I have been trying to figure out some way of installing Squeeze with some assurance that the new installation won't be pwned from Day One--- and so far I have had no success. Even worse, I have been having some strange problems using SSL in my existing Lenny installation which has been further hampering my efforts. And which may be consistent with the hypothesis that I am in fact being subjected to an on-going MITM attack when I try to install Squeeze over the net. This possibility has encouraged me to keep trying to take reasonable steps to ensure that key binaries in my forthcoming Squeeze have not been tampered with by the time I finish the initial installation. I am seeking steps that can be taken by an average user willing to follow directions written by an expert user.
I found a very interesting recent Debian Security mailing list thread which articulates some of the same concerns that I tried to express several weeks ago. The scenarios which concern Naja Melan and myself (and ???) should not simply be dismissed as too implausible to be worth trying to prevent. I think Melan's thread is rather prescient in view of "Comodogate":http://arstechnica.com/security/news/20 ... estion.ars https://www.eff.org/deeplinks/2011/03/i ... lent-https http://www.wired.com/threatlevel/2011/0 ... ompromise/ http://www.theregister.co.uk/2011/03/23 ... forgeries/ http://blogs.comodo.com/it-security/dat ... ompromise/ http://www.techeye.net/security/firefox ... rtificatesOne of the fake certs acquired by the bad guys would have enabled them to mount a MITM attack on anyone trying to install updates to Iceweasel/Firefox add-ons via addons.mozilla.org, which I think certainly suggests that the alleged state actor intended to tamper with at least some software.
(EDIT: important new developments in that story:http://erratasec.blogspot.com/2011/03/c ... festo.html http://www.thetechherald.com/article.ph ... y-attacker http://www.theregister.co.uk/2011/03/28 ... aks_cover/ http://arstechnica.com/security/news/20 ... o-hack.arsBriefly, an anon who claims to be Iranian and who claims to have acted alone, and who suggests that he has some connection with political dissidents inside Iran, has claimed to have been the Comodo affiliate cracker. At least one pentester finds the claim plausible. It woudl explain several aspects of the breach which did not appear consistent with Comodo's conclusion that the breach was sponsored by the Iranian government.)
I am still running the linux-image-2.6.32-5-686 kernel a computer with squeeze. I installed squeeze on it when it was unstable. I would like to bring up to the new stable state.Should I do apt-get install linux-image-2.6.32-5-686or should Iapt-get dist-upgrade
Anyone attempting to install Debian Squeeze from CD-1, or Debian-live DVD will want to know how to verify the file with MD-5, SHA-256 and (available for some versions only) SHA-512 checksums of the iso images, using the appropriate signing key. But there are no instructions that I can find in the Debian CD FAQ, which simply points users at the archive keyring. Now according to this message, as of 9 Feb 2011 the Debian Squeeze archive signing key has fingerprint 9FED 2BCB DCD2 9CDF 7626 78CB AED4 B06F 4730 41FA
The Debian signing key website gives the archive signing key as the master key, and (this addresses the problem I raised elsewhere) even makes it available via https. That sounds good! Just one problem: the detached signatures for files such as url
which gives the SHA-256 sum for url
have been signed with a different key, which has fingerprint DF9B 9C49 EAA9 2984 3258 9D76 DA87 E80D 6294 BE9B
No wonder I am confused! And it seems that I may not be the only one; others seem to be confused also.
If no-one at the Debian mailing list can explain what is going on, I have little hope that anyone here will be able to clear this up, but I'll ask anyway: what are all the Debian related GPG keys and where do you find them all? is it true that there are different keys needed to verify CD iso images and debs? (And... what else?) where do you go to obtain all the lastest Debian keys via https? (This is important as it can hinder MITM attacks by lone crackers, assorted crooks, maybe even state actors, etc.; the "Comodogate" story provides clear evidence that there are people or organizations interested in mounting MITM attacks on persons downloading open-source software). in particular, it is sometimes convenient to use a live-CD to download an iso image (for example, when you no longer trust the system you are trying to upgrade!) and then one wants to use GPG to check the file with the checksum, so one needs to quickly locate and import into the GPG keyring of the (temporary) live-CD session the correct key; so where can I find the CD-signing key availalble via https? shouldn't the CD FAQ explain all this?
how to install Dropbox for Debian Squeeze from source.Please read everything before you begin. I prepared it as I installed Dropbox for my own system. Please Note: I use sudo, you may have to use root or 'su' from the command line. If you don't know the difference between sudo and su, then you shouldn't try this until you know. At the time I did this, the lastest dropbox version was 0.6.7.
Below is the recipe I've used to compile dwm from source on Squeeze
su apt-get install devscripts debian-keyring apt-get build-dep dwm exit
It all seems to work, however debuild gave an error about secret keys. Is this a sensible procedure? What happens in the (probably unlikely) event there is another source patch?I've gone to a tiling window manager as the result of the purchase of a wide screen LCD monitor. I like to have some stuff down the right hand side when running Firefox and OpenOffice in the main panes. Any configuration tricks welcome. Modern screens are the wrong shape!
I've just install debian squeeze version, or the testing one, but I am not really happy with it. Is not listening me all the time. If I install the debian stable I don't have internet connection. Is it possible to update the kernel somehow using the testing version?
I have been trying to install a command line Debian Squeeze system on n Eee PC 701., but have run into a number of problems:
1) All install info I can find assumes that the person wants to install a GUI system of some sort. 2) The Eee PC has a unique 2 MB. partition that needs to be preserved, so no guided install. 3) The Eee PC has an SSD instead of an HD. Most postings I have seen recommend an install without a swap partition, but the install (both live and text) seems to choke and despite a fresh formatting of the existing partition, claims to be overwriting existing files. 4) I can understand from the wiki that the Eee PC wireless driver (Atheros) should be included in Squeeze, but when the wireless connection and password is added, the installer claims that the password is not correct, despite me having checked it a number of times.
I hope someone can help me out. I just want to use the Eee PC for low resource stuff done on the cli like using a text based web browser to access the net through a wireless router and to hook it up to an external USB HD and to my stereo, to play my music collection.
I installed Firestarter firewall on debian Squeeze.Now i note there is a gui available in System->Administration which apparently does not need to be running all the time - its not set up to start on boot.When I boot I notice the boot message has a line saying "Starting Firestarter firewall .... failed"When I am logged in and type "/etc/init.d/firestarter status" as the Firestarter FAQs say, I get"Firestarter is running... ... (warning)"I can run the gui manually and still same message.
I just a newbie.i want to try customize my desktop.i found a website shown linux desktop very greatfull, like this :but i don't know how to start it.any expert guys please let me know the guiding for me to start this.
I installed Debian Squeeze with no issues. I went to install latest Nvidia driver as done previously with Lenny. Used instructions that worked on lenny from "the trooper" [url]
Downloaded th latest driver for my GeForce 7300 GS vidio card, driver package NVIDIA-Linux-x86-260.19.12.run
Used "method # 2 as described in HOW TO,as it worked perfectly in the past on Lenny. Only syntax I changed was instead of gdm I typed gdm3 as it appears that is the new name for gnome in Squeeze.
Did as folows:
Now the trouble showed up, Unfortunatly I can only go off my memory. A question was asked stating that something did not match, it needed a 3 and the driver had a 4 version or somethng of this sort. then it asked if I new what I was doing (and I lied) and selected yes. And whammo, it didn't work. (This question was asked when i did in Lenny and it is working perfectly still on that system). I now can not boot to GUI, I notice when system boots it starts in "S" mode although I select normal boot from grub2.
Not too bad if I got to reinstall as little is on the system. I just want to know what I am missing on the instalation deal or should I be going about this difrently with Squeeze.
This topic began in the Debian Development forum here I have successfully completed both the install and the after installation configuration. I have a fully functional system on this little baby, inspite of the fact that wireless (Broadcom bcm4312), ethernet (Realtek) and sound were initially broken.
There is a lot of assistance out there on the web. In the previous thread, I was having trouble installing any debian on a usb stick. The issues that needed resolving were 1. Bad stick
2. Incompatible kernels between boot.img and .iso
3. The method of copying .iso to the stick that finally worked was wget My first successful usb install was Lenny. Even though I upgraded the stock system with lenny-backports, I could not get wireless, ethernet or sound working the only connection I could get to the internet was through my 3g stick and that was not performing up to it's capability. I manually configured wvdial to get that working.
I attempted an upgrade to squeeze several times and each time the upgrade trashed the system. I finally found squeeze boot.img and .iso files from an eee pc blog. This allowed a fresh install of Squeeze and I was making progress. The little atom processor would not handle the b43-fwcutter driver, so I compiled one from the Broadcom site written especially for the atom processor. Now I had cable broadband supplied wireless. I got my ethernet working with help from the Gnome site technical specs on Network Manager. Simply changing ifupdown=false to ifupdown=true in the network manager config file.
Sound was activated by help from a blog entitled "Debian on the Dell Mini 9" My head is spinning now or I would be more specific and instructive on all I did to get this baby up and running. If anyone asks, I may do a how-to.
PS: Posted from that Dell Mini 9 running Debian Squeeze.
Debian Lenny worked just great. That was my first experience of Debian. The installer recognised all my hardware and the system was soon up and running brilliantly with a few tweaks. Confident of Debian's reliability, I decided to move to Debian 6 and did a fresh install, with downloads of the new operating system rather than a distribution upgrade. The installation routines have not worked for the same computer system. I don't know if its hardware not being recognised by Debian 6 that were recognised without a problem by Debian 5??
At first, the boot-up flipped at "Waiting for /dev to be fully populated," there was a kernal panic then Debian disappeared. No signal was sent to the monitor and I had to switch off the computer manually I was able to look into the Debian 6 OS from Arch Linux, installed on different partitions of the same hard-drive. I am able to overwrite the Debian files as root from Arch. My i686 machine has PATA IDE drives.
Why are 2) dbus and the 3) avahi-demon failing? I need to get them started first so that I can get an internet connection and try and correct the problem with X and the wrong Nvidia driver. Is there some configuration I can do either from Arch, where I am now, or the bash prompt on Debian? Thanks in advance.
I want to install VGA driver on debian squeeze. my VGA is "Intel Corporation 82G33/G31 Express Integrated Graphics Controller".I do not know which driver I must install for this VGA.Does Linux recognize related driver ?
Once in kde, after an undefined time (can be minutes or hours), mouse cursor start to have a fixed shape (if i am in iceweasel on a link, the mouse can get locked with the hand shape). In this state, the mouse cursor can still be moved, but no program can be launched or closed (X) in kde. I still can launch a new console now (ctrl+atl+F2), "ps" don't show any process consuming cpu (all processes are near 0). "sensors" shows 55*C. Other commands as "kill" going to lock, they don't work and at the same time they don't return the cursor to the shell.
On my squeeze OS I have texlive-latex3 installed and I wanted to install revtex package of the American Physical Society. While trying to install I was prompted to run #unzip revtex4-1-tds.zip -d /usr/local/texlive/texmf-local/ However my machine does not have /usr/local/texlive/texmf-local/ Instead it has /usr/local/share/texmf/ Will it be all right if I insert this location after -d ?
i screwed up a good debian install with wine. before i do it again i want to know what the best way to get and install wine . AMD 64, toshiba L645D laptop with 3G ram. ATI radon openGL . I read several pages and seems they suggest to compile from source (which i can do i think). others say to use aptitude .
I have not been able to write to DVDs since the install except for once when luck seemed to play more a part than anything else. Does anyone have a fix for this?Well, after letting it sit and sit and sit, it looks like it does write the data. But, it's writing about 1/2 of a DVD for just 2 500K files.
User familai with amd64 for computational chemistry and i386 for desktop. Seeking advice from users who succeeded in arranging a laptop with Debian squeeze or lenny, wireless LAN, 3D acceleration video, flash for speech. The laptop WITH STANDARD USA KEYBOARD should be available from European market resellers.
I searched the forum for this, but didn't find anything about it: when I try to shut down the computer, it returns to the login screen. When I log back in and shutdown again, it shuts down.Squeeze works perfectly, but this is the only thing that doesn't work like it should. Is this a setting I should change somewhere?
After upgrading to Squeeze, which comes with kernel 2.6.32, my system encountered DRM error and booted up with a blank screen. This happened intermittently. Searches on the Web did not give a definite answer. It seemed there was a bug in the kernel and this was cleared since 2.6.31 but I am using 2.6.32.
When I try to run GNOME, X gives me "Failed to start the X-server" etc and something about "not detecting screens." and if I try to run KDE it just hangs with the _ blinking waiting for the next command. I only tried out KDE to see if it was a GNOME problem. I uncommented the stuff in /etc/X11/xorg.conf (because I had them previously commented out) but that doesn't help. I'm stuck with a GUI-less computer now . What can I do about this? If more information is needed, do not hesitate to ask.