Tech Discussion Thread: Long live the Calculator Master Race

[Aeken]

http://www.openssh.com/txt/gcmrekey.adv

Anyone running OpenSSH 6.2 or 6.3 that's been built against an OpenSSL which supports AES-GCM should disable AES-GCM in the server configuration.

Here are some tests of OpenSSH and OpenSSL from popular Linux distributions. The ones with asterisks (with a vulnerable OpenSSH and OpenSSL combination) should turn it off. OpenBSD 5.4 is affected as well, so turn it off if you're running that too.

* Arch Linux -- Version match: OpenSSH_6.3p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
CentOS 5.10 -- OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 (No AES-GCM support)
CentOS 6.4 -- OpenSSH_5.3p1, OpenSSL 1.0.0-fips 29 Mar 2010 (No AES-GCM support)
Debian 6 (squeeze) -- OpenSSH_5.5p1 Debian-6+squeeze4, OpenSSL 0.9.8o 01 Jun 2010 (No AES-GCM support)
Debian 7 (wheezy) -- OpenSSH_6.0p1 Debian-4, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Fedora 18 (Spherical Cow) -- OpenSSH_6.1p1, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
* Fedora 19 (Schrödinger’s Cat) -- Version match: OpenSSH_6.2p2, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
openSUSE 12.3 (Dartmouth) -- OpenSSH_6.1p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Ubuntu 10.04.4 LTS (Lucid) -- OpenSSH_5.3p1 Debian-3ubuntu7, OpenSSL 0.9.8k 25 Mar 2009 (No AES-GCM support)
Ubuntu 12.04.3 LTS (Precise) -- OpenSSH_5.9p1 Debian-5ubuntu1.1, OpenSSL 1.0.1 14 Mar 2012 (Supports AES-GCM)
Ubuntu 12.10 (Quantal) -- OpenSSH_6.0p1 Debian-3ubuntu1, OpenSSL 1.0.1c 10 May 2012 (Supports AES-GCM)
* Ubuntu 13.10 (Saucy) -- Version match: OpenSSH_6.2p2 Ubuntu-6, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)

EDIT: To turn it off, add this line

Code: Select all

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc

to your sshd_config file.

Mmmmm gotta love that Linux.

[Lemanrussland]

http://www.openssh.com/txt/gcmrekey.adv

Anyone running OpenSSH 6.2 or 6.3 that's been built against an OpenSSL which supports AES-GCM should disable AES-GCM in the server configuration.

Here are some tests of OpenSSH and OpenSSL from popular Linux distributions. The ones with asterisks (with a vulnerable OpenSSH and OpenSSL combination) should turn it off. OpenBSD 5.4 is affected as well, so turn it off if you're running that too.

* Arch Linux -- Version match: OpenSSH_6.3p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
CentOS 5.10 -- OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 (No AES-GCM support)
CentOS 6.4 -- OpenSSH_5.3p1, OpenSSL 1.0.0-fips 29 Mar 2010 (No AES-GCM support)
Debian 6 (squeeze) -- OpenSSH_5.5p1 Debian-6+squeeze4, OpenSSL 0.9.8o 01 Jun 2010 (No AES-GCM support)
Debian 7 (wheezy) -- OpenSSH_6.0p1 Debian-4, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Fedora 18 (Spherical Cow) -- OpenSSH_6.1p1, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
* Fedora 19 (Schrödinger’s Cat) -- Version match: OpenSSH_6.2p2, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
openSUSE 12.3 (Dartmouth) -- OpenSSH_6.1p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Ubuntu 10.04.4 LTS (Lucid) -- OpenSSH_5.3p1 Debian-3ubuntu7, OpenSSL 0.9.8k 25 Mar 2009 (No AES-GCM support)
Ubuntu 12.04.3 LTS (Precise) -- OpenSSH_5.9p1 Debian-5ubuntu1.1, OpenSSL 1.0.1 14 Mar 2012 (Supports AES-GCM)
Ubuntu 12.10 (Quantal) -- OpenSSH_6.0p1 Debian-3ubuntu1, OpenSSL 1.0.1c 10 May 2012 (Supports AES-GCM)
* Ubuntu 13.10 (Saucy) -- Version match: OpenSSH_6.2p2 Ubuntu-6, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)

EDIT: To turn it off, add this line

Code: Select all

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc

to your sshd_config file.

Mmmmm gotta love that Linux.

Gotta love that proactive auditing and open security, yes.

[Thurask]

Also Elop would consider ending Bing and selling off Xbox if made CEO.

Is he trying to out-fail Thorsten Heins?

[Czechanada]

http://www.openssh.com/txt/gcmrekey.adv

Anyone running OpenSSH 6.2 or 6.3 that's been built against an OpenSSL which supports AES-GCM should disable AES-GCM in the server configuration.

Here are some tests of OpenSSH and OpenSSL from popular Linux distributions. The ones with asterisks (with a vulnerable OpenSSH and OpenSSL combination) should turn it off. OpenBSD 5.4 is affected as well, so turn it off if you're running that too.

* Arch Linux -- Version match: OpenSSH_6.3p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
CentOS 5.10 -- OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 (No AES-GCM support)
CentOS 6.4 -- OpenSSH_5.3p1, OpenSSL 1.0.0-fips 29 Mar 2010 (No AES-GCM support)
Debian 6 (squeeze) -- OpenSSH_5.5p1 Debian-6+squeeze4, OpenSSL 0.9.8o 01 Jun 2010 (No AES-GCM support)
Debian 7 (wheezy) -- OpenSSH_6.0p1 Debian-4, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Fedora 18 (Spherical Cow) -- OpenSSH_6.1p1, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
* Fedora 19 (Schrödinger’s Cat) -- Version match: OpenSSH_6.2p2, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
openSUSE 12.3 (Dartmouth) -- OpenSSH_6.1p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Ubuntu 10.04.4 LTS (Lucid) -- OpenSSH_5.3p1 Debian-3ubuntu7, OpenSSL 0.9.8k 25 Mar 2009 (No AES-GCM support)
Ubuntu 12.04.3 LTS (Precise) -- OpenSSH_5.9p1 Debian-5ubuntu1.1, OpenSSL 1.0.1 14 Mar 2012 (Supports AES-GCM)
Ubuntu 12.10 (Quantal) -- OpenSSH_6.0p1 Debian-3ubuntu1, OpenSSL 1.0.1c 10 May 2012 (Supports AES-GCM)
* Ubuntu 13.10 (Saucy) -- Version match: OpenSSH_6.2p2 Ubuntu-6, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)

EDIT: To turn it off, add this line

Code: Select all

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc

to your sshd_config file.

Mentioning Linux in a thread full of Microsoft fanboys? I applaud your bravado.

[Aeken]

Also Elop would consider ending Bing and selling off Xbox if made CEO.

Is he trying to out-fail Thorsten Heins?

Elop better not become CEO.

[Ainin]

http://www.openssh.com/txt/gcmrekey.adv

Anyone running OpenSSH 6.2 or 6.3 that's been built against an OpenSSL which supports AES-GCM should disable AES-GCM in the server configuration.

Here are some tests of OpenSSH and OpenSSL from popular Linux distributions. The ones with asterisks (with a vulnerable OpenSSH and OpenSSL combination) should turn it off. OpenBSD 5.4 is affected as well, so turn it off if you're running that too.

* Arch Linux -- Version match: OpenSSH_6.3p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
CentOS 5.10 -- OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 (No AES-GCM support)
CentOS 6.4 -- OpenSSH_5.3p1, OpenSSL 1.0.0-fips 29 Mar 2010 (No AES-GCM support)
Debian 6 (squeeze) -- OpenSSH_5.5p1 Debian-6+squeeze4, OpenSSL 0.9.8o 01 Jun 2010 (No AES-GCM support)
Debian 7 (wheezy) -- OpenSSH_6.0p1 Debian-4, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Fedora 18 (Spherical Cow) -- OpenSSH_6.1p1, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
* Fedora 19 (Schrödinger’s Cat) -- Version match: OpenSSH_6.2p2, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
openSUSE 12.3 (Dartmouth) -- OpenSSH_6.1p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Ubuntu 10.04.4 LTS (Lucid) -- OpenSSH_5.3p1 Debian-3ubuntu7, OpenSSL 0.9.8k 25 Mar 2009 (No AES-GCM support)
Ubuntu 12.04.3 LTS (Precise) -- OpenSSH_5.9p1 Debian-5ubuntu1.1, OpenSSL 1.0.1 14 Mar 2012 (Supports AES-GCM)
Ubuntu 12.10 (Quantal) -- OpenSSH_6.0p1 Debian-3ubuntu1, OpenSSL 1.0.1c 10 May 2012 (Supports AES-GCM)
* Ubuntu 13.10 (Saucy) -- Version match: OpenSSH_6.2p2 Ubuntu-6, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)

EDIT: To turn it off, add this line

Code: Select all

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc

to your sshd_config file.

Mentioning Linux in a thread full of Microsoft fanboys? I applaud your bravado.

Inquisition....

Inquisition....

Purge the infidel....

[Czechanada]

Is he trying to out-fail Thorsten Heins?

Elop better not become CEO.

I would honestly love to see Microsoft broken up into smaller companies. Diversity would make for better breeding grounds for competition, and end the horrid monopoly that Microsoft holds.

Elop 2014!

[Aeken]

Elop better not become CEO.

I would honestly love to see Microsoft broken up into smaller companies. Diversity would make for better breeding grounds for competition, and end the horrid monopoly that Microsoft holds.

Elop 2014!

Monopoly? You mean Google.

[Ainin]

Elop better not become CEO.

I would honestly love to see Microsoft broken up into smaller companies. Diversity would make for better breeding grounds for competition, and end the horrid monopoly that Microsoft holds.

Elop 2014!

*scribbles your name on list of people to Inquisitionate [totally a real word]*

[Corvus Metallum]

http://www.openssh.com/txt/gcmrekey.adv

Anyone running OpenSSH 6.2 or 6.3 that's been built against an OpenSSL which supports AES-GCM should disable AES-GCM in the server configuration.

Here are some tests of OpenSSH and OpenSSL from popular Linux distributions. The ones with asterisks (with a vulnerable OpenSSH and OpenSSL combination) should turn it off. OpenBSD 5.4 is affected as well, so turn it off if you're running that too.

* Arch Linux -- Version match: OpenSSH_6.3p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
CentOS 5.10 -- OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 (No AES-GCM support)
CentOS 6.4 -- OpenSSH_5.3p1, OpenSSL 1.0.0-fips 29 Mar 2010 (No AES-GCM support)
Debian 6 (squeeze) -- OpenSSH_5.5p1 Debian-6+squeeze4, OpenSSL 0.9.8o 01 Jun 2010 (No AES-GCM support)
Debian 7 (wheezy) -- OpenSSH_6.0p1 Debian-4, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Fedora 18 (Spherical Cow) -- OpenSSH_6.1p1, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
* Fedora 19 (Schrödinger’s Cat) -- Version match: OpenSSH_6.2p2, OpenSSL 1.0.0-fips 29 Mar 2010 (Supports AES-GCM)
openSUSE 12.3 (Dartmouth) -- OpenSSH_6.1p1, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)
Ubuntu 10.04.4 LTS (Lucid) -- OpenSSH_5.3p1 Debian-3ubuntu7, OpenSSL 0.9.8k 25 Mar 2009 (No AES-GCM support)
Ubuntu 12.04.3 LTS (Precise) -- OpenSSH_5.9p1 Debian-5ubuntu1.1, OpenSSL 1.0.1 14 Mar 2012 (Supports AES-GCM)
Ubuntu 12.10 (Quantal) -- OpenSSH_6.0p1 Debian-3ubuntu1, OpenSSL 1.0.1c 10 May 2012 (Supports AES-GCM)
* Ubuntu 13.10 (Saucy) -- Version match: OpenSSH_6.2p2 Ubuntu-6, OpenSSL 1.0.1e 11 Feb 2013 (Supports AES-GCM)

EDIT: To turn it off, add this line

Code: Select all

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc

to your sshd_config file.

Mentioning Linux in a thread full of Microsoft fanboys? I applaud your bravado.

Honestly, I support Linux much more than I do Microsoft, despite the fact I use Windows computers at school and at home (I can't download large files without tying up the Internet connection at home )

[Oneracon]

Also Elop would consider ending Bing and selling off Xbox if made CEO.

Is he trying to out-fail Thorsten Heins?

The objection to ending XBox I can understand, but what's so bad about killing Bing?

[Aeken]

Is he trying to out-fail Thorsten Heins?

The objection to ending XBox I can understand, but what's so bad about killing Bing?

Bing's too connected to the rest of Microsoft's products to be let go so easily.

[Lemanrussland]

Is he trying to out-fail Thorsten Heins?

The objection to ending XBox I can understand, but what's so bad about killing Bing?

Eh. Xbox has been hemorrhaging money for several years now.

Microsoft is generating $2 billion per year in revenue from Android patent royalties, says Nomura analyst Rick Sherlund in a new note on the company.
He estimates that the Android revenue has a 95% margin, so it's pretty much all profit.

This money, says Sherlund, helps Microsoft hide the fact that its mobile and Xbox groups are burning serious cash.

For the past few years, Microsoft reported the revenue and operating losses of Entertainment and Devices, which was the group that housed Xbox, Windows Phone, and those Android royalty payments.

That group always seemed to be profitable, but Sherlund says it's largely because of the Android money.

Sherlund says that if you back out the Android profits, Microsoft is probably losing $2.5 billion on Skype, Xbox, and Windows Phone. Of that, $2 billion in losses are attributable to the Xbox platform.

Sherlund believes Microsoft needs to spin out Xbox. He sees it as an orphan group at Microsoft that doesn't really fit with anything it's doing.

Investors are blind to Xbox's struggles, says Sherlund, because they are "concealed by the hugely profitable Android royalties.

http://www.businessinsider.com/microsof ... es-2013-11

Their "Entertainment and Devices" division is mostly staying profitable due to Android patent royalty money.

[Regnum Dominae]

http://www.valuewalk.com/2013/11/apple- ... -explodes/

[Ainin]

http://www.valuewalk.com/2013/11/apple-inc-aapl-ipad-air-explodes/

What is it with Apple's new chargers? They seem bent on killing everyone.

[Aeken]

http://www.valuewalk.com/2013/11/apple-inc-aapl-ipad-air-explodes/

What is it with Apple's new chargers? They seem bent on killing everyone.

A decline on the quality of their products.

[Pandeeria]

What is it with Apple's new chargers? They seem bent on killing everyone.

A decline on the quality of their products.

Apple is slowly starting to crumble.

[Aeken]

A decline on the quality of their products.

Apple is slowly starting to crumble.

Oh yes.

[Ainin]

A decline on the quality of their products.

Apple is slowly starting to crumble.

Apple's creative energy died with Steve.

[Divair]

Now if only I were getting this instead of the 1520.

[Meritocratic States]

Now if only I were getting this instead of the 1520.

Damn it Microsoft.

You're making me regret getting an Android.

[Lordieth]

A decline on the quality of their products.

Apple is slowly starting to crumble.

I enjoy a good Apple crumble.

Apple will always have a market, but I don't think it will be mass market in the future.

[Czechanada]

Now if only I were getting this instead of the 1520.

Damn it Microsoft.

You're making me regret getting an Android.

You do know that is guy is unaffiliated with Microsoft?

[Meritocratic States]

Damn it Microsoft.

You're making me regret getting an Android.

You do know that is guy is unaffiliated with Microsoft?

I know it is a concept and the fella is unaffiliated.

[Divair]

Some more random concepts:
https://www.youtube.com/watch?v=tRVC4BKWaP8
https://www.youtube.com/watch?v=T6_sPuqWobQ
https://www.youtube.com/watch?v=AJRGexODxX0
http://www.1800pocketpc.com/wp_blue/