brynet

22 ms·

241.
by brynet 7y ago
The ports that receive -stable updates in CVS. That usually means important security fixes, chosen at the discretion of both the port maintainers and developers building stable packages. The @OpenBSD_stable Twitter account may be helpful, p
242.
by brynet 7y ago
You may be waiting for awhile.
243.
by brynet 7y ago
Thanks to solene@, sthen@ and pea@ for making this a possibility! pkg_add -u
244.
by brynet 7y ago
> a lot of GPLv2 code "A lot" is quite the exaggeration for "at most 5". GPLv2 licenced software: • cvs • texinfo (for software lacking proper mdoc(7) manuals) • mkhybrid • readline • gcc/gdb/bintuils, suppo
245.
by brynet 7y ago
OpenBSD has a new release every 6 months, which includes a new set of packages. Or you can help test -current snapshots, which has at least on amd64/i386 new packages generally every 24 hours, depending on the point in release cycle we
246.
by brynet 7y ago
Indeed, that OpenBSD can succeed in 3 days, with an errata team typically between 4-6 people, what Microsoft as a company with well over a hundred thousand employees, is failing at 90 days. Doesn't explain that.
247.
by brynet 7y ago
Except OpenBSD isn't shipping broken patches.. so I'm struggling to see your point. There's a pretty substantial difference between 3 days and 90 days (or 100). And one could argue that any amount of days after the embargo en
248.
by brynet 7y ago
Lately OpenBSD has been consistently pushing out new security errata, with as quick as a ~3 day turnaround from finding/reporting to released fix, even for difficult issues; like Intel MDS. If OpenBSD can do that, why can't Micros
249.
by brynet 7y ago
The malloc(3) family will absolutely fail on OpenBSD, for many reasons: login.conf/ulimits, calloc(3) for when integer overflow is detected (nmemb * size), same for OpenBSD's reallocarray extension. And yes, because the system was
250.
by brynet 7y ago
There are the slides from Theo de Raadt's talk at Calgary UNIX Users group (CUUG), May 28 2019. http://www.cuug.ab.ca/
251.
by brynet 7y ago
> Unfortunately, http://www.libressl.org/ won’t help you either, because there literally isn’t any documentation of LibreSSL. This is untrue. The front page contains links to the documentation inline, OpenBSD/LibreS
252.
by brynet 7y ago
OpenBSD no longer has lkm, or any loadable kernel module framework. Any kernel implementation would have to be part of the kernel source tree (this one is userland, in ports).
253.
by brynet 7y ago
If you aren't able to watch the video, be sure to check out the slides from his talk! https://lteo.net/assets/pdf/lteo-openbsd-carolinacon15-20190...
254.
by brynet 7y ago
A counterpoint-counterpoint, see OpenBSD's recent work on compiler/toolchain-based ROP mitigations for clang to replace ROP-friendy instructions with safer alternatives, and RETGUARD, which completely replaced the traditional stac
255.
by brynet 7y ago
It did, it was just not installed by default, it was originally only available at build-time (as eflrdsetroot). This just promoted it to a regular base utility, and also it was rewritten using libelf(3).
256.
by brynet 7y ago
You're reading the manual upgrade guide, for remote systems where you would otherwise cannot boot the ramdisk kernel to upgrade, which handles all of that for you. If you have console access to the machine, serial or glass. Things are
257.
by brynet 7y ago
Because perl is part of the base system, and not a package, harmless files are typically not removed by the OpenBSD Installer. You don't have to remove those files, the upgrade guide simply indicates they're no longer required.
258.
by brynet 7y ago
Todd's given an update at AsiaBSDcon 2019, unfortunately video is not up for that yet. Slides: https://www.openbsd.org/papers/asiabsdcon2019-rop-slides.pdf Paper: https://www.openbsd.org/papers&#x2
259.
AsiaBSDCon 2019: Removing ROP Gadgets from OpenBSD [Paper](doi.asiabsdcon.org)
9 points by brynet 8y ago|0 comments
260.
by brynet 8y ago
I'd be curious to know if they ironed out this "small wrinkle" in the 0.71 WoA (Windows 10 on ARM) binaries they just released. https://community.arm.com/developer/tools-software/tools/b/t.
261.
by brynet 8y ago
> Gnome created a hard dependency on systemd and thus can't be used any longer on openbsd. This isn't true, OpenBSD has GNOME 3.30.2 in ports. It maintains patches to keep it working for users, who can install it with the meta
262.
Security Vulnerability Mitigations [video](youtube.com)
1 points by brynet 8y ago|0 comments
263.
by brynet 8y ago
This is a talk given at EuroBSDcon 2018 in Bucharest, Romania https://2018.eurobsdcon.org/talks-speakers/#ToddMortimer Slides: http://www.openbsd.org/papers/eurobsdcon2018-rop.pdf Previous discuss
264.
Removing ROP Gadgets from OpenBSD, Todd Mortimer [video](youtube.com)
7 points by brynet 8y ago|1 comments
265.
by brynet 8y ago
The Heartbleed bug would have been found then fixed by the munmap, as the process would have crashed. This has nothing to do with clearing data, it would not have found this. > And in the context of OpenSSL, this kind of fanciness in som
266.
by brynet 8y ago
This is ignoring an important benefit of the libc implementations of malloc/free on OpenBSD, free pages are being opportunistically munmap'd at random. This catches actual bugs. Otto Moerbeek has a great recent Twitter thread on t
267.
by brynet 8y ago
I believe it's mentioned, but BSD conferences are often a great place to find presentations that typically gravitate towards low level systems C programming. OpenBSD has an events page with a list of past talks given by developers, alo
268.
OpenBSD in Stereo with Linux VFIO(jcs.org)
11 points by brynet 8y ago|0 comments
269.
by brynet 8y ago
Soo, how about individual OpenBSD hackers who just really like free pizza? :] https://brynet.biz.tm/wallofpizza.html cough
270.
by brynet 8y ago
Hi, that is not true. The "dns" promise only allows sockets with the SOCK_DNS option, the kernel restricts access to only DNS type operations and port numbers (enough for libc to do DNS). The kernel tries to separate pledges as ti

More ›