Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenBSD 7.9

openbsd.org

Post reply on HN
Print view View original

81–90 of 314 posts

Re: OpenBSD 7.9

#81

Post by FuriouslyAdrift »

mghackerlady wrote: post #7
alex1138 wrote: post #4

BSDs are interesting projects. As I understand it there's a broad difference of them all doing things reasonably well but a) Free is general-purpose, b) Net is especially portable/many architecture and Open is security focused

FreeBSD is mainly server focused. There's been work on the desktop recently, but it isn't what FreeBSD devs are paid to focus on. To be fair to the people paying them, it's a damn good server OS. Also, check out DragonflyBSD. It has a really nice filesystem and Dillon does good work

DragonflyBSD is a beautifully well done OS.

Re: OpenBSD 7.9

#83

Post by 866-RON-0-FEZ »

rs_rs_rs_rs_rs wrote: post #77
866-RON-0-FEZ wrote: post #61

Earlier quoted context omitted.

You left a snarky comment, then paraded around a positively lame example as some sort of trophy. Here's what I can figure out: you need root to set up the environment just so. It's a don't-care. The end.

>Here's what I can figure out: you need root to set up the environment just so. I guess you just don't understand what unveil does.

Your arrogance is continued proof you could never comprehend the work that goes into building, releasing, and maintaining an entire OS, and your contributions will forever be limited to snarky negativity on message boards.

Re: OpenBSD 7.9

#84

Post by 3form »

866-RON-0-FEZ wrote: post #61
rs_rs_rs_rs_rs wrote: post #49

Earlier quoted context omitted.

>Your "evidence" for him to reconsider is a sandbox "bypass" that requires you to be root to set up the environment Can you help figure out where does it say unveil does not really work when root is involved?

You left a snarky comment, then paraded around a positively lame example as some sort of trophy. Here's what I can figure out: you need root to set up the environment just so. It's a don't-care. The end.

So, a break out of chroot in a chroot jailed app would be a non-issue because I need root to set it up?

Re: OpenBSD 7.9

#85

Post by nelsonic »

mxuribe wrote: post #68
nelsonic wrote: post #37

Earlier quoted context omitted.

FreeBSD has the same roots as OpenBSD but the former has a “compatibility” focus whereas the latter has the security focus. Having a background in security, the choice was obvious for me. But each person/org should decide based on their needs. Haven’t had any issues running it on all major hardware (Dell, HP, Lenovo, Apple, etc) the UI isn’t as pretty as macOS on Desktop, but it runs Firefox & Chrome, etc. so you can…

Yeah, thanks that helps! Its the old convenience vs security balancing act :-)

100%. I put off learning/using OpenBSD for a decade until a breach at a client (we weren’t responsible for DevOps/SysAdmin) made me pick it up because I don’t have time to be a full-time Linux Sysadmin anymore. Just want the servers to run without having to think about them. Wish I’d done it sooner. Lost at lot of time on Linux, Docker, K8s, etc. that I could have skipped completely with OpenBSD. Our servers are an order of magnitude simpler now, just single services per VM and I sleep better. ;-)

Re: OpenBSD 7.9

#87

Post by gjm11 »

866-RON-0-FEZ wrote: post #36
rs_rs_rs_rs_rs wrote: post #29

Earlier quoted context omitted.

>it’s time everyone considers OpenBSD https://x.com/ortegaalfredo/status/2055362910415671459 When your super secure feature gets defeated by a symlink maybe it's not really time to consider it... Sure, things are not better in the linux world but at least there's more eyes to fix issues there just because of the market share.

Your "evidence" for him to reconsider is a sandbox "bypass" that requires you to be root to set up the environment? For my next trick I will demonstrate how to break into my own house to open the blinds by using my keys. Security researcher theatrics will never not be funny.

Maybe I'm misunderstanding the video, but it looks to me as if the situation is:

You are root inside a sandbox. As root-in-the-sandbox, you create a symlink and this gives you the ability to escape the sandbox.

(Whether this is interesting or not depends on whether anyone actually tries to use the sandbox facility in such a way as to give root-in-the-sandbox privileges to untrusted people or code. I don't know enough about OpenBSD to answer that.)

Re: OpenBSD 7.9

#88

Post by nidayewo »

brynet wrote: post #86

OpenBSD 7.9 release artwork by Lyra Henderson https://www.openbsd.org/images/PinkPuffy.png https://www.openbsd.org/images/puffy79.gif Release song is "Diamond in the Rough" - Composed & produced by Bob Kitella. https://www.openbsd.org/lyrics.html#79 Apparel (t-shirts, so far): https://openbsdstore.com/

Interesting to see OpenBSD continuing to gain hardware support. I've been running it on a small home server for DNS/DHCP and the stability is remarkable. The man years of auditing really show.

Re: OpenBSD 7.9

#89

Post by 2b3a51 »

skydhash wrote: post #70
CodeCompost wrote: post #51

Earlier quoted context omitted.

What software do you run on your desktops and laptops?

Not GP, but I mostly use: Firefox; Emacs; MPV; Keepass; calibre; xfe; mupdf;... Then a bunch of cli tools. There's a lot in base, so cli are mostly extra utilities like cmus, git, tig, ncdu,...

I would imagine that a lot of people who use OpenBSD on their laptops/desktops run a lean installation with one of the window managers in base (an ancient fvwm version, cwm which I find very nice and twm).

You can however have a full-fat desktop environment with xfce4 or gnome and applications like libreoffice, gimp, inkscape, audacity and so on if you wish. I've never tried KDE on top of OpenBSD base but I gather packages are in ports.

I think it is fair to say that the amd64 arch has good support. The i386 platform arch is on a 'best effort' basis these days which is understandable. I've never looked at the others.

Re: OpenBSD 7.9

#90

Post by maxall4 »

nelsonic wrote: post #11

With all the security issues constantly being uncovered in other Operating Systems - which will only accelerate with Ai - it’s time everyone considers OpenBSD. Their decades-long security-focus is second to none. We have fully converted from Ubuntu/Debian to OpenBSD. No looking back.

Is OpenBSD actually more secure than Linux? I have not been able to find any data to support this—only some vague opinions.
Post reply on HN