Berkeley CSUA MOTD:1998:July:27 Monday <Sunday, Tuesday>
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
1998/7/27 [Academia/Berkeley/CSUA/Motd] UID:14399 Activity:moderate
7/27    Mommy, where's the old motd?
        \_ The old motd can't live here any more, honey.
1998/7/27-29 [Computer/SW/Security, Computer/SW/Unix] UID:14400 Activity:high
7/27    One of the instructional computers was found cracked and was
        possibly running a sniffer. Since the machine in question was
        on the 43 net, soda accounts might have been compr[o]mised.
        \_ are there political problems w/ turning off rsh telnet and
          so on (in favor of ssh)
          \_ Is that a pretty elitist point of view?  Maybe we should just
             leave rsh/telnet enabled, but force them to use a one-time-use
             password scheme.
          \_ lots of people don't access to ssh.
          \_ lots of people don't [have] access to ssh.
          \_ SSH does not work well with some corporate firewalls
          \_ A more 3l33t plan would be to unplug soda's net connection, and
             have all interaction with the machine be via hardwired TVI 920
             terminals.  All the terminals would be in the same room as soda
             (to make sure that hackurs from the outside don't splice their
             way into the wiring), and that room would be TEMPEST shielded.
             \_ and what would we use soda for it it had no net connection?
        \_ Don't use telnet.  Don't use telnet.  Don't use telnet.
           (I have said it thrice; what I tell you three times is true.)
                \_...or ftp, or pop3...
           \_ Kerberized telnet?  telnet -x otherhost
                \_ not to soda
           \_ sometimes we have to connect to soda from devices that don't
              support anything BUT telnet. Like routers and access servers.
              We need one-time-passwords  on telnetd. -ERic
        \_ but was the snark a boojum?
           \_ The snark WAS a boojum, you see.
                \_ If your firewall is lame-ass (i.e. run by BBN because
                   some marketroid thought it would be a good idea) and
                   you are forced to use telnet, do what you can to set up
                   one-time passwords via s/key.  There is a free WinBlows
                   one-time password computer available out there (I got
                    my copy from somewhere on <DEAD>ftp.msri.org<DEAD>) and if you want
                   to port it to another UNIX then we have source here on
                   soda.  Doesn't solve all problems, but at least prevents
                   scriptkiddies from grabbing your real password.
                   rtfm on skey(1) for more info.  -- tmonroe
                   \_ Might want to check out OPIE instead of S/Key. --dim
                      \_ urlP
                         \_ ftp://ftp.nrl.navy.mil/pub/security/opie or
                            ftp://ftp.inner.net/pub/opie  --dim
                   \_ One-time passwords are somewhat limited compared to
                      SSH, though, since they don't typically encrypt the
                      contents of your session (thus preventing you from
                      safely typing other passwords from within telnet).
                      Better than nothing, though.
                      \_ The point was not everyone can use ssh.
                      \_ ssh is also much better than telnet for dealing
                         with flaky connections that drop a lot of packets
                         for extended periods of time, if you don't want
                         to lose link.  For some reason.  Can someone
                         explain this?  I'm curious.  -John
                         \_ TCP_KEEPALIVES-- telnet uses them, ssh doesn't.
                            odd that the SO_KEEPALIVE would cause to lose
                            connections in a lossy network, but thats how
                            it works. -ERic
        \_ Since the 43-net runs through public access labs that anyone can
           bring their laptop into and start sniffing, always assume packets
           to soda are being sniffed.
           \_ Why isn't access at the public access labs run on switches?
              Is there a reason to expose the communications "backbone"?
                \_ What's the notation for "current PID" in most shells and
                   Perl?  There's your answer.
                        \_ Geek.  Just say $$.  Sheesh.  Had to be "clever"?
                \_ Switches cost money - the dept's just barely finishing
                    converting Cory Hall - Soda Hall is scheduled to be
                    converted as soon as they figure out who's paying for it.
                    \_ the cost difference between switched and shared is
                        negligible these days.  -tom
                        \_ But they already have shared and already paid.
                           Also, maybe they want to wait for Fast Ethernet?
                \_ Because the university by its nature is always behind.
1998/7/27 [Uncategorized] UID:14401 Activity:nil
7/26    What are some cgi mailers that I can use for the "guest sign" page?
        \_ http://www.worldwidemart.com/scripts
1998/7/27-28 [Computer/SW/Languages/Perl] UID:14402 Activity:high
7/23    Long bit truncated down to:
        but this is what i wanted to do:
        foreach f (*.gif)
            mv $f `echo $f | sed 's/\(.*\)\.gif/\1th.gif/'`
        end
        it seems like it's better done at the command line. I didn't think
        you can do that in as few bytes (and processes) in perl.
        \_ If you want to do it once, period, for the rest or eternity,
           fine, do that.  But the perl is:
           foreach $f (<*.gif>) {
                $f =~ s/\.gif$//;
                rename("$f.gif", "${f}th.gif");
           }
           Process count:  Shell: 4   Perl: 1
           Process count:  Shell: 4 per file renamed   Perl: 1
           Byte count:     Shell: 90  Perl: 139
           49 more bytes, but runs much, much faster  (really, try it on
           Byte count:     Shell: 70  Perl: 75
           \_ isn't the carat supposed to be a dollar-sign? -- idiot
           \_ 68 bytes but uglier:
           5 more bytes, but runs much, much faster  (really, try it on
           even 50 files)  --dbushong
           \_ 66 bytes but uglier:
                foreach (<*.gif>) {
                        s/\.gif$//;
                        rename("$_.gif", "${_}th.gif");
                }
           \_ 62 bytes:
           \_ 57 bytes:
              $g=".gif";foreach(<*$g>){s/$g$//;rename($_$g,${_}th$g);}
                \_ are you sure you can do $_$g ?
        \_ with the extra added bonus of globbing via <> ick ick but that's
           a stylistic issue
1998/7/27-28 [Consumer/CellPhone] UID:14403 Activity:high
7/27    From ~kchang/.login:

if (-e .flag00) then
  mv .flag00 .flag11
  echo "kchang the super master logging into Soda..."
else if (-e .flag11) then
  echo "Already logged in STUPID"
endif

set watch = (1 tom any joey any sameer any erickao any sandy any atom\
        any kenyoung any tkm any android any junokim any ewen any tawei any\
        chiapet any dpssage any conrad any chrisyep any chris any\
        chris any jules any debbie any rchen any duyphun any jean any)
        \_ Why does everyone always pick on kchang?
           \_ Have you ever met him? If so, your questions will be answered
                \_ I haven't but just witnessing his stupidity on soda is
                   enough to figure it out.

set watch = (1 tom any joey any sameer any erickao any sandy any atom\
        any kenyoung any tkm any android any junokim any ewen any tawei any\
        chiapet any dpssage any conrad any chrisyep any chris any\
        chris any jules any debbie any rchen any duyphun any jean any)
        \_ Should I be offended, or thankful, I'm not on this list?
          \_ oh boy I'm his #1 stalkee.  It's like being tops on the
             speed dial!  -tom
        \_ Are any of these girls cute? Oh wait, this is CSUA...
           \_ Well, since xtine is mentioned twice, kchang must really
              have the hots for her
1998/7/27 [Recreation/Computer/Games, Recreation/Sports] UID:14404 Activity:nil
07/27   what is the best combat flight simulation game out there for the pc?
Berkeley CSUA MOTD:1998:July:27 Monday <Sunday, Tuesday>