Rispondi 
 
Valutazione discussione:
  • 0 voti - 0 media
  • 1
  • 2
  • 3
  • 4
  • 5
any updates to this distro?
24-08-2019, 19:19
Messaggio: #1

Big Grin any updates to this distro?
At http://www.liberainformatica.it/isos-of-uplos/ all I see is files from 2017.

Considering that it is 2019, are there any updates or is this project dead?

Please and thank you
Trova tutti i messaggi di questo utente
Cita questo messaggio nella tua risposta
24-08-2019, 19:44
Messaggio: #2

RE: any updates to this distro?
From 2017 are safe updates, many updates are in test, devel and adriano.repo + tele.repo. you have a look here https://ftp.nluug.nl/os/Linux/distr/uplos/32bit/
Uplos is not dead, we have problem about transferring updates from mega to nluug and about testers. Any help is appreciated.
For your information I have uplos with all test section upgraded with any issue.
Other packages are awaiting on mega, I often write here direct links about browsers, office and so on
Trova tutti i messaggi di questo utente
Cita questo messaggio nella tua risposta
25-08-2019, 20:09 (Questo messaggio è stato modificato l'ultima volta il: 25-08-2019 23:54 da tele.)
Messaggio: #3

RE: any updates to this distro?
It is a bit dead because it has not been updated for a long time.
But we still hope to develop it Shy

The main problem is time allocation.
I have to divide my private life and hobby time accordingly.
Therefore, the repository is temporarily disabled.

But work is still ongoing.
I would call it service work.
- I replaced the disk 3,5" with two disks 2,5" mounted with two slats in a sled.
- I have 3 or 4 operating systems but I haven't finished configuring everything.
- I read a lot about security, so I'm also improving https://github.com/tele1/Mur/
(to automate some things, to improve this tool and improve the security of my own system)
Maybe even I read too much,
because it takes the most time to search
and no matter what you are looking for.

Most interesting things found recently:
https://www.youtube.com/watch?v=q3dPih_8Cro
It shows how a virus can hide its communication
and how such communication can be difficult to detect.
The video shows methods for detecting such communication.
I found one example https://inside-out.xyz/technology/how-dn...works.html
But something is wrong because the rules are "INPUT". But we wanted to block the exit ("OUTPUT").
But the virus may want to try to both send data and receive commands from outside.
It's best to test this in practice. Log communications, send such a data packet and check if the iptables rule will work.
I haven't checked yet.

There are still a few things to check.
Other firewalls that are also on github.
Which algorithm for creating checksums is better for long data strings.
And maybe what else I don't remember now.

Last time I found also something this https://sourceforge.net/p/lnxesyadmutil/...ster/tree/

And something this https://www.hackingarticles.in/understan...an-part-1/
Some of the rules in the guides are slightly different, some guides are old and outdated.
I also tried to register for two popular ones
linux forums for more advice advanced users, but to no avail.
However, in my opinion this is the best guide
recently found
because it also shows how to test the firewall's effectiveness.

The package building process itself is not easy either, some things need to be improved.
Through hell dependencies we have more work, because some packages need to be rebuilt each time with new dependencies.
I don't know how to improve it for now.

Curiosity: New firefox 68 does not allow you to transfer settings without creating their online account.
But the most important are probably the bookmarks and you can import them from Firefox.

As you read earlier, summer was very hot
it also bothered a bit.

For now I can't specify when there will be fresh packages. I promised too much and nothing came out.
For now I can upload only the "sas" script (simple audit tool on github in "Mur")
There is no "PAM" there because I also need to read how it should work.

A lot of work, time is running out, life is brutal and we have to live with it.


Edit
Something else about DNS.
Here is a different solution. https://gist.github.com/thomasfr/9712418
Incoming calls and outgoing calls are only available for the specified ip.
This is the easiest way.
In this case (in this script), the IP used is from "DNS_SERVER" variable.
But the comment suggests he took IP to variable from the /etc/resolv.conf file.
Trova tutti i messaggi di questo utente
Cita questo messaggio nella tua risposta
03-09-2019, 16:33
Messaggio: #4

RE: any updates to this distro?
Ok.

Why not update it now and then release security updates after you fix them?

Please and Thank you
Trova tutti i messaggi di questo utente
Cita questo messaggio nella tua risposta
03-09-2019, 23:45 (Questo messaggio è stato modificato l'ultima volta il: 03-09-2019 23:48 da tele.)
Messaggio: #5

RE: any updates to this distro?
What do you mean "it" ?

Updating the system is not easy and will take some time.
Especially if the process is still not fully automated and process needs corrections.
Taking care of your own safety and the safety of others is also important.
Is a few things to look out for.
- Firewall. Now I know may fail. (outdated packages, hardware vulnerabilities, leaking firewall)
- Advanced Intrusion Detection Environment (for example AIDE)
- During burglary all traces may be removed. So email and scripts should also be configured (for example logwatch)
Bypassing the safety rules is not recommended, because then you cannot detect the danger.
It is better to do everything carefully.
But I know there are also things that may be too difficult to do and should be omitted.
Time is brutal and won't wait. We can try hard things later.
But everything must be calculated wisely.

However nice you asked. it's always an extra motivation to work and a moment to think.
Trova tutti i messaggi di questo utente
Cita questo messaggio nella tua risposta
04-09-2019, 00:55
Messaggio: #6

RE: any updates to this distro?
Since everyone can trust on youselfes, @trpted can download and install it from my link https://mega.nz/#F!lV9ByCKL!GKLyfB1dvg8vPqV5oBB2dA
My advice it is to use it with carefully, only one at once. Open synaptic and go to repositories, check only one every time.
Trova tutti i messaggi di questo utente
Cita questo messaggio nella tua risposta
Rispondi 


Vai al forum:


Utente(i) che stanno guardando questa discussione: 1 Ospite(i)

              Scrivici   Home   Top   Visualizza contenuti   Feed