4/22    ok, here's a little networking puzzler. I haven't been able to access
        youtube for a couple weeks. Couldn't figure out why. Happened on all
        browsers. traceroute did weird stuff and then timed out. Finally I
        got so frustrated I setup firefox to ssh tunnel through soda.csua,
        which worked great. Then, I kill the ssh proc, quit FF, and now,
        I can access youtube just fine from any browser. wtf? any
	...

8/5     It looks like my company has started blocking HTTPS tunneling.
        I used to do this by tunneling SSH through the HTTP/HTTPS proxy
        server, but this seems to have stopped working. Does anyone know
        how the implementation of tunneling detection works, and whether
        there are widely available implementations? We run a bunch of MS
        stuff, so I imagine we're running an MS proxy server or something.
	...

7/20    How can I get IMAP over SSL to work (I'm using Mail.app)?
        I've set the port to 465, checked SSL, set auth to Password,
        and entered my username and password. I don't get an error but my
        messages don't get delivered. TIA.
        \_ derrr, corrected, I meant SMTP (outbound).
        \_ 993/tcp  open  imaps
	...

4/18    Some thoughts about securing a machine.  Feel free to add your
        expert opinions. --ricky
        * Securing a machine that allows interactive logins by users
          is _very_ hard.
        * Reduce suid binary to absolute bare minimum.
        * Perform automatic _remote_ checksums from a machine that is
	...

4/11    telnet: connect to address ::1: Connection refused
        telnet: connect to address 127.0.0.1: Connection refused
        telnet: Unable to connect to remote host
        Trying ::1...
        Trying 127.0.0.1...
        (from soda)
	...

12/20   I'm trying to determine the cause of an curious behavior: When
        I login to a Linux box from my Mac (rxvt in X11), there is
        some lag on the text output during the printing of multiple
        lines of output. When I login to a FreeBSD box from my Mac,
        there is no lag. Curiously, when I login to either the FreeBSD
        box or the Linux box from my Linux laptop, there is no lag
	...

12/11   Since the SSH change, I've been getting the following error
        message in Outlook Express:  "The certificate's CN name does not
        match the passed value".  How can I get rid of this message?  I'm
        guessing it has to do with the certificate I'm using.  I got it from:
        <DEAD>soda.csua.berkeley.edu:995<DEAD>  It's called "localhost".  Do I
        need to use a new POP server?  Right now I'm using
	...

12/7    After I start a background job from tcsh in an xterm, I try to exit
        the shell.  But it stays around until the background job exits.  Is
        there a way to tell the shell not to wait for the background job to
        finish?  Thx.
        \_ Yes.
           \_ How?
	...

12/7    So what are the correct SMTP settings for soda now? I've been
        using port 465 + SSL + password authentication and it's stopped
        working since the reboot.
        \_ I just mailed myself using port 25 + SSL + password.
           \_ % telnet http://csua.berkeley.edu 25
              Trying 128.32.112.233...
	...

9/7     Is there a way to change passwords on windows from the cmd line?
        I only have a telnet session... Thx.
        \_ Your google fu is weak.
           http://support.microsoft.com/?kbid=149427    -John
	...

8/26    Poll: how many of you pub/priv key users: 1) use private keys that
        are not password protected 2) password protect your private keys
        but don't use ssh-agent 3) use ssh-agent:
        1) .
        2) ..
        3) ...
	...

8/6     Amazon and Apple have lame security policies:
        http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/all
        "First you call Amazon and tell them you are the account holder, and
         want to add a credit card number to the account. All you need is the
         name on the account, an associated e-mail address, and the billing
         address. "
	...

7/18    "Largest penis record holder arouses security suspicions at airport"
        http://www.csua.org/u/x2f (in.news.yahoo.com)
        \_ I often have that same problem.
        \_ I think the headline writer had some fun with that one.
           \_ One time when I glanced over a Yahoo News headline "U.S. busts
              largest-ever identity theft ring" all I saw was "U.S. busts
	...

4/19    My Firefox 3.6.28 pops up a Software Update box that reads "Your
        version of Firefox will soon be vulnerable to online attacks."  Are
        they planning to turn off some security feature in my version of
        Firefox?
        \_ Not as such, no, but they're no longer developing this version,
           so if a 3.6.x-targeted hack shows up, you're not going to get
	...

11/8    ObM$Sucks
        http://technet.microsoft.com/en-us/security/bulletin/ms11-083
        \_ How is this different from the hundreds of other M$ security
           vulnerabilities that people have been finding?
           \_ "The vulnerability could allow remote code execution if an
               attacker sends a continuous flow of specially crafted UDP
	...

11/11   MacOSX's Sandbox security hole:
        http://preview.tinyurl.com/7ph2wtg [arstechnica]
	...

2/9     http://www.net-security.org/secworld.php?id=10570
        Summary: iPhone passwd storage is unsafe after all
	...

11/4    Holy cow, I got a warning from my ISP that they were notified
        by BSA/baytsp.com that I was copying music/video/software.
        Do they do port scan or something? That's a first for me.
        \_ They hang out on P2P networks and track IP addresses.  -tom
           \_ I believe they are paid by content providers to perform this
              monitoring service, so you should only run this risk with content
	...

11/7    Need help on http proxy. After I VPN to work, I'd like to tunnel
        all the traffic to my machine. How do I setup my machine (Linux)
        as a proxy server so that my home computers can route through it?
        I'm asking because the site we're testing on requires that we
        come from the same IP. If I use VPN, the server will reject me
        based on the fact that it's a different IP than my work Linux.
	...

2/18    My DSL modem's ip address is 192.168.0.1, my internal network
        behind my router is 10.0.0.x. Is there a way I can configure
        the router so I can access the DSL modem from my 10.0.0.x
        network directly without re-wiring? Static routes? I tried it
        but no much luck. I also tried changing my internal network to
        192.168.0.x, but still does not work. Thanks.
	...

1/21    I am trying to setup a small network for my girlfriend's
        mom's company.  They just bought an accounting package
        which requires windows 2003 server.  And they want internet
        access from each computer.  How should the network be setuped?
        Would it be dumb to use static IP for each computer and a
        computer as internet gateway?
	...

8/29    What's the difference between a hub, a switch and a router?  Thx.
        \_ AFAIK, probably be corrected by someone:
           hub: Allows communication on a LAN with bandwith shared amongs all
                the nodes on the hub and maxing out at the max line speed.
           switch: Allows communication on a LAN with bandwith greater than
                the max line speed (point to point)
	...

6/2     I've been to many places and almost every place I go to have
        802.11b/g. However, almost all of them have protected access,
        which I presume they use because they don't want people stealing
        their bandwidth. So here is one idea I think will really
        revolutionize 802.11X... an option in the router that allows you to
        specify the percentage of unprotected bandwidth you are willing to
	...

1/10    VMware question for VMware gurus only. I've installed a WinXPsp1
        on top of WinXPsp2. How do you do the followings:
        1) transfer data between the two machines? I've tried mounting
           raw partition from WinXPsp1 but when I disable write, it
           doesn't boot up anymore (WinXP insists on writing)
        2) communicate between the two machines? I can ping WinXPsp1
	...

11/9    I have two versions of MSIE 6.0.2800.1106. One is running inside a
        VMWare virtual machine, the other running native on an athlon PC.
        When I run a google query: http://www.google.com/search?q=canada.ca
        They get slightly different results. What's the best way to figure
        out why this would be?  Perhaps a way to capture the request?
        \_ Maybe you're just hitting different google mirrors, and their
	...

9/19    I'm looking for a simple but good load balancing appliance to sit
        in front of two boxes for the purposes of redundancy.  Load Balancing
        isn't really required, I just want the device to send traffic to
        the secondary box iff the first server goes down. Recommendations?
        \_ An OpenBSD 3.5 box running pf + carp can do this. If you don't
           want to use OpenBSD you can try ucarp: http://www.ucarp.org
	...

8/16    Anybody know of an existing program similar to pop-before-smtp
        but for IMAP. It wou use a current IMAP connection to allow
        SMTP relaying from the same IP addres as that IMAP connection?
        \_ it's the same program, just change the regexp used to search
           for login lines and change the logfile watched
           \_ Nope, That does not work. IMAP connections are persistent and
	...

6/2     My new favorite bug.    F5's BigIP 4.5.9:
        "Using the IP address 213.13.118.129:80  (CR31104)
        If you add a pool with a member node with the IP address
        213.13.118.129:80, when the address and port select a virtual server
        on the local system, it causes the BIG-IP system to panic and the
        configuration to be deleted. The issue occurs only when the address
	...