cannot access incoming yahoo from evolution
by Ron
When I attempt to login to receive my email from yahoo.com the password is not recognized. If I login from the yahoo web page with the same password i am able to retreve my incoming messages. I am using Server (pop.mail.yahoo.com) Port 110. I have encryption turned off. The Authentication is set to password. I was able to to send yahoo email from evolution.
Thank you
rcherico
10 years, 8 months
Another amusing bug
by Tom Horsley
The mei kernel module has been killing folks for a long time
now, and they can't seem to fix it:
https://bugzilla.redhat.com/show_bug.cgi?id=917081
Meanwhile, I still can't find out what the heck the
mei module is actually good for.
All the doc files and web pages are filled to the brim
with words that are concatenated together into correctly
formed sentences, yet somehow manage to convey no
actual information :-).
Given that, I've had to develop my own theory:
The mei module is actually the primary back door
for the NSA to access linux systems. Why else would
they go to so much trouble to generate so much obfuscated
non-documentation for it?
This theory seems to make far more sense than any of
the web pages that talk about mei. (And "mei" and
"nsa" are both 3 characters long - highly suspicious :-).
10 years, 8 months
Something weird... some passwords gone
by linuxnutster@videotron.ca
I've suddenly had to retype a bunch of passwords, including banking
passwords, in firefox and thunderbird. I had selinux disabled on my PC
and notebook and reactivated it. The strange thing is that thunderbird
did not lose all of my email passwords, only one. The same on my PC. I
am being requested to re-enter passwords for my ISP login and banking,
but not supplier websites. None of this happened on my notebook, only on
my PC.
Would this weirdness be selinux reactivation related, update related, or
something more nefarious? I don't have enough experience with Linux
security to understand what may have happened. Any input would be
appreciated...
10 years, 8 months
Re: Fedora/Redhat and perfect forward secrecy
by Reindl Harald
Am 26.08.2013 16:24, schrieb Chuck Anderson:
> On Mon, Aug 26, 2013 at 11:17:52AM +0200, Reindl Harald wrote:
>> cause and effect
>> because Fedora does *not* support Ciphers without large performance impacts
>>
>> in reality without ECDHE you have no way
>> go to https://www.ssllabs.com/ssltest/ and look at the client-handshakes
>> practically no client is using PFS without ECDHE
>>
>> that's the truth if it comes to PFS and Redhat/Fedora
>> http://www.internetstaff.com/roller/blog/entry/enable_elliptical_curve_di...
>
> Not Found
>
> The requested URL /roller/blog/entry/enable_elliptical_curve_diffie_hellman was not found on this server.
>
>> http://www.theverge.com/2013/6/26/4468050/facebook-follows-google-with-to...
and how can i quote from the URL?
http://www.internetstaff.com/roller/blog/entry/enable_elliptical_curve_di...
« OpenSwan VPN between... | Main
20130721 Sunday July 21, 2013
Enable Elliptical Curve Diffie-Hellman (ECDHE) in Fedora or Amazon Linux
With all the recent publicity regarding Internet spying, there has been a renewed interest in security and
encryption. One oft-neglected feature of SSL is the ability to use a cipher with Diffie-Hellman key exchange that
enables so-called perfect forward secrecy. The advantage of PFS is that even if your private key is compromised,
recorded past traffic cannot be decrypted.
The problem is that Diffie-Hellman algorithms are very slow. This can be offset to a large degree by using
Elliptical Curve Diffie-Hellman (ECDHE). The problem for Red Hat / CentOS / Fedora users is that Red Hat
intentionally disables ECDHE ciphers (among others) because they're unsure of the patent issues surrounding them.
Fixing this requires a custom compilation of OpenSSL. Luckily, it is readily accomplished using the Fedora source
RPM and does not require rolling your own binaries from scratch. In addition, you must recompile applications
such as Apache's mod_ssl after installing the new OpenSSL packages.
Here's how we enable ECDHE ciphers in Apache on a Fedora or Amazon Linux server:
Download and install the openssl and httpd source RPMs.
Download the official openssl-1.0.1e.tar.gz source package into /root/rpmbuild/SOURCES.
Apply the patch below to /root/rpmbuild/SPECS/openssl.spec
rpmbuild -bb openssl.spec
Install the openssl-libs, and openssl-devel RPMs in /root/rpmbuild/RPMS/arch
rpmbuild -bb httpd.spec
Install the mod_ssl RPM in /root/rpmbuild/RPMS/arch
Edit your Apache config to prefer ECDHE ciphers
Restart Apache
Test your Apache installation with Qualys' SSL Labs to verify your settings
10 years, 8 months
Fedup upgrade from F17
by J. R. Westmoreland
Good morning
I have a f17 x64 system that I want to upgrade to the latest Fedora. I found
information indicating that I should use fedup. I have read further and
gotten conflicting reports and suggestions. The project documentation says
to use this method but user reports say it doesn't work. Could I get some
clarification on this subject?
Can I actually use fedup to go to f19 from f17? Do I have to do an upgrade
through f18? Is there a good "how to", step-by-step, on the subject for this
scenario?
Thanks for an awesome package.
J. R.
10 years, 8 months
Re: Fedora/Redhat and perfect forward secrecy
by Reindl Harald
Am 26.08.2013 13:26, schrieb Jan-Frode Myklebust:
> On Mon, Aug 26, 2013 at 11:07:29AM +0200, Florian Weimer wrote:
>> On 08/24/2013 11:38 AM, Reindl Harald wrote:
>>> https://bugzilla.redhat.com/show_bug.cgi?id=319901
>>>
>>> looks like Redhat based systems are the only remaining
>>> which does not support EECDHE which is a shame these
>>> days in context of PRISM and more and more Ciphers
>>> are going to be unuseable (BEAST/CRIME weakness)
>>
>> Current Fedora supports perfect forward secrecy just fine.
>
> Just fine -- assuming one ignores the 4-5x performance penalty of DH (vs.
> non-PFS/ECDHE), and also ignore IE and Safari as clients?
in fact Safari is nearly the *one and only* client using PFS on a
Fedora Server - expect you configure ciphers in a way BEAST attack
becomes a vector and you are failing *any* security audit because
of this
besides this *you are unable* to use FPS if you connect to
Google/Facebook with your webbrowser as well for SMTP-STARTTLS
because they use ECDHE and *not* DHE
so in the real world saying "Fedora supports perfect forward secrecy just fine"
is somehow clueless even if someone is now saying that i am unpolite again but
that is the truth and whoever states that this is not true has to prove it
https://www.ssllabs.com/ssltest/
i wasted *6 hours* of my lifetime coming to the result it is not possible with Fedora
_________________________________________________________
actually these clients are the only using DHE and without FF/MSIE/Opera
you can say practiacally *nobody* is using it
Chrome 29 / Win 7 TLS 1.2 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b) FS
OpenSSL 1.0.1e TLS 1.2 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f) FS
Safari 6 / iOS 6.0.1 TLS 1.2 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b) FS
Safari 7 / OS X 10.9 TLS 1.2 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b) FS
_________________________________________________________
Handshake Simulation
Chrome 29 / Win 7 TLS 1.2 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b) FS 256
Firefox 10.0.12 ESR / Win 7 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
Firefox 17.0.7 ESR / Win 7 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
Firefox 21 / Fedora 19 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
Firefox 22 / Win 7 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
IE 6 / XP No FS * Fail**
IE 7 / Vista TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
IE 8 / XP No FS * TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
IE 8-10 / Win 7 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
IE 11 / Win 8.1 TLS 1.2 TLS_RSA_WITH_AES_256_CBC_SHA (0x35) No FS 256
Java 6u45 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
Java 7u25 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
OpenSSL 0.9.8y TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
OpenSSL 1.0.1e TLS 1.2 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f) FS 256
Opera 12.15 / Win 7 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
Opera 15 / Win 7 TLS 1.1 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
Safari 5.1.9 / OS X 10.6.8 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
Safari 6 / iOS 6.0.1 TLS 1.2 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b) FS 256
Safari 6.0.4 / OS X 10.8.4 TLS 1.0 SSL_RSA_WITH_RC4_128_SHA (0x5) No FS 128
Safari 7 / OS X 10.9 TLS 1.2 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b) FS
10 years, 8 months
Video is slow
by Roger
I'm using Fedora 19 with the standard Nouveau video driver.
I've noticed that when re positioning gui windows with mouse, movement
is increasingly glunky, jerking in 5-10mm steps in any direction. When
dragging a border of a gui window the mouse moves to almost 100 mm
before edge of the window moves.
I usually have the /home/rails-projects/project directory open, Geany, a
terminal or two and a browser, opera, firefox or chrome. Geany may have
several files open simultaneously.
CPUs run at about 60%. memory, 2gig runs at about 55-80% depending on
what's running. Swap is at nil.
Have a 2 gig Geforce GT8600 video card which is very goo d at 3d Blender
stuff.
I swapped over to Ubuntu 13.04 which uses the Nvidia driver and there
is no problem at all with movement no mater how many gui windows are
open and operating. Ubuntu is so slow to open I hesitate to use it.
Mind you, lately Fedora 19 is taking sometimes over60 seconds to open.
Is there any fix for the Fedora 19 Nouveau jerky movement?
TIA
Roger
10 years, 8 months