OpenSSH 0day?
Posted by coldtobi | 21 Jul, 2009, 22:55Agroup called (or telling to be) anti-sec claims that they have a 0-day for OpenSSH. (http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069752.html)
But that the 0-day exists is doubted. (http://news.softpedia.com/news/Rogue-OpenSSH-0-Day-Exploit-Damages-Computers-117014.shtml)
We'll see...
(Note: be warned when reading full-disclosuer: There is a fake exploit "Open0wn" which is in fact a trojan-horse, tricking to run under root. It will then spawn a botnet and delete your filesystem. Never run and compile exploits unchecked!)
<—&mdash Showing ERROR? Click here!
Linux / Debian | Comments (1) | Trackbacks (0)
Thecus N2100: Testing kernels
Posted by coldtobi | 1 Jul, 2009, 23:40Some time ago, I wrote how to test a kernel on the Thecus (here).
As I did not update the kernel for some time, I decided to update to 2.6.30. As usual, I wanted to try it before flasing it permanently. To enforce this, I do not have the package "flash-kernel" installed. But unfortunatly, this time the testing method did not work or the kernel did not boot...
(More)
<—&mdash Showing ERROR? Click here!
Linux / Debian, Thecus N2100 | Comments (1) | Trackbacks (0)
A Recent Eclipse On Debian
Posted by coldtobi | 9 May, 2009, 13:58Eclipse is WAY outdated on debian. Even the unstable release ships a basically unmodified version since 3 years.
So today I decided to remove the ancient version -- which did not start anyway -- and try the new nice release from eclipse.org:
And, hey... It works like a charm. The only downside is, that it will run in a local directory in your home directory. But that could be fixed my installing in /opt and including it into the default path.
<—&mdash Showing ERROR? Click here!
Linux / Debian | Comments (0) | Trackbacks (0)
Manually upgrading horde3 on debian
Posted by coldtobi | 19 Feb, 2009, 00:15 Debian is currently in freeze. (As finishing this, debian just released Lenny!) As a consequence many packages are quite outdated.For example, the horde framework I use on my NAS is quite old and misses some features I'd like to have.
However, there are some pitfalls when using the debian version and trying to update with the upstream version, as the "debian way" stores some files at different locations, which is ok.
(More)
<—&mdash Showing ERROR? Click here!
Linux / Debian, Tips and Tricks, Thecus N2100 | Comments (0) | Trackbacks (0)
Thecus N2100: Testing a new kernel. Or the Installer. Or Revert. Or Recover.
Posted by coldtobi | 15 Aug, 2008, 10:09Because of personal experience, it is good to test a kernel prior flashing it: It ould happen, that the Thecus won't boot with a new kernel. I learned this the hard way.
But how to test it? The trick is, to the kernel into RAM and
execute it from there.
This howto will show all the steps
necessary to testdrive a kernel.
By the way, these instructions are also good for other uses: For example,
-
if you need a recovery/rescue system, (the debian installer is fine for that purpose.)
- if you prefer to run the debian installer from RAM, (for tests, or if you don't wan't to reflash your current firmware)
- if you want to uninstall debian and revert to the original firmware.
- have a backup-kernel handy. ("Known-Good-Kernel")
Best of all, this is done completely in RAM. So just "pull the plug" to revert to the old state.
Update: Please also read this article for some updates. (More)
<—&mdash Showing ERROR? Click here!
Linux / Debian, Thecus N2100 | Comments (0) | Trackbacks (0)
How to check if you have ModRewrite
Posted by coldtobi | 12 Jul, 2008, 18:58
ModRewrite comes handy for SEO and other opportunites, where you want to change URL to something else. Lifetype uses this to assemble all the php parameters and make more search-engine and humanfriendly URLs. Also, you can do the RFI Protection I described earlier.
To find out, whether your webhoster's Apache supports ModRewrite, you have basically two options:
<—&mdash Showing ERROR? Click here!
Linux / Debian, Blog and Website, Tips and Tricks | Comments (2) | Trackbacks (0)
Webmailer for the Thecus
Posted by coldtobi | 30 May, 2008, 09:53The candidated so far are
- sqirrelmail (http://squirrelmai.org)
- horde Webmail Project (http://www.horde.org/webmail/)
- openwebmail (http://www.openwebmail.org/)
- roundcube (http://www.roundcube.net/)
<—&mdash Showing ERROR? Click here!
Linux / Debian, Tips and Tricks, Thecus N2100 | Comments (0) | Trackbacks (0)