Re: The continuing saga of Gumstix openembedded build failures

[James Linder-4]

On 28/04/2012, at 12:21 AM, gumstix-users-request@... wrote:

> I have performed the steps in the Gumstix "Using the Open Embedded Build System for Overo Series" tutorial (http://www.gumstix.org/software-development/open-embedded/61-using-the-open-embedded-build-system.html) exactly as described and have encountered numerous build errors; including the usual flurry of "checksum mismatch" errors.  At least with the checksum mismatch errors, I can work around those (i.e. insert the correct md5sum).
>
> This next one though, I have not been able to figure out yet.  Hopefully someone here will be kind enough to help me out with this.
>
>>>  NOTE: Running task 420 of 803 (ID: 9, /media/devdrive/overo-oe/org.openembedded.dev/recipes/u-boot/u-boot_git.bb, do_fetch)
>>>  --2012-04-27 08:24:28--  http://www.angstrom-distribution.org/unstable/sources/git_www.sakoman.com.git.u-boot.git_0f331e606c80166c1bfe5cac40dfc0616708f31b.tar.gz
>
>>> NOTE: package u-boot-2011.09+r76+gitr0f331e606c80166c1bfe5cac40dfc0616708f31b-r76: task do_fetch: Started
>>> Resolving www-xxx-proxy.xxxxxx.com... 192.xx.xx.xx
[snip]

Why would you bother to write 192.xx.xx.xx ?
192 (and the other private lan) numbers may not be routed over the internet.
If you are doing security by not understanding and not thinking I express my utter amazement.

So telling everybody that the family jewels are at 192.168.6.55 and root password is 'secret' is of no value to anyone outside your network.
Of course if the bad guys are inside your network then your concern is valid, but even so they still have to compromise your gumstix.

James



------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
gumstix-users mailing list
gumstix-users@...
https://lists.sourceforge.net/lists/listinfo/gumstix-users

[vwyodapink]

On 04/27/2012 05:50 PM, James Linder wrote:

> On 28/04/2012, at 12:21 AM, gumstix-users-request@... wrote:
>
>> I have performed the steps in the Gumstix "Using the Open Embedded Build System for Overo Series" tutorial (http://www.gumstix.org/software-development/open-embedded/61-using-the-open-embedded-build-system.html) exactly as described and have encountered numerous build errors; including the usual flurry of "checksum mismatch" errors.  At least with the checksum mismatch errors, I can work around those (i.e. insert the correct md5sum).
>>
>> This next one though, I have not been able to figure out yet.  Hopefully someone here will be kind enough to help me out with this.
>>
>>>>   NOTE: Running task 420 of 803 (ID: 9, /media/devdrive/overo-oe/org.openembedded.dev/recipes/u-boot/u-boot_git.bb, do_fetch)
>>>>   --2012-04-27 08:24:28--  http://www.angstrom-distribution.org/unstable/sources/git_www.sakoman.com.git.u-boot.git_0f331e606c80166c1bfe5cac40dfc0616708f31b.tar.gz
>>>> NOTE: package u-boot-2011.09+r76+gitr0f331e606c80166c1bfe5cac40dfc0616708f31b-r76: task do_fetch: Started
>>>> Resolving www-xxx-proxy.xxxxxx.com... 192.xx.xx.xx
> [snip]
>
> Why would you bother to write 192.xx.xx.xx ?
> 192 (and the other private lan) numbers may not be routed over the internet.
> If you are doing security by not understanding and not thinking I express my utter amazement.
>
> So telling everybody that the family jewels are at 192.168.6.55 and root password is 'secret' is of no value to anyone outside your network.
> Of course if the bad guys are inside your network then your concern is valid, but even so they still have to compromise your gumstix.
>
> James

And this answer's his question or issue how?

It's his choice to share info in the ways he wishes, there is no
hindrance sharing info that way. Filtering that info will not prevent
someone from helping answer his questions.

My utter amazement is that you actually wrote that "assuming" he does
not realize this already and there may be other reasons he is sharing in
that manner.

>
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> gumstix-users mailing list
> gumstix-users@...
> https://lists.sourceforge.net/lists/listinfo/gumstix-users

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
gumstix-users mailing list
gumstix-users@...
https://lists.sourceforge.net/lists/listinfo/gumstix-users

[James Linder-4]

On 28/04/2012, at 10:26 PM, gumstix-users-request@... wrote:

>>> I have performed the steps in the Gumstix "Using the Open Embedded Build System for Overo Series" tutorial (http://www.gumstix.org/software-development/open-embedded/61-using-the-open-embedded-build-system.html) exactly as described and have encountered numerous build errors; including the usual flurry of "checksum mismatch" errors.  At least with the checksum mismatch errors, I can work around those (i.e. insert the correct md5sum).
>>>
>>> This next one though, I have not been able to figure out yet.  Hopefully someone here will be kind enough to help me out with this.
>>>
>>>>>  NOTE: Running task 420 of 803 (ID: 9, /media/devdrive/overo-oe/org.openembedded.dev/recipes/u-boot/u-boot_git.bb, do_fetch)
>>>>>  --2012-04-27 08:24:28--  http://www.angstrom-distribution.org/unstable/sources/git_www.sakoman.com.git.u-boot.git_0f331e606c80166c1bfe5cac40dfc0616708f31b.tar.gz
>>>>> NOTE: package u-boot-2011.09+r76+gitr0f331e606c80166c1bfe5cac40dfc0616708f31b-r76: task do_fetch: Started
>>>>> Resolving www-xxx-proxy.xxxxxx.com... 192.xx.xx.xx
>> [snip]
>>
>> Why would you bother to write 192.xx.xx.xx ?
>> 192 (and the other private lan) numbers may not be routed over the internet.
>> If you are doing security by not understanding and not thinking I express my utter amazement.
>>
>> So telling everybody that the family jewels are at 192.168.6.55 and root password is 'secret' is of no value to anyone outside your network.
>> Of course if the bad guys are inside your network then your concern is valid, but even so they still have to compromise your gumstix.
>>
>> James
> And this answer's his question or issue how?
>
> It's his choice to share info in the ways he wishes, there is no
> hindrance sharing info that way. Filtering that info will not prevent
> someone from helping answer his questions.
>
> My utter amazement is that you actually wrote that "assuming" he does
> not realize this already and there may be other reasons he is sharing in
> that manner.

Instead of your tardy answer consider
(a) perhaps there IS a good reason that I do not understand and would be older and wiser knowing about
(b) <quote>and there may be other reasons he is sharing in that manner </quote> that may reveal the questioner is very sophisticated

So either he is naive and learns and gets the question answered at the appropriate level, or he gets a sophisticated answer while I learn.

James
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
gumstix-users mailing list
gumstix-users@...
https://lists.sourceforge.net/lists/listinfo/gumstix-users