Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenBSD 7.9

openbsd.org

Post reply on HN
Print view View original

211–220 of 314 posts

Re: OpenBSD 7.9

#211

Post by MisterTea »

david_shaw wrote: post #202
brynet wrote: post #86

OpenBSD 7.9 release artwork by Lyra Henderson https://www.openbsd.org/images/PinkPuffy.png https://www.openbsd.org/images/puffy79.gif Release song is "Diamond in the Rough" - Composed & produced by Bob Kitella. https://www.openbsd.org/lyrics.html#79 Apparel (t-shirts, so far): https://openbsdstore.com/

> https://www.openbsd.org/images/PinkPuffy.png > Apparel (t-shirts, so far): https://openbsdstore.com/ Interesting. In the image you linked (PinkPuffy.png), the cat's hat says "security." In the OpenBSD store, the cat's hat reads "POLICE" on several of the shirts.

The images for the last two shirts appear to have gibberish on the hat indicating AI was somehow involved. https://openbsd.creator-spring.com/listing/openbsd-7-9?produ...

Edit: oops, bad eyesight led my brain to believe "no way this is legible text" when in fact it is. Needed a screen magnifier to read it clearly. Though the other items have police in place of security.

Re: OpenBSD 7.9

#212

Post by Melatonic »

Brian_K_White wrote: post #126
mxuribe wrote: post #73

Earlier quoted context omitted.

Yeah, i knew there was some aspects of decendancy across the different BSDs. And, I mentioned NetBSD for embedded stuff...but really, i *think* its that NetBsd is simply installed on tons of different hardware....so not only embedded....i kinda remembered that about NetBSD. But, its the other BSDs - in particular FreeBSD vs OpenBSD - that i always forget the differences...but got it now. Thanks!

freebsd = utility openbsd = security netbsd = portability freebsd: performance, features, drivers, software compat - closest to linux in utility & usability though unlike linux in execution openbsd: safety for exposed services netbsd: portable across many cpu & hardware platforms - big-endian powerpc sun, hitachi sh3 jornada, etc, easiest to port to a new arch

Can FreeBSD be stripped down to be more like OpenBSD security wise while still keeping the performance benefits ?

Re: OpenBSD 7.9

#213

Post by elch »

tptacek wrote: post #198
terry_hc wrote: post #197

Earlier quoted context omitted.

I have now read all of the points in the mitigations section. Just like the slides, the commentaries to the mitigations willingly assert uselessness and imply a sense of absolute insecurity, but without specific or even general examples. So I'm looking forward to your careful explanation of how insecure the whole thing is and how easily it can be dismantled. Because I really want and need to know. Let's talk.

Wait, what? No they don't. The author is an OpenBSD person and calls out several mitigations as clever and worthwhile.

No, the author isn't an "OpenBSD person".

Re: OpenBSD 7.9

#214

Post by stackghost »

Melatonic wrote: post #209
stackghost wrote: post #166

Earlier quoted context omitted.

It's not meaningfully more secure than e.g. Debian. Their claim to fame ("only two remote holes in the default install in X number of years") is definitionally only valid for the default install in its default configuration which means: no httpd, no smtpd, no unbound, etc. etc. etc. The default install isn't very useful, because it doesn't do a lot, and so "only two remote holes" or whatever isn't really saying much.…

Don't most people use something FreeBSD based for production use ? I was under the impression OpenBSD was more used for testing and security research. For personal devices I'm not sure why anyone would run a BSD in the first place

OpenBSD is absolutely a research OS and that's okay.

My understanding is that Netflix used to use FreeBSD to serve video, but I read somewhere they're no longer using it. Not sure how true that is.

Some game consoles like the Playstation run a modified FreeBSD as their OS.

Re: OpenBSD 7.9

#216

Post by brynet »

david_shaw wrote: post #202
brynet wrote: post #86

OpenBSD 7.9 release artwork by Lyra Henderson https://www.openbsd.org/images/PinkPuffy.png https://www.openbsd.org/images/puffy79.gif Release song is "Diamond in the Rough" - Composed & produced by Bob Kitella. https://www.openbsd.org/lyrics.html#79 Apparel (t-shirts, so far): https://openbsdstore.com/

> https://www.openbsd.org/images/PinkPuffy.png > Apparel (t-shirts, so far): https://openbsdstore.com/ Interesting. In the image you linked (PinkPuffy.png), the cat's hat says "security." In the OpenBSD store, the cat's hat reads "POLICE" on several of the shirts.

The artwork on the store may have been an earlier (non-final) version, or there's just simply multiple variations, which is usually the case for the t-shirt art.

Job Snijders works closely with the artists each release, and runs the store.

Re: OpenBSD 7.9

#217

Post by brynet »

MisterTea wrote: post #211
david_shaw wrote: post #202

Earlier quoted context omitted.

> https://www.openbsd.org/images/PinkPuffy.png > Apparel (t-shirts, so far): https://openbsdstore.com/ Interesting. In the image you linked (PinkPuffy.png), the cat's hat says "security." In the OpenBSD store, the cat's hat reads "POLICE" on several of the shirts.

The images for the last two shirts appear to have gibberish on the hat indicating AI was somehow involved. https://openbsd.creator-spring.com/listing/openbsd-7-9?produ... Edit: oops, bad eyesight led my brain to believe "no way this is legible text" when in fact it is. Needed a screen magnifier to read it clearly. Though the other items have police in place of security.

I don't see any "gibberish".

Re: OpenBSD 7.9

#218

Post by petee »

clbrmbr wrote: post #10

Anyone here using OpenBSD? If so, for what purpose? I’ve always wanted to use NetBSD for an application for an embedded system / IoT device but never had the pleasure (yet!).

Authoritative DNS (nsd) and email (opensmtpd) runs out of the box with minimal config on very low ram kvms. The documentation is fantastic, installation is easy; sysupgrade has been a big improvement, though I wish they'd slow the release cycle a little

Re: OpenBSD 7.9

#219

Post by binkHN »

NoSalt wrote: post #215

Hey ... I had no idea OpenBSD had an official song. I think all distros (Unix and Linux) need an official song.

Agree. It's obvious some people are still having fun making operating systems!

Re: OpenBSD 7.9

#220

Post by skydhash »

infinet wrote: post #172
nelsonic wrote: post #11

With all the security issues constantly being uncovered in other Operating Systems - which will only accelerate with Ai - it’s time everyone considers OpenBSD. Their decades-long security-focus is second to none. We have fully converted from Ubuntu/Debian to OpenBSD. No looking back.

I tried OpenBSD recently and found it behaves very differently from other OS. The same code works on Linux/FreeBSD/Windows but has poor multi thread performance on OpenBSD, async socket stopped working after sending at high speed for few seconds. I am not saying there is anything wrong in OpenBSD, it is just different.

OpenBSD uses a Giant Lock model (simpler code) instead of the fine grained locking mechanism in Linux. And Linux has a some quirks and hacks to improve performance (instead of doing the slow, but correct thing). One example is the USB Gadget thing.
Post reply on HN