- luv-main - example.com

selinux stole my bank details (and my pony)
by Robin Humble 26 Sep '13

26 Sep '13

...it didn't really, but... is anyone still a selinux fanboi after the recent NSA revelations? if so then (Russell, I'm looking at you :-) why are you still confident selinux is a good thing and not just something designed to be so complex or so subtly buggy that the NSA can hide backdoors in it? there's already been one CVE where only those running selinux are vulnerable https://bugzilla.redhat.com/show_bug.cgi?id=517830 which at the time made me very happy I'd turned selinux off. Android 4.3 has started using selinux. do we really trust android vendors to be on top of complex selinux configs or would we be better off with it err, off? I doubt I'll be shipping my android roms with selinux on. that used to be 'cos I don't have the time to get it working and right, but now I also question its motivation and even the kernel implementation too. am I wrong? cheers, robin (yes, I've had a few and yes, this is a troll, but I'd still like to know if anyone's ever fully read and understood the implications of every distro selinux rule and every selinux line in the kernel - giving unaudited power to 3 letter agencies is not a sane way forward...)

12 28

Ruxcon 2013 Security Conference
by cfp＠ruxcon.org.au 24 Sep '13

24 Sep '13

Hi, Ruxcon is Australia's premier technical computer security conference, held at the CQ Function Centre in Melbourne. Ruxcon brings together the best and the brightest security talent in the Australia-Pacific region through live presentations, activities, and demonstrations. This year we also feature a fantastic line-up with several high-profile international speakers. Ruxcon 2013 will be held on the weekend of the 26th of October to the 27th of October. Doors open at 8:00am and the first presentation commences at 9:00am. There are a limited number of tickets available and they are going very quickly. Please register via the Ruxcon website to ensure that you don't miss out: http://www.ruxcon.org.au/register For more information, please visit http://www.ruxcon.org.au/speakers 1. BIOS Chronomancy - Jon Butterworth 2. Mining Mach Services within OS X Sandbox - Meder Kydryraliev 3. VoIP Wars: Return of the SIP - Fatih Ozavci 4. Inside Story Of Internet Banking: Reversing The Secrets Of Banking Malware - Sean Park 5. Top of the Pops: How to top the charts with zero melodic talent and a few friendly computers - Peter Fillmore 6. Deus Ex Concolica - Explorations in end-to-end automated binary exploitation - Mark Brand 7. The Art Of Facts - A look at Windows Host Based Forensic Investigation - Adam Daniel 8. AntiTraintDroid - Escaping Taint Analysis on Android for Fun and Profit - Golam 'Babil' Sarwar 9. Amateur Satellite Intelligence: Watching North Korea - David Jorm 10. Payment Applications Handle Lots of Money. No, Really: Lots of It - Mark Swift & Alberto Revelli 11. 50 Shades of Oddness - Inverting the Anti-Malware Paradigm - Peter Szabo 12. Assessing the Linux Desktop's Security - Ilja van Sprundel 13. .Net Havoc - Manipulating Properties of Dormant Server Side Web Controls - Shay Chen 14. Cracking and Analyzing Apple iCloud Protocols: iCloud Backups, Find My iPhone, Document Storage - Vladimir Katalov 15. Espionage: Everything Old is New Again - Kayne Naughton 16. Buried By Time, Dust and BeEF- Michele (Antisnatchor) 17. Under the Hood of Your Password Generator - Michael Samuel 18. Wireless Wickedness - Steve Glass & Matt Robert 19. BYOD PEAP Show: Mobile Devices Bare Auth - Josh Yavor 20. Top of the Pops: How to top the charts with zero melodic talent and a few friendly computers - Peter Fillmore 21. A Beginner's Journey Into Hardware Hacking - Silvio Cesare 22. Underground: The Julian Assange story (with Q&A session) - Suelette Dryfus & Ken Day 23. Introspy : Security Profiling for Blackbox iOS and Android - Alban Diquet & Marc Blanchou 24. 5 more presentations to be announced. Videos from previous Ruxon's can be found here: http://www.youtube.com/ruxcon Hope to see you there, Regards, Ruxcon 2013 Staff http://www.ruxcon.org.au

1 0

avconv for movies on a phone
by Russell Coker 22 Sep '13

22 Sep '13

avconv -i foo.mkv -strict experimental -b:v 400k -c:v libx264 -b:a 80 -c:a libmp3lame -ac 1 -s 1280x720 foo-s3.mp4 I'm experimenting with avconv settings to convert movie files for watching on a mobile phone. Above is my latest experiment for converting a movie to watch on a Galaxy S3. The "-strict experimental" seems to be required to create mp4 files with the version of avconv in Debian/Unstable. The video bitrate of 400k and audio bitrate of 80k are arbitrary, I'm going to test them out and see if they are ok, as usual it's a trade-off between quality and space. The "-ac 1" sets it to a single audio channel which works well for the built-in speaker in a phone, and for a movie there isn't so much benefit in sterio (for my music video collection I use sterio because it's worth it when using headphones). Apart from tweaking the bitrates is there anything else I can do to give a better result? avconv -i foo.mkv -strict experimental -s 1280x720 foo-s3.mp4 As an aside avconv doesn't seem to work with basic commands such as the above when a mkv file is the input, but specifying video and audio encoding options separately fixes it. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 1

Fwd: [free-software-melb-announce] GNU 30th Birthday celebration, Saturday 2013-09-28
by Bianca Gibson 22 Sep '13

22 Sep '13

(reposting on behalf of Free Software Melbourne) Howdy all, Free Software Melbourne invites you to join us to celebrate 30 years of the GNU operating system, which sparked the free software movement. Come join us for lunch on Saturday, 2013-09-28. We'll meet 12:15 for a meal at 12:30, at Classic Curry Restaurant: Classic Curry Restaurant <URL:http://www.classiccurry.com/> 597 Elizabeth Street (Corner of Queensberry St) North Melbourne <URL:http://www.openstreetmap.org/?node=2274622026> Partners and children are welcome. Please do let us know if you plan to come or cancel; while not essential, the restaurant staff will appreciate a reliable expectation of how many we will be. RSVP to Ben Finney or secretary Adam Bolte ahead of the day: ben+freesoftware(a)benfinney.id.au abolte(a)systemsaviour.com Bring a stuffed GNU or any GNU-related toys you might have! We hope to get some fun photos. Read about the GNU operating system, its history, and worldwide 30th birthday celebrations, at <URL:https://www.gnu.org/gnu30/>.

1 0

strange postfix rejection
by Russell Coker 20 Sep '13

20 Sep '13

Sep 19 06:48:49 mx0 postfix/smtpd[17545]: NOQUEUE: reject: RCPT from server1.example.com[10.1.2.137]: 554 5.7.1 <logcheck(a)server1.example.com>: Sender address rejected: forged mail; from=<logcheck(a)server1.example.com> to=<etbe(a)example.com> proto=ESMTP helo=<server1.example.com> I have two servers with consecutive IP addresses named server0 and server1. They both try to send mail to my mail server, when I have a cron job or swaks send mail server1's mail is rejected with messages like the above and server0 mail goes through. The forward and reverse DNS entries all look to be good and the SPF entry is also correct. Does anyone have any suggestions for where to look in Postfix configuration to determine what the problem might be? A Google search didn't turn up any exact matches for the error message and no close matches that were useful. As an aside it would be really handy if the authors of complex software could make a web site mapping log messages to conditions that cause them. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

4 8

Re: wildcard expansion
by Jeremy Visser 20 Sep '13

20 Sep '13

On 20/09/13 14:55, Lev Lafayette wrote: > On Fri, September 20, 2013 2:05 pm, Jeremy Visser wrote: >> > Or, we could all just not be dicks, accept the fact that some filenames >> > have spaces (because, shock horror, people *like* spaces), and deal with >> > it like proper engineers should. >> > >> > Yeah, some problems are hard. I get that. That doesn’t impact on what >> > should/shouldn’t be solved. > > Sounds like you're volunteering Jeremy. I look forward to seeing the > solution! :) Solution to what? I’m arguing *for* the status quo, not against it. I’m arguing against the arguments against the status quo. That makes sense, right?

4 4

Haecksen miniconf Call For Proposals (linux.conf.au, January, Perth)
by Bianca Gibson 18 Sep '13

18 Sep '13

---------- Forwarded message ---------- From: "Mary Gardiner" <mary(a)puzzling.org> Date: 17 Sep 2013 14:18 Subject: [OWOOT] Haecksen miniconf Call For Proposals (linux.conf.au, January, Perth) To: "OWOOT" <owoot(a)lists.owoot.org> Cc: CFP closes 1 November. -------------------------------- http://haecksen.net/haecksen-2014-call-proposals Haecksen 2014 - Call For Proposals Submitted by superhaecksen on Sun, 2013-09-15 13:39 Haecksen isn't Haecksen without all the Haecksen! That's you! This year, we're looking for: * Short talks (around 20 minutes, but requests for a double slot of 40 minutes will be considered) on anything related to open tech generally, or women in open tech specifically, that you are currently working on. * A small number of short hands-on presentations about *your personal or professional experience* of preparing, submitting, and giving talks at technical conferences. Think you've got what it takes? Go to http://haecksen.net/node/add/miniconfsubmission and tell us all about it! Submissions are open until 1 November. If you have questions about anything at all, email unicorn(at)haecksen(dot)net. Just a short note: Accepted miniconf speakers do not generally get free admission to the conference. If you would like to speak but CANNOT afford to attend, please let us know in your submission so we can work with you and the LCA organisers to try and make it happen. == About Haecksen 2014 == Haecksen has been a regular feature at linux.conf.au since 2007. In that time, it has stuck to a tried and trusted formula. A group of smart, vibrant women all working in some way with open source technology, spend the day together sharing their experiences and knowledge in a supportive and fun environment. For linux.conf.au 2014, the Oceania Women of Open Technology (OWOOT http://owoot.org) group proposes, again, a one-day Haecksen miniconf. Again, the intention is to feature women speakers and panellists on technical and community topics related to free software and women in free software. This year, however, the emphasis is on fun. Kicking off with a gameshow-style quiz covering achievements of historical women in tech, the day will then move into a series of short, upbeat presentations, before finishing with a light-hearted hands-on education session dedicated to encouraging and assisting women with conference speaker applications, professional speaking skills, and conference attendance. Speakers are expected, and indeed encouraged, to cover topics that range widely from technical talks to professional development, and community involvement. == 2014 Haecksen team == Lana Brindley. Lana will lead organisation of the miniconference prior to and at linux.conf.au 2014. Lana was the lead organiser of the 2011 and 2012 Haecksen miniconfs, and was a member of the LCA 2013 core team. Mary Gardiner. Mary will assist with the call for papers and selecting presentations. Mary was the founder of the Haecksen miniconf and was co-organiser of the 2007 and 2008 miniconfs. Bianca Gibson. Bianca will assist with the call for papers and selecting presentations. Bianca was co-organiser of the 2013 Haecksen miniconf. == About OWOOT == OWOOT (Oceania Women of Open Tech, formerly Aussiechix) was formed in October 2011, but grew out of women's groups in the region active since 1999. OWOOT remains a chapter of Linuxchix. Linuxchix functions as a geographically distributed user group. It has been running for over a decade and contains well over a thousand active members in many different countries. Originally founded with the explicit intention of providing an alternative to occasionally hostile online environments, it is not yet in the enviable position of being redundant. As such, as well as the usual technical aspect of user groups, OWOOT has a heavy social aspect. == Women at linux.conf.au == Possibly due to the community spirit provided by groups like OWOOT, the previous miniconfs have helped attract women in the greater FLOSS community to linux.conf.au. The presence of the miniconf since 2007 has demonstrably helped raise the numbers of women to the conference itself. The inaugural miniconf expected 20 women. Last year, over 80 people expressed interest in the miniconf, and the main conference is now regularly attracting around a 20% female attendance rate. With a reported 4% female contributions to open source projects, a 20% female attendance rate shows the good work the Haecksen miniconf does for promoting and welcoming female talent and perspective to FLOSS projects, and linux.conf.au in particular. _______________________________________________ owoot mailing list owoot(a)lists.owoot.org http://lists.owoot.org/listinfo/owoot

1 0

data usage metering by IP on openwrt.
by cory seligman 18 Sep '13

18 Sep '13

Does anyone know of a simple way of showing which of my machines on my home network is hogging all my data? I recently discovered that something on my network is using ~30M per hour all day and night and I'd like to find out what it is. I guess I could go around and turn each thing off and check my ISP's usage meter over a few hours, but there must be a better way of doing it. I have a WRT54GL running: Firmware OpenWrt Kamikaze - With X-Wrt Extensions 8.09 Kernel Linux 2.4.35.4 #15 Fri Jan 22 11:36:55 CST 2010 MAC 00:18:39:ED:A2:73 Device Linksys WRT54G/GS/GL Board Broadcom BCM5352 chip rev 0 Username root Web mgt. console Webif² Version r4838 I'm very lazy, so an installable package that can do this over a web interface would be ideal, but not necessary. anyone?

5 6

RE: data usage metering by IP on openwrt.
by Christopher M. Bailey 17 Sep '13

17 Sep '13

You could use N-Map to see what packet are flying around your network or a simple trial and error turn off all bar one device and if it's not the offender turn on a second rince and repeat -------- Original message -------- From: cory seligman <coryms.luv(a)gmail.com> Date: To: luv-main <luv-main(a)luv.asn.au> Subject: data usage metering by IP on openwrt. Does anyone know of a simple way of showing which of my machines on my home network is hogging all my data? I recently discovered that something on my network is using ~30M per hour all day and night and I'd like to find out what it is. I guess I could go around and turn each thing off and check my ISP's usage meter over a few hours, but there must be a better way of doing it. I have a WRT54GL running: Firmware OpenWrt Kamikaze - With X-Wrt Extensions 8.09 Kernel Linux 2.4.35.4 #15 Fri Jan 22 11:36:55 CST 2010 MAC 00:18:39:ED:A2:73 Device Linksys WRT54G/GS/GL Board Broadcom BCM5352 chip rev 0 Username root Web mgt. console Webif² Version r4838 I'm very lazy, so an installable package that can do this over a web interface would be ideal, but not necessary. anyone?

2 1

strange video connector
by Russell Coker 13 Sep '13

13 Sep '13

http://www.coker.com.au/bug/strange.jpg I was just given what I believed to be an ATI video card with DVI output. When I got it home I found that it didn't have a DVI connector, the above picture shows the connector with a DVI cable next to it for perspective. The connector is physically almost the same size as a DVI connector, but it has more and smaller pins. The box claims that the card has DVI-I, HDMI, and VGA. Either the card that was in the box didn't match the description or there was supposed to be an adapter in the box which was lost before I got it. Does anyone have any suggestions on how to get this going? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

6 7