Re: Installing Debian inside Windows 7 utilizing VirtualBox

2013-11-23 Thread Scott Ferguson
On 24/11/13 01:52, Wally Lepore wrote: > Hi Members, > > I would like to run Debian and test new software packages utilizing > Debian as a virtual environment. inside my Windows 7 OS. I would like to > be able to install Debian in this fashion and have the ability to > utilize a Debian GUI desktop

Re: about MS email retrieve

2013-11-23 Thread lina
> What I do at work is use davmail (http://davmail.sourceforge.net). There > is a debian package, and is needs that java is installed. I have JDK and JRE installed, just a bit hesitated to switch to davmail since I have been using icedove from beginning and it has been really long already. > >

Totem in stable cannot play any type of video, need your help.

2013-11-23 Thread Bo Lan
Hello everybody, This is my first mail here. I am debian stable user. My Totem cannot play any type of video, included free format such as webm, ogg, and mkv. When I open any video, it says, "An error occurred: Could not determine type of stream." Need your help. Bo -- To UNSUBSCRIBE, email to

Setting up wordpress on wheezy using the debian packages?

2013-11-23 Thread Rick Thomas
Can someone point me at step-by-step instructions for going from sudo aptitude install wordpress on a freshly scrubbed, newly installed Wheezy system to a working wordpress website on the same machine? I've read the README.Debian in /usr/share/doc/wordpress/ and the stuff in examples/ b

Re: MIT discovered issue with gcc

2013-11-23 Thread Paul Wise
On Sun, Nov 24, 2013 at 3:53 AM, Darius Jahandarie wrote: > Although Debian *developers* can't find and fix all upstream bugs, the > Debian project, as the funnel between code and users, provides an > interesting location to perform this sort of automated static analysis > on all source code flowi

I have a new toshiba laptop with intel core i7 processor

2013-11-23 Thread GioPims
I have a new toshiba laptop with intel core i7 processor and I’ve already had installed, but when the system reboots I get this [1511.659335] generic- usb 0003:0457: 1037.009a: usb*submit*urb (ctrl) failed and if I disable the usb 3.0 I get this port 4 hub 2-1:1.0 disable by hub (eMI?), re-enabling

Re: MIT discovered issue with gcc

2013-11-23 Thread Joel Rees
On Sun, Nov 24, 2013 at 6:23 AM, Stan Hoeppner wrote: > On 11/22/2013 7:34 PM, Andrew McGlashan wrote: > >> http://www.securitycurrent.com/en/research/ac_research/mot-researchers-uncover-security-flaws-in-c > > "the team ran Stack against the Debian Linux archive, of which 8575 out > of 17432 pack

Re: MIT discovered issue with gcc

2013-11-23 Thread Joel Rees
On Sun, Nov 24, 2013 at 12:18 AM, Robert Baron wrote: > Second question: > > Doesn't memcpy allow for overlapping memory, but strcpy does not? Isn't > this why memcpy is preferred over strcpy? >[...] The reason memcpy() is preferred over strcpy() is the same as the reason strncpy() is preferred

Re: MIT discovered issue with gcc

2013-11-23 Thread Joel Rees
[Not sure this really needs to be cc-ed to security@] On Sun, Nov 24, 2013 at 12:09 AM, Robert Baron wrote: > Aren't many of the constructs used as examples in the paper are commonly > used in c programming. For example it is very common to see a function that > has a pointer as a parameter def

Re: MIT discovered issue with gcc

2013-11-23 Thread Neal Murphy
On Saturday, November 23, 2013 04:23:05 PM Stan Hoeppner wrote: > I didn't read the full paper yet, but I'm wondering how/if the > optimization flag plays a part in this. I.e. does "O2" produce these > bugs but "OO" (default) or "Og" (debugging) does not? Or -O3... -- To UNSUBSCRIBE, email to

Re: MIT discovered issue with gcc

2013-11-23 Thread Stan Hoeppner
On 11/22/2013 7:34 PM, Andrew McGlashan wrote: > http://www.securitycurrent.com/en/research/ac_research/mot-researchers-uncover-security-flaws-in-c "the team ran Stack against the Debian Linux archive, of which 8575 out of 17432 packages contained C/C++ code. For a whopping 3471 packages, STACK

Re: about MS email retrieve

2013-11-23 Thread Joe
On Sat, 23 Nov 2013 20:08:31 +0200 Lars Noodén wrote: > On 11/23/2013 06:41 PM, Joe wrote: > > has to live with it as there are no MS alternatives. > > Not quite. Citadel and Kolab offer the same functionality, but in a > more secure, modular architecture. Recently OpenChange is a > transparen

Re: MIT discovered issue with gcc

2013-11-23 Thread Darius Jahandarie
On Sat, Nov 23, 2013 at 1:16 PM, Mark Haase wrote: > Anyway, I don't see what this has to do with Debian. It's an interesting > paper, but Debian can't find and fix all upstream bugs, nor do I think most > users would be happy if suddenly everything was compiled without any > optimizations. Altho

Re: autostart for users

2013-11-23 Thread Ralf Mardorf
On Sat, 2013-11-23 at 21:04 +0200, Andrei POPESCU wrote: > On Jo, 21 nov 13, 12:15:57, Florian Lindner wrote: > > Hello, > > > > I want to give users the possbility to autostart programms on boot. > > My first idea would be to put a line like that in /etc/rc.local > > Not on boot, but on login (i

Question about bogofilter -R

2013-11-23 Thread
I'm trying to understand Bogofilter better. I have been using it with so-so success for about a year, but always by copy-and-paste of other people's scripts from the internet. Now I'm attempting to read the doc.s and understand. But --- it's rather slow going: In 'man bogofilter', under CLASSIF

Re: Circular initscript dependency prevents use of aptitude on wheezy

2013-11-23 Thread Andrei POPESCU
On Jo, 21 nov 13, 15:22:39, Hendrik Boom wrote: > Somehow, I seem to have a circular initscript dependency. > It seems to be complaining about the package mediatomb; furthemore, the > problem first appeared shortly after I installed mediatomb. > I tried uninstalling mediatomb, but it gets nowhere,

Re: autostart for users

2013-11-23 Thread Andrei POPESCU
On Jo, 21 nov 13, 12:15:57, Florian Lindner wrote: > Hello, > > I want to give users the possbility to autostart programms on boot. > My first idea would be to put a line like that in /etc/rc.local Not on boot, but on login (into an XDG compliant WM/DE): $HOME/.config/autostart/ Most DEs have G

Re: Installing Debian inside Windows 7 utilizing VirtualBox

2013-11-23 Thread Patrick Bartek
On Sat, 23 Nov 2013, Wally Lepore wrote: > Hi Members, > > I would like to run Debian and test new software packages utilizing > Debian as a virtual environment. inside my Windows 7 OS. I would like > to be able to install Debian in this fashion and have the ability to > utilize a Debian GUI desk

Re: MIT discovered issue with gcc

2013-11-23 Thread Mark Haase
The researchers' point was that an attacker might be able to remap that memory page so that dereferencing a null pointer would NOT segfault. (I don't actually know how feasible this is; I'm just paraphrasing their argument. They footnote this claim but I didn't bother to read the cited sources.)

RE: Installing Debian inside Windows 7 utilizing VirtualBox

2013-11-23 Thread Stephen P. Molnar
From: Wally Lepore [mailto:wallylep...@gmail.com] Sent: Saturday, November 23, 2013 9:52 AM To: debian-user@lists.debian.org Subject: Installing Debian inside Windows 7 utilizing VirtualBox Hi Members, I would like to run Debian and test new software packages utilizing Debian as a vi

Re: Installing Debian inside Windows 7 utilizing VirtualBox

2013-11-23 Thread Scott Ferguson
On 24/11/13 01:52, Wally Lepore wrote: > Hi Members, > > I would like to run Debian and test new software packages utilizing > Debian as a virtual environment. inside my Windows 7 OS. I would like to > be able to install Debian in this fashion and have the ability to > utilize a Debian GUI desktop

Re: about MS email retrieve

2013-11-23 Thread Lars Noodén
On 11/23/2013 06:41 PM, Joe wrote: > has to live with it as there are no MS alternatives. Not quite. Citadel and Kolab offer the same functionality, but in a more secure, modular architecture. Recently OpenChange is a transparent replacement: http://www.zentyal.org/2013/10/zentyal-laun

Re: about MS email retrieve

2013-11-23 Thread Joe
On Sat, 23 Nov 2013 23:22:42 +0800 lina wrote: > Hi, > > My work email is Microsoft exchange one. It seems that the Microsoft > exchange can be accessed either via outlook or webpage. > > I use icedove, currently has the ExQuilla plugin to retrieve email, > but seems ExQuilla going to expire. >

Re: MIT discovered issue with gcc

2013-11-23 Thread Michael Tautschnig
[...] > Isn't it interesting that their one example will potentially dereference > the null pointer even before compiler optimizations (from the paper): > > struct tun_struct *tun=; > struct sock *sk = tun->sk; > if(*tun) return POLLERR; > > The check to see that tun is non-null should occur

Re: about MS email retrieve

2013-11-23 Thread Erwan David
Le 23/11/2013 16:22, lina a écrit : > Hi, > > My work email is Microsoft exchange one. It seems that the Microsoft > exchange can be accessed either via outlook or webpage. > > I use icedove, currently has the ExQuilla plugin to retrieve email, but > seems ExQuilla going to expire. > > So I wonder,

Re: MIT discovered issue with gcc

2013-11-23 Thread Oliver Schneider
On 2013-11-23 15:18, Robert Baron wrote: > Second question: > > Doesn't memcpy allow for overlapping memory, but strcpy does not? Isn't > this why memcpy is preferred over strcpy? IIRC memcpy does not, but memmove does. See: http://linux.die.net/man/3/memcpy -- To UNSUBSCRIBE, email to debia

about MS email retrieve

2013-11-23 Thread lina
Hi, My work email is Microsoft exchange one. It seems that the Microsoft exchange can be accessed either via outlook or webpage. I use icedove, currently has the ExQuilla plugin to retrieve email, but seems ExQuilla going to expire. So I wonder, how can I retrieve this email? what is interestin

Re: MIT discovered issue with gcc

2013-11-23 Thread Robert Baron
Second question: Doesn't memcpy allow for overlapping memory, but strcpy does not? Isn't this why memcpy is preferred over strcpy? On Sat, Nov 23, 2013 at 10:09 AM, Robert Baron < robertbartlettba...@gmail.com> wrote: > Aren't many of the constructs used as examples in the paper are commonly

Re: Script to tell if Qpopper is running.

2013-11-23 Thread Glenn English
On Nov 23, 2013, at 1:43 AM, Account for Debian group mail wrote: > "monit" looks like it might work! Monit runs here. It does restart stuff, among a lot of other cool things... -- Glenn English Disclaimer: Any disclaimer attached to this message may be ignored. smime.p7s Description:

Re: MIT discovered issue with gcc

2013-11-23 Thread Robert Baron
Aren't many of the constructs used as examples in the paper are commonly used in c programming. For example it is very common to see a function that has a pointer as a parameter defined as: int func(void *ptr) { if(!ptr) return SOME_ERROR; /* rest of function*/ return 1; } I

beaglebone black lxde hdmi problem

2013-11-23 Thread Andre Marschalek
dear folks, installed debian wheezy 7.2 (http://rcn-ee.net/deb/rootfs/wheezy/) and additional lxde on a beaglebone black which works everytime as expected as long as i connect a pc monitor with a hdmi to dvi adapter to beaglebone's hdmi port but if i connect the hdmi port to my full hd tv my tv r

Installing Debian inside Windows 7 utilizing VirtualBox

2013-11-23 Thread Wally Lepore
Hi Members, I would like to run Debian and test new software packages utilizing Debian as a virtual environment. inside my Windows 7 OS. I would like to be able to install Debian in this fashion and have the ability to utilize a Debian GUI desktop as well. Question #1 please: Would kindly like to

Re: MIT discovered issue with gcc

2013-11-23 Thread Joel Rees
Deja gnu? On Sat, Nov 23, 2013 at 10:34 AM, Andrew McGlashan wrote: > Hi, > > The following link shows the issue in a nutshell: > > http://www.securitycurrent.com/en/research/ac_research/mot-researchers-uncover-security-flaws-in-c > > [it refers to the PDF that I mentioned] > > -- > Kind Regards

Re: MIT discovered issue with gcc

2013-11-23 Thread Brad Alexander
On Sat, Nov 23, 2013 at 6:18 AM, Michael Tautschnig wrote: > > > > > This looks very serious indeed, but a quick search of Debian mailing > > lists didn't show anything being acknowledged for this issue should > > Debian users be concerned? > > > > Probably not more than before, but as much a

php 5.2 on debian wheezy

2013-11-23 Thread Roland RoLaNd
All, An application we're using is in need for php5.2 and we lack the time to make it work with the latest version. google search shows a lot of 5.3 to 5.2 downgrade for squeeze but not for wheezy naturally. May i ask if anyone has done so recently, and if you could provide a how to? Thanks

Re: MIT discovered issue with gcc

2013-11-23 Thread Michael Tautschnig
Hi Andrew, hi all, > I understand that Debian has a bunch of vulnerabilities as described in > the following PDF. > > http://pdos.csail.mit.edu/~xi/papers/stack-sosp13.pdf > > Just a small quote: > > "This paper presents the first systematic approach for > reasoning about and detecting unstable

Re: Script to tell if Qpopper is running.

2013-11-23 Thread Account for Debian group mail
Pol, Thanks for the hint... "mon" just alerts you, I have a program that does that already BUT "monit" looks like it might work! Again, thanks! Ken On Sat, 23 Nov 2013, Pol Hallen wrote: Has anyone written a script that will run under a cron job that checks to make sure that the pop3 s