Re: Qubes-OS is "fake" security

2017-05-12 Thread I love OpenBSD
Both OpenBSD and Qubes OS don't guarantee perfect security. Qubes OS has a different take on security than OpenBSD. Both have different advantages and disadvantages. Physical separation is more expensive and you need to transport more devices from place to place. Qubes OS lets you run mainstream

Intel's Management Technology is indeed vulnerable

2017-05-02 Thread I love OpenBSD
INTEL-SA-00075 There is an escalation of privilege vulnerability in Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM), and Intel® Small Business Technology versions firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an unprivileged

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread I love OpenBSD
I second to more IPv6 related information. I am curious about blocking port scanning in IPv6 Web. Does pf let me put a CIDR into the named table based on offending IPv6 address and 64-bit mask? I mean something similar to 'overload ' option.