notaplumber

32 ms·

271.
by notaplumber 10y ago
OpenBSD has long included multiple system compilers as required for supported platforms, at one point gcc 4.2.1, gcc 3.3.6 and gcc 2.95.3 (!) were in the tree. OpenBSD 5.4 was the last version to include gcc2 for a.out/static lib platf
272.
by notaplumber 10y ago
OpenBSD's sendsyslog(2) made syslog_r(3) really cheap and usable virtually everywhere, also solved fd exhaustion issues.. and despite any protocol quirks.. syslog has a standard place in Unix arcana. It would be great of other systems
273.
by notaplumber 10y ago
> Linus's biggest contribution to the world was the modern open source development methodology. OpenBSD made a pretty big contribution as well. http://www.openbsd.org/papers/anoncvs-paper.pdf http:/&#x2F
274.
by notaplumber 10y ago
I personally don't mind MBOX, it's a simple format and if you archive it regularly and don't let it grow exponentially, it can be nice to work with.
275.
by notaplumber 10y ago
I'd wager any mbox optimization efforts are put on the back burner in lieu of modern usages, which seem to be in favor using it as a IMAP client only.
276.
by notaplumber 10y ago
Meanwhile OpenBSD has had Haswell support since 5.5, Broadwell/Bay Trail since 5.9. http://www.openbsd.org/55.html http://www.openbsd.org/59.html
277.
by notaplumber 10y ago
You can always stick with the release binaries, which are unchanged.. or follow -current development by periodically upgrading to snapshots, where you can find more up-to-date binary packages. This is what developers run on their laptops, a
278.
by notaplumber 10y ago
> You didnt prove these are the right combo of features, that they in solo/combo work against strong attackers (instead of obscurity advantage), or even strongest ones of their respective classes (they're not) Security mitigati
279.
by notaplumber 10y ago
Why isn't an obvious choice? What other system has enabled by default the following security mitigations: * Enforced W^X in the kernel on i386/amd64/sparc64. * Enforced W^X userland as of 6.0 (..exceptions must have a special
280.
by notaplumber 10y ago
OpenBSD isn't just servers... https://news.ycombinator.com/item?id=11889000 https://news.ycombinator.com/item?id=11888695
281.
BFD (Bidirectional Forwarding Detection) in OpenBSD [pdf](openbsd.org)
70 points by notaplumber 10y ago|14 comments
282.
Open-Source Routing with OpenBSD(openbsd.org)
24 points by notaplumber 10y ago|0 comments
283.
by notaplumber 10y ago
The technical paper from his AsiaBSDCon talk: http://www.openbsd.org/papers/asiabsdcon2016-xen-paper.pdf
284.
Implementation of Xen PVHVM Drivers in OpenBSD – [pdf](openbsd.org)
30 points by notaplumber 10y ago|1 comments
285.
OpenBSD rc.d(8) – BSDCan 2016 – Antoine Jacoutot [pdf](openbsd.org)
31 points by notaplumber 10y ago|0 comments
286.
by notaplumber 10y ago
If that's your takeaway from this article, then I got some bad news for you. This kind of low-level analysis of programs is incredibly useful, it leads to discoveries of aberrant and often unexpected behaviour.. observing the system ca
287.
by notaplumber 10y ago
My observations.. * binutils 2.17 (last GPLv2) - complete. * all archs transitioned to pie - complete as of 5.7. * /sbin/init static pie - complete. * ROP gadgets are being hunted down systematically, many nop sleds changed to int
288.
by notaplumber 10y ago
Yep: http://marc.info/?l=openbsd-cvs&m=146168291000757&w=2
289.
by notaplumber 10y ago
OpenBSD has ROP, SROP mitigations, everything is compiled PIE. Even invented a static PIE variant for single-user and install media.
290.
Anne Canteaut – The struggle for secure cryptography (dotSecurity 2016)(thedotpost.com)
3 points by notaplumber 10y ago|0 comments
291.
by notaplumber 10y ago
This is SROP: http://www.cs.vu.nl/~herbertb/papers/srop_sp14.pdf
292.
SROP mitigation committed(undeadly.org)
1 points by notaplumber 10y ago|1 comments
293.
by notaplumber 10y ago
NX enforced kernel W^X, SMEP/SMAP, always-on stack protector and a limited attack surface (..say, from pledge(2)), only serve to make such theoretical attacks impractical against OpenBSD.
294.
by notaplumber 10y ago
No loadable kernel modules for OpenBSD either.
295.
by notaplumber 10y ago
As others have said, OpenBSD is not guilty of creating OpenSSL.. but here are a few of their other crimes. http://www.openbsd.org/innovations.html ^_^
296.
by notaplumber 11y ago
All correct, except BSD doesn't use GNU coreutils.
297.
Lobsters, now even better with developer hats(lobste.rs)
3 points by notaplumber 11y ago|0 comments