Re: Another working USB WiFi adapter:

2015-09-03 Thread Craig Skinner 
Hi Stefan,

On 2015-09-03 Thu 10:50 AM |, Stefan Sperling wrote:
> 
> I'm surprised it works for you at all on 5.6. It might actually crash
> your machine quite easily because of bugs in the driver. And scanning
> is rather broken with this device in 5.6 (won't see more than 8 APs).
> 

A friend brought this adapter to the pub with him, so we tried it.

It seemed to work without problems for 1.5 hours of several ssh sessions
to DNS master & slave hosts & web surfing.

Yes, for a variety of reasons, this netbook needs to be on -current,
the todo list guestimate is October

I'll try to report back later.
-- 
My University of Edinburgh dance partners perform 'The Braes of Busby':
http://www.scottish-country-dancing-dictionary.com/video/braes-of-busby.html
The driving Strathspey rhythm & step is unique to Scottish folk music/dancing.

Another working USB WiFi adapter:

2015-09-03 Thread Craig Skinner 
For the archives,

A friend loaned me this while I gave an Unbound & NSD talk in a pub:

TP-Link TL-WN722N "High-Gain 150Mbps"

athn1 at uhub0 port 2 "ATHEROS USB2.0 WLAN" rev 2.00/1.08 addr 2
athn1: AR9271 rev 1 (1T1R), ROM rev 13, address c0:4a:00:1f:f6:3e

$ uname -mrsv
OpenBSD 5.6 GENERIC.MP#299 i386

Cheers!
-- 
Great Glasgow oak cask aged beer: Innis & Gunn
The most popular British bottled beer sold in Canada,
and second most popular in sunny Sweden. (Superb country.)
http://www.InnisAndGunn.Co.UK

Re: Another working USB WiFi adapter:

2015-09-03 Thread Stefan Sperling 
On Thu, Sep 03, 2015 at 08:53:11AM +0100, Craig Skinner wrote:
> For the archives,
> 
> A friend loaned me this while I gave an Unbound & NSD talk in a pub:
> 
> TP-Link TL-WN722N "High-Gain 150Mbps"
> 
> athn1 at uhub0 port 2 "ATHEROS USB2.0 WLAN" rev 2.00/1.08 addr 2
> athn1: AR9271 rev 1 (1T1R), ROM rev 13, address c0:4a:00:1f:f6:3e
> 
> $ uname -mrsv
> OpenBSD 5.6 GENERIC.MP#299 i386
> 
> Cheers!

I'm surprised it works for you at all on 5.6. It might actually crash
your machine quite easily because of bugs in the driver. And scanning
is rather broken with this device in 5.6 (won't see more than 8 APs).

Support for this device was improved a lot for 5.7. See the changelog at
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/dev/usb/if_athn_usb.c

There are still some issues, though. Some people are seeing frequent
device timeouts which I can't reproduce. And hostap mode seems to be broken.

If you have time to do some tests (with -current), I'd be interested to
know if hostap works. To test, set it up for hostap mode, try to assoiate
to it, assign IPs, and ping across.
Does the device send beacons in hostap mode? Beacons should be visible
from another computer with a wireless interface in monitor mode on the
same channel, and tcpdump -y IEEE802_11_RADIO -v

Do you see frequent or occasional device timeouts when using the device
normally? If so, can you figure out which conditions trigger them?

icmp block/pass rules in PF

2015-09-03 Thread Joseph A Borg 
am I being daft on this one?

pfctl passes a syntax check on a rule such as
this:

pass   out on $DMZ_if  
\
inet proto icmp       
\
from
192.168.99.68

 but not this:
pass   out on $DMZ_if  
\
inet proto
icmp icmp-type unreach     \
from 192.168.99.68

this is ok:
pass   out on
$DMZ_if \
inet proto icmp icmp-type $icmp-type_list

I'm resorting
to having separate pass rules for localnet_if in and dmz_if out

is this ok?
am I missing something?

regards

Re: OT: youtube video play in chromium - does play mode matters?

2015-09-03 Thread Gregor Best 
On Wed, Sep 02, 2015 at 09:20:50PM +0300, Mihai Popescu wrote:
> Hello,
> 
> It is a little bit off topic, but this was discussed here in the past
> and I think it's nice to keep it here: some people complained about
> video playing in browsers. I have the same problems: too slow, sound
> stops, etc. I talk mostly about youtube and chromium. I use to play it
> in 240p resolution to match my hardware. Everithing greater brings
> trouble.
> [...]

I've been using chrome for a while now to play 720p videos, which mostly
work fine (some stuttering during heavy disk I/O aside). Play mode
doesn't seem to make a difference. I'm using compton (from ports) as my
compositing manager, maybe that's the key.

I'm running a snapshot from ~2 weeks ago (I think) but this has been
working for longer time. The kernel I'm using _does_ contain a few
changes, but I don't think they factor in here.

For the record, this is my dmesg:

OpenBSD 5.8-current (GENERIC.MP) #114: Tue Aug 25 20:14:17 CEST 2015
g...@hydrogen.unobtanium.de:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 6314201088 (6021MB)
avail mem = 6118944768 (5835MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe0010 (80 entries)
bios0: vendor LENOVO version "7UET94WW (3.24 )" date 10/17/2012
bios0: LENOVO 6474B84
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SSDT ECDT APIC MCFG HPET SLIC BOOT ASF! SSDT TCPA DMAR 
SSDT SSDT SSDT
acpi0: wakeup devices LID_(S3) SLPB(S3) UART(S3) IGBE(S4) EXP0(S4) EXP1(S4) 
EXP2(S4) EXP3(S4) EXP4(S4) PCI1(S4) USB0(S3) USB3(S3) USB5(S3) EHC0(S3) 
EHC1(S3) HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpiec0 at acpi0
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz, 2394.35 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,NXE,LONG,LAHF,PERF,SENSOR
cpu0: 3MB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 7 var ranges, 88 fixed ranges
cpu0: apic clock running at 266MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2.1.3, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz, 2394.01 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,NXE,LONG,LAHF,PERF,SENSOR
cpu1: 3MB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 2, remapped to apid 1
acpimcfg0 at acpi0 addr 0xe000, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (AGP_)
acpiprt2 at acpi0: bus 2 (EXP0)
acpiprt3 at acpi0: bus 3 (EXP1)
acpiprt4 at acpi0: bus -1 (EXP2)
acpiprt5 at acpi0: bus 5 (EXP3)
acpiprt6 at acpi0: bus 13 (EXP4)
acpiprt7 at acpi0: bus 21 (PCI1)
acpicpu0 at acpi0: !C3(100@57 mwait.3@0x30), !C2(500@1 mwait.1@0x10), C1(1000@1 
mwait.1), PSS
acpicpu1 at acpi0: !C3(100@57 mwait.3@0x30), !C2(500@1 mwait.1@0x10), C1(1000@1 
mwait.1), PSS
acpipwrres0 at acpi0: PUBS, resource for USB0, USB3, USB5, EHC0, EHC1
acpitz0 at acpi0: critical temperature is 127 degC
acpitz1 at acpi0: critical temperature is 100 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "42T4645" serial   597 type LION oem "Panasonic"
acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
acpidock0 at acpi0: GDCK not docked (0)
cpu0: Enhanced SpeedStep 2394 MHz: speeds: 2401, 2400, 1600, 800 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel GM45 Host" rev 0x07
vga1 at pci0 dev 2 function 0 "Intel GM45 Video" rev 0x07
intagp0 at vga1
agp0 at intagp0: aperture at 0xd000, size 0x1000
inteldrm0 at vga1
drm0 at inteldrm0
inteldrm0: 1440x900
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel GM45 Video" rev 0x07 at pci0 dev 2 function 1 not configured
"Intel GM45 HECI" rev 0x07 at pci0 dev 3 function 0 not configured
em0 at pci0 dev 25 function 0 "Intel ICH9 IGP M AMT" rev 0x03: msi, address 
00:21:86:a1:1f:2b
uhci0 at pci0 dev 26 function 0 "Intel 82801I USB" rev 0x03: apic 1 int 20
uhci1 at pci0 dev 26 function 1 "Intel 82801I USB" rev 0x03: apic 1 int 21
uhci2 at pci0 dev 26 function 2 "Intel 82801I USB" rev 0x03: apic 1 int 22
ehci0 at pci0 dev 26 function 7 "Intel 82801I USB" rev 0x03: apic 1 int 23
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
azalia0 at pci0 dev 27 function 0 "Intel 82801I HD Audio" rev 0x03: msi
azalia0: codecs: Conexant CX20561
audio0 at azalia0
ppb0 at pci0 dev 28

Re: Raspberry Pi 2 Model B

2015-09-03 Thread Dexter Santucci 
Theo de Raadt  cvs.openbsd.org> writes:

> 
> >>My two cents:
> >>https://marc.info/?l=openbsd-misc=132788027403910=2
> >
> >Sorry, but this thread is nonsense for me.
> >How exactly people on this thread can claim about "no support for RPI"
> >when OpenBSD Project support all the Intel Technology, running tons of
> >microcode?
> >Don't make sense for me and seems a logical fallacy from my perspective.
> 
> So the argument is either we should support all the hardware, or
> support none at all.
> 
> How dreary.
> 
> 

  OpenBSD is one of the last software systems we can trust will not run
untrusted/unaudited code. It is like a small island in an ocean of
compromised software. Considering the number of exploits, backdoors and
other firmware hacks in the wild (from both our governments and theirs),
there really isn't much software left one can trust. If OpenBSD ever runs
blobs, then there will be nothing left standing between us and the spooks.
Blobs are perfect vessels for military technology. Equation Group ring a bell?

  One can not overstate the importance of standing by this principle. We
must preserve these islands of security and openness. Without them we are at
the mercy of not just our spooks, but all of them.

Sir de Raadt, please never give in.

Dexter Santucci