January 2012 - Roundtable

SpamAssassin false positives on DATE_IN_FUTURE_96_Q?
by Gilbert E. Detillieux 23 Feb '16

23 Feb '16

I mentioned this problem at the last round-table session, but didn't get a solution, so I thought I'd post it here, just in case anyone has any suggestions to offer. I'm still seeing a whole bunch of false positives in SpamAssassin, since an update was installed in mid-September on a CentOS 5.7 system, for a rule called DATE_IN_FUTURE_96_Q, which is only supposed to be triggered when the "Date:" header has a date that is 4 days to 4 month ahead of the date in the "Received" header that has the _smallest_ difference in date. Here are the headers from the latest e-mail I've received with this false-positive. (I've stripped out irrelevant headers, for the sake of clarity and simplicity.) From topfivestories(a)messagent.itworldcanada.com Mon Nov 14 07:50:13 2011 Received: from mail.messagent.itworldcanada.com (mail.messagent.itworldcanada.com [207.112.10.80]) by palladium.cs.umanitoba.ca (8.13.8/8.13.8) with SMTP id pAEDoAxV028594 for <gedetil(a)cs.umanitoba.ca>; Mon, 14 Nov 2011 07:50:12 -0600 Date: Mon, 14 Nov 2011 08:50:13 -0500 X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,DATE_IN_FUTURE_96_Q, HTML_MESSAGE,RP_MATCHES_RCVD autolearn=no version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on palladium.cs.umanitoba.ca Note that I'm calling spamd via the spamass-milter on a system running sendmail. Note also, that in the above example, the only "Received" header was the one generated by my own server. (I've had other false positives, however, with multiple "Received" headers, all of which were within seconds of the time in the "Date" header.) Any ideas? -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.mb.ca> Manitoba UNIX User Group Web: http://www.muug.mb.ca/ PO Box 130 St-Boniface Phone: (204)474-8161 Winnipeg MB CANADA R2H 3B4 Fax: (204)474-7609

6 11

Winnipeg Harvest donations from December meeting - thank you!
by athompso＠muug.mb.ca 04 Apr '12

04 Apr '12

Thanks to the generosity of our members, we were able to donate three large boxes’ worth of non-perishable food items to Winnipeg Harvest in December 2010. The text of the thank-you letter we just received (see attached) is as follows: January 5, 2011 Manitoba UNIX User Group Attn: Adam Thompson Dear Friends of Harvest, We here at Winnipeg Harvest want to thank the Manitoba UNIX User Group for your support of helping those less fortunate in our community. Over the last few months 743 pounds of food was donated to the food bank. Your donations will go into hampers that will help Winnipeg Harvest feed more than 58,000 people each month, half of those being children. On behalf of the entire team at Winnipeg Harvest, thank you for helping us fight hunger and feed hope in Manitoba. We look forward to working with you again in the future. If I can ever be of assistance, please don’t hesitate to contact me by phone at 982-3670 or by email at tori(a)winnipegharvest.org. Yours truly, Tori Webber Development Associate Winnipeg Harvest Inc. So, thanks again. See you all in another six (6) days, at our next meeting on January 11th, 2011. -Adam Thompson athompso(a)muug.mb.ca

3 5

CIRA IDN - got it right
by Trevor Cordes 03 Feb '12

03 Feb '12

Speak of the devil, looks like they got it right... http://strategiccounsel.hosted.jivesoftware.com/servlet/JiveServlet/preview…

5 5

UG News - Learn from Experts: How Links Boost Your Rankings, Take Control of iCloud, and 10 Things You Didn't Know Google+
by Gilbert E. Detillieux 30 Jan '12

30 Jan '12

FYI... ---------------------------------------------------------- View in browser <http://post.oreilly.com/rd/9z1zlm6c0f03td1gdsp3kvh4rh1t27s9saq2gnsb5io>. *Forward this announcement to your user group or a friend* <http://post.oreilly.com/f2f/9z1zouotcr1eu8cdko2tae5vn6fr4j1s3bkb0p54060> O'Reilly Webcasts <http://post.oreilly.com/rd/9z1z8ec3b0bpovbi7a79t9lgihngg8uc9m49cu8palo> Meet experts online. Join us for these free, live webcasts. Attendance is limited, so register now. We'll send you a reminder before the webcast. And please feel free to *forward this invitation* <http://post.oreilly.com/f2f/9z1zouotcr1eu8cdko2tae5vn6fr4j1s3bkb0p54060> to others. Steven Hoober <http://post.oreilly.com/rd/9z1zniov1gk9d0hin699csgs5petsrvo36t9kpsl7q0> Avoiding the Heuristic Solution: Designing Mobile Interfaces <http://post.oreilly.com/rd/9z1zcr4kt8vkhfnaof0m0darp6agl17eb2b8qdced7o> Presented by *Steven Hoober* <http://post.oreilly.com/rd/9z1z9dditnrmsluq29r3dpqu4pfk594k1jfdkj3gueo>, author of *Designing Mobile Interfaces* <http://post.oreilly.com/rd/9z1zap3dt54ouns0cgoka0m4laf5l5tcp8ke4hij8eg> Add to iCal <http://post.oreilly.com/rd/9z1z4pr5t32g0jfeipctiuc0qdktjk61he9r686sarg> *Tuesday, Jan 31, 2012 at 10:00AM PT* Last Chance to Register <http://post.oreilly.com/rd/9z1zqfd6gtafp0u97sv1hkp3jmbfl0mlpgt4bqc7t9g> In this discussion, you will learn how to avoid the safe answer, while still embracing proven patterns, best practices and user feedback. Mike Halsey <http://post.oreilly.com/rd/9z1z6tkoasod5h067r4ihnu2r1i90jvbcpsg3mu3gh8> Using Virtualization tools in Windows 7 <http://post.oreilly.com/rd/9z1zelsd2t7d20jhudk8enheqjn1m3vf2fukdvvr74g> Presented by *Mike Halsey* <http://post.oreilly.com/rd/9z1za3aol9tsmbt08s0pocor4mc23rcl5d0d35fvjo0>, author of *Troubleshooting Windows® 7 Inside Out * <http://post.oreilly.com/rd/9z1zcfhv1ej0jliv86bv7545um9k6tmjne3a0lb50og> Add to iCal <http://post.oreilly.com/rd/9z1zb4mj8975mm74lme4tkmmcocj2u6him18bi83vpg> *Thursday, Feb 2, 2012 at 10:00AM PT* Register now <http://post.oreilly.com/rd/9z1z1686g91g3tuinuno14cquvpddsgmt0sua1ei5f0> In this webcast, Mike Halsey, the author of /Troubleshooting Windows 7 Inside Out/ explains how you can use free virtualization tools in any edition of Windows 7 to keep valuable and useful older software working in a safe and secure way. Joe Kissell <http://post.oreilly.com/rd/9z1zdapra8p19gc709dt6s6mp7mfhm4bpngqn0euero> Take Control of iCloud <http://post.oreilly.com/rd/9z1z8efgfv4fkn4iv99n0ivpmp10cqjqhgull03d7oo> Presented by *Joe Kissell* <http://post.oreilly.com/rd/9z1z10p9mignteoi9smj802bre6n4ol1qcm2bbdj3do>, author of *Take Control of iCloud* <http://post.oreilly.com/rd/9z1zf738btutugffemfvr1bp7p3ddn2c8bv8lb4mps0> Add to iCal <http://post.oreilly.com/rd/9z1zgp916il30k0vna44635lc8b8rug6s4m2vhgtt3g> *Friday, Feb 3, 2012 at 10:00AM PT* Register now <http://post.oreilly.com/rd/9z1z05bffvd4n1bf2kt6e5k4bdvtjo5fgmh5fucsfig> In this webcast, veteran Mac author Joe Kissell explains what iCloud can do for you, how to deal with configuration puzzles and compatibility issues, and how best to manage the transition from MobileMe. Stephan Spencer <http://post.oreilly.com/rd/9z1zulr58lu73lbi3tnv29oatfomg838mlkpvpg4270> Google in the Real World <http://post.oreilly.com/rd/9z1z506h66rn002ol40i3f599ehkq4c8guppke7nsf8> How Links Boost Your Rankings <http://post.oreilly.com/rd/9z1z5d18ico61jq6dcf782uv6d16oq00vbgv53h1a6o> Presented by *Stephan Spencer* <http://post.oreilly.com/rd/9z1z0cnkhk49c62p48dt7mses4050a82nttit93g76o>, author of *The Art of SEO, Second Edition* <http://post.oreilly.com/rd/9z1zca1potjff39tt7a0gp76706oiu0ju8pqntgaqvo> Add to iCal <http://post.oreilly.com/rd/9z1zcujk39vkgjpmo4d0qvp5pkfke7l87htvr0vsnq8> *Tuesday, Feb 7, 2012 at 10:00AM PT* Register now <http://post.oreilly.com/rd/9z1zng30a0lo8rj018hjtg2251i6k9at58q2ng30768> Link building is arguably the most difficult, most misunderstood, and most poorly executed aspect to SEO. Join SEO and link-building expert Stephan Spencer as he guides us through the quagmire and shows us the way to great search engine rankings. Kevin Purdy <http://post.oreilly.com/rd/9z1z3bt7sp6v1lj8angsbdrk215enlfgb5ch8l0v6d8> The 10 Things You (Probably) Didn't Know about Google+ <http://post.oreilly.com/rd/9z1ze9e461evenmc3iqkp4uhk3p54m7d8rs8qph7kao> Presented by *Kevin Purdy* <http://post.oreilly.com/rd/9z1zi0vk3a0907js1h6empkbmvk44v2fdag1eb6d8fo>, author of *Google+: The Missing Manual* <http://post.oreilly.com/rd/9z1zjnst1ktjd3udlcrpi9umgof9onm07gt3quonu3g> Add to iCal <http://post.oreilly.com/rd/9z1zobg4cj5ncu7si9tp4khgvrg90gfpjbs3hpfp1go> *Wednesday, Feb 8, 2012 at 10:00AM PT* Register now <http://post.oreilly.com/rd/9z1zad6dobrvdtoi6ssc0fhvg3mgnbt8c1cqtetlqk8> In this webcast, we'll run through the small--but--great tricks, the slightly hidden settings, and the methods you can use to get more out of Google+. To learn more about O'Reilly Webcasts, and watch on-demand videos of previous webcasts, visit: *oreilly.com/webcasts* <http://post.oreilly.com/rd/9z1z58qsu6b30o8654ai9t6hi00t7vrtbf4qitk6v98> Spreading the knowledge of innovators - oreilly.com <http://post.oreilly.com/rd/9z1z0s2i62kt6l5m6no37t025sud6ldfe8bvujah4gg> You are receiving this email because you are a User Group contact with O'Reilly Media. Forward this announcement <http://post.oreilly.com/f2f/9z1zouotcr1eu8cdko2tae5vn6fr4j1s3bkb0p54060>. If you would like to stop receiving these newsletters or announcements from O'Reilly, send an email to *usergroups(a)oreilly.com* <mailto:usergroups@oreilly.com>. O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000

1 0

Re: [RndTbl] For Sale... Sun Ultra 40 M2
by richard＠richardabarrow.com 30 Jan '12

30 Jan '12

Hi Sean, just saw that you want to let your Ultra 40 M2 go, is it still for sale? Regards Richard

1 0

[New security bug:] X.Org: Screen lock bypass
by Adam Thompson 27 Jan '12

27 Jan '12

Of interest to anyone running X workstations outside physically secure environments (like their basements), I should think. This announcement is from Gentoo, since everyone else appears to have embargoed their information on this temporarily. (Which in turn suggests that a major vendor is vulnerable and hasn't patched it yet.) This should only affect recent distros (e.g. Fedora 16, but not 15). There's a workaround suggested in Red Hat bugzilla #783039. Best information I can find about it until MITRE releases the CVE: http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html. Happy patching, -Adam Thompson athompso(a)athompso.net > -----Original Message----- > From: Alex Legler [mailto:a3li@gentoo.org] > Sent: Friday, January 27, 2012 4:00 PM > To: gentoo-announce(a)lists.gentoo.org > Cc: bugtraq(a)securityfocus.com; full-disclosure(a)lists.grok.org.uk; > security-alerts(a)linuxsecurity.com > Subject: [gentoo-announce] [ GLSA 201201-16 ] X.Org X Server/X > Keyboard Configuration Database: Screen lock bypass > > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > - - > Gentoo Linux Security Advisory GLSA > 201201-16 > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > - - > > http://security.gentoo.org/ > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > - - > > Severity: Normal > Title: X.Org X Server/X Keyboard Configuration Database: Screen > lock > bypass > Date: January 27, 2012 > Bugs: #399347 > ID: 201201-16 > > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > - - > > Synopsis > ======== > > A debugging functionality in the X.Org X Server that is bound to a > hotkey by default can be used by local attackers to circumvent > screen locking utilities. > > Background > ========== > > The X Keyboard Configuration Database provides keyboard > configuration for various X server implementations. > > Affected packages > ================= > > ---------------------------------------------------------------- > --- > Package / Vulnerable / > Unaffected > ---------------------------------------------------------------- > --- > 1 x11-misc/xkeyboard-config > < 2.4.1-r3 >= 2.4.1- > r3 > ---------------------------------------------------------------- > --- > # Package 1 only applies to users of these architectures: > amd64, arm, hppa, x86 > > Description > =========== > > Starting with the =x11-base/xorg-server-1.11 package, the X.Org X > Server again provides debugging functionality that can be used > terminate an application that exclusively grabs mouse and keyboard > input, like screen locking utilities. > > Gu1 reported that the X Keyboard Configuration Database maps this > functionality by default to the Ctrl+Alt+Numpad * key combination. > > Impact > ====== > > A physically proximate attacker could exploit this vulnerability to > gain access to a locked X session without providing the correct > credentials. > > Workaround > ========== > > Downgrade to any version of x11-base/xorg-server below > x11-base/xorg-server-1.11: > > # emerge --oneshot --verbose "<x11-base/xorg-server-1.11" > > Resolution > ========== > > All xkeyboard-config users should upgrade to the latest version: > > # emerge --sync > # emerge --ask --oneshot -v ">=x11-misc/xkeyboard-config-2.4.1-r3" > > NOTE: The X.Org X Server 1.11 was only stable on the AMD64, ARM, > HPPA, and x86 architectures. Users of the stable branches of all > other architectures are not affected and will be directly provided > with a fixed X Keyboard Configuration Database version. > > References > ========== > > [ 1 ] CVE-2012-0064 > http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0064 > > Availability > ============ > > This GLSA and any updates to it are available for viewing at the > Gentoo Security Website: > > http://security.gentoo.org/glsa/glsa-201201-16.xml > > Concerns? > ========= > > Security is a primary focus of Gentoo Linux and ensuring the > confidentiality and security of our users' machines is of utmost > importance to us. Any security concerns should be addressed to > security(a)gentoo.org or alternatively, you may file a bug at > https://bugs.gentoo.org. > > License > ======= > > Copyright 2012 Gentoo Foundation, Inc; referenced text belongs to > its owner(s). > > The contents of this document are licensed under the Creative > Commons - Attribution / Share Alike license. > > http://creativecommons.org/licenses/by-sa/2.5

1 0

Fwd: HotPar '12 Submission Deadline Approaching
by Gilbert E. Detillieux 24 Jan '12

24 Jan '12

FYI... -------- Original Message -------- Subject: [Board] HotPar '12 Submission Deadline Approaching Date: Sun, 22 Jan 2012 21:20:02 -0800 From: Lionel Garth Jones <lgj(a)usenix.org> To: info(a)muug.mb.ca, gedetil(a)muug.mb.ca I'm writing to remind you that the submission deadline for the 4th USENIX Workshop on Hot Topics in Parallelism (HotPar '12) is approaching. Paper registration (abstract submission) is due Tuesday, January 24, 2012, 11:59 p.m. PST. Full paper submission is due Tuesday, January 31, 2012, 11:59 p.m. PST. There will be no extension of the deadlines. http://www.usenix.org/hotpar12/cfpb HotPar '12 will bring together researchers and practitioners doing innovative work in the area of parallel computing. Multicore and multithreaded processors are pervasive, and core counts are increasing. This trend is driven by limits on energy consumption in computer systems and the poor energy performance of increasingly complex uniprocessors. Parallel architectures can potentially mitigate these problems, but larger core counts will be successful only if languages, systems, and applications can take advantage of parallel hardware. Navigating this change will require new parallel programming paradigms, new methods of application design, new structures for system software, and new models of interaction among applications, compilers, operating systems, and hardware. We request submissions of position papers that propose new directions for research or products in these areas, advocate non-traditional approaches to the problems engendered by parallelism, or potentially generate controversy and discussion. More information and submission guidelines are available at http://www.usenix.org/hotpar12/cfpb We look forward to receiving your submissions. Sincerely, Hans-J. Boehm, HP Labs Luis Ceze, University of Washington HotPar Program Co-Chairs hotpar12chairs(a)usenix.org -------------------------------------------------------------- Call for Papers 4th USENIX Workshop on Hot Topics in Parallelism (HotPar '12) June 7-8, 2012, Berkeley, CA http://www.usenix.org/hotpar12/cfpb/ Paper registration (abstract submission) due: Tuesday, January 24, 2012, 11:59 p.m. PST Paper submission due: Tuesday, January 31, 2012, 11:59 p.m. PST --------------------------------------------------------------

1 0

Fwd: USENIX WebApps '12 Submission Deadline Approaching
by Gilbert E. Detillieux 24 Jan '12

24 Jan '12

FYI... -------- Original Message -------- Subject: [Board] USENIX WebApps '12 Submission Deadline Approaching Date: Thu, 19 Jan 2012 14:14:52 -0800 From: Lionel Garth Jones <lgj(a)usenix.org> I'm writing to remind you that the submission deadline for the 3rd USENIX Conference on Web Application Development (WebApps '12) is approaching. Please submit all work by January 23, 2012, 11:59 p.m. http://www.usenix.org/webapps12/cfpb Like the inaugural WebApps '10 and '11, WebApps '12 seeks to attract cutting-edge research that advances the state of the art, not only of novel Web applications but also of infrastructure, frameworks, tools, and techniques that support the development, analysis/testing, operation, or deployment of those applications. Possible topics include but are not limited to: * Storage for Web-scale applications * Techniques for testing and debugging * Novel strategies for fault tolerance or high availability in Web apps * The Web as an emerging platform in new application areas * Making Web apps social and integrating with social utilities, e.g., Facebook, Twitter, Google+ * HCI techniques related specifically to Web apps * Measurement, modeling, workload generation, and other tools to aid experimental research on Web apps * New and unusual app features or implementation techniques * Media delivery applications and infrastructure * Client-side libraries, toolkits, plug-ins * Server-side frameworks * Languages and language engineering advances relevant to Web app development * Deployment substrates and technologies (cloud computing, infrastructure as a service, testing as a service, etc.) WebApps '12 will consist of a single track of refereed papers and, new this year, a set of short paper demos. Papers with practical significance and/or working prototypes will be preferred over purely theoretical results. Short paper demo submissions must have a working prototype. Submitted papers must be no longer than 12 pages for regular papers and 6 pages for demo papers, including figures, tables, and references. For more details on the submission process, advice on how to prepare a competitive paper, and templates to use with LaTeX, Word, etc., authors should consult http://www.usenix.org/events/webapps12/cfp/requirements.html WebApps '12 will take place June 13-14, 2012, in Boston, MA. It is a co-located event that occurs during USENIX Federated Conferences Week, which spans June 12-15, 2012. I look forward to receiving your submissions. Sincerely, Michael Maximilien, IBM Research--Watson WebApps '12 Program Chair webapps12chair(a)usenix.org ------------------------------------------------------------------------ Call for Papers: 3rd USENIX Conference on Web Application Development (WebApps '12) June 13-14, 2012, Boston, MA http://www.usenix.org/webapps12/cfpb Paper submissions deadline: January 23, 2012, 11:59 p.m. PST ------------------------------------------------------------------------

1 0

Looking for FreePBX Support Person
by Scott Mckenzie 24 Jan '12

24 Jan '12

Looking to subcontract someone who currently supports FreePBX - please contact me. Scott McKenzie Corporate Systems Consultant Douglas Scott Systems Management Toll: 855.477.7444 Fax: 204.318.1122 Cell: 204.296.9286 <http://www.douglasscott.ca/> cid:5CC97603-1BD8-4CC9-8EA7-6775416DE07D This message and any attachments are confidential and intended solely for the above-mentioned recipient(s). If you have received this message in error, please return it to the sender and delete it from your files. Unauthorized use, copying or distribution of this e-mail is strictly prohibited.

1 0

simple name service
by Dan Martin 23 Jan '12

23 Jan '12

The network seems connected. I'd like to be able to refer to the machines by their names. I have up to 9 machines connected, each with a distinct manually set IP address (not counting some virtual machines in Parallels on the Mac). The machines have a variety of OSs. I may get a registered domain name, but not for about a year from now. For now I would like the simplest (read laziest) solution possible. I am hoping that there is a very simple way to run a DNS service privately on the network as opposed to changing /etc/hosts on a number of machines. Most of what I have seen makes this look more than trivial. I am running Suse (I think Suse 10) on my gateway, but hoping I could follow directions for setting up on Ubuntu at http://lani78.wordpress.com/2008/08/09/setting-up-a-dns-for-the-local-netwo… I don't want to do anything more complicated than that for the time being. Suggestions? is there a lazier way? -Dan Dan Martin GP Hospital Practitioner Computer Scientist ummar143(a)shaw.ca (204) 831-1746 answering machine always on

4 6