BSD Cafe Billboard

By the way, our first two publications on evaluating #OpenBSD mitigations are out. Both of these papers evaluate some amd64 anti-ROP mitigations: specifically changing the register selection order and semantically equivalent rewriting of instructions that may produce a potential polymorphic gadget instruction. This tracks a paper by mortimer@ back in 2019 at AsiaBSDCon.The TL;DR is "OpenBSD can shrink binaries a little and gain a little performance without any security loss simply by reverting these mitigations." The mitigations did not hold up to independent evaluation.The first paper did an exact 1:1 port of these mitigations to FreeBSD and found that register reallocation eliminates only about 0.3% of unique gadgets, for a 0.5% increase in binary size (mortimer@ claimed 6% reduction and "entirely free"). It is useless at best but more likely actively detrimental, as it produces a false sense of security. It also found the instruction rewriting reduces unique gadgets by about 3.5% with a binary size increase of about 1.8% (mortimer@ claimed 5% reduction with 0.15% binary size increase).We then did a separate implementation of the instruction rewriting mitigation to GCC in the second paper. Our GCC implementation does the older <xchg; op; xchg> dance, as that's what mortimer@'s paper described. This is way worse; producing about a 3% performance hit for no security benefit at all.The only part of both mitigations worth saving is for basic arithmetic, OpenBSD LLVM now takes advantage of the fact that basic arithmetic has two forms. For example, the newer instruction rewriting mitigation turnsaddq %rax, %rbx (48 01 c3)into{load} addq %rax, %rbx (48 03 d8)The new instruction rewriting mitigation is genuinely free in terms of binary size and execution speed, but doesn't move the security needle, so this one can stay as it is harmless. Other rewritings still have the flaw of increasing binary size and reducing performance for no security benefit.Anyhow feel free to read the papers:https://ieeexplore.ieee.org/abstract/document/11458911https://www.researchgate.net/publication/405728967_A_Final_Return_for_OpenBSD_Anti-Return-Oriented_Programming_Mitigations#BSD #FreeBSD #NetBSD #DragonFlyBSD #Linux #Unix #security #cybersecurity

@mike_k I set the time and tried again. Still no luck. I've never had this issue on other devices. I also didn't have this issue on my last arm64 RPi install... the only difference in that one was that I installed the sets from http.

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟲/𝟬𝟴 (Valuable News - 2026/06/08) available. https://vermaden.wordpress.com/2026/06/08/valuable-news-2026-06-08/Past releases: https://vermaden.wordpress.com/news/#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

@alfonsosiciliano I definately want to have a look at it. Im playing with #FreeBSD on my T14 Notebook and all Input getting this running as smooth as possible is highly appretiated

@stefano And the pizza can be FreeDiavola, OpenDiavola or NetDiavola style.

RUN!#BSD#ZFS#BSDCan

@stefano @feld I have this correction reflected in the main post!Thank you!

@stefano I did miss the questions at the end … @jana

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟲/𝟬𝟭 (Valuable News - 2026/06/01) available. https://vermaden.wordpress.com/2026/06/01/valuable-news-2026-06-01/Past releases: https://vermaden.wordpress.com/news/#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

The #eurobsdcon 2026 Call for Papers: Submit by June 20th!https://2026.eurobsdcon.org/cfp/Submit by June 20th, come to Brussels September 9-13 and mingle with #BSD people!We also offer pre-submission guidance/mentoring, see within.Wonder what BSD and the conferences are about? See https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html@EuroBSDCon #freebsd #netbsd #openbsd #freesoftware #libresoftware #brussels #bruxelles

Federation's broken on polymaths.social again, how's my #BSD folk doing this fine Sunday? XDI started off about six days ago deciding to switch from neovim to nvi (clone of original vi), and somehow that snowballed into learning ed XD(using ed write now to write this toot!)Here are a bunch of toots from my very first discoveries/explorations until today. XD —May 25, 2026, 23:50https://polymaths.social/@rl_dane/statuses/01KSGRQ9XP3EDD9CDWQ0SM04HVMay 26, 2026, 10:41https://polymaths.social/@rl_dane/statuses/01KSHY07G9R8FBGJWVG055J7TEMay 26, 2026, 20:46https://polymaths.social/@rl_dane/statuses/01KSK0KWS4Y0A6H8XYTK3QRNCSMay 27, 2026, 01:04https://polymaths.social/@rl_dane/statuses/01KSKFD1QZ3VYTBQKVRRM0HEWRMay 27, 2026, 01:17https://polymaths.social/@rl_dane/statuses/01KSKG4VDEV4TF0DP7ESZ8CMPCMay 27, 2026, 01:39https://polymaths.social/@rl_dane/statuses/01KSKHCR5WJJPZB5FBMCJ94V1VMay 27, 2026, 03:10https://polymaths.social/@rl_dane/statuses/01KSKPJCDS67612PESC1QV4XRNMay 27, 2026, 04:08https://polymaths.social/@rl_dane/statuses/01KSKSWPG2AHNCB6XPGG6Z35FAMay 27, 2026, 11:53https://polymaths.social/@rl_dane/statuses/01KSMMG3SDQXPECQHNCTJMD0J1May 27, 2026, 18:44https://polymaths.social/@rl_dane/statuses/01KSNC1M7RC0Y3EEH256N7R79JMay 27, 2026, 22:12https://polymaths.social/@rl_dane/statuses/01KSNQY4NF3WS6H52H01XW4Y94May 27, 2026, 23:39https://polymaths.social/@rl_dane/statuses/01KSNWWMXGVJYEZZXG3D3PT6HGMay 29, 2026, 12:03https://polymaths.social/@rl_dane/statuses/01KSSSX99V2Y04V94A1WGX4WGGMay 29, 2026, 12:20https://polymaths.social/@rl_dane/statuses/01KSSTWB6VJ26PZ41CBBZMP03KMay 30, 2026, 00:02https://polymaths.social/@rl_dane/statuses/01KSV31VCNYATE20FF1H5P18BFMay 30, 2026, 03:20https://polymaths.social/@rl_dane/statuses/01KSVEB222YQ184NHPDP3T682XMay 30, 2026, 12:27https://polymaths.social/@rl_dane/statuses/01KSWDMS80RMS6ZR60Q0G6SBR6May 30, 2026, 12:29https://polymaths.social/@rl_dane/statuses/01KSWDS00H4EP0G80PW5K807RWMay 30, 2026, 13:00https://polymaths.social/@rl_dane/statuses/01KSWFJBV9ZS8CHDECHF5TE1MBMay 30, 2026, 14:36https://polymaths.social/@rl_dane/statuses/01KSWN1407ZATT0MSB7ZFQT5BAMay 30, 2026, 17:19https://polymaths.social/@rl_dane/statuses/01KSWYBNEMD2DPCDN44V9GQEEWMay 30, 2026, 22:04https://polymaths.social/@rl_dane/statuses/01KSXEN8JAVBCZBK5D1Z4W9588May 31, 2026, 14:55https://polymaths.social/@rl_dane/statuses/01KSZ8HPCH37C10YWCKCGDJKMDMay 31, 2026, 18:04https://polymaths.social/@rl_dane/statuses/01KSZKBN8MXG5DEVX7AWEE74AZ

Are you an OpenBSD user and afraid you won't be able to use it while blind?Come to the "OpenBSD and Temporary Blindness" talk given by Sean Howard:https://www.bsdcan.org/2026/timetable/timetable-OpenBSD-and-Temporary.htmlOnly at BSDCan 2026!https://www.bsdcan.org/2026/registration.html#BSDCan #BSD #OpenBSD

I am assisting an educational podcast project doing the sysadmin for them. Happy that I was able to advocate for #BSD. We went with httpd(8) #OpenBSD for this, in the end it is just the feed.xml and some MP3/M4A-files. So exactly what the web is for. However, #Apple refuses the feed saying httpd does not support byte-ranges. Looking at the change logs, it should be supported since 5.8 (https://www.openbsd.org/plus58.html). And testing all this with curl does return a 206 and provides me with a working chunk of data. What am I missing here? #NetBSD #FreeBSD #smallweb #podcast #podcasts

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟱/𝟮𝟱 (Valuable News - 2026/05/25) available. https://vermaden.wordpress.com/2026/05/25/valuable-news-2026-05-25/Past releases: https://vermaden.wordpress.com/news/#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

@kkarhan@c.im @BoxyBSD@bsd.cafe @BoxedTux@mastodon.social it’s just meant that no IPv4 is required for this project. Important, as IPv4 is still costy…

Happy Weekend! In a few hours, Open Source Conference 2026 Japan in #Nagoya will be held at the Fukiage Hall in Chikusa Ward:https://event.ospn.jp/osc2026-nagoya/One of their talks is from the Nagoya #BSD Users Group, and seems to target #NetBSD in particular. That sounds pretty awesome, and definitely one of the ones I'm going to attend.https://event.ospn.jp/osc2026-nagoya/session/2296979I wonder what the chances are I'll find anyone from Fedi in there? Anyone feeling like dropping by "boring city" on a Saturday? #OSC2026 #OpenSource #Conference

#HappyFriday to my friends, followers, #BSDCafe community, #BSD and everyone on the Fediverse I wish you a nice day before this extended weekend ️

@endrift @domi @grahamperrin @thedaemon @pj @FreeBSDFoundation The other thing to note is the deletion of text and links was intentional. This may need a few iterations but the intent is to reduce any friction the website itself may create that prevents a first-time install.I also think we need to give thought to what’s the page for the non-new people. I can almost imagine a data dense “other front page” that’s maybe a click away and highly consumable by veteran users.

The #eurobsdcon 2026 Call for Papers: Submit by June 20th!https://2026.eurobsdcon.org/cfp/Submit by June 20th, come to Brussels September 9-13 and mingle with #BSD people!We also offer pre-submission guidance/mentoring, see within.Wonder what BSD and the conferences are about? See https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html@EuroBSDCon #freebsd #netbsd #openbsd #freesoftware #libresoftware #brussels #bruxelles

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟱/𝟭𝟴 (Valuable News - 2026/05/18) available. https://vermaden.wordpress.com/2026/05/18/valuable-news-2026-05-18/Past releases: https://vermaden.wordpress.com/news/#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday