|
|
(how does one go about finding interent addresses without knowing the suffix? I've seen a lot of people telnetting into Grex from various places, and I'd like to check some of them out, but the "who" command cuts off the last few characters, leaving me with only a partial internet address. Help!)
14 responses total.
Sometimes you can guess at them. Otherwise, look at /var/log/tcplog, which has the full version of the address.
(the file mentioned above is currently unreadable. What I mean is that I get a "Permission denied" message when I try to put it through pager. Is this a temporary problem? I've found the file very useful for finding complete internet addresses.)
No, it's not a temporary problem. The logfiles in /var/log can have sensitive or private information in them, and it was judged a security hole to leave them publically readable. I'll have to think about whether tcplog specifically is one that we can leave available, but we have no immediate plans to make them available again.
Um, I didn't see that decision mentioned anywhere before (maybe I missed it). Is there a policy about posting such system changes (assuming nothing will be "given away" in terms of security)? Is there an item (in coop, maybe) where such "log entries" are kept? Should there be such an item (non-discussion, maybe)?
There is an item in the Staff Conference, "What I did today", where stuff like that gets entered. But only staff and Board has access to the Staff conference.
<sigh> (since I'm still looking to find complete internet addresses, is there another direction I can be pointed? For example, is there a gopher or web host that can make address searches based on the beginning of a name rather than working one's way from the end?)
The reason it wasn't announced before hand is because the decision went more or less along the lines of, "Oh, shit, I just realized that people's passwords are in this logfile. <chmod 640 logfile>"
So, basically, there's no policy about posting system changes, nor any publicly accessible place to find out about them... I'm asking if this should change...
(actually, some of the system changes have been announced in the Agora announcements item. Probably the biggest obstacle to staff reporting is MANPOWER.)
my guess would be to mail the person who was telnetting there and ask them what the address was- If it's something they don't want you to know (I wouldn't knowwhy) I'm sure they would tell you.
re #7 - I would support the reaction indicated in #7 as being sufficiently time-sensitive so as to preclude the necessity for much discussion.
But not sitting on it for too long. Can there be a separation so that passwds aren't retrievable?
This response has been erased.
Response not possible - You must register and login before posting.
|
|
- Backtalk version 1.3.30 - Copyright 1996-2006, Jan Wolter and Steve Weiss