Why submit this now? The fact that the top item is "..." wasn't a hint it's not done?
OpenBSD 5.6: What will be there
41–50 of 83 posts
Re: OpenBSD 5.6: What will be there
#42Earlier quoted context omitted.
Public keys are intended to be public. So long as you're not transmitting them over the same connection as the one you're using them in, you're golden.
The point of HTTPS is not to hide things, it's to prevent tampering... Which seems relevant when transmitting checksums.
That problem can be solved by retrieving the key out of band. If you're that worried about it, use a VPN to verify that the key you're seeing is the right key. That will vastly increase the difficulty of pulling off a successful attack. They'd have to MitM both connections, as well as the connection you're using to download the software, in order to compromise it.
Re: OpenBSD 5.6: What will be there
#43Should information like this be provided over an insecure HTTP connection? signify(1) pubkeys for this release: base: RWR0EANmo9nqhpPbPUZDIBcRtrVcRwQxZ8UKGWY8Ui4RHi229KFL84wV fw: RWT4e3jpYgSeLYs62aDsUkcvHR7+so5S/Fz/++B859j61rfNVcQTRxMw pkg: RWSPEf7Vpp2j0PTDG+eLs5L700nlqBFzEcSmHuv3ypVUEOYwso+UucXb
No.
Now you've learned a valuable lesson about asking a rhetorical question on the internet. None of the other responders knew the correct answer.
Re: OpenBSD 5.6: What will be there
#44Earlier quoted context omitted.
I heard this and installed OpenBSD on my thinkpad only to find out there is no support for nVidia. I suppose you need ATI or Intel video to get a working X. There is a brief warning about nVidia here: http://www.openbsd.org/amd64.html
Everybody else supports nvidia chips by running a big blog of proprietary code in the kernel. That kind of defeats the purpose of openbsd, right?
That's it in a nutshell.
Re: OpenBSD 5.6: What will be there
#45Fascinating that they removed the agp driver.
Re: OpenBSD 5.6: What will be there
#46Earlier quoted context omitted.
On the contrary, the statement seems correct. End to end connectivity is the Internet.... and by contrast, privately addressed networks are not on the Internet but must reach it via gateways. Reaching one another via centralized services rather than distributed federation is a problem, not a solution, in communications protocol design. See also: Everyone Hates Facebook.
You are stating an opinion/ideal as fact. If you'd look at actual data, you'd see that the vast majority of internet use by consumers is client to server, not peer to peer traffic (e.g., youtube vs. bittorrent), which means there is no need to be "on the internet" for most people. Distributed federation is great and it does not require end-to-end connectivity for everyone. > See also: Everyone Hates Facebook. I don't…
I'll point out that much of the reason for most traffic on the Internet being client-server is that most users are behind home routers which make P2P traffic difficult or impossible, slowing innovation dramatically. IPv6 could solve this by giving every computer their own IP address on the actual Internet. Sticking with IPv4 continues to slow innovation.
Re: OpenBSD 5.6: What will be there
#47Does anyone know off the top of their head how OpenBSD performs on a Samsung 900X?
Re: OpenBSD 5.6: What will be there
#48Order a CD rom? Talk about out of touch, ouch.
Re: OpenBSD 5.6: What will be there
#49I can understand not supporting tape installation (although aren't tapes still used in large, serious, high-power businesses as backup media?), but why remove FTP? Granted, it's objectively a horrible protocol, but is the FTP client code more likely to be an attack surface than the HTTP client code? If you're after security, isn't it more secure to remove all network installation and force people to use only physical…
> I can understand not supporting tape installation (although aren't tapes still used in large, serious, high-power businesses as backup media?)
How does removing tape installation as a feature affect businesses who use tape as a backup method?
Re: OpenBSD 5.6: What will be there
#50Order a CD rom? Talk about out of touch, ouch.
I think for companies that still do this, they acknowledge that the impetus for buying a CD is more for collection/novelty purpose than actual usefulness. My question is whether there are any more effective ways of generating some kind of profit that actually involves giving something extra to the user, whether physically or digitally.