brynet

70 ms·

361.
by brynet 10y ago
OpenBSD has no kernel modules, everything compiled into the GENERIC kernel is expected to be using proper kernel interfaces, mucking around with kernel structures is a no-no. Nothing can really prevent driver bug causing a crash, this isn&#
362.
by brynet 10y ago
These are slides that a developer put together to show off to other developers, i.e: friends. He included a photo journey to go along with all the boring technical stuff, what's your problem?
363.
by brynet 10y ago
OpenBSD's tcpdump(1) is fork of tcpdump.org, a lot of early work went into adding security features to bpf to facilitate implementation of privilege dropping/separation in bpf programs. In 2003, the first parts were added, bpf wri
364.
by brynet 10y ago
So far git has only been requested by people who don't submit patches, those who have actually been interested haven't had any problems using CVS to send patches over the years.
365.
by brynet 10y ago
I don't know.. OpenBSD is working pretty great on Chrombooks for instance, including the touchscreen. It wouldn't be too impractical to run on these tablet-like computers. https://jcs.org/notaweblog/2016/
366.
by brynet 10y ago
It's even easier for us to boot because OpenBSD doesn't use GRUB. OpenBSD's EFI loader is a port of the existing second-stage loader, boot(8). It can load both i386 and amd64 kernels, and there are EFI binaries for 64-bit and
367.
by brynet 10y ago
It doesn't look like Ted mentioned it, but the EFI fb driver / efifb(4) should stay attached if inteldrm is disabled. This will allow X11 to start using the wsfb X framebuffer driver.. This would probably get you something beyond
368.
by brynet 10y ago
config(8) is a utility that has two purposes, the first is to turn a kernel configuration file (GENRIC/GENRIC.MP) into a build directory for compiling, second to modify a resulting ELF kernel binary using an interface similar to the bo
369.
by brynet 10y ago
OpenBSD's pkg_add/* tools are related to the old FreeBSD utilities only by name, Marc Espie rewrote OpenBSD's package tools in Perl many years ago. It is a modern packaging system with proper dependency tracking, per-file che
370.
by brynet 10y ago
This is the method that OpenBSD will be using for the armv7 port starting with 6.0, a version of u-boot loader loads our EFI bootloader ported to ARM, along with .dtb/FDT (Flattened Device Trees) files for each system that is currently
371.
3rd of six OpenBSD 6.0 release songs, “Money” with vocals by Ulrike Jung(openbsd.org)
2 points by brynet 10y ago|0 comments
372.
by brynet 10y ago
I believe there are some C++ ABI issues related to GCC 5x that make it challenging, supposedly other systems stuck with GCC 4.9 for awhile because of it.
373.
by brynet 10y ago
This little tutorial ultimately lead to Peter writing 3 full editions of "The Book of PF", which are absolute must-have books for anyone using pf on BSD/Mac OS X. https://www.nostarch.com/pf3
374.
by brynet 10y ago
BTW -- it's also really easy to configure wireless on OpenBSD compared to other systems: # ifconfig iwm0 scan ... # ifconfig iwm0 nwid "AP" [wpakey pass] [nwkey pass] up # dhclient iwm0 http:/&#x2F
375.
by brynet 10y ago
That is just some diff someone sent to a mailing list, one real nifty feature of OpenBSD's ifconfig(8) is 'lladdr random', which will randomly assign a new MAC address to an interface. Apparently well received by developers i
376.
by brynet 11y ago
OpenBSD's base gcc is a fork of the last GPLv2 version, like Apple and embedded except with many local changes, e.g. gcc-local(1): http://man.openbsd.org/OpenBSD-current/man1/gcc-local.1 There's newer ve
377.
by brynet 11y ago
Well.. if you enjoyed the hackathon artwork. http://www.openbsd.org/lyrics.html
378.
by brynet 11y ago
You're right, of course. If you promise exec, you should certainly expect someone will find a way to use it.
379.
by brynet 11y ago
It is indeed another security mitigation, any potential attack payload will need to do more work and hence require more code. In fact, most programs will not need the exec promise in which case any attempt to call execv(3).. Abort trap (co
380.
by brynet 11y ago
The entire point of pledge is self-sandboxing, in the case of an exec promise the expectation is the new process will also self-sandbox. If you think of a shell as an example, it will need to exec programs that do privileged things before t
381.
by brynet 11y ago
802.11n is a lot more complicated than its predecessors, OpenBSD has it's own wireless stack and drivers. A lot of 11n hardware was supported in a/b/g modes only.
382.
by brynet 11y ago
The 5.9 release includes many pledge(2)'d programs in base, but some notable ports include decompressors like bzip2/unzip/p7zip/xz.. oh, and Chromium.
383.
Implementation of Xen PVHVM drivers in OpenBSD [paper] [pdf](openbsd.org)
3 points by brynet 11y ago|0 comments
384.
by brynet 11y ago
Reyk Floeter's paper explains more about the implementation of the userland side, vmd(8), including its privsep design and the use of pledge(2): http://bhyvecon.org/bhyvecon2016-Reyk.pdf OpenBSD's vmm(4) isn'
385.
OpenBSD on Amazon AWS: An Unexpected Journey(blog.d2-si.fr)
3 points by brynet 11y ago|0 comments
386.
by brynet 11y ago
What 3rd party binaries? You mean the ~9000 packages?
387.
by brynet 11y ago
OpenBSD doesn't use GRUB. OpenBSD's EFI loader is a port of the existing second-stage loader, boot(8). It can load both i386 and amd64 kernels, and there are EFI binaries for 64-bit and 32-bit firmware.
388.
by brynet 11y ago
On BSD, unlike Linux, many utilities including dd(1) will dump a progress report when receiving SIGINFO. This was traditionally bound to ^T in shells, either by default or using stty(1).
389.
by brynet 11y ago
The video suggests the Blu-Ray drive is attached to an AHCI SATA controller. So maybe there was some other legal or technical reason they needed to isolate it from the internal storage.
390.
by brynet 11y ago
The HDD is the only user-serviceable part in the PS4, perhaps USB was chosen over PCIe SATA to make theoretical DMA attacks on the system more difficult?

More ›