Re: OpenBSD VMM VMs Crash

2018-04-07 Thread Aaron Marcher
So i looked up logs and stuff and came to the point that my issues are 
exactly this ones:

http://openbsd-archive.7691.n7.nabble.com/vmd-VMs-are-stopping-with-vcpu-0-run-ioctl-failed-Invalid-argument-td333259.html

It seems the issue was not further discussed and/or fixed?

Regards,
Aaron

--
Web: https://drkhsh.at/ or http://drkhsh5rv6pnahas.onion/
Gopher: gopher://drkhsh.at or gopher://drkhsh5rv6pnahas.onion
GPG: 0x7A65E38D55BE96FE
Fingerprint: 4688 907C 8720 3318 0D9F AFDE 7A65 E38D 55BE 96FE



OpenBSD VMM VMs Crash

2018-04-06 Thread Aaron Marcher

Ohai,

for me OpenBSD VMM VMs crash after some (undefined) time while logging 
the following on the host:

vcpu_run_loop: vm 3 / vcpu 0 run ioctl failed: Invalid argument
Apart from that VMM works es expected.

Regards,
Aaron

--
Web: https://drkhsh.at/ or http://drkhsh5rv6pnahas.onion/
Gopher: gopher://drkhsh.at or gopher://drkhsh5rv6pnahas.onion
GPG: 0x7A65E38D55BE96FE
Fingerprint: 4688 907C 8720 3318 0D9F AFDE 7A65 E38D 55BE 96FE



Time management under QEMU-KVM

2017-09-14 Thread Aaron Marcher

Hi all,

I have a weird problem on my OpenBSD server. It is a virtualized guest 
under QEMU-KVM. Apperently time management is completely off. With HPET 
and normal HW-clock the command "time sleep 1" shows a little bit more 
than a second after a fresh boot. After a few hours the result is about 
10 seconds. Additionally the clock drifts slowly. The problem is on 
OpenBSD 6.1 with all syspatches applied.

Does anybody know how to fix the problem?
Thank you very much in advance!

Regards,
Aaron Marcher

--
Web: https://drkhsh.at/ or http://drkhsh5rv6pnahas.onion/
Gopher: gopher://drkhsh.at or gopher://drkhsh5rv6pnahas.onion
GPG: 0x09e71697435bf54b
Fingerprint: 57D2 5F2C 9402 A6BD FEF9 B3B6 09E7 1697 435B F54B



Re: OT - "Intel Management Engine" security issues

2017-09-08 Thread Aaron Marcher
Hi,

I am writing this from a Thinkpad T420 with Coreboot flashed and the
Intel Management Engine disabled!

recently there was a lot of work done regarding disabling/neutralizing
the ME.

Have a look at this:
http://blog.ptsecurity.com/2017/08/disabling-intel-me.html
https://github.com/corna/me_cleaner
And of course Libreboot.

And yes, the Intel ME has a lot of access to the system and could/can do
more than you want to. It even runs a whole operating system based on
Minix.
http://blog.ptsecurity.com/2017/04/intel-me-way-of-static-analysis.html

Regards,
Aaron

-- 
Web: https://drkhsh.at/ or http://drkhsh5rv6pnahas.onion/
Gopher: gopher://drkhsh.at or gopher://drkhsh5rv6pnahas.onion
GPG: 0x09e71697435bf54b
Fingerprint: 57D2 5F2C 9402 A6BD FEF9 B3B6 09E7 1697 435B F54B



Re: binary updates on stable?

2017-09-01 Thread Aaron Marcher
> Yes, see: https://man.openbsd.org/syspatch

I think he meant binary stable updates for packages. syspatch is only
for the base system.

Regards,
Aaron

-- 
Web: https://drkhsh.at/ or http://drkhsh5rv6pnahas.onion/
Gopher: gopher://drkhsh.at or gopher://drkhsh5rv6pnahas.onion
GPG: 0x09e71697435bf54b
Fingerprint: 57D2 5F2C 9402 A6BD FEF9 B3B6 09E7 1697 435B F54B



Re: OpenBSD IPsec/L2TP to Android VPN?

2017-08-07 Thread aaron marcher
hi dan,

i recently set up something like that using the following two tutorials
(note that this is l2tp/ipsec instead of raw ipsec):

- 
http://bluepilltech.blogspot.co.at/2017/02/openbsd-l2tp-over-ipsec-android-601-ios.html
- http://blog.fuckingwith.it/2016/04/openbsd-l2tpipsec-vpn-for-android.html

regards,
drkhsh

On 17-08-07 Mon, Daniel Mumford wrote:
> 
> First post on mail list.  Hope I do it correctly.
> 
> Is there anyone able to assist setting up an IPsec VPN between Openbsd 
> machine and an android device?
> 
> I have worked on for a week or so to no avail.  I would like to get a good 
> understanding of the  necessary configuration.
> 
> Thanks in advance.
> Dan

-- 
web: https://drkhsh.at/ or http://drkhsh5rv6pnahas.onion/
gpg: 0x435BF54B