on (#3VF22)
Philip Guenther (guenther@)and Bryan Steele (brynet@)have added more mitigations against speculative executionCPU vulnerabilitieson the amd64 platform.Read more…
OpenBSD Journal
| Link | http://undeadly.org/ |
| Feed | http://undeadly.org/cgi?action=rss |
| Updated | 2026-08-26 01:02 |
on (#3VF23)
rad(8) [as described in the g2k18 hackathonreport byFlorian Obser (florian@)]is now the only IPv6router advertisement daemon in -current, following the removal ofrtadvd(8).Advice on making the transition has beenadded to current.html
on (#3V9Y5)
Claudio Jeker (claudio@) is next up with his report from Ljubljana:
on (#3V9Y6)
Another g2k18 hackathon report has arrived, this one fromCarlos Cardenas (ccardenas@), who writes:
on (#3V5SM)
The next g2k18 report comes from Klemens Nanni (kn@), who writes:
on (#3V37A)
Fresh from the just concluded hackathon in Ljubjlana comes our next report from Florian Obser(florian@) who writes:
on (#3V10A)
Next in from Ljubljana is Matthieu Herrb (matthieu@):
on (#3V07D)
Before winning the football world cup, the french were writing their hackathon reports. Here's the one from Antoine Jacoutot (ajacoutot@):
on (#3V03B)
Theg2k18hackathon has just concluded, and already we have our first report.Marc Espie (espie@) wrote in:
on (#3TREX)
In a change which is bound to be welcomed widely, -current has gained"auto-join" for Wi-Fi networks.Peter Hessler (phessler@) has been working on this for quite some time and he wrote about it in his p2k18 hackathon report. He has committedthe work from the g2k18 hackathon in Ljubljana:
on (#3TAC7)
In this post, Paul Smith shows how to reduce buffer bloat and improve interactive traffic latencies.
on (#3SQ5Q)
Reyk Floeter (reyk@) hascommittedsupport for simple request rewrites tohttpd(8)/httpd.conf(5) [in -current]:
on (#3SN18)
As part of ongoing mitigations against CPU vulnerabilities,-current has gained a new sysctl, "hw.smt",to control Simultaneous Multi Threading (SMT).This is disabled by default (only on Intel® CPUs, for now).Read more…
on (#3SDGD)
There have been more developments in the continuing work mitigatingagainst (Intel®, and potentially other) CPU vulnerabilities…Philip Guenther (guenther@)committed the following:Read more…
on (#3SDGE)
Reyk Floeter (reyk@) hascommitteda simple LDAP client to -current:
on (#3S8PT)
Earlier this month, Philip Guenther (guenther@)committed(to amd64 -current) a change from lazy to semi-eager FPU switchingto mitigate against rumored FPU state leakagein Intel® CPUs.Theo de Raadt (deraadt@) discussed this in hisBSDCan 2018session.Using information disclosed in Theo's talk,Colin Percivaldeveloped a proof-of-concept exploit in around 5 hours.This seems to have prompted an early end to an embargo(in which OpenBSD was not involved), and theofficial announcementof the vulnerability.
on (#3S1YN)
BSDCan 2018has concluded, and materials for (some of) the OpenBSD-related tutorials andtalks can be found inthe usual place.Highlights includethe unveiling of unveil(),hinted at by Bob Beck (beck@) in hisp2k18 report,and"Speculating about Intel", by Theo de Raadt (deraadt@). [An unofficial video of the latter presentation isavailable.]At the time of writing,officialvideo recordings are not yet available.
on (#3RQRX)
Todd Mortimer (mortimer@) hascommitted"RETGUARD" for clang (for amd64).This is a new anti-ROPsecurity mechanism, which uses random per-function cookiesto protect return addresses on the stack.Read more…
on (#3RHFE)
Joel Sing (jsing@) hascommittedCrypto Simplified Interface (CSI) to -current:
on (#3QZHJ)
Gilles Chehade (gilles@) hascommitted(to -current) the newsmtpd.confgrammar discussed inhis p2k18 hackathon report.Read more…
on (#3QDW4)
Next up in the stream of p2k18 reports is one from Antoine Jacoutot (ajacoutot@):
on (#3Q4M8)
Next up in our series of p2k18 hackathon reports is from Paul Irofti (pirofti@), who writes:
on (#3Q39Y)
Peter Hessler (phessler@) writes about his time in Nantes:
on (#3Q39Z)
Eric Faurot (eric@) is next with his report on what he did in Nantes:
on (#3Q3A0)
Stefan Sperling (stsp@) kindly sent in a report on his activities around p2k18:
on (#3Q3A1)
Our next p2k18 report comes from Christian "naddy" Weisgerber, who writes:
on (#3Q3A2)
Landry Breuil (landry@) has an extensive report for our readers:
on (#3Q3A3)
Next up with a p2k18 report is Jasper Lievisse Adriaanse (jasper@):
on (#3P3YZ)
Next up with a p2k18 report is Bob Beck (beck@):
on (#3P2DG)
Next up is the report from Ken Westerback (krw@):
on (#3P1C6)
The latest p2k18 hackathon report comes from Gilles Chehade (gilles@),who writes:
on (#3P1AQ)
As more and more developers arrive back home from France, more reports arrive to you to keep you informed of what happened in Nantes. This time, it's Philip Guenther (guenther@) who writes in with his report:
on (#3P0TF)
Next up in our series of p2k18 reports is that from Klemens Nanni (kn@):
on (#3NZY7)
Here is another report from the just concluded p2k18 hackathon, from Marc Espie (espie@), who writes:
on (#3NZ4J)
Working at p2k18, Theo de Raadt (deraadt@) hascommittedSpectre Variant 2 mitigations:
on (#3NTSH)
Working at p2k18, Eric Faurot (eric@) hascommitteda simple SMTP client to -current:
on (#3N45C)
Ken Westerback (krw@ when wearing his developer hat) writes:
on (#3N171)
In this commit, visa@ submitted code (disabled for now) to use built-in accelerationon octeon CPUs, much like AESNI for x86s.I decided to test tcpbench(1) and IPsec, before and after updating and enabling the octcrypto(4) driver.Read more…
on (#3MRRP)
The MAP_STACK anti-ROP mechanism described in a recentarticlehas beencommittedto-current.Thecommit messageincludes:
on (#3MRRQ)
Landry Breuil (landry@ when wearing his developer hat) wrotein…
on (#3KQDB)
April 2, 2018: The OpenBSDproject has announced the availability of the newest release,OpenBSD 6.3:
on (#3HSSV)
Recently, Theo de Raadt (deraadt@)describeda new type of mitigation he has been working on together with Stefan Kempf (stefan@):
on (#3HQF1)
Mike Larkin (mlarkin@) has just given a presentation atbhyvecon Tokyo 2018.The slides are nowavailable (as PDF).In addition to the excellent summary of the state-of-play forvmmand friends, the presentation offers a tantalizing glimpse at possible futuredirections.Update: videois available
on (#3HKTZ)
Good news for people doing upgrades only once per year: syspatches will be provided for both supported releases. The commit from T.J. Townsend (tj@) speaks for itself:
on (#3H4HY)
Ken Westerback (krw@) has sent in the first report from the (recently concluded) a2k18 hackathon:
on (#3H1EK)
The recent changes in -current mitigating the Meltdown vulnerability have been backported to the6.1 and6.2(amd64) releases, and thesyspatch update (for 6.2) is now available.Happy syspatching, and don't forget to show your appreciation bydonating to the project.
on (#3GEPR)
Meltdown mitigation is coming to OpenBSD. Philip Guenther (guenther@) has just committed a diff that implements a new mitigation technique to OpenBSD: Separation of page tables for kernel and userland. This fixes the Meltdown problems that affect most CPUs from Intel. Both Philip and Mike Larkin (mlarkin@) spent a lot of time implementing this solution, talking to various people from other projects on best approaches.In the commit message, Philip briefly describes the implementation:Read more…
on (#3F9TM)
As you may have heard, the a2k18 hackathon is in progress. As can be seen from the commit messages, several items of goodness are being worked on.One eagerly anticipated item is the arrival of TCP syncookies (read: another important tool in your anti-DDoS toolset) in PF. Henning Brauer (henning@) added the code in a series of commits on February 6th, 2018, with this one containing the explanation:Read more…