- Roundtable - muug.ca

Operational Technology Security Half-Day Remote Symposium April 6
by Vicki Nemeth 29 Mar '22

29 Mar '22

It's out of Regina, it's not too early in the day, and it's free! I can think of people in industry, infrastructure and manufacturing who I want to send this to. Topics covered include new US regulations, working with ancient machinery and lost source code, and a Log4j case study. On GoToWebinar. https://www.meetup.com/Regina-Cyber-Security-for-Control-Systems/events/284… Vicki -- VickiNemethWriter.com

1 0

We need to step up our server game!
by Bradford C. Vokey 29 Mar '22

29 Mar '22

Linus Tech Tips unboxes his new $1,000,000 server project... https://youtu.be/sl61lHwo3YE Does anybody have a spare million lying around? -- Bradford C. Vokey Treasurer Manitoba Unix User Group

1 0

Remotely exploitable netfilter
by John Lange 16 Mar '22

16 Mar '22

When you're firewall is the vulnerability, it's probably not good. Posting for awareness. https://nvd.nist.gov/vuln/detail/CVE-2022-25636 John

5 5

Reminder: MUUG Online Meeting, Tonight, Mar 8, 7:30pm -- Serverless Web Sites with AWS, tldr
by Gilbert E. Detillieux 08 Mar '22

08 Mar '22

A reminder that the MUUG online meeting will be on BBB this evening... The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting online, on Tuesday, March 8th, at 7:30pm: Serverless Web Sites with AWS What? How do you host websites without a server? Impossible? Join the meeting to find out! Wyatt Zacharias will take us through using AWS to set up so-called "serverless" web sites. RTFM: tldr(1) - a simpler alternative to man(1) This month, Brad Vokey will give us a quick demo of the tldr command that he introduced to us in the December 2021 newsletter (last page). tldr is a Python command-line client to the TLDR pages. The TLDR pages is a free and open-source collaborative software documentation project that aims to be a simpler, more approachable complement to traditional man pages. It's a collection of community-maintained help pages that covers command-line utilities and other computer programs. This will once again be an online meeting. Stay tuned to our muug.ca home page for the official URL, which will be made available about a half hour before the meeting starts. (Reload the page if you don't see the link, or if there are issues with connecting.) The group holds its meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board, or linking to it on social media: https://muug.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.ca> Manitoba UNIX User Group Web: http://muug.ca/

1 0

Re: [RndTbl] Old MUUG server up for grabs! ($$$)
by Adam Thompson 03 Mar '22

03 Mar '22

The high bid on the server was $719. If you believe you submitted a higher bid than that, that I’m ignoring or didn’t receive, let board@ know ASAP. -Adam From: Adam Thompson On Behalf Of athompso(a)muug.ca Sent: Tuesday, February 15, 2022 11:51 PM To: MUUG Roundtable <roundtable(a)muug.ca>; MUUG Announce <muug-announce(a)muug.ca> Cc: 'athompso(a)muug.ca' <athompso(a)muug.ca> Subject: Old MUUG server up for grabs! ($$$) We’re getting rid of the old server! It’s up for auction, to MUUG members in good standing only. We’re taking bids for the rest of the month by email. Emailed bids must be received by me no later than Monday 2022-Feb-28 23:59:59 to be considered eligible. We’re doing this as a “blind auction<https://en.wikipedia.org/wiki/First-price_sealed-bid_auction>”, where everyone submits their bid to me (Adam Thompson), and at the end of the bidding period, I’ll contact the highest bidder. If they’re unable to follow through for any reason, it goes to the second-highest bidder, and so on. We cannot issue a receipt for tax purposes. The MUUG board (excluding board members who entered bids themselves) shall be the only, and final, avenue of appeal for anything related to this auction. Since we already know some of the board is planning to bid, and I am not, send your bids to me directly: athompso(a)muug.ca<mailto:athompso@muug.ca> (or my usual address, they both wind up in the same place), and not to board@. Please provide name, email, phone#, and dollar amount. If you don’t receive a confirmation from me within a few days, post to roundtable letting me know something’s wrong. And/or try a different email provider.

1 0

MUUG Online Meeting, Tuesday, Mar 8, 7:30pm -- Serverless Web Sites with AWS, tldr
by Gilbert E. Detillieux 01 Mar '22

01 Mar '22

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting online, on Tuesday, March 8th, at 7:30pm: Serverless Web Sites with AWS What? How do you host websites without a server? Impossible? Join the meeting to find out! Wyatt Zacharias will take us through using AWS to set up so-called "serverless" web sites. RTFM: tldr(1) - a simpler alternative to man(1) This month, Brad Vokey will give us a quick demo of the tldr command that he introduced to us in the December 2021 newsletter (last page). tldr is a Python command-line client to the TLDR pages. The TLDR pages is a free and open-source collaborative software documentation project that aims to be a simpler, more approachable complement to traditional man pages. It's a collection of community-maintained help pages that covers command-line utilities and other computer programs. This will once again be an online meeting. Stay tuned to our muug.ca home page for the official URL, which will be made available about a half hour before the meeting starts. (Reload the page if you don't see the link, or if there are issues with connecting.) The group holds its meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board, or linking to it on social media: https://muug.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.ca> Manitoba UNIX User Group Web: http://muug.ca/

1 0

How do I bid for the server
by Ihor Jakowec 26 Feb '22

26 Feb '22

How do I bid. And more importantly for you, how do I pay. Is it noisy? Would you accept bids here. How about $100.05. my regards, Ihor Jakowec

2 1

Re: [RndTbl] [Muug] Old MUUG server up for grabs! ($$$)
by eh＠eduardhiebert.com 22 Feb '22

22 Feb '22

As somewhat of a policy wonk other than the non-existent means of a sealed bid until the close of bidding, I would like to express my kudos to the MUUG board in coming up with a good process involving minimal bureaucracy in liquidating retired equipment AND leaving it open to board members as well to be part of the bidding process. The one variant I suggest to avoid even the possibility of an appeal is that MUUG publish the winning bid dollar amount, or any further cascading amount, should any come into play. As each bidder knows their own number, this would eliminate nearly all possibility of appeals except for the error of an oversight or typo concerning the tally sheet of all bids. My further thanks to Adam as this does not come without a further voluntary time commitment. Eduard On 2022-02-15 22:58, MUUG meeting announcements wrote: > We’re getting rid of the old server! It’s up for auction, to MUUG > members in good standing only. > > We’re taking bids for the rest of the month by email. Emailed bids > must be received by me no later than Monday 2022-Feb-28 23:59:59 to be > considered eligible. > > We’re doing this as a “blind auction [1]”, where everyone > submits their bid to me (Adam Thompson), and at the end of the bidding > period, I’ll contact the highest bidder. If they’re unable to > follow through for any reason, it goes to the second-highest bidder, > and so on. We cannot issue a receipt for tax purposes. The MUUG > board (excluding board members who entered bids themselves) shall be > the only, and final, avenue of appeal for anything related to this > auction. > > Since we already know some of the board _is_ planning to bid, and I am > _not_, send your bids to me directly: athompso(a)muug.ca (or my usual > address, they both wind up in the same place), and not to board@. > Please provide name, email, phone#, and dollar amount. If you don’t > receive a confirmation from me within a few days, post to roundtable > letting me know something’s wrong. And/or try a different email > provider. > > The server is about 6yrs old, it’s a 1U rack-mount server from ASUS > with 12 x 4TB NAS HDDs, 2 x 2.5” SSDs, a Xeon (E3 v3) CPU, 32GB of > RAM, 2 x 1G & 2 x 10G(SFP+) ethernet ports. To reiterate that point, > we’re selling it with 48TB of mostly 5400rpm SATA “NAS”-type > hard drives (and two SSDs) included. All the drives will be ATA > Security Erased before you get the unit. > > (This could make an awesome 40TB FreeNAS unit for storing backups!) > > The winner can come pick up the server from my place in north > Winnipeg, where it’s currently stored. If you can’t come pick it > up, there are ways to get it to you but you might be on the hook for > delivery charges (modest, if you’re in Winnipeg). You’ll be > expected to get the server out of here by March 7th (one week after > bidding closes), one way or another. > > -Adam > > (see below for lots more words) > > Detailed server specs: > > * ASUS RS300-H8-PS12 [2] > > * 1U rack server > * integrated ASUS P9D-MH/SAS/10G [3] microATX motherboard > > * Xeon E3-1230v3 (any E3-1200v3 processor is supported) > * 32GB RAM (4 x 8GB DDR3 Unbuffered ECC) > * 1 low-profile PCIe slot is usable in this chassis using a riser > (included) > * 4 x SATA 6GB/s & 2 x SATA 4GB/s on motherboard, pre-wired to drive > bays > * 8 x SAS 6GB/s (supports SATA III) on embedded LSI2308 [4] > controller, pre-wired to drive bays > * 2 x Intel I210AT 1gbps ethernet > * 2 x Broadcom BCM57840 NetXtreme II 10gbps ethernet (see notes) > * Built-in ASMB7-iKVM [5] remote server management with dedicated > 100M ethernet port > > * integrated 400W 80PLUS Gold power supply – looks proprietary? > * 4 “warm-swap” carriers holding 3 x SATA HDDs each (see notes) > * Proprietary mounting rails are included > > * 12 x 4TB “NAS”-type HDDs. Mixture of WD RED, Seagate > IronWolf, and Hitachi something-or-other. > * 2 x 250GB SSDs. Intel 545S & Samsung 850 EVO > > NOTES > > * The HDDs range in age from original to recently replaced. > * The server must be powered off to replace drives, despite the fact > it looks like hot-swap at first glance. > * Linux bnx2x kernel driver bugs in some versions of some distros > affect the ability to use the onboard Broadcom NetXtreme II 10-gigabit > NICs. They’re fine in Debian 9, but unusable in Debian 10. > Believed to work fine under FreeBSD (FreeNAS) and other non-Linux > kernels… VMware is anyone’s guess. > * 1U rack-mount servers have fans running between 10krpm and 24krpm. > It will be very loud. > * It can only be operated horizontally (e.g. in a rack). It’s also > fairly heavy because of the 12x 4TB drives. > * The onboard video is, as is usual for servers, unsuitable for > desktop use. > * Original user manuals are provided. > * No warranty. There might be a bit of warranty on one or two > drives, but don’t count on it. Otherwise… It could die the moment > you plug it in. It could eat your family for breakfast while you’re > at work. It could start WWIII. MUUG guarantees nothing more than if > we take your money, you’ll get a very large quantity of > mostly-metallic molecules in the shape of a server. Having said all > that, it ran continuously for 6 years, the only things that died were > the various drives, and it was still working perfectly when I removed > from the rack at Les.net earlier this month. > > Pricing/value considerations: (all prices taken from Newegg.ca today) > > * E3-1230v3 goes for $300 today. A similar modern server CPU > (E-2124) runs $270. > * 32GB of Unbuffered DDR3 ECC goes for $190 today. 32GB of DDR4 ECC > runs $308. > * 4TB NAS HDDs go for $100 today. That’s normal pricing, no age or > scarcity effects. > * 1U “barebone” servers of a similar class/category run around > $440 today. (That one doesn’t have 12 x 3.5” bays, but… meh, > close enough.) > > So to rebuild this server with brand-new parts, you’d be looking at > almost $2200. THIS server, however, is used and there’s no > warranty, so… bid based on what it’s worth to you! > > > > Links: > ------ > [1] https://en.wikipedia.org/wiki/First-price_sealed-bid_auction > [2] > https://www.asus.com/ca-en/Commercial-Servers-Workstations/RS300H8PS12/ > [3] > https://www.asus.com/ca-en/Commercial-Servers-Workstations/P9DMHSAS10GDUAL/ > [4] https://docs.broadcom.com/doc/12351997 > [5] > https://www.asus.com/ca-en/Commercial-Servers-Workstations/ASMB7IKVM/ > _______________________________________________ > Muug-announce mailing list > Muug-announce(a)muug.ca > https://muug.ca/mailman/listinfo/muug-announce

2 1

Fwd: Can a pdf file itself be maleware Fwd: FW: remittance Message Payment Status Notification
by eh＠eduardhiebert.com 22 Feb '22

22 Feb '22

Hi, This is likely phishing spam and passing around for further information. Just opening an email without clicking on anything I understand can be safe. I would rather ask than be sorry. Is this also true of pdf files? If someone can open safely I would like to have a sense who is behind this one. Thanks, Eduard -------- Forwarded Message -------- SUBJECT: FW: remittance Message Payment Status Notification DATE: Wed, 19 Jan 2022 06:15:45 +0800 FROM: Accounting Clerk <michaelgarnett1233(a)gmail.com> Hello, Open Attached PDF to confirm remittance info. TRYR GROUP ACCOUNT Account clerk 11524 Scenic Hills Blvd -------------------------

9 16

Old MUUG server up for grabs! ($$$)
by Adam Thompson 16 Feb '22

16 Feb '22

We’re getting rid of the old server! It’s up for auction, to MUUG members in good standing only. We’re taking bids for the rest of the month by email. Emailed bids must be received by me no later than Monday 2022-Feb-28 23:59:59 to be considered eligible. We’re doing this as a “blind auction<https://en.wikipedia.org/wiki/First-price_sealed-bid_auction>”, where everyone submits their bid to me (Adam Thompson), and at the end of the bidding period, I’ll contact the highest bidder. If they’re unable to follow through for any reason, it goes to the second-highest bidder, and so on. We cannot issue a receipt for tax purposes. The MUUG board (excluding board members who entered bids themselves) shall be the only, and final, avenue of appeal for anything related to this auction. Since we already know some of the board is planning to bid, and I am not, send your bids to me directly: athompso(a)muug.ca<mailto:athompso@muug.ca> (or my usual address, they both wind up in the same place), and not to board@. Please provide name, email, phone#, and dollar amount. If you don’t receive a confirmation from me within a few days, post to roundtable letting me know something’s wrong. And/or try a different email provider. The server is about 6yrs old, it’s a 1U rack-mount server from ASUS with 12 x 4TB NAS HDDs, 2 x 2.5” SSDs, a Xeon (E3 v3) CPU, 32GB of RAM, 2 x 1G & 2 x 10G(SFP+) ethernet ports. To reiterate that point, we’re selling it with 48TB of mostly 5400rpm SATA “NAS”-type hard drives (and two SSDs) included. All the drives will be ATA Security Erased before you get the unit. (This could make an awesome 40TB FreeNAS unit for storing backups!) The winner can come pick up the server from my place in north Winnipeg, where it’s currently stored. If you can’t come pick it up, there are ways to get it to you but you might be on the hook for delivery charges (modest, if you’re in Winnipeg). You’ll be expected to get the server out of here by March 7th (one week after bidding closes), one way or another. -Adam (see below for lots more words) Detailed server specs: * ASUS RS300-H8-PS12<https://www.asus.com/ca-en/Commercial-Servers-Workstations/RS300H8PS12/> * 1U rack server * integrated ASUS P9D-MH/SAS/10G<https://www.asus.com/ca-en/Commercial-Servers-Workstations/P9DMHSAS10GDUAL/> microATX motherboard * Xeon E3-1230v3 (any E3-1200v3 processor is supported) * 32GB RAM (4 x 8GB DDR3 Unbuffered ECC) * 1 low-profile PCIe slot is usable in this chassis using a riser (included) * 4 x SATA 6GB/s & 2 x SATA 4GB/s on motherboard, pre-wired to drive bays * 8 x SAS 6GB/s (supports SATA III) on embedded LSI2308<https://docs.broadcom.com/doc/12351997> controller, pre-wired to drive bays * 2 x Intel I210AT 1gbps ethernet * 2 x Broadcom BCM57840 NetXtreme II 10gbps ethernet (see notes) * Built-in ASMB7-iKVM<https://www.asus.com/ca-en/Commercial-Servers-Workstations/ASMB7IKVM/> remote server management with dedicated 100M ethernet port * integrated 400W 80PLUS Gold power supply – looks proprietary? * 4 “warm-swap” carriers holding 3 x SATA HDDs each (see notes) * Proprietary mounting rails are included * 12 x 4TB “NAS”-type HDDs. Mixture of WD RED, Seagate IronWolf, and Hitachi something-or-other. * 2 x 250GB SSDs. Intel 545S & Samsung 850 EVO NOTES * The HDDs range in age from original to recently replaced. * The server must be powered off to replace drives, despite the fact it looks like hot-swap at first glance. * Linux bnx2x kernel driver bugs in some versions of some distros affect the ability to use the onboard Broadcom NetXtreme II 10-gigabit NICs. They’re fine in Debian 9, but unusable in Debian 10. Believed to work fine under FreeBSD (FreeNAS) and other non-Linux kernels… VMware is anyone’s guess. * 1U rack-mount servers have fans running between 10krpm and 24krpm. It will be very loud. * It can only be operated horizontally (e.g. in a rack). It’s also fairly heavy because of the 12x 4TB drives. * The onboard video is, as is usual for servers, unsuitable for desktop use. * Original user manuals are provided. * No warranty. There might be a bit of warranty on one or two drives, but don’t count on it. Otherwise… It could die the moment you plug it in. It could eat your family for breakfast while you’re at work. It could start WWIII. MUUG guarantees nothing more than if we take your money, you’ll get a very large quantity of mostly-metallic molecules in the shape of a server. Having said all that, it ran continuously for 6 years, the only things that died were the various drives, and it was still working perfectly when I removed from the rack at Les.net earlier this month. Pricing/value considerations: (all prices taken from Newegg.ca today) * E3-1230v3 goes for $300 today. A similar modern server CPU (E-2124) runs $270. * 32GB of Unbuffered DDR3 ECC goes for $190 today. 32GB of DDR4 ECC runs $308. * 4TB NAS HDDs go for $100 today. That’s normal pricing, no age or scarcity effects. * 1U “barebone” servers of a similar class/category run around $440 today. (That one doesn’t have 12 x 3.5” bays, but… meh, close enough.) So to rebuild this server with brand-new parts, you’d be looking at almost $2200. THIS server, however, is used and there’s no warranty, so… bid based on what it’s worth to you!

1 0