Does anybody know why they are dropping support for kerberos?
I didn't even know there was support for Kerberos in OpenSSl, but it's also under the LibreSSL bullet points as well.
OpenBSD 5.6: What will be there
71–80 of 83 posts
Re: OpenBSD 5.6: What will be there
#72Order a CD rom? Talk about out of touch, ouch.
http://www.openbsd.org/faq/faq3.html#BuyCD
Not to mention another verifiable source for the signify keys.
Re: OpenBSD 5.6: What will be there
#73Order a CD rom? Talk about out of touch, ouch.
They do need money, that's a way to give them some.
Re: OpenBSD 5.6: What will be there
#74Earlier quoted context omitted.
You are stating an opinion/ideal as fact. If you'd look at actual data, you'd see that the vast majority of internet use by consumers is client to server, not peer to peer traffic (e.g., youtube vs. bittorrent), which means there is no need to be "on the internet" for most people. Distributed federation is great and it does not require end-to-end connectivity for everyone. > See also: Everyone Hates Facebook. I don't…
I'll point out that much of the reason for most traffic on the Internet being client-server is that most users are behind home routers which make P2P traffic difficult or impossible, slowing innovation dramatically. IPv6 could solve this by giving every computer their own IP address on the actual Internet. Sticking with IPv4 continues to slow innovation.
I don't think the client-server model is popular because people are behind home routers, but because it reflects the inherent asymmetry of producers and consumers. People being behind home routers is not a cause of that, but a state of affairs that is not-noticed by or tolerable for most because of this asymmetry. This asymmetry is not caused by any technical limitation; even on Wikipedia, which is probably the prototypical crowdsourced site, editors are vastly outnumbered by readers.
I don't disagree with the ideal of everyone being able to serve their own content directly to the internet, I just don't think it reflects reality, specifically the abilities and inclinations of most people. I'm curious how people come to hold on to such beliefs when they are so incongruous with actual human behavior.
Re: OpenBSD 5.6: What will be there
#75Earlier quoted context omitted.
ASICs start to play a big role at scale. To me the phrase "big iron" signals towards them.
In that case, things like Mikrotik's would be considered as "big iron". (I happen to be a big Mikrotik fan) Just making the case that "just buy Cisco" doesn't do anyone really any good in a very wide market with a lot of very good options - sometimes paying for the brand doesn't mean you are getting something better.
you are getting "market familiarity" meaning they aren't beholden to you or your "crank" operating system and any schmo with a CC can bilk/bill them for support.
Re: OpenBSD 5.6: What will be there
#76Earlier quoted context omitted.
I'll point out that much of the reason for most traffic on the Internet being client-server is that most users are behind home routers which make P2P traffic difficult or impossible, slowing innovation dramatically. IPv6 could solve this by giving every computer their own IP address on the actual Internet. Sticking with IPv4 continues to slow innovation.
I don't think the client-server model is popular because people are behind home routers, but because it reflects the inherent asymmetry of producers and consumers. People being behind home routers is not a cause of that, but a state of affairs that is not-noticed by or tolerable for most because of this asymmetry. This asymmetry is not caused by any technical limitation; even on Wikipedia, which is probably the proto…
> People being behind home routers is not a cause of that, but a state of affairs that is not-noticed by or tolerable for most because of this asymmetry.
I would say that a great many things are not noticed by or are tolerated by the majority, and it's only when they're presented with a better solution do they notice.
Even client-server business models can benefit from peer-to-peer communications. The most obvious is media providers using their clients' connections to avoid having to maintain as large a CDN, and to cut some costs that way. If someone's listened or watched something near you, you can download from them instead.
And then there's all sorts of systems which really could be truly peer-to-peer, from social networking to a replacement for ebay.
Re: OpenBSD 5.6: What will be there
#77Does anybody know why they are dropping support for kerberos? I didn't even know there was support for Kerberos in OpenSSl, but it's also under the LibreSSL bullet points as well.
Nobody uses it and it's a lot of code to audit.
Log message:
Remove SRP and Kerberos support from libssl. These are complex protocols
all on their own and we can't effectively maintain them without using them,
which we don't. If the need arises, the code can be resurrected.
It is crap. Eventually we recognize the risk is to high.
Log message:
The complexity and quality of kerberosV and the fact that almost
nobody is using it doesn't justify to have it in base - disable and
remove it. If the 2 two people who use it still want it, they can
make a port or recompile OpenBSD on their own.
There is a quote in theo.c from August 2010: "basically, dung beetles
fucking. that's what kerberosV + openssl is like".
Discussed with many. Tests by henning@ reyk@ and others.
ok deraadt@ henning@
Re: OpenBSD 5.6: What will be there
#78Earlier quoted context omitted.
> I can understand not supporting tape installation (although aren't tapes still used in large, serious, high-power businesses as backup media?) How does removing tape installation as a feature affect businesses who use tape as a backup method?
My point is that tape isn't dead, that it's still a viable way to store large amounts of data, like a full OS install with lots of ports to go along with it.
You're not wrong, per se, but be aware that the sweet spot for tape storage has skewed to 100's of TB through PB range. Last time I checked, the smallest tape drive you could buy as new production is 1.6TB and costs more than $1k. So...tape is definitely not dead, it's just not something that makes a lot of sense for installing an OS any more, relative to a US$10 USB stick, $.25 DVD or $50 external 500GB hard drive. And, anecdotally, the number of "hobbyist" tape users for other than bulk backups seems to have dropped from "some" 20 years ago to "LOL you use tape LOL" today.
Insert standard disclaimer about it being open source and if someone wanted to resurrect tape install more power to them, etc.
Re: OpenBSD 5.6: What will be there
#79Everything 68k is gone?
HP300 and MVME68K are 68K. I occasionally crank up the latter for shits and grins, but support is far more a labor of love than for any utility these platforms might have left. See also: VAX.
Re: OpenBSD 5.6: What will be there
#80Earlier quoted context omitted.
http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/... This may help. Using `apm -C` or `apm -A`
This. People mustn't expect everything to ever work straight out of the box on anything. Much like you have to install the Lenovo PM driver on windows, you have to config apm on OpenBSD. This is also well known. Quick howto which covers the basics: http://geekyschmidt.com/2011/03/27/openbsd-laptop-mini-howto
Thanks for the link at the end, but--
> People mustn't expect everything to ever work straight out of the box on anything.
--Why?
> Much like you have to install the Lenovo PM driver on windows, you have to config apm on OpenBSD.
I don't for my Hackintosh. And I don't install the Lenovo PM driver on Windows. Windows update may, but I don't.