qmail

[Koxaras Aris]

> Koxaras Aris wrote:
> >
> > AHAHAHA! ma eisai sovaros!?!? h ariadne (pou xrhsimopoiei sendmail
> > gia logous asfaleias) einai to systhma pou den exei spastei pote ma pote
> 
>     ^^^^^^^^
>  Filarako mou egw den thimame na ypostiri3a pote oti i ariadne einai
> secure dyktio (xwris ayto na simainei oti den tha mporouse na ginei) ,
> oute eipa oti emeis xrisimopoioume sendmail gia logous security !!!

	Eipa to anti8eto. Oti den exete kai polles gnwseis security (kala, 
den vazw kai to xeri mou sth fwtia) kai gia auto xrhsimopoieite sendmail.
To na anaba8mizeis ka8e ligo kai ligaki thn ekdosh tou sendmail sou den einai
lysh sto problhma tou security. Kai auto giati to bug 'h to advisory pou 8a
diavaseis esy sthn bugtraq to ekmetalleuontai autoi pou einai "mesa" sta kolpa
2-3 mhnes pio prin.

> Otan diatheteis mia ferrari kai odigeis stin ethniki me 50 (gia ton
> opoidipote logo), ayto den simainei oti to aytokinito einai mapa.
> Antitheta to aytokinito mporei na paei kai me 250 alla an then
> opoidipote logo), ayto den simainei oti to aytokinito einai mapa.
> Antitheta to aytokinito mporei na paei kai me 250 alla an then
> apofasisei o odigos na to odigisei se tetoies taxytites.....!!! den
> prokeitai na to kanei to aytokinito apo mono tou. Etsi kai me to
> sendmail tha mporousa na sou ferw paradeigma ena swro sites pou einai
> arketa secure kai xrisimopoioun sendmail (p.x. po1.cert.org).

	Oxi, omws einai o odhgos mapas :-). Kai oso anafora th CERT, na 
ypo8esw oti anaba8mizei synexws to sendmail tis? Kai pistepse me, apo osa  
exw dei na symvainoun den einai tipota secure. 3erw kati kala paidakia
(autous pou vgazoun ta exploits) pou aplws mporoun na mpoune opou 8eloun.

>  Episeis opws isws antilamvanesai , an "spasei" kaneis mia mixani se ena
> site ayto den simainei oti i "hack-ia" egine apo to sendmail (akoma kai
> an i hack-ia egine mesw mail), oute oti i sygkekrimeni mixani mporei na
> eixe ena secure sendmail settarismeno.

	Edw tairiazei h paroimia "Fylage ta rouxa sou gia na exeis ta misa".
ektos kai an de se noiazei h prolhpsh tou hacking (=asfaleia) ka8olou. 

>  Epipleon epeidi to thema ariadne xwraei poli syzitisi kai den nomizw
> oti tha eixan ore3i na to akousoun oloi sti lista , den tha epektathw
> kai tha sou pw mono 2-3 pragmatakia...
>  1- Apo olous tou providers i ariadne einai i moni pou den isxiristikai
>    pote oti einai secure kai oute thelise pote mexri twra na efarmosei
>    kapoia sovari security politiki. Ayto gia diaforous logous enas ek
>    twn opoiwn einai i mexri twra politiki kai diaxeirisi tis. Epipleon
>    an eisai ligo palios sto kourbeti tha exeis isws akousei tin frasi
>    "emeis goustaroume tous hackers , den tous kynigame" , apo atoma
>    e3' aitias twn opoiwn exeis isws simera esy idea apo diktya.

	3erw oti den tous kynhgate! :-p Vasika apo osa exw akousei orismenoi 
admins sas einai strimmenoi (tou typou "auto pou kaneis einai paranomo, se 
parakalw vges e3w apo to systhma twra"), enw oi alloi oi pio e3ypnoi vazoun 
sniffers gia na kanoun monitor paketa (kai me megalo capture length) kai pws 
pernoun root kapoioi alloi.. swsta? (na 3erw kai an exw a3iopistes phges 
dhladh!).

   (pali kaneis to la8os pou epishmane se prohgoumeno mail to christofer, 3ana
diavase to mail tou kai isws kapote to dior8wseis.. who knows? :-) )

>  2- An thes na ertheis kamia fora apo edw , na sou dei3w sto arxeio
>    posoi crackers "mpikan" edw , kai posoi apo aytous kataferan na
>    perasoun xwris xwris na katagrafoun .
	Afou kataferan na perasoun xwris na katagrafoun tote eseis pws tous
vrhkate? :)

>  3- Yparxoun atoma stin ariadne pou mathane e3aitias aytis tis politikis
>    pou proanefera , kai sti synexeia douleyane stin KYP sto strato !!!!
>    Esy mou 3ereis apo security me ti asxoleisai ??? .Arkeisai mipws
>    me to na spas mixanes sto ariadne ? :-)
	Mpa, den to vriskw kai toso endiaferon.

> > sthn istoria tou ellhnikou internet :)))))))))))))
>    ^^^^^^
>  Mallon gia ayti tin istoria esy exeis mesanyxta :-).

   Dhladh den alh8euei oti h ariadne einai to pio xiliospasmeno systhma? 
Hmmm, isws 8a mporouses na grapseis ena vivlio ("10 xronia kai 54 meres
ellhnikou internet") gia authn thn istoria gia na ta ma8oume kai emeis oi
adaeis.. :)

> > Tespa, otan vlepei admins apo providers mh tous dineis kai poly
> > megalh shmasia, oi perisoteroi den exoun idea apo security..
>    ^^^^^^^
>  Isws giati enw kapoioi malakizontai kathimerinws prospathontas na
>  spasoun mixanes , kapoioi alloi , prospathoun na parexoun dyktiakes
>  ypiresies , kai isws na sprw3oun tin texnologia ligo pio mprosta ...!!!
>  Alla ti na ginei etsi einai i zwi ...:-).

	Mesa stis diktyakes yphresies den symperilamvanetai kai to privacy 
twn xrhstwn? (vasika, to la8os einai twn providers pou den skeftontai na
proslavoun kai admins me arketes gnwseis security)

> > Seeya,
> > mastoras at hack.gr
>                 "Filika "       Manolis

	"Filika"?  Malwnoume 'h syzhtoume?


Filika,
Aris

P.S. Epeidh pisteuw oti h linux-greek-users den mporei na mas anextei, an 8eleis
apantas mono se emena :)


--
====================================================================
Gia boithia (h na diagrafhte) e-mail sto majordomo at argos.hol.gr
Ta archives tis listas einai sto http://www.argos.hol.gr/lists :
prin steilete kapoia erothsh psakte mipos exei hdh apanththei.
Gia opoiodipote problima stilte e-mail ston owner-linux-greek-users
====================================================================