brynet

18 ms·

211.
by brynet 5y ago
OpenBSD's ports tree gets compiled using multiple compilers (clang/gcc) and compiler versions (base 4.2.1, ports gcc8/11), across many different architectures. In most cases when an upstream has added -Werror to a Makefile, t
212.
by brynet 5y ago
OpenBSD has a WIP driver for the NVMe controller on the M1 chip, but AFAIK it's not working 100% reliably yet. https://github.com/openbsd/src/commit/1c31dbaaf6000562ff37f7... https://github.co
213.
by brynet 6y ago
Regardless of whether you're running 6.8 release, have applied the official syspatches, or compiled your own system from sources (-stable or release + patches). The binary packages compiled from the -stable ports tree are supported on
214.
by brynet 6y ago
> And of course there is no mechanism for regular updates either. Not true. There is both syspatch(8) to apply binary updates and sysupgrade(8) to upgrade to the next release or snapshot. And there are regular packages available for -sta
215.
by brynet 6y ago
Who's recommending it? It's up to the user to decide whether to stick with -release/-stable, with the understanding that packages won't see significant updates or new features until they upgrade to the next release in 6
216.
by brynet 6y ago
OpenBSD 6.8-stable packages are in a different directory, the ones you linked are -release packages which are unchanged since OpenBSD 6.8 was released. https://cdn.openbsd.org/pub/OpenBSD/6.8/packages-stable&#
217.
by brynet 6y ago
To quote Theo de Raadt's recent commit to OpenBSD's rand(3)/random(3) man pages, since people seem to be very confused here. +The deterministic sequence algorithm changed a number of times since +original developmen
218.
by brynet 6y ago
Check out the release song! https://www.openbsd.org/lyrics.html#68
219.
by brynet 6y ago
Unrelated, this is an arm64 thing.
220.
by brynet 6y ago
The OpenBSD Foundation tells you how your funds are going to be used, if you instead choose to donate to the project, then you're donating to Theo and it is entirely his discretion how he chooses to spend it on the project. Donations w
221.
by brynet 6y ago
Yes the author is incorrect in their slides, OpenBSD has userland ASLR, it uses both PIE by default and also created static-PIE, which are self-relocating executables. There's also been a considerable effort to convert OpenBSD's a
222.
by brynet 6y ago
> If you want to have fun, try calling revoke(2) on character devices that are not TTYs. I remember fixing a bug in FreeBSD once, where you could make the system panic by calling that function on /dev/bpf. IIRC there's a
223.
by brynet 6y ago
This is the kernel part of the dynamic profiling/tracing framework created by Martin Pieuchot (mpi@), unfortunately the userland parts btrace(8) (and the bt(5) manual) were not linked to the build for the 6.7 release, so those manuals
224.
by brynet 6y ago
Just another OpenBSD developer chiming in that this is the official store link; profits from the sales go towards paying artists for the next release. The artwork for 6.7 was done by Jonni Phillips!
225.
by brynet 6y ago
You can permanently delete your keybase.io account with the command-line utility: $ keybase account delete
226.
by brynet 7y ago
OpenBSD errata and binary syspatches are already available for 6.5/6.6. https://man.openbsd.org/syspatch https://www.openbsd.org/errata66.html#p018_smtpd_tls https://www.openbsd.org/err
227.
by brynet 7y ago
The oss-security@ mailing list is hosted by openwall. This advisory was posted by Qualys Security.
228.
by brynet 7y ago
No, Mozilla does not distribute Firefox binaries for OpenBSD.
229.
by brynet 7y ago
Indeed, this is a very serious problem on other systems. Even more so than this article suggests. This has impacted portable versions of OpenSSH on several occasions, due to certain major PAM modules, meaning that sshd on Linux would always
230.
by brynet 7y ago
The last time it came up. https://news.ycombinator.com/item?id=21020024
231.
by brynet 7y ago
I don't follow, I'm sorry. OpenBSD has never used GNU libc. The BSD projects have long developed their own C libraries. The clang compiler is a part of the LLVM collection, it is not derived from gcc at all. As for GCC, The GNU pr
232.
by brynet 7y ago
Some things will get merged automatically by the first run of sysmerge(8) after upgrade, if the machine is remote you should be able to run. $ doas dmesg -s -s ... This can be used to review rc(8) system startup messages.
233.
by brynet 7y ago
gcc is still included in base on amd64 for now, but the default system compiler on amd64 (and i386) has been clang since OpenBSD 6.2. If you use the /usr/bin/{cc,c++} symlinks, you get clang. Nothing uses the base-gcc now, bu
234.
by brynet 7y ago
Sure it would, except nobody is brave enough to do it. They're too busy attacking some detail, this week it's diskless situations, next week it's "untrusted" random hardware/rdrand, and ignore a system that mix
235.
by brynet 7y ago
It's recommended that people check out Theo de Raadt's Hackfest 2014 presentation on OpenBSD's arc4random(3). https://www.openbsd.org/papers/hackfest2014-arc4random Also suggest reading from page 19 on,
236.
by brynet 7y ago
POSIX never rejected strlcpy/strlcat, because they were never submitted for inclusion. Also, POSIX doesn't control the str* namespace, ISO C does. Not that it matters, as it wasn't submitted there either. But that's besi
237.
by brynet 7y ago
> I don't believe OpenBSD considers GPLv2 to be acceptable either. The GPLv3 is not acceptable in base at all, GPLv2 is unacceptable for new code, but we still have a few examples in base, very few.
238.
by brynet 7y ago
No, it doesn't. The aforementioned concerns have nothing to do with the GPL license. https://github.com/llvm/llvm-project/blob/master/llvm/LICENS... > .. "If you combine or link compile
239.
by brynet 7y ago
Note that this release (9.x) marks the first to be no longer available under the original permissive NCSA (BSD-like) LLVM license, going forward the LLVM project has moved to an "Apache 2.0 with LLVM Exceptions" for everything. An
240.
by brynet 7y ago
Unrelated. I don't know what all mtier provided, but chromium port updates are not backported to -stable. A quick check indicates they did not provide this. Also note that mtier announced they will no longer be providing -stable packag

More ›