<?xml version="1.0" encoding="iso-8859-1" ?>
<?xml-stylesheet title="XSL_formatting" type="text/xsl" href="/images/lists/rssstyle2.xsl"?>
<rss version="2.0">
<channel>
<title>Gentoo | Security</title>
<description>Mailing List Archive by Gossamer Threads</description>
<link>http://www.gossamer-threads.com/lists/gentoo/security/</link>
<language>en-us</language>
<copyright>(c) Gossamer Threads Inc. All rights reserved.</copyright>
<lastBuildDate>24 Nov  2009 05:59:05 -0800</lastBuildDate>
<ttl>120</ttl>
<image>
<title>Gossamer Threads | Gentoo | Security</title>
<width>75</width>
<height>23</height>
<link>http://www.gossamer-threads.com/lists/gentoo/security/</link>
<url>http://www.gossamer-threads.com/images/lists/rss_logo.jpg</url>
</image>
<item>
<title>Re: the Gentoo Audit project and dev-util/splint</title>
<description>Hello Mansour, On Wednesday 10 June 2009, Mansour Moufid wrote: &amp;gt; &amp;gt; But keep in mind there is a certain amount of work that comes with &amp;gt; &amp;gt; this. &amp;gt; &amp;gt;</description>
<pubDate>11 Jun  2009 07:13:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/191091</link>
</item><item>
<title>Re: the Gentoo Audit project and dev-util/splint</title>
<description>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, Jun 4, 2009 at 6:58 AM, Robert Buchholz&amp;lt;rbu@gentoo.org&amp;gt; wrote: &amp;gt; However note that the Auditing</description>
<pubDate>10 Jun  2009 13:35:09 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/191001</link>
</item><item>
<title>Re: the Gentoo Audit project and dev-util/splint</title>
<description>On Thursday 04 June 2009, Mansour Moufid wrote: &amp;gt; Hello list, &amp;gt; &amp;gt; I was wondering if I could get peoples&amp;#039; opinions of dev-util/splint &amp;gt; (the Secure Pr</description>
<pubDate>04 Jun  2009 03:58:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/190450</link>
</item><item>
<title>the Gentoo Audit project and dev-util/splint</title>
<description>Hello list, I was wondering if I could get peoples&amp;#039; opinions of dev-util/splint (the Secure Programming Lint) [1], and specifically in the context of</description>
<pubDate>03 Jun  2009 20:44:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/190443</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>Peter Volkov wrote: &amp;gt; Ð&#039; Ð¡Ñ€Ð´, 13/05/2009 Ð² 17:50 -0500, Aleksey V Lazar Ð¿Ð¸ÑˆÐµÑ‚: &amp;gt;  &amp;gt;  &amp;gt;&amp;gt; I&amp;#039;m using Portage version 2.1.6.13 right now. I</description>
<pubDate>01 Jun  2009 10:24:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/190243</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>Ð&#039; Ð¡Ñ€Ð´, 13/05/2009 Ð² 17:50 -0500, Aleksey V Lazar Ð¿Ð¸ÑˆÐµÑ‚:  &amp;gt; I&amp;#039;m using Portage version 2.1.6.13 right now. I know for a fact that &amp;gt; I&amp;#039;ve us</description>
<pubDate>29 May  2009 00:19:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/190089</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>Robert Buchholz wrote: &amp;gt; On Wednesday 13 May 2009, Aleksey V Lazar wrote: &amp;gt;  &amp;gt;&amp;gt; Robert Buchholz wrote: &amp;gt;&amp;gt;   &amp;gt;&amp;gt;&amp;gt; On Tuesday 29 July 2008, Bill wro</description>
<pubDate>13 May  2009 15:50:10 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/188791</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>On Wednesday 13 May 2009, Aleksey V Lazar wrote: &amp;gt; Robert Buchholz wrote: &amp;gt; &amp;gt; On Tuesday 29 July 2008, Bill wrote: &amp;gt; &amp;gt;&amp;gt;&amp;gt; Currently (to the best of my</description>
<pubDate>12 May  2009 15:24:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/188722</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>Robert Buchholz wrote: &amp;gt; On Tuesday 29 July 2008, Bill wrote: &amp;gt;  &amp;gt;&amp;gt;&amp;gt; Currently (to the best of my understanding) there is no easy way &amp;gt;&amp;gt;&amp;gt; (e.g.: an</description>
<pubDate>12 May  2009 15:18:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/188721</link>
</item><item>
<title>Re: small announcement for the community</title>
<description>On Tuesday 03 March 2009 17:30:24 Douglas J Hunley wrote: &amp;gt; A while back I setup a small cron job to parse the GLSA feed and post it to &amp;gt; Twitter. I&amp;#039;v</description>
<pubDate>06 Mar  2009 10:57:05 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/183449</link>
</item><item>
<title>Re: small announcement for the community</title>
<description>Am Mittwoch 04 MÃ¤rz 2009 schrieb Aleksey V Lazar: &amp;gt; Douglas J Hunley wrote: &amp;gt; &amp;gt; If you want to, simply follow &amp;gt; &amp;gt; @Gentoo_Security and you&amp;#039;ll get &amp;#039;in</description>
<pubDate>05 Mar  2009 00:33:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/183376</link>
</item><item>
<title>Re: small announcement for the community</title>
<description>Twitter. -- Michael Thompson -original message- Subject: Re: [gentoo-security] small announcement for the community From: Aleksey V Lazar &amp;lt;lazar@mnsu</description>
<pubDate>04 Mar  2009 09:47:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/183356</link>
</item><item>
<title>Re: small announcement for the community</title>
<description>Douglas J Hunley wrote: &amp;gt; If you want to, simply follow &amp;gt; @Gentoo_Security and you&amp;#039;ll get &amp;#039;instant&amp;#039; updates of new GLSAs &amp;gt; &amp;gt;  I&amp;#039;m sorry, what does</description>
<pubDate>04 Mar  2009 09:44:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/183355</link>
</item><item>
<title>small announcement for the community</title>
<description>A while back I setup a small cron job to parse the GLSA feed and post it to Twitter. I&amp;#039;ve been tweaking it and watching it and it seems stable enough</description>
<pubDate>03 Mar  2009 14:30:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/183327</link>
</item><item>
<title>Re: TCP Wrapper Documentation</title>
<description>I can think of three reasons: less clutter, less maintenance, and keeping the machine from wasting time parsing the file on busy systems that may have</description>
<pubDate>14 Jan  2009 13:17:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/179459</link>
</item><item>
<title>Re: TCP Wrapper Documentation</title>
<description>Thank you for all the suggestions, they have been very helpful and I now have my tcp wrappers up and running. Just out of curiosity, why doesn&amp;#039;t the</description>
<pubDate>12 Jan  2009 16:32:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/179307</link>
</item><item>
<title>Re: TCP Wrapper Documentation</title>
<description>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256  Hi there... You can also install the &amp;quot;DenyHosts&amp;quot; package, which will parse your syslog for failed</description>
<pubDate>12 Jan  2009 09:50:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/179268</link>
</item><item>
<title>Re: TCP Wrapper Documentation</title>
<description>Search for &amp;quot;tcp wrappers howto&amp;quot; on Google. Yes, this must be maintained manually. I recommend to do away with /etc/host.deny and have &amp;quot;ALL :ALL@ALL :d</description>
<pubDate>09 Jan  2009 21:51:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/179152</link>
</item><item>
<title>TCP Wrapper Documentation</title>
<description>I have a gentoo desktop profile system and I would like to use tcp wrappers to secure certain services like ssh. I followed the documentation I could</description>
<pubDate>09 Jan  2009 20:51:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/179151</link>
</item><item>
<title>[no subject]</title>
<description>gentoo-security+subscribe@lists.gentoo.org</description>
<pubDate>21 Oct  2008 04:23:05 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/174017</link>
</item><item>
<title>[no subject]</title>
<description></description>
<pubDate>21 Oct  2008 04:19:09 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/174016</link>
</item><item>
<title>Prince, Samuel is out of the office.</title>
<description>I will be out of the office starting 18/08/2008 and will not return until 29/08/2008. I will have limited access to my email while away from the off</description>
<pubDate>20 Aug  2008 20:03:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/170746</link>
</item><item>
<title>Reporting restricted bugs works again</title>
<description>Hello all, as you might be aware, the Gentoo Security Team encourages users to report security vulnerabilities or findings of code audits that are n</description>
<pubDate>20 Aug  2008 14:37:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/170739</link>
</item><item>
<title>[no subject]</title>
<description></description>
<pubDate>06 Aug  2008 07:12:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/170062</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>On Tuesday 29 July 2008, Bill wrote: &amp;gt; &amp;gt; Currently (to the best of my understanding) there is no easy way &amp;gt; &amp;gt; (e.g.: an /emerge/ option) to identify a</description>
<pubDate>28 Jul  2008 19:13:38 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169641</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>&amp;gt; Currently (to the best of my understanding) there is no easy way (e.g.: &amp;gt; an /emerge/ option) to identify and update only the packages that have &amp;gt; s</description>
<pubDate>28 Jul  2008 16:33:31 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169638</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>Hello, Robert: Robert Buchholz wrote: &amp;gt; On Monday 21 July 2008, Aleksey V Lazar wrote: &amp;gt;  &amp;gt;&amp;gt; Hello. Would it be reasonable to suggest adding a ~se</description>
<pubDate>28 Jul  2008 15:08:27 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169632</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>Pierre-Yves Rofes wrote: &amp;gt; On Mon, July 21, 2008 9:04 pm, Aleksey V Lazar wrote: &amp;gt;  &amp;gt;&amp;gt; Hello. Would it be reasonable to suggest adding a ~security</description>
<pubDate>24 Jul  2008 10:20:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169411</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>On Tuesday 22 July 2008, Paige Thompson wrote: &amp;gt; misfit[1004]:~% sudo emerge -uva nethack &amp;gt; Password: &amp;gt; &amp;gt; These are the packages that would be merged,</description>
<pubDate>22 Jul  2008 12:04:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169317</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>misfit[1004]:~% sudo emerge -uva nethack Password: These are the packages that would be merged, in order: Calculating dependencies | !!! All ebuilds</description>
<pubDate>22 Jul  2008 11:01:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169316</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>On Monday 21 July 2008, Aleksey V Lazar wrote: &amp;gt; Hello. Would it be reasonable to suggest adding a ~security (or &amp;gt; something like it) flag to denote</description>
<pubDate>22 Jul  2008 03:42:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169310</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>Hello. Would it be reasonable to suggest adding a ~security (or something like it) flag to denote packages masked for security reasons? Thanks. Ale</description>
<pubDate>21 Jul  2008 12:04:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169273</link>
</item><item>
<title>Re: Security project meeting summary</title>
<description>Hello. Would it be reasonable to suggest adding a ~security (or something like it) flag to denote packages masked for security reasons? Thanks. Ale</description>
<pubDate>21 Jul  2008 12:04:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169274</link>
</item><item>
<title>Security project meeting summary</title>
<description>Hi, I attached a summary of last week&amp;#039;s meeting. The summary and the log are also linked from [1] and should find their way to our /proj dir in the</description>
<pubDate>21 Jul  2008 11:49:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/169272</link>
</item><item>
<title>Security project meeting - Monday, 2008-07-14, 19:00 UTC</title>
<description>Hi everyone, the security project will hold a public meeting in #gentoo-security this monday, 2008-07-14 at 19:00 UTC (21:00 CEST). The tentative ag</description>
<pubDate>12 Jul  2008 16:18:29 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/168604</link>
</item><item>
<title>Re: How to make iptables log to a separate log file?</title>
<description>Abhay Kedia wrote: ... &amp;gt; Yes and this is why I want them to be logged separately. Thanks to the helpful &amp;gt; replies by everyone, I have been able to lo</description>
<pubDate>17 Jun  2008 01:46:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62077</link>
</item><item>
<title>Running app-admin/syslog-ng without root privileges</title>
<description>Hi, I am trying to run syslog-ng v1.6.8 without root privileges, under dedicated account. All goes fine, except messages from kernel buffer /proc/kms</description>
<pubDate>17 Jun  2008 01:46:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62056</link>
</item><item>
<title>Why we need TPM in Linux kernel?</title>
<description>Hi, I&amp;#039;m worried with the so-called &amp;quot;Treacherous Computing&amp;quot; appearance in recent Linux kernels. I have read about it on EFF &amp;amp; GNU portals and can&amp;#039;t se</description>
<pubDate>17 Jun  2008 01:46:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62062</link>
</item><item>
<title>Re: ssh - upgrade to v4 - hash known_hosts file</title>
<description>antoine schrieb: &amp;gt; On Tue, 2005-05-17 at 12:42 -0400, James Larkby-Lahet wrote: &amp;gt;&amp;gt; &amp;gt;&amp;gt; *However* &amp;gt;&amp;gt; &amp;gt;&amp;gt; SSH version 4 and higher contain an option to ha</description>
<pubDate>17 Jun  2008 01:46:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/61798</link>
</item><item>
<title>Re: ssl weak key generation (supposed to effect only debian)</title>
<description>On Sat, 17 May 2008, Byron wrote: &amp;gt; It&amp;#039;s something of a &amp;quot;lesser of two evils&amp;quot; situation. In the absence of &amp;gt; evidence either way, the only habit th</description>
<pubDate>21 May  2008 09:37:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62487</link>
</item><item>
<title>Re: ssl weak key generation (supposed to effect only debian)</title>
<description>Robert Buchholz wrote: &amp;gt; Hi Peter, &amp;gt; &amp;gt; On Saturday, 17. May 2008, Peter Schneider-Kamp wrote: &amp;gt;  &amp;gt;&amp;gt; the recently publicized SSL weak key generation</description>
<pubDate>17 May  2008 18:10:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62486</link>
</item><item>
<title>Re: ssl weak key generation (supposed to effect only debian)</title>
<description>Hi Peter, On Saturday, 17. May 2008, Peter Schneider-Kamp wrote: &amp;gt; the recently publicized SSL weak key generation for debian-based systems &amp;gt; (c.f. h</description>
<pubDate>17 May  2008 04:15:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62485</link>
</item><item>
<title>ssl weak key generation (supposed to effect only debian)</title>
<description>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, the recently publicized SSL weak key generation for debian-based systems (c.f. http://www.debian.o</description>
<pubDate>17 May  2008 02:08:36 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62484</link>
</item><item>
<title>Re: Portage rsync security</title>
<description>On Thu, 20 Mar 2008, Russell Valentine wrote: &amp;gt; Mansour Moufid wrote: &amp;gt;&amp;gt; An attacker would need to be able to manipulate both the rsync server &amp;gt;&amp;gt; and</description>
<pubDate>14 Apr  2008 09:34:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62483</link>
</item><item>
<title>Re: Prince, Samuel is out of the office.</title>
<description>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256  Just the right message for a security-minded list! And on April Fool&amp;#039;s! =) This reminds me of a r</description>
<pubDate>01 Apr  2008 14:07:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62482</link>
</item><item>
<title>Prince, Samuel is out of the office.</title>
<description>I will be out of the office starting 03/31/2008 and will not return until 04/07/2008. I will respond to your message when I return. ________________</description>
<pubDate>01 Apr  2008 14:01:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62481</link>
</item><item>
<title>Re: gpg keys; GSWoT &amp;amp; PGP Global Directory Key</title>
<description>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Matthias Bethke wrote: | Hi Eric, | on Fri, Mar 28, 2008 at 03:13:43PM -0400, you wrote: |&amp;gt; I&amp;#039;m seeing</description>
<pubDate>01 Apr  2008 11:05:29 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62480</link>
</item><item>
<title>Re: gpg keys; GSWoT &amp;amp; PGP Global Directory Key</title>
<description>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Randy Barlow wrote: | http://xkcd.com/364/ | ROTFLMAO!!!!! One more reason to love xkcd. - -- Eric M</description>
<pubDate>01 Apr  2008 10:45:21 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62479</link>
</item><item>
<title>Re: gpg keys; GSWoT &amp;amp; PGP Global Directory Key</title>
<description>Matthias Bethke wrote: &amp;gt; As far as I can see, the PGP Global Directory does no verification apart &amp;gt; from checking that an email address exists, so its</description>
<pubDate>01 Apr  2008 08:54:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62478</link>
</item><item>
<title>Re: gpg keys; GSWoT &amp;amp; PGP Global Directory Key</title>
<description>Hi Eric, on Fri, Mar 28, 2008 at 03:13:43PM -0400, you wrote: &amp;gt; I&amp;#039;m seeing a bunch of keys in my keyring with GSWoT(1) and PGP Global &amp;gt; Directory(2) s</description>
<pubDate>01 Apr  2008 08:42:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62477</link>
</item><item>
<title>AUTO: Janek Lünstedt ist außer Haus (Rückkehr am 14.04.2008)</title>
<description>Ich bin bis 14.04.2008 abwesend  Sehr geehrte Damen und Herren! In der Zeit vom 25.03.2008 bis einschließlich 11.04.2008 befinde ich mich im Urlaub</description>
<pubDate>28 Mar  2008 20:00:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62476</link>
</item><item>
<title>gpg keys; GSWoT &amp;amp; PGP Global Directory Key</title>
<description>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I&amp;#039;m seeing a bunch of keys in my keyring with GSWoT(1) and PGP Global Directory(2) signatures on them.</description>
<pubDate>28 Mar  2008 12:13:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62475</link>
</item><item>
<title>Re: Portage rsync security</title>
<description>Robert Buchholz wrote on 03/20/2008 02:07 PM: &amp;gt; (CVS, core gentoo infra) and then check it on the user side. If you &amp;gt; want to do this right now, you</description>
<pubDate>20 Mar  2008 06:46:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62474</link>
</item><item>
<title>Re: Portage rsync security</title>
<description>Mansour Moufid wrote: &amp;gt; An attacker would need to be able to manipulate both the rsync server &amp;gt; and the actual downloaded packages since Portage verif</description>
<pubDate>20 Mar  2008 06:34:31 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62473</link>
</item><item>
<title>Re: Portage rsync security</title>
<description>On Thursday 20 March 2008, Florian Philipp wrote: &amp;gt; Hi list! &amp;gt; &amp;gt; Am I right that there is currently no way portage tries to verify &amp;gt; that the rsync-mi</description>
<pubDate>20 Mar  2008 06:07:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62472</link>
</item><item>
<title>Re: Portage rsync security</title>
<description>On Thu, Mar 20, 2008 at 07:49:12AM -0400, Mansour Moufid wrote: [...] &amp;gt; for i in $IP &amp;gt; do &amp;gt;  $IPT -A OUTPUT -o $EXTIF -p tcp -s $EXTIP -d $i --dpor</description>
<pubDate>20 Mar  2008 05:31:27 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62471</link>
</item><item>
<title>Re: Portage rsync security</title>
<description>On Thu, Mar 20, 2008 at 6:45 AM, Florian Philipp &amp;lt;lists@f_philipp.fastmail.net&amp;gt; wrote: &amp;gt; Hi list! &amp;gt; &amp;gt; Am I right that there is currently no way porta</description>
<pubDate>20 Mar  2008 04:49:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62470</link>
</item><item>
<title>Portage rsync security</title>
<description>Hi list! Am I right that there is currently no way portage tries to verify that the rsync-mirror is not spoofed? Doesn&amp;#039;t that pose a major threat? I</description>
<pubDate>20 Mar  2008 03:45:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62469</link>
</item><item>
<title>Re: Cryptsetup-LUKS: cryptsetup -c anycipher-xts-plain:sha256 or not :sha256?</title>
<description>jehovah@wir-sind-cool.org wrote: &amp;gt; Hi, &amp;gt; &amp;gt; I found many guides on harddisk encryption with cryptsetup-LUKS but none of them clarifies if it makes sens</description>
<pubDate>16 Mar  2008 06:15:10 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62468</link>
</item><item>
<title>Re: Cryptsetup-LUKS: cryptsetup -c anycipher-xts-plain:sha256 or not :sha256?</title>
<description>Hi again, am I mistaken to assume that there are only 3 correct combinations? anycipher-cbc-essiv:sha256 anycipher-lrw-benbi anycipher-xts-plain I&amp;#039;</description>
<pubDate>15 Mar  2008 08:54:51 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62467</link>
</item><item>
<title>Cryptsetup-LUKS: cryptsetup -c anycipher-xts-plain:sha256 or not :sha256?</title>
<description>Hi, I found many guides on harddisk encryption with cryptsetup-LUKS but none of them clarifies if it makes sense to use a hash-function (like sha256)</description>
<pubDate>15 Mar  2008 05:38:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62466</link>
</item><item>
<title>Prince, Samuel is out of the office.</title>
<description>I will be out of the office starting 10/03/2008 and will not return until 17/03/2008. I will respond to your message when I return. ________________</description>
<pubDate>11 Mar  2008 14:01:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62465</link>
</item><item>
<title>sub</title>
<description>-- gentoo-security@lists.gentoo.org mailing list</description>
<pubDate>11 Mar  2008 08:28:38 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62464</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>The idea of avoiding something less popular, is that if someone gets your encrypted data, they could look through the algorithm and find a hole and br</description>
<pubDate>07 Mar  2008 11:02:32 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62463</link>
</item><item>
<title>(intet emne)</title>
<description>-- gentoo-security@lists.gentoo.org mailing list</description>
<pubDate>07 Mar  2008 01:15:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62462</link>
</item><item>
<title>Re: gentoo-security+unsubscribe@gentoo.org</title>
<description>&amp;gt; -- &amp;gt; gentoo-security@lists.gentoo.org mailing list &amp;gt; &amp;gt; You almost got it right. Remember to put gentoo-security+unsubscribe@gentoo.org in the To-f</description>
<pubDate>07 Mar  2008 00:15:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62461</link>
</item><item>
<title>gentoo-security+unsubscribe@gentoo.org</title>
<description>-- gentoo-security@lists.gentoo.org mailing list</description>
<pubDate>07 Mar  2008 00:12:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62460</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>Hello, Am Donnerstag, 6. März 2008 schrieb Peter Meier: &amp;gt; &amp;gt; I just wanted to jump in and say that I&amp;#039;m personally a fan of Serpent. I &amp;gt; &amp;gt; like to use</description>
<pubDate>07 Mar  2008 00:07:19 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62459</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>Hi &amp;gt; I just wanted to jump in and say that I&amp;#039;m personally a fan of Serpent. I &amp;gt; like to use something that&amp;#039;s a little less popular, but still open.</description>
<pubDate>06 Mar  2008 08:30:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62458</link>
</item><item>
<title>Re: User authentication with key-file and gpg-agent</title>
<description>Florian Philipp wrote: &amp;gt; Hi! &amp;gt; &amp;gt; Now that my initrd-script is ready and provides me with the means to &amp;gt; encrypt partitions with a gpg-encrypted key-f</description>
<pubDate>03 Mar  2008 12:23:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62457</link>
</item><item>
<title>User authentication with key-file and gpg-agent</title>
<description>Hi! Now that my initrd-script is ready and provides me with the means to encrypt partitions with a gpg-encrypted key-file [1], I&amp;#039;d like to use the ve</description>
<pubDate>03 Mar  2008 11:53:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62456</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>I just wanted to jump in and say that I&amp;#039;m personally a fan of Serpent. I like to use something that&amp;#039;s a little less popular, but still open. It is s</description>
<pubDate>01 Mar  2008 18:25:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62455</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>On Sat, 2008-03-01 at 11:48 +0000, Calum wrote: &amp;gt; On Sat, Mar 1, 2008 at 10:43 AM, Florian Philipp &amp;gt; &amp;lt;lists@f_philipp.fastmail.net&amp;gt; wrote: &amp;gt; &amp;gt; &amp;gt; &amp;gt; On</description>
<pubDate>01 Mar  2008 05:28:09 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62454</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>On Sat, Mar 1, 2008 at 10:43 AM, Florian Philipp &amp;lt;lists@f_philipp.fastmail.net&amp;gt; wrote: &amp;gt; &amp;gt; On Fri, 2008-02-29 at 22:31 -0500, Mansour Moufid wrote: &amp;gt;</description>
<pubDate>01 Mar  2008 04:48:06 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62453</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>On Fri, 2008-02-29 at 22:31 -0500, Mansour Moufid wrote: &amp;gt; On Fri, Feb 29, 2008 at 9:37 PM, Steffen Schulz &amp;lt;pepe_ml@gmx.net&amp;gt; wrote: &amp;gt; &amp;gt; 128bit are co</description>
<pubDate>01 Mar  2008 03:43:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62452</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>On Fri, Feb 29, 2008 at 9:37 PM, Steffen Schulz &amp;lt;pepe_ml@gmx.net&amp;gt; wrote: &amp;gt; 128bit are considered secure for the next several years. &amp;gt; On that subjec</description>
<pubDate>29 Feb  2008 20:31:18 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62451</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>On 080301 at 01:51, Dan Reidy wrote: &amp;gt; I&amp;#039;ve never done any benchmarks myself, however a few years back I did read &amp;gt; up on which crytpo engine would b</description>
<pubDate>29 Feb  2008 19:37:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62450</link>
</item><item>
<title>Re: Encryption Ciphers gentoo-security@lists.gentoo.org</title>
<description>I benchmakerked them also about two years ago. At that time anibus encryption, xtc and lrw modes didnt exist in the kernel.  I concentrated on 256 b</description>
<pubDate>29 Feb  2008 19:28:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62449</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>On Wednesday 27 February 2008 01:58:11 pm Florian Philipp wrote: &amp;gt; Hi! &amp;gt; &amp;gt; I just did some benchmarking on different ciphers for cryptsetup-luks &amp;gt; and</description>
<pubDate>29 Feb  2008 17:48:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62448</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>On Thu, 2008-02-28 at 15:19 -0500, Mansour Moufid wrote: &amp;gt; On Thu, Feb 28, 2008 at 1:29 PM, Florian Philipp &amp;gt; &amp;lt;lists@f_philipp.fastmail.net&amp;gt; wrote: &amp;gt;</description>
<pubDate>29 Feb  2008 10:09:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62447</link>
</item><item>
<title>[no subject]</title>
<description>-- Darren Taylor Protecht Advisory www.protecht.com.au -- gentoo-security@lists.gentoo.org mailing list</description>
<pubDate>28 Feb  2008 13:50:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62446</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>On Thu, Feb 28, 2008 at 1:29 PM, Florian Philipp &amp;lt;lists@f_philipp.fastmail.net&amp;gt; wrote: &amp;gt; One last question for everyone who has read this rather long</description>
<pubDate>28 Feb  2008 13:19:30 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62445</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>On Thu, 2008-02-28 at 16:34 +0100, Peter Meier wrote: &amp;gt; Hi &amp;gt; &amp;gt; &amp;gt; I just did some benchmarking on different ciphers for cryptsetup-luks &amp;gt; &amp;gt; will you</description>
<pubDate>28 Feb  2008 11:29:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62444</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>&amp;gt; &amp;gt; Do you think keysize is more important than choosing a cipher which &amp;gt; &amp;gt; made it further in the AES-contest and therefore using Anubis with &amp;gt; &amp;gt; 3</description>
<pubDate>28 Feb  2008 11:02:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62443</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>I found something really interesting from an interview with Bruce Schneier who authored Blowfish and Twofish. He recommends using the newer Twofish a</description>
<pubDate>28 Feb  2008 10:47:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62442</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>Hi &amp;gt; I just did some benchmarking on different ciphers for cryptsetup-luks will you share them somewhere? for the other questions I can say the sam</description>
<pubDate>28 Feb  2008 08:34:51 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62441</link>
</item><item>
<title>Re: Encryption Ciphers</title>
<description>Hello Florian :) Florian Philipp wrote: &amp;gt; I just did some benchmarking on different ciphers for cryptsetup-luks I have not done benchmarks on my own,</description>
<pubDate>28 Feb  2008 04:26:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62440</link>
</item><item>
<title>Encryption Ciphers</title>
<description>Hi! I just did some benchmarking on different ciphers for cryptsetup-luks and now I&amp;#039;ve got some questions: 1. Is it a valid way to benchmark by usin</description>
<pubDate>27 Feb  2008 11:58:11 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62439</link>
</item><item>
<title>Re: Strange occurrence of sendmail and disk I/O in background....</title>
<description>Christopher P. Kern wrote: &amp;gt; Can anyone tell me what service/application would start sendmail? Cron would. And your message makes it sounds like cr</description>
<pubDate>26 Feb  2008 05:44:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62438</link>
</item><item>
<title>Re: Kernel Security + KISS</title>
<description>security+unsubscribe@gentoo.org -- gentoo-security@lists.gentoo.org mailing list</description>
<pubDate>25 Feb  2008 11:10:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62437</link>
</item><item>
<title>Re: Kernel Security + KISS</title>
<description>On Friday 22 February 2008 04:55:17 Casey Link wrote: &amp;gt; Here are some day to day duties that will be need to get done.This &amp;gt; isn&amp;#039;t exhaustive just the</description>
<pubDate>24 Feb  2008 06:43:38 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62436</link>
</item><item>
<title>Re: Kernel Security + KISS</title>
<description>Am Donnerstag, den 21.02.2008, 22:55 -0500 schrieb Casey Link: &amp;gt; vulnerabilities, -- gentoo-security@lists.gentoo.org mailing list</description>
<pubDate>22 Feb  2008 17:48:32 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62435</link>
</item><item>
<title>Re: Kernel Security + KISS</title>
<description>Here are some day to day duties that will be need to get done.This isn&amp;#039;t exhaustive just the results of a few minutes of brainstorming: * Stalking th</description>
<pubDate>21 Feb  2008 20:55:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62434</link>
</item><item>
<title>Re: Kernel Security + KISS</title>
<description>Yes. We should each have assigned tasks which will depend on our respective skill and trait.  -- ed*eonsec On Fri, Feb 22, 2008 at 3:28 AM, doppel</description>
<pubDate>21 Feb  2008 19:26:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62433</link>
</item><item>
<title>Take Bachelors of your desire</title>
<description>F A S T  T R A C K  D E G R E E  P R O G R A M  Obtain the degree you deserve, based on your present knowledge and life experience. A prosperous</description>
<pubDate>21 Feb  2008 19:07:18 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62431</link>
</item><item>
<title>Re: Take Bachelors of your desire</title>
<description>On Thu, 21 Feb 2008 19:07:18 --300 &amp;quot;Claudio&amp;quot; &amp;lt;pjp@gentoo.org&amp;gt; wrote: &amp;gt; F A S T  T R A C K  D E G R E E  P R O G R A M &amp;gt; &amp;gt; Obtain the degree you</description>
<pubDate>21 Feb  2008 15:57:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62432</link>
</item><item>
<title>Re: Kernel Security + KISS</title>
<description>George Prowse wrote: &amp;gt; Eduardo Tongson wrote: &amp;gt;&amp;gt; Nice plan. I think you are more able to lead. Can we communicate more &amp;gt;&amp;gt; in email perhaps a google gr</description>
<pubDate>21 Feb  2008 12:28:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62430</link>
</item><item>
<title>Re: Kernel Security + KISS</title>
<description>Eduardo Tongson wrote: &amp;gt; Nice plan. I think you are more able to lead. Can we communicate more &amp;gt; in email perhaps a google group or list. IRC is not e</description>
<pubDate>21 Feb  2008 09:22:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62429</link>
</item><item>
<title>Re: Kernel Security + KISS</title>
<description>Nice plan. I think you are more able to lead. Can we communicate more in email perhaps a google group or list. IRC is not efficient for people in diff</description>
<pubDate>21 Feb  2008 06:52:45 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62428</link>
</item><item>
<title>Re: Kernel Security + KISS</title>
<description>A couple days ago I discussed (in #gentoo-security) with Robert (rbu@g.o) a solution to the Kernel security issue. Robert has a good plan to keep the</description>
<pubDate>21 Feb  2008 06:35:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/gentoo/security/62427</link>
</item>
</channel>
</rss>
