BSD Cafe Billboard

@phessler FYI

Linux creator calls OpenBSD crowd a bunch of "monkeys" and criticizes those who publicize security flaws to gain notoriety. https://www.cnet.com/tech/tech-industry/torvalds-attacks-it-industry-security-circus-1/

@CiotBSD OT = off topic

Port knocking is mostly a bad idea. But people keep wanting to do it, for some false sense of security. If you don't consider it a security control but a way to keep garbage out of your logs, it might be valid. In my case I'm using an old USG Pro 4 running OpenBSD as my firewall and I'd prefer to avoid writing stuff to the logs, as I'd prefer the flash not to wear out sooner than needed, definitely not thanks to background radiation on the internet. https://dgl.cx/2026/06/ssh-port-knocking-with-openbsd

@grahamperrin said: … The code originated from FreeBSD, which itself derived it from Cronyx Engineering Ltd.'s implementation written by Serge Vakulenko in 1994-1996. … I assume that FreeBSD is not affected. Surely (!?) But I dont known!

⇒ OpenBSD under QEMU Architecture specific notes for OpenBSD guests under QEMU, with working command lines where installation succeeds and failure points where it does not. https://kirill.korins.ky/articles/openbsd-under-qemu/

26/08/11 ⇒ Cleaning costs, or, examining the OpenBSD -fret-clean flag I start with apologies to williewillus, calvin, and reezer on Lobste.rs. Prior to July 9, I would have agreed with you all. But it appears I was wrong. There is no need to further engage; it is clear that critique-from-within is undesirable. Which is perfectly OK, because I stepped away from being on the inside. So let's just keep evaluating OpenBSD's mitigations and we'll continue to learn interesting things along the way. https://briancallahan.net/blog/20260811.html

Today on undeadly log: Migrating mail servers from exim to OpenSMTPD (smtpd) is fun and useful Like (we suspect) quite a few of our readers, undeadly.org co-editor Peter Hansteen runs a mail service and settled on exim as the reasonable alternative to the classic sendmail way back when. However, that software has had its share of security issues over the years, and during the preparations for the OpenBSD 7.9 release, the ports maintainers decided that… https://undeadly.org/cgi?action=article;sid=20260516064650

See: https://minwm.btxx.org/ ping: https://mastodon.bsd.cafe/@bt/116573608067727480

26/08/06 ⇒ OpenBGPD 9.2 released A sure sign that a new OpenBSD will soon be ready is that a new OpenBGPD release appears. On August 6th, 2026, the project released OpenBGPD version 9.2. https://undeadly.org/cgi?action=article;sid=20260807061435 https://www.openbgpd.org/

Every single software product is dealing with the question about what to do with “AI”-generated code, but the question is particularly difficult to answer for open source operating systems like Linux distributions and the various BSDs, which often consist of a wide variety of software packages from hundreds to thousands of different developers. On top of that, they also have to ask the “AI” question for every layer of their offering, from the base install, to the official repositories, to community-run ones… https://www.osnews.com/story/144935/openbsd-and-slopcode-raindrop-to-a-torrent/ ping: https://framapiaf.org/@osnews@mstdn.social/116558432820118949

Florian Obser (florian@) recently gave a BSD-NL talk entitled "Let's find out how to get predictable IPv6 addresses assigned to OpenBSD VMs". Florian takes us on a guided tour of how inet6 autoconf actually works, with enlightening and entertaining peeks into selected piece of OpenBSD source. At the end, we are asked to "now, draw the rest of the owl". https://undeadly.org/cgi?action=article;sid=20260512115225 slides: https://www.openbsd.org/events.html#bsdnl2026 video: https://exquisite.tube/w/38gDYhMNTNZimk3GcFnHNa

"A balloon ! Mum, I want this balloonnnn…"

A guide on deploying a lightweight, C-based ActivityPub instance using snac2 on an OpenBSD stack. https://geekyschmidt.com/post/2026-05-05-snac2openbsd/

(06/10) ⇒ OpenBSD stories—Trojaned OpenSSH This is a story I had been considering writing for a long time, as many wrong or stupid things have been said or written at the time it happened. Being on a quite sensitive subject, I have however opted to redact a few things, especially the identity of two OpenBSD developers, as well as some IP addresses and other minor details which could help identify them. They will be referred to as dev1 and dev2 in this story. It does not matter who they are, and they really are trustworthy. http://miod.online.fr/software/openbsd/stories/trojan.html Very interesting! Pleaseant to read…

Setting up a WireGuard Tunnel on FreeBSD 15 https://ianwwagner.com//setting-up-a-wireguard-tunnel-on-freebsd-15.html Overview of my New Homelab Setup https://ianwwagner.com//overview-of-my-new-homelab-setup.html A TLS Terminating Reverse Proxy with OpenBSD https://ianwwagner.com//a-tls-terminating-reverse-proxy-with-openbsd.html ping: https://framapiaf.org/@ianthetechie@fosstodon.org/116499327407801906

About this: https://framapiaf.org/@claudiom@bsd.network/116499285750477711

I got into IT right around the liberation of the SunOS source code. I unfortunately never had a chance to play with SPARC systems but if I find an affordable system I'd play with Illumos or OpenBSD on it. I spent some time reviewing the SPARC ISA (which was based).

See: http://miod.online.fr/software/openbsd/stories/vaxfp.html ping: https://framapiaf.org/@miodvallat@hostux.social/116446563168449035

At work we are uing BSDs extensivly for almost all aspects, except as hardware crypto modules (HSMs). We are also using BSDs as workstations for the daily toil. This of course require a set of usage policies to formalise what is accepted and not. I'm glad we managed to get NetBSD into the official company policy with the following condition Must run on workstation/laptop hardware. Coffee brewers, toasters or other household appliances are explicitly forbidden from accessing production network. On a sader note, OpenBSD is no longer allowed access, when 7.7 goes out of official support in a few weeks time, due to the decision to remove yubikey-otp keyboard support in the kernel from 7.8. Oh well Cheers and RunBSD!