Posts in category www.undeadly.org
p2k16 Hackathon Report: pirofti@ on o...
The next hackathon report comes from Paul Irofti, who writes:
This was probably the shortest hackathon I attended. The 4 days flew by
and I realised we have to pack and go with nothing to show for.
My usual hackathon work flow is: waste 3-4 days trying to figure how some
device works, and then polish the driver(s) for the (Read mo [...]
p2k16 Hackathon Report: jasper@ on gn...
Our next report comes from Jasper Lievisse Adriaanse, who writes:
Hackathons have long since had two themes for me, gnomes and
puppets. However this hackathon I actually didn\'t want to play with
puppets for once, yet I ended up importing Puppet 4 after all. More on
that later.
Read more...
SROP mitigation committed
In a recent email, Theo de Raadt explains the SROP mitigation technique, a recent team effort.
This is the first demonstration of a mitigation against SROP.
Utilizing a trick from kbind(2), the kernel now only accepts signal
returns from the PC address of the sigreturn(2) syscall in the signal
trampoline. Since the signal trampoli [...]
p2k16 Hackathon Report: krw@ on pdisk...
The next hackathon report comes from Ken Westerback, who writes:
I arrived at CDG, got on my train and arrived in Nantes just before
a national train strike started. Whew. Did a pleasant walk paralleling
the tram tracks to the appropriate tram stop and consulted the
documentation. "Hackroom is nearby." Hmmm. Wandered around [...]
p2k16 Hackathon Report: ajacoutot@ on...
Our next p2k16 report comes from Antoine Jacoutot, who writes:
First of all I\'d like to give a big thank to gilles@, Epitech Nantes and the
OpenBSD Foundation for making this event a real blast. The hackroom accomodation
was very nice and so was the location.
Disclaimer: I have a goldfish memory so I am probably forgetting a lot [...]
p2k16 Hackathon Report: landry@ on mo...
The next report in our p2k16 series is from Landry Breuil, who writes:
For once we had a hackathon in France, so travel should be simple...
turns out, at the last minute the past week i had engaged myself in a
motorbike rally race, taking place in Corsica on the weekend right
before the hackathon. Driving to south of france (Read mo [...]
p2k16 Hackathon Report: naddy@ on gra...
Fresh from the p2k16 hackathon comes this report from Christian Weisgerber, who writes:
Coming to p2k16, I had only vague plans what to work on. The last
few hackathons I had tackled some projects that didn\'t quite result
into something committable, so this time I decided to keep it basic.
The idea was to update some ports and mayb [...]
OpenBSD Foundation Announces Gold Spo...
OpenBSD Foundation director Ken Westerback (krw@) writes in with some great news:
The OpenBSD Foundation is happy to announce that DuckDuckGo has become the first Gold level contributor to the 2016 fundraising campaign.
This donation is part DuckDuckGo\'s annual initiative to help fund free and open source projects based on nominatio [...]
libcrypto errata – May 2016
Ted Unangst just sent an announcement of LibreSSL patches
OpenSSL announced several issues today that also affect LibreSSL.
- Memory corruption in the ASN.1 encoder (CVE-2016-2108)
- Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
- EVP_EncodeUpdate overflow (CVE-2016-2105)
- EVP_EncryptUpdate overflow (CVE-2016-2106)
[...]
anti-ROP mechanism in libc
Theo (deraadt@) writes in to the tech@ mailing list, with a clever idea that we would like to try.
This change randomizes the order of symbols in libc.so at boot time.
This is done by saving all the independent .so sub-files into an ar
archive, and then relinking them into a new libc.so in random order,
at each boot. The (Read mo [...]
The p2k16 hackathon has begun
OpenBSD developers from around the world have just gathered in Nantes, France for the p2k16 hackathon. This event is technically a ports hackathon, but many non-porters have showed up too, which means you can expect a variety of different improvements.
As an early example, ajacoutot@ has just set sysmerge to run automatically during the u [...]
Undeadly and HTTPS
We here at Undeadly are looking to move the site to HTTPS-only. It\'s been discussed for quite a while, but there\'s one roadblock that we\'re looking for some help to overcome.
Read more...
CfP EuroBSDCon 2016
On behalf of the EuroBSDCon 2016 Program Committee, here is the Call for Papers for the EuroBSDCon 2016 conference which will take place in Belgrade, Serbia from 22nd through 25th of September 2016.
Closing date for the CfP is May, 8th.
Everyone is encouraged to submit your proposals! Even those that haven\'t presented before.
OpenBSD 5.9 released (early!)
The release of OpenBSD 5.9, previously scheduled for the usual May 1st, has just been officially announced!
We are pleased to announce the official release of OpenBSD 5.9.
This is our 39th release on CD-ROM (and 40th via FTP/HTTP). We remain
proud of OpenBSD\'s record of more than twenty years with only two remote
holes in the defau [...]
New routing table code (ART) enabled ...
With this commit, mpi@ enabled the new ART routing table implementation, which paves way for more MP network stack improvements down the line.
Read more...
IPv6 errata for 5.7/5.8, pledge errat...
Errata patches were recently issued for an IPv6 bug that affects users of both OpenBSD 5.7 and 5.8, as well as a patch for pledge in the upcoming 5.9 release.
Quoting the patch:
Insufficient checks in IPv6 socket binding and UDP IPv6 option
processing allow a local user to send UDP packets with a source
(IPv6 address + port) alread [...]
AsiaBSDCon OpenBSD papers
This year\'s AsiaBSDCon has come to an end, with a number of OpenBSD-related talks being presented. Two developers were also invited to the smaller \"bhyvecon\" event to discuss vmm(4) and future plans.
Antoine Jacoutot (ajacoutot@) - OpenBSD rc.d(8) (slides | paper)
Henning Brauer (henning@) - Running an ISP on OpenBSD (slides)
Mike Be [...]
The VAX platform is no more
After much internal discussion, OpenBSD has officially discontinued support for the VAX architecture. In a series of commits, Theo de Raadt puts the platform to rest.
Read more...
xterm(1) now UTF-8 by default
For safety and usability, xterm(1) now uses UTF-8 mode by default.
CVSROOT: /cvs
Module name: xenocara
Changes by: schwarze@cvs.openbsd.org 2016/03/08 10:26:30
Modified files:
app/xterm : XTerm.ad
Log message:
Use UTF-8 mode by default because it is safer and more useful
even for people always running with a C/POSIX lo [...]
5.9 songs released
The 5.9 festivities are starting earlier than usual this time around, with the songs being available before the OS! Accompanying the release media are the following tracks:
\"Doctor W^X\" (mp3 | ogg)
\"Systemagic (Anniversary Edition)\" (mp3 | ogg | lyrics)
Seasoned OpenBSD users may notice that the second song is a reprisal of \"Sy [...]
