3 ms·

This is from April 28th, it was patched in 15.0R-p7.

itsthefrank 5mo ago
-p8 is the current patch level for 15.0-RELEASE so if people have been keeping on top of patching this is already two reboots in the past.
loeg 5mo ago
[flagged]
- broken-kebab 5mo ago
  Or in other words, the response is well-coordinated so cperciva's bragging is justified, isn't it?
  - cperciva 5mo ago
    Indeed, I was thinking about this precise issue when I made the point that corresponding issues get handled much better in FreeBSD than in Linux.
- bch 5mo ago
  Its like rain on your wedding day - not actually ironic, just unfortunate.
- stackghost 5mo ago
  A not-insignificant chunk of the userbase of the various BSDs is there because they were turned off of Linux after controversial things like Gnome 3, systemd being shoved down users' throats despite being a broken mess, wayland (though nobody was as arrogant about wayland as Poettering was about systemd), etc. All that to say, the BSD userbase as a sizeable subset that are there for countercultural reasons, rather than technical. These are the people who buy into, say, OpenBSD's vaunted security reputation, or believe that "linux bad because reasons", so you're always going to get people in here bragging, because "not using linux" has become part of their identity. I run a mix of FreeBSD and Linux on my personal devices. The ground truth is that FreeBSD is yet another unix-like OS written in C, and thus not immune from the types of bugs that stem from that lineage. None of the BSD distros are materially more secure or better than a properly-configured and patched Linux.
  - applfanboysbgon 5mo ago
    The person 'bragging' was not a countercultural user, but rather the FreeBSD engineering lead. They were, however, talking about FreeBSD's response to security vulnerabilities, in contrast to Linux's response. > thus not immune from the types of bugs that stem from that lineage They never claimed that FreeBSD didn't have vulnerabilities. I honestly have no idea why grandparent decided to bring up their comment when it exactly validates what the person they were criticising says. GP admits the response to the vulnerability was well-coordinated. The response to security vulnerabilities was the exact, and only, subject of the post they're calling out.
    - deleted 5mo ago
      [deleted]
  - icedchai 5mo ago
    I also use a mix. I moved to FreeBSD initially after a rough period w/Linux in the late 90's. Today, my FreeBSD machines are all VMs running on Linux hosts!
    - cyberpunk 5mo ago
      Hah I'm your mirror version -- my linux machines are all VMs running on FreeBSD hosts!
      - wolvoleo 5mo ago
        Oh you use bhyve? I've tried to use it but I dound it pretty difficult for systems that need a GUI. Maybe I should revisit.
        cyberpunk 5mo ago
        Yep, most of my linuxes are headless -- but I do have a VM which I pass a graphics card through to for games and ai stuff though -- works really well (as long as you don't reboot the VM, it has a hard time attaching to the gfx card the second time for some reason, not looked into it much) sysutils/vm-bhyve makes it quite friendly. I wouldn't use it for work, though, just personal. Work is all enterprisey kubernetes stuff. Edit: there is a 'proxmox-like' for FreeBSD out [0] -- I did try it on a couple machines and couldn't get the network working, but consoles seemed to work.. Kinda. 0: https://sylve.io https://sylve.io
- yjftsjthsd-h 5mo ago
  I think cperciva may have been a touch overenthusiastic, but surely this is in fact proving his point? His claim was, as you note before trying to ignore it, about coordination. When one of the recent Linux LPEs broke, the fix wasn't in distro packages yet; there was a vulnerability that users couldn't practically do anything about. This is an LPE that is fixed in the binaries that have already shipped. If I was playing cheerleader, this is exactly the case I'd use to argue that FreeBSD being a single unified system is a win and that its approach to handing security problems is very on top of things.
- tptacek 5mo ago
  He was talking about managing disclosure and patch flow, and you're just taking it as an opportunity to dunk on him.
  - deleted 5mo ago
    [deleted]

-p8 is the current patch level for 15.0-RELEASE so if people have been keeping on top of patching this is already two reboots in the past.

loeg 5mo ago

[flagged]

broken-kebab 5mo ago
Or in other words, the response is well-coordinated so cperciva's bragging is justified, isn't it?
- cperciva 5mo ago
  Indeed, I was thinking about this precise issue when I made the point that corresponding issues get handled much better in FreeBSD than in Linux.
bch 5mo ago
Its like rain on your wedding day - not actually ironic, just unfortunate.
stackghost 5mo ago
A not-insignificant chunk of the userbase of the various BSDs is there because they were turned off of Linux after controversial things like Gnome 3, systemd being shoved down users' throats despite being a broken mess, wayland (though nobody was as arrogant about wayland as Poettering was about systemd), etc. All that to say, the BSD userbase as a sizeable subset that are there for countercultural reasons, rather than technical. These are the people who buy into, say, OpenBSD's vaunted security reputation, or believe that "linux bad because reasons", so you're always going to get people in here bragging, because "not using linux" has become part of their identity. I run a mix of FreeBSD and Linux on my personal devices. The ground truth is that FreeBSD is yet another unix-like OS written in C, and thus not immune from the types of bugs that stem from that lineage. None of the BSD distros are materially more secure or better than a properly-configured and patched Linux.
- applfanboysbgon 5mo ago
  The person 'bragging' was not a countercultural user, but rather the FreeBSD engineering lead. They were, however, talking about FreeBSD's response to security vulnerabilities, in contrast to Linux's response. > thus not immune from the types of bugs that stem from that lineage They never claimed that FreeBSD didn't have vulnerabilities. I honestly have no idea why grandparent decided to bring up their comment when it exactly validates what the person they were criticising says. GP admits the response to the vulnerability was well-coordinated. The response to security vulnerabilities was the exact, and only, subject of the post they're calling out.
  - deleted 5mo ago
    [deleted]
- icedchai 5mo ago
  I also use a mix. I moved to FreeBSD initially after a rough period w/Linux in the late 90's. Today, my FreeBSD machines are all VMs running on Linux hosts!
  - cyberpunk 5mo ago
    Hah I'm your mirror version -- my linux machines are all VMs running on FreeBSD hosts!
    - wolvoleo 5mo ago
      Oh you use bhyve? I've tried to use it but I dound it pretty difficult for systems that need a GUI. Maybe I should revisit.
      - cyberpunk 5mo ago
        Yep, most of my linuxes are headless -- but I do have a VM which I pass a graphics card through to for games and ai stuff though -- works really well (as long as you don't reboot the VM, it has a hard time attaching to the gfx card the second time for some reason, not looked into it much) sysutils/vm-bhyve makes it quite friendly. I wouldn't use it for work, though, just personal. Work is all enterprisey kubernetes stuff. Edit: there is a 'proxmox-like' for FreeBSD out [0] -- I did try it on a couple machines and couldn't get the network working, but consoles seemed to work.. Kinda. 0: https://sylve.io https://sylve.io
yjftsjthsd-h 5mo ago
I think cperciva may have been a touch overenthusiastic, but surely this is in fact proving his point? His claim was, as you note before trying to ignore it, about coordination. When one of the recent Linux LPEs broke, the fix wasn't in distro packages yet; there was a vulnerability that users couldn't practically do anything about. This is an LPE that is fixed in the binaries that have already shipped. If I was playing cheerleader, this is exactly the case I'd use to argue that FreeBSD being a single unified system is a win and that its approach to handing security problems is very on top of things.
tptacek 5mo ago
He was talking about managing disclosure and patch flow, and you're just taking it as an opportunity to dunk on him.
- deleted 5mo ago
  [deleted]