| ||||||
| 1998/7/27 [Academia/Berkeley/CSUA/Motd] UID:14399 Activity:moderate |
7/27 Mommy, where's the old motd?
\_ The old motd can't live here any more, honey. |
| 1998/7/27-29 [Computer/SW/Security, Computer/SW/Unix] UID:14400 Activity:high |
7/27 One of the instructional computers was found cracked and was
possibly running a sniffer. Since the machine in question was
on the 43 net, soda accounts might have been compr[o]mised.
\_ are there political problems w/ turning off rsh telnet and
so on (in favor of ssh)
\_ Is that a pretty elitist point of view? Maybe we should just
leave rsh/telnet enabled, but force them to use a one-time-use
password scheme.
\_ lots of people don't access to ssh.
\_ lots of people don't [have] access to ssh.
\_ SSH does not work well with some corporate firewalls
\_ A more 3l33t plan would be to unplug soda's net connection, and
have all interaction with the machine be via hardwired TVI 920
terminals. All the terminals would be in the same room as soda
(to make sure that hackurs from the outside don't splice their
way into the wiring), and that room would be TEMPEST shielded.
\_ and what would we use soda for it it had no net connection?
\_ Don't use telnet. Don't use telnet. Don't use telnet.
(I have said it thrice; what I tell you three times is true.)
\_...or ftp, or pop3...
\_ Kerberized telnet? telnet -x otherhost
\_ not to soda
\_ sometimes we have to connect to soda from devices that don't
support anything BUT telnet. Like routers and access servers.
We need one-time-passwords on telnetd. -ERic
\_ but was the snark a boojum?
\_ The snark WAS a boojum, you see.
\_ If your firewall is lame-ass (i.e. run by BBN because
some marketroid thought it would be a good idea) and
you are forced to use telnet, do what you can to set up
one-time passwords via s/key. There is a free WinBlows
one-time password computer available out there (I got
my copy from somewhere on <DEAD>ftp.msri.org<DEAD>) and if you want
to port it to another UNIX then we have source here on
soda. Doesn't solve all problems, but at least prevents
scriptkiddies from grabbing your real password.
rtfm on skey(1) for more info. -- tmonroe
\_ Might want to check out OPIE instead of S/Key. --dim
\_ urlP
\_ ftp://ftp.nrl.navy.mil/pub/security/opie or
ftp://ftp.inner.net/pub/opie --dim
\_ One-time passwords are somewhat limited compared to
SSH, though, since they don't typically encrypt the
contents of your session (thus preventing you from
safely typing other passwords from within telnet).
Better than nothing, though.
\_ The point was not everyone can use ssh.
\_ ssh is also much better than telnet for dealing
with flaky connections that drop a lot of packets
for extended periods of time, if you don't want
to lose link. For some reason. Can someone
explain this? I'm curious. -John
\_ TCP_KEEPALIVES-- telnet uses them, ssh doesn't.
odd that the SO_KEEPALIVE would cause to lose
connections in a lossy network, but thats how
it works. -ERic
\_ Since the 43-net runs through public access labs that anyone can
bring their laptop into and start sniffing, always assume packets
to soda are being sniffed.
\_ Why isn't access at the public access labs run on switches?
Is there a reason to expose the communications "backbone"?
\_ What's the notation for "current PID" in most shells and
Perl? There's your answer.
\_ Geek. Just say $$. Sheesh. Had to be "clever"?
\_ Switches cost money - the dept's just barely finishing
converting Cory Hall - Soda Hall is scheduled to be
converted as soon as they figure out who's paying for it.
\_ the cost difference between switched and shared is
negligible these days. -tom
\_ But they already have shared and already paid.
Also, maybe they want to wait for Fast Ethernet?
\_ Because the university by its nature is always behind. |
| 1998/7/27 [Uncategorized] UID:14401 Activity:nil |
7/26 What are some cgi mailers that I can use for the "guest sign" page?
\_ http://www.worldwidemart.com/scripts |
| 1998/7/27-28 [Computer/SW/Languages/Perl] UID:14402 Activity:high |
7/23 Long bit truncated down to:
but this is what i wanted to do:
foreach f (*.gif)
mv $f `echo $f | sed 's/\(.*\)\.gif/\1th.gif/'`
end
it seems like it's better done at the command line. I didn't think
you can do that in as few bytes (and processes) in perl.
\_ If you want to do it once, period, for the rest or eternity,
fine, do that. But the perl is:
foreach $f (<*.gif>) {
$f =~ s/\.gif$//;
rename("$f.gif", "${f}th.gif");
}
Process count: Shell: 4 Perl: 1
Process count: Shell: 4 per file renamed Perl: 1
Byte count: Shell: 90 Perl: 139
49 more bytes, but runs much, much faster (really, try it on
Byte count: Shell: 70 Perl: 75
\_ isn't the carat supposed to be a dollar-sign? -- idiot
\_ 68 bytes but uglier:
5 more bytes, but runs much, much faster (really, try it on
even 50 files) --dbushong
\_ 66 bytes but uglier:
foreach (<*.gif>) {
s/\.gif$//;
rename("$_.gif", "${_}th.gif");
}
\_ 62 bytes:
\_ 57 bytes:
$g=".gif";foreach(<*$g>){s/$g$//;rename($_$g,${_}th$g);}
\_ are you sure you can do $_$g ?
\_ with the extra added bonus of globbing via <> ick ick but that's
a stylistic issue |
| 1998/7/27-28 [Consumer/CellPhone] UID:14403 Activity:high |
7/27 From ~kchang/.login:
if (-e .flag00) then
mv .flag00 .flag11
echo "kchang the super master logging into Soda..."
else if (-e .flag11) then
echo "Already logged in STUPID"
endif
set watch = (1 tom any joey any sameer any erickao any sandy any atom\
any kenyoung any tkm any android any junokim any ewen any tawei any\
chiapet any dpssage any conrad any chrisyep any chris any\
chris any jules any debbie any rchen any duyphun any jean any)
\_ Why does everyone always pick on kchang?
\_ Have you ever met him? If so, your questions will be answered
\_ I haven't but just witnessing his stupidity on soda is
enough to figure it out.
set watch = (1 tom any joey any sameer any erickao any sandy any atom\
any kenyoung any tkm any android any junokim any ewen any tawei any\
chiapet any dpssage any conrad any chrisyep any chris any\
chris any jules any debbie any rchen any duyphun any jean any)
\_ Should I be offended, or thankful, I'm not on this list?
\_ oh boy I'm his #1 stalkee. It's like being tops on the
speed dial! -tom
\_ Are any of these girls cute? Oh wait, this is CSUA...
\_ Well, since xtine is mentioned twice, kchang must really
have the hots for her |
| 1998/7/27 [Recreation/Computer/Games, Recreation/Sports] UID:14404 Activity:nil |
07/27 what is the best combat flight simulation game out there for the pc? |