RE: virus and CVS issues

RE: virus and CVS issues

[Eric.D.Friedman]

I respectfully submit that it's time to revisit the "you must be subscribed
to post" issue.  I know it's been ruled out before, but things have changed
since then, and not for the better.

Eric

-----Original Message-----
From: Oliver Kiddle [mailto:okiddle@yahoo.co.uk]
Sent: Thursday, June 26, 2003 9:24 AM
To: Zsh users
Subject: virus and CVS issues


I contacted sunsite.dk people about the recent virus problem and
received this in reply:

> Hi,
> 
> I have updated our virus signature database which had become ancient.
> Please let us know if it helps.
> 
> We can also set up qconfirm in front of the lists (or some of them, if
> you wish). qconfirm is a tmda-like system which is written in C for
> speed.
> 
> In the hopefully not too distant future we will also upgrade some
> machinery which will enable us to run spamassassin and thereby shoot
> down even more spam.

Hopefully that helps. I'm increasingly thinking that qconfirm, at least
for the users list would be a good idea. Especially if we get another
virus outbreak like this one.

Since I was e-mailing them anyway, I also enquired about CVS hosting
(problems with CVS currently being discussed on -workers). Response
on that issue was:

> Sure.. No problem.. We can host your cvs repository and we can make
> daily snapshots how ever you would like them to be. If you need other
> features I'm almost sure we can figure something out.
> 
> As I said above we will be upgrading some hardware soon (sorry - can't
> give an exact date yet). This will mean some structural improvements to
> most of the systems we have set up. If you'd like to we will happily
> take in your cvs repository before the upgrade but I think that I would
> recommend that you wait for the upgrade to happen to ensure the most
> smooth migration. But that all depends on how desperate you are ;-)
> 
> As always; if you have questions please don't hestitate to ask them.
> Here or on IRCnet channel #sunsite.

So with the daily snapshots not being a problem, that could be a good
option. Perhaps if we wait till sunsite have the new hardware and if SF
still has issues then, we can switch. Sound okay?

Oliver

Re: virus and CVS issues

[David Gómez]

Hi,

> I respectfully submit that it's time to revisit the "you must be subscribed
> to post" issue.  I know it's been ruled out before, but things have changed
> since then, and not for the better.

I think too that it should be reconsidered by the list admins to force
list subscription, although it's a problem for people that post occasionally
and don't want to receive all the mails, zsh lists have low traffic, and always
is better that way that the not very efficient spam system at sunsite. Last
two messages flooding was really too much :(


-- 
David Gómez

"The question of whether computers can think is just like the question of
 whether submarines can swim." -- Edsger W. Dijkstra

Re: virus and CVS issues

[David Gómez]

Hi Cristopher,

> I will reiterate my offer to set up the zsh repository and mailing lists
> at sources.redhat.com (aka sourceware.org) if anyone is interested.
> 
> We can offer cvs, web, ftp, and aggressively spam blocked mailing lists.

I hope that whoever can take that decision, chooses to change the list
to sources.redhat.com. I'm subscribed to another sources.redhat.com mailing
lists and always received almost zero spam.

And while that happens, the virus is still flooding the lists and nobody
does nothing :(

> IIRC, the last time I offered this, it wasn't well received, but, what
> the heck, I'm a glutton for punishment.

Thanks for the offer anyway ;)

-- 
David Gómez

"The question of whether computers can think is just like the question of
 whether submarines can swim." -- Edsger W. Dijkstra

Re: virus and CVS issues

[Peter Stephenson]

Christopher Faylor wrote:
> IIRC, the last time I offered this, it wasn't well received, but, what
> the heck, I'm a glutton for punishment.

It's helpful, but at the time we didn't feel the need to move.  It's
still not clear it's worth all the pain, but if Sourceforge continues to
be stodgy we may need to.

pws


**********************************************************************
The information transmitted is intended only for the person or
entity to which it is addressed and may contain confidential 
and/or privileged material. 
Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by 
persons or entities other than the intended recipient is 
prohibited.  
If you received this in error, please contact the sender and 
delete the material from any computer.
**********************************************************************

Re: virus and CVS issues

[Christopher Faylor]

I will reiterate my offer to set up the zsh repository and mailing lists
at sources.redhat.com (aka sourceware.org) if anyone is interested.

We can offer cvs, web, ftp, and aggressively spam blocked mailing lists.

IIRC, the last time I offered this, it wasn't well received, but, what
the heck, I'm a glutton for punishment.

cgf

Re: virus and CVS issues

[David Gómez]

Hi Peter,

> As Oliver indicated, the people who run the mailing list don't usually
> read it but he will ask them to run qconfirm so that automatically sent
> messages from people not subscribed won't appear on the list.

I'm glad to hear that

> However, it's odd that this list is so badly affected.  If it means
> there are now plenty of Windows users using zsh, then it's possible some
> of the viruses actually came from people who *are* subscribed.

It seems the virus resends itself again and again using different from address
:(

-- 
David Gómez

"The question of whether computers can think is just like the question of
 whether submarines can swim." -- Edsger W. Dijkstra

Re: virus and CVS issues

[Peter Stephenson]

David =?iso-8859-15?Q?G=F3mez?= wrote:
> By the way, who is the admin of zsh-users and zsh-workers mailing lists? Is
> it you Peter, or Bart?

As Oliver indicated, the people who run the mailing list don't usually
read it but he will ask them to run qconfirm so that automatically sent
messages from people not subscribed won't appear on the list.

However, it's odd that this list is so badly affected.  If it means
there are now plenty of Windows users using zsh, then it's possible some
of the viruses actually came from people who *are* subscribed.

pws


**********************************************************************
The information transmitted is intended only for the person or
entity to which it is addressed and may contain confidential 
and/or privileged material. 
Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by 
persons or entities other than the intended recipient is 
prohibited.  
If you received this in error, please contact the sender and 
delete the material from any computer.
**********************************************************************

Re: virus and CVS issues

[David Gómez]

> Oliver Kiddle wrote:
> > Hopefully that helps. I'm increasingly thinking that qconfirm, at least
> > for the users list would be a good idea. Especially if we get another
> > virus outbreak like this one.
> 
> This looks like it's probably inevitable, even if it means separate
> zsh-users and zsh-workers subscriptions.

By the way, who is the admin of zsh-users and zsh-workers mailing lists? Is
it you Peter, or Bart? Whoever it is, PLEASE make subscription a requirement
to post to the lists. This virus thing is a bad joke that nobody seems to
worry about and solve, so the best solution is to make the lists closed for
posting to non-subscriptors.

It's a pity to have to leave this lists, as another people already did, just
because this virus/spam thing :(


-- 
David Gómez

"The question of whether computers can think is just like the question of
 whether submarines can swim." -- Edsger W. Dijkstra

Re: virus and CVS issues

[Peter Stephenson]

Oliver Kiddle wrote:
> Hopefully that helps. I'm increasingly thinking that qconfirm, at least
> for the users list would be a good idea. Especially if we get another
> virus outbreak like this one.

This looks like it's probably inevitable, even if it means separate
zsh-users and zsh-workers subscriptions.

> Since I was e-mailing them anyway, I also enquired about CVS hosting
> (problems with CVS currently being discussed on -workers).

Worth thinking about, but I'm not completely convinced this is going to
be better.

-- 
Peter Stephenson <pws@pwstephenson.fsnet.co.uk>
Work: pws@csr.com
Web: http://www.pwstephenson.fsnet.co.uk

virus and CVS issues

[Oliver Kiddle]

I contacted sunsite.dk people about the recent virus problem and
received this in reply:

> Hi,
> 
> I have updated our virus signature database which had become ancient.
> Please let us know if it helps.
> 
> We can also set up qconfirm in front of the lists (or some of them, if
> you wish). qconfirm is a tmda-like system which is written in C for
> speed.
> 
> In the hopefully not too distant future we will also upgrade some
> machinery which will enable us to run spamassassin and thereby shoot
> down even more spam.

Hopefully that helps. I'm increasingly thinking that qconfirm, at least
for the users list would be a good idea. Especially if we get another
virus outbreak like this one.

Since I was e-mailing them anyway, I also enquired about CVS hosting
(problems with CVS currently being discussed on -workers). Response
on that issue was:

> Sure.. No problem.. We can host your cvs repository and we can make
> daily snapshots how ever you would like them to be. If you need other
> features I'm almost sure we can figure something out.
> 
> As I said above we will be upgrading some hardware soon (sorry - can't
> give an exact date yet). This will mean some structural improvements to
> most of the systems we have set up. If you'd like to we will happily
> take in your cvs repository before the upgrade but I think that I would
> recommend that you wait for the upgrade to happen to ensure the most
> smooth migration. But that all depends on how desperate you are ;-)
> 
> As always; if you have questions please don't hestitate to ask them.
> Here or on IRCnet channel #sunsite.

So with the daily snapshots not being a problem, that could be a good
option. Perhaps if we wait till sunsite have the new hardware and if SF
still has issues then, we can switch. Sound okay?

Oliver