mailing.openbsd.tech
  Home FAQ Contact Sign in
mailing.openbsd.tech only
 
Advanced search
April 2008
motuwethfrsasuw
 123456 14
78910111213 15
14151617181920 16
21222324252627 17
282930     18
2008
 Jan   Feb   Mar   Apr 
 May   Jun   Jul   Aug 
 Sep   Oct   Nov   Dec 
2008 2007 2006  
total
mailing.openbsd.tech Profile…
RELATED GROUPS

POPULAR GROUPS

more...

 Up
  Re: How to HIDE "OpenBSD" as user-agent?         


Author: Sean Kennedy
Date: Apr 30, 2008 08:53

Now this idea: I don't have an issue with.

For HoneyPot systems, obviously, you want to "Attract attention", you setup
attractive, known buggy user agent strings and the like for other services.
Then watch who attempts.

For Silent Lurker systems, you want an obscure response to thinks like the
HTTP User Agent string but if you use things like Opera, Firefox, or Apple's
Safari, You could select a false User-Agent string to send.
For other "Services" the Silent Lurker is going to respond to, you could be
more obscure: Like not send anything at all...

But then Again. I would tend to use the Silent Lurker method "If" I was
surfing for 'Pr0n' but instead I just use an expendable Windows 2000 system
running firefox *"With Delete everything when done"* setting turned on in a
PF'ed DMZ lan segment, logged in as administrator (with full rights) with a
machine name of IDONTCARE or something like that. When it goes Zoop, I ghost
a copy back over.

-sean
Show full article (1.67Kb)
no comments
  Re: How to HIDE "OpenBSD" as user-agent?         


Author: chefren
Date: Apr 29, 2008 16:54

On 4/29/08 5:32 PM, Ross Cameron wrote:
> This is an obscurity hack and an all round bad idea.

Yes it's an obscurity hack, but that doesn't make it a bad idea in general.

When I'm browsing from my work computer I'm very easy to trace anywhere
in logs because of the OpenBSD, KDE and Seamonkey combination.

From a security point of view it's plain stupid, but regarding privacy
the question isn't a bad idea.

+++chefren
no comments
  Re: lifetime directive in ipsec.conf         


Author: Jason McIntyre
Date: Apr 29, 2008 08:51

On Fri, Apr 11, 2008 at 02:47:29PM -0700, Prabhu Gurumurthy wrote:
> All -
>
> ipsecctl supports life (lifetime) token for both main mode and quick mode
> but it is not documented in ipsec.conf(5). Values 3600 (main mode) and 1200
> are from isakmpd.conf(5)
>

apparently this is purposely undocumented, as it is does not work
correctly.

jmc
> Index: ipsec.conf.5
> ===================================================================
> RCS file: /cvs/src/sbin/ipsecctl/ipsec.conf.5,v
> retrieving revision 1.118
> diff -u -r1.118 ipsec.conf.5...
Show full article (1.55Kb)
no comments
  Re: How to HIDE "OpenBSD" as user-agent?         


Author: Ross Cameron
Date: Apr 29, 2008 07:11

This is an obscurity hack and an all round bad idea.

If you REALLY must do this (dunno why) enjoy hacking the code of anything
you find on you're box that can be used as a network client.
Have fun :D

On Tue, Apr 29, 2008 at 2:18 PM, macintoshzoom lavabit.com>
wrote:
> How to HIDE "OpenBSD" as user-agent?
>
> For security reasons it is sometimes interesting to hide GLOBALLLY th
> O.S. you are running on AGAINST GIVING ANY CLUE TO HACKERS ABOUT HOW TO
> ATTACK YOU.
>
> Not only browsing but globally.
>
> Thanks for any tip about this.
>
>
Show full article (0.79Kb)
no comments
  Re: How to HIDE "OpenBSD" as user-agent?         


Author: Ross Cameron
Date: Apr 29, 2008 07:02

Sorry about the previous cross post,... sorry been working 37hours straight
and forgot to check.
no comments
  How to HIDE "OpenBSD" as user-agent?         


Author: macintoshzoom
Date: Apr 29, 2008 05:22

How to HIDE "OpenBSD" as user-agent?

For security reasons it is sometimes interesting to hide GLOBALLLY th
O.S. you are running on AGAINST GIVING ANY CLUE TO HACKERS ABOUT HOW TO
ATTACK YOU.

Not only browsing but globally.

Thanks for any tip about this.
no comments
  Da li razumete suprotni pol?         


Author: Top Shop
Date: Apr 29, 2008 04:45

Top Shop

Top e-revija: 20 29. april 2008.
Najbolja praktična reŔenja i saveti za bolji život

Početna l Budi fit l Lepota l Zdravje l Kuhinja i domaćinstvo

Zabava i deca l Carstvo igračaka l Knjige

HIT TV proizvodi

ab rocket

Ab Rocket

steam mop

H20 Steam Mop

leg magic

Leg Magic

kleen kut

Kleen
Kut

tweeze

Tweeze

Da li zaista razumete suprotni pol?

Detoksikacija organizma
Show full article (4.77Kb)
no comments
  Re: What is the difference between -current and -latestsnap         


Author: Han Boetes
Date: Apr 29, 2008 04:45

Otto Moerbeek wrote:
> On Tue, Apr 29, 2008 at 10:22:22AM +0200, Han Boetes wrote:
>> In order to be able to sent Deanna a dmesg with AZALIA_DEBUG
>> enabled I have to recompile the kernel. But I could not boot
>> the kernel since I got a complaint about missing syscall.
>>
>> What's the difference between -current and -latestsnap? Will
>> this be syncronised soon so I can wait for it?
>
> Did you run config before building?

Yes, I added 'option AZALIA_DEBUG' to GENERIC, ran config GENERIC,
cded to the GENERIC dir, make depend, make

Also the source and kernel were at most 2 days appart and it was
last week.

# Han
no comments
  Re: What is the difference between -current and -latestsnap         


Author: Otto Moerbeek
Date: Apr 29, 2008 03:19

On Tue, Apr 29, 2008 at 10:22:22AM +0200, Han Boetes wrote:
> Hi,
>
> In order to be able to sent Deanna a dmesg with AZALIA_DEBUG
> enabled I have to recompile the kernel. But I could not boot the
> kernel since I got a complaint about missing syscall.
>
> What's the difference between -current and -latestsnap? Will this
> be syncronised soon so I can wait for it?
>
>
>
> # Han

Did you run config before building?

-Otto
no comments
  What is the difference between -current and -latestsnap         


Author: Han Boetes
Date: Apr 29, 2008 02:29

Hi,

In order to be able to sent Deanna a dmesg with AZALIA_DEBUG
enabled I have to recompile the kernel. But I could not boot the
kernel since I got a complaint about missing syscall.

What's the difference between -current and -latestsnap? Will this
be syncronised soon so I can wait for it?

# Han
no comments
 
1 2 3 4 5 6 7 8 9