Re: Best practices for OpenPGP keys?
Drew Scott Daniels wrote: > Hi, > Is there any good documentation about best practices for OpenPGP key > management? I plan to use gnupg (gpg), as it's conventional and seems like > the "best of breed" these days. > > Most documentation I've found seems significantly out of date (including > long discussions of incompatibilities with versions from 2001...). I did > find it interesting that the IDEA patents are expiring in May this year > for the EU and US if I remember > You are not alone. > The best documentation I have found includes: > http://arfore.com/2007/07/29/gpg-best-practices/ > http://www.cam.ac.uk.pgp.net/pgpnet/pgp-faq/ > > Over the years I've heard some ideas like: > [...] >* Set an expiry date on your primary key and/or sub-key and sign a new > key before the old key expires. I think this is problematic for some > key reading programs though I can't remember any instances. Expiry > dates aren't default and seemed to be uncommon last time I checked. > This is a good idea, which is not widely applicated since people are principally lazy. > [...] >* Don't store your key on machines that connect to any networks. > That becomes paranoïa, at least to me. Everything depends on your configuration. > Transferring signed data is time consuming, inconvenient... But maybe better than revealing secrets. > [...] >* Use a random string for your passphrase. I was "bit" by this on my > first attempt to use a keypair years ago (around 2003). I forgot the > passphrase. > The problem is actually more general than this. Often, people think that using long and pseudo-randomly-generated passwords is a good thing. Actually, that is one of the worst thing one can do, except if he has a computer's memory in his head: the more complicated a password (here a passphrase), the more difficult it is to memorize. As a difficult-to-memorize password is often written somewhere, it becomes completely stupid to use such a (nowadays-)hacker-proof. > [...] > * "Harden" machines that contain your private key. While it's usually a > good idea to do this for all machines, I would hope that most things > would be secure without having to spend the extra time doing > configurations... > I always liked, e.g. SELinux, but this is not a common voice. > [...] > A nice guide to > implement the appropriate SELinux security context for a private key > would be nice, maybe I'm missing something from gnupg, fedora and/or > elsewhere. Totally. If you find one, please e-mail me. I would be really happy. -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. The weak can never forgive. Forgiveness is the attribute of the strong. signature.asc Description: OpenPGP digital signature
Weather forecast through applet not available in Europe?
Hi, From http://www.novell.com/coolsolutions/tip/16726.html, it appears to be possible to show the weather forecast. This seems to rely heavily (if not entirely) on www.weather.com. However, despite the fact that I am not in France, but in Belgium (which is pretty the same for the weather and regional info), I am never able to get weather forecast. Does the same problem appear in France too? Why is it so? Thanks. -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. Better is the enemy of good. signature.asc Description: OpenPGP digital signature
Re: Weather forecast through applet not available in Europe?
Bartosz Fenski aka fEnIo wrote: > On Thu, Mar 11, 2010 at 10:37:39PM +0100, Merciadri Luca wrote: > > >> From http://www.novell.com/coolsolutions/tip/16726.html, it appears to >> be possible to show the weather forecast. This seems to rely heavily (if >> not entirely) on www.weather.com. However, despite the fact that I am >> not in France, but in Belgium (which is pretty the same for the weather >> and regional info), I am never able to get weather forecast. Does the >> same problem appear in France too? Why is it so? >> > > Works fine in Poland. > > Nice to hear this. I do not even have the `Forecast' tab in my applet! -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. signature.asc Description: OpenPGP digital signature
Re: Weather forecast through applet not available in Europe?
Ron Johnson wrote: > (Let's get this back on the list!) > > On 2010-03-11 17:29, Merciadri Luca wrote: >> Ron Johnson wrote: >>> On 2010-03-11 15:37, Merciadri Luca wrote: >>>> Hi, >>>> >>>> From http://www.novell.com/coolsolutions/tip/16726.html, it appears to >>>> be possible to show the weather forecast. This seems to rely >>>> heavily (if >>>> not entirely) on www.weather.com. However, despite the fact that I am >>>> not in France, but in Belgium (which is pretty the same for the >>>> weather > > (Why do people so enjoy insulting Belgium?) > >>>> and regional info), I am never able to get weather forecast. Does the >>>> same problem appear in France too? Why is it so? >>>> >>> Are you saying that you can get current weather data? >> Weather data is correctly downloaded, but it is only for the current >> period of time, and there is no forecast option. >>> How "never" is "never"? Do you press the Refresh (I think that's what >>> it's called) button. >> For sure, but it is `Update.' >>> Does the forecast box not exist, or is it just "empty"? >> It does not even exist. I have `Current Conditions' and `Radar Map.' >>> FWIW, the XFce Weather Update panel addon gets Brussels' current and >>> forecast weather as expected. >>> >> Current weather, as expected, but I have never seen any glimpse of >> forecast. >> > > For what town/city? Does www.weather.com show the forecast? > For sure. Simply visit http://www.weather.com/weather/today/Liege+Belgium+BEXX0011?lswe=liege&from=searchbox_localwx . I do not understand. -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. Fine feathers make fine birds. signature.asc Description: OpenPGP digital signature
Re: Weather forecast through applet not available in Europe?
John Jason Jordan wrote: > On Fri, 12 Mar 2010 07:54:37 + > Terence dijo: > > >> On 11 March 2010 23:41, Ron Johnson wrote: >> >>> (Let's get this back on the list!) >>> >> If you want weather forecasts (in Europe or anywhere else) try: >> >> http://www.accuweather.com >> >> These people give an excellent services and forecasts geared to your >> local address and postal code. >> For sure, but can it be integrated to my applet? That is the problem. > > The main problem is that weather was invented by the English, and is > therefore found only in England and her colonies. The rest of the world > lacks weather, with the exception of Poland. In Poland it was only > recently initiated. God help the Polish, as they must now forevermore > be slaves to constantly checking forecasts lest a drop of rain fall on > them. The rest of the world has wisely avoided implementing weather. > > > But why are people so reluctant to implement it? It is not as if it were unuseful! -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. signature.asc Description: OpenPGP digital signature
Re: Weather forecast through applet not available in Europe?
Ron Johnson wrote: > On 2010-03-12 01:54, Terence wrote: >> On 11 March 2010 23:41, Ron Johnson wrote: >>> (Let's get this back on the list!) >> >> If you want weather forecasts (in Europe or anywhere else) try: >> >> http://www.accuweather.com >> >> These people give an excellent services and forecasts geared to your >> local address and postal code. >> >> Their accuracy of forecasting for me in the UK (near Dartmoor, in >> Devonshire) is first-class, usually to within a degree centigrade, and >> is far more useful than the Met Office offering. >> >> This may not suit you, but I fully recommend it. >> > > The extraordinarily useful FF addon Forecastfox uses Accuweather. > Yeah, but it is FF, not directly in the taskbar! -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. Instruction ends in the schoolroom, but education ends only with life. (F. W. Robertson) signature.asc Description: OpenPGP digital signature
Re: Weather forecast through applet not available in Europe?
Camaleón wrote: > On Fri, 12 Mar 2010 00:06:21 +0100, Stuckey wrote: > > >>>> Works fine in Poland. >>>> >>>> >>>> >>> Nice to hear this. I do not even have the `Forecast' tab in my applet! >>> > > >> I don't either, but I would like to. Does anyone know how to get it? >> > > You have to "right-click" on the applet and select "Details" to display > further information whether available. > > For Provo, indeed, there is expanded information. > That is what I precisely do, but it `only' shows me City, Last update, Condition, Sky, Temperature, Feels like, Dew point, Relative humidity, Wind, Pressure, Visibility, Sunrise, Sunset. This stuff is displayed in `Current conditions', which is one of the two available tabs. The second tab is `Radar map', which gives nothing but a link `Visit Weather.com.' -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. signature.asc Description: OpenPGP digital signature
Re: Weather forecast through applet not available in Europe?
Ron Johnson wrote: > On 2010-03-12 05:01, Merciadri Luca wrote: >> Ron Johnson wrote: > [snip] >>>> >>> For what town/city? Does www.weather.com show the forecast? >>> >> For sure. Simply visit >> http://www.weather.com/weather/today/Liege+Belgium+BEXX0011?lswe=liege&from=searchbox_localwx >> >> . I do not understand. >> > > It's obvious, really: God hates The-Place-Which-Must-Not-Be-Named, so > the GNOME programmers block all things related to You-Know-Where. > Excellent. -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. signature.asc Description: OpenPGP digital signature
PDF is blocked for printing, etc. OK for acroread (it behaves as expected), but KPDF allows me to print it, even if it is protected! Why?
Hi, I have written a PDF that I have blocked for printing, etc. Acrobat Reader won't print it, because of the restrictions defined on the PDF file's content. However, KPDF accepts printing it, and extracting content from it, etc., even if these actions are unauthorized with acroread. Is it normal? Thanks. -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. Don't try to teach a pig to sing. It doesn't work, and you'll annoy the pig. signature.asc Description: OpenPGP digital signature
Light automatically and randomly reduces some secs. after it has been set to its maximum level
Hi, As stated in the title, the light on my Asus EEE 1000HE automatically and randomly reduces some seconds after I have set it to its maximum level. Why? That must be for some energy reason, but I would like to deactivate this feature, or at least to modify the timer between the action I do, and the using of the default value. Thanks, -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. It is possible to be born an aristocrat without ever becoming a gentleman. (Nicholas Ridley) signature.asc Description: OpenPGP digital signature
Re: PDF is blocked for printing, etc. OK for acroread (it behaves as expected), but KPDF allows me to print it, even if it is protected! Why?
Neil Williams wrote: > On Mon, 19 Apr 2010 15:31:30 +0200 > Merciadri Luca wrote: > > > > Anti-features like locking and password protection are not supported > and, if implemented, could make the free software tools appear non-free > by restricting the functionality available to the user. In this case, > the needs of the user outweigh the restrictive tendencies of the writer > of the original format. There are no other formats in Debian (AFAICT) > which try to prevent only some documents of that format from being > printed. Removal or ignoring the addition of code to support such > restrictions is a feature in free software IMHO. All PDF's should be > printable by free software. > > Thanks. I can understand this point of view, but, sometimes, such anti-features can be activated for safety reasons. This is the first time I have to do it, but it was necessary, at least until friday. Thanks, -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. You'll always miss 100% of the shots you don't take. signature.asc Description: OpenPGP digital signature
Re: PDF is blocked for printing, etc. OK for acroread (it behaves as expected), but KPDF allows me to print it, even if it is protected! Why?
I Rattan wrote: > > > On Mon, 19 Apr 2010, Merciadri Luca wrote: > > yes. Thanks. I assume that this is for the same reason as Mr. Williams pointed out. Are _all_ the free PDF viewers running under Debian in accordance with this principle? -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. As soon as a man is born, he begins to die. signature.asc Description: OpenPGP digital signature
Re: PDF is blocked for printing, etc. OK for acroread (it behaves as expected), but KPDF allows me to print it, even if it is protected! Why?
Sjoerd Hardeman wrote: > Pdf "anti-features" are fake security. Don't trust on them, never. And what do you suggest if one wants some real protection _and_ the benefits of a format like PDF? Thanks. -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. A good laugh is sunshine in a house. (William Thackery) signature.asc Description: OpenPGP digital signature
Re: PDF is blocked for printing, etc. OK for acroread (it behaves as expected), but KPDF allows me to print it, even if it is protected! Why?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sven Arvidsson writes: > On Mon, 2010-04-19 at 15:52 +0200, Merciadri Luca wrote: >> Thanks. I assume that this is for the same reason as Mr. Williams >> pointed out. Are _all_ the free PDF viewers running under Debian in >> accordance with this principle? > > At least Evince can be convinced to provide this "feature", if you > toggle /apps/evince/override_restrictions Thanks for pointing this out. - -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ - -- Remember. If something can go wrong, it will. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/> iEYEARECAAYFAkvMwUgACgkQM0LLzLt8Mhy7EgCfS1LAUB1RO6r/t6/EgH0HnwQn mKAAniLfhthHQqXp2HhgIbA2JrEYNpOg =58t0 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/87d3xv186v@merciadriluca-eee.workgroup
Re: PDF is blocked for printing, etc. OK for acroread (it behaves as expected), but KPDF allows me to print it, even if it is protected! Why?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sorry, my last message was actually rejected by the moderation robot (if this is a robot). Vincent Danjean writes: > On 19/04/2010 17:32, Merciadri Luca wrote: >> Sjoerd Hardeman wrote: >>> Pdf "anti-features" are fake security. Don't trust on them, never. >> And what do you suggest if one wants some real protection _and_ the >> benefits of a format like PDF? Thanks. > > If you have free software (ie software you have the sources and are able > to recompile) and if you can get the information on the screen, then it is > only a matter of programmation to be able to have it on printer. So, > free software readers that forbid printing can be (more or less) easily > circumvented (and the patch to do this will be done and available on > internet). So why would the authors of such readers want to program this > at first time. > > If you want to avoid printing, you need to fully control the whole chain > (ie TPA, ...) AND the terminals (ie, if you can show it on screen, some > classic 'print-screen-to-file' and graphical software can be used to > print the document, or even camera and image post-processing). > > For now, the only domain where such restrictions works partially are > HD-DVD (and its possible it is already broken). This is possible because > it is expensive to acquire good quality video data (ie recording what > is diffused by a secure HD player on screen by a camera will have > no really good quality). This would not work for audio data (at least, > until the decoder is not embedded into brain ;-) ) because it would > be easy to reacquire good quality data from a line-out. / > > So, what would be the use case to allow a someone to read the information > but not print it ? In any case, printing it would be more or less convenient > but it will always be possible if it is displayed on screen (even > with Acrobat Reader) As I explained before (or in the same thread in linux.debian.user), this is more a management (i.e. human) problem than a technical problem. It sometimes happens that you want to show something but without giving the others the possibility to do what they want with what you show them. I here suppose that the `others' are quite beginners. - -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ - -- If you fake it, you can't make it. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/> iEYEARECAAYFAkvMwggACgkQM0LLzLt8MhxBxQCfR6BBvGFPzKDpu81yTxoJfyt/ 2okAn11ouCFzaJeEReibHIyOGHGzUc71 =jOZX -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/874oj7181j@merciadriluca-eee.workgroup
Re: PDF is blocked for printing, etc. OK for acroread (it behaves as expected), but KPDF allows me to print it, even if it is protected! Why?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bernd Eckenfels writes: > In article <4bcc77a3.9080...@student.ulg.ac.be> you wrote: >> And what do you suggest if one wants some real protection _and_ the >> benefits of a format like PDF? Thanks. > > It is simply not possible to publish something and protect it. The best > protection in that case is reputation. Well said. But if the examinator does not know you very well, it might be difficult. And this is the case, actually. - -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ - -- If you don't buy a ticket, you can't win the raffle. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/> iEYEARECAAYFAkvMwXMACgkQM0LLzLt8MhxCKwCdGNMnXbC+O/eRXL/3ellm4kla UTwAn3d0Rjx6JbFSCWaY5HBD+IJTfBGC =AgPi -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/878w8j185n@merciadriluca-eee.workgroup
Re: D-Link's Shareport USB Utility and openwebnet
Merciadri Luca wrote: > Hi, > > In October 2009, I posted an article about D-Link's Shareport USB > Utility (see e.g. > http://www.mail-archive.com/debian-u...@lists.debian.org/msg557390.html) > to linux.debian.user. Do you remember? I posted to > http://ubuntuforums.org/showthread.php?p=9513066#post9513066 too. > > I've tried analyzing packets with Wireshark, under Windows, to find how > my D-Link DIR-635 actually communicates with the computer to share some > USB peripheral through the network, thanks to the SharePort utility > (which is only available under Windows). This did bring much info, and, > as a result, I can reasonably assume that OpenWebNet is the related > router's Shareport counterpart. Here are some traces: > > * router->computer: openwebnet (20005) > tr-rsrb-port [ACK] (1996) > * router->computer: openwebnet (20005) > tr-rsrb-port [PSH, ACK] (1996) > * computer->router: tr-rsrb-port (1996) > openwebnet [PSH, ACK] (20005) > > That is, D-Link's SharePort utility apparently uses the openwebnet > protocol. Do you have any idea about how it could use it? I checked the > syntax, but I can't understand the link with the USB peripherals. > > Thanks. > > -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. To be happy with a man you must understand him a lot and love him a little. To be happy with a woman you must love her a lot and not try to understand her at all. (Helen Rowland) signature.asc Description: OpenPGP digital signature
