FOSS Asia
by Huiren Woo
Hi Fedoreans,
So anyone of you available for FOSS Asia this year? If there's sufficient
people available who can attend FOSS Asia, we will be able to request for a
booth from Harish.
Thanks.
Best Regards,
Woo Huiren
https://woohuiren.me
8 years, 3 months
OpenSSH Client Bug CVE-2016-0777 and CVE-2016-0778
by Danishka Navin
The OpenSSH project today reported a client side issue affecting OpenSSH
versions 5.4 - 7.1. This issue could allow an SSH client to leak key
information, potentially exposing users to man-in-the-middle attacks.
What does this mean?
A key exchange is initiated when an SSH client connects to a server. A new
"roaming" feature included in the OpenSSH client can be exploited and a
malicious server could use this issue to leak client memory to the server,
including private client user keys.
Who is affected?
This issue affects the OpenSSH client (not server) on most modern operating
systems including Linux, FreeBSD and Mac OSX. This issue may also affect
users running OpenSSH for Windows but does not affect users using PuTTY on
Windows.
That means you don't have to update OpenSSH on your Droplet (the server
side), but you should update the OpenSSH client on your local computer. If
you want to cover all your bases, you could generate new key pairs and
upload the new public keys to your servers (see the second-to-last section
for details).
How to fix the isssue
While patches and updates are being rolled out for affected distributions,
the feature causing this security issue can be disabled manually in order
to resolve the issue. On OS X, Linux and BSD variants this can be done by
adding a line to your SSH configuration.
On Linux and FreeBSD
Run the following command to add the new line to your configuration:
echo 'UseRoaming no' | sudo tee -a /etc/ssh/ssh_config
On Mac OSX
Run the following command to add the new line to your configuration:
echo "UseRoaming no" >> ~/.ssh/config
--
Danishka Navin
http://danishkanavin.blogspot.com
http://twitter.com/danishkanavin
http://www.flickr.com/photos/danishkanavin/
8 years, 5 months
Upcoming events and things to settle
by Huiren Woo
Hello Fedora Ambassadors in SG,
There are some upcoming events and things that we will need to settle.
*IoT Hack @ SG*
As discussed during FAD 2015
<https://fedoraproject.org/wiki/FAD_Singapore_2015/Events>, we will be
organising a Hackathon in mid 2016 (early May). Your input with regards to
this event is appreciated: http://piratepad.net/RTbNFk93ZD
Timeline and date of this event needs to be finalised before 28 December.
*Update of APAC material list*
As mentioned 3 weeks back, the APAC material list has still not been
updated. For those who have any materials related to Fedora, please add
your items to the list so that Fedora APAC can keep track of these
materials: https://fedoraproject.org/wiki/Ambassadors/APAC/Materials Thanks.
*FOSSAsia*
Please mark your calendars and reserve these dates: March 18th - 20th 2016.
I might not be able to attend for the first day as I have school activities
on. Do let everyone know your availability to attend this event.
Thanks everyone and have a merry Christmas! :)
Best Regards,
Woo Huiren
https://woohuiren.me
8 years, 5 months
Slack Group
by Huiren Woo
Hi friends,
I've taken the initiative to create a Slack chat group [1]. Unfortunately,
Slack is a proprietary PaaS, but they do contribute some code to Github
[2].
The purpose of this Slack group is to engage with users of Fedora and get
users on-board to Linux. I believe that the chat group would be useful in
future as more and more people are using Slack as a communication tool [3]
and in my opinion, Slack is a pretty neat communication tool.
Do let me know what you guys think and if you guys want to join the group,
do let me know your fedora email address so I can add you in. If you've
never use Slack before, do drop me a personal email so that I can get you
started with it.
[1] https://fedora-sg.slack.com/
[2] https://github.com/slackhq
[3] http://www.businessinsider.sg/slack-growth-after-one-year-2015-2/
Best Regards,
Woo Huiren
https://woohuiren.me
8 years, 5 months