Live data from Hacker News

OpenBSD 5.6: What will be there

openbsd.org

11–20 of 83 posts

Re: OpenBSD 5.6: What will be there

#11
post #3

>IPv6 is now turned off on new interfaces by default. Assigning an IPv6 address will enable IPv6 on an interface. Why?

Off by default makes much sense given it is another vector to attack. If not needed then why be on and more likely to just use IPv4 over even touching IPv6.

Re: OpenBSD 5.6: What will be there

#12

I used to use OpenBSD extensively in my job because of the awesomeness of PF but later moved on to big iron F5 and Cisco gear. In this new age of NSA wiretaps and cloud based services built around advertising and tracking however, OpenBSD feels more relevant than ever. I'd like to give it a shot as a desktop again. So, who makes a modern laptop with good OpenBSD hardware compatability?

Lenovo X201 works well. Not exactly modern but a nice machine and more than adequate.

T420 is great too, so long as you have Intel graphics and wireless.

Re: OpenBSD 5.6: What will be there

#13
"IPv6 is now turned off on new interfaces by default."

I have had to remove the IPv6 option from my kernels because enabling IPv6 by default (which to me seems like a "policy" decision) has become so pervasive. Nice to see this change; here's hoping other OS's follow suit.

Re: OpenBSD 5.6: What will be there

#14
post #10
post #2

Can anyone speak to SSD in OpenBSD? My understanding is that trim support is not supported in OpenBSD ( http://daemonforums.org/showthread.php?p=51377 ). That makes me a little worried about the potential to wear out an SSD drive in a workstation. The thread I linked discusses reducing some writes by using softdeps and the like, is that enough to make this a non-issue?

In general I wouldn't trust random forums for information about OpenBSD. People tend to repeat stuff long after its true. Send a message to misc@ or tech@openbsd.org and you'll hear directly from the devs. Just make sure your partitions are 4k aligned to minimized write amplification. Many openbsd devs use SSDs. I've used one with openbsd for years without problems. Honestly it's a requirement given the shortcomings…

I've been away from OpenBSD for a while, and was just googling to try to get a starting basis. Thank you for pointing me to the 4k alignment issue. This thread (http://openbsd.7691.n7.nabble.com/SSD-disk-alignment-td75046...) seems to suggest that OpenBSD will try to align to 4k boundaries by default. Is that correct?

Re: OpenBSD 5.6: What will be there

#15
I can understand not supporting tape installation (although aren't tapes still used in large, serious, high-power businesses as backup media?), but why remove FTP? Granted, it's objectively a horrible protocol, but is the FTP client code more likely to be an attack surface than the HTTP client code? If you're after security, isn't it more secure to remove all network installation and force people to use only physical media which they obtained from a secure and trusted source?

http://mywiki.wooledge.org/FtpMustDie

Re: OpenBSD 5.6: What will be there

#16
post #11
post #3

>IPv6 is now turned off on new interfaces by default. Assigning an IPv6 address will enable IPv6 on an interface. Why?

Off by default makes much sense given it is another vector to attack. If not needed then why be on and more likely to just use IPv4 over even touching IPv6.

Not just a vector of attack, it also causes performance and connectivity problems when misconfigured. As long as there is no critical mass for IPv6, it's not worth the headache. I know that if everyone had that attitude, IPv6 will never get critical mass, and that is exactly what I'm rooting for. I don't care for toasters with IP addresses.

Re: OpenBSD 5.6: What will be there

#17
post #11

Earlier quoted context omitted.

Off by default makes much sense given it is another vector to attack. If not needed then why be on and more likely to just use IPv4 over even touching IPv6.

Not just a vector of attack, it also causes performance and connectivity problems when misconfigured. As long as there is no critical mass for IPv6, it's not worth the headache. I know that if everyone had that attitude, IPv6 will never get critical mass, and that is exactly what I'm rooting for. I don't care for toasters with IP addresses.

Well I noticed today that some random hotel in Germany I was thinking of staying at was on ipv6, and it is way more popular than IE6... People want connected devices, in way more numbers than there are ipv4 addresses, and end to end connectivity is the internet.

Re: OpenBSD 5.6: What will be there

#18

Earlier quoted context omitted.

Not just a vector of attack, it also causes performance and connectivity problems when misconfigured. As long as there is no critical mass for IPv6, it's not worth the headache. I know that if everyone had that attitude, IPv6 will never get critical mass, and that is exactly what I'm rooting for. I don't care for toasters with IP addresses.

Well I noticed today that some random hotel in Germany I was thinking of staying at was on ipv6, and it is way more popular than IE6... People want connected devices, in way more numbers than there are ipv4 addresses, and end to end connectivity is the internet.

I'd say putting mobile devices behind carrier-grade NAT goes a long way.

> end to end connectivity is the internet.

It was definitely the original idea of the internet, but I'd say it no longer is the reality. People want to access Google and Facebook. The vast majority of users don't need or want their device to be directly reachable from the internet but communicate through cloud services.

Re: OpenBSD 5.6: What will be there

#19
"Major internal refactoring to begin to make part of OpenSSH usable as a library. So far the wire parsing, key handling and KRL code has been refactored. Please note that we do not consider the API stable yet, nor do we offer the library in separable form."

This is intriguing. I would certainly like to know more about what is happening with this.

Re: OpenBSD 5.6: What will be there

#20
post #6

Earlier quoted context omitted.

All of the openbsd devs use thinkpads and they have good compatibility in my experience. The newest ones might have UEFI and they might not work well.

I heard this and installed OpenBSD on my thinkpad only to find out there is no support for nVidia. I suppose you need ATI or Intel video to get a working X. There is a brief warning about nVidia here: http://www.openbsd.org/amd64.html

Check wifi adapter support also (in general, not specifically on ThinkPads).
Post reply on HN