DuckDuckGo

 

 

 

1.  OpenBSD Journal: A resource for the OpenBSD community
    In what can only be called a great stride forward in routing security, Sebastian Benoit (benno@) announced the availability of rpki-client version 9.0.The announcement reads, Subject: rpki-client 9.0 released From: Sebastian Benoit <benno openbsd ! org> Date: 2024-03-03 17:24:06 rpki-client 9.0 has just been released and will be available in the rpki-client directory of any OpenBSD mirror soon.
    undeadly.org/cgi    2024-02-29T00:00:00.0000000
   
2.  Introducing dhcpleased(8)
    Now enabled by default on OpenBSD -current is dhcpleased (8), a dynamic host configuration protocol daemon written by florian@ (Florian Obser), who spoke with us about his work: I suppose this is either the KAME project 's fault, or if we don't want to go that far back, Theo's fault. At g2k16 he floated the idea of a network configuration daemon.
    undeadly.org/cgi?action=article;sid=20210722072359
   
3.  OpenBSD 7.0 released
    Contributed by rueda on 2021-09-20 from the Undeadly-SYNs dept. The OpenBSD project has released OpenBSD 7.0 , the project's 51 st release. As usual, the release page offers highlights, installation and upgrade instructions, as well as links to other resources such as the detailed changelog. Notable improvements include, but are not limited to:
    undeadly.org/cgi?action=article;sid=20211014144620
   
4.  About the OpenBSD Journal
    OpenBSD Journal. Home Archives About Submit Story Create Account Login. About the OpenBSD Journal Purpose. The OpenBSD Journal is a site dedicated to providing news and information of interest to members of the OpenBSD community.. The site is run by a small group of volunteers. Although several OpenBSD developers are registered users of the site, and the site receives frequent contributions ...
    undeadly.org/cgi?action=about
   
5.  OpenBSD Journal: A resource for the OpenBSD community
    In what can only be called a great stride forward in routing security, Sebastian Benoit (benno@) announced the availability of rpki-client version 9.0.The announcement reads, Subject: rpki-client 9.0 released From: Sebastian Benoit <benno openbsd ! org> Date: 2024-03-03 17:24:06 rpki-client 9.0 has just been released and will be available in the rpki-client directory of any OpenBSD mirror soon.
    undeadly.org/cgi?action=front    2024-04-07T00:00:00.0000000
   
6.  OpenBSD 7.3 released
    Calgary and elsewhere, 2023-04-10 : The OpenBSD project today announced the release and general availability of its latest stable version, OpenBSD 7.3 . Eagerly anticipated by users, engineers, enthusiasts and industry pundits all over the world, this release contains a number of improvements over earlier versions, including but not limited to.
    undeadly.org/cgi?action=article;sid=20230410140049    2023-03-06T00:00:00.0000000
   
7.  OpenBGPD 7.5 released
    We have released OpenBGPD 7.5, which will be arriving in the OpenBGPD directory of your local OpenBSD mirror soon. This release includes the following changes to the previous release: Implement RFC 9234 - Route Leak Prevention and Detection Using Roles in UPDATE and OPEN Messages. Full support for RFC 7911 - Advertisement of Multiple Paths in BGP .
    undeadly.org/cgi?action=article;sid=20220716101930    2022-07-15T00:00:00.0000000
   
8.  OpenBSD 7.4 Released
    The OpenBSD project has announced the release of OpenBSD 7.4, the 55 th release of the OpenBSD operating system.. The new release contains a number of innovations and improvements across a number of areas, including Mandatory enforcement of indirect branch targets [See earlier report].; viogpu(4), a VirtIO GPU driver [See earlier report]. vmd(8) has moved to a multi-process model for virtio(4 ...
    undeadly.org/cgi?action=article&sid=20231016130614&ref=upstract.com    2023-09-27T00:00:00.0000000
   
9.  OpenSSH 9.3p2 released
    OpenSSH 9.3p2 released. Contributed by grey on 2023-07-19 from the It's Wednesday, but you should still patch this now. dept. As announced by Damien Miller: "We've just made an OpenSSH release to fix a remotely exploitable RCE vulnerability in ssh-agent's PKCS#11 support (CVE-2023-38408).
    undeadly.org/cgi?action=article;sid=20230719180438    2023-07-19T00:00:00.0000000
   
10.  Initial support for guided disk encryption in the installer
    The OpenBSD installer now has basic support for configuring disk encryption during the regular installation process. Previously, disk encryption needed to be set up manually by dropping to the shell from the installer. Initial support, likely to be expanded upon, was committed by Klemens Nanni ( kn@) on March 7, 2023 . The commit reads,
    undeadly.org/cgi?action=article;sid=20230308063109    2023-03-07T00:00:00.0000000
   
11.  20 years since "and we're just starting": undeadly.org turns 20 (2024 ...
    Contributed by Peter N. M. Hansteen on 2024-04-07 from the 20 years a Puffyist dept. It's been 20 years since the first undeadly.org post appeared. At that point in our history, we had been enjoying frequent updates to the OpenBSD Journal at the deadly.org site for more than four years, and most of us thought it was an April's Fool prank when ...
    undeadly.org/cgi?action=article;sid=20240409044953    2024-04-09T04:52:58.0000000
   
12.  OpenBSD KDE Status Report
    OpenBSD has managed to drop KDE3 and KDE4 in the 6.8 -> 6.9 release cycle. That makes me very happy because it was a big piece of work and long discussions. This of course brings questions: Kde Plasma 5 package missing. After half a year of work, I managed to successfully update the Qt5 stack to the last LTS version 5.15.2. On the whole, the most work was updating QtWebengine.
    undeadly.org/cgi?action=article;sid=20210124113220
   
13.  malloc leak detection available in -current
    OpenBSD-current just grew a new tool for developers working on OpenBSD to detect unsafe behaviors in their code.OpenBSD lets you more easily track memory allocations and whether allocations are properly freed after use. In a message to tech@, Otto Moerbeek (otto@) announced the new functionality: . Subject: malloc leak detection available in -current From: Otto Moerbeek <otto drijf ! net> Date ...
    undeadly.org/cgi?action=article;sid=20230417074903    2023-04-17T00:00:00.0000000
   
14.  Next steps toward mimmutable, from deraadt@
    In a recent message to the tech mailing list, Theo de Raadt (deraadt@) summarized the state of the new memory protections work.The thread also includes a followup from Otto Moerbeek (otto@) on consequent changes to the memory allocation mechanisms.. Theo writes, From: "Theo de Raadt" <deraadt openbsd ! org> Date: Fri, 18 Nov 2022 03:10:05 +0000 To: openbsd-tech Subject: More on mimmutable ...
    undeadly.org/cgi?action=article;sid=20221120115616    2022-11-19T00:00:00.0000000
   
15.  (Even more) Aggressive randomisation of stack location
    In a late-stage addition prior to the release of OpenBSD 7.3, Mark Kettenis (kettenis@) has committed [more] aggressive randomisation of the stack location for all 64-bit architectures except alpha: CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2023/03/19 14:32:13 Modified files: sys/kern : exec_subr.c sys/arch/amd64/include: vmparam.h sys/arch/arm64/include: vmparam.h ...
    undeadly.org/cgi?action=article;sid=20230319230523    2023-03-19T00:00:00.0000000
   
16.  How to create a USB flash installer for OpenBSD
    The isolinux method is quite interesting, they provide an HD-compatible MBR and post-process the ISO with a program which searches for the location of the actual isolinux boot loader and patches it in.
    undeadly.org/cgi?action=article&sid=20140225072408
   
17.  SMT Disabled by Default in -current
    Contributed by rueda on 2018-06-20 from the sedulously-mitigating-threats dept. As part of ongoing mitigations against CPU vulnerabilities, -current has gained a new sysctl, " hw.smt ", to control Simultaneous Multi Threading ( SMT ). This is disabled by default (only on Intel® CPUs, for now). The full commit was: sys/arch/amd64/amd64: cpu.c ...
    undeadly.org/cgi?action=article;sid=20180620110722
   
18.  Transparent network audio with mpd & sndiod
    So in the end, it's super easy to: enable network support in sndio on the remote machine i want the audio to play by adding -L<local ip> to sndiod_flags (i have two audio devices, with an input coming from the webcam): sndiod_flags="-L10.246.200.10 -f rsnd/0 -f rsnd/1". open pf on port 11025 from the sound server ip: pass in proto tcp from 10 ...
    undeadly.org/cgi?action=article&sid=20180410063454
   
19.  OpenBSD gains Wi-Fi "auto-join"
    In a change which is bound to be welcomed widely, -current has gained "auto-join" for Wi-Fi networks. Peter Hessler (phessler@) has been working on this for quite some time and he wrote about it in his p2k18 hackathon report.He has committed the work from the g2k18 hackathon in Ljubljana: CVSROOT: /cvs Module name: src Changes by: phessler@cvs.openbsd.org 2018/07/11 14:18:09 Modified files ...
    undeadly.org/cgi?action=article;sid=20180712084645
   
20.  Tunneling vxlan(4) over WireGuard wg(4) - undeadly.org
    Rob Turner writes in about a practical guide to running vxlan(4) over a WireGuard (wg(4)) connection. Rob writes, I struggled to find much more info than Reyk's ...
    undeadly.org/cgi?action=article;sid=20230214061330    2023-02-13T00:00:00.0000000
   
21.  OpenSSH U2F/FIDO support in base - undeadly.org
    support to base and tweaked OpenSSH to use them directly. This means. there will be no additional configuration hoops to jump through to use. U2F/FIDO2 security keys. Hardware backed keys can be generated using " ssh-keygen -t ecdsa-sk". (or "ed25519-sk" if your token supports it). Many tokens require to be. touched/tapped to confirm this step.
    undeadly.org/cgi?action=article;sid=20191115064850
   
22.  OpenBSD Developer: Ted Unangst
    OpenBSD Developer: Ted Unangst. Date: 2015-10-25. On October 18th 20 years ago the first commits to the OpenBSD project landed in the CVS repository. Today on the anniversary the beastie.pl team invites all readers to a series of interviews that our staff conducted with the project developers. We continue with our eight interview - Ted Unangst. 1.
    undeadly.org/features/2015/10/beastie_pl_interviews/ted-unangst.html
   
23.  Wayland on OpenBSD
    Wayland on OpenBSD. Contributed by rueda on 2023-07-10 from the way to go to land dept. Matthieu Herrb ( matthieu@) has written some notes on his work at the (recently-concluded) g2k23 hackathon in Tallinn, Estonia . His article, Wayland on OpenBSD , starts: These are my notes from experimenting with building Wayland bits on OpenBSD during ...
    undeadly.org/cgi?action=article;sid=20230711113344    2023-07-10T00:00:00.0000000