INFO-VAX Thu, 17 Jul 2008 Volume 2008 : Issue 396 Contents: Re: Another BIND vulnerability (cache poisoning) Re: Another BIND vulnerability (cache poisoning) c. 2008 Brian Schenkenberger. Re: c. 2008 Brian Schenkenberger. Re: c. 2008 Brian Schenkenberger. Re: c. 2008 Brian Schenkenberger. Re: c. 2008 Brian Schenkenberger. Re: c. 2008 Brian Schenkenberger. Re: c. 2008 Brian Schenkenberger. Re: c. 2008 Brian Schenkenberger. Re: c. 2008 Brian Schenkenberger. changed behavior of SUBMIT/USER Re: DCL divide by zero WAS: Symbol Substitution Mystery Re: DCL divide by zero WAS: Symbol Substitution Mystery Re: DCL divide by zero WAS: Symbol Substitution Mystery Re: Kaspersky's Remote Code Execution Through Intel CPU Bugs presentation Re: Kaspersky's Remote Code Execution Through Intel CPU Bugs presentation LTO3 drives on Alpha VMS Re: LTO3 drives on Alpha VMS Re: TCPIP smtp queue - how to change it? ---------------------------------------------------------------------- Date: 16 Jul 2008 17:55:43 GMT From: VAXman- @SendSpamHere.ORG Subject: Re: Another BIND vulnerability (cache poisoning) Message-ID: <487e361f$0$20904$607ed4bc@cv.net> In article , "Tom Linden" writes: >On Wed, 16 Jul 2008 02:02:51 -0700, winston19842005@yahoo.com > wrote: > >> It is sad that my DSL provider (AT&T) hasn't patched their servers >> yet! >> Hopefully, they will get their act together soon. > >Alan, how do you determine that? Tom, look back through this thread. Somebody posted the URL to a site that purports to test for the cache poisoning vulnerability. -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM ... pejorative statements of opinion are entitled to constitutional protection no matter how extreme, vituperous, or vigorously expressed they may be. (NJSC) c. 2008 Brian Schenkenberger. Any publication of _this_ usenet article outside of usenet _must_ include its contents in its entirety including this copyright notice, disclaimer and quotations. ------------------------------ Date: Wed, 16 Jul 2008 15:19:45 -0700 From: "Tom Linden" Subject: Re: Another BIND vulnerability (cache poisoning) Message-ID: On Wed, 16 Jul 2008 10:55:43 -0700, VAXman- <@SendSpamHere.ORG> wrote: > Tom, look back through this thread. Somebody posted the URL to a site > that purports to test for the cache poisoning vulnerability. Thanks, I looked at that, www.doxpara.com but it doesn't give you the ability to enter an IP. -- PL/I for OpenVMS www.kednos.com ------------------------------ Date: Wed, 16 Jul 2008 13:25:08 -0500 (CDT) From: sms@antinode.info (Steven M. Schweda) Subject: c. 2008 Brian Schenkenberger. Message-ID: <08071613250843_20200492@antinode.info> From: VAXman- @SendSpamHere.ORG > c. 2008 Brian Schenkenberger. [...] Around here, "c." is read as "circa". Perhaps things differ where you are, or perhaps you mean "around 2008", but it all seems to make even less sense this way. (Perhaps you should find more productive ways to occupy data storage space around the world. Just a thought.) ------------------------------------------------------------------------ Steven M. Schweda sms@antinode-info 382 South Warwick Street (+1) 651-699-9818 Saint Paul MN 55105-2547 ------------------------------ Date: Wed, 16 Jul 2008 14:48:43 -0400 From: "Richard B. Gilbert" Subject: Re: c. 2008 Brian Schenkenberger. Message-ID: Steven M. Schweda wrote: > From: VAXman- @SendSpamHere.ORG > >> c. 2008 Brian Schenkenberger. [...] > > Around here, "c." is read as "circa". Perhaps things differ where > you are, or perhaps you mean "around 2008", but it all seems to make > even less sense this way. (Perhaps you should find more productive ways > to occupy data storage space around the world. Just a thought.) > Either the word "Copyright" or the Circled C symbol together with the year is sufficient to claim copyright. A simple lowercase "c" is not legally sufficient. Copyright 2008, Richard B. Gilbert (The Thunderbird Mail Client will not allow me to paste the Copyright symbol into this message.) ------------------------------ Date: Wed, 16 Jul 2008 14:56:56 -0400 From: norm.raphael@metso.com Subject: Re: c. 2008 Brian Schenkenberger. Message-ID: This is a multipart message in MIME format. --=_alternative 0068169D85257488_= Content-Type: text/plain; charset="US-ASCII" "Richard B. Gilbert" wrote on 07/16/2008 02:48:43 PM: > Steven M. Schweda wrote: > > From: VAXman- @SendSpamHere.ORG > > > >> c. 2008 Brian Schenkenberger. [...] > > > > Around here, "c." is read as "circa". Perhaps things differ where > > you are, or perhaps you mean "around 2008", but it all seems to make > > even less sense this way. (Perhaps you should find more productive ways > > to occupy data storage space around the world. Just a thought.) > > > > Either the word "Copyright" or the Circled C symbol together with the > year is sufficient to claim copyright. A simple lowercase "c" is not > legally sufficient. > I have seen (c) where the symbol was not appropriate. [I could put it here, but the message would then become MIME instead of text.] > Copyright 2008, Richard B. Gilbert > > (The Thunderbird Mail Client will not allow me to paste the Copyright > symbol into this message.) --=_alternative 0068169D85257488_= Content-Type: text/html; charset="US-ASCII"



"Richard B. Gilbert" <rgilbert88@comcast.net> wrote on 07/16/2008 02:48:43 PM:

> Steven M. Schweda wrote:
> > From:   VAXman-  @SendSpamHere.ORG
> >
> >> c. 2008 Brian Schenkenberger. [...]
> >
> >    Around here, "c." is read as "circa".  Perhaps things differ where
> > you are, or perhaps you mean "around 2008", but it all seems to make
> > even less sense this way.  (Perhaps you should find more productive ways
> > to occupy data storage space around the world.  Just a thought.)
> >
>
> Either the word "Copyright" or the Circled C symbol together with the
> year is sufficient to claim copyright.  A simple lowercase "c" is not
> legally sufficient.
>


I have seen (c) where the symbol was not appropriate.  

[I could put it here, but the message would then become MIME instead of text.]

> Copyright 2008, Richard B. Gilbert
>
> (The Thunderbird Mail Client will not allow me to paste the Copyright
> symbol into this message.)
--=_alternative 0068169D85257488_=-- ------------------------------ Date: 16 Jul 2008 19:11:44 GMT From: VAXman- @SendSpamHere.ORG Subject: Re: c. 2008 Brian Schenkenberger. Message-ID: <487e47f0$0$5018$607ed4bc@cv.net> In article , "Richard B. Gilbert" writes: >Steven M. Schweda wrote: >> From: VAXman- @SendSpamHere.ORG >> >>> c. 2008 Brian Schenkenberger. [...] >> >> Around here, "c." is read as "circa". Perhaps things differ where >> you are, or perhaps you mean "around 2008", but it all seems to make >> even less sense this way. (Perhaps you should find more productive ways >> to occupy data storage space around the world. Just a thought.) >> > >Either the word "Copyright" or the Circled C symbol together with the >year is sufficient to claim copyright. A simple lowercase "c" is not >legally sufficient. > >Copyright 2008, Richard B. Gilbert > >(The Thunderbird Mail Client will not allow me to paste the Copyright >symbol into this message.) I meant to lookup the actual requirement in 17 USC 401 and I forgot to. Copr. is the legally accepted abbreviation. Corrected. -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM ... pejorative statements of opinion are entitled to constitutional protection no matter how extreme, vituperous, or vigorously expressed they may be. (NJSC) Copr. 2008 Brian Schenkenberger. Publication of _this_ usenet article outside of usenet _must_ include its contents in its entirety including this copyright notice, disclaimer and quotations. ------------------------------ Date: Wed, 16 Jul 2008 15:16:56 -0400 From: "Richard B. Gilbert" Subject: Re: c. 2008 Brian Schenkenberger. Message-ID: <_PudnbJOlrdH1OPVnZ2dnUVZ_qbinZ2d@comcast.com> norm.raphael@metso.com wrote: > > > > > "Richard B. Gilbert" wrote on 07/16/2008 > 02:48:43 PM: > > > Steven M. Schweda wrote: > > > From: VAXman- @SendSpamHere.ORG > > > > > >> c. 2008 Brian Schenkenberger. [...] > > > > > > Around here, "c." is read as "circa". Perhaps things differ where > > > you are, or perhaps you mean "around 2008", but it all seems to make > > > even less sense this way. (Perhaps you should find more productive > ways > > > to occupy data storage space around the world. Just a thought.) > > > > > > > Either the word "Copyright" or the Circled C symbol together with the > > year is sufficient to claim copyright. A simple lowercase "c" is not > > legally sufficient. > > > > I have seen (c) where the symbol was not appropriate. > > [I could put it here, but the message would then become MIME instead of > text.] If the message were MIME encoded, might we hope for a slightly larger type face? :-) AFAIK, (C) is NOT legally sufficient to claim copyright. Only the symbol or the word spelled out in full protect your rights under copyright law. ------------------------------ Date: Wed, 16 Jul 2008 15:34:44 -0400 From: JF Mezei Subject: Re: c. 2008 Brian Schenkenberger. Message-ID: <487e4d7c$0$1819$c3e8da3@news.astraweb.com> Richard B. Gilbert wrote: > (The Thunderbird Mail Client will not allow me to paste the Copyright > symbol into this message.) © This is thunderbird on a Mac. Also is it really necessary to have © 2008 when the "2008" is already included in the date of the message ? Why not just © . And to Mr Vaxman, I am repeating myself, but you should really require headers and contents be included in their entirety. ------------------------------ Date: Wed, 16 Jul 2008 16:41:11 -0400 From: "Richard B. Gilbert" Subject: Re: c. 2008 Brian Schenkenberger. Message-ID: JF Mezei wrote: > Richard B. Gilbert wrote: > >> (The Thunderbird Mail Client will not allow me to paste the Copyright >> symbol into this message.) > > © > > This is thunderbird on a Mac. > > Also is it really necessary to have © 2008 when the "2008" is already > included in the date of the message ? > > Why not just > > © . You do it in accordance with the requirements of US Copyright law if you want copyright protection. My understanding is that your copyright notice must include the word "Copyright" or the copyright symbol or both plus the year in which the copyright commences (usually the date of first publication) ------------------------------ Date: 16 Jul 2008 20:56:49 GMT From: VAXman- @SendSpamHere.ORG Subject: Re: c. 2008 Brian Schenkenberger. Message-ID: <487e6091$0$5011$607ed4bc@cv.net> In article , "Richard B. Gilbert" writes: >JF Mezei wrote: >> Richard B. Gilbert wrote: >> >>> (The Thunderbird Mail Client will not allow me to paste the Copyright >>> symbol into this message.) >> >> © >> >> This is thunderbird on a Mac. >> >> Also is it really necessary to have © 2008 when the "2008" is already >> included in the date of the message ? >> >> Why not just >> >> © . > > >You do it in accordance with the requirements of US Copyright law if you >want copyright protection. My understanding is that your copyright >notice must include the word "Copyright" or the copyright symbol or both >plus the year in which the copyright commences (usually the date of >first publication) http://www.law.cornell.edu/uscode/html/uscode17/usc_sec_17_00000401----000-.html -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM ... pejorative statements of opinion are entitled to constitutional protection no matter how extreme, vituperous, or vigorously expressed they may be. (NJSC) Copr. 2008 Brian Schenkenberger. Publication of _this_ usenet article outside of usenet _must_ include its contents in its entirety including this copyright notice, disclaimer and quotations. ------------------------------ Date: Wed, 16 Jul 2008 16:06:28 -0700 (PDT) From: Rich Jordan Subject: Re: c. 2008 Brian Schenkenberger. Message-ID: On Jul 16, 2:16=A0pm, "Richard B. Gilbert" wrote: > norm.raph...@metso.com wrote: > > > "Richard B. Gilbert" wrote on 07/16/2008 > > 02:48:43 PM: > > > =A0> Steven M. Schweda wrote: > > =A0> > From: =A0 VAXman- =A0@SendSpamHere.ORG > > > =A0> >> c. 2008 Brian Schenkenberger. [...] > > > =A0> > =A0 =A0Around here, "c." is read as "circa". =A0Perhaps things d= iffer where > > =A0> > you are, or perhaps you mean "around 2008", but it all seems to = make > > =A0> > even less sense this way. =A0(Perhaps you should find more produ= ctive > > ways > > =A0> > to occupy data storage space around the world. =A0Just a thought= .) > > > =A0> Either the word "Copyright" or the Circled C symbol together with = the > > =A0> year is sufficient to claim copyright. =A0A simple lowercase "c" i= s not > > =A0> legally sufficient. > > > I have seen (c) where the symbol was not appropriate. =A0 > > > [I could put it here, but the message would then become MIME instead of > > text.] > > > If the message were MIME encoded, might we hope for a slightly larger > type face? =A0:-) > > AFAIK, (C) is NOT legally sufficient to claim copyright. =A0Only the > symbol or the word spelled out in full protect your rights under > copyright law. So assuming a document with the circle-C character but not a spelled out COPYRIGHT or COPR... If I switch my browser to use a font/symbol set that doesn't display the circled-C for whatever ascii/high-bit-set/ unicode character was chosen to display it, does that mean the copy I'm looking at is no longer copyrighted? Does the law or standard actually specify a particular character code, or simply require the 'display' of the symbol as in a hardcopy? The brief Brian pointed to doesn't seem to cover that. If my printer doesn't have the circle-C character (or again it is using a symbol set or font that does not) and I print it, is that copy no longer copyrighted? Seems like for electronic storage and display use you need to use the spelled out word, and to be safe also specify a well known symbol set/ typeface/etc. ------------------------------ Date: Wed, 16 Jul 2008 15:16:24 -0400 From: "Carl Friedberg" Subject: changed behavior of SUBMIT/USER Message-ID: <890539d90807161216l5a546de9qdb9ea753d1950091@mail.gmail.com> (posted on DECUS as well) I have a client who recently applied a years worth of patches to a VMS 8.3 Alpha system. After applying all current patches (starting with VMS83A_UPDATE), they noticed the following chnage in behavior: SUBMIT /USER now requires both CMKRNL and SYSPRV (VMS help explains Read and Write access to SYSUAF is required). Has anyone else noticed this? Any idea which patch made this change? Just curious; I'll also post on Comp.OS.VMS Carl ------------------------------ Date: Wed, 16 Jul 2008 14:35:18 -0400 From: "Richard B. Gilbert" Subject: Re: DCL divide by zero WAS: Symbol Substitution Mystery Message-ID: VAXman- @SendSpamHere.ORG wrote: > In article , norm.raphael@metso.com writes: >> koehler@eisner.nospam.encompasserve.org (Bob Koehler) wrote on 07/16/2008 >> 08:44:18 AM: >> >>> In article <1381471f-1faa-4973-a138-7c2d553ed762@d77g2000hsb. >>> googlegroups.com>, AEF writes: >>>> While we're on the topic: Suppose I wanted to port my trading app from >>>> VAX to Alpha or Integrity. All of it is written in DCL and Pascal >>>> except for the "messenger" program, which is written in Macro. What >>>> would it take to move this macro code to Alpha or Integrity (and why >>>> is it called "Macro")? >>> There is a guide to porting Macro-32 from VAX to Alpha. I think if >>> it will compile on Alpha it's ready for IA-64. I can't fathom trying >>> to follow it without learning Macro-32 first. >>> >> ...are there not still available VEST and AEST. > > There are. In the early Alpha days, I ported everything but others were > happy to VEST their code. The problem was that when some exception that > wasn't handled was raised in the VESTed code, it was a bear to debug. I > would conclude that the same is true of AEST. Compiled/assembled native > code is far easier to debug! > > VEST and AEST should be considered tools of last resort. If the applic- > ation has source code available, port it. Performance of the translated > code is also not optimal. I've seen some gawd awful results on Itanium. > VESTed code could be a nightmare to maintain. You would have to keep a VAX around if you needed to make any changes to it. Now the VAX was a fine machine in its day but its day is long gone! And if you DON'T have source code, why in hell don't you? There are always stories about "lost" source code but I certainly wouldn't want to be a character in such a story. Your source is a valuable resource and extremely expensive to replace if lost or damaged. Keeping copies in a secure facility off site makes a great deal of sense. It also makes a great deal of sense to make sure that your source code is well commented. If your ace programmer walks in front of a truck you could be in deep trouble without it. If called upon to do so, I could do any required maintenance on code I wrote thirty years ago because, and only because, it was well commented. ------------------------------ Date: Wed, 16 Jul 2008 15:21:40 -0400 From: JF Mezei Subject: Re: DCL divide by zero WAS: Symbol Substitution Mystery Message-ID: <487e4a6c$0$14316$c3e8da3@news.astraweb.com> VAXman- @SendSpamHere.ORG wrote: > If you are calculating disk percentages, where does the 0 in the denominator > arise? unmounted disk where total size is not known ? ------------------------------ Date: 16 Jul 2008 16:04:58 -0500 From: koehler@eisner.nospam.encompasserve.org (Bob Koehler) Subject: Re: DCL divide by zero WAS: Symbol Substitution Mystery Message-ID: In article , norm.raphael@metso.com writes: >> > ..are there not still available VEST and AEST. Yes, but they translate binaries, not source. I'm fairly sure the OP wanted to reuse his source, which will likely provide a better solution. ------------------------------ Date: 16 Jul 2008 21:14:00 +0200 From: Alexander Horn Subject: Re: Kaspersky's Remote Code Execution Through Intel CPU Bugs presentation Message-ID: <487e4878@news.arcor-ip.de> Then TEST my DEC MicroVAX 3100-80: Telnet to HORSE.MARWAY.ORG and make your own private & hobbyistic account. Is my uVAX with a genious 50 MHz Mariah CPU securer? :-) I lov' my Baby-VAX, -Vaxima (VAX-Ethusiast since 1983) P.S.: Leila tov, folx. Ken ken, ma kore? -- Alexander Horn, Hostmaster (of staff) | OpenVMS (TM) rocks! 10 Bruckner, Sindelfingen 71065 Germany | http://www.marway.org/ eMail: vaxima@marway.org | Trouble with Windows? Reboot! vaxima@vaxima.net | Trouble with UNIX? Be root! ------------------------------ Date: 16 Jul 2008 16:06:37 -0500 From: koehler@eisner.nospam.encompasserve.org (Bob Koehler) Subject: Re: Kaspersky's Remote Code Execution Through Intel CPU Bugs presentation Message-ID: In article , vaxinf@chemie.uni-konstanz.de writes: > Hi, > > 230 bugs in Itanium and some might be very dangerous: > > http://conference.hitb.org/hitbsecconf2008kl/?page_id=214 > > I'm very curious if there are methods to get privs under OpenVMS, too. Not in my house! I'm only using VAX and Alpha so far. ------------------------------ Date: Wed, 16 Jul 2008 21:19:07 -0600 From: "Michael D. Ober" Subject: LTO3 drives on Alpha VMS Message-ID: We have and Alpha Server 1200 running Open VMS 8.3 (with current updates). Will the VMS Backup recognize and use an LTO3 drive? Thanks, Mike Ober. ------------------------------ Date: Thu, 17 Jul 2008 03:25:59 GMT From: John Santos Subject: Re: LTO3 drives on Alpha VMS Message-ID: Michael D. Ober wrote: > We have and Alpha Server 1200 running Open VMS 8.3 (with current > updates). Will the VMS Backup recognize and use an LTO3 drive? > > Thanks, > Mike Ober. > > Works fine on IA64. Don't know why it wouldn't work on Alpha. -- John Santos Evans Griffiths & Hart, Inc. 781-861-0670 ext 539 ------------------------------ Date: Wed, 16 Jul 2008 15:26:50 -0400 From: JF Mezei Subject: Re: TCPIP smtp queue - how to change it? Message-ID: <487e4ba1$0$1837$c3e8da3@news.astraweb.com> ythefoe@gmail.com wrote: > Do you know how the smtp-server knows which queue he has to use as > 'generic queue'? > You can set the number of queues the smtp-server can use, but how is > the link constructed between the smtp service and the queue? TCPIP$SMTP__00 is the generic queue TCPIP$SMTP__01 is the first execution queue ex: TCPIP$SMTP_BIKE_00 and TCPIP$SMTP_BIKE_01 ------------------------------ End of INFO-VAX 2008.396 ************************