March 2015 - openSUSE Security - openSUSE Mailing Lists

[opensuse-security] Default system encryption key size is XTS 256 bits and not 512 bits
by John Ashcroft 30 Mar '15

30 Mar '15

Hello, I installed OpenSUSE 13.2 with the default YaST encryption settings. When examining the final product with "cryptsetup luksDump /dev/sda2" the encryption used was aes xts-plain-64 with a MK bits (key size) of 256 bits. Which is effectively 128 bits for XTS mode. There was no GUI way to change this in the installer. Most of the other distributions (Debian Jessie, Fedora 21, Ubuntu 14, CentOS 7) are shipping with a default key size of 512 bits (effectively 256 bits) for aes xts-plain-64 in their installers. Is this an omission in OpenSUSE or is there a policy for keeping system encryption at 256 (effectively 128) bits? Apologies if I couldn't pinpoint a prior message about this in the list. Thanks -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

3 4

[opensuse-security] cryptsetup syntax
by pinguin74 29 Mar '15

29 Mar '15

Apropos cryptsetup, I have a question regarding the command syntax. On the web, sometimes I see cryptsetup --cipher aes-xts-plain64 and sometimes I see cryptsetup --cipher aes-xts-plain64:sha256. Is adding :sha256 an equivalent to adding -h sha256 or is this somethin different? Is adding -h sha256 sufficient to chose the hash algo? What is the purpose off adding :sha256 at the end of the cipher algo? Once I even tried cryptsetup --cipher aes-xts-plain64:blubber -h sha256 and adding :blubber did not give an error message, it worked, this makes me wonder, if adding :foo does make any sense at all... Thanx

1 0

[opensuse-security] MSBA 27th, 2015
by MSBA 27 Mar '15

27 Mar '15

Good Afternoon. MSFC has posted the upcoming MSBA 27th event on NAIS and Fed Biz Ops (Solicitation No.: SB-70936). NAIS Posting: Please click on Mod. 1 Posting. Attached is the MSBA Agenda. Please join us for this event!

1 0

[opensuse-security] Microsoft Forefront Protection for Exchange Server detected a virus
by ForefrontServerProtection＠ifn.et.tu-dresden.de 26 Mar '15

26 Mar '15

Microsoft Forefront Protection for Exchange Server has detected a virus. Virus name: +ACI-JS/Nemucod.K+ACI- File name: +ACI-Court+AF8-Notification+AF8-00000591913.zip-+AD4-Court+AF8-Notification+AF8-00000591913.doc.js+ACI- State: +ACI-Removed+ACI- Subject line: +ACIAWw-opensuse-security+AF0- Notice to Appear in Court+ACI- Sender: +ACI-County Court+ACI- Scan job: +ACI-Scheduled+ACI- Location: +ACI-ifn/Exchange Administrative Group (FYDIBOHF23SPDLT)/ENTMPOST2 (Scheduled Scan Job+AFw-R+APw-diger Hartmann+AFwAXw-CERT-DFN-Heise+AF8AXA-sec+AF8-opensuse)+ACI- -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] Microsoft Forefront Protection for Exchange Server detected a virus
by ForefrontServerProtection＠ifn.et.tu-dresden.de 26 Mar '15

26 Mar '15

Microsoft Forefront Protection for Exchange Server has detected a virus. Virus name: +ACI-JS/Nemucod.K+ACI- File name: +ACI-Court+AF8-Notification+AF8-00000591913.zip-+AD4-Court+AF8-Notification+AF8-00000591913.doc.js+ACI- State: +ACI-Removed+ACI- Subject line: +ACIAWw-opensuse-security+AF0- Notice to Appear in Court+ACI- Sender: +ACI-County Court+ACI- Scan job: +ACI-Scheduled+ACI- Location: +ACI-ifn/Exchange Administrative Group (FYDIBOHF23SPDLT)/ENTMPOST2 (Scheduled Scan Job+AFw-R+APw-diger Hartmann+AFwAXw-CERT-DFN-Heise+AF8AXA-sec+AF8-opensuse)+ACI- -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] Pls come to our Jewelry show + Watch show
by Larry 25 Mar '15

25 Mar '15

Pls come to the 12th International Jewelry + Watch Vietnam (IJV) @ Ho Chi Minh City! www.vietnamjewelryshow.com 7 - 10 May 2015 The exhibition is open to retailers, wholesalers, importers, press and general visitors in the jewelry and watches business. If you are one of them, attend the 12th IJV: Jewelry and watches to experience a dynamic business-to-business interaction with international top-choice suppliers. Reap bigger profits by always keeping your product line fresh and attractive to customers. Source these products at IJV: K-gold jewelry 24K gold jewelry Loose diamonds Precious and semi precious stones Loose Pearls Synthetic stones and cubic zirconia Jewelry watches Fashion watches Complete Watches Parts & Components Machinery, supplies and tools Publications Team up with professional suppliers from major supplying countries. They can help take your business to the next level with quality products at reasonable price points and flexible delivery terms. The IJV show also presents manufacturers from other emerging Asian markets to broaden your supplier and product alternatives. The IJV show features will definitely create better opportunities for your business. Situated in the Ho Chi Minh city's key business district, Tan Binh Exhibition & Convention Centre is an ideal venue for global trade. The venue's proximity to the Ho Chi Minh International Airport also makes the exhibition center a top choice among thousands of frequent trade show visitors. The state-of-the-art venue is also equipped with ground-level and column-free halls, providing you with a truly comfortable sourcing experience. Brought to you by the jewelry trade fair specialists For more details, please contact us: Larry World Trade Fair (International) Ltd. Unit 1309, Shing Yip Industrial Building, No. 19-21 Shing Yip Street, Kwun Tong, Kowloon, Hong Kong P (+852) 2365-8119 F (+852) 3165-8447 Contact: sales(a)wtf.com.hk halopoto(a)tom.com -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] Are you interested in photo retouching?
by Harry 24 Mar '15

24 Mar '15

How are you? Are you interested in photo retouching or other photo editing solutions? We specialize in providing below photo retouching services: Photoshop photos editing/retouching Jewelry photos retouching Ecommerce products photo editing Photo cutting out/clipping path Beauty/skin retouching, Wedding photo editing and photo background manipulation. You can send us a photo for free testing and check our quality Waiting for your soonest response. Best regards, Harry Email: markedit(a)tom.com -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] Notice to Appear in Court
by County Court 19 Mar '15

19 Mar '15

Notice to Appear, This is to inform you to appear in the Court on the March 27 for your case hearing. Please, do not forget to bring all the documents related to the case. Note: The case may be heard by the judge in your absence if you do not come. You can review complete details of the Court Notice in the attachment. Kind regards, Craig Olsen, Clerk of Court.

1 0

[opensuse-security] Microsoft Forefront Protection for Exchange Server detected a virus
by ForefrontServerProtection＠ifn.et.tu-dresden.de 16 Mar '15

16 Mar '15

Microsoft Forefront Protection for Exchange Server has detected a virus. Virus name: +ACI-JS/Nemucod.F+ACI- File name: +ACI-00000384469.zip-+AD4-00000384469.doc.js+ACI- State: +ACI-Removed+ACI- Subject line: +ACIAWw-opensuse-security+AF0- Indebtedness for driving on toll road +ACM-00000384469+ACI- Sender: +ACI-E-ZPass Support+ACI- Scan job: +ACI-Transport+ACI- Location: +ACI-ifn/Exchange Administrative Group (FYDIBOHF23SPDLT)/ENTMPOST2 (SMTP Messages)+ACI- -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] Microsoft Forefront Protection for Exchange Server detected a virus
by ForefrontServerProtection＠ifn.et.tu-dresden.de 16 Mar '15

16 Mar '15

Microsoft Forefront Protection for Exchange Server has detected a virus. Virus name: +ACI-JS/Nemucod.F+ACI- File name: +ACI-00000384469.zip-+AD4-00000384469.doc.js+ACI- State: +ACI-Removed+ACI- Subject line: +ACIAWw-opensuse-security+AF0- Indebtedness for driving on toll road +ACM-00000384469+ACI- Sender: +ACI-E-ZPass Support+ACI- Scan job: +ACI-Transport+ACI- Location: +ACI-ifn/Exchange Administrative Group (FYDIBOHF23SPDLT)/ENTMPOST2 (SMTP Messages)+ACI- -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0