January 2015 - Core-students - mailman3.cels.anl.gov

[CELS Sysadmins] Test Userbase security fixes
by Leggett, Torrance I. 14 Jan '15

14 Jan '15

The auditors that were hired to analyze the lab's web services found some security vulnerabilities (HTML injection and XSS). I think I've fixed these for anonymously provided user input which is the biggest concern, but because the changes could deeply affect data input and stored, I'd like a good deal of testing before I push it to production. Can I get everyone to give it a test and see if they can break things? Backend: https://sovereign-stage.mcs.anl.gov MCS Frontend https://mcs-stage.mcs.anl.gov JLSE Frontend https://jlse-stage.mcs.anl.gov KBase Frontend https://kb-stage.mcs.anl.gov

1 0

Canceled: Monthly Systems Group Meeting
by Stacey, Craig J. 13 Jan '15

13 Jan '15

Monthly group meeting. All are invited to attend, though at least one representative from each group (Cloud, HPC, Services, Support) should attend. Last Wednesday of every month.

1 0

[CELS Sysadmins] where's Linda 1/13
by Linda Winkler 12 Jan '15

12 Jan '15

Meeting downtown all day lw

1 0

Where's Martino
by Henderson, Martino S. 12 Jan '15

12 Jan '15

I will be a little late today. I am going to TJ's school for a meeting. Sent from My Android mobile device — Martino Henderson Help Desk / System Support Office: +1(630) 252-1692 Argonne National Laboratory Computer, Environment, & Life Sciences 9700 South Cass Avenue Building 240 - 3.E.18 Argonne, Illinois 60439 United States

1 0

[CELS Sysadmins] where's Linda 1/9
by Linda Winkler 09 Jan '15

09 Jan '15

Working from home today lw

1 0

[CELS Sysadmins] Where's Ti?
by Leggett, Torrance I. 08 Jan '15

08 Jan '15

The roads out here are almost all blown over from the drifts. I'm going to be playing by ear whether I work from home tomorrow, but right now it's looking like I'll be home.

1 0

FW: Flash Player updates.
by Roberts, John E. 08 Jan '15

08 Jan '15

This is/will push out to Linux desktops automatically (verified on mine). I¹ve updated Casper for the Mac side. Thanks. -- John Roberts Argonne National Laboratory CELS Systems jeroberts(a)anl.gov On 1/6/15, 12:45 PM, "Gene Rackow" <rackow(a)anl.gov> wrote: >It appears hackers are again going after Flash player >They are targgeting holes indicated in CVE-2014-9163 and CVE-2014-8439. >DOE-JC3 indicates is being used rather heavily to launch attacks on >various sites. > >IF you have flash installed, >MacOS or Windows versions older than > 13.0.0.259 and 14.x >or > 15.x before 15.0.0.246 on Windows and OS X > >Linux versions before 11.2.202.425 > >It needs to be udpated ASAP. > >It allows attackers to execute arbitrary code and take over the system. > >--Gene > > >_______________________________________________ >cyber911 mailing list >cyber911(a)lists.anl.gov >https://lists.anl.gov/mailman/listinfo/cyber911

1 0

[CELS Sysadmins] OpenDCIM screen shots
by Leggett, Torrance I. 07 Jan '15

07 Jan '15

The OpenDCIM install that Rene is using is currently on a CIS internal network that we don't have access to, but I had Rene send some screen shots of some different looks in the tool. They're attached

2 1

Where's Tina
by Stanton-Piersanti, Tina Joy 07 Jan '15

07 Jan '15

Since Vin is home from school today and Joe had to leave for work @ 4 am, I am going to work from home until late morning/early afternoon. I will come in, box up my office and then come back here to finish out the day. I am off HD today, so it works out well without inconveniencing anyone. Stay warm and see Ya in a bit.

1 0