Security issue in Beginner's Guide

In this guide:
http://wiki.archlinux.org/index.php/Net … fter_login
Regarding this script:
$!/bin/sh
echo PASSWORD | /usr/bin/pam-keyring-tool --unlock --keyring=default -s
It seems awfully insecure to have my password stored in a plaintext file.
Is there a better way to have NetworkManager start up upon boot without asking for a password or WPA key?
Last edited by YAOMTC (2010-03-15 01:49:41)

It's a wiki. You can fix it yourself.

Similar Messages

  • About "kernel.exec-shield" and "because they will bring security issue" for linux ASE

    In " ASE Quick Installation Guide for Linux", "kernel.exec-shield=0" and  “kernel.randomaize-va-space=0” should be set.
    But SuSE engineers say that  “kernel.exec-shield=0”and “kernel.randomaize-va-space=0” will bring the OS security issue.
    Customer want to know why ASE need the above parameters ?
    Has anybody the idea for customer's question?

    If the parameters are not set as documented, attempts to start additional engines beyond the first one will fail, generating stack traces.
    ASE acts in many ways like it's own operating system, scheduling individual user connections (spids) to actively run (note that ASE was developed well before native threading was commonly available).  Each spid has it's own stack information that gets swapped in when it is set to "running" state on the engine and swapped out when it yields the engine.  The mechanics of this is not that different from the buffer overrun exploits described in the Red Hat document linked to by the
    install guide, http://www.redhat.com/f/pdf/rhel/WHP0006US_Execshield.pdf
    and the exec-shield mechanics definatately interfere ASE's operations when ASE is using multiple dataserver processes (engines) that swap spids around.
    -bret

  • HT1725 Message says Apple ID is Disable how do I fix this. I changed my password 4 times already. It's not a security issue  Please help me. Thank you

    Please help me ever since the update every time I try to order an App I get a message saying "Apple ID I'd Disable" I've changed my password 4 times And changed my credit card also I don't think it's a security issue. Thank you

    Hi Melivan!
    I have an article here that can guide you through some steps for dealing with your disabled Apple ID:
    Apple ID: 'This Apple ID has been disabled for security reasons' alert appears
    http://support.apple.com/kb/ts2446
    Thanks for coming to the Apple Support Communities!
    Cheers,
    Braden

  • Safari unexpectedly quit with warning of Security Issue

    Safari unexpectedly quit with warning of Security Issue.
    A window appeared that said,
    "Safari Alert
    Suspicious Activity Might have been detected
    Major Security Issue
    To Fix it please call Support for Apple 1-800656-8559 (Toll Free) Immediately
    Browser can't connect to the Server"
    I did not believe this message and went to Apple support using Firefox and found the answer by stedman1, under a previous submission by mjbaur.
    I just want to complement stedman1 and make sure he gets some points.

    SCAM
    NEVER follow instructions
    use another browser
    The Safe Mac » Adware Removal Guide
    download and run AdwareMedic
    be safe when visiting SOME websites - in cahoots OR have been hacked
    ÇÇÇ

  • Security issue? BB Bridge 2.1.0.32 and .24

    Hi,
    I don't know if this is a security issue, but I find it strange.
    What happened? 
    I had access to my smartphone's email app from the Playbook and was able to read the mail, before I entered my PIN-code (sim access, not the BB-pin), after reboot of the smartphone (just installed Bridge 2.1.0.32).
    I'm assuming the PIN also should not only protect access to a network, but also to the smartphone itself. 
    This is possible with BB Bridge 2.1.0.32 and .24.
    Should this be 'normal' or not?
    What is RIM's intended design at this point?

    ON the 9800, delete the Bridge app from Options > Device > Application Management.
    Do a simple reboot on the BlackBerry in this manner: With the BlackBerry device POWERED ON, remove the battery for a minute, and then reinsert the battery to reboot.
    Then, download and again install the Bridge app from AppWorld.
    On the PlayBook, delete the current pairing with the 9800,
    Restart the PlayBook by touching the battery icon at the upper right > Restart.
    once the 9800 is rebooted per above, re-pair and try again.
    1. If any post helps you please click the below the post(s) that helped you.
    2. Please resolve your thread by marking the post "Solution?" which solved it for you!
    3. Install free BlackBerry Protect today for backups of contacts and data.
    4. Guide to Unlocking your BlackBerry & Unlock Codes
    Join our BBM Channels (Beta)
    BlackBerry Support Forums Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Printing the Beginner's Guide

    Hello,
    Maybe I did something wrong?  I wanted to print the "Beginner's Guide Wiki" for reference.  Using FF3 (from a different machine), I clicked on the "Printable Version" link, and proceeded to print.  The regular text of the Wiki printed fine.  However, the boxes (outlined in dashes) that contain the commands to enter did not print.  I just have blank spaces where the command line text should be.  One of the main reasons that I wanted to print the wiki was to have this information readily available whilst installing and configuring Arch.  Now I have a large stack of paper with a lot of important information missing.  Any ideas what went wrong?

    For what its worth, I finally figured it out.  If I select individual pages or ranges of pages to print in the FF print dialog, I have the above-mentioned issues.  If I print the whole document, on the other hand, everything is fine.   Strange huh?

  • Following Beginner's Guide, but one command is "not found" - alsact1

    Hello
    I'm following the Beginner's guide and doing everything exactly as it says. However, when i get to the Sound Card setup instructions (using ALSA) one of the commands it is telling me to use returns the error "-bash: alsact1: command not found"
    I have done everything exactly as per the directions. According to the instructions, this command saves the mixer settings so that on boot-up, the volume levels are as they were previously.
    I wasn't able to create the file that "alsact1" is supposed to create, but upon boot-up, the sound levels appear to be as they were last time. so everything works just fine.
    Should I just forget about the "alsact1" command and move on? Anyone else have this issue? Is there a fix? or is it a typo in the instructions?
    Thanks in advance!

    The last letter is an L, not a 1
    ie ALSACTL rather than ALSACT1

  • Socket security issues

    Hello,
    I am developing an messaging application, similar to MSN or AIM. so only text messages are passed over a socket.
    Does anybody know of any socket security issues there are when opening a socket on a particular port in java?
    If so then does anybody know if there is any documentation out there that i can look at?
    Thanks

    psamatt wrote:
    Hello,
    I am developing an messaging application, similar to MSN or AIM. so only text messages are passed over a socket.
    Does anybody know of any socket security issues there are when opening a socket on a particular port in java?
    If so then does anybody know if there is any documentation out there that i can look at?
    Simple sockets are wide open - there is no security. Secure sockets are implemented as a layer on top of simple sockets using JSSE - http://java.sun.com/j2se/1.4.2/docs/guide/security/jsse/JSSERefGuide.html .

  • Beginner's Guide, Eufi-GRUB

    I was gonna improve the Beginner's Guide but realized that the GRUB section of UEFI motherboards has been removed. I've been lurking around forums and as far as I can tell that the most problems was because of insufficient optioning of grub-install commands. I did started using arch and also linux back in this month and the main grub page was all I needed while, beginner's guide only needed and option for root device which was noted in main grub page.
    If that was the case, grub is easy and other distro users are familiar with it.
    P.S.: I didn't know how to connect about it, If I'm posting anyway wrong please criticize.
    Last edited by Gulver (2013-06-24 07:27:00)

    The trouble is, the Beginners' Guide as it stands is not only misleading but outright wrong.
    In the section on booting UEFI, it states:
    For UEFI systems, two options are available. Choose one as per your convenience.
        Boot the Linux kernel directly using EFISTUB.
        gummiboot is a simple bootloader, useful if you are dual booting.
    And then it explains how to set up direct loading using efibootmgr or gummiboot. Not only is there no mention of rEFInd, there is also no mention that grub can also boot in EFI mode. This is especially problematic given that the "two options" will not work on some hardware given the current issues with the EFISTUB loader.
    While I agree that this page should cover only the basics and link to more in depth information, this hardly counts as giving the user a sense of the available options. There are links to grub on this page but only in the context of BIOS booting.
    Last time I looked, the page did mention grub in EFI mode and covered rEFInd. Now it just looks like you are screwed if neither a EFI menu entry nor gummiboot works for you.
    EDIT: It also claims that the ESP must be mounted at /boot. This is just false. It is true only for gummiboot and not even for the other option mentioned on this page.
    Last edited by cfr (2013-07-07 22:32:50)

  • Efibootmgr's entries crash instantly - mistake in Beginner's Guide?

    Hi,
    after installing Arch on my Laptop (first time using the non-aif method - I much prefer it, thanks guys!) I had some problems with the entries created by efibootmgr, i.e. them crashing instantly on me (screen would turn black, then return to the UEFI boot menu). After some experimentation it turned out that using single '\' (as per "UEFI Bootloaders"-page) instead of double '\\' (as per Beginner's Guide) in the efibootmgr-command fixes this issue. Is this something others experience as well or is it unique to my setup (or just a problem between keyboard and chair)?
    I'm on a Lenovo X121e, using UEFI/GPT with a 512MB FAT16 EFI partition (FAT32 has the same problem). Installation as per Beginner's Guide, except for the single backslashes.
    Now, to OT my own topic: Additionally, rEFInd seems to misparse refind_linux.conf, because the submenus are empty (not even "Return to main" or similar) although I created multiple boot options. Also, OS descriptions are weird ("Boot EFI\arch\vmlinuz-arch.efi from". Aren't those supposed to be "... from <somewhere>"?).

    Slightly off topic but may i ask what changed and double \ is not required anymore? Last time i had to create a boot entry i did it with double \
    # echo "root=/dev/sdaX ro rootfstype=ext4 add_efi_memmap initrd=\EFI\\arch\initramfs-arch.img" | iconv -f ascii -t ucs2 | efibootmgr -c -g -d /dev/sda -p 1 -L "Archlinux (EFISTUB)" -l "\EFI\arch\vmlinuz-arch.efi" -@ -
    Also is the \\ correct in the initrd sections (this is from uefi bootloaders)

  • I think my computer has a virus, when I get on the Internet, ads will pop up all the time, I think it is called adware?  Also pages will pop up saying something along the lines of my computer is at risk for some security issue. What should I do?

    I think my computer has a virus, when I get on the Internet, ads will pop up all the time, I think it is called adware?  Also pages will pop up saying something along the lines of my computer is at risk for some security issue. What should I do?

    Remove Browser Pop-up Problems
         AdwareMedic
         Adblock Plus 1.8.9
         remove adware that displays pop-up ads and graphics on your Mac
    Helpful Links Regarding Malware Problems
    If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide and AdwareMedic. If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.)
    Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.
    The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.
    Fix Some Browser Pop-ups That Take Over Safari.
    Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.
    Quit Safari
    Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.
    Relaunch Safari
    If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.
    This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.

  • Can not view slidshows or creat a book on Snapfish.  SF IT folks say it's a security issue on my end.  Any ideas?

    Can not view slidshows or creat a book on Snapfish.  SF IT folks say it's a security issue on my end.  Any ideas?

    You will need to contact Snapfish to find out their system requirements and which plugin you need
    - http://support.snapfish.com/app/answers/detail/a_id/669/brand/3

  • I updated some security issues and suddenlly my gmail does not open. it shows 75% of the procees and does not go on

    I updated automatically some security issues in my computer (I don't remember which) and now my gmail will start opening until it reaches 75% and it will not go on opening.
    I can open it Internet explorer but not in Mozila fireworks

    Clear the cache and the cookies from sites that cause problems.
    "Clear the Cache":
    *Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
    "Remove Cookies" from sites causing problems:
    *Tools > Options > Privacy > Cookies: "Show Cookies"
    Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance/Themes).
    *Don't make any changes on the Safe mode start window.
    *https://support.mozilla.org/kb/Safe+Mode
    *https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

  • Other web browsers and security issues?

    Since even an Apple KB article recognizes the need for an additional browser and because of Safari's limitations and problems, I'm going to try switching to another browser (most likely OmniWeb and am looking at Firefox, Shira and Opera also though perhaps not as a primary browser) but I'm wondering about their ability to keep on top of any security issues for Mac? (and how do you keep up with security updates?)
    Though perhaps unfounded, at least with Safari, I feel that Apple has a vested interest in keeping on top of security issues (for Safari and Java) and I can readily find out about security updates via software updater.

    Most of the other Mac browsers have their adherents. They are all good browsers (I have 7 browsers installed to test various web sites and for change-of-pace usage). They all have their strengths and they all have their weaknesses. Only iCab and OmniWeb are still shareware, the rest are now or always have been free (Opera just recently stopped charging for its browser).
    I have settled on Firefox as my alternate browser and I use it maybe just a tad more than Safari, but I do switch back and forth between them. The Mozilla foundation is good at getting security updates out when needed. Firefox has a button on the toolbar to check for updates. One nice thing about Firefox is that you can install free extensions which enhance the features available. I have one to supplement tab features, one to control iTunes from Firefox's status bar, one to help me format messages in discussion forums, and one to block ads.
    I prefer OmniWeb for doing intensive research because of the way it handles tabs in its sidebar, showing me which ones I've looked at and which ones I haven't, and giving me great flexibility in rearranging tabs, which are viewable as thumbnails or text names (I have had up to a hundred or so tabs open in OmniWeb.
    Shiira is good and its fast. I have not checked for updates for a while, but the last time I updated there was still a problem with Shiira kicking you out of logged-in sites when you moved from page to page with in web site. This may have been fixed by now - they were aware of the problem back then.
    Camino is a native OS X cousin of Firefox and is also fast, but is not updated as often.
    I would stay away from Mozilla or Netscape unless you need all the additional modules they have and which take up hard disk space. Firefox and Camino represent the browser module of Mozilla/Netscape. Mozilla and Netscape have modules for email, irc chat, newsgroups, and for creating and editing web pages. Netscape is a branded and slightly customized version of Mozilla and is not updated as often.
    Opera is a nice browser and some use it as their main browser, but I have not seen anything that really stands out for me, but that does not mean it is not worth a look.
    I would stay away from abandonware Internet Explorer.
    As for checking for updates, several of them, as with many Mac programs, now have a menu item that allows you to check for updates. Most of them also announce their updates on both VersionTracker and MacUpdate.
    Happy Exploring.

  • Security Issue with Apple ID

    Today while using my iphone and trying to use facetime for the first time since updating to IOS6, my phone asked me if I wanted to use some email address that I do not have for facetime. What? The message pretty much said that this email address was linked to my apple ID. So I got to work logged into AppleID.Apple.com and saw the email address verified and also saw it displayed as an alternate apple id. Immediately, I changed my Apple ID password and called apple at 1800myapple since that is the number on the website and try to talk to someone that could assist me with this severe issue. Anyway, my iphone went dead and the people on the phone couldn't connect me to anyone because I couldn't give them a serial number to an apple device. I tried to explain to the technicians that this is a problem with my ID and that the alternate ID has access to everything that my Apple ID has access to. Both times the call went nowhere. This is ridiculous. Why can't I talk to a security team? Why is the technician telling me that I can manage my ID from the website, when I know that I am looking at the website and I cannot remove the alternate ID? How did this ID get associated with my account and why did I never receive an email informing me of the change?
    Since Apple has other services and not just products STOP ASKING FOR A SERIAL NUMBER AND ASSIST THE CUSTOMER WITH THE ISSUE especially since it is a SECURITY ISSUE.

    oh man, I know exactly what you're talking about. i have a relatively easy to guess apple id email and everybody in the world thinks it's theirs... but once I turned on two-step authentication, the emails stopped completely.  here's a faq about it:
    http://support.apple.com/kb/HT5570
    once i turned that on, whenever they'd want to reset my password, they would get asked for my recovery key, which they don't have, haha!  victory is mine.

Maybe you are looking for