- Linuxers - lists.fsci.in

MUMBAI: Two day workshop on "Open Source - The Revolutionary Approach" on 17th & 18 Jan- 2003.
by FREDERICK NORONHA 14 Jan '03

14 Jan '03

Thanks to "Venkatesh $Venky$ Hariharan" <venky(a)media.mit.edu> for forwarding... ----- Original Message ----- From: CSI Mumbai Chapter Sent: Friday, January 01, 1999 9:45 AM Subject: Two day workshop on "Open Source - The Revolutionary Approach" on 17th & 18 Jan- 2003. COMPUTER SOCIETY OF INDIA Mumbai Chapter Presents A two day comprehensive workshop on Open Source - The Revolutionary Approach On 17th & 18th January 2003, Time : 10.00 a.m. to 5.00 p.m. INTRODUCTION : Helping the industry discover the benefits of Open Source Technology One of the biggest developments in software during the past decade has been the growth of the open-source software movement. The Open Source movement is an extremely powerful model for software development and advancement, and emerging economies like India particularly have a lot to gain from adopting it. "In the information age, value is based not on scarcity but on familiarity" - This is the seed thought for the movement. Open Source technologies is a term used to define those technologies which is available to the public in source code form, and which does not have licensing restrictions Open Source software generally is distributed under a license that guarantees the right to read, modify, redistribute and use the software freely. Much of the open source software is distributed under the GNU General Public License (GNU GPL). Open Source is doing what GOD, government and market have failed to do. It is putting powerful technology within the reach of cash poor but idea-rich people. And, YESThat is Revolutionary!!! Linux and the Open Source Movement have been developing rapidly in recent years and are now seen as serious competitors to Microsoft. There are millions of user/s world-wide. Some of most successful and robust software on the web today has been developed under this license. IBM and Oracle are now among the 'big names' supporting Linux and have released Linux versions of their database server products. A high-powered lab has been set up to encourage open source development and research. Among the sponsors are Dell, Fujitsu, IBM, Hewlett-Packard, Hitachi, Intel, NEC, Mitsubishi, Red Hat and SGI. The Indian government, too, is planning a countrywide campaign to promote the use of Open Source software as the "platform of choice". The Department of Information Technology has already devised a strategy to introduce Linux and open source software as a de-facto standard in academic institutions, especially in engineering colleges through course work that encourages use of such systems. Research establishments would be advised to use and develop re-distributable toolboxes just as Central government departments and state governments would be asked to use Linux-based offerings. OBJECTIVES To understand the Open Source Technology and achieve clarity of thinking for making cost-effective information technology based decisions. A further take-home would be a freedom of choice on decisions of softwares and an insight into the value-added benefits of the Open Source Technology. WHO SHOULD ATTEND CIOs, CEOs, CTOs, Head of ITs, IT Managers and IT Consultants. WORKSHOP DETAILS The workshop is designed to give a holistic picture of the Open Source Technology domain. It is designed to help one understand the various pros and cons attributable to Proprietary softwares vis-à-vis Open source based softwares. The workshop will start with the basics of Open Source followed by case studies of organisations who have adopted Open Source Technology (eg. Times Of India, Bajaj, Skypak Couriers, etc). Then we will look into the pros and cons of using Open source based softwares. In the wake of these, we will see the problems faced in the implementation of Open source solutions. Here we will look at resource management and tacit knowledge. After this, we will look at the state of the art in technology. The workshop will consist of impromptu discussion sessions, so that there is a forum to share experiences. There will be lots of case studies and demonstrations throughout the workshop. CONTENTS : 1. STEPPING INSIDE THE WORLD OF OPEN SOURCE a.. WHAT IS OPEN SOURCE? b.. WHAT IS FREE? c.. DIFFERENCE BETWEEN FREE & OPEN SOURCE d.. LICENSE - GNU & OTHERS e.. FLOSS 2. OPEN SOURCE INTEGRATORS: A LARGER VIEW ON THE OPEN SOURCE SOFTWARES a.. OPERATING SYSTEM- a.. LINUX- b.. MICRO LINUX c.. DIFFERENT DISTRIBUTORS (RED HAT, CALDERA, DEBIAN ET AL) b.. DATABASE- a.. MySQL- b.. SAP DB c.. POSTGRES SQL d.. SQL LITE e.. ORACLE c.. PROGRAMMING LANGUAGES- a.. JAVA- b.. PHP c.. PYTHON d.. AUBIT 4GL- e.. PERL f.. OTHERS (AWK, SED, BASH) d.. LIBRARIES- AN OVERVIEW ( PHPLIB, PERL DBI, PHP GEM) e.. DOCUMENTORS (DIA) f.. TESTING TOOL 3. OPEN SOURCE BASED UTILITIES a.. VNC b.. PHP - PROJECT 4. OPEN SOURCE FOR END USERS a.. GNU CASH - AN ACCOUNTING PACKAGE b.. OFFICE SUITES 5. NETWORKING THE WORLD a.. LINUX WITH OTHER NETWORKS - SAMBA, MARSNWE b.. MAIL SERVER c.. PROXY (SQUID) d.. LINUX ROUTER 6.EMBEDDED LINUX 7.WAP BASED APPLICATION DEVELOPMENT WITH KANNEL 8. COST SAVING METHODOLOGIES - LTSP 9. THE ROAD AHEAD SPEAKER : Mr. T. Srinivas Reddy, founder, Optimal Solution Providers, is an MCS from the Inter Disciplinary School of Scientific Computing (ISSC) Pune. He is an expert in networking, designing architectures and building web based applications using the Open Source Technology. He has garnered significant expertise in handling various Software Turn Key projects with complete solutions, providing implementation support to off-shore as well as local clients, handling Off-shore Recruitment & imparting computer based training to various professionals such as Doctors, Railway Police Staff, MBA/MCA Students, etc. Driven with an objective to contribute to the world of open source by creating awareness about the open source technologies, he has implemented numerous Open Source software based applications in various organizations such as Konkan Railway Corporation of India, Bajaj Electricals, Western Outdoors, Skypak Couriers, Wilson Greetings, et al. Last, but not the least, a testimony to his endeavor is the successful creation of an environment facilitating the freedom to choose (the seed thought of the Open Source Movement) amongst all his valued clientele Registration Fees: CSI Member : Rs. 2000/- Other : Rs. 2500/- ( Registration Fees covers sessions, Courseware , Lunch & Tea / Coffee ) Cheque should be in favour of "CSI - Mumbai Chapter" Venue, Please Register with : Rajendra Munge Computer Society of India - Mumbai Chapter E -217, Floral Deck Plaza, Near Seepz, Andheri East, Mumbai - 400 093 Tel: 28235476 / 5548 Fax: 28235546 Email: info(a)csimumbai.org / csimumb(a)bom5.vsnl.net.in www.csimumbai.org -------------------------------------------------------

1 0

Re: [ILUG-BOM] Hathway cable modem - high download counts
by Sitaram Chamarty 13 Jan '03

13 Jan '03

> Message: 4 > Date: Sun, 12 Jan 2003 11:28:55 -0500 (EST) > From: Rajesh Deo <rajeshdeo(a)earthlink.net> > Check your firewall configuration, misconfigured firewalls can generate > unwanted ARP packets. Don't know about your double counting problem > though. The ARP packets are always from the "gateway" to machines in the same subnet that are not online. For instance, Sundays evenings (when most machines are probably up and "surfing") I see much less of this! Weird... huh? Regards, Sitaram

1 0

Bulletien Board
by Vidyasagar Venkatesh 13 Jan '03

13 Jan '03

I have installed a free PHP bulletien board on a free website where topics can be discussed.... the website address is.. http://itforums.ionichost.com

1 0

[Fwd: New Digital Forensic resource]
by Trevor Warren 13 Jan '03

13 Jan '03

-----Forwarded Message----- From: Christine Siedsma <csiedsma(a)utica.edu> To: forensics(a)securityfocus.com Cc: crime(a)cs.pdx.edu, Csquad(a)c-squad.org, InternetCrime-L(a)yahoogroups.com Subject: New Digital Forensic resource Date: 08 Jan 2003 11:13:06 -0500 Greetings, Sorry for the cross-posting, but I wish to share this with and get reaction from as many people as possible regarding this effort. I have created a new website www.e-evidence.info Most of the content is there now, and the rest should be up by the end of the week. The site is an organized compilation of "bookmarks" related to Digital Forensics. This IS NOT a commercial site. There are no affiliations with services or products. This is a purely academic effort. Please feel free to visit and make use of the resources. PS Sorry about the banner, but I 'went cheap' Christine Siedsma Program Manager Computer Forensic R&D Center Utica College of Syracuse University Utica, New York 315-792-3708 ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

1 0

[Fwd: MDKSA-2003:001 - Updated CUPS packages fix multiple vulnerabilities]
by Trevor Warren 13 Jan '03

13 Jan '03

-----Forwarded Message----- From: Mandrake Linux Security Team <security(a)linux-mandrake.com> To: bugtraq(a)securityfocus.com Subject: MDKSA-2003:001 - Updated CUPS packages fix multiple vulnerabilities Date: 10 Jan 2003 06:00:22 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ________________________________________________________________________ Mandrake Linux Security Update Advisory ________________________________________________________________________ Package name: cups Advisory ID: MDKSA-2003:001 Date: January 9th, 2003 Affected versions: 7.2, 8.0, 8.1, 8.2, 9.0 ________________________________________________________________________ Problem Description: iDefense reported several security problems in CUPS that can lead to local and remote root compromise. An integer overflow in the HTTP interface can be used to gain remote access with CUPS privilege. A local file race condition can be used to gain root privilege, although the previous bug must be exploited first. An attacker can remotely add printers to the vulnerable system. A remote DoS can be accomplished due to negative length in the memcpy() call. An integer overflow in image handling code can be used to gain higher privilege. An attacker can gain local root privilege due to a buffer overflow of the 'options' buffer. A design problem can be exploited to gain local root access, however this needs an added printer (which can also be done, as per a previously noted bug). Wrong handling of zero-width images can be abused to gain higher privilege. Finally, a file descriptor leak and DoS due to missing checks of return values of file/socket operations. MandrakeSoft recommends all users upgrade these CUPS packages immediately. ________________________________________________________________________ References: http://www.idefense.com/advisory/12.23.02.txt ________________________________________________________________________ Updated Packages: Linux-Mandrake 7.2: f17c83eb8ccb6bb618b3a4dab7a9bbc4 7.2/RPMS/cups-1.1.18-1.4mdk.i586.rpm ed0029788b6b296bb05581eff46f5729 7.2/RPMS/cups-devel-1.1.18-1.4mdk.i586.rpm 00def624c71687b8827241933958a808 7.2/RPMS/cups-serial-1.1.18-1.4mdk.i586.rpm 4dff4f9e6fc7eac07d22945d1469a8f4 7.2/RPMS/printer-testpages-1.1.18-1.4mdk.i586.rpm 83b2da7301cedff6d59c3df2a96a39a2 7.2/SRPMS/cups-1.1.18-1.4mdk.src.rpm Mandrake Linux 8.0: 1d541f2d3c992e627925e87c54209a40 8.0/RPMS/cups-1.1.18-1.4mdk.i586.rpm 6af8ee1580fbe69c1f08b569f21ba161 8.0/RPMS/cups-common-1.1.18-1.4mdk.i586.rpm d345d490a90c3cad7f31e80af294c7db 8.0/RPMS/cups-serial-1.1.18-1.4mdk.i586.rpm 15d3a86224bf59e03b1866e569dc54c6 8.0/RPMS/libcups1-1.1.18-1.4mdk.i586.rpm ba587bd4e9f746ee3a5281bb1e9be219 8.0/RPMS/libcups1-devel-1.1.18-1.4mdk.i586.rpm b623a022104d1eb83408ea105dd16668 8.0/RPMS/printer-testpages-1.1.18-1.4mdk.i586.rpm 83b2da7301cedff6d59c3df2a96a39a2 8.0/SRPMS/cups-1.1.18-1.4mdk.src.rpm Mandrake Linux 8.0/PPC: df84b1c335a69b0b90b5d96ab94bcd0b ppc/8.0/RPMS/cups-1.1.18-1.4mdk.ppc.rpm 27e585a501be4b93bbaedcacbddf67b6 ppc/8.0/RPMS/cups-common-1.1.18-1.4mdk.ppc.rpm e4fd8b352d7d2a42d56c779743884c5c ppc/8.0/RPMS/cups-serial-1.1.18-1.4mdk.ppc.rpm a0763833fffaf609f42dca58879a53d5 ppc/8.0/RPMS/libcups1-1.1.18-1.4mdk.ppc.rpm 889bc806ee2812c4f5b102f5dd46dbb6 ppc/8.0/RPMS/libcups1-devel-1.1.18-1.4mdk.ppc.rpm eb72f554fa1cc4961a5e3d99b286728e ppc/8.0/RPMS/printer-testpages-1.1.18-1.4mdk.ppc.rpm 83b2da7301cedff6d59c3df2a96a39a2 ppc/8.0/SRPMS/cups-1.1.18-1.4mdk.src.rpm Mandrake Linux 8.1: c0cd7bc047fffef9f1478fdb5722e2e6 8.1/RPMS/cups-1.1.18-1.4mdk.i586.rpm c852340e8fcbf5750f8733369a213d08 8.1/RPMS/cups-common-1.1.18-1.4mdk.i586.rpm 6cf9f3ffc2128af26adc4ed1e106cea0 8.1/RPMS/cups-serial-1.1.18-1.4mdk.i586.rpm 672fb16ff0e0d8591495d629df7ca822 8.1/RPMS/libcups1-1.1.18-1.4mdk.i586.rpm 69fc4fee7eeb0bab6efceca3a8614018 8.1/RPMS/libcups1-devel-1.1.18-1.4mdk.i586.rpm 83b2da7301cedff6d59c3df2a96a39a2 8.1/SRPMS/cups-1.1.18-1.4mdk.src.rpm Mandrake Linux 8.1/IA64: d4bb657b04b221ccb051fdf2dd883a11 ia64/8.1/RPMS/cups-1.1.18-1.4mdk.ia64.rpm 557bd96819f68ba32249575d3c0c20ae ia64/8.1/RPMS/cups-common-1.1.18-1.4mdk.ia64.rpm 1736860843b7c8890b62488b4452f136 ia64/8.1/RPMS/cups-serial-1.1.18-1.4mdk.ia64.rpm d47285ab40a8885586847a0998a9bf69 ia64/8.1/RPMS/libcups1-1.1.18-1.4mdk.ia64.rpm 87df36264d25ddc4389c04c9f097540d ia64/8.1/RPMS/libcups1-devel-1.1.18-1.4mdk.ia64.rpm 83b2da7301cedff6d59c3df2a96a39a2 ia64/8.1/SRPMS/cups-1.1.18-1.4mdk.src.rpm Mandrake Linux 8.2: 281f89ef9155e2e430396831be7b3087 8.2/RPMS/cups-1.1.18-1.1mdk.i586.rpm 1e982869c576e5a78665f9d28ff462b1 8.2/RPMS/cups-common-1.1.18-1.1mdk.i586.rpm 7d1db740b9675b9419468a351f798775 8.2/RPMS/cups-serial-1.1.18-1.1mdk.i586.rpm c7f1531bd7dd52182efe9131fb12c5cc 8.2/RPMS/libcups1-1.1.18-1.1mdk.i586.rpm 6d8cf127ddd11ab1e63bc099428faea3 8.2/RPMS/libcups1-devel-1.1.18-1.1mdk.i586.rpm 7f494bb95a0d9cc192ab0131fae0dc17 8.2/SRPMS/cups-1.1.18-1.1mdk.src.rpm Mandrake Linux 8.2/PPC: 139e03bb8ad5d289aea18019e1f4e712 ppc/8.2/RPMS/cups-1.1.18-1.1mdk.ppc.rpm 8f27010ecaafecd149fe8e9601c38fc2 ppc/8.2/RPMS/cups-common-1.1.18-1.1mdk.ppc.rpm 0ff1eb72262b02a1792d98abb382e54f ppc/8.2/RPMS/cups-serial-1.1.18-1.1mdk.ppc.rpm c57decc1cbe9d09da520f318b2271858 ppc/8.2/RPMS/libcups1-1.1.18-1.1mdk.ppc.rpm 7987af72a8a13bbed6810f2624b32a2c ppc/8.2/RPMS/libcups1-devel-1.1.18-1.1mdk.ppc.rpm 7f494bb95a0d9cc192ab0131fae0dc17 ppc/8.2/SRPMS/cups-1.1.18-1.1mdk.src.rpm Mandrake Linux 9.0: 0278e384637506da4e04c32a8360b00c 9.0/RPMS/cups-1.1.18-1.1mdk.i586.rpm 004827e4003c13d58d91e2d275cbf8ee 9.0/RPMS/cups-common-1.1.18-1.1mdk.i586.rpm 488d6bdc022901905788551891b7fa86 9.0/RPMS/cups-serial-1.1.18-1.1mdk.i586.rpm 6fc9095ffcc42b768528364b0ec05ea8 9.0/RPMS/libcups1-1.1.18-1.1mdk.i586.rpm 78bb67665b6c8df9029826c22cdd0bda 9.0/RPMS/libcups1-devel-1.1.18-1.1mdk.i586.rpm 7f494bb95a0d9cc192ab0131fae0dc17 9.0/SRPMS/cups-1.1.18-1.1mdk.src.rpm ________________________________________________________________________ Bug IDs fixed (see https://qa.mandrakesoft.com for more information): ________________________________________________________________________ To upgrade automatically, use MandrakeUpdate. The verification of md5 checksums and GPG signatures is performed automatically for you. If you want to upgrade manually, download the updated package from one of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm". A list of FTP mirrors can be obtained from: http://www.mandrakesecure.net/en/ftp.php Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command: rpm --checksig <filename> All packages are signed by MandrakeSoft for security. You can obtain the GPG public key of the Mandrake Linux Security Team from: https://www.mandrakesecure.net/RPM-GPG-KEYS Please be aware that sometimes it takes the mirrors a few hours to update. You can view other update advisories for Mandrake Linux at: http://www.mandrakesecure.net/en/advisories/ MandrakeSoft has several security-related mailing list services that anyone can subscribe to. Information on these lists can be obtained by visiting: http://www.mandrakesecure.net/en/mlist.php If you want to report vulnerabilities, please contact security_linux-mandrake.com Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team <security linux-mandrake.com> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.0.7 (GNU/Linux) mQGiBDlp594RBAC2tDozI3ZgQsE7XwxurJCJrX0L5vx7SDByR5GHDdWekGhdiday L4nfUax+SeR9SCoCgTgPW1xB8vtQc8/sinJlMjp9197a2iKM0FOcPlkpa3HcOdt7 WKJqQhlMrHvRcsivzcgqjH44GBBJIT6sygUF8k0lU6YnMHj5MPc/NGWt8wCg9vKo P0l5QVAFSsHtqcU9W8cc7wMEAJzQsAlnvPXDBfBLEH6u7ptWFdp0GvbSuG2wRaPl hynHvRiE01ZvwbJZXsPsKm1z7uVoW+NknKLunWKB5axrNXDHxCYJBzY3jTeFjsqx PFZkIEAQphLTkeXXelAjQ5u9tEshPswEtMvJvUgNiAfbzHfPYmq8D6x5xOw1IySg 2e/LBACxr2UJYCCB2BZ3p508mAB0RpuLGukq+7UWiOizy+kSskIBg2O7sQkVY/Cs iyGEo4XvXqZFMY39RBdfm2GY+WB/5NFiTOYJRKjfprP6K1YbtsmctsX8dG+foKsD LLFs7OuVfaydLQYp1iiN6D+LJDSMPM8/LCWzZsgr9EKJ8NXiyrQ6TGludXggTWFu ZHJha2UgU2VjdXJpdHkgVGVhbSA8c2VjdXJpdHlAbGludXgtbWFuZHJha2UuY29t PohWBBMRAgAWBQI5aefeBAsKBAMDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmK6LAKCy /NInDsaMSI+WHwrquwC5PZrcnQCeI+v3gUDsNfQfiKBvQSANu1hdulqIRgQQEQIA BgUCOtNVGQAKCRBZ5w3um0pAJJWQAKDUoL5He+mKbfrMaTuyU5lmRyJ0fwCgoFAP WdvQlu/kFjphF740XeOwtOqIRgQQEQIABgUCOu8A6QAKCRBynDnb9lq3CnpjAJ4w Pk0SEE9U4r40IxWpwLU+wrWVugCdFfSPllPpZRCiaC7HwbFcfExRmPaIRgQQEQIA BgUCPI+UAwAKCRDniYrgcHcf8xK5AKCm/Mq8qP8GE0o1hEX22QsJMZwH5gCfZ72H 8TacOb3oAmBdprf+K6gkdOiIRgQQEQIABgUCOtOieAAKCRCv2bZyU0yB80MeAJ9K +jXt0cKuaUonRU+CRGetk6t9dgCfTRRL6/puOKdD6md70+K5EBBSvsG0OE1hbmRy YWtlIExpbnV4IFNlY3VyaXR5IFRlYW0gPHNlY3VyaXR5QG1hbmRyYWtlc29mdC5j b20+iFcEExECABcFAjyPnuUFCwcKAwQDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmFi+ AJsHhohgnU3ik4+gy3EdFlB2i/MBoACg6lHn5cnVvTcmgNccWxeNxLLZI5e5AQ0E OWnn7xAEAOQlTVY4TiNo5V/iP0J1xnqjqlqZsU7yEBKo/gZz6/+hx75RURe1ebiJ 9F779FQbpJ9Epz1KLSXvq974rnVb813zuGdmgFyk+ryA/rTR2RQ8h+EoNkwmATzR xBXVJb57fFQjxOu4eNjZAtfII/YXb0uyXXrdr5dlJ/3eXrcO4p0XAAMFBACCxo6Z 269s+A4v8C6Ui12aarOQcCDlV8cVG9LkyatU3FNTlnasqwo6EkaP572448weJWwN 6SCXVl+xOYLiK0hL/6Jb/O9Agw75yUVdk+RMM2I4fNEi+y4hmfMh2siBv8yEkEvZ jTcl3TpkTfzYky85tu433wmKaLFOv0WjBFSikohGBBgRAgAGBQI5aefvAAoJEJqo 0NAiRYqYid0AoJgeWzXrEdIClBOSW5Q6FzqJJyaqAKC0Y9YI3UFlE4zSIGjcFlLJ EJGXlA== =yGlX - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE+HmF2mqjQ0CJFipgRAjiwAKDWmzgKyOQSvKf2pN8/9gKjhTJeSwCfS2ak JGRb3Q1TDc9deTVuwh//eew= =O0L8 -----END PGP SIGNATURE-----

1 0

More information regarding Etherleak.......CERT
by Trevor Warren 13 Jan '03

13 Jan '03

Hello luggers, got this off SecurityFocus. See if you figure out how much we gnu-liux users are infected.......if and to what extent. Bye for now. Trevor -----Forwarded Message----- From: Ofir Arkin <ofir(a)sys-security.com> To: bugtraq(a)securityfocus.com Subject: More information regarding Etherleak Date: 10 Jan 2003 19:02:43 +0200 This e-mail's purpose is to clear several issues surrounding the Etherleak paper: - Who is Vulnerable? - Why this vulnerability is so wide spread? - Why the examples are only with Linux device drivers? - Why we have contacted CERT? - Are Device Drivers under Microsoft-based OSs are vulnerable? - How can you test your network card and device driver? - Why is this better then a sniffer? - Why the vulnerability is important? Who is vulnerable? ------------------ Josh Anderson and I tested several Ethernet cards and device drivers. We have found several device drivers which are vulnerable but we never attempted to find them all. It is simply because there are too many. Therefore we have contacted CERT more than 6 months ago and sent them the Etherleak paper and asked them to contact OS manufactures, Network device manufactures, Chipset manufactures, motherboard manufactures and other manufactures and vendors who might need to check their device driver's implementations. In our tests we have experienced this bug under 4 different operating systems: - Linux - NetBSD - FreeBSD - Microsoft Windows One of the Ethernet cards and device drivers we have tested was a Compaq PCMCIA Ethernet card under Windows 2000 (with the latest SP at the time) which demonstrated the vulnerability (among other Ethernet cards which have demonstrated the vulnerability under Microsoft Windows 2000). It is clear to us that device drivers under the various Microsoft operating systems are vulnerable. Microsoft's statement to CERT: "Microsoft does not ship any drivers that contain the vulnerability. However, we have found samples in our documentation that, when compiled without alteration, could yield a driver that could contain this issue. We have made corrections to the samples in our documentation, and will include tests for this issue in our certification process." If you read the statement carefully you can understand that there are OTHER manufactures which have built device drivers for their networking equipment that are based on Microsoft's documentation and therefore MIGHT BE VULNERABLE. Microsoft does not make vulnerable device drivers BUT Microsoft's sample code was vulnerable and therefore Microsoft has added a test to the device driver's certification test which will test for the bug. The situation is that CURRENT Microsoft certified device drivers MIGHT BE VULNERABLE. Different vendors were contacted by CERT more than 6 months ago and had an enormous amount of time to fix this issue before it went public. The authors did not receive a list of vendors who were notified by CERT. The authors were aware that Microsoft was one of the vendors who were contacted and notified regarding this vulnerability. The examples in the paper are given from the Linux operating system because it helps to illustrate the problem. Why this vulnerability is so wide spread? ----------------------------------------- Some networking gear manufactures choose to purchase (in some cases) chipsets from a chipset manufacture rather then developing their own (or using their own). Therefore you might find networking cards from one vendor with chipsets of another chipset manufacture (for example some low-end SMC cards are using RealTek chipsets). Some other manufactures are embedding networking cards with their products (such as motherboards with LAN). To minimize the cost, sometimes, low-end chipsets, which many of whom have vulnerable device drivers on different operating system, are used (some vulnerable device drivers are even shipped with some cards...). How can you test your network card and device driver? ----------------------------------------------------- You need to send packets which are less than 46 data bytes long (the minimum packet size) to examine if you experience this vulnerability with your Ethernet card and device driver. Any packet less than 46 data bytes long would do the trick but we have found the following examples helpful: - An ICMP Echo request packet with 1 data byte in its payload (total of 29 bytes). The rest - 17 data bytes will be filled with information (you can see for yourself in the paper we have written what kind of information it will be) if your Ethernet card's device driver is vulnerable. - You can also use Raw Packets and then have 28 data bytes as room for padded data. Why is this better then a sniffer? or Why is this bug important? ---------------------------------------------------------------- First Example: You can extract information that you will never be able to see on a switched environment. A Second Exmaple: In some cases you will be able to extract information directly from a Router on your LAN (try this with a Linux or a NetBSD machine acting as a router with vulnerable Ethernet cards (and their device drivers) and see for yourself how easily information is being gleaned) or from another networking equipment on your LAN. A Third Example: Another example might be a corporate network (just think about the scenario of a nice flat switched network). There are special instances were the padded information might cross layer 2 boundaries, but they are very unique in nature and depend on many factors. Combining the information is not a trivial task for script kiddies. If you are experienced with networking and seen and analyzed network traffic in the past you will be able to understand what are the portions of information you are absorbing (see the examples in the paper). In our tests we were able to extract pop3 passwords, other clear text passwords, cookies, and other interesting pieces of information. We hope this email will help the community and more people to understand why this bug class is important and problematic. We urge people to read the paper before they cry wolf... Yours, Ofir Arkin [ofir(a)sys-security.com] Founder The Sys-Security Group http://www.sys-security.com PGP CC2C BE53 12C6 C9F2 87B1 B8C6 0DFA CF2D D360 43FA

1 0

No LCD, and Agenda : Can we add..
by jitendras＠vsnl.com 13 Jan '03

13 Jan '03

Dear Amish 1> Plaese note we could not arrange for an LCD . But we have many PCs on LAN. Linux 7.2. 2> Can we add to the agenda: GUNIFY meet : How to involve colleges Jitendra

3 2

Installation Dilemma
by Hemant Garach 13 Jan '03

13 Jan '03

Hi, I have a Pentium 3 processor , Inyel motherborard with 128 MB RAM with Win98 on it. I want to instal linux on it. Problem is : I want to install two distributions of linux (Dragon linux and red hat linux 7) on my pc. Is this possible ? Y / N If not, then which one should i install ? for learning / development purposes. Best regards Hemant garach. _________________________________________________________________ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail

3 2

Help
by OSP 13 Jan '03

13 Jan '03

Plz could somebody provide me information on Documentors. I need info on the following: 1. Why should one use documentors? 2. Where can I obtain more refernce material on DIA? Awaiting reply, Ash

3 2

Re: [PRC] reg DD....any mentors 4 encrypted file system
by Trevor Warren 12 Jan '03

12 Jan '03

Hello luggers, good-morning. Any mentors for a project on Encrypted File System...??? Pls do join us if you would like to spend some of you precious time mentoring the bright young minds on FSF-OS. Bye for now and have a great day all. Trevor On Fri, 2003-01-10 at 17:08, Rajaram Suresh Gaunker wrote: > > Hi > > I'm developing a encrypted file system for linux.. > > can any body help me in doing it > > bye > Rajaram

2 1

Re: [ILUG-BOM] Linux wish-list
by amish_munshi＠sify.com 12 Jan '03

12 Jan '03

Quoting Philip S Tellis <philip(a)konark.ncst.ernet.in>: > **************************************** > * LUG meet on 12 Jan. 2003 @ VJTI > **************************************** > > On Thu, 9 Jan 2003, Nikhil Joshi wrote: > > > OK but Kppp *must* be storing the pass somewhere. most probably it > wud > > be plain and not encrypted. In that case root can access it pls > I am not sure, but a Kppp connections can be only created by the root, so whome are you trying from? > true. but guess what... windows does too. all your dial up passwords > and outlook express passwords are stored unencrypted - well, weak > encryption anyway. basically, if you need to send passwords in clear > text, then you need to either store them in a decryptable format or > prompt the user for them. many users don\'t like the latter, but the > choice should exist. > Again I am not sure, but a friend of mine was telling me that the windows decrypts the user passwords when authenticating instead ofencrypting the just entered password while login, is this true? > -- > Why don\'t you fix your little problem... and light this candle? > -- Alan Shepherd, the first man into space, Gemini program > > > -- > _______________________________________________ > > http://mm.ilug-bom.org.in/mailman/listinfo/linuxers > > > > ------------------------------------------------- Sify Mail - now with Anti-virus protection powered by Trend Micro, USA. Know more at http://mail.sify.com Sunny`s column,World Cup Schedule, Scorecards, The cricket Store and much much more!! http://www.khel.com/worldcup/

2 1

RH8.0 Cds
by Amish Munshi 12 Jan '03

12 Jan '03

Greetings, Can anyone provide me with RH8.0 cds in tommorows meeting? I would like to take the entire collection of 3 binaries + documentation (no source code CD's required). I can eiher pay you in the meeting or get the CD's as per your desire (I will have to buy the blank CD's so I would prefer if I can pay you for the CDs). I am kind of in urgent need of them, help me if you can. Thanks. Bye. -- Amish K. Munshi In GNU we Trust.

2 1

Re: gnowledge site
by Nagarjuna G. 12 Jan '03

12 Jan '03

I will try to reach early by 30 minutes. Nagarjuna

1 0

Meeting at VJTI not Khalsa college
by Nagarjuna G. 12 Jan '03

12 Jan '03

The meeting is at VJTI, Mechanical Eng Dept. and not Khalsa college. The dept is near the Khalsa college end. Nagarjuna

1 0

[LIH]Are you a cyberoam 24online user? (fwd)
by Philip S Tellis 12 Jan '03

12 Jan '03

Please Cc the OP when replying. ---------- Forwarded message ---------- Date: Mon, 18 Nov 2002 06:07:36 +0530 From: Sandip Bhattacharya <sandip(a)linux-delhi.org> Reply-To: linux-india-help(a)lists.sourceforge.net To: ILUGD Mailing list <ilugd(a)wpaa.org>, Linux India Help <linux-india-help(a)lists.sourceforge.net> Subject: [LIH]Are you a cyberoam 24online user? [Warning:Crossposted. Watch where you reply] Hi! 1. I wanted to know how many of the folks around here are using cyberoam 24online based cable networks. 2. If you have, what have been your experiences with using it on Linux. a. Have you asked your cable network wallah about using the network with Linux clients? b. Or, have you given up and decided to use the windows machine for accessing the Net 3. Are you still interested in finding out a way of using these networks using Linux? - Sandip -- -------------------------------------------------------- Sandip Bhattacharya sandipb <@> bigfoot.com http://www.sandipb.net GPG/PGP: 0x08EB637C --------------------------------------------------------

5 4

Re: [ILUG-BOM] LUG-meet at VJTI
by amish_munshi＠sify.com 12 Jan '03

12 Jan '03

Greetings, You are more than welcomed, the meeting is a Khalsa college near VJTI, on first floor mechanical dept. We will be expecting you. Bye. Quoting Kamlesh Shah <pitcom(a)vsnl.com>: > **************************************** > * LUG meet @ 4.00 pm on 12 Jan. 2003 @ VJTI > **************************************** > > Hi.. all > > I want to participate today\'s LUG meet at VJTI at 4 pm. As I know, VJTI > > is at Matunga. > Wants to explore Linux. > > Regards > > Kamlesh Shah > > > > -- > _______________________________________________ > > http://mm.ilug-bom.org.in/mailman/listinfo/linuxers > > > > ------------------------------------------------- Sify Mail - now with Anti-virus protection powered by Trend Micro, USA. Know more at http://mail.sify.com Sunny`s column,World Cup Schedule, Scorecards, The cricket Store and much much more!! http://www.khel.com/worldcup/

1 0

LUG-meet at VJTI
by Kamlesh Shah 12 Jan '03

12 Jan '03

Hi.. all I want to participate today's LUG meet at VJTI at 4 pm. As I know, VJTI is at Matunga. Wants to explore Linux. Regards Kamlesh Shah

1 0

The Wireless and Mobile Market Starts to Mature
by Kiran Nadgir 12 Jan '03

12 Jan '03

Read this gartner report for 2003. and particularly what it has to say abt linux. http://www.gartner.com/DisplayDocument?ref=TechUpdate&id=378452 "Linux will not emerge as a platform to be taken seriously in 2003." ----------------------------------------------------------------- Kiran Nadgir Mahindra British Telecom. Tel : 56922000 extn - 8070. Mobile - 9820444403. Email - kirann(a)mahindrabt.com WebSite: www.mahindrabt.com ----------------------------------------------------------------- Quote of the week ~~ " I'd rather regret things I've done than regret things I never got to do." Leti G. --- Texas This goes for anything in your life. I like to live by this quote. To me, it means that I need to do things I want to do, when I want to do them. I'm not going to get to live my life over again! Sure, sometimes there'll be consequences, but I'd rather say I got to do them. When I grow old and am telling my grand children and great-grand children about my life, I don't want to be wishing I'd done more! ~~ ----------------------------------------------------------------- ********************************************************* Disclaimer This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited. ********************************************************* Visit us at http://www.mahindrabt.com

5 4

Meeting for the gnowledge.org
by Amish Munshi 12 Jan '03

12 Jan '03

Greetings, Can we Trevor. Myself (Amish K. Munshi) Dr. Nagarjuna. Rajeev Vinayak Hegde If I am missing someone then please join in. meet for the sourceforge site tommorow, I am busy after the meeting, can we meet before the meeting at approx 3:30pm at Khalsa college? Please reply to this mail, as soon as you can so we can decide accordingly. Bye. -- Amish K. Munshi In GNU we Trust.

2 2

Debian Cds
by jtdsouza＠softhome.net 11 Jan '03

11 Jan '03

On Friday 10 January 2003 15:11, quasi wrote: > **************************************** > * LUG meet on 12 Jan. 2003 @ VJTI > **************************************** > > On Fri, 2003-01-10 at 13:11, Satya wrote: > > I'll bring Debian for my box in Mumbai. It's 3.0r0 from an HTTP mirror in > > Austria. > > > > Or do we already have that? > > Heh. You must be under the impression that Mumbai is in the > Andamans or something... '-) Might be a real cool place to be in ;-). Except for connectivity. > > I have got ~300Mb of 3.0 from http.us.debian.org et.al. It has most > what I would use. All seven iso. 1-4 are burned. havent burned 5-7 yet. Also Knoppix downloaded end of dec. And RH enigma 2cds binary, 2 src and 1 documents. And K12LTSP 3 cds. If anyone needs them bring me Imation / Maxwell / HP /Sony blanks and take any of the above. rgds jtdsouza(a)softhome.net

2 1

12 Jan Meet: Venue, 4.pm.
by jitendra 11 Jan '03

11 Jan '03

The LIG Meet at VJTI will be at Comp Lab ,First Floor Mechanical Engg VJTI. Plaese note this is at the Khalsa College end of the VJTI campus (whose other end meets at 5 garden. Phone numbers relevant: Lab address: 24151791 My Mobile : 9892288943 I hope we will have the agenda Jitendra

3 2

(no subject)
by satyajit balkrishna saste 11 Jan '03

11 Jan '03

Anyone, wanted some help on making cgi script run on redhat 7.2 Echo soon... -Satyajit

1 0

Mirror Debian
by warren＠freedomink.org 11 Jan '03

11 Jan '03

dear luggers since there is only one debian mirror in india and that also it is missing a number of packages can some one please mirror the /debian dir for i386, it will also help as a apt source and using jigdo we will able to download jigdo iso's faster regards warren brian noronha warren(a)freedomink.org

1 0

GNULinuxIndia 10012003
by Frederick Noronha 11 Jan '03

11 Jan '03

e88~~\ 888b | 888 | / 888 888 ,e, d888 |Y88b | 888 | L 888 888-~88e e88~\888 " /~~~8e 8888 __ | Y88b | 888 | I 888 888 888 d888 888 888 88b 8888 | | Y88b | 888 | N 888 888 888 8888 888 888 e88~-888 Y888 | | Y88b| Y88 | U 888 888 888 Y888 888 888 C888 888 "88__/ | Y888 "8__/ X 888 888 888 "88_/888 888 "88_-888 -------------------------------------------------------------------- Formerly LinuxInIndia * Compiled by: Frederick Noronha * Jan 10,2003 -------------------------------------------------------------------- Although we pride ourselves on being a software superpower, hardly any of the products we use are made in India. -- G. Nagarjuna of TIFR, member of the Free Software Foundation, quoted in a recent news report in the Times of India. See http://timesofindia.indiatimes.com/cms.dll/html/ uncomp/articleshow?artid=33405578&sType=1 NUMBER 300,000 FROM CHENNAI: The Linux Counter (counter.li.org) is where users of the GNU/Linux operating system can voluntarily register themselves as such. Recently, Harald Alvestrand of Norway, the founder of the Linux Counter, announced: "Account number 300.000 got handed out today - to a Linux user in Tamil Nadu, India." Let look forward to many other GNU/Linux enthusiasts signing up there and proudly identifying themselves as users of Free Software. PROJECT RESOURCE CENTRE GETS A FILLIP: Thanks to the many students and mentors (over 100) that are now part of this list, the Project Resource Centre has been seeing some interesting discussions. It is a place where students wanting to work on GNU/Linux projects can get ideas and guidance from volunteer-mentors. If you fall in either category (student or possible mentor) please do sign up at http://mail.sarai.net/mailman/listinfo/prc THE COMPASS TO THE EAST: ILUG-Calcutta is participating in COMPASS 2003 (24-27 Jan 2003) -- the biggest annual IT event of the Eastern India. "We are having 18sqm of space and are planning a big show," say local volunteers. P K Sharma <pksharma(a)cal.vsnl.net.in> recently gave an idea of plans for participation. To subscribe to this LUG's mailing list send mail to majordomo(a)ilug-cal.org with the body "subscribe ilug-cal" and an empty subject line. FAQ for the LUG: http://www.ilug-cal.org/node.php?id=3 They seem to be heading for it rather seriously. There are plans for demo's, installations, showcasing various distros, and focussing on GNU/Linux in school / at home / in the corporate world. If all goes as per plan, there will also be emphasis on the work done in GNU/Linux localization (Bangla Linux), how Free Software can be an enabler and force multiplier in e-governance, development possibilities (languages, tools, IDEs etc) , scientific apps (Octave, Blender, etc), high-end computing like clustering and FT, and 'cool stuff' that includes video editing, dual heading, virtual machines, emulators and media streaming (MP3s and video). More details from Indranil Das Gupta <indradg(a)cal.vsnl.net.in> or Sayamindu Dasgupta <unmadindu(a)Softhome.net> WATER... AND GNU/LINUX: Dr Vikram Vyas, who has written an interesting software to help villagers calculate availability of water in their region, is eager to port it to GNU/Linux. If you would be interested in the same, kindly get in touch with him at Vikram Vyas <visquare(a)satyam.net.in> GNU/LINUX IN WEST ASIA: Quite a few GNU/Linux mailing lists are active in the Gulf area. Some see the active involvement of Indian expat communities. One list is Linux-middleeast(a)yahoogroups.com This group is sponsored by GoldenSun Internet Consulting &amp; Research, Phone 971-4-2728310 /Fax:971-4-2728320 http://www.uaelug.org Its moderator is GSC Prabhakar James, and the LUG was founded in 1999. DEMO@SCHOOLS IN CHENNAI: bharathi(a)lantana.TeNeT.res.in informs that work on the GNU/Linux-in-schools front is also being undertaken by Demo@Schools volunteer Suraj Kumar. Contact him at suraj(a)symonds.net THEOPENCD LAUNCHES FIRST EDITION: Something from outside South Asia, but of potential interest to many of us. This is a collection of high-quality Open Source Software that runs in Windows. A good bridge for reluctant users of proprietorial software who would like to try out the power of Free/Libre and Open Source Software (FLOSS). Says Henrik Nilsen Omma, one of the project leaders: "Our aim is to create a simple to use CD distribution of Open Source software for Windows, and in that way spread the OSS message.... The disc allows new users can try out Open Source software (OSS) in the comfort of their own, familiar operating system, rather than having to take the drastic step of reformatting their hard drive to install Linux or BSD. The collection, which includes OpenOffice.org, AbiWord and Beonex is primarily intended for non-technical computer users. However, we expect that the disc will appeal first to experienced OSS users, who will hopefully find it a useful vehicle by which to introduce OSS to their less computer-savvy friends." They invite all FLOSS enthusiasts to download the ISO, burn CDs and distribute them widely to friends, local schools, universities, and companies. http://www.theopencd.org/ See http://linuxpr.com/releases/5379.html More details from Henrik Nilsen Omma <henrik(a)theopencd.org> SIRTAJ SINGH KANG... IN THE SYDNEY MORNING HERALD: Australia-based Indian-origin KDE developer Sirtaj Singh Kang is profiled in a prominent newspaper. Taj is one of the two nominated as official KDE spokespeople in Australia. Quote: "When I was around 14, my dad bought us a 286-based computer. It was quite expensive. We weren't poor by any standards but this stuff was still a luxury. Still, for me to get all the tools a kid needed to learn programming cost as much again, even just to get started. Given that software is infinitely reproducible practically for free, there is really no excuse for this especially now that hardware has become so cheap. Give interested people access to software, allow them to improve and redistribute it - that's the way for computing to really make a difference." http://smh.com.au/articles/2002/11/01/1036027033828.html *************************************************************************** WANTED: Volunteers to support and help the growth of smaller GLUGs and LUGs across India. If you are willing to encourage a Little League LUG to grow and become active, please contact Sukrit D <sd_root(a)yahoo.com> of Pondicherry who formulated the Little League idea. ILUG-Bhubaneswar was recently discussing what could be done to boost their activities. *************************************************************************** GNOWLEDGE.ORG: Dr G Nagarjuna, an eminently optimistic and always-upbeat educationist from Mumbai <nagarjun(a)hbcse.tifr.res.in> recently announced that he completed setting up a Sourceforge site for the Project Resource Centre (a centre for mentors to guide students in Free Software work) and other projects. Says he: "I haven't tested it completely, but it seems to be working satisfactorily. I request the various groups to begin using this facility." Needed: volunteers to maintain the site. http://gnowledge.org Also see http://mail.sarai.net/mailman/listinfo/prc MAXIMUS2 INITIATIVE: Maximus2, a wholly owned subsidiary of a British company, is to give away what it terms its powerful office productivity suite -- GroupX2 -- free of cost. "Every organization with 10 to 500 employees needs this application," it says. "With GroupX2 your company will become more organized, productive and highly efficient. The GroupX2 application is normally priced at $1000 is free (of cost) for the first 2003 companies that register," says the firm. Register at www.maximus2.com This application consists of full working software enabled for 20 users. GroupX2 will "take the pain out" of managing tasks, people, messages, calendars, meetings, contacts and much more. Please note, this is not 'Free Software' but a limited offer of a free-of-cost version for early subscribers. http://www.maximus2.com BSPELLER, ON THE BENGALI LANGUAGE FRONT: Thanks to Sayamindu Dasgupta <unmadindu(a)Softhome.net> for forwarding a post from Taneem Ahmed <taneem(a)eyetap.org> on the Bengali computing front. What is Bspeller: A light weight text editor with a Bengali spell checker. This program is part of the Bengali dictionary project. Bspeller can also print Bengali text files using OpenType fonts, a feature currently not available in most of the text editors, eg. gedit, kedit, etc. This is the first release of Bspeller that makes any sense as it actually works as a Bengali spell checker! More information, instructions, and screenshot can be found at: http://www.bengalinux.org/projects/dictionary/bspeller.php Bspeller-0.3 is now available for download from: http://sourceforge.net/project/showfiles.php?group_id=43331 SARAI.NET OFFERS SUPPORT FOR FREE SOFTWARE: The Delhi-based non-profit has taken another step to support Free Software. Meyarivan <mary(a)sarai.net> recently announced the independent fellowships under its FLOSS Initiative. Those selected include projects for: Linux based CNC Controller Sagar Behere [ behere at sancharnet.in ] and Sandeep Bhambra. The project aims to develop a GNU/Linux based CNC controller using off the shelf hardware. The mechanical design of the CNC machine has been completed and they have developed an add-on ISA expansion card that can control stepper motors simultaneously. Management and Information System - Tapan Parikh/Ekgaon [ tap2k at yahoo.org ] This project aims to implement a complete, modular Management and Information System (MIS) for village-based savings and lending groups, otherwise known as Self-Help Groups (SHGs). This MIS would allow central tracking of the internal accounts, financial position, loan repayment performance and related account information for a community of SHGs, federated under a common administrative and financial body, referred to as a SHG Federation, or a Community-Based Financial Institution (CBFI). Library Management Software - Sharmad Naik [ sharmad at goatelecom.com ] This project will implement a complete library management system. A working version of the software has already been released and future updates will provide complete functionality required for a library. KreSIT (Kanwal Rekhi School of Information Technology), IIT Bombay [ http://www.it.iitb.ac.in/ ] There are about 19 groups working under the guidance of Dr.Pathak and Ms. C.Vijayalakshmi at KreSIT, IIT Bombay on opensource software. They have already developed software for distance education and are currently developing various applications in office automation, voip and localization. Sunil Abraham [ sunil at mahiti.org ] Will test and benchmark free software to ensure that it can be used for mission critical applications. Will conduct research on different types of user communities, usability studies for various interfaces and devices and technology cost calculator for village information kiosks and work on open source storage formats and algorithms for bioinformatics. INDLINUX DISTRO... AN IDEA WITH LOCAL LANG SUPPORT: Details of one distro planned, with local language support, are at http://www.indlinux.org/distro Also see the Indian Linux Project www.indlinux.org and the Indic-Computing Project indic-computing.sf.net LANGUAGE-RELATED SOLUTIONS: Says Guntupalli Karunakar <karunakar(a)freedomink.org> : IIIT Hyd has a good track record on free software, they have released lot of language related stuff under GPL (language dictionaries, machine translation tools etc). See http://www.iiit.net/ltrc/Dictionaries/Dict_Frame.html and http://www.iiit.net/ltrc/downloads.html SITE FOR EXCHANGING SOFTWARE: A youngman from Goa - Ajay - <incubuz(a)softhome.net> tells of a small site he has built for "exchanging software". Says he: "It is very basic and I plan to build upon it gradually." Check http://sofall.vze.com GLUE, AN INNOVATIVE SOLUTION FOR SCHOOLS FROM DELHI: Feedback from Bijon Shaha <bbshaha(a)yahoo.com> about the GLUE, an interesting concept from Ajith <ajith(a)nsc.ernet.in>: The cd uses the concept of preinstalled and prconfigured LTSP server which has been tar archived on a cd. Installation is basically extracting this tar ball into the new partition in the new system, which is very fast. At the first boot it depends on Kudzu for quick detection of hardware in the new machine where it usually has to unconfigure the mismatching hw and configure with the new hardware, and you are ready to use the server! BHUBANESWAR LUG NEEDS SUPPORT: This is about a (GNU)Linux Users' Group that needs support. The Bhubaneswar LUG mailing list was setup sometime in 2000. But there has been only a very posts to this lists. You can join the list by sendign a message to ILUG-BBSR <ilug-bbsr-subscribe(a)yahoogroups.com> ... This info was posted via LIG, the Linux India General list. See https://lists.sourceforge.net/lists/listinfo/linux-india-help --------------------------------------------------------------------------- BOUQUETS&BRICKBATS BOUQUETS&BRICKBATS BOUQUETS&BRICKBATS BOUQUETS&BRICKBATS --------------------------------------------------------------------------- From: Nikhil Shanker <nikhil(a)ilug-hyd.org.in> Subject: Re: NEWSLETTER: GNU/LinuxIndia Dec 27, 2002 I share the same opinions as Arun Sharma on LIG. The logo reduces "Linux" to a single column. GNU/Linux is acceptable since it caters to some individuals' sentiments, but this looks like an overkill. I think RMS must be show the logo with "LINUX" replaced with "HURD" with the same one column layout. I bet, he'd be satisfied with... e88~~\ 888b | 888 | 888 888 888 | 88888b 888 / d888 |Y88b | 888 | 888 888 888 | 888 88 e88~\888 I 8888 __ | Y88b | 888 | 88888888 888 | 888ee88 d888 888 N 8888 | | Y88b | 888 | 88888888 888 | 88888b 8888 888 D Y888 | | Y88b| Y88 | 888 888 Y88 | 888 88b Y888 888 I "88__/ | Y888 "8__/ 888 888 "8__/ 888 88b "88_/888 A bah! > > SPEECH SYNTHESIS: Rohit Kumar of the Speech Processing Lab, LTRC at > IIIT Hyderabad points to a speech synthesis demo at > http://196.12.44.11/~speech/index.htm Says he: "I look forward to > your responses both about the speech quality and the ease of use and > understandability of the web interface. PS: For all [GNU/]/Linux > enthusiasts the speech synthesizer is currently built on Red Hat > Linux 7.2 and we have tested it with RHL 8.0." This is insane too. You're quoting a post here, and you GNU-hijack it within the quotes. This very prominent and noticable GNU-hijacking makes the newsletter more unreadable. Although the content is commendable, the we-will-serve-you-oh-RMS-my-l0rd attitude hides the real juice. Maybe even this comment will only be listed in the "Comments" section of the next version of the newsletter just like Arun's was. But I've been looking at this newletter everytime and seeing more GNU than actual information is really disheartening. The best part is it gets posted to LI and LUGs. Please note that these its not GLI and GLUGs. I imply no disrespect to the poster. Its just an opinion. -- Nikhil (nikhil.shankar at acm.org) -------------------------------------------------------------------------- YOUR INPUTS and criticism to this newsletter are welcome. Contact us at fred at bytesforall dot org --COPYLEFT 2002, GPL. May be freely circulated provided entire text is retained. FN --------------------------------------------------------------------------

2 1

LINK: India's first GNU/Linux mag on its way soon...
by Frederick Noronha 11 Jan '03

11 Jan '03

1 0

Linux not recognizing VFAT partition (Kernel 2.4.18)
by The Linuxer 10 Jan '03

10 Jan '03

Hello, I've just installed SuSE 8.0 on my (friend's) P4 running Win2k. I resized the DOS VFAT partitions to accomodate Linux. My Windows (C, E and F) partitions are not being mounted within Linux - it says "VFAT is not supported by this kernel". I know that there is no problem with the kernel itself as I have already installed the same distro from the same CDs on my PC and it works fine. Please enlighten. B. Ghose _________________________________________________________________ The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail

2 1

(kinda) Free Yahoo! pop3
by Nikhil Joshi 10 Jan '03

10 Jan '03

Hi! just found a gem for Yahoo! mail users the pop3 service is no longer free as you know thats the reason I switched to gmx.net Now I found this http://yosucker.sourceforge.net/ and it retrieves the mail from Y! account. Its ultra cool, it supports multiple accounts too. give it a try ... -- Nikhil Earth,19.12N 73.02E

1 0

Meeting Agenda
by Amish K. Munshi 10 Jan '03

10 Jan '03

Greetings, The meeting agenda for the 12th is as follows. The meeting is at 4pm. 1. regex and libtool - Philip Tellis 2. Storage Area Networking - Kishor Bhagwat Bye. -- Amish K. Munshi In GNU we Trust.

1 0

Linux wish-list
by Nikhil Joshi 10 Jan '03

10 Jan '03

Hi! Here is a wish-list of the features I would like to have in Linux so as it to be usable/popular among the masses 1. Better hardware support: Let the multimedia k/b, the jazzy 5 button mouse, the fundoo steering wheel work under Linux. 2. Less dependence on root: 2.1 Lets say me and my brother use different ISPs and we would not like to share passwords. How to do that ? I believe there is no viable solution 2.2 My family members would like to install the apps they downloaded from the net (rpm files). How to ensure that they can install the stuff? (sudo ? but they can accidently uninstall some progs that I installed How to prevent that?) 2.3 My system is badly shut and for fsck the shell script asks for the root password. But I'm (the root)not available. The system wont proceed without fsck. What to do now? Note: even with ext3, if the fs is in real bad shape RHL *asks* for root password. 3. Leaner Desktop Environments Personal experience: GNOME/KDE, supposedly default desktop environs are slow (thats an understatement) on Pentium 166/32MB RAM. IMHO Windows GUI is leaner and more intuitive than KDE,GNOME (Caveat: I do not use Windows) I use Fluxbox. It is *only* for experienced users. (OK I'm not claiming to be one ;) 4. Better Software support Unless and until there is support for : Educational CDs (GRE,TOEFEL,GMAT...) Encyclopedia CDs ISP CDs (VSNL dialer CD e.g.) etc. we can be *very sure* that Linux wont be as useful as Windows for students and home users 5. More Games please Frankly majority of teenagers are gaming enthusiasts and understandibly so. Linux does not stand in the competition AFA games are concerned. OK there may be QUAKES and DOOMS but the numbers are nowhere near as those offered by Windows. 6. Better/Easier Development environment OK C may be good for experienced programmers. But I've seen many novice people write good sofware with VB. It is easy (period) 7. The (regulary) irregular crashes Please.. make some feature so that Linux crashes sometimes. It kinda gives you that deja-vu feeling. ah... those were the days :) -- Nikhil Earth,19.12N 73.02E

9 24

linux lunacy, dec22 photos
by Gurpreet Singh 10 Jan '03

10 Jan '03

they are up at http://www.geocities.com/tonysingh4u/lunacy/ and ppl who missed that dont crib! jump on the opportunity next time gurpreet Gurpreet Singh Student Final Yr Computer Sc. & Engg. --------------------------------------------------------------------- M A K E Y O U R O W N R O A D --------------------------------------------------------------------

1 0

[Announce] Sendmail: Header & Envelope rewriting howto
by Philip S Tellis 10 Jan '03

10 Jan '03

Have released an updated version of the howto. It has updates for sendmail 8.11.x get it at http://db.ilug-bom.org.in/lug-authors/philip/docs/Hdr-Env-Masq-miniHOWTO.txt Philip -- Jones' Second Law: The man who smiles when things go wrong has thought of someone to blame it on.

2 2

Re: [PRC] reg DD....any mentors...????
by Trevor Warren 10 Jan '03

10 Jan '03

RAV AntiVirus has scanned the original mail and found it virus free. The clean mail is attached.

2 1

ftp says No route to host
by Rahul Saxena 10 Jan '03

10 Jan '03

hi everyone, I am trying to connect to the below address, to upload files iusing ftp, but it fails with the below msg. "227 Entering Passive Mod (212,15,64,96,150,49) Cannot create a data connection: No route to host" whats the problem ? i am using ftp. rahul -- Woodward's Law: A theory is better than its explanation.

2 2

PHP Freelance Developers
by Hitesh Dave 10 Jan '03

10 Jan '03

Dear Kapil, let me know where to send details ... for freelance PHP developers at what email id ??? regards, Hitesh

1 0

Re: Happy New 2003.....plan for this year
by Trevor Warren 10 Jan '03

10 Jan '03

Hello luggers, good-morning. Greetings of the season and wishes of a prosperous new year ahead to all of you. I write this mail so as to invite suggestions on the events for the coming year....We ended last year with a bang and drowned in the gnu-linux waters at a linu lunacy trip. But this year we need to have a concrete plan on the following..... --> Workshops --> Gnu-Linux lunacy trips --> Conferences --> Competitions --> National Level Paper Presentations --> App Development Contests --> FSF/OS Business plan Contests --> Corporate workshops These are some very ambitious ideas i have in mind. I would like to use this podium as an idea to proliferate them into your minds. Pls think about the same. We should move from being just passive members of this laid back society and make sure that a minimum contribution from our end goes to the FSF/OS movement towards furthering its cause in our own spheres. Awaiting input from you on the same. Bye for now and have a great day. Trevor On Fri, 2003-01-03 at 12:45, sachin rase wrote: > May This year brings joy to everybody > including bill and his stupXd will > as i have got power of "ps" & "kill" > the gnu takes us to new hill this is my will > > -- > :) > > ===== > +----------------------------+ > |Touch the limits with Linux | > +----------------------------+ > > __________________________________________________ > Do you Yahoo!? > Yahoo! Mail Plus - Powerful. Affordable. Sign up now. > http://mailplus.yahoo.com

7 8

venue & time for LUGGERS meet
by Tushar K. Vilankar 09 Jan '03

09 Jan '03

Hi: good morning... can the concerned ppl here in this grp make a post as to watz the exact venue at VJTI & time for the meet on 12/01/03. awaiting a prompt response. PS> i think that some1 had already made a posting 4 this info, but i guess no1 has reverted. -- Regards, Neo [Thomas Anderson] from the "The world of MATRIX which is an simulation & a creation of machines equipped with Artificial Intelligence."

1 0

Windows vs. Linux/UNIX vulnerabilities
by nici bhatt 09 Jan '03

09 Jan '03

Hi Aberdeen Group has published a study comparing the security of Linux/UNIX systems with that of the Microsoft Windows family of products. Aberdeen Group report, vol. 1, no. 35, is dated Nov. 12, 2002, and its a brief but interesting read. I cant post a direct link since you have to subscribe to see the report. But it doesnt cost anything, so I recommend that you go to the Aberdeen site, register, and then take a look at the entire report. site URL www.aberdeen.com even you can go to CERT advisories site to see this. _________________________________________________________________ MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus

1 0

[OT] Missing lines in email
by Tahir Hashmi 09 Jan '03

09 Jan '03

Hi all! I got viki's mail with several missing lines in the earlier parts of the message that caused.The only thing that looks a bit different is that there's no X-Mailer header and the Content Type is text/plain format=flowed. Did anyone else experience this, especially Sylpheed users? I'm using Sylpheed 0.8.8 -- Tahir Hashmi (VSE, NCST) http://staff.ncst.ernet.in/tahir tahir AT ncst DOT ernet DOT in We, the rest of humanity, wish GNU luck and Godspeed

1 0

help
by Purnendu Ghosh 09 Jan '03

09 Jan '03

can u find me a si 6215 driver for redhat 7.2 i need it badly for my office..plz try __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

3 2

Re: Linux India Initiative
by sherlock＠vsnl.com 09 Jan '03

09 Jan '03

On Saturday 04 January 2003 20:41, Nikhil Joshi wrote: > **************************************** > * LUG meet on 12 Jan. 2003 @ VJTI > **************************************** > How did u conclude that i assumed the worms and crashes are imposible. They indeed happen, but are extremely rare in a well configured system. Hence the maintainence costs are very low. > On Fri, 3 Jan 2003, jtdsouza(a)softhome.net wrote: > I guess you are assuming 3 things: > > 1. Worms/viruses are impossible under Linux > > 2. There are no free (beer) tools to combat worms/viruses under > Windows It is not the cost of the tool (capital cost) but the cost of putting these tools to work that is very high (service costs). > 3. Random crashes are impossible in Linux > > IMHO *all* these assumptions are misleading and incorrect. 1 and 3 are very rare in GNU/Linux. Morover they require a badly configured system to "infect". If u happen to use Debian u would be quite safe (IMHO). My point was "conversion" must highlight the maintainence and recurring cost aspect not the capital costs. As for the "piracy n religion" bit call NASSCOM if u wanna stick to the law. rgds jtdsouza(a)yahoo.com

2 1

Meeting timings for 12th?
by Amish Munshi 08 Jan '03

08 Jan '03

Greetings, What time is the meeting? Also where is the meeting in VJTI, the location inside VJTI? Bye.

1 0

LTSP
by OSP 08 Jan '03

08 Jan '03

Is there any Indian Company that has implemented LTSP? If yes, where can I find the details on the same??? Ash

3 2

need RHL 8.0 CDs
by sameer shinde 08 Jan '03

08 Jan '03

1 0

Re: who are we kidding - GNU/Linux replacing Windows
by viki p 08 Jan '03

08 Jan '03

Hi Hey why are we all putting huge efforts to prove something which not in our hand this just pure wastage of time and costly productive man hours as well as Bandwidth. To prove Linux can gain place on common desktop we need to prove that Linux OS is user friendly and to use it as operating system is not a big deal. Logically arriving at conclusion which can prevent this from happening 1 for all the common people the words used like kernel, security, update kernel, access to file system, hacking, worms and troajans Are like out of the world. They dont look for all this when they go and buy a pc for them self. What they look for is how easy it is to use in daily life without much knowledge of pc or operating system. DO WE have this in Linux and I say BIG NO this is not the case. Dont look from your angle try to be on other side and you will find the better justifications for the BIG NO. 2 take example of top senior executives of any organization or any senior bureaucrats they dont have enough time to go and learn something new they are happy with what they have on their desktop so if they can not change then how we are going to change common people. For this you need very high level of efforts to migrate them to something of the same wave length and similar interface. 3 today you say MS is making lot of money from their product I dont understand why this kind of presumption should come across. Check last 15 years of IT industries and try to understand basic business model of all the big IT Company. They have done same things but ball game was different. One of the biggest money makers in that time was on the same track at that time. You know it and I dont want to name it. All the proprietary work use to drag you in the same black hole. sale product at low cost and then cut them in support, what is this dont you think same game but with different attitude. Today if some company is investing n billion dollars in R&D of Linux do you think that work will remain open source? NO I dont think so it will become their technology and they will sell it to recover as well as make n+1 out of n so this is business and every thing is fair as long as you can make money. Today MS is ruling the business as they want. this is because they dont have competitor to stop them doing this. Why Novell Netware failed to sustain their popularity, may be because they could not keep their technology to the mark what users really wanted. At one time there was major Demand of CNE and major public were certified so there was no one to beat Novell on the ground level and MS was in business of desktop marketing and not in server marketing. But still they took chance and introduced windows server product and then see how fast they have improved their technology in just second or 3rd major released of WINNT 4.0 and Novell was almost out of the demand this is not a joke you need to have lot of things to do this. I am throwing light on this because industries have never taken much needed lesson from this. MS can not stop any individual scholar from his development the way Mr. Linus has given us LINUX. Or neither they can stop any big organization from developing their operating system. But all are wasting their time in fighting MS in legal battle and not investing their time and money in developing something which can fight in market with all the needed things at ground level. Today if MS is making money then they are also providing fruit to lots of people just go in market and see how many developer are really working on open source/other project and how many are working on MS platform you will come to know why MS is more successful in business than others. I know their not giving chance to other products to prove but at the end if you or I own Microsoft would have been done the same things what they are doing. It is very easy to become number one but it is very difficult to maintain that position for long I am not at all a person who is pushing MS but rather I am a person who tries to understand the phenomena. 70% of the people in our LUG member must be using MS as a prime factor do they can assure you to migrate to Linux in next 3 month and I say they can not because there are lot of supporting application running which needs to be migrated on linux so guys this is not that easy. Do not take me other way I am not a person who sticks to one particular standard I am working on all the platforms that is Sun-Solaris, HP-UX, SCO-Unix, FreeBSD, AIX, Linux and MS. But our industry is a customer driven, so out 10 projects I am doing 7 are on MS platform. I was been very happy to see lots of mail have been exchanged on this topic and that triggered me to write the root cause of the problem. If at all I hurt you in any or part of the mail then I am sorry but take this positively and think what we should do to make linux more popular rather then abusing something which is beyond our control. _________________________________________________________________ MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus

3 2

Re: [ILUG-BOM] LTSP
by Sanjay Gurav 08 Jan '03

08 Jan '03

1 0

books for sale !!
by akshaysalkar 08 Jan '03

08 Jan '03

Does any 1 want Computer/Linux Books at a discounted rate (ie. 20%-25% approx. off the normal price) Books in good condition. Some books are brand new. (Costs after Discount) 1) Teach yourself HTML4 in 24 hours - Oliver/Holshwag Rs. 80 - Techmedia 2) Mastering Foxpro 2.5 Special Edition - Siegel - Rs. 225 - BPB 3) ObjectOriented Software Engineering - Haladay - Rs. 150 4) Teach yourself UML in 24 hours - Schmuler - Rs. 113 5) Java Software Solutions - Lewis - Rs. 260 6) Understanding Pointers in C - Kanetkar - Rs. 113 7) Write TSR's now - Ras - Rs. 75 8) Problems in General Physics - Irodov - Rs. 113 9) Professional Linux Programming - Mathews - Rs. 410 anybody wanting any of the above books plz. contact me at email : akshaysalkar(a)indiatimes.com or telephone on 22052404. (plz. leave msg./name/telephone if i am not there) akshay. Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com Buy the best in Movies at http://www.videos.indiatimes.com Now bid just 7 Days in Advance and get Huge Discounts on Indian Airlines Flights. So log on to http://indianairlines.indiatimes.com and Bid Now!

1 0

Help
by OSP 08 Jan '03

08 Jan '03

Is there any Indian Company that has implemented LTSP? If yes, where can I find the details on the same??? Ash

1 0

Re: Re: Happy New 2003.....plan for this year
by Gurpreet Singh 08 Jan '03

08 Jan '03

On Sat, 04 Jan 2003 Trevor Warren wrote : > >Hello luggers, > good-morning. > > Greetings of the season and wishes of a prosperous new year >ahead to >all of you. > > I write this mail so as to invite suggestions on the events >for the >coming year....We ended last year with a bang and drowned in >the >gnu-linux waters at a linu lunacy trip. But this year we need to >have a >concrete plan on the following..... > >--> Workshops CS deptt at RIT has planned to arrange very specific talks this yr which will take up important topics one at a time. topics like networking, security, LAMP etc etc etc. we can have one expert come down and hold an intensive workshop instead of having too much in one go. >--> Gnu-Linux lunacy trips ahh i loved the first one and would be happier to see more participation in the next one... >--> Conferences >--> Competitions >--> National Level Paper Presentations >--> App Development Contests >--> FSF/OS Business plan Contests for all of the above, there is one perfect platform according to me. Linux Bombay 2003 as we had discussed extensively some time back! Very good thinking trevor! it was gr8 idea to be listing what we can actually do in this new year. regards Gurpreet >--> Corporate workshops > > These are some very ambitious ideas i have in mind. I would >like to use >this podium as an idea to proliferate them into your minds. > > Pls think about the same. We should move from being just >passive >members of this laid back society and make sure that a minimum >contribution from our end goes to the FSF/OS movement towards >furthering >its cause in our own spheres. > > Awaiting input from you on the same. > >Bye for now and have a great day. > >Trevor > > > > >On Fri, 2003-01-03 at 12:45, sachin rase wrote: > > May This year brings joy to everybody > > including bill and his stupXd will > > as i have got power of "ps" & "kill" > > the gnu takes us to new hill this is my will > > > > -- > > :) > > > > ===== > > +----------------------------+ > > |Touch the limits with Linux | > > +----------------------------+ > > > > __________________________________________________ > > Do you Yahoo!? > > Yahoo! Mail Plus - Powerful. Affordable. Sign up now. > > http://mailplus.yahoo.com > > ________________________________________________________________ NIIT supports World Computer Literacy Day on 2nd December. Enroll for NIIT SWIFT Jyoti till 2nd December for only Rs. 749 and get free Indian Languages Office software worth Rs. 2500. For details contact your nearest NIIT centre, SWIFT Point or click here http://swift.rediff.com/ Gurpreet Singh Student Final Yr Computer Sc. & Engg. --------------------------------------------------------------------- M A K E Y O U R O W N R O A D --------------------------------------------------------------------

1 0

Re: Linux India Initiative
by sherlock＠vsnl.com 08 Jan '03

08 Jan '03

On Saturday 04 January 2003 22:55, vinayak_hegde(a)softhome.net wrote: > **************************************** > * LUG meet on 12 Jan. 2003 @ VJTI > **************************************** > > > All American companies do "offshore developement" in > India. We build the software, they sell it, they make > the money. Why not get paid for own work? They make millions > and pass on measly thousands to us. All Those who say > they employ us are wrong. We can sustain ourselves, though > this approach is slightly unrealistic in today,s global > economy. Our domestic potential is HUGE. They depend on us, > not us on them to a very great extent. However we tend to > overlook this "obvious" fact. Could'nt agree more. And pray why is this unrealistic. We are less economically developed because of stupid government policies and monopolies. This has resulted in more than 70% of our tax revenues being frittered away in salaries and sops to sections with political clout. Further the issues of IPR and copyrights are cleverly used by developed countries to keep products out and immigration and labour laws to keep people out. Farm products are kept out in the name of environmental protection (while merrily dumping nuclear waste in africa). In plain words developed countries are more protected than the "protected" un developed countries. So the government must level the playing field by specifying Swantatra software in all government procurement. And we can start by refusing to use closed software (even Indian made). Using imported Swatantra software would not be a problem as it would benefit all those who care to study the source. > > "Swatantra" software will break these shackles by making > computers and software accessible to the common man on > the street. However I may hastily add this is just one of > the factors under consideration. Forward to the Brave new GNU world :-). jtdsouza(a)softhome.net

1 0

Re: [ILUG-BOM] Linux India Initiative
by jtdsouza＠softhome.net 08 Jan '03

08 Jan '03

On Friday 03 January 2003 21:34, Nikhil Karkera wrote: > **************************************** > * LUG meet on 12 Jan. 2003 @ VJTI > **************************************** > > On Wed, 25 Dec 2002 Nikhil Joshi wrote : > >Come on who are we kidding? > >Do these ppl really care (and why should they?) if theres Linux > >or GNU/Linux or whatever and what is the right (read purists) way > >of The shopowners and home users already use free (read pirated) > >software. While the step is very welcome it would be really good >> to see the lowest denominator using Linux apart from scientists,sarkari babus,geeks Wrong presumption that initial capital costs is the only cost. As usage increases, the costs for maintainence and security of data exceeds the initial capital cost by orders of magnitude (now u know why M$ is trying to change it's bussiness model). This is true for any user. The hassle of keeping out worms and preventing random crashes is what will turn the shop owner and home user to GNU/Linux. rgds jtdsouza(a)softhome.net

6 13

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

Linuxers