BSD Cafe Billboard

Port knocking is mostly a bad idea. But people keep wanting to do it, for some false sense of security. If you don't consider it a security control but a way to keep garbage out of your logs, it might be valid. In my case I'm using an old USG Pro 4 running OpenBSD as my firewall and I'd prefer to avoid writing stuff to the logs, as I'd prefer the flash not to wear out sooner than needed, definitely not thanks to background radiation on the internet. https://dgl.cx/2026/06/ssh-port-knocking-with-openbsd

@grahamperrin said: … The code originated from FreeBSD, which itself derived it from Cronyx Engineering Ltd.'s implementation written by Serge Vakulenko in 1994-1996. … I assume that FreeBSD is not affected. Surely (!?) But I dont known!

⇒ OpenBSD under QEMU Architecture specific notes for OpenBSD guests under QEMU, with working command lines where installation succeeds and failure points where it does not. https://kirill.korins.ky/articles/openbsd-under-qemu/

26/08/11 ⇒ Cleaning costs, or, examining the OpenBSD -fret-clean flag I start with apologies to williewillus, calvin, and reezer on Lobste.rs. Prior to July 9, I would have agreed with you all. But it appears I was wrong. There is no need to further engage; it is clear that critique-from-within is undesirable. Which is perfectly OK, because I stepped away from being on the inside. So let's just keep evaluating OpenBSD's mitigations and we'll continue to learn interesting things along the way. https://briancallahan.net/blog/20260811.html

Today on undeadly log: Migrating mail servers from exim to OpenSMTPD (smtpd) is fun and useful Like (we suspect) quite a few of our readers, undeadly.org co-editor Peter Hansteen runs a mail service and settled on exim as the reasonable alternative to the classic sendmail way back when. However, that software has had its share of security issues over the years, and during the preparations for the OpenBSD 7.9 release, the ports maintainers decided that… https://undeadly.org/cgi?action=article;sid=20260516064650

See: https://minwm.btxx.org/ ping: https://mastodon.bsd.cafe/@bt/116573608067727480

26/09/18 ⇒ GEFS**, the "Good Enough File System" on the horizon for OpenBSD** Filesystems on OpenBSD have come in two varieties, UFS1 or UFS2. Ori Bernstein has set out to possibly introduce a new option, the "Good Enough File System", which Ori describes as https://undeadly.org/cgi?action=article;sid=20260918115729

Every single software product is dealing with the question about what to do with “AI”-generated code, but the question is particularly difficult to answer for open source operating systems like Linux distributions and the various BSDs, which often consist of a wide variety of software packages from hundreds to thousands of different developers. On top of that, they also have to ask the “AI” question for every layer of their offering, from the base install, to the official repositories, to community-run ones… https://www.osnews.com/story/144935/openbsd-and-slopcode-raindrop-to-a-torrent/ ping: https://framapiaf.org/@osnews@mstdn.social/116558432820118949

Florian Obser (florian@) recently gave a BSD-NL talk entitled "Let's find out how to get predictable IPv6 addresses assigned to OpenBSD VMs". Florian takes us on a guided tour of how inet6 autoconf actually works, with enlightening and entertaining peeks into selected piece of OpenBSD source. At the end, we are asked to "now, draw the rest of the owl". https://undeadly.org/cgi?action=article;sid=20260512115225 slides: https://www.openbsd.org/events.html#bsdnl2026 video: https://exquisite.tube/w/38gDYhMNTNZimk3GcFnHNa

"A balloon ! Mum, I want this balloonnnn…"

A guide on deploying a lightweight, C-based ActivityPub instance using snac2 on an OpenBSD stack. https://geekyschmidt.com/post/2026-05-05-snac2openbsd/

26/09/02 ⇒ OpenBSD stories—Strange Medieval Devices In the late 1970s and the 1980s, the best choice for high-performance, high-capacity storage was so-called SMD disks. http://miod.online.fr/software/openbsd/stories/smd.html

Setting up a WireGuard Tunnel on FreeBSD 15 https://ianwwagner.com//setting-up-a-wireguard-tunnel-on-freebsd-15.html Overview of my New Homelab Setup https://ianwwagner.com//overview-of-my-new-homelab-setup.html A TLS Terminating Reverse Proxy with OpenBSD https://ianwwagner.com//a-tls-terminating-reverse-proxy-with-openbsd.html ping: https://framapiaf.org/@ianthetechie@fosstodon.org/116499327407801906

About this: https://framapiaf.org/@claudiom@bsd.network/116499285750477711

I got into IT right around the liberation of the SunOS source code. I unfortunately never had a chance to play with SPARC systems but if I find an affordable system I'd play with Illumos or OpenBSD on it. I spent some time reviewing the SPARC ISA (which was based).

See: http://miod.online.fr/software/openbsd/stories/vaxfp.html ping: https://framapiaf.org/@miodvallat@hostux.social/116446563168449035

At work we are uing BSDs extensivly for almost all aspects, except as hardware crypto modules (HSMs). We are also using BSDs as workstations for the daily toil. This of course require a set of usage policies to formalise what is accepted and not. I'm glad we managed to get NetBSD into the official company policy with the following condition Must run on workstation/laptop hardware. Coffee brewers, toasters or other household appliances are explicitly forbidden from accessing production network. On a sader note, OpenBSD is no longer allowed access, when 7.7 goes out of official support in a few weeks time, due to the decision to remove yubikey-otp keyboard support in the kernel from 7.8. Oh well Cheers and RunBSD!

See: https://www.undeadly.org/cgi?action=article;sid=20260415050032

In Japanese, though, possibly you'll be interested. I myself never tried, but there's LUNA 68k/88k emulator, nono introduced here. Upstream here (Japanese site).

@rl_dane @raster @darth I really like #NomadBSD, but I think it's dead. No releases in 2025 and 2026.