Monday, December 27, 2010

[BLUG] OT -- need socket 775 heat sink & fan assembly

Am cobbling together a Frankenbox and need a socket 775 heat sink and
fan assembly. If anybody has a spare in his/her collection or a carcass
laying around I'd love to take it off your hands.

--
Mark Warner
MEPIS Linux
Registered Linux User #415318

_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

Tuesday, December 21, 2010

Re: [BLUG] Fwd: Allegations regarding OpenBSD IPSEC

On Sat, 18 Dec 2010 15:46:33 -0500, J Apple Muncy <jmuncy@cs.iusb.edu>
wrote:

> I say, how me the code that proves this..

The email would have been more effective if specific commits to the system
were targeted, rather than just naming names.

Aaron Hsu

--
Programming is just another word for the lost art of thinking.
_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

Re: [BLUG] Fwd: Allegations regarding OpenBSD IPSEC

On Sat, 18 Dec 2010 12:46:47 -0500, Jeremy L. Gaddis <jlgaddis@gnu.org>
wrote:

> i am (personally) inclined to believe it's a bunch of bs.

I eagerly await the results of the audit, but I also remain skeptical.

Aaron Hsu

--
Programming is just another word for the lost art of thinking.
_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

Re: [BLUG] Fwd: Allegations regarding OpenBSD IPSEC

On Sat, 18 Dec 2010 12:16:14 -0500, Mark Krenz <mark@slugbug.org> wrote:

> Just curious, does anyone on the list use OpenBSD? I know some of you
> use FreeBSD. What I'm worried about is if there are also backdoors in
> OpenSSH.

I use it, or at least, I try to use it when I can. I am not familiar with
the efforts mentioned in this email, but the way to find out whether it
affects OpenSSH is to see the commits that are in question on the VCS.
There is a web interface to it, but you may be more comfortable and more
efficient using the normal CVS tools that are available.

Aaron Hsu

--
Programming is just another word for the lost art of thinking.
_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

Sunday, December 19, 2010

[BLUG] Alice in Wonderland done on Linux

This is a pretty cool inspired image of Alice in Wonderland done on
Linux using Gimp, MyPaint and a new program called Alchemy.

http://www.davidrevoy.com/?article36/alice-in-wonderland

He won some awards for it. David Revoy, the artist, was the art
director for the Sintel Open Movie project made using Blender. If you
haven't seen that, you should definately check it out:

http://www.youtube.com/watch?v=eRsGyueVLvQ

You can watch it all the way up to 1080p. And remember, it was all done
using open source software. Blender, Gimp, etc.

--
Mark Krenz
Bloomington Linux Users Group
http://www.bloomingtonlinux.org/
_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

Saturday, December 18, 2010

Re: [BLUG] Fwd: Allegations regarding OpenBSD IPSEC

I'm with on this Jeremy,
I say, how me the code that proves this..

On Sat, Dec 18, 2010 at 12:46 PM, Jeremy L. Gaddis <jlgaddis@gnu.org> wrote:
On Tue, Dec 14, 2010 at 11:46:04PM -0500, dosman wrote:
> I'm sure everyone will hear about this by tomorrow morning, but heads
> up.

note that, fwiw, everyone mentioned by perry in that email has publicly
denied anything of the sort.

it will be interesting to follow as the code and checkins are being
reviewed, but i am (personally) inclined to believe it's a bunch of bs.

--
Jeremy L. Gaddis


_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

Re: [BLUG] Fwd: Allegations regarding OpenBSD IPSEC

On Tue, Dec 14, 2010 at 11:46:04PM -0500, dosman wrote:
> I'm sure everyone will hear about this by tomorrow morning, but heads
> up.

note that, fwiw, everyone mentioned by perry in that email has publicly
denied anything of the sort.

it will be interesting to follow as the code and checkins are being
reviewed, but i am (personally) inclined to believe it's a bunch of bs.

--
Jeremy L. Gaddis


_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

Re: [BLUG] Fwd: Allegations regarding OpenBSD IPSEC

Just curious, does anyone on the list use OpenBSD? I know some of you
use FreeBSD. What I'm worried about is if there are also backdoors in
OpenSSH.


On Wed, Dec 15, 2010 at 04:46:04AM GMT, dosman [dosman@packetsniffers.org] said the following:
> I'm sure everyone will hear about this by tomorrow morning, but heads
> up.
>
> -dosman
>
> Begin forwarded message:
>
> > -------- Original Message --------
> > Subject: Allegations regarding OpenBSD IPSEC
> > Date: Tue, 14 Dec 2010 14:18:27 -0700
> > From: Theo de Raadt <deraadt@cvs.openbsd.org>
> > To: security-announce@openbsd.org
> >
> > I have received a mail regarding the early development of the OpenBSD
> > IPSEC stack. It is alleged that some ex-developers (and the company
> > they worked for) accepted US government money to put backdoors into
> > our network stack, in particular the IPSEC stack. Around 2000-2001.
> >
> > Since we had the first IPSEC stack available for free, large parts of
> > the code are now found in many other projects/products. Over 10
> > years, the IPSEC code has gone through many changes and fixes, so it
> > is unclear what the true impact of these allegations are.
> >
> > The mail came in privately from a person I have not talked to for
> > nearly 10 years. I refuse to become part of such a conspiracy, and
> > will not be talking to Gregory Perry about this. Therefore I am
> > making it public so that
> > (a) those who use the code can audit it for these problems,
> > (b) those that are angry at the story can take other actions,
> > (c) if it is not true, those who are being accused can defend
> > themselves.
> >
> > Of course I don't like it when my private mail is forwarded. However
> > the "little ethic" of a private mail being forwarded is much smaller
> > than the "big ethic" of government paying companies to pay open source
> > developers (a member of a community-of-friends) to insert
> > privacy-invading holes in software.
> >
> > ----
> >
> > From: Gregory Perry <Gregory.Perry@GoVirtual.tv>
> > To: "deraadt@openbsd.org" <deraadt@openbsd.org>
> > Subject: OpenBSD Crypto Framework
> > Thread-Topic: OpenBSD Crypto Framework
> > Thread-Index: AcuZjuF6cT4gcSmqQv+Fo3/+2m80eg==
> > Date: Sat, 11 Dec 2010 23:55:25 +0000
> > Message-ID: <8D3222F9EB68474DA381831A120B1023019AC034@mbx021-e2-nj-5.exch021.domain.local
> > >
> > Accept-Language: en-US
> > Content-Language: en-US
> > X-MS-Has-Attach:
> > X-MS-TNEF-Correlator:
> > Content-Type: text/plain; charset="iso-8859-1"
> > Content-Transfer-Encoding: quoted-printable
> > MIME-Version: 1.0
> > Status: RO
> >
> > Hello Theo,
> >
> > Long time no talk. If you will recall, a while back I was the CTO at
> > NETSEC and arranged funding and donations for the OpenBSD Crypto
> > Framework. At that same time I also did some consulting for the FBI,
> > for their GSA Technical Support Center, which was a cryptologic
> > reverse engineering project aimed at backdooring and implementing key
> > escrow mechanisms for smart card and other hardware-based computing
> > technologies.
> >
> > My NDA with the FBI has recently expired, and I wanted to make you
> > aware of the fact that the FBI implemented a number of backdoors and
> > side channel key leaking mechanisms into the OCF, for the express
> > purpose of monitoring the site to site VPN encryption system
> > implemented by EOUSA, the parent organization to the FBI. Jason
> > Wright and several other developers were responsible for those
> > backdoors, and you would be well advised to review any and all code
> > commits by Wright as well as the other developers he worked with
> > originating from NETSEC.
> >
> > This is also probably the reason why you lost your DARPA funding, they
> > more than likely caught wind of the fact that those backdoors were
> > present and didn't want to create any derivative products based upon
> > the same.
> >
> > This is also why several inside FBI folks have been recently
> > advocating the use of OpenBSD for VPN and firewalling implementations
> > in virtualized environments, for example Scott Lowe is a well
> > respected author in virtualization circles who also happens top be on
> > the FBI payroll, and who has also recently published several tutorials
> > for the use of OpenBSD VMs in enterprise VMware vSphere deployments.
> >
> > Merry Christmas...
> >
> > Gregory Perry
> > Chief Executive Officer
> > GoVirtual Education
> >
> > "VMware Training Products & Services"
> >
> > 540-645-6955 x111 (local)
> > 866-354-7369 x111 (toll free)
> > 540-931-9099 (mobile)
> > 877-648-0555 (fax)
> >
> > http://www.facebook.com/GregoryVPerry
> > http://www.facebook.com/GoVirtual
> >
>
> _______________________________________________
> BLUG mailing list
> BLUG@linuxfan.com
> http://mailman.cs.indiana.edu/mailman/listinfo/blug
>

--
Mark Krenz
Bloomington Linux Users Group
http://www.bloomingtonlinux.org/
_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

Tuesday, December 14, 2010

[BLUG] Fwd: Allegations regarding OpenBSD IPSEC

I'm sure everyone will hear about this by tomorrow morning, but heads
up.

-dosman

Begin forwarded message:

> -------- Original Message --------
> Subject: Allegations regarding OpenBSD IPSEC
> Date: Tue, 14 Dec 2010 14:18:27 -0700
> From: Theo de Raadt <deraadt@cvs.openbsd.org>
> To: security-announce@openbsd.org
>
> I have received a mail regarding the early development of the OpenBSD
> IPSEC stack. It is alleged that some ex-developers (and the company
> they worked for) accepted US government money to put backdoors into
> our network stack, in particular the IPSEC stack. Around 2000-2001.
>
> Since we had the first IPSEC stack available for free, large parts of
> the code are now found in many other projects/products. Over 10
> years, the IPSEC code has gone through many changes and fixes, so it
> is unclear what the true impact of these allegations are.
>
> The mail came in privately from a person I have not talked to for
> nearly 10 years. I refuse to become part of such a conspiracy, and
> will not be talking to Gregory Perry about this. Therefore I am
> making it public so that
> (a) those who use the code can audit it for these problems,
> (b) those that are angry at the story can take other actions,
> (c) if it is not true, those who are being accused can defend
> themselves.
>
> Of course I don't like it when my private mail is forwarded. However
> the "little ethic" of a private mail being forwarded is much smaller
> than the "big ethic" of government paying companies to pay open source
> developers (a member of a community-of-friends) to insert
> privacy-invading holes in software.
>
> ----
>
> From: Gregory Perry <Gregory.Perry@GoVirtual.tv>
> To: "deraadt@openbsd.org" <deraadt@openbsd.org>
> Subject: OpenBSD Crypto Framework
> Thread-Topic: OpenBSD Crypto Framework
> Thread-Index: AcuZjuF6cT4gcSmqQv+Fo3/+2m80eg==
> Date: Sat, 11 Dec 2010 23:55:25 +0000
> Message-ID: <8D3222F9EB68474DA381831A120B1023019AC034@mbx021-e2-nj-5.exch021.domain.local
> >
> Accept-Language: en-US
> Content-Language: en-US
> X-MS-Has-Attach:
> X-MS-TNEF-Correlator:
> Content-Type: text/plain; charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> MIME-Version: 1.0
> Status: RO
>
> Hello Theo,
>
> Long time no talk. If you will recall, a while back I was the CTO at
> NETSEC and arranged funding and donations for the OpenBSD Crypto
> Framework. At that same time I also did some consulting for the FBI,
> for their GSA Technical Support Center, which was a cryptologic
> reverse engineering project aimed at backdooring and implementing key
> escrow mechanisms for smart card and other hardware-based computing
> technologies.
>
> My NDA with the FBI has recently expired, and I wanted to make you
> aware of the fact that the FBI implemented a number of backdoors and
> side channel key leaking mechanisms into the OCF, for the express
> purpose of monitoring the site to site VPN encryption system
> implemented by EOUSA, the parent organization to the FBI. Jason
> Wright and several other developers were responsible for those
> backdoors, and you would be well advised to review any and all code
> commits by Wright as well as the other developers he worked with
> originating from NETSEC.
>
> This is also probably the reason why you lost your DARPA funding, they
> more than likely caught wind of the fact that those backdoors were
> present and didn't want to create any derivative products based upon
> the same.
>
> This is also why several inside FBI folks have been recently
> advocating the use of OpenBSD for VPN and firewalling implementations
> in virtualized environments, for example Scott Lowe is a well
> respected author in virtualization circles who also happens top be on
> the FBI payroll, and who has also recently published several tutorials
> for the use of OpenBSD VMs in enterprise VMware vSphere deployments.
>
> Merry Christmas...
>
> Gregory Perry
> Chief Executive Officer
> GoVirtual Education
>
> "VMware Training Products & Services"
>
> 540-645-6955 x111 (local)
> 866-354-7369 x111 (toll free)
> 540-931-9099 (mobile)
> 877-648-0555 (fax)
>
> http://www.facebook.com/GregoryVPerry
> http://www.facebook.com/GoVirtual
>

_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug