Hello:

This came into my mailbox a while ago:

---

[ANNOUNCE] xorg-server 21.1.2

This release fixes 4 recently reported security vulnerabilities and several regressions.

In particular, the real physical dimensions are no longer reported by the X server anymore as it was deemed to be a too disruptive
change. X server will continue to report DPI as 96*.

* seems they heard HoaS.  8^ )

--- snip ---

xorg-server-21.1.2.tar.gz

https://xorg.freedesktop.org/archive/in … 1.2.tar.gz
PGP:  https://xorg.freedesktop.org/archive/in … tar.gz.sig

---

Cheers,

O.

Hello:

Anyone seen this?

https://www.theregister.com/2021/12/10/ … foss_fest/

https://www.ventoy.net/en/index.html

Best,

A.

Hello:

After seeing Élisabeth's plight to recover from a damaged laptop keyboard problem, I started thinking about the different ways you could get out of a problem like that one.

I long ago made it a point of always having at least one spare kb at hand and in case that fails, BIOS enabled RS232 and on-board USB ports.

But as Murphy is always lurking, I set out to see if eg: I could make do with my Palm T|X on the ADSL router via WiFi.

I would have preferred to use a cable to RJ45 port solution but I don't know of any PalmOS TCP/IP applications or adaptors and the Palm T|X only has a USB port.

Easier said that done.

I was quite surprised to see that ssh applications for PalmOS5 are practically non-existent: I only found three and one of them (Top Gun ssh) was just for older models like the Palm Pilot Professional.

The other two are TUssh and pssh, I finally settled on this last one.

Tl;dr:
After many hours of fiddling/browsing and some great help from a chap at comp.security.ssh, I managed to ssh into the Devuan ascii VBox VM I have running PiHole for my Devuan Beowulf installation.

If anyone is interested, you can see most if not all the gory details here: https://groups.google.com/g/comp.securi … u0VvfEQudc

Of course, I am quite aware that ssh'ing into a system using deprecated protocols obviously implies security issues, but in this specific case I think I have attenuated them with three four things:

1. Access to the ADSL router via WiFi is MAC filtered. ie: it will only allow *this* specific Palm T|X handheld to log in.

2. A (relatively) complex WPA/WPA2 PSK Mixed PW such as this one is used: 4N@8974+6231, obviously with room to improve.

Unfortunately, the good people at Palm saw it fit to make the last Personal security upgrade only to WEP/WPA-PSK with a pre-shared key which made it useless outside the realm of home routers.

Enterprise security got EAP-TLS, EAP-TTLS, PAP, CHAP, MSCHAP, MSCHAPv2, EAP-GTC (password), EAP-MD5-Challenge, EAP-MSCHAPv2, EAP-PEAP (v0 and v1), MSCHAPv2, GTC (password), MD5-Challenge, LEAP and Dynamic WEP (WEP encryption with 802.1x based authentication).

3. For the time being, WiFi is enabled on a per-case basis till I can think up a more complex PW.

4. The destination machine's default port for ssh has been changed from 22 to one above 1024 / below 5000.

Best,

A.

Hello:

I'm trying to solve an SSH problem but I don't know if Dev1 is the place for that.

The problem is related to a Palm OS5.4.1 application (Tungsten T|X) that can only deal with DES-EDE3-CBC ciphers.
This means that I need to generate a key that this application con handle.

There's really no security problem involved as the link is via WiFi through an ADSL router with a WPA/WPA2 PSK mixed password and a MAC filter.
Plus WiFi is only enabled on a per-case basis.

I cannot find a SSH user's mail list.

Any ideas?

Thanks in advance,

A.

Hello:

I shut down my Devuan Beowulf system with a script called from a launcher which I set up within the panel of my Xfce desktop:

This is the script:

#!/bin/sh
# added to shutdown directly - no shutdown helper 
PATH=/sbin:/bin:/usr/sbin:/usr/bin:
#
sync && sudo ethtool -s eth0 wol d && sudo rmmod -s -v e1000e && sudo shutdown -h now

This is the launcher command line:

xfce4-terminal -x sudo /usr/bin/shutdown.sh

This has been working perfectly well for the longest time.
Some time ago I set up Pihole in an autostarted Vbox virtual machine but although it seems to start up properly it does not shutdown gracefully.

ie: sudo shutdown -h now takes effect before the virtual machine has completely shut down.

The idea is to send the virtual machine the shutdown command, wait 5s and then execute the shutdown script.
Simple if not elegant.

As VBox gives members of the vboxusers group permission to start and shutdown a virtual machine, I cannot add the shutdown command to the shutdown script called from the launcher because this script needs sudo. ie: root privileges and the vms belong to vmusers and not to root.

So I add the virtual machine shutdown script + a 5s sleep to the launcher command line.
But it does not work with the launcher.

vboxmanage controlvm "madmax ascii" poweroff && sleep 5s && sudo /usr/bin/shutdown.sh works properly if I execute it from a terminal.

But not when I run it from the launcher:

xfce4-terminal -x vboxmanage controlvm "madmax ascii" poweroff && sleep 5s && /usr/bin/shutdown.sh

It only shuts down the virtual machine, the rest of the command does not have effect.

Cannot figure out what I'm doing wrong.

Any ideas?

Thanks in advance.

A.