HDTenEightyP/NetNews huggingface dataset:
From: spm2d@topaz.cs.Virginia.EDU (Steven P. Miale)
Subject: Re: logging outgoing telnet sessions to catch 'hackers' (summary)
Organization: University of Virginia Computer Science Department
Date: Mon, 13 Apr 1992 23:46:24 GMT

In article <2794@copper.Denver.Colorado.EDU> l1ngo@copper.denver.colorado.edu (Swift) writes:
>Let me clarify this. I only intended to log which hosts a user connects to.
>Usually, this is all that's needed to find a hacker (at the very least, it
>narrows down the list of "suspects").

I don't believe that is any of your business. Where someone telnets to,
who they send mail to, etc., should not be logged. Your plan sounds
an awful lot like "Big Brother" to me.

>The consensus of the responses seems to be to go ahead and modify telnet
>to log the hosts that each user connects to as it is very simple to do.
>The assumptions were that most hackers probably won't bother to recompile
>telnet (or are too lazy to), and it certainly can't hurt us.

Hahahaha... "Most hacker's won't bother to recompile telnet?" Well, I
*WOULD*. Of course, you seem to believe hackers are bad evil creatures.
You are VERY wrong. You've probably been helped by hackers quite a
bit in your quest - real hackers, that is.

I believe it CAN hurt you. Let me see - "Tell me, where have you
telnetted to? After all, if you have nothing to hide..." Sounds
like the Gestapo to me. 

>As for the privacy issue a poster brought up, it really doesn't apply in
>my case, but there was a similar talk on comp.unix.admin about email privacy. 
>Interestingly enough, a large fraction of sysadmins condoned and engaged in
>the reading of other people's email. It seems unethical by many (myself
>included), but I'm unsure of the legalities.

I believe the privacy issue does matter in your case. Logging where
people telnet to is the same as the government keeping tabs on where
you are at all times, or keeping track of who you correspond with.
In other words, you are presuming guilt, and that is not a very
American idea.

Steve



-- 
Steven Miale - spm2d@virginia.edu   | Backwards compatibility is backward.
Undergraduate Researcher            |
Department of Computer Science      |
University of Virginia              |
From: sium@syma.sussex.ac.uk (Siu Mak)
Newsgroups: comp.unix.programmer
Subject: Re: a pipe problem
Date: 13 Apr 92 19:20:56 GMT
Organization: University of Sussex at Brighton

In article <1992Apr13.005506.16138@daimi.aau.dk>, pjunold@daimi.aau.dk (Peter Joachim Unold) writes:
> I have a program that starts a process A which sends data to it's child B by
> a pipe. Process A reads it's input from filedescriptor 0. However sometimes
> I want Process B to send data to it's parrent A. It's important that this data
> also should be be read from the same fd as used for stdin. Here's how it looks:
>
>                 *****      *****
> keyboard--->----* A *----->* B *
>            |    *****      *****
>            |                 |
>            ---------<---------
>
> what I'm really trying to do is to make a pipe that looks like:
>
> keyboard->--|
>             ------->-----parent
> child---->--|
>
> Is this possible at all? I've tried various variants of pipe, close and dup
> without finding a solution. I hope someone can help me out of this one.
>
>  - Peter Unold

Do you mean you want to have a pipe which have two input and one output ??
If so, I don't think it works !
Anyway, I am not an expect. I don't really know how to create a pipe with two
entrance and one exit.
But I do know how to write a pipe which will take input from child and send
output to parent.
I am sorry that those words I am using here is not technical enough.

- Sium.
Newsgroups: comp.unix.programmer
From: marcus@cbr.dwr.csiro.au (Marcus Schnell)
Subject: Re: recursively moving to directories
Organization: CSIRO Division of Water Resources
Date: Tue, 14 Apr 1992 06:12:41 GMT


Hi,

Thanks to all who helped with this problem. The answer (or one of them
anyway) was:
   
    find . -exec chown <new-user> {} \;

Marcus

****************************************************************************
*    Marcus Schnell                      marcus@helios.cbr.dwr.csiro.au    *
*    CSIRO Division of Water Resources   Phone   : (+61 6) 246 5707        *
*    GPO Box 1666                        FAX     : (+61 6) 246 5800        *
*    Canberra                            Int FAX : (+61 6) 246 5800        *
*    ACT  2601    **********************************************************
*    Australia    *          insert ".disclaim" here...                    *
****************************************************************************
From: severse@sdcc3.ucsd.edu (Stephen Everse)
Newsgroups: comp.unix.programmer
Subject: Code Module Flows
Keywords: Module Flows
Date: 15 Apr 92 19:58:06 GMT
Article-I.D.: sdcc12.31690


Does anyone currently use a program which generates good module flow
diagrams and outliners close to sufficient for use as product
structure reports?  My boss wants this for the product I am working
on and it would be too big by hand.  You can email direct if you
wish.

Thanks, Peder Jungck (sje@sdchemd1.ucsd.edu)


on and it would be too big by hand
From: francis@ircam.fr (Joseph Francis)
Newsgroups: comp.unix.programmer
Subject: Re: ethics of logging telnet destinations (was Re: logging outgoing...)
Date: 15 Apr 92 19:02:05 GMT
Organization: IRCAM, Paris (France)

In article <2799@copper.Denver.Colorado.EDU> l1ngo@copper.denver.colorado.edu (Swift) writes:
>In article <1992Apr13.234624.3733@murdoch.acc.Virginia.EDU> spm2d@topaz.cs.Virginia.EDU (Steven P. Miale) writes:
>>In article <2794@copper.Denver.Colorado.EDU> l1ngo@copper.denver.colorado.edu (Swift) writes:
>>>Let me clarify this. I only intended to log which hosts a user connects to.
>>
>>I don't believe that is any of your business. Where someone telnets to,
>>who they send mail to, etc., should not be logged. Your plan sounds
>>an awful lot like "Big Brother" to me.
...
>>I believe the privacy issue does matter in your case. Logging where
>>people telnet to is the same as the government keeping tabs on where
>>you are at all times, or keeping track of who you correspond with.
>>In other words, you are presuming guilt, and that is not a very
>>American idea.
>
>The telephone company logs all your long distance call destinations.
>Are you suggesting that they are presuming guilt or are un-American?

The long-distance carrier companies log all long-distance calls, and
your local calls are logged locally, for purposes of accounting. For
purposes of criminal investigation the records may be subpoenaed; this
doesn't mean that the records are as a matter of course handed over to
the police, or that they were originally created for this purpose. The
same goes for: bank records; charge card records; airline ticket
records; private accounts with stores; newspaper/magazine
subscriptions; rental agreements; hotel records; etc. You can imagine
the list.

If, on a computer, one is charged by connect time and storage, then
these are useful pieces of information to log; if telnet connects are
distributed in cost over a series of different "charged-to" accounts,
then by all means every account should be monitored. Otherwise the
information is but for satisfying curiosity, or monitoring problems.

>As other posters have pointed out, a computer account is a privilege,
>not a right. System administrators have an obligation to ensure the
>safety of users' data. Computer logs are usually used to diagnose
>a problem with the system.

I agree with this. The original question was, however, to monitor
outbound telnets. I don't envision many "problems" with outbound
telnets that must be monitored. Also, the safety of user's data is most
easily secured with backups...
-- 
| Le Jojo: Fresh 'n' Clean, speaking out to the way you want to live
| today; American - All American; doing, a bit so, and even more so.
Newsgroups: comp.unix.programmer
From: amid@bullet.ecf (AMID  Rudy)
Subject: Thanks
Originator: amid@bullet.ecf.toronto.edu
Organization: University of Toronto, Engineering Computing Facility
Date: Mon, 13 Apr 1992 19:24:32 GMT

   I've received all sorts of answers about non-blocking accept() (socket,
really) and have implemented this portion to my project.  No, I'm not
asking you to do my homework.  I was just "stuck" at this part of the
problem, that's all.

    Thank you all for the responses.  Sockets programming is a non-trivial
task for me so double thanks to those who were patient enough to guide me
through it.

---
Rudy Amid  amid@ecf.toronto.edu                                            /\
   //      a378amid,a318amid,a209amid@cdf.toronto.edu                    (//\\)
  //
\X/     "This world needs its dreamers. May they never wake up." -Prefab Sprout
Xref: sparky comp.unix.programmer:2419 comp.admin.policy:745
From: wietse@wzv.win.tue.nl (Wietse Venema)
Newsgroups: comp.unix.programmer,alt.security
Subject: Re: logging outgoing telnet sessions to catch 'hackers'
Date: 8 Apr 92 21:11:36 GMT
Followup-To: comp.unix.programmer
Organization: Eindhoven University of Technology, The Netherlands

l1ngo@copper.denver.colorado.edu (Swift) writes:

>We're running Dynix on a Sequent S81 and are considering methods of
>logging outgoing telnet sessions. We can log which sites connect to
>ours (by putting tcp_wrapper between inetd and the server daemons), but
>we're trying to determine the best way to log users connections
>to other hosts. Frequently, another site might report incidences of
>possible hacking from our site and we'd like to know who's doing it.

Some IP routers have a facility to do packet accounting. For example,
some CISCO models can produce statistics of source/destination host,
number of packets, and number of bytes, for each 30 minute period.
This information has been very useful when our site was under attack,
but also when an attack was launched from one of our systems.

	Wietse Venema
From: mulcihy@mimas.NoSubdomain.NoDomain (David Mulcihy 283-4279)
Newsgroups: comp.unix.programmer
Subject: send()
Keywords: send()
Date: 7 Apr 1992 19:10:46 GMT
Organization: nasa-jsc

I have two computers talking to each other using tcp. I then add another 
computer talking to the first computer. While using send() I get the 
error EFAULT while trying to send data to the first computer. The unix
function perror translates this error as Bad address. Has someone else
encountered this error? Is this an error on the sending machine or the
receiving machine?
Thanks.
David Mulcihy
mulcihy@sweetpea.jsc.nasa.gov
Newsgroups: comp.unix.programmer
From: pfalstad@phoenix.Princeton.EDU (Paul Falstad)
Subject: Re: Scripting in general
Originator: news@ernie.Princeton.EDU
Organization: League For Fighting Chartered Accountancy
Date: Mon, 13 Apr 1992 00:53:47 GMT

bengtl@maths.lth.se (Bengt Larsson) wrote on 11 Apr 92 20:11:23 GMT:
>In article <id.06QO.O83@ferranti.com> peter@ferranti.com (Peter da Silva) writes:
>>Well, that's the point. I run this sort of interactive loop all the time.
>>Just toss 'em off, either in csh (foreach) or in sh (for).
>
>8-line loops with if-then-elses? Well, I'm impressed. But you have to be
>a serious wizard to do this habitually.

Well, that's for the general case.  Usually my mass renames take a one-line
loop.  No big deal.  I never bothered to write/use a script.

>As for programming language suitability:
>   ** It isn't possible to write a "rename" script in "sh" that handles
>   ** all valid filenames.

I seriously doubt this.  Are you implying that there's some other shell
(rc?) where you can write a "perfect" rename script which cannot be
translated into sh, because of deficiencies in the language?  I doubt it.

>Most of the scripts which use filenames can't handle special characters
>in the names. So you can't do "cflow", or "diff3", for example
>on filenames containing special chars, like spaces.
>
>Does anyone but me think this is completely bogus? Distributed programs
>that blow up on perfectly legal filenames?

Yes, it is stupid.

>Re-write them in rc!

Don't bother.  Adding/changing a few characters here and there will make
them work just fine, for all possible filenames.

-- 
Paul Falstad, pfalstad@phoenix.princeton.edu | 10 PRINT "PRINCETON CS"
[Your blood pressure just went up.]          | 20 GOTO 10
From: cudcv@warwick.ac.uk (Rob McMahon)
Newsgroups: comp.unix.programmer
Subject: Re: Elegant mass file renamer
Date: 6 Apr 92 12:02:05 GMT
Organization: Computing Services, Warwick University, UK

In article <1992Apr6.082205.3979@lth.se> bengtl@maths.lth.se (Bengt Larsson)
writes: 
>In article <id.00LO.XCG@ferranti.com> peter@ferranti.com (Peter da Silva)
writes: 
>>My general version of "rename" would support stuff like:
>>
>>	rename %1.%2.c %1/%2/%2.c
>>...
>>I suspect that the equivalent already exists.
>
>I doubt that anyone saw the need for a special purpose program for that kind
>of thing.

It does exist, and it's not a special purpose program at all:

cudcv (400) > head `which rename`
#!/usr/bin/perl
#...
# $Header: rename,v 3.0.1.2 90/08/09 03:17:57 lwall Locked $

Script started on Mon Apr 6 12:56:51 BST 1992
cudcv (41) >> hdl -p | rs
            a/c         b           b.c.c       c/d         
a           a.b.c       b/c         b.d.c       c.d.c       
a/b         a.c.c       b/d         c           typescript  
cudcv (42) >> rename 's;(.*)\.(.*)\.c;\1/\2/\2.c;' *
cudcv (43) >> hdl -p | rs
            a/b/b.c     b           b/d         c/d         
a           a/c         b/c         b/d/d.c     c/d/d.c     
a/b         a/c/c.c     b/c/c.c     c           typescript  
cudcv (44) >> x
exit
Script done on Mon Apr 6 12:57:47 BST 1992

Cheers,

Rob
-- 
UUCP:   ...!mcsun!uknet!warwick!cudcv	PHONE:  +44 203 523037
JANET:  cudcv@uk.ac.warwick             INET:   cudcv@warwick.ac.uk
Rob McMahon, Computing Services, Warwick University, Coventry CV4 7AL, England
Newsgroups: comp.unix.programmer,gnu.emacs.help
From: dan@dribble.c-mols.siu.edu (Dan Ellison)
Subject: GNU Emacs 18.58 dump problem under SCO UNIX
Organization: Southern Illinois University - Carbondale, IL (SIU-C)
Distribution: usa
Date: Mon, 6 Apr 1992 16:30:04 GMT
Keywords: SCO UNIX

I have been able to get a running emacs-18.58 under SCO UNIX with gcc-2.1
but thus far have had no luck getting a loaded dump to work.  Has anyone
managed to get this feature to go with SCO's COFF format?  Any pointer
greatly appreciated and thanks in advance.

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| Dan Ellison, Network Admin	  -    	Molecular Science Program SIU-C | 
| Southern Illinois University 	  - 	Carbondale, IL 62901            |   
| FAX:      (618) 453-3459        -   	PHONE:    (618) 453-7310 	|
From: root@cpp.uucp (Rich Bauer)
Newsgroups: comp.unix.programmer
Subject: Development Under Xenix
Keywords: Programming, Xenix, C, Books
Date: 11 Apr 92 03:13:34 GMT
Organization: Critical Path Project

I have access to a Xenix development system but do not have any of
the books or manuals because they are physically located at the
site I call into.

Could someone please give me a short list of books I can buy so that
I can do some development work under Xenix?  Specifically, I need to
know how to write applications that have complicated text, inverse,
and ANSI graphics displays.  I have looked at all of the libraries
related to term and terminfo but can't seem to figure out how 
everything fits together.

Please help.

-- 
-----------------------------------------------------------
| Rich Bauer - Critical Path Project Inc.                 |
| UUCP...!dsinc!jabber!phlpa!cpp!rich  or rich@cpp.UUCP   |
-----------------------------------------------------------
From: brnstnd@nyu.edu (Dan Bernstein)
Newsgroups: comp.unix.programmer
Subject: Re: Interrupted system calls
Date: 6 Apr 92 22:58:13 GMT
Organization: IR

In article <JIK.92Apr6104609@pit-manager.mit.edu> jik@athena.mit.edu (Jonathan I. Kamens) writes:
> There are problems with just restarting in some cases.  For example, I
> believe it's possible for a write() to be interrupted after part of
> the data you give it has already been written, and I don't think
> there's any way to know how much data was written before the interrupt
> (ugh!).

On broken systems, and in stupid cases, yes. On working systems write()
will always return the number of bytes written, if that number is
positive. (Yes, this is part of my definition of ``working''; yes, there
exist systems which work in this respect.)

---Dan
Newsgroups: comp.unix.programmer
From: julian@uhunix.uhcc.Hawaii.Edu (Julian Cowley)
Subject: Re: How to write the ANSI C time functions
Organization: University of Hawaii at Manoa
Date: Wed, 15 Apr 1992 17:59:24 GMT

[As the original poster, I'll be posting a summary soon since
this thread is nearly dead.  Also, my account may disappear
temporarily for a couple of days, so please post (and not mail)
any responses.]

In article <12441@auspex-gw.auspex.com> guy@Auspex.COM (Guy Harris) writes:
>Someone else writes:
>>This will change
>>to UTC = TAI - 27 at the end of June 1992 when the first ever leap second will
>>be inserted in a month other than December.

Actually, this is incorrect.  The very first leap second, in
fact, was on June 30, 1972 (or July 1, depending).

>> The question is, does time() return GMT or
>>>UTC?  Hazarding a guess, I would say it is UTC, in which case
>>
>>Correct
>
>Wrongo.  "time()" returns something that is best thought of as *atomic*
>time - i.e., it is supposed to return a value that, at 12:00 UTC,
>January 1, 1970, was 0, and that has gone up by one every time an atomic
>clock would have advanced by one second.

But I thought that's what UTC is: an atomic clock that advances
by one every second, with leap seconds added in so that it
(nearly) matches mean solar time.

>(In practice, few if any UNIX systems have "time()" return anything
>truly deserving of the term "atomic time", because few such systems have
>a real live atomic clock attached to them....)

And I thought that's what NTP is for: to receive a time standard
from one of the broadcast atomic clocks, convert it to bits, and
send it through the net.  It may not count as being connected to
an atomic clock, but it's close since you're guaranteed the correct
time within a certain amount of error.
From: fyl@ssc.wa.com (Phil Hughes)
Newsgroups: comp.unix.programmer
Subject: Re: Development Under Xenix
Keywords: Programming, Xenix, C, Books
Date: 14 Apr 92 19:06:17 GMT
Organization: SSC, Inc., Seattle, WA

In article <1992Apr11.031334.12208@cpp.uucp> root@cpp.uucp (Rich Bauer) writes:

>Could someone please give me a short list of books I can buy so that
>I can do some development work under Xenix?  Specifically, I need to
>know how to write applications that have complicated text, inverse,
>and ANSI graphics displays.  I have looked at all of the libraries
>related to term and terminfo but can't seem to figure out how 
>everything fits together.

The minimum investment would be SSC's C Library Reference, a $6 book that
shows all the library calls including curses.  Note that this is for
UNIX V and "Standard System V" but will work ok for Xenix.

O'Reilly also has a book on Curses.  The O'Reilly book is more of a guide
to using curses and includes only curses.  The SSC book is a terse
reference and includes all of the C Library.  Both should be available at
"good" bookstores, Computer Literacy in San Jose being an example.
If you want a catalog from SSC (we publish a whole series of pocket-sized
reference books on C and UNIX, as well as other computer topics, send
e-mail to :
    sales@ssc.wa.com

VESTED INTEREST WARNING: I work for SSC.

-- 
Phil Hughes, SSC, Inc. P.O. Box 55549, Seattle, WA 98155  (206)FOR-UNIX
     uunet!nwnexus!ssc!fyl or fyl@ssc.wa.com            (206)527-3385
Newsgroups: comp.unix.programmer,comp.unix.internals,comp.unix.wizards
From: mjr@hussar.dco.dec.com (Marcus J. "will do TCP/IP for food" Ranum)
Subject: Re: What is the system call for microsecond sleep?
Organization: Digital Equipment Corporation, Washington ULTRIX Resource Center
Date: Fri, 10 Apr 1992 21:06:48 GMT

mahmood@lambda.msfc.nasa.gov (Rafique Mahmood) writes:
>I am developing some portable code in which I need to use microsecond
>sleep. So, I used usleep(microsecond) system call. The problem is Decstation
>does not support this call.

	I think you can use the bsd usleep() sources (from ftp.uu.net in
packages/bsd-sources/lib/libc/gen without any modifications under ULTRIX.
If you need a copy, I will mail you one.

mjr.
From: cazier@mbunix.mitre.org (Cazier)
Newsgroups: comp.unix.programmer
Subject: VMS/POSIX
Date: 14 Apr 92 15:27:50 GMT
Article-I.D.: linus.1992Apr14.152750.4252
Organization: Houston, TX


My apologies if this does not fit the norm for this newsgroup, but I
believe that some UNIX programmers are going to end up in non-UNIX
POSIX environments. The following question is meant for those with
experience in the transition to VMS 5.5/POSIX from some UNIX box.

I would like to find out if the VMS 5.5 OS enhancements can really provide
users with a UNIX-like environment or not.

I gather that VMS 5.5 provides a shell to users who wish to work in
a familiar UNIX environment. Do I assume that this includes sccs, vi,
lint, and various other tools that a UNIX programmer might use in the
course of developing programs?
Newsgroups: comp.unix.programmer
From: dcborean@descartes.waterloo.edu (David Borean)
Subject: Effective user ID's
Organization: University of Waterloo
Date: Mon, 13 Apr 1992 07:50:24 GMT


I have a small question.. I'm fairly new to UNIX and am just getting interested
in actually programming unix stuff.. I've experimented with shells and they're
interesting but C is where it's at.. However, I have a problem.. I've come
accross commands for setting effective user ID's and effective user Group ID's
and was wondering exactly how you do that.  How can you set an Effective
User ID? and then set UID to EUID?
 
Any help on this would be appreciated.. also, the applications of such a
procedure would also be appreciated.. obviously setting your effective
ID to root isn't going to give ou Root's access.. So any applications to these
commands would be appreciated.. 


Thanks..
From: schwartz@roke.cs.psu.edu (Scott Schwartz)
Newsgroups: comp.unix.programmer
Subject: Re: mass rename
Date: 11 Apr 92 16:39:24 GMT
Article-I.D.: cs.fkcHj6yn6
Organization: penn state university, computer science

bill@bilver.uucp (Bill Vermillion) writes:
   This sound to me like the programmer did not understand what he was
   doing. ...  You have to be aware of the same type things anytime
   you move items around - eg block moves of memory etc.

Which programmer?  The one who wrote "rename" or the one who used it?
Both should have been more careful, perhaps.  None of the examples and
none of the discussion here has touched on this issue.  Given that bit
of data, my guess is that most such scripts will make a linear pass
over the input and not take care to avoid overlap if possible.
Followups to comp.risks? :-)