Main Contents

OpenSSH flaw: workaround

May 21, 2009

A flaw in the SSH protocol is starting to get more widespread attention. It appears that a workaround is available: disabling CBC ciphers in favor of CTR. To do so, edit /etc/ssh/sshd_config and add the following: Ciphers arcfour128,arcfour256,arcfour,aes128-ctr,aes192-ctr,aes256-ctr That’s the default list of SSH ciphers, minus the CBC ones.

Filed under: Linux, System administration | Comments (0)

Ubuntu Jaunty (9.04): Getting Java and Eclipse working

May 8, 2009

apt-get install openjdk-6-openjdk icedtea6-plugin update-java-alternatives -s java-6-openjdk For some inexplicable reason, Eclipse for Java Developers doesn’t include JDBC. Eclipse J2EE edition doesn’t work with OpenJDK. Oh well.

Filed under: Java, Linux, System administration | Comments (0)

IPv6 with Bonjour/Zeroconf in Ubuntu

January 6, 2009

I’ve decided that 2009 is the year I go IPv6, so I’ve been getting all my machines ready. The Macs were no problem, of course: they work with IPv6 without doing anything. Linux is more problematic. Ubuntu 8.10 and up support IPv6, but come with it turned off in places. The first place is /etc/avahi/avahi-daemon.conf [...]

Filed under: Linux, Macintosh, System administration | Comments (0)

Mirroring is not backup

January 3, 2009

Once upon a time there was a small web hosting company called Lagomorphics LLC. They ran a blogging service called JournalSpace. It was hosted on Mac OS X servers. By way of backup, they had a second hard drive mirroring their main database. At some point, they caught their IT guy stealing from the company. [...]

Filed under: System administration | Comments (0)