Re: making firefox less insecure

2014-11-16 Thread Jorge Gabriel Lopez Paramount
Quoting Daniel Dickman didick...@gmail.com: On Sun, Nov 16, 2014 at 2:08 PM, Jonathan Thornburg jth...@astro.indiana.edu wrote: Are there other practical ways of securing an OpenBSD web browser? [I'm afraid just say no fails the practical test. :( ] one practical thing I'd love to see is

Re: making firefox less insecure

2014-11-16 Thread Jorge Gabriel Lopez Paramount
Quoting Jason Adams adams...@gmail.com: On 11/16/2014 12:15 PM, Jorge Gabriel Lopez Paramount wrote: I have other approach that has worked for me so far: I created a virtual machine with Debian GNU/kFreeBSD (sorry but I'm new here), and installed Firefox there and other software I would

Re: making firefox less insecure

2014-11-16 Thread Jorge Gabriel Lopez Paramount
. The first days I did that frequently, but last time I set something in Firefox was months ago. Best regards, Jorge. Worik Stanton worik.stan...@gmail.com wrote: On 17/11/14 10:55, Jorge Gabriel Lopez Paramount wrote: [snip] I restart every week that server as read-write to patch it and that's all

Re: making firefox less insecure

2014-11-21 Thread Jorge Gabriel Lopez Paramount
Quoting frantisek holop min...@obiit.org: Jorge Gabriel Lopez Paramount, 16 Nov 2014 15:55: Seems heavy, and probably harder to set up and maintain than (e) and (f). Sure it's harder to set up, but believe me, after setting up the maintenance is almost zero. I restart every week that server

Re: I saw an oddity with firefox

2014-11-26 Thread Jorge Gabriel Lopez Paramount
I started firefox on a remote xhost and it somehow came up as a local instance (thru X?) with bookmarks from a local client account... the remote account was newly instanced and this was the first and *only* time I've seen it happen. But it did. That's a feature, not a bug.=) When you

Re: OpenBSD Trademark Policy

2014-12-07 Thread Jorge Gabriel Lopez Paramount
I think the same, if running a command after installing it will make your system free enough, what is the need of a fork? I think that if you publish a web page with that information the OpenBSD community would not take that as an offense. I'm in the middle of leaving Debian after almost 15

Re: AMD64 packages - Reflecting dynamic linking

2015-01-01 Thread Jorge Gabriel Lopez Paramount
Quoting FRIGN d...@frign.de: It may be a little far-fetched, but I'm sure it would be possible to have one package-manager for all distributions if there would just be the motivation to distribute statically linked binaries and not fuck things up with distribution-specific folder-structures.

Re: Upgrading issues (i386 on PPro class) 5.4-5.5 leaving system horked

2015-01-02 Thread Jorge Gabriel Lopez Paramount
Quoting Damon Getsman damo.g...@gmail.com: Hello everyone. Regardless, I just wanted to find out... I usually get people willing to give some advice, or at least willing to laugh and tell me the lesson that I needed to know on here. I was really kind of surprised that I haven't heard

Re: What are the disadvantages of soft updates?

2015-01-23 Thread Jorge Gabriel Lopez Paramount
Quoting Predrag Punosevac punoseva...@gmail.com: I was following this discussion with the great interest but without intend to participate in it until today. Namely one of my OpenBSD servers (5.6 sparc64) runs Mollify and last night I received an e-mail from an angry user who could not upload

Re: Wouldn't `daemon_enable=YES` make more sense than `daemon_flags=` in rc.conf.local?

2015-01-28 Thread Jorge Gabriel Lopez Paramount
Quoting Ingo Schwarze schwa...@usta.de: Most of my daemons don't have any flags so it looks a bit strange (and messy) with all these empty flag specs. That's a matter of taste and purely aestetical without any functional consequences, so if it's an argument at all, it carries almost no

Re: OpenBSD and disk slowliness

2015-01-09 Thread Jorge Gabriel Lopez Paramount
Hi all, Just for the record, I do not think that OpenBSD/i386 behavior with virtual disks running on KVM is a bug. Virtio was designed specially for virtual machines and all modern Linux distros and other modern operating systems support it, therefore the only good reason for not using

Re: OpenBSD and disk slowliness

2015-01-09 Thread Jorge Gabriel Lopez Paramount
Quoting Kent Fritz fritz.k...@gmail.com: Hopefully this is not too bad advice... I've found the performance with cache=none to be unacceptable as well. I'm using cache=writeback. Of course you'll get much better performance if you remove Linux/KVM. :) It might be the case for OpenBSD/i386,

OpenBSD and disk slowliness

2015-01-08 Thread Jorge Gabriel Lopez Paramount
Hi all, A few months ago I tried to install OpenBSD 5.5 in a KVM virtual machine running Linux in an amd64 computer. First tried to install the i386 version since my Linux virtual machines are i686 and was painfully slow, so much that I almost decided to not use OpenBSD. Then I tried

Re: ntpd.drift values?

2015-01-13 Thread Jorge Gabriel Lopez Paramount
Quoting Christian Weisgerber na...@mips.inka.de: 2x e-08 (esxi) Oooh, interesting. I hadn't considered VMs that actually keep time. Indeed: # cat /var/db/ntpd.drift 3.970778e-09 OpenBSD 5.5/i386 with qemu on Linux host, worked fine so far. =) -- Best regards, Jorge Lopez.

Re: Spanish discussion list

2015-01-03 Thread Jorge Gabriel Lopez Paramount
When I started learning OpenBSD half a year ago I checked communities and mailing lists and there is a list in Mexico, with something like three emails per month in average. I saw a site of BSD in general as well, with translated articles. Rather than having a Spanish mailing list I would like

Re: isolating untrusted programs in ssh chroot jails

2015-03-19 Thread Jorge Gabriel Lopez Paramount
Quoting dan mclaughlin thev...@openmailbox.org: there seems to be some interest in this, so i thought i would post my notes, made more presentable. here i detail ways to use ssh to restrict access to the filesystem as well as X, mitigating the 'security nightmare' that is X11, not to mention

Re: OpenBSD as base OS for Virtualization

2015-03-14 Thread Jorge Gabriel Lopez Paramount
I want to setup Virtualization server. Currently I am using xen with Linux + ZFS... And it uses files instead of ZFS volumes... Since I'm new to OpenBSD I won't tell you what OpenBSD supports for virtualization but what works for me, hope this helps. Keep in mind my lack of experience in

Re: offtopic: political correctness

2015-05-08 Thread Jorge Gabriel Lopez Paramount
Quoting Marko Cupa? marko.cu...@mimar.rs: I am reading 2nd edition of Absolute OpenBSD 2nd Edition and can't but notice paragraph Confidentiality on XXX page of Introduction: ---cut-here--- Confidentiality This means that secret data should remain secret. Your private infor- mation must not

Re: [OFFTOPIC] Re: Order Acknowledgement from OpenBSD Store - Order No. 40393

2015-07-02 Thread Jorge Gabriel Lopez Paramount
Quoting Maurice McCarthy m...@mythic-beasts.com: On 2015-07-02 18:10, Jorge Gabriel Lopez Paramount wrote: Hi all, I know this is not related to OpenBSD directly but hope someone might help; I ordered a CD set and a rucksack more than one month ago and I have not received them yet so I'm

[OFFTOPIC] Re: Order Acknowledgement from OpenBSD Store - Order No. 40393

2015-07-02 Thread Jorge Gabriel Lopez Paramount
no response. I spent that money mainly as a contribution but would not mind receiving those goods, if someone have an idea how I could contact the Store besides calling I would appreciate it. -- Best regards, Jorge Lopez. Quoting Jorge Gabriel Lopez Paramount jorge.lopez.paramo...@googlemail.com

Re: Microsoft Now OpenBSD Foundation Gold Contributor

2015-07-08 Thread Jorge Gabriel Lopez Paramount
Quoting Theo de Raadt dera...@cvs.openbsd.org: I would like to say only this: if people to not want big companies meddling with OpenBSD as it has been happening with Linux better its users support it. I said this in 2006: I think that contributions should have come first from the

Re: Microsoft Now OpenBSD Foundation Gold Contributor

2015-07-08 Thread Jorge Gabriel Lopez Paramount
Quoting Christer Solskogen christer.solsko...@gmail.com: On Wed, Jul 8, 2015 at 4:49 PM, Gleydson Soares gsoa...@gmail.com wrote: Great news ! As I said on the OpenBSD facebook page: I have to say that I find it quite ironic of all of the vendors in the world, the foundation gets a huge