Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FreeBSD 13.0 Beta1 Now Available

lists.freebsd.org

Post reply on HN
Print view View original

41–50 of 110 posts

Re: FreeBSD 13.0 Beta1 Now Available

#41

Post by toast0 »

mapgrep wrote: post #35
gautamcgoel wrote: post #30

I wish FreeBSD booted faster. I recall it took nearly a minute from turning my machine on (with an SSD and a recent Intel i5 processor) before I was prompted for my login credentials. It's little things like that which make the system feel a bit dated, at least to someone like me who is an outsider to FreeBSD but has used Linux for a decade. I also wished FreeBSD needed less configuration to use as a desktop (see htt…

One key impetus for Linux moving to systemd was faster boot time, parallelizing init tasks. Is FreeBSD looking at moving beyond traditional rc script boot?

There's no need to abandon rc scripts to get parallelism. It looks like there's some work in progress on this [1]. From what I can tell, the change to rcorder to generate parallel start info is there in 13.0, but the change in /etc/rc to request it and to use it is not. You would need to patch that in manually for now.

[1] https://wiki.freebsd.org/unitrunker/rcorder

Re: FreeBSD 13.0 Beta1 Now Available

#42

Post by yjftsjthsd-h »

cperciva wrote: post #34
drewg123 wrote: post #22

Earlier quoted context omitted.

"This helps protect member privacy, particularly when the network is insecure — ensuring that our members are safe from eavesdropping by anyone who might want to record their viewing habits." from https://netflixtechblog.com/protecting-netflix-viewing-priva...

Come on Drew, you know as well as I do that media can be unmasked via side channels if an attacker really cares.

Maybe, but why make it easy?

Re: FreeBSD 13.0 Beta1 Now Available

#43

Post by ac29 »

bombcar wrote: post #33
codetrotter wrote: post #3

Is OpenZFS 2.0 in base in this snapshot? Edit: It is! neat! # uname -a FreeBSD freebsd 13.0-BETA1 FreeBSD 13.0-BETA1 #0 releng/13.0-n244471-638e531019f: Fri Feb 5 17:12:07 UTC 2021 root@releng1.nyi.freebsd.org:/usr/obj/usr/src/arm64.aarch64/sys/GENERIC arm64 # zfs version zfs-2.0.0-FreeBSD_gf11b09dec zfs-kmod-2.0.0-FreeBSD_gf11b09dec

What does 2.0 bring us?

https://github.com/openzfs/zfs/releases/tag/zfs-2.0.0

Re: FreeBSD 13.0 Beta1 Now Available

#46

Post by dagenix »

fis wrote: post #37
drewg123 wrote: post #22

Earlier quoted context omitted.

"This helps protect member privacy, particularly when the network is insecure — ensuring that our members are safe from eavesdropping by anyone who might want to record their viewing habits." from https://netflixtechblog.com/protecting-netflix-viewing-priva...

The parent mentioned "This data is being collected anyway via endpoint technologies like Samsung's Automated Content Recognition (ACR)". If that's true then the encryption isn't really helping.

What if you aren't using a Samsung device?

Re: FreeBSD 13.0 Beta1 Now Available

#47

Post by jabberwcky »

cperciva wrote: post #34
drewg123 wrote: post #22

Earlier quoted context omitted.

"This helps protect member privacy, particularly when the network is insecure — ensuring that our members are safe from eavesdropping by anyone who might want to record their viewing habits." from https://netflixtechblog.com/protecting-netflix-viewing-priva...

Come on Drew, you know as well as I do that media can be unmasked via side channels if an attacker really cares.

Are you attacking him because he's using TLS? Will you ever be satisfied?

TLS fixes a whole lot more than just privacy, it's also authenticating the remote end. Are we really suggesting dumping something that is trivially accelerated in hardware to do some homebrew crypto crap just for the sake of a forum thread?

Netflix solution is fine, and the concentration of interest in TLS means it only gets cheaper over time to build Netflix-like configurations, which is especially great since we've spent the past decade or more trying to convince the entire industry this configuration is also best practice

Re: FreeBSD 13.0 Beta1 Now Available

#48

Post by throwawayboise »

jiggawatts wrote: post #14
drewg123 wrote: post #2

This release includes most of the kTLS and NUMA work that I talked about at EuroBSDCon in 2019, including hw kTLS offload support for some NICs. This allows Netflix to serve over 350Gb/s of TLS encrypted video streams from a single 32-core AMD based server (at about 50% CPU).

One thing I haven't quite understood is why Netflix even bothers to encrypt the video streams. It seems like a waste of effort, since Netflix isn't exactly serving content that would qualify as "secret". There's not even any porn on there, so it's not the biggest concern if someone were to find out what some people were watching. This data is being collected anyway via endpoint technologies like Samsung's Automated C…

> There's not even any porn on there, so it's not the biggest concern if someone were to find out what some people were watching.

True there's no out-and-out porn, but there is content that's close to the line, and beyond that there are themes that could be indicators that a viewer is gay, or in some other demographic that he might want to keep private.

Target can tell if you're pregnant based on your shopping; certainly there's a lot that can be inferred from the movies you watch.

Re: FreeBSD 13.0 Beta1 Now Available

#49

Post by cperciva »

jabberwcky wrote: post #47
cperciva wrote: post #34

Earlier quoted context omitted.

Come on Drew, you know as well as I do that media can be unmasked via side channels if an attacker really cares.

Are you attacking him because he's using TLS? Will you ever be satisfied? TLS fixes a whole lot more than just privacy, it's also authenticating the remote end. Are we really suggesting dumping something that is trivially accelerated in hardware to do some homebrew crypto crap just for the sake of a forum thread? Netflix solution is fine, and the concentration of interest in TLS means it only gets cheaper over time t…

I'm just pointing out that the privacy justification is nonsense. Protecting the integrity of connections? That's important. Preventing web browsers from throwing a fit about "insecure connections"? That's also important. But privacy isn't the issue here, and I've talked to enough people at Netflix to know that they know that too.

Re: FreeBSD 13.0 Beta1 Now Available

#50

Post by tal8d »

mapgrep wrote: post #35
gautamcgoel wrote: post #30

I wish FreeBSD booted faster. I recall it took nearly a minute from turning my machine on (with an SSD and a recent Intel i5 processor) before I was prompted for my login credentials. It's little things like that which make the system feel a bit dated, at least to someone like me who is an outsider to FreeBSD but has used Linux for a decade. I also wished FreeBSD needed less configuration to use as a desktop (see htt…

One key impetus for Linux moving to systemd was faster boot time, parallelizing init tasks. Is FreeBSD looking at moving beyond traditional rc script boot?

As somebody who fled Linux to FreeBSD in order to avoid systemd, the prospect of that happening again makes me a little sick to my stomach. Running out of places to go that aren't controlled by people who are openly hostile to POSIX standards.
Post reply on HN