0B0BAC1C-1298-45EF-8604-7DD08C83A011@lesmuug.org> Message-ID: On Fri, 29 Aug 2008, Isaac Levy wrote: > Hi All, > > So this is a bit of a cross-post, I thought it was relevant/ > interesting, since we've all been buzzing about our very own Alex, and > the wild Defcon demo on scary BGP re-routing; and many folks here have > an interest in the TOR network. > > ike-summary: > > - Essentially, the first poster asks if the BGP attack could be used to > break TOR anonynimity. > > - The second poster explains a quick no, and then a sort of 'yes but > it's not in the realm of sanity', in good detail. The second poster is correct. -alex From george at ceetonetechnology.com Fri Aug 29 15:47:47 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Fri, 29 Aug 2008 15:47:47 -0400 Subject: [nycbug-talk] NYCBSDCon 2008 update Message-ID: <48B85263.50209@ceetonetechnology.com> We are posed to have the schedule/speakers posted in the next week, plus have registration open. The site now has two color fliers for download. . . they print fine in b/w also. We strongly encourage everyone to download a flier and make some copies to get around. . . and if possible, if anyone with access to a photocopier could bring copies to the meeting Wednesday for others who do not have photocopier access. Pricing is the same as years past, $95, which considering inflation, is a pretty nice deal. And of course the conference includes breakfast and lunch on both Saturday and Sunday. The only change to the pricing is that we are opening up a discounted registration fee for *all* students at $50, which is the fee for Columbia students/faculty/staff. A number of people at various campuses are speaking offlist about this. . . and anyone on a campus should contact me offlist if interested in getting the word out on campuses. We are very excited for a number of reasons this year, but most importantly since the track record of the conference speaks for itself. . . NYCBSDCon has built up a lot of credibility over the past few years. It meant an overwhelming number of speaker proposals. That credibility also translated into a particularly impressive list of sponsors this year. . . thanks to all who helped out on this end. You know who you are, even if we don't. :) Additionally, the schedule is very strong this year. The meetings reflect a lot of the vital work happening in all the BSD projects right now, particularly on file systems (hint). And of course, Maryland's own Jason Dixon will once again keep us entertained on the theme of licensing, as he did so successfully last time with his "BSD is Dying" presentation. Or rather performance. For those who missed him in 2006 http://www.nycbsdcon.org/2006/speakers.html#Dixon. Other quick things to note: * Both FreeBSD and NetBSD are having developer summits of one sort of another. The contacts are each project are gnn@ for FreeBSD and JSchauma@ for NetBSD * BSDTalk's Will Blackmon will be live at the conference and broadcasting to his podcast * BSD Certification exam sessions are taking place, maybe both on Saturday and Sunday. We will also be having some loose overviews of Unix concepts to assist those in preparing in the BoF room. SK: do we need more volunteers on that? Final note: this coming Wednesday's meeting will be focused on reviewing and building the conference. . . so if you want to be a part of that discussion, we strongly suggest you show up. George From george at ceetonetechnology.com Fri Aug 29 16:36:05 2008 From: george at ceetonetechnology.com (George Rosamond) Date: Fri, 29 Aug 2008 16:36:05 -0400 Subject: [nycbug-talk] NYCBSDCon 2008 update In-Reply-To: <48B85263.50209@ceetonetechnology.com> References: <48B85263.50209@ceetonetechnology.com> Message-ID: <48B85DB5.3040704@ceetonetechnology.com> > * BSDTalk's Will Blackmon will be live at the conference and > broadcasting to his podcast I purposely butchered "Backman" to make sure that Ray the Slacker was reading this list. Sorry Thomas and Will. It's official. . . Ray is awake. George From nycbug at cyth.net Fri Aug 29 16:47:52 2008 From: nycbug at cyth.net (Ray Lai) Date: Fri, 29 Aug 2008 16:47:52 -0400 Subject: [nycbug-talk] NYCBSDCon 2008 update In-Reply-To: <48B85DB5.3040704@ceetonetechnology.com> References: <48B85263.50209@ceetonetechnology.com> <48B85DB5.3040704@ceetonetechnology.com> Message-ID: <7765c0380808291347o60ef6a50o6c4e25216f8395f4@mail.gmail.com> *YAWN* On Fri, Aug 29, 2008 at 4:36 PM, George Rosamond wrote: > > >> * BSDTalk's Will Blackmon will be live at the conference and >> broadcasting to his podcast > > I purposely butchered "Backman" to make sure that Ray the Slacker was > reading this list. > > Sorry Thomas and Will. > > It's official. . . Ray is awake. > > George > _______________________________________________ > talk mailing list > talk at lists.nycbug.org > http://lists.nycbug.org/mailman/listinfo/talk > From mspitzer at gmail.com Thu Aug 28 20:58:54 2008 From: mspitzer at gmail.com (Marc Spitzer) Date: Thu, 28 Aug 2008 20:58:54 -0400 Subject: [nycbug-talk] waaayyyyy off topic, but funny Message-ID: <8c50a3c30808281758x7b7c31b0i82ef6e45313fa620@mail.gmail.com> I came across this today http://www.youtube.com/watch?v=NyD3H4cnwvA If you were ever forced to sing koumbya its worth a watch marc -- Freedom is nothing but a chance to be better. Albert Camus From bonsaime at gmail.com Sat Aug 30 01:09:12 2008 From: bonsaime at gmail.com (Jesse Callaway) Date: Sat, 30 Aug 2008 01:09:12 -0400 Subject: [nycbug-talk] CVS questions In-Reply-To: <48B6B4DB.8010803@metm.org> References: <48B5EE0D.4060507@ceetonetechnology.com> <20080828004918.GA7689@clam.khaoz.org> <48B5F752.3090203@ceetonetechnology.com> <48B5F7D6.4010204@ceetonetechnology.com> <20080828013935.GA25157@clam.khaoz.org> <20080828131123.GA20706@clam.khaoz.org> <48B6B4DB.8010803@metm.org> Message-ID: On Thu, Aug 28, 2008 at 10:23 AM, Marco Scoffier wrote: > Okan Demirmen wrote: >> my point is that ssh_config(5) is extremely useful, of course for far >> more than just managing keys; i only mention this for i have yet to see >> the masses understand its usefulness yet....or maybe i'm mis-informed. >> > I have to concur. I log into multiple machines which run ssh on > different ports and have svn repositories I have to access using > svn+ssh. I used to have a bunch of one-line 'ssh -p 1234 $*' for the > different machines, now I have a ssh_config set up and everything works > like magic :) it can even replace the hosts file for giving nicknames to > machines if you only ssh there. > > -- > Marco > _______________________________________________ > talk mailing list > talk at lists.nycbug.org > http://lists.nycbug.org/mailman/listinfo/talk > Whoa, really? There's profiles with alias hostnames? Cool... maybe I should read the documentation on this thing ; ) It seems I learn more and more about SSH and how to use it... when will I finally learn it all? -jesse