Re: @OpenBSD_src Twitter 140char limit?

2020-05-11 Thread Stuart Henderson
On 2020-05-11, Tommy Nevtelen wrote: > On 10/05/2020 23.30, Isak Holmström wrote: > > I do believe it's using the "new" limit introduced 2017 :) > > > > my $default_maxlen = 280; > > > > I found this on GitHub. Though there a reference in the code to 140. > > Yes.. I might not have counted the

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Stuart Longland
On 11/5/20 5:00 am, i...@aulix.com wrote: > Btw, does not it look like a PR competition of Linux from USA vs OpenBSD from > Canada/London? Actually, I think you'll find both OSes have significant contributions from all around the world. Linux (which is a kernel, not an OS) originated from

Re: Mandate control in OpenBSD like SELinux or AppArmor

2020-05-11 Thread Kevin Chadwick
On May 11, 2020 7:27:49 PM UTC, i...@aulix.com wrote: >Please let me know, what are analogues of SELinux and AppArmor in OBSD > http://www.openbsd.org/mail.html You are supposed to "do your homework" and try googling and searching the mailing list archive before asking questions. Clearly you

Mandate control in OpenBSD like SELinux or AppArmor

2020-05-11 Thread info
Please let me know, what are analogues of SELinux and AppArmor in OBSD ?

Re: @OpenBSD_src Twitter 140char limit?

2020-05-11 Thread Tommy Nevtelen
On 11/05/2020 21.23, Stuart Henderson wrote: On 2020-05-11, Tommy Nevtelen wrote: On 10/05/2020 23.30, Isak Holmström wrote: I do believe it's using the "new" limit introduced 2017 :) my $default_maxlen = 280; I found this on GitHub. Though there a reference in the code to 140. Yes.. I

Re: change default constraint server in ntpd.conf

2020-05-11 Thread Marko Cupać
On 2020-05-08 00:17, Theo de Raadt wrote: Theo de Raadt wrote: (...) Stuart Henderson wrote: (...) Dear Stuart, Theo, thank you for insightful answers. I admit my understanding of intricacies of ntp protocol equals zero - same as my current motivation to learn more about it. My need for

discard me

2020-05-11 Thread Salvatore Cuzzilla
discard me

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread slackwaree
I wish if the someone who took the time to make this page at least would make an antisystemD page instead. This is just a pointless brainless monkey(s) wasting our time webpage, it is not even funny and we are passed April 1 a long time ago. However I never knew linus said such things: "I

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Christian Weisgerber
On 2020-05-11, Stuart Longland wrote: > BSD came from the US (University of California), but most of today's > implementations have been very significantly changed since then. BSD built on top of AT UNIX, which came from Bell Labs in New Jersey. -- Christian "naddy" Weisgerber

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread info
I was told on the chat that Linux GNU software has hardly visible NSA backdoors and IMHO most funding for Linux seems to be from USA ? Only single Linus person alone is paid about 30 times more per year by Linux foundation than the whole OpenBSD foundation total fundraising goal, not sure if

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Philip Guenther
On Mon, May 11, 2020 at 4:28 PM wrote: > Is not a prohibition for USA citizens to work on OpenBSD cryptography > software parts an indication of trust relationship between current OpenBSD > and current USA? > I'm not sure what that sentence even means. What would a "trust relationship" between

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread info
> I'm not sure what that sentence even means. What would a "trust relationship" > between OpenBSD and "current USA" actually mean in terms of a CHANGE IN > BEHAVIOR? "CHANGE IN BEHAVIOR" of whom or of what? > Hell, what does "current USA" even _mean_?!? Very high activity of NSA to embed

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Philip Guenther
On Mon, May 11, 2020 at 6:09 PM wrote: ... > > And why would *you* care about those ways? If you can't tell us why you > would care, how can we answer your _real_ question? > Treat it as my secret, I want and that is why I ask because I can, I wish > you tell me the answer without a knowledge

Re: Mandate control in OpenBSD like SELinux or AppArmor

2020-05-11 Thread info
Good point, yesterday I found only: https://www.osnews.com/story/18684/selinux-vs-openbsds-default-security/ According to which there was not a mandate control in OpenBSD 10 years ago while in FreeBSD it appeared and existed significantly earlier.

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Brian Waters
If any widely-used open source software had government backdoors in it, nobody in the know would be telling folks about it in random IRC chat rooms. BW On Mon, 11 May 2020 18:13:35 -0700 wrote I was told on the chat that Linux GNU software has hardly visible NSA backdoors

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread info
> If any widely-used open source software had government backdoors in it, > nobody in the know would be telling folks about it in random IRC chat rooms. I do not understand your argument, are you trolling to hide how actual things are going to?

Re: Secure end points for Internet tunnel, the most secure hardware

2020-05-11 Thread info
> What about other compatible boards like AllWinner A10 Orange PI One? Sorry for my mistake, Orange PI One is based on Cortex A7 AllWinner H3.

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Louis Fredrickson
You are acting a fool. If you admit to seeing how they eat their own dog food and the quality of the project because of their own way, but only when it suits your internet arguments, then you may as well just buy security from a big corporate Linux. It's not about $100 words hiding a children's

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread info
Is not a prohibition for USA citizens to work on OpenBSD cryptography software parts an indication of trust relationship between current OpenBSD and current USA?

Re: Secure end points for Internet tunnel, the most secure hardware

2020-05-11 Thread info
Aaron, thank you for your suggestion. For now I prefer to try to use the oldest suitable hardware I can find, not sure if it is a good idea. Please someone let me know if AllWinner SoC backdoor described at:

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Raul Miller
On Mon, May 11, 2020 at 9:17 PM wrote: > I was told on the chat that Linux GNU software has hardly visible NSA > backdoors and IMHO most funding for Linux seems to be from USA ? This is beyond incompetent. You've got the wrong mailing list for this kind of issue, you haven't identified the

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread info
It is IMHO rather not a matter of trusting your questions, but not my willingness to answer them right now, but I can answer them later if I want, it is not a matter of trust but rather a tactics of choosing a sequence of what to answer and when. You know there is no a lot of secure enough

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread info
I would prefer to begin from grsecurity, but it is not available up to date for my budget. I would also try HardenedBSD, but it is only amd64 now? And how many active developers there are? one or two? OpenBSD looks as the only viable option for me right now, may be one another is a systemd

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Anders Andersson
On Tue, May 12, 2020 at 7:19 AM wrote: > > I would prefer to begin from grsecurity, but it is not available up to date > for my budget. > > I would also try HardenedBSD, but it is only amd64 now? And how many active > developers there are? one or two? > > OpenBSD looks as the only viable option

Secure end points for Internet tunnel, the most secure hardware

2020-05-11 Thread info
Hi, Please let me know, is it a good idea to use OpenBSD to connect to a remote LAN via SSH? Port forwarding is enough for me, though I can pass-through OpenVPN via SSH forward too. SSH seems to me as the most secure channel compare to other software and it is easy to get it working. I need a

Trinity desktop environment

2020-05-11 Thread info
Is it possible to run TDE by trinitydesktop.org on OpenBSD? Or is it going to be possible in the future?

Re: Networking/pf question, I am not sure ?

2020-05-11 Thread man Chan
Here is all the config files of my openbsd-router.  traceroute yahoo.com.hk on my xperia (android) stop at ip of my openbsd-router.  There is nothing display on openbsd-router running tcpdump -eni pflog0. dhclient.conf append domain-name-servers 127.0.0.1; ==

Re: Networking/pf question, I am not sure ?

2020-05-11 Thread man Chan
I find out the problem is in the unbound.conf file.  Now, my xeperia can use the internet.  Thanks you for your help.. Clarence ===original server:     interface: 192.168.1.1     interface: 127.0.0.1     interface: ::1     access-control: 127.0.0.0/8 allow     access-control:

Re: Trinity desktop environment

2020-05-11 Thread Chris Cappuccio
i...@aulix.com [i...@aulix.com] wrote: > Is it possible to run TDE by trinitydesktop.org on OpenBSD? > Or is it going to be possible in the future? You'd have to ask Trinity. Trinity doesn't maintain their own compatibility for BSDs as a priority, so it's not a trivial effort for an outsider.

Re: Secure end points for Internet tunnel, the most secure hardware

2020-05-11 Thread Aaron Mason
On Mon, May 11, 2020 at 5:16 PM wrote: > > Hi, Hi! > > [SNIP] > > Can you offer anything better than Cortex A7 board which is immune to Spectre? > What is the most secure Cortex A7 board on which OpenBSD can run? I guess it > shall have as little BLOBs as possible - only a small Boot ROM like

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Daniel Jakots
On Mon, 11 May 2020 17:27:24 +, slackwaree wrote: > I wish if the someone who took the time to make this page at least > would make an antisystemD page instead. I doubt anyone asked you how they should spend their time. > Let's face it how much time that old fart linus has, maybe > COVID

Re: @OpenBSD_src Twitter 140char limit?

2020-05-11 Thread Tommy Nevtelen
On 10/05/2020 23.30, Isak Holmström wrote: > I do believe it's using the "new" limit introduced 2017 :) > > my $default_maxlen = 280; > > I found this on GitHub. Though there a reference in the code to 140. Yes.. I might not have counted the characters actually used and assumed it was 140 since

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread info
There are already enough funny pages about systemd technical deviations, e.g.: https://dev1galaxy.org/viewtopic.php?id=3427

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Kevin Chadwick
Here's a game. Name as many operating systems as you can that encrypt the page file or swap space by default?