Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FreeBSD 13.0 Beta1 Now Available

lists.freebsd.org

Post reply on HN
Print view View original

61–70 of 110 posts

Re: FreeBSD 13.0 Beta1 Now Available

#61

Post by tal8d »

stock_toaster wrote: post #59
tal8d wrote: post #50

Earlier quoted context omitted.

As somebody who fled Linux to FreeBSD in order to avoid systemd, the prospect of that happening again makes me a little sick to my stomach. Running out of places to go that aren't controlled by people who are openly hostile to POSIX standards.

There are a few Linux distros that use OpenRC with decent success. I run lots of FreeBSD servers, but I also run some Alpine servers, where openrc works well for me (with some s6 thrown in for a few services).

Gentoo is another one - I use it to make sure that my stuff builds on a bleeding edge cross-platform, but thats about it these days.

Re: FreeBSD 13.0 Beta1 Now Available

#62

Post by bobthebuilders »

cperciva wrote: post #49
jabberwcky wrote: post #47

Earlier quoted context omitted.

Are you attacking him because he's using TLS? Will you ever be satisfied? TLS fixes a whole lot more than just privacy, it's also authenticating the remote end. Are we really suggesting dumping something that is trivially accelerated in hardware to do some homebrew crypto crap just for the sake of a forum thread? Netflix solution is fine, and the concentration of interest in TLS means it only gets cheaper over time t…

I'm just pointing out that the privacy justification is nonsense. Protecting the integrity of connections? That's important. Preventing web browsers from throwing a fit about "insecure connections"? That's also important. But privacy isn't the issue here, and I've talked to enough people at Netflix to know that they know that too.

Most people can download a program that sniffs HTTP. Using side channels is not a simple affair.

Re: FreeBSD 13.0 Beta1 Now Available

#63

Post by paulmd »

dagenix wrote: post #46
fis wrote: post #37

Earlier quoted context omitted.

The parent mentioned "This data is being collected anyway via endpoint technologies like Samsung's Automated Content Recognition (ACR)". If that's true then the encryption isn't really helping.

What if you aren't using a Samsung device?

Samsung was one of the companies caught using their apps to scrape data out of the filesystem (config files and logs from other apps, location from camera roll, etc) and using it to bypass permissions you didn't want to give them.

https://www.xda-developers.com/android-permissions-bypass-pl...

https://www.trustedreviews.com/news/facebook-scraping-call-m...

They are completely terrible on privacy, lol, the answer here is "if you care about privacy don't use a samsung". Or more generally "don't use android".

Re: FreeBSD 13.0 Beta1 Now Available

#64

Post by dagenix »

paulmd wrote: post #63
dagenix wrote: post #46

Earlier quoted context omitted.

What if you aren't using a Samsung device?

Samsung was one of the companies caught using their apps to scrape data out of the filesystem (config files and logs from other apps, location from camera roll, etc) and using it to bypass permissions you didn't want to give them. https://www.xda-developers.com/android-permissions-bypass-pl... https://www.trustedreviews.com/news/facebook-scraping-call-m... They are completely terrible on privacy, lol, the answer here…

I'm not really sure what you are getting at. Regardless of what Samsung is doing, I'm confused by the argument that encryption is useless because Samsung might take steps to work around it when not using a Samsung device is a viable option.

Re: FreeBSD 13.0 Beta1 Now Available

#65

Post by dagenix »

kstrauser wrote: post #51
cperciva wrote: post #34

Earlier quoted context omitted.

Come on Drew, you know as well as I do that media can be unmasked via side channels if an attacker really cares.

People, before you downvote, check out the username. But yeah, you’re right. You could glean a lot of information from nothing but a collection of movies’ exact runtimes, as visible from the network stream. Although that wouldn’t tell you much about a single movie, given enough viewings you could make pretty good guesses about which movies someone is watching.

It doesn't matter who said it. What matters is that they are wrong. Encrypting the connection significantly complicates that attack.

Re: FreeBSD 13.0 Beta1 Now Available

#67

Post by octofish »

I'd hoped that aarch64 (ARM) would now be a tier 1 architecture in 13 but that's not to be the case (https://www.freebsd.org/platforms/) and the FreeBSD wiki page on what's required to make aarch64 a Tier 1 architecture was flagged as being out of date ~18 months ago (https://wiki.freebsd.org/ARMTier1).

For info, a key thing about Tier 1 architectures is that "Binary updates and source patches for Security Advisories and Errata Notices will be provided for supported releases" (https://docs.freebsd.org/en_US.ISO8859-1/articles/committers...), which would make maintaining ARM-based SBCs much easier (no need for setting up cross-compilation toolchains or for very slow compilation on the SBCs) and could make FreeBSD an even better OS for IoT stuff.

Re: FreeBSD 13.0 Beta1 Now Available

#68

Post by vermaden »

About that arm64/aarch64 TIER 1 case ...

This will kinda help you:

https://up.bsd.lv/

Description from the page itself:

up.bsd.lv is a proof-of-concept of binary updates using freebsd-update(8) for FreeBSD 13.0-CURRENT and 12-STABLE to facilitate the exhaustive testing of FreeBSD and the bhyve hypervisor and OpenZFS 2.0, and to help elevate ARM64 to Tier 1 status. Updates are based on the SVN revisions of official FreeBSD Release Engineering weekly snapshots.

Features:

- Kernels are built with the GENERIC-NODEBUG configuration file

- /etc/freebsd-update.conf is modified to use up.bsd.lv

- /usr/sbin/freebsd-update is modified to "xargs" parallel phttpget (Thank you Allan Jude)

- freebsd-update(8) does not output to the $PAGER

Hope that helps.

Re: FreeBSD 13.0 Beta1 Now Available

#69

Post by GordonS »

michaelmrose wrote: post #57
mapgrep wrote: post #35

Earlier quoted context omitted.

One key impetus for Linux moving to systemd was faster boot time, parallelizing init tasks. Is FreeBSD looking at moving beyond traditional rc script boot?

I would question whether boot time is such a meaningful target. It's trivial to leave a system up days or weeks relying on hibernation or suspend instead. This seems especially true given that freebsd is even more likely than Linux to see use as a server instead of a desktop. Besides boot time on any init system with a fast ssd seems to be pretty damn quick. Saving 10 seconds every month will take a long time to pay…

Not so much on servers, but boot time is important on desktop, where most users will power it in only during the day.

Re: FreeBSD 13.0 Beta1 Now Available

#70

Post by blackhaz »

GordonS wrote: post #69
michaelmrose wrote: post #57

Earlier quoted context omitted.

I would question whether boot time is such a meaningful target. It's trivial to leave a system up days or weeks relying on hibernation or suspend instead. This seems especially true given that freebsd is even more likely than Linux to see use as a server instead of a desktop. Besides boot time on any init system with a fast ssd seems to be pretty damn quick. Saving 10 seconds every month will take a long time to pay…

Not so much on servers, but boot time is important on desktop, where most users will power it in only during the day.

Desktops can sleep as well. Boot time is important for embedded computers, e.g. in-vehicle systems, but otherwise I don't see why would this be such an issue.
Post reply on HN