- Roundtable - muug.ca

Looking for a used ~42U server cabinet
by Wyatt Zacharias 06 Dec '16

06 Dec '16

Wondering if anyone has a spare full height (around 42U) server cabinet they're looking sell? Needs to have front and back rails, threaded or square hole, and have side panels and a front door. -- Wyatt Zacharias

2 1

Fwd: Come join DC204 for OpenChaos night at SkullSpace! (Talks/food/security!)
by Colin Stanners 02 Dec '16

02 Dec '16

Thought MUUG would be interested in this, sorry for the late notice. ---------- Forwarded message ---------- From: Ron Bowes <ron(a)skullsecurity.net> Date: Wed, Nov 23, 2016 at 2:11 PM Subject: Come join DC204 for OpenChaos night at SkullSpace! (Talks/food/security!) To: SkullSpace <announce(a)skullspace.ca>, discuss <discuss(a)skullspace.ca>, doers(a)dc204.ca, announce(a)dc204.ca Hey everybody! You're invited to come join DC204 for OpenChaos night on Friday, December 2 at SkullSpace! It's a chance to see some talks, network with other security professionals/hobbiests, or grab some food and hide behind a potted plant. :) We're going to kick things off by opening doors and getting some food at 6:30pm, then starting talks at about 7. The talks are, in no particular order (actually, in alphabetical order): - Ron Bowes: Abusing DNS - Robert Keizer: Securely updating prod with Continuous Integration - Russ Schreyer: Introduction to Aircrack - Alex Weber: Analysis of an OpenSSL DoS bug: CVE-2015-3194 After the talks, you're welcome to hang around SkullSpace to chat, or to join us next door at the Yellow Dog for drinks. *FAQ* Why are you emailing me!? If you're getting this email, you're probably on a big list of people that I (or others in the group) thought might be interested! Feel free to contact me (ron(a)skullsecurity.net, or just reply to this email) if you don't want to hear from us again. What the heck is DC204? DC204 is a local Winnipeg Defcon Group <https://defcongroups.org/dcpages.html> we are trying to build. It's a loose-knit group of security professionals and hobbiests that meets irregularly to talk about security. There's no formal registration or membership, just come hang out! Is there a DC431 group? No, stop asking!! :) What is OpenChaos? Just a random cool-sounding name, taken from the Hackerspaces Wiki. What's it cost? Nothing! This is free, and we'll have some food, so come by and hang out! Of course, if you join us for drinks afterwards, you're on your own for your bar tab. Okay, you sold me. How do I RSVP? Please tell Ron! It'll help for planning food. You can either do that by replying to this email, or by emailing ron(a)skullsecurity.net directly. If you don't RSVP, you're still welcome to come, but please try to let me know. One last question: How do I get there? We're hosting this at SkullSpace. It's at 374 Donald St. Let yourself in the door (if it's locked, give me a call 502-409-0320 <(502)%20409-0320>), and go up to the second floor. From there, follow signs - we'll be the big group of folks Hope to see you there! - Ron

1 0

RegEx help needed (sed?)
by Kevin McGregor 01 Dec '16

01 Dec '16

I'm using sed to massage some input. Specifically, I have input lines like aaaaaaaaaa/BBBBB_ccc@00000 or aaaaaaaaaa/BBBBB@00000 and I want the output to always be BBBBB I've got most of it, but I can't figure out how to get rid of anything at the end of the line after EITHER the underscore OR the '@' (including either of those two characters). Is this possible in one expression in sed? I can do it with piping the input through sed twice but I was wondering if one pass would do it. Currently I'm using sed "s/^.*\/$.*$[_(a)].*$/\1/" Which doesn't get rid of the "_ccc" when it appears, just the "@00000". Suggestions?

2 1

Linux Pro Mag has a neat DVD this month
by Trevor Cordes 01 Dec '16

01 Dec '16

The November Linux Pro Mag, which I think should still be on the newstands(??), has a neat DVD this month. Instead of the usual lame distro, they put on a digital searchable copy of every issue and article since they started publishing (191 issues). Not a bad deal for the price of 1 magazine. (As a subscriber I just got it last week, however they might be a month ahead on the newstands, so if you want it, go grab it now! Or order it on their website, though I'm sure shipping is prohibitive.)

1 0

Re: [RndTbl] RegEx help needed (sed?)
by Paul Sierks 29 Nov '16

29 Nov '16

.* Is greedy, sed "s/^.*\/$[^_(a)]*$.*$/\1/" Kevin McGregor <kevin.a.mcgregor(a)gmail.com> wrote: >_______________________________________________ >Roundtable mailing list >Roundtable(a)muug.ca >https://muug.ca/mailman/listinfo/roundtable

3 2

O'Reilly "Cyber Monday" sale 60% off
by Trevor Cordes 28 Nov '16

28 Nov '16

O'Reilly is doing a big discount again: 50% off all ebooks/vids; 60% off if you spend $100+ (US). That's their biggest discount of the year. Ends after today (at 5am PT Nov 29) http://post.oreilly.com/rd/9z1z2jm74uo2g7rga2s4lclg3fehsfsom3pnnm71m9g

1 0

procmail replacement?
by Kevin McGregor 26 Nov '16

26 Nov '16

I've read that procmail is somewhat deprecated. Is this true? Is anyone still using it regardless? What replacements are there that you recommend? Kevin

5 5

IPv6 tunnels, Netflix, and AAAA records (was help! dns zone delegation wonky for AAAA)
by Theodore Baschak 25 Nov '16

25 Nov '16

> On Nov 24, 2016, at 3:54 AM, Trevor Cordes <trevor(a)tecnopolis.ca> wrote: > > First I found this named option: > filter-aaaa-on-v4 (and -v6) > "It is intended to help the transition from IPv4 to IPv6 by not giving > IPv6 addresses to DNS clients unless they have connections to the IPv6 > Internet." > Super description and chart here: > https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html <https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html> This came up recently for me in another discussion. As an IPv6 pioneer, I'm fully IPv6 enabled and have been for the last 10 years or so. At some points that has been over HE.net IPv6 tunnels, and more recently that has been native IPv6 access. As I'm my own ISP, and I do my own BGP for myself, the address ranges I use for myself are properly registered and located in Winnipeg, Manitoba so I don't have any issues running Netflix with their latest "war on tunnels". However, for people who have a HE.net IPv6 tunnel (very very common), which has IPv6 space which is registered in the US, this causes issues with netflix when requests start cross countries of apparent origin. One of the solutions I found that worked quite nicely was to run a separate recursive DNS server for netflix users that had the filter-aaaa-on-* options enabled. Queries for netflix domains are then routed to this DNS server that strips out the AAAA records so that netflix runs only over the IPv4 connection, originating from a Canadian IP keeping netflix happy. Theodore Baschak - AS395089 - Hextet Systems https://ciscodude.net/ - https://hextet.systems/ http://mbix.ca/

1 0

New O'Reilly Humble Bundle of books!
by Trevor Cordes 25 Nov '16

25 Nov '16

Just like they did with No Starch Press, Humble Bundle has just offerred a new O'Reilly bundle with (up to) 16 *NIX ebooks for as little as $15 US$. Not bad. None are their newest titles, but there's still a lot of good stuff in there. And we all know that with *NIX most things don't go obsolete. If my math is on target, you have until Dec 7-ish to act on this. As with the NSP bundle, MUUG will be purchasing one bundle for DP giveaways. (And I'll be buying a set for myself too, though like many of you I already have around half of them on paper!) Thanks to Adam for originally spotting this. ==== Humble Bundle Get a library of O'Reilly ebooks and support charity You're not a Unix, are you? + 15 more great reference books from our friends at O'Reilly! https://www.humblebundle.com/books/unix-book-bundle

1 0

mailing list error
by Trevor Cordes 25 Nov '16

25 Nov '16

Apologies, but the MUUG mailing lists may have delayed/deferred (or even dropped) emails to a very small subset of members since the mailman migration in the last 2 weeks. If this applies to you you would not have received any muug mailing list emails during this time. Some of them may have just come through to you as I have now fixed the problem. Ones over 5 days (or so) probably got dropped. If you want to see the emails you may have missed, you can view them in the web interface: https://muug.ca/pipermail/roundtable/2016-November/date.html This problem only affected people who have mail servers that a) have STARTTLS enabled, *and* b) have their servers set to only allow obsolete encryption methods. If you can update your mail server to the latest version you will be less likely to have this problem in the future with other email senders. This problem will not occur on the muug lists again because I have disabled opportunistic muug-as-client smtp encryption. For those interested, the latest sendmail (which we may not be able to upgrade to for quite a long time) has an option to fallback to non-encrypted when the initial encrypted connection attempt fails. That would solve this problem more cleanly on the muug side. Not sure why this wasn't the default or available in sendmail the whole time, as the "encrypt or bust" paradigm we're stuck with in v8.14 is lame. No worries though, as 99% of the net still happily doesn't TLS smtp. It's more gravy than anything.

1 0