From: Digest To: "OS/2GenAu Digest" Date: Fri, 9 Aug 2002 00:01:05 EST-10EDT,10,-1,0,7200,3,-1,0,7200,3600 Subject: [os2genau_digest] No. 417 Reply-To: X-List-Unsubscribe: www.os2site.com/list/ ************************************************** Thursday 08 August 2002 Number 417 ************************************************** Subjects for today 1 [os2genau] Intel PC Card - EtherExpress combo : Ian Manners" 2 Re: [os2genau] Intel PC Card - EtherExpress combo : Ed Durrant 3 Re: [os2genau] [Fwd: [VOICENWS] SW: Security vulnerability in Mozilla] : Ed Durrant 4 Re: [os2genau] Small cache of memorabilia : John Angelico" 5 Re: [os2genau] [Fwd: [VOICENWS] SW: Security vulnerability in Mozilla] : John Angelico" 6 Re: [os2genau] Small cache of memorabilia : D McKenzie 7 Re: [os2genau] Intel PC Card - EtherExpress combo : Daryl Pilkington" 8 Re: [os2genau] Intel PC Card - EtherExpress combo : Ian Manners" 9 Re: [os2genau] Intel PC Card - EtherExpress combo : Ian Manners" 10 Re: [os2genau] Small cache of memorabilia : bob 11 Re: [os2genau] Small cache of memorabilia : bob 12 Re: [os2genau] Intel PC Card - EtherExpress combo : Ed Durrant 13 Re: [os2genau] [Fwd: [VOICENWS] SW: Security vulnerability in Mozilla] : Ed Durrant 14 Re: [os2genau] [Fwd: [VOICENWS] SW: Security vulnerability in Mozilla] : John Angelico" 15 Re: [os2genau] ot: Partition Magic/Win2k/Linux ? : Voytek Eymont **= Email 1 ==========================** Date: Thu, 08 Aug 2002 03:20:09 +1000 (EST) From: "Ian Manners" Subject: [os2genau] Intel PC Card - EtherExpress combo Hi all I've got myself a Laptop (IBM 380D) and a Intel EtherExpress PRO/100 Mobile Adapter (PCMCIA) its a dual card with 56k Modem and network card. It has a part number on it of 704425-001 Does anyone know if there are OS/2 drivers for this ? From what I can find it was manufactured in about 1997/8 Cheers Ian B Manners http://www.os2site dot com/ Psychoceramics: The study of crackpots. ---------------------------------------------------------------------------------- **= Email 2 ==========================** Date: Thu, 08 Aug 2002 06:09:15 +1000 From: Ed Durrant Subject: Re: [os2genau] Intel PC Card - EtherExpress combo Intel tend to provide their own OS/2 drivers (even for their latest NICs) - have you checked their website ? There may be a link or even a driver in DDpak Online, but I'd go straight to the Intel website. You'll also need thePCMCIA feature drivers - download them from www.ibm dot com/thinkpad These combined cards usually cause problems though. They share interupts which should in theory work but usually doesn't. You'll probably need to manually assign IRQ's though parameters in config.sys. I'd suggest you try to just get the NIC part of the card to work and ignore the modem. If you need a modem, use either the built in modem (although this might be only 33.6k rather than 56k) or add a second PCMCIA modem card. By the way the laptop is more likely to be of the 1995/6 vintage rather than 1997/8 - at that time the last of the 380 series (380Z) was being built. Cheers/2 Ed. Ian Manners wrote: > Hi all > > I've got myself a Laptop (IBM 380D) and a > > Intel EtherExpress PRO/100 Mobile Adapter (PCMCIA) > its a dual card with 56k Modem and network card. > > It has a part number on it of 704425-001 > > Does anyone know if there are OS/2 drivers for this ? > >From what I can find it was manufactured in about 1997/8 > > Cheers > Ian B Manners > http://www.os2site dot com/ > > Psychoceramics: The study of crackpots. > ---------------------------------------------------------------------------------- **= Email 3 ==========================** Date: Thu, 08 Aug 2002 06:24:32 +1000 From: Ed Durrant Subject: Re: [os2genau] [Fwd: [VOICENWS] SW: Security vulnerability in Mozilla] Damn, I forgot attachements were dropped and I obviously have this feature set, I'll change that and also cut and paste the relevant data here: From: "FEEB" Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.0.0) Gecko/20020602 tested and found vulnerable: + Overview: ~~~~~~~~~~~~~~~~~ Mozilla allows running Malicious Scripts due to a bug in 'FTP view'. If you click on a malicious link, the script embedded in URL will run. * If the ftp server and the http server are the same address, it is dangerous. Because the cookie may be modified by the attacker. + Demonstration: ~~~~~~~~~~~~~~~~~ http://www.geocities.co.jp/SiliconValley/1667/advisory03e.html Frank Bures, [Moderator note: The site states the work around is "Use the latest version of Mozilla 1.1 Beta or disable JavaScript." I'm using a recent nightly drop of Warpzilla so the exploit demonstration doesn't work for me. So I am passing this on without verification.] Ed Durrant wrote: > Apologies for those who also monitor the Voice newslist, but for those > who don't and who use Mozilla, this is important. > > I also don't see the problem running Mozilla 1.1beta. > > Ed. > > [attachments have been removed] > ---------------------------------------------------------------------------------- **= Email 4 ==========================** Date: Thu, 08 Aug 2002 10:38:39 +1000 (EST) From: "John Angelico" Subject: Re: [os2genau] Small cache of memorabilia On 07 Aug 2002 21:24:52 +0800, bob wrote: Hi Bob. How much in the way of postage? I could get you to send the lot to me using my Reply Paid and I could distribute them in the SIG. I personally would like the car bumper sticker, the pencil holder... >I've just unearthed a few pieces of OS/2 memorabilia that should be >shared around. I have 5 of each of the following: > >Sticker 28.5 x 7.5cm Red on white OS/2 bubble logo (7.5cm d) white on >black text "If my car ran on OS/2 I'd be there already!" > >Sticker 11 x 10cm White b/g Red text " I surfed the internet at the IBM >stand" and "OS/2 warp" plus some groovy looking lines etc. > >Pencil cup 25 x 11 cm packed flat assembles to 11h x 8d cylinder, black >b/g multi-colour OS/2 "champagne bubbles" Text "operate at a higher >level" (I have used one of these as a pencil holder since ~'93, still >working, just like OS/2 :). > >If you'd like something from the above for the cost of postage let me >know. (SASE or COD, though COD will cost you more). > >-- >bob >Cave canem...te necet lingendo. Er, could that translate as "Beware of the dog, he doesn't speak English" ?? Best regards John Angelico OS/2 SIG talldad at melbpc dot org dot au or talldad at kepl dot com dot au -------------------------------------------- PMTagline v1.50 - Copyright, 1996-1997, Stephen Berg and John Angelico .... Windows NT: "Windows Noli Tangere"... Latin for "Windows? Don't touch..." ---------------------------------------------------------------------------------- **= Email 5 ==========================** Date: Thu, 08 Aug 2002 10:41:51 +1000 (EST) From: "John Angelico" Subject: Re: [os2genau] [Fwd: [VOICENWS] SW: Security vulnerability in Mozilla] On Thu, 08 Aug 2002 06:24:32 +1000, Ed Durrant wrote: >Damn, I forgot attachements were dropped and I obviously have this feature set, I'll >change that and also cut and paste the relevant data here: > Hi Ed, and thanks for trying again. However, I wasn't sure how to pick the false ftp from the real one, so I couldn't tell if I had the vuln or not. If the false one has the name of the discoverer of the bug, then I happily suspect that I don't see the error. Best regards John Angelico OS/2 SIG talldad at melbpc dot org dot au or talldad at kepl dot com dot au ____________________________________________ >From: "FEEB" > > >Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.0.0) Gecko/20020602 tested and >found vulnerable: > > >+ Overview: >~~~~~~~~~~~~~~~~~ >Mozilla allows running Malicious Scripts due to a bug in 'FTP view'. If >you click on a malicious link, the script embedded in URL will run. > >* If the ftp server and the http server are the same address, it is >dangerous. Because the cookie may be modified by the attacker. > > > >+ Demonstration: >~~~~~~~~~~~~~~~~~ >http://www.geocities.co.jp/SiliconValley/1667/advisory03e.html > > > >Frank Bures, > > >[Moderator note: The site states the work around is "Use the latest >version of Mozilla 1.1 Beta or disable JavaScript." I'm using a recent >nightly drop of Warpzilla so the exploit demonstration doesn't work for >me. So I am passing this on without verification.] > > >Ed Durrant wrote: > >> Apologies for those who also monitor the Voice newslist, but for those >> who don't and who use Mozilla, this is important. >> >> I also don't see the problem running Mozilla 1.1beta. >> >> Ed. >> >> [attachments have been removed] > >> > > > > > ---------------------------------------------------------------------------------- **= Email 6 ==========================** Date: Thu, 08 Aug 2002 11:55:32 +1000 From: D McKenzie Subject: Re: [os2genau] Small cache of memorabilia Hi Bob, Wouldn't mind a sticker or the pencil cup. Regards Don At 11:24 PM 07/08/02, you wrote: >I've just unearthed a few pieces of OS/2 memorabilia that should be >shared around. I have 5 of each of the following: > >Sticker 28.5 x 7.5cm Red on white OS/2 bubble logo (7.5cm d) white on >black text "If my car ran on OS/2 I'd be there already!" > >Sticker 11 x 10cm White b/g Red text " I surfed the internet at the IBM >stand" and "OS/2 warp" plus some groovy looking lines etc. > >Pencil cup 25 x 11 cm packed flat assembles to 11h x 8d cylinder, black >b/g multi-colour OS/2 "champagne bubbles" Text "operate at a higher >level" (I have used one of these as a pencil holder since ~'93, still >working, just like OS/2 :). > >If you'd like something from the above for the cost of postage let me >know. (SASE or COD, though COD will cost you more). > >-- >bob >Cave canem...te necet lingendo. > > ---------------------------------------------------------------------------------- **= Email 7 ==========================** Date: Thu, 08 Aug 2002 11:06:08 +1000 (EST) From: "Daryl Pilkington" Subject: Re: [os2genau] Intel PC Card - EtherExpress combo Hi Ian, Find out if this Beast is PCMCIA, (16bit), or CardBus, (32bit). If it is CardBus, check your laptop supports CardBus. If your laptop isn't CardBus, do not pass go... Because it is combo card, they are usually "point-enabled" meaning they bypass socket & card services. You will have to explicity tell the socket driver to ignore the socket the Beast is in. viz: rem card services driver, (PnP support for PCMCIA) BASEDEV=PCMCIA.SYS rem socket services, the PCMCIA chipset driver BASEDEV=TPIC95SS.SYS /ig0=1 On Thu, 08 Aug 2002 06:09:15 +1000, Ed Durrant wrote: >Intel tend to provide their own OS/2 drivers (even for their latest NICs) - have you >checked their website ? There may be a link or even a driver in DDpak Online, but I'd >go straight to the Intel website. > >You'll also need thePCMCIA feature drivers - download them from www.ibm dot com/thinkpad > >These combined cards usually cause problems though. They share interupts which should >in theory work but usually doesn't. You'll probably need to manually assign IRQ's >though parameters in config.sys. I'd suggest you try to just get the NIC part of the >card to work and ignore the modem. If you need a modem, use either the built in modem >(although this might be only 33.6k rather than 56k) or add a second PCMCIA modem card. > >By the way the laptop is more likely to be of the 1995/6 vintage rather than 1997/8 - >at that time the last of the 380 series (380Z) was being built. > SNIP > Regards, Daryl Pilkington //// The PC-Therapist, Business Computing Integration O OS/2 Warp, Redhat Linux, DB2 IBM Certified Systems Expert email: darylp at pc-therapist dot com dot au Mob: 0425-251-300 ---------------------------------------------------------------------------------- **= Email 8 ==========================** Date: Thu, 08 Aug 2002 12:06:59 +1000 (EST) From: "Ian Manners" Subject: Re: [os2genau] Intel PC Card - EtherExpress combo Hi Ed >Intel tend to provide their own OS/2 drivers (even for their latest NICs) - have you >checked their website ? There may be a link or even a driver in DDpak Online, but I'd >go straight to the Intel website. Oops, the card model is MBLA1656P, and I did find it on the intel website but only Windows drivers. >You'll also need thePCMCIA feature drivers - download them from www.ibm dot com/thinkpad Got all that already. The modem part works well. >These combined cards usually cause problems though. They share interupts which should >in theory work but usually doesn't. You'll probably need to manually assign IRQ's >though parameters in config.sys. I'd suggest you try to just get the NIC part of the >card to work and ignore the modem. If you need a modem, use either the built in modem >(although this might be only 33.6k rather than 56k) or add a second PCMCIA modem card. Thats what I'd normally suggest to others but its me I'm talking about and I seem not to take my own advice :-) >By the way the laptop is more likely to be of the 1995/6 vintage rather than 1997/8 - >at that time the last of the 380 series (380Z) was being built. Sorry, I was talking about the PCCard. I used to sell the 380x's back when I was an IBM Business Partner with Bill Moncrief. Its a 2635-2AA built in early 1997. It looks like I need to go get a PCCard NIC. Shame, if I got this one going, I could leave a 40Mb Sundisk in the other slot. Cheers Ian B Manners http://www.os2site dot com/ Baffled by Win 98? Get OS2/ Mac/ Linux /BeOS ---------------------------------------------------------------------------------- **= Email 9 ==========================** Date: Thu, 08 Aug 2002 12:11:46 +1000 (EST) From: "Ian Manners" Subject: Re: [os2genau] Intel PC Card - EtherExpress combo Hi Daryl >Find out if this Beast is PCMCIA, (16bit), or CardBus, (32bit). It is PCMCIA, as its a 16bit card :) And I only have the PCMCIA Card Services & drivers loaded. >Because it is combo card, they are usually "point-enabled" meaning they >bypass socket & card services. You will have to explicity tell the >socket driver to ignore the socket the Beast is in. viz: ok, I'll give that a go with the IBM EtherExpress PCCard driver, on the offchange as thats the only one that gives me no errors. Cheers Ian B Manners http://www.os2site dot com/ "Nobody will ever need more than 512k RAM!" -- Bill Gates, 1981 "Windows 95 needs at least 8 MB RAM." -- Bill Gates, 1996 "Nobody will ever need Windows 95." -- logical conclusion ---------------------------------------------------------------------------------- **= Email 10 ==========================** Date: 08 Aug 2002 11:05:20 +0800 From: bob Subject: Re: [os2genau] Small cache of memorabilia On Thu, 2002-08-08 at 08:38, John Angelico wrote: > On 07 Aug 2002 21:24:52 +0800, bob wrote: > > Hi Bob. > > How much in the way of postage? I could get you to send the lot to me using > my Reply Paid and I could distribute them in the SIG. > > I personally would like the car bumper sticker, the pencil holder... I've had a fair amount of response to this and I'd like to try and be fair to everyone. If there's anything left over I will certainly pass them along to the SIG but at the moment its not looking like that will happen. I have put a sticker aside for you so you have that guaranteed as a minimum :). (I'll try and sneak in a pencil cup for you if ones left over) The items are all pretty light, the stickers should all go at 45c but I don't think the pencil cups wouldn't go through the gauge so it'll have to go large letter. austpost dot com dot au says... Large Letter $0.98 2 Business Days > >-- > >bob > >Cave canem...te necet lingendo. > > Er, could that translate as "Beware of the dog, he doesn't speak English" > ?? Very close :) You obviously know the Cave canem bit and the lingendo twigged you to English (lingendo has to do with tongues :) you missed necet... it is the root to words like necropolis. So it says... Beware of the dog... he may lick you to death. There. Now aren't you sorry you asked :). > Best regards > John Angelico > OS/2 SIG > talldad at melbpc dot org dot au or talldad at kepl dot com dot au > -------------------------------------------- > > PMTagline v1.50 - Copyright, 1996-1997, Stephen Berg and John Angelico > ... Windows NT: "Windows Noli Tangere"... Latin for "Windows? Don't touch..." > > > -- bob Cave canem...te necet lingendo. ---------------------------------------------------------------------------------- **= Email 11 ==========================** Date: 08 Aug 2002 11:27:24 +0800 From: bob Subject: Re: [os2genau] Small cache of memorabilia Oops... should have gone direct to John... sorry. On Thu, 2002-08-08 at 11:05, bob wrote: > On Thu, 2002-08-08 at 08:38, John Angelico wrote: -- bob Cave canem...te necet lingendo. ---------------------------------------------------------------------------------- **= Email 12 ==========================** Date: Thu, 08 Aug 2002 19:42:44 +1000 From: Ed Durrant Subject: Re: [os2genau] Intel PC Card - EtherExpress combo TP 380D is PCMCIA only - 380Z was Cardbus/PCMCIA. Ed. Daryl Pilkington wrote: > Hi Ian, > Find out if this Beast is PCMCIA, (16bit), or CardBus, (32bit). > > If it is CardBus, check your laptop supports CardBus. > If your laptop isn't CardBus, do not pass go... > > Because it is combo card, they are usually "point-enabled" meaning they > bypass socket & card services. You will have to explicity tell the > socket driver to ignore the socket the Beast is in. viz: > > rem card services driver, (PnP support for PCMCIA) > BASEDEV=PCMCIA.SYS > rem socket services, the PCMCIA chipset driver > BASEDEV=TPIC95SS.SYS /ig0=1 > > On Thu, 08 Aug 2002 06:09:15 +1000, Ed Durrant wrote: > > >Intel tend to provide their own OS/2 drivers (even for their latest NICs) - have you > >checked their website ? There may be a link or even a driver in DDpak Online, but I'd > >go straight to the Intel website. > > > >You'll also need thePCMCIA feature drivers - download them from www.ibm dot com/thinkpad > > > >These combined cards usually cause problems though. They share interupts which should > >in theory work but usually doesn't. You'll probably need to manually assign IRQ's > >though parameters in config.sys. I'd suggest you try to just get the NIC part of the > >card to work and ignore the modem. If you need a modem, use either the built in modem > >(although this might be only 33.6k rather than 56k) or add a second PCMCIA modem card. > > > >By the way the laptop is more likely to be of the 1995/6 vintage rather than 1997/8 - > >at that time the last of the 380 series (380Z) was being built. > > > SNIP > > > > Regards, > > Daryl Pilkington > > //// The PC-Therapist, Business Computing Integration > O \_/ > OS/2 Warp, Redhat Linux, DB2 > IBM Certified Systems Expert > > email: darylp at pc-therapist dot com dot au > Mob: 0425-251-300 > > ---------------------------------------------------------------------------------- **= Email 13 ==========================** Date: Thu, 08 Aug 2002 19:51:37 +1000 From: Ed Durrant Subject: Re: [os2genau] [Fwd: [VOICENWS] SW: Security vulnerability in Mozilla] When you go to the site - there's a "screenshot" text, that shows you what you'd see if you have the problem. Check this first then try the link. In my case, the screenshot shows an entry "trogan" but when I use the link I don't get this and the "nasty" code is simply printed at the top of the page in large bold text. Ed. John Angelico wrote: > On Thu, 08 Aug 2002 06:24:32 +1000, Ed Durrant wrote: > > >Damn, I forgot attachements were dropped and I obviously have this feature set, I'll > >change that and also cut and paste the relevant data here: > > > > Hi Ed, and thanks for trying again. > > However, I wasn't sure how to pick the false ftp from the real one, so I > couldn't tell if I had the vuln or not. > > If the false one has the name of the discoverer of the bug, then I happily > suspect that I don't see the error. > > > Best regards > John Angelico > OS/2 SIG > talldad at melbpc dot org dot au or talldad at kepl dot com dot au > ____________________________________________ > > >From: "FEEB" > > > > > >Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.0.0) Gecko/20020602 tested and > >found vulnerable: > > > > > >+ Overview: > >~~~~~~~~~~~~~~~~~ > >Mozilla allows running Malicious Scripts due to a bug in 'FTP view'. If > >you click on a malicious link, the script embedded in URL will run. > > > >* If the ftp server and the http server are the same address, it is > >dangerous. Because the cookie may be modified by the attacker. > > > > > > > >+ Demonstration: > >~~~~~~~~~~~~~~~~~ > >http://www.geocities.co.jp/SiliconValley/1667/advisory03e.html > > > > > > > >Frank Bures, > > > > > >[Moderator note: The site states the work around is "Use the latest > >version of Mozilla 1.1 Beta or disable JavaScript." I'm using a recent > >nightly drop of Warpzilla so the exploit demonstration doesn't work for > >me. So I am passing this on without verification.] > > > > > >Ed Durrant wrote: > > > >> Apologies for those who also monitor the Voice newslist, but for those > >> who don't and who use Mozilla, this is important. > >> > >> I also don't see the problem running Mozilla 1.1beta. > >> > >> Ed. > >> > >> [attachments have been removed] > > > >> > > > > > > > > > > > > ---------------------------------------------------------------------------------- **= Email 14 ==========================** Date: Thu, 08 Aug 2002 22:04:58 +1000 (EST) From: "John Angelico" Subject: Re: [os2genau] [Fwd: [VOICENWS] SW: Security vulnerability in Mozilla] On Thu, 08 Aug 2002 19:51:37 +1000, Ed Durrant wrote: >When you go to the site - there's a "screenshot" text, that shows you what you'd see if >you have the problem. Check this first then try the link. In my case, the screenshot >shows an entry "trogan" but when I use the link I don't get this and the "nasty" code is >simply printed at the top of the page in large bold text. > Ah, so! I definitely don't have a worry then. Best regards John Angelico OS/2 SIG talldad at melbpc dot org dot au or talldad at kepl dot com dot au -------------------------------------------- PMTagline v1.50 - Copyright, 1996-1997, Stephen Berg and John Angelico .... Definitions #751: Printout: A document to verify data you know is wrong anyway. ---------------------------------------------------------------------------------- **= Email 15 ==========================** Date: Thu, 8 Aug 2002 22:12:50 From: Voytek Eymont Subject: Re: [os2genau] ot: Partition Magic/Win2k/Linux ? ** Reply to note from Ed Durrant Mon, 05 Aug 2002 19:11:34 +1000 > There's a demo of PQM 7 on their website. There's no longer an OS/2 version (for a > product that orinally was an OS/2 product - that's great of the developers isn't it!). don't blame the developers, blame IBM, the marketpalce, the media I actually met them at Comdex some years ago, the year they got the Comdex award for best s/w, the President of PQ and another guy with him, don't recall their names now. there was an OS/2 party at a hotel across the road from the LV Hilton, everyone was there, and, the President of PQ actually made a brief speach, saying something like " we develop for OS/2, and, we encourage everyone to develop for OS/2" they were, they did. it's not their fault they couldn't make money from OS/2 products, they certainly tried, as did many others. sad, but true ecial offers for the opening or their office in > Sydney at the moment. I have a full box, docs, everything, less the CD....... a version from 2 years ago, I think. we used to sell a lot of it, once. Surprisingly, I never ever used it, never needed to, my HD is still partitioned the way it was partitioned when I installed it: 200/150/150 was meant to be Windoze, OS/2, OS/2. OS/2 will still install on 150MB, but, windoze wont on 200MB. so, I could've resizef C: . Or, not use windoze. I figured, not use windoze was the better choice. Voytek Eymont SBT Information Systems Pty Ltd http://www.sbt dot net dot au/links/ phone +61-2 9310-1144 fax +61-2 9310-1118 ----------------------------------------------------------------------------------