brynet

14 ms·

151.
OpenBSD KDE Plasma Desktop(rsadowski.de)
322 points by brynet 3y ago|137 comments
152.
by brynet 3y ago
OpenBSD maintained several local patches to nginx, such as chroot [0] by default and reallocarray fixes, but it was rejected by the upstream and too big to maintain locally. OpenBSD httpd would probably have never existed if nginx upstream
153.
by brynet 3y ago
No HTTP server software can be guaranteed to be completely secure, but OpenBSD httpd is at least privsep, always runs in a chroot, and each process is pledged quite tightly, that means http/tls protocol speakers can't write to the
154.
by brynet 3y ago
On my personal website [0] I've kept a small list of "mildly interesting sites" which just gets duplicated onto each page (all static HTML), but it feels like I've only ever removed dead links from it and rarely added an
155.
by brynet 3y ago
Follow-up mail from Theo showing what the full removal looks like. https://marc.info/?l=openbsd-tech&m=169842095809570&w=2
156.
by brynet 3y ago
Congrats bcantrill, et al.
157.
by brynet 3y ago
Not pledge. This is an overdesigned, overcomplicated clone of mimmutable. https://man.openbsd.org/mimmutable The OpenBSD kernel does automatic immutable for certain regions (e.g: stack, program text, bss), as well as from l
158.
by brynet 3y ago
Why is this marked [dupe]? This link is the official release page, and the most active discussion for it on HN today. Announcement mail: https://marc.info/?l=openbsd-announce&m=169746103423179&w=2
159.
by brynet 3y ago
No, you got that backwards. https://man.openbsd.org/httpd#HISTORY > The httpd program first appeared in OpenBSD 5.6. httpd is based on relayd(8).
160.
by brynet 3y ago
> This allows for very fast dropping of DOS flood attacks. OpenBSD has something very close to that w/ bpf(4) BIOCGFILDROP filter "drop". https://man.openbsd.org/bpf#BIOCGFILDROP https://man.ope
161.
Viable ROP-free roadmap for i386/armv7/riscv64/alpha/sparc64(marc.info)
6 points by brynet 3y ago|0 comments
162.
by brynet 3y ago
That strategy won't fly with IBT. Now all software must pay the price and miss out on important mitigations, for all eternity, just because of some largely unused feature in one compiler?
163.
by brynet 3y ago
It's an important comparison of the mechanisms, even in 2023, you can still find binaries on modern Linux distributions with executable stacks due to the fail-open design, 20 years later. The fact that Linux hasn't learned the rig
164.
by brynet 3y ago
Dave also gave a companion talk at both AsiaBSDCon and BSDCan this year, be sure to check out his slides which contain pictures (mostly of his dogs, Maple and Moxie). https://www.bsdcan.org/events/bsdcan_2023/sessi
165.
by brynet 3y ago
https://brynet.ca/ Not really a blog, just a few static HTML articles I've written over the years related to my (and others) work on OpenBSD. I hope to write some more eventually, but preoccupied with other things in m
166.
by brynet 3y ago
> This is interesting, am I correct in thinking this a feature implemented by Apple Yes, battery charge control is a hardware(/firmware) feature supported on other modern laptops as well, such as the Lenovo ThinkPads, but it's
167.
by brynet 3y ago
Windows may not have taken advantage of the 64-bit CPU in these machines, but other operating systems of the time certainly did. OpenBSD/alpha was a 64-bit only port (LP64) to the DEC Alpha machines, started in 1996 and remains support
168.
by brynet 3y ago
> On 64-bit Apple platforms, the entire 4 GiB 32-bit address space (addresses [0x00000000, 0xFFFFFFFF]) is not accessible by the process, which catches both NULL pointer dereference bugs and 64-bit to 32-bit pointer truncation bugs. Is t
169.
by brynet 4y ago
> Wonder if the author is aware of the reasons why this was disabled (it's functionally gone on both platforms). On iOS newer processors have PAC which provides much stronger guarantees against ROP and Linux disabled it because exec
170.
by brynet 4y ago
OpenBSD is currently in release mode, 7.3 is due out in April. Happens every 6 months like clockwork.
171.
Dynamic host configuration, please(sha256.net)
2 points by brynet 4y ago|0 comments
172.
by brynet 4y ago
Indeed. :-)
173.
Privilege drop, separation, and restricted-service operating mode in OpenBSD(sha256.net)
74 points by brynet 4y ago|44 comments
174.
by brynet 4y ago
Commit message: https://marc.info/?l=openbsd-cvs&m=167578479210650&w=2 > "Release date for this was set to be January 31. Unilaterally pushed back to February 7 by OpenSSL by way of announcement of many comp
175.
by brynet 4y ago
> Is it still necessary to do the serial console procedure to install it on the RaspberryPi? No, you can switch to a glass console by typing 'set tty fb0' at the 'boot>' prompt. https://cdn.openbsd.org&#
176.
by brynet 4y ago
The vast majority of this sites content is copied directly from other sources, such as the official OpenBSD FAQ[0], without credit. [0] https://www.openbsd.org/faq/
177.
Next steps toward mimmutable (OpenBSD)(undeadly.org)
5 points by brynet 4y ago|0 comments
178.
by brynet 4y ago
No, unaccelerated framebuffer for now. X works though.
179.
by brynet 4y ago
Yes you should, buster.
180.
by brynet 4y ago
> I use the wifi on OpenBSD fine without 802.11ac support But OpenBSD does have 802.11ac support*, since 7.1. :-) * On iwm(4)/iwx(4) only for now. https://www.openbsd.org/71.html

More ›