View previous topic :: View next topic |
Author |
Message |
Vlad Apprentice
Joined: 09 Apr 2002 Posts: 264 Location: San Diego, California
|
Posted: Thu May 09, 2002 6:43 pm Post subject: Emerge rsync complaint |
|
|
I noticed today while doing an emerge rsync that it connected to a mirror -I believe it was gatech.edu - and mentioned that "all access to this system is logged". It was my understanding rsyncing with gentoo would be anonymous. Am I wrong?
If it is anonymous, as much as I appreciate someones need to stay secure, I can't say I appreciate such a thing on a server that's supposed to be anonymous (doesn't it defeat the whole purpose of anonymity?).
If it's not, I guess I'll just deal with it, even though I don't like crap logging me for doing something as benign as emerge rsync. |
|
Back to top |
|
|
klieber Bodhisattva
Joined: 17 Apr 2002 Posts: 3657 Location: San Francisco, CA
|
Posted: Thu May 09, 2002 6:53 pm Post subject: |
|
|
I've never had the impression that rsync access was supposed to be anonymous. Did you see this posted somewhere?
However, the only thing that's getting logged is your IP address -- you're not submitting a username and/or password, so there's not much else they *can* log. (ok, maybe they log the number of bytes you download.)
You do realize, don't you, that every single web and FTP site you visit likely logs the exact same information that this place is logging.
Guess I don't really see the Big Deal here.
--kurt _________________ The problem with political jokes is that they get elected |
|
Back to top |
|
|
Nitro Bodhisattva
Joined: 08 Apr 2002 Posts: 661 Location: San Francisco
|
Posted: Thu May 09, 2002 8:41 pm Post subject: |
|
|
You have to draw a line. What if the server gets compromised and there are no logs? How do you know who hacked the box?
All hits on my webserver are logged (if you are reading this message, your request was logged), and phpBB itself logs who posted what message. Now, I rarely ever look at these logs, I might use them to draw some graphs and plot some statistics. It isn't like I'm going to run some huge query and single you out from the other several million hits in the logs. If my server gets attacked, I will start looking...
All the rsync server has on you is that your ip was xx.xx.xx.xx, and you requested this file on this day, this file on this day.
Maybe the page you read meant anonymous login, like anonymous ftp?
Bascially, every server on the internet logs some amount of data on its users, so that in the event of a compromise, attack or even crash (yes, Linux does crash...), the administrators have some point to start their investigation.
I think you should be more worried about the information collected about your system from those advertising companies, whose statistics are gathered in the background while you read an article on some huge portal site. _________________ - Kyle Manna
Please, please SEARCH before posting.
There are three kinds of people in the world: those who can count, and those who can't. |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|