Live data from Hacker News

OpenBSD 6.0 released

undeadly.org

51–60 of 139 posts

Re: OpenBSD 6.0 released

#51
post #46

It's good that they have their priorities straight. No more Linux binaries support (who need compatibility anyways?), but instead you get 5 songs sung by the project leader.

If you're running OpenBSD, likely you're running it for the features it provides (security and code correctness)

If you want to run Linux apps, run them on your Linux box and use your OpenBSD machine to firewall it off

Re: OpenBSD 6.0 released

#52

Earlier quoted context omitted.

It is - I did not know this. I purchased a USB-DVD player for the sole purpose of getting a physical delivery of OpenBSD. Sad to see it go by the wayside.

I can't tell if this is a joke.

it is not a joke. http://www.openbsd.org/lyrics.html#60f

Re: OpenBSD 6.0 released

#53
post #21

Earlier quoted context omitted.

It does? I was under the impression the only reason anyone still did that was to give something physical to donators.

Don't forget the awesome stickers!

Yeah, and even the packaging. The latest release (5.9) was the first "official" OpenBSD CD set I ever bought, and I was astounded by the quality of the set, from the packaging and inserts to the discs themselves. I don't know why, but I didn't expect it to be so... professional. I pre-ordered this release, too. I like being able to help out the OpenBSD project financially and get something nice out of it. Oh, well. RIP, OpenBSD CDs.

Re: OpenBSD 6.0 released

#54

Earlier quoted context omitted.

CDs are read-only, whereas a USB stick has (generally insecure) firmware that can be modified. So in a setting where the user is concerned about persistent USB malware, it can make sense to use them. It's a niche concern of course, but I suspect it's a little bit more common in the OpenBSD community than in many others. Of course it shouldn't be too hard for those users to build their own install boot CDs with the ta…

What happens if your cd that comes in the mail is swapped out for a different cd by a malicious actor?

You can find well-known hashes to check your install media with online (assuming you can trust the media because it comes wrapped up in a nice package is a bit naive...). What you cannot check however, is a USB key firmware (ring-0?) malware, that lives completely outside of disk space, and thus is beyond reach, but might have limited (or even complete) access to the system it is plugged to. CDs and DVDs (don't know, but perhaps SD/compact flash/etc. cards too?) are thus the last mainstream media that come with 'no firmware attached'.

Re: OpenBSD 6.0 released

#55
post #30
post #6

Earlier quoted context omitted.

Perhaps I'm the only person using computers in 2016 who only installs OpenBSD via CD :-)

I install it from the ramdisk, much better.

How? How can you make a ramdisk resistant to a reboot?

Re: OpenBSD 6.0 released

#56
post #6

Earlier quoted context omitted.

Perhaps I'm the only person using computers in 2016 who only installs OpenBSD via CD :-)

I only do to enjoy the pleasure of old ways. Interacting with CDs and CD drives reminds me of when it was cutting edge. Tray mechanics, the speed intake of spinning motors. Even the latency and seek sounds. And somehow, the (almost since it's on DVD RW) immutability. In some ways, the sheer speed of SSD is ... boring when you're not in a hurry. ps: a bit like vynil lovers who take their player out for similar reasons…

I do that too. I also like to imagine a post-apocalyptic, no-internet time where I have a generator, PC, BSD disk and the knowledge to use them to rule the new world while everyone else is stuck on the "Activation Required" screen.

Re: OpenBSD 6.0 released

#58
post #6

Earlier quoted context omitted.

Perhaps I'm the only person using computers in 2016 who only installs OpenBSD via CD :-)

I only do to enjoy the pleasure of old ways. Interacting with CDs and CD drives reminds me of when it was cutting edge. Tray mechanics, the speed intake of spinning motors. Even the latency and seek sounds. And somehow, the (almost since it's on DVD RW) immutability. In some ways, the sheer speed of SSD is ... boring when you're not in a hurry. ps: a bit like vynil lovers who take their player out for similar reasons…

Reminds me of my old faithful Amiga, and its 3,5" floppy drive...it made a distinct, almost musical sound. You just turned the machine on and that famous splash screen would appear, then the empty drive would start ticking regularly, waiting for an 880Kb disk. As soon as a disk was inserted, you could hear its typical seek noise while the system booted, track after track...

Re: OpenBSD 6.0 released

#59
post #27

Earlier quoted context omitted.

Gets PF for free, complains.

Gmail is free, would you be happy if they updated it and your email didn't work anymore? I love OpenBSD but they constantly change the rule syntax for pf, which invalidates huge swaths of forum posts and other online documentation, even published books. The man page doesn't contain every conceivable explanation and example for every scenario either, nor could it, so that is also not a solution. Whether or not the pri…

> Gmail is free, would you be happy if they updated it and your email didn't work anymore?

I would shrug, meh and do something else.

I've had my lifestyle made illegal a couple of times. Perspective.

Re: OpenBSD 6.0 released

#60
post #33

"To deter code reuse exploits, rc(8) re-links libc.so on startup, placing the objects in a random order." I love this defense in depth, buried in the release notes... https://www.openbsd.org/60.html

This is pretty much useless. Attackers have moved on to using information leaks in order to determine memory layout and placement of objects.

So in practice, this doesn't really deter anything. Information leaks are everywhere.

Post reply on HN