Re: Verify authenticity of installation files on mirrors?

2008-04-07 Thread Nikns Siankin
I did not find a file on the OpenBSD mirrors which contains a digital signature for the 'MD5' files which are placed in the platformspecific directories (e.g.: ftp://ftp.openbsd.org/pub/OpenBSD/4.2/i386/). Is there no way to verify the authenticity of the installation files? No, there is no

Re: Verify authenticity of installation files on mirrors?

2008-04-07 Thread Nikns Siankin
You see how openbsd cares about secure distribution ;] Don't be a moron. OpenBSD is built by the developers, for the developers. Luckily, you can obtain an official copy of each release by CD (and support the project in so doing). That's the way it is. Deal with it! (Or, move on.) You should

serious weakness in OpenBSD's PRNG

2008-02-06 Thread Nikns Siankin
http://readlist.com/lists/securityfocus.com/bugtraq/4/22004.html As you may appreciate, this enables DNS cache poisoning for OpenBSD much like my earlier attacks on BIND 9, BIND 8 and Microsoft Windows DNS server. Interestingly enough, OpenBSD uses a flavor of this PRNG for another field, this

Re: facts about OpenBSD

2008-01-14 Thread Nikns Siankin
On Mon, Jan 14, 2008 at 12:11:13PM +0100, Peter N. M. Hansteen wrote: Joe [EMAIL PROTECTED] writes: # Secure Distribution. The most secure operation system gets distributed on FTP servers as unsigned binaries. You should create your own binaries if you want secure binaries. He's also

Re: facts about OpenBSD

2008-01-14 Thread Nikns Siankin
On Mon, Jan 14, 2008 at 01:14:07PM +0100, Peter N. M. Hansteen wrote: Nikns Siankin [EMAIL PROTECTED] writes: When we will meet in Riga, I will like to hear from you explanation, how does putting md5 checksum file *along* with installables on the same vulnerable channel, helps to make sure

Re: facts about OpenBSD

2008-01-14 Thread Nikns Siankin
On Mon, Jan 14, 2008 at 02:58:17PM +0100, Thordur I. Bjornsson wrote: Lots of whining. Where are your diffs to fix these issues ? Well, before you ask for diffs, I have to hear from devs, that these ARE considered to be issues that MUST be fixed. Until that, i can stick my diffs in your ass.

Re: facts about OpenBSD

2008-01-14 Thread Nikns Siankin
On Mon, Jan 14, 2008 at 01:39:15PM -0600, Jacob Yocom-Piatt wrote: you are correct that some of the issues you brought up are actual shortcomings in openbsd. however, **bitching** that these are problems that need to be fixed is about as rude as you can get. a number of the issues you

Re: facts about OpenBSD

2008-01-11 Thread Nikns Siankin
Thanks everyone who responded in constructive fashion, and thanks for all additions to list, sorry for not answering you all! These who got hurt about these truthfull facts, rest in peace. hehehe On Wed, Jan 09, 2008 at 11:03:29PM +0200, Nikns Siankin wrote: Facts about OpenBSD: # Stable

Re: facts about OpenBSD

2008-01-10 Thread Nikns Siankin
On Wed, Jan 09, 2008 at 05:07:35PM -0600, Jacob Yocom-Piatt wrote: Facts about Nikns Siankin: # Whiner. He bitches incessantly about stuff and does nothing to fix it. # Jerk. He ignores that most of the development time that goes into # Misleading. He claims the system is distributed

Re: facts about OpenBSD

2008-01-10 Thread Nikns Siankin
On Thu, Jan 10, 2008 at 09:56:01PM +1100, Rod Whitworth wrote: On Thu, 10 Jan 2008 12:00:53 +0200, Nikns Siankin [EMAIL PROTECTED] wrote: [..] We have had several pointless trolls too many lately. As a result your pointless humour does not raise a laugh. Stay on-topic or fuck off like jacob

Re: facts about OpenBSD

2008-01-10 Thread Nikns Siankin
On Thu, Jan 10, 2008 at 11:56:15AM +0100, Joerg Zinke wrote: On Wed, 9 Jan 2008 23:03:29 +0200 Nikns Siankin [EMAIL PROTECTED] wrote: Facts about OpenBSD: # Stable release cycle. If you want to run latest bugfree ClamAV or FireFox - upgrade to CURRENT! But don't forget to buy release

Re: facts about OpenBSD

2008-01-10 Thread Nikns Siankin
On Thu, Jan 10, 2008 at 12:43:48PM +, Edd Barrett wrote: Hello, A lot of this is down to manpower or lack thereof. You can make it better if you put some effort in. Failing that, If it's so bad, then why don't you use another operating system? Hi, I don't believe anymore, that someone from

Re: facts about OpenBSD

2008-01-10 Thread Nikns Siankin
On Thu, Jan 10, 2008 at 07:02:16PM +0530, Amarendra Godbole wrote: On Jan 10, 2008 6:14 PM, Nikns Siankin [EMAIL PROTECTED] wrote: [...] I get lot of response offlist. It seems that people are afraid to discuss these issues onlist, guess because of this YOURE WHINER or DONT LIKE DONT USE

Re: facts about OpenBSD

2008-01-10 Thread Nikns Siankin
On Thu, Jan 10, 2008 at 09:04:52AM -0500, Curt Micol wrote: On Jan 10, 2008 8:39 AM, Nikns Siankin [EMAIL PROTECTED] wrote: I see people keep repeating nonsense like this instead of talking about topic. This is due to the fact that people don't feel your thoughts are on topic. Bitch elsewhere

facts about OpenBSD

2008-01-09 Thread Nikns Siankin
Facts about OpenBSD: # Stable release cycle. If you want to run latest bugfree ClamAV or FireFox - upgrade to CURRENT! But don't forget to buy release CD's!!! # Secure By Default. OpenBSD uses broken WEP for securing WiFi networks. Has no WPA/WPA2 support. # Do not let serious problems

openssh errata

2006-10-01 Thread nikns
http://www.openssh.com/report.html *patches and notes regarding OpenSSH* points to http://www.openbsd.org/errata.html Shouldn't there be seperate errata for openssh? If not, I should see there recent DoS security vulns that has been fixed in 4.4, but I don't see them there. Is there one place

Free, functional and sort of secure.

2006-09-20 Thread nikns
http://www.ruxcon.org.au/presentations.shtml#3 Exploiting OpenBSD - Ben Hawkes Free, functional and sort of secure. This presentation explores the cutting edge of exploit development on an OpenBSD system. Topics discussed will include the stack-smashing protector (SSP/ProPolice), Address

Re: Blowfish still good enough?

2006-01-03 Thread nikns
http://www.onlamp.com/lpt/a/6384 Inside NetBSD's CGD by Federico Biancuzzi 12/21/2005 OpenBSD didn't import CGD even if Ted Unangst wrote a port some time ago. Do you think OpenBSD's svnd is already offering the same features? RD: In a sense, OpenBSD's svnd appears to offer some of the same

Re: Bug Hunting 101 - Finding The Alpha Bug

2005-12-29 Thread nikns
On Thu, Dec 29, 2005 at 01:51:34PM -0800, J.C. Roberts wrote: On Tue, 27 Dec 2005 09:01:00 +0200, nikns [EMAIL PROTECTED] wrote: Upgraded alphastation to 3.8 and first time in my life hit alpha bug. ;) Kernel panicked while ungziping src.tar.gz. When I hit continue in ddb I was dropped into other

Re: Bug Hunting 101 - Finding The Alpha Bug

2005-12-26 Thread nikns
Upgraded alphastation to 3.8 and first time in my life hit alpha bug. ;) Kernel panicked while ungziping src.tar.gz. When I hit continue in ddb I was dropped into other panic. There is photos of panic, maybe it helps someone to find alphabug :)) http://secure.lv/~nikns/alphabug/

pptp-linux to access Microsoft VPN servers

2005-11-06 Thread nikns
Hello! Has anyone working pptp-linux client to access MS VPN servers? Could someone share config? Thanks!

Re: Two Isp Fault Tollerance Help

2005-10-09 Thread nikns
I have the same issue. Resolved it with ifstated. In OpenBSD 3.8 comes in base system. With pf switches route-to. my setup: ifstated.conf: $OpenBSD: ifstated.conf,v 1.6 2005/02/07 06:08:10 david Exp $ init-state primary net = '( ping -t 128 -q -c 1 -w 1 159.148.60.20 /dev/null every 10 || \