The officially official Devuan Forum!

You are not logged in.

#1 2017-11-06 17:37:19

miroR
Member
From: Zagreb, Croatia
Registered: 2016-11-30
Posts: 217  
Website

Fighting persistent intrusionals in Devuan (Devuan wins!)

title (may change yet): Fighting persistent intrusionals in Devuan (Devuan wins!)
---
I've actually started this what I hope becomes a new topic (hopefully, I am having hard time fending off kind of... attacks, yes, although when matters more widely regarded) in:

OpenRC installation in Devuan Ascii

and I just visited there and want to move the content that don't belong in OpenRC (which works fabulously in Devuan, but YMMV)...

First: I've been working on this for about one month and a half. It is quite a few things/aspects/facts that are clearly intrusional behavior by some subjects... And I do have traces to prove it, a lot by now... And I do have where to post them. It is as usual for some people who did follow me a little, it's at:

https://www.croatiafidelis.hr/foss/cap/

likely the (at the time of this writing non-existent page):
( some title it will also have )
https://www.CroatiaFidelis.hr/foss/cap/ … -ssl-conv/

But I may suffer brutal attacks, with no brains, but with total control, before I do it... It's not excluded even a knock at the doors in the very early morning hours in Croatia, although at this time still not likely to happen to me...

So, while I promise to deliver on the story, I will as much as it depends on me, but sadly, as I explained above, it doesn't depend only on me. That said, I have a feeling that I will be able to make it, but in a longer time. The traces, the analysis, the unfinished programs that I wrote (actually improved, most of them I wrote previously, look up https://github.com/miroR), all that is a lot of work, and I'm not very advanced.

I'll try and move the content from the OpenRC topic, so it doesn't distract attention from what the matters and issues are there in that topic, next.

Last edited by miroR (2017-11-06 17:54:03)


Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

Offline

#2 2017-11-06 17:56:17

miroR
Member
From: Zagreb, Croatia
Registered: 2016-11-30
Posts: 217  
Website

Re: Fighting persistent intrusionals in Devuan (Devuan wins!)

This post copy-paste removed over from the below post of this topic:
OpenRC installation in Devuan Ascii
https://dev1galaxy.org/viewtopic.php?id=1128#p6015
---

fungus wrote:

Am I missing something?

In case you are referring to my post some one hour ago, not yet. You're not missing. But figure out that the SHA256 sums might be for some crypto identifying a future analysis, by starting here:

BAD sig with Devuan Jessie 1.0.0-RC
https://dev1galaxy.org/viewtopic.php?id=568
and also look up:
[ same title as above ]
https://lists.dyne.org/lurker/message/2 … 59.en.html
and try not to miss:
[ same title as above, since in the same thread ]
https://lists.dyne.org/lurker/message/2 … f4.en.html

I've worked hard, and... I can't repeat myself. See again the previous post if you are, but don't be, impatient to know, because I can't satisfy impatience here. I'm not so very advanced... Thank you.

I'll be busy in the next days, and I may even find it too hard to tell much soon at all... I've needed to even update some of my (somewhat primitive) programs on github to be able to deal with understanding the intrusion... And I'm not a wizzard...

More patience, and I'll make a separate topic, once I, God willing, make it...
---
But notice that I don't want to touch the stamps on the previous post with the hashes:
https://dev1galaxy.org/viewtopic.php?id=1128#p6007
And I don't want to repost those here either, not duplicating things.

Now I got to analyze also the trace that went captured as I wrote this... I often get surprises, and very unseemly and unsavory... It's often is a very demanding struggle...

Regards!

Last edited by miroR (2017-11-06 18:09:08)


Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

Offline

#3 2017-11-25 14:53:05

miroR
Member
From: Zagreb, Croatia
Registered: 2016-11-30
Posts: 217  
Website

Re: Fighting persistent intrusionals in Devuan (Devuan wins!)

I apologize to have to prolong the story I announced in this topic.

Other attacks (unconfirmed by experts following there, so pls. wait for replies in the below):

https://github.com/minipli/linux-unoffi … /issues/19
https://github.com/minipli/linux-unoffi … /issues/18
https://github.com/minipli/linux-unoffi … /issues/17
https://github.com/minipli/linux-unoffi … /issues/13

have happened in the meantime, and those, and other in links from below, took huge time for me to analyze:

https://www.croatiafidelis.hr/foss/cap/ … -RAP-Oops/

Regards!

Last edited by miroR (2017-11-25 14:53:50)


Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

Offline

Board footer