Re: Request for Funding our Electricity

2014-01-16 Thread Maximo Pech
El 20/12/2013, a las 18:08, Theo de Raadt dera...@cvs.openbsd.org escribió: I am resending this request for funding our electricity bills because it is not yet resolved. We really need even more funding beyond that, because otherwise all of this is simply unsustainable. This request is

Re: Request for Funding our Electricity

2014-01-16 Thread Theo de Raadt
Through the history of openbsd there have been architectures in which more bugs have been found and some in which fewer bugs have appeared. That is not true. Then maybe the number of bugs for an architecture can be matched to the power-on-time for the machines for that architecture. Maybe.

Re: Request for Funding our Electricity

2014-01-16 Thread Sia Lang
Virtual machines/emus and canadian cross builds should be able to reduce the amount of iron, no? On Thu, Jan 16, 2014 at 12:53 PM, Theo de Raadt dera...@cvs.openbsd.orgwrote: Through the history of openbsd there have been architectures in which more bugs have been found and some in which

Re: Request for Funding our Electricity

2014-01-16 Thread frantisek holop
hmm, on Wed, Jan 15, 2014 at 08:14:24PM +0100, Peter J. Philipp said that # pkg_add somepackage ... This package's buildtime was generously donated by Peter J. Philipp. # ads in openbsd? you must be out of your mind. what next, adblock for openbsd? -f -- why do they call it a tv set when

NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
Hello, I would like to inquire as to which OpenBSD RELEASE will offer the possibility to avoid NIST crypto for everything in Base (isakmpd, openssh, openssl, https, nginx being the key items in mind)? BTW, looks like things are heading in the right direction

Re: Process monitoring

2014-01-16 Thread Giancarlo Razzolini
Em 16-01-2014 02:59, Cyrus escreveu: I am looking for ways to monitor processes on the system in the long term. It would be helpful to get a bigger picture about how the individual processes of users contribute to load averages. It would go a long way in diagnosing problems related to load.

Re: Request for Funding our Electricity

2014-01-16 Thread Luca Ferrari
On Thu, Jan 16, 2014 at 1:10 PM, Sia Lang silverlangu...@gmail.com wrote: Virtual machines/emus and canadian cross builds should be able to reduce the amount of iron, no? I don't think virtual machines are the solution: I see them as another buggy ecosystem on which developers will try to

Re: Request for Funding our Electricity

2014-01-16 Thread Gregor Best
On Wed, Jan 15, 2014 at 09:55:04PM +, Franchini Fabien wrote: [...] I suggest to write a letter to theses companies who are known to using OpenBSD or other product-related like OpenSSH. In this letter we can explain (as the first post from Theo) our issue. I'm sure they can give us an

Re: Request for Funding our Electricity

2014-01-16 Thread Kevin Chadwick
The installer or man page asks for donations, how about the ssh login banner or initial output which might get perhaps 100s of thousands more eyefall? -- ___ 'Write programs that do one thing and do it well. Write programs to

Is my 5.4 CD ok?

2014-01-16 Thread Mario
Hi list. I know you are all busy discussing electricity issues but maybe one of you can take a moment to answer this. Browsing my new CDs for first time ever, I am a little confused and I am seeking clarification. Is the following normal? Because when I think about it, can really over

Re: Is my 5.4 CD ok?

2014-01-16 Thread Matt M
There isn't any reason all the packages couldn't fit on a cd. Most are just a few bytes to a few kb, and a small number are into a few MB. Browsing the package list (for i386), it looks like the largest one might be 4mb. You should set your pkg path to the cd if you want to install from there,

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Chris Cappuccio
MJ [m...@sci.fi] wrote: Hello, I would like to inquire as to which OpenBSD RELEASE will offer the possibility to avoid NIST crypto for everything in Base (isakmpd, openssh, openssl, https, nginx being the key items in mind)? BTW, looks like things are heading in the right direction

Re: [Bulk] Is my 5.4 CD ok?

2014-01-16 Thread Kevin Chadwick
previously on this list Mario contributed: # mount /dev/cd0a /mnt # /mnt/5.4/packages/amd64 # pkg_add emacs-21.4p23.tgz You could set the PKG_PATH Did you cd /mnt/5.4/packages/amd64 -- ___ 'Write programs that do one

Re: Automounting with hotplugd on OpenBSD

2014-01-16 Thread Kevin Chadwick
I had a usb that wouldn't mount so I've added logging and support for unused sd*c disklabels for vfat, ext2/3/4 and ntfs via blkid. I think newfs ffs writes the disklabel so you don't get unused for sd*c and so don't need a blkid tool. It's three times as long now though so if anyones interested

Re: Is my 5.4 CD ok?

2014-01-16 Thread Kent Fritz
Only a small subset of the packages fit on the CD. Emacs is not on the CD afaik. You can set multiple sources in your PKG_PATH variable (colon deliminated), so set the second one to be a mirror. See man pkg_add. On Thu, Jan 16, 2014 at 5:28 PM, Mario mario@videotron.ca wrote: Hi list.

Re: Is my 5.4 CD ok?

2014-01-16 Thread Martin Brandenburg
Mario mario@videotron.ca wrote: Also nowhere on CD2 I can find the soundtrack. I suppose that should be \ easy. I would really need a song at the moment. -- Mario It's not a file. It's CD track 2. Try putting it in a CD player. To play it on your computer, see cdio(1) in base or a

Re: unreliable connections

2014-01-16 Thread Chris Smith
This issue is still with me. Sporadically the connection will fail, and a connection attempt immediately after the failure will (so far) always work. Again the problem is only with this one remote firewall, all of the others are fine. the hardware is virtually identical, similar versions of the

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 18.23, Chris Cappuccio ch...@nmedia.net wrote: For instance, you may have noticed that OpenSSH is moving towards an openssl-free mode by importing NaCl components directly? One problem with abandoning OpenSSL is that you lose SSL, TLS, (oh, and everything has to be

Re: Request for Funding our Electricity

2014-01-16 Thread Han Hwei Woo
Rather than raising prices on CD's/T-Shirts, how about allowing for subscriptions? I've bought CD's and shirts in the past, but don't do so regularly simply as it's not something I think/remember to do at every release. However, I'd gladly signup to purchase a CD and T-Shirt every release on

Re: Request for Funding our Electricity

2014-01-16 Thread patrick keshishian
On 1/16/14, Kevin Chadwick ma1l1i...@yahoo.co.uk wrote: The installer or man page asks for donations, how about the ssh login banner or initial output which might get perhaps 100s of thousands more eyefall? I see where this is headed: In app purchases! e.g., after couple of failed

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 18.23, Chris Cappuccio ch...@nmedia.net wrote: For instance, you may have noticed that OpenSSH is moving towards an openssl-free mode by importing NaCl components directly? One problem with abandoning OpenSSL is that you lose SSL, TLS, (oh, and everything has to be

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Chris Cappuccio
MJ [m...@sci.fi] wrote: Thanks Chris for your response and yes, you make a good point regarding compatibility. I am by far a crypto expert, but these issues have been anyway on my mind as of late. So bear with me, but would it be possible to switch /dev/crypto to be an interface to an

Re: Request for Funding our Electricity

2014-01-16 Thread Daniel Cegiełka
http://goteo.org/project/gnupg-new-website-and-infrastructure Why do not you do such a campaign? Wow.. new website and infrastructure for GnuPG. Result: more then 24k USD in three weeks. So where OpenBSD/OpenSSH are worse than GnuPG? Guys, your problem is not the OpenBSD foundation, but the total

Re: Request for Funding our Electricity

2014-01-16 Thread Jack Woehr
Daniel Cegiełka wrote: http://goteo.org/project/gnupg-new-website-and-infrastructure Why do not you do such a campaign? I think Theo has answered this previously. His point was that he doesn't want to spend his time year after year running campaigns. Being neither a politician nor a diplomat

Hibernated system crashes during wakeup boot

2014-01-16 Thread Erwin Geerdink
Hi, Hibernating does not work on my Cooler Master RC-K280-KKN1 desktop pc: when apmd is running and $ ZZZ is invoked, the screen goes blank and the system appears to be shutting down, not responding to keyboard input anymore. The disk activity light is blinking, and after approx. 3 minutes the

Re: Request for Funding our Electricity

2014-01-16 Thread Kevin Chadwick
On Thu, 16 Jan 2014 09:09:09 -0800 patrick keshishian wrote: The installer or man page asks for donations, how about the ssh login banner or initial output which might get perhaps 100s of thousands more eyefall? I see where this is headed: In app purchases! e.g., after couple of

Re: Request for Funding our Electricity

2014-01-16 Thread Daniel Cegiełka
2014/1/16 Jack Woehr jwo...@softwoehr.com: Daniel Cegiełka wrote: http://goteo.org/project/gnupg-new-website-and-infrastructure Why do not you do such a campaign? I think Theo has answered this previously. His point was that he doesn't want to spend his time year after year running

Re: Request for Funding our Electricity

2014-01-16 Thread Bob Beck
On Thu, Jan 16, 2014 at 10:58 AM, Daniel Cegiełka daniel.cegie...@gmail.com wrote: Another example: Google will pay even more than $3000 for finding an error in OpenSSH (Core infrastructure network services) - do they know about your problems?

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Chris Cappuccio
MJ [m...@sci.fi] wrote: On 16 Jan 2014, at 19.17, Chris Cappuccio ch...@nmedia.net wrote: OpenBSD has already began incorporating NaCl by bypassing OpenSSL entirely. Good news - perhaps my philosophy is ?why lay a lot of small bricks here and there when you can lay a cornerstone and be

Re: Request for Funding our Electricity

2014-01-16 Thread Jeff Zellman
On Thu, Jan 16, 2014 at 09:05:24AM -0800, Han Hwei Woo wrote: Rather than raising prices on CD's/T-Shirts, how about allowing for subscriptions? I've bought CD's and shirts in the past, but don't do so regularly simply as it's not something I think/remember to do at every release. However, I'd

Re: Request for Funding our Electricity

2014-01-16 Thread MJ
On 16 Jan 2014, at 19.45, Jack Woehr jwo...@softwoehr.com wrote: I think Theo has answered this previously. His point was that he doesn't want to spend his time year after year running campaigns. Being neither a politician nor a diplomat nor a grantmaster, he wants a sustainable model.

Request for Funding our Electricity

2014-01-16 Thread Jan Lambertz
I like the subscription idea. I'd love to have every release without actually doing the shopping every time. This could at least make a bit of safe money. I believe, making a company sending 20k$ every year to openbsd could be quite difficult. Why should they do this ? What do they get ? Why is

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 19.17, Chris Cappuccio ch...@nmedia.net wrote: OpenBSD has already began incorporating NaCl by bypassing OpenSSL entirely. Good news - perhaps my philosophy is “why lay a lot of small bricks here and there when you can lay a cornerstone and be done with it?”. But perhaps I am

Re: Request for Funding our Electricity

2014-01-16 Thread Joshua Smith
+1 for the subscription idea. Not that it completely solves the problem at hand. But a great (IMHO) idea. -- Josh Smith KD8HRX Email/jabber: juice...@gmail.com Phone: 304.237.9369(c) Sent from my iPhone. On Jan 16, 2014, at 2:34 PM, Jan Lambertz jd.arb...@googlemail.com wrote: I like

Re: Request for Funding our Electricity

2014-01-16 Thread Jack Woehr
Bob Beck wrote: so it's not a source of sustainable funding, unless we were to do something like introduce an annual quota of bugs http://dilbert.com/strips/comic/1995-11-13/ -- Jack Woehr # We commonly say we have no time when, Box 51, Golden CO 80402 # of course, we have all

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Nicolai
On Thu, Jan 16, 2014 at 01:24:09PM +0200, MJ wrote: Hello, I would like to inquire as to which OpenBSD RELEASE will offer the possibility to avoid NIST crypto for everything in Base (isakmpd, openssh, openssl, https, nginx being the key items in mind)? Hi MJ, Base must be interoperable

Re: Is my 5.4 CD ok?

2014-01-16 Thread Fred
On 01/17/14 01:28, Mario wrote: Hi list. I know you are all busy discussing electricity issues but maybe one of you can take a moment to answer this. Browsing my new CDs for first time ever, I am a little confused and I am seeking clarification. Is the following normal? Because when I

problems with non-utf8 characters in mutt after upgrading to 5.4

2014-01-16 Thread Kārlis Miķelsons
Hello, After upgrading from OpenBSD 5.3 to OpenBSD 5.4 I've got problems with non-utf8 characters in mutt email client. It worked just fine until upgrade, but after upgrade it doesn't show non-ascii characters in subject or body if email message is non-utf8 (tried it with iso-8859-13,

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 20.24, Chris Cappuccio ch...@nmedia.net wrote: Block traffic with specific ciphers from traversing the network? That's sci.fi You’re right again - this stuff is futuristic but could potentially be accomplished via inspection of unencrypted packet headers, etc (i.e. via

Re: Request for Funding our Electricity

2014-01-16 Thread Christopher Ahrens
Then maybe the number of bugs for an architecture can bematched to the power-on-time for the machines for that architecture. So your solution is to replace requiring financial donations to requiring more hardware donations? Cold boots are by far the biggest cause of hardware failure, this

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Chris Cappuccio
MJ [m...@sci.fi] wrote: On 16 Jan 2014, at 20.24, Chris Cappuccio ch...@nmedia.net wrote: Block traffic with specific ciphers from traversing the network? That's sci.fi You?re right again - this stuff is futuristic but could potentially be accomplished via inspection of

Re: Request for Funding our Electricity

2014-01-16 Thread Theo de Raadt
Then maybe the number of bugs for an architecture can bematched to the power-on-time for the machines for that architecture. So your solution is to replace requiring financial donations to requiring more hardware donations? Cold boots are by far the biggest cause of hardware failure, this

TP-Link TL-WN8200ND in 5.4

2014-01-16 Thread Bernte
Hello, I was hoping that my TP-Link TL-WN8200ND works in 5.4, but it looks like it is only detected as an unsupported USB device. ugen0 at uhub0 port 2 Realtek 802.11n WLAN Adapter rev 2.00/2.00 addr 2 While the documentation from the provider is not verbose about the chipset used, the

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Chris Cappuccio
Nicolai [nicolai-om...@chocolatine.org] wrote: As for your point, there's a lot of interest in and support for NaCl. For example, Curve25519 is now in a bunch of stuff like OpenSSH, Tor, Chromium and DNSCurve. Salsa20 and ChaCha20 are getting big. It's happening. Now that people are more

Re: Request for Funding our Electricity

2014-01-16 Thread Daniel Ouellet
Just my $0.02 worth. OpenBSD asked for help. Why everything we see is change this, change that, etc. Like they don't know what they are doing for the last 20 years! Either we can help or we can't. But please stop trying to tell everyone how to do what they do best for the last 20 years like

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Matthew Dempsky
On Thu, Jan 16, 2014 at 9:01 AM, MJ m...@sci.fi wrote: So bear with me, but would it be possible to switch /dev/crypto to be an interface to an autocipher engine where both OpenSSL and NaCl ciphers could be supported via e.g. /etc/autocipher.conf and then change all crypto-enabled apps to

Re: Request for Funding our Electricity

2014-01-16 Thread Juan Francisco Cantero Hurtado
On Thu, Jan 16, 2014 at 01:10:05PM +0100, Sia Lang wrote: Virtual machines/emus and canadian cross builds should be able to reduce the amount of iron, no? Just a side note to the people talking about emulators. Obviously, you're not tried to install OpenBSD on emulators. Basically, everything

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Christian Weisgerber
MJ m...@sci.fi wrote: I would like to inquire as to which OpenBSD RELEASE will offer the possibility to avoid NIST crypto for everything in Base (isakmpd, openssh, openssl, https, nginx being the key items in mind)? What is NIST crypto? As it stands, there is currently cipher-suite

Re: Request for Funding our Electricity

2014-01-16 Thread Christopher Ahrens
Gregor Best wrote: On Wed, Jan 15, 2014 at 09:55:04PM +, Franchini Fabien wrote: [...] I suggest to write a letter to theses companies who are known to using OpenBSD or other product-related like OpenSSH. In this letter we can explain (as the first post from Theo) our issue. I'm sure they

Re: Request for Funding our Electricity

2014-01-16 Thread Steven Chamberlain
I've set up a small recurring donation for now. I'd like to throw out some ideas and questions if I may: * Anyone selling an OpenBSD-based solution to business customers might want to imagine the OS has some sort of 'license fee', increase the quote for their work accordingly, and pass along the

Re: Is my 5.4 CD ok?

2014-01-16 Thread Stuart Henderson
On 2014-01-16, Matt M cmorrow...@gmail.com wrote: There isn't any reason all the packages couldn't fit on a cd. Most are just a few bytes to a few kb, and a small number are into a few MB. Browsing the package list (for i386), it looks like the largest one might be 4mb. Unfortunately we can

Re: Request for Funding our Electricity

2014-01-16 Thread Stuart Henderson
On 2014-01-16, Sia Lang silverlangu...@gmail.com wrote: Virtual machines/emus and canadian cross builds should be able to reduce the amount of iron, no? Try following http://www.openbsd.org/vax-simh.html. Then observe your cpu usage figures and, if you are able to measure it, the power

Re: unreliable connections

2014-01-16 Thread Stuart Henderson
On 2014-01-16, Chris Smith obsd_m...@chrissmith.org wrote: This issue is still with me. Sporadically the connection will fail, and a connection attempt immediately after the failure will (so far) always work. Again the problem is only with this one remote firewall, all of the others are fine.

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 20.49, Nicolai nicolai-om...@chocolatine.org wrote: Things are moving in the right direction! The last six months have seen MAJOR improvements in crypto. If you want to be a part of it, pick up DNSCrypt or DNSCurve. Get a recent Chromium and play with QUIC. Read about

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 23.55, Chris Cappuccio ch...@nmedia.net wrote: All until we learn from the newest Snowden slide that Dan Bernstein is actually on the NSA payroll :) All your DJBs belong to us!

Re: Is my 5.4 CD ok?

2014-01-16 Thread Theo de Raadt
On 2014-01-16, Matt M cmorrow...@gmail.com wrote: There isn't any reason all the packages couldn't fit on a cd. Most are just a few bytes to a few kb, and a small number are into a few MB. Browsing the package list (for i386), it looks like the largest one might be 4mb. Unfortunately we can

Re: Request for Funding our Electricity

2014-01-16 Thread Dag Richards
I have a suggestion for every one of us that has mailed in an idea in response to a solicitaion for money... Send money. Just do it right now, write a cheque. Send it, send it now. Do that a couple of times a year. Buy a cd twice a year, get at least one t-shirt with each order. Were we told

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 17 Jan 2014, at 00.54, Christian Weisgerber na...@mips.inka.de wrote: MJ m...@sci.fi wrote: I would like to inquire as to which OpenBSD RELEASE will offer the possibility to avoid NIST crypto for everything in Base (isakmpd, openssh, openssl, https, nginx being the key items in

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Philip Guenther
On Thu, Jan 16, 2014 at 7:12 PM, MJ m...@sci.fi wrote: On 17 Jan 2014, at 00.54, Christian Weisgerber na...@mips.inka.de wrote: MJ m...@sci.fi wrote: I would like to inquire as to which OpenBSD RELEASE will offer the possibility to avoid NIST crypto for everything in Base (isakmpd,

Re: TP-Link TL-WN8200ND in 5.4

2014-01-16 Thread Jonathan Gray
On Thu, Jan 16, 2014 at 08:09:00PM +, Bernte wrote: Hello, I was hoping that my TP-Link TL-WN8200ND works in 5.4, but it looks like it is only detected as an unsupported USB device. ugen0 at uhub0 port 2 Realtek 802.11n WLAN Adapter rev 2.00/2.00 addr 2 While the documentation from