BSDFreaks.nl

Bron: [url=http://www.webwereld.nl]Webwereld[/url]

De beveiligde Arescom adsl-routers waar onder meer Versatel en Zonnet van gebruikmaken, blijken makkelijk te kraken te zijn. Sommige gebruikers konden absoluut niet met het idee leven niet bij de configuratie van de router te komen. Ook deden geruchten de ronde dat alle Arescom routers van Zonnet van één en hetzelfde wachtwoord zijn voorzien.

[quote]Dit wordt door woordvoerder Theo Drenth tegengesproken. “Elke router wordt met een uniek wachtwoord beveiligd en kan niet door de de klant zomaar uitlezen worden”, aldus Drenth.

Toch is het gebruikers gelukt om een manier te vinden om aan de inloggevens van de router te komen. Het zou volgens diverse gebruikers niet moeilijk zijn de router te ‘kraken’.
[/quote]

[url=http://www.webwereld.nl/nieuws/12919.phtml]Het hele artikel[/url]

Bron: [url=http://www.webwereld.nl]Webwereld[/url]

De ‘root-servers’ die essentieel zijn voor het functioneren van internet, zijn maandagavond korte tijd aangevallen. Het ging om een zogeheten distributed denial of service (DDoS) aanval op de dertien servers. De aanval duurde een uur. Wie verantwoordelijk is voor de aanval is nog onduidelijk. De Amerikaanse federale recherche FBI onderzoekt de zaak.

[quote]Het root server system, dat bestaat uit dertien servers wereldwijd, is verantwoordelijk voor het omzetten van domeinnamen (bijvoorbeeld www.webwereld.nl) in IP-adressen (62.250.20.101) en omgekeerd. Daarmee zijn de servers essentieel voor het functioneren van internet.

Tijdens de aanval bleven zeker vier of vijf van de dertien root-servers werken. Ingewijden spreken tegenover Amerikaanse persbureaus en kranten van ‘de meest geavanceerde en grootste aanval’ op de root-servers in de geschiedenis van internet.
[/quote]

[url=http://www.webwereld.nl/nieuws/12925.phtml]Het orginele artikel[/url]

De iso’s waren er vanmorgen al‚ echter nog geen officiele announcement van Murray.
Deze release zal waarschijnlijk de laatste zijn voor de release van 5.0.

De announcement van Murray:
[quote]
I am happy to announce the availability of FreeBSD 4.7-RELEASE‚ the
latest release of the FreeBSD -STABLE development branch. Since
FreeBSD 4.6-RELEASE in June 2002‚ we have updated a number of software
programs in the base system‚ such as GCC and sendmail. Several new
drivers have been added for USB devices and disk controllers. We have
also incorporated updates for XFree86 and our Linux compatibility
libraries.

FreeBSD 4.7 also incorporates all of the security and bug fixes from
4.6.2 (released in August 2002)‚ including several ATA-related
bugfixes‚ updates for OpenSSL and OpenSSH‚ and fixes to address
several security advisories.

For a complete list of new features and known problems‚ please see the
release notes and errata list‚ available here:

http://www.FreeBSD.org/releases/4.7R/relnotes.html
http://www.FreeBSD.org/releases/4.7R/errata.html

For more information about FreeBSD release engineering activities
(including information about the upcoming FreeBSD 5.0)‚ please see:

http://www.FreeBSD.org/releng/

Availability
reeBSD 4.7-RELEASE supports the i386 and alpha architectures and can
be installed directly over the net using the boot floppies or copied
to a local NFS/FTP server. Distributions for the i386 are available
now. As of this writing‚ the final builds for the alpha architecture
are in progress and will be made available shortly.

Please continue to support the FreeBSD Project by purchasing media
from one of our supporting vendors. The following companies will be
offering FreeBSD 4.7 based products:

FreeBSD Mall‚ Inc. http://www.freebsdmall.com/
Daemonnews‚ Inc. http://www.bsdmall.com/freebsd1.html

If you can’t afford FreeBSD on media‚ are impatient‚ or just want to
use it for evangelism purposes‚ then by all means download the ISO
images. We can’t promise that all the mirror sites will carry the
larger ISO images‚ but they will at least be available from:

ftp://ftp.FreeBSD.org/pub/FreeBSD/
ftp://ftp12.FreeBSD.org/pub/FreeBSD/
ftp://ftp.tw.FreeBSD.org/pub/FreeBSD/
ftp://ftp{2‚3‚4‚5}.jp.freebsd.org/pub/FreeBSD/
ftp://ftp.cz.FreeBSD.org/pub/FreeBSD/
ftp://ftp7.de.FreeBSD.org/pub/FreeBSD/
ftp://ftp.lt.FreeBSD.org/pub/FreeBSD/
ftp://ftp2.za.FreeBSD.org/pub/FreeBSD/
ftp://ftp.se.FreeBSD.org/pub/FreeBSD/
ftp://ftp{1‚2‚4}.ru.FreeBSD.org/pub/FreeBSD/

FreeBSD is also available via anonymous FTP from mirror sites in the
following countries: Argentina‚ Australia‚ Brazil‚ Bulgaria‚ Canada‚
China‚ Czech Republic‚ Denmark‚ Estonia‚ Finland‚ France‚ Germany‚
Hong Kong‚ Hungary‚ Iceland‚ Ireland‚ Japan‚ Korea‚ Lithuania‚ the
Netherlands‚ New Zealand‚ Poland‚ Portugal‚ Romania‚ Russia‚ Saudi
Arabia‚ South Africa‚ Slovak Republic‚ Slovenia‚ Spain‚ Sweden‚
Taiwan‚ Thailand‚ Ukraine‚ and the United Kingdom.

Before trying the central FTP site‚ please check your regional
mirror(s) first by going to:

ftp://ftp..FreeBSD.org/pub/FreeBSD

Any additional mirror sites will be labeled ftp2‚ ftp3 and so on.

More information about FreeBSD mirror sites can be found at:

http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/mirrors-ftp.html

For instructions on installing FreeBSD‚ please see Chapter 2 of The
FreeBSD Handbook. It provides a complete installation walk-through
for users new to FreeBSD‚ and can be found online at:

http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/install.html
[/quote]

De laatste RC voor release 4.7 is aangekondingd door Murray Stokely. Deze RC is alleen beschikbaar voor ftp installs.
[quote]
Date: Mon, 7 Oct 2002 20:24:24 -0700
From: Murray Stokely
To: stable@FreeBSD.org
Cc: re@FreeBSD.org, qa@FreeBSD.org
Subject: Final release candidate now available

FreeBSD 4.7-RC3 (i386) is now available for FTP network installs
from ftp2.freebsd.org. This includes the recent LDT patch and the
final package set that will be used on the CDROMs/DVDs. Please help
make this release a success by performing a network install, or simply
installing your favorite packages from the packages-4.7-release
directory. We’re still interested in making sure that Wine users are
not experiencing any problems.

No ISO is provided because by the time that ISOs circulate around to
all of the FTP sites and users have time to download and burn them,
we’ll have the final release ready. 😉

Thanks for your patience.

– Murray / Release Engineering Team
[/quote]

Bron:[url=http://www.bsdforums.org/forums/showthread.php?s=71a75e88345c723280a8ad7a63c950bc&threadid=3512]BSDforums[/url]
Er is een nieuw lek gevonden in Apache. Dit lek geeft lokale gebruikers de mogelijkheid om processen te killen of DOS attacks uit te voeren tegen de server.

De Apache Software Foundation heeft een update uitgebracht die het probleem oplost. De nieuwe versie is 1.3.27.

Links:
[url=http://www.eweek.com/print_article/0,3668,a=32010,00.asp]Full report[/url]
[url=http://www.apacheweek.com/features/security-13]Security problems in 1.3[/url]

[quote]Due to the upcoming release of OpenBSD 3.2, the 3.0-STABLE branch will be out of regular maintainance starting December 1st. There will be no more fixes commited to this branch after this day.

[Read email announcement]

************************************
Date: Fri, 4 Oct 2002 09:49:12 +0000
From: Miod Vallat
To: announce@openbsd.org
Subject: OpenBSD 3.0 End Of Life

Hello folks,

Due to the upcoming release of OpenBSD 3.2, the 3.0-STABLE branch will
be out of regular maintainance starting december 1st. There will be NO
MORE fixes commited to this branch after this day.

People relying on 3.0-STABLE (or older releases even) are strongly
advised to upgrade to a more recent release (preferrably 3.2 as it
becomes available) as soon as possible.

Thanks for reading,
Miod
[/quote]

Bron: [url=http://www.netbsd.org]NetBSD.org[/url]

Frank van der Linden heeft Bill Sommerfeld’s i386mp branch toegevoegd aan i386/-current. i386 SMP ondersteuning zou goed moeten werken op 1-CPU systemen en zeer goed op veel multi-processor systemen.

[quote][b]Frank’s message to current-users[/b]

Subject: HEADS UP: i386mp branch merged
To: None
From: Frank van der Linden
List: current-users
Date: 10/01/2002 15:54:59
I just merged Bill Sommerfeld’s i386mp branch into i386/-current. The
code should work fine on 1-CPU systems‚ and quite well on a lot
of multiprocessor systems (certainly the newer ones).

Known issues:

* The performance counter code (options PERFCTRS) has been
obsoleted by this‚ since it doesn’t work on multiprocessor
systems. The code and manpage will be changed to reflect
this.

* Interrupt counters (vmstat -i) won’t work for the time
being if MULTIPROCESSOR is defined.

* There are probably a few locking problems lurking in the
USER_LDT code with MULTIPROCESSOR switched on.

* As on all other platforms that support MP (or kernel
configs that have LOCKDEBUG switched on)‚ RAIDframe
may have locking problems. Recently‚ an effort was
made to fix this‚ but I haven’t been able to verify
if it works. Note that RAIDframe is currently broken
in -current because of a seperate issue.

* Interrupt line sharing between different IPLs isn’t
optimal in the MP case (although not really much worse
than the single processor case).

Interrupt handling and some other reshuffling will hopefully
be redone in the near future (I have code which isn’t quite
there yet).

Note that kernel config files for single processor machines need the line:

cpu0 at mainbus0

..to configure correctly.

Multiprocessor kernels need:

cpu* at mainbus?
ioapic* at mainbus? apid ?
options MULTIPROCESSOR
options COM_MPLOCK

..and if you want debugging and/or lots of output:

options MPDEBUG
options MPVERBOSE

Also‚ because of other‚ unrelated changes‚ you’ll need to recompile
config(8) first if you want to configure a new kernel.

– Frank

—
Frank van der Linden fvdl@wasabisystems.com
==========================================
Quality NetBSD Development‚ Support & Service. http://www.wasabisystems.com/

[/quote]