Posts in category www.undeadly.org
More Mitigations for (potential) CPU ...
There have been more developments in the continuing work mitigating
against (Intel®, and potentially other) CPU vulnerabilities…
Philip Guenther (guenther@)
committed the following:
Read more…
LDAP client added to -current
Reyk Floeter (reyk@) has
committed
a simple LDAP client to -current:
CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2018/06/13 09:45:58
Log message:
Import ldap(1), a simple ldap search client.
Read more…
Intel FPU Speculation Vulnerability C...
Earlier this month, Philip Guenther (guenther@)
committed
(to amd64 -current) a change from lazy to semi-eager FPU switching
to mitigate against rumored FPU state leakage
in Intel® CPUs.
Theo de Raadt (deraadt@) discussed this in his
BSDCan 2018
session.
Using information disclosed in Theo\'s talk,
Colin Percival
developed a pr [...]
OpenBSD at BSDCan 2018
BSDCan 2018
has concluded, and materials for (some of) the OpenBSD-related tutorials and
talks can be found in
the usual place.
Highlights include
the unveiling of unveil(),
hinted at by Bob Beck (beck@) in his
p2k18 report,
and
"Speculating about Intel", by Theo de Raadt (deraadt@). [An unofficial video of the (Read mor [...]
RETGUARD for clang (amd64) added to -...
Todd Mortimer (mortimer@) has
committed
"RETGUARD" for clang (for amd64).
This is a new anti-ROP
security mechanism, which uses random per-function cookies
to protect return addresses on the stack.
Read more…
libcsi – Crypto Simplified Inte...
Joel Sing (jsing@) has
committed
Crypto Simplified Interface (CSI) to -current:
CVSROOT: /cvs
Module name: src
Changes by: jsing@cvs.openbsd.org 2018/06/02 11:40:33
Added files:
lib/libcsi : Makefile Symbols.list csi.c csi.h csi_dh.c
csi_dh_groups.c csi_internal.h csi_util.c
shlib_versi [...]
New Grammar for smtpd.conf
Gilles Chehade (gilles@) has
committed
(to -current) the new
smtpd.conf
grammar discussed in
his p2k18 hackathon report.
Read more…
p2k18 Hackathon Report: Antoine Jacou...
Next up in the stream of p2k18 reports is one from Antoine Jacoutot (ajacoutot@):
Because there was yet another national railroad strike, I decided not to take
any chance and arrived on the eve of the hackathon. I figured it would be a good
excuse for a pajama party at gilles@\'s. It turned out to be a great
(Read more...)
p2k18 Hackathon report: Paul Irofti (...
Next up in our series of p2k18 hackathon reports is from Paul Irofti (pirofti@), who writes:
I joined the hackathon with plenty on my todo list and to my surprise managed to
finish or at least narrow down a plan for most items.
Read more…
p2k18 Hackathon report: Peter Hessler...
Peter Hessler (phessler@) writes about his time in Nantes:
I had arrived at Nantes with two goals, first was to port an app to watch baseball via mlb.tv, and second to clean up my work on BFD and hopefully enable it.
I\'d sent out some ports for OKs, and was cleaning up some long-standing diffs for BFD when (Read more...)
p2k18 Hackathon Report: Eric Faurot o...
Eric Faurot (eric@) is next with his report on what he did in Nantes:
Besides trying to reach Nantes (for some reason it has always been
more complicated than it seems, even if I live not too far away; I now
consider it as an achievement in itself), my goal for this hackathon
was mostly to work with (Read more...)
p2k18 Hackathon Report: Stefan Sperli...
Stefan Sperling (stsp@) kindly sent in a report on his activities around p2k18:
The first item I worked on in Nantes was an update of the Apache Subversion
port to the freshly released version 1.10.0. This in itself was a very small
amount of work to do. However, having implemented several new features in the
upstream code base (Read [...]
p2k18 Hackathon report: Christian Wei...
Our next p2k18 report comes from Christian \"naddy\" Weisgerber, who writes:
By the time I arrived in Nantes, I was not in the best of moods.
The French railroad strike had forced me to cancel my train tickets
and book flights instead; the late evening leg of the journey was
delayed by one and a half hours because the plane (Read more [...]
p2k18 Hackathon Report: Landry Breuil...
Landry Breuil (landry@) has an extensive report for our readers:
I came to this hackathon with vague plans to play with WebRTC and
firefox (i had brought an external Logitech Orbit webcam that weerd@
sent me ages ago and a headset/mic) and nothing more … and it proved
out to be the right plan, as i was way (Read more...)
p2k18 Hackathon report: Jasper Lievis...
Next up with a p2k18 report is Jasper Lievisse Adriaanse (jasper@):
When the strikes were announced I decided to change my travel plans a bit and ended up arriving in Nantes one day early. That made me avoid the strikes that were on strike, oh well.
Read more…
p2k18 Hackathon report: Bob Beck on p...
Next up with a p2k18 report is Bob Beck (beck@):
So, I arrived at p2k18 after flying from Calgary with deraadt@ and meeting up with krw@ in Paris. A one way rental car got us to Nantes with my phone navigating.
Read more…
p2k18 Hackathon Report: Ken Westerbac...
Next up is the report from Ken Westerback (krw@):
Trains! (Strike) Planes! (Strike) Automobiles (Whew)
Having been lucky enough to arrive in Paris at about the same time as
Theo (deraadt@, not tb@) and Bob I managed to snag a ride to Nantes
with them when both the trains and the planes were supposed to be on
strike. (Read more...)
SMTP client added to -current
Working at p2k18, Eric Faurot (eric@) has
committed
a simple SMTP client to -current:
CVSROOT: /cvs
Module name: src
Changes by: eric@cvs.openbsd.org 2018/04/26 07:57:13
Added files:
usr.sbin/smtpd : smtp.1 smtp.h smtp_client.c smtpc.c
usr.sbin/smtpd/smtp: Makefile
Log message:
add a simple SMTP client
ok gilles@
Se [...]
OpenBSD Community Goes Gold for 2018!
Ken Westerback (krw@ when wearing his developer hat) writes:
Monthly paypal donations from the OpenBSD community have made the
community the
OpenBSD Foundation\'s first
Gold level contributor for
2018!
2018 is the third consecutive year that the community has reached
Gold status or better.
These monthly paypal commitments by the [...]
Hardware accelerated AES/HMAC-SHA on ...
In this commit, visa@ submitted code (disabled for now) to use built-in acceleration
on octeon CPUs, much like AESNI for x86s.
I decided to test tcpbench(1) and IPsec, before and after updating and enabling the octcrypto(4) driver.
Read more…
