Slashdot Mirror

It's a daemon, not a devil. It's quite different. There's nothing bad about daemons whatsoever. A daemon (in the way FreeBSD uses it) is not the common definition of demon most go by but "a supernatural being of Greek mythology intermediate between gods and men." From the FreeBSD Handbook, "Daemons were characters in Greek mythology; neither good or evil, they were little attendant spirits that, by and large, did useful things for mankind. Much like the web servers and mail servers of today do useful things. This is why the BSD mascot has, for a long time, been the cheerful looking daemon with sneakers and a pitchfork."

The basic idea is that you need to be able to run executable code under OS-enforced restrictions that are similar to the restrictions on Java applets. A legitimate Active-X control, for example, needs to talk to its window, its site, and the instance of the rendering engine for the current page. That's a jail-type application. FreeBSD has this now, but browsers don't use it.

The LOMAC system is more general. It's like Perl tainting, for the whole OS. You can download some application from the Internet, but it can't do anything to data that didn't come from the Internet. Games, for example, fit well into this model.

Rather than whining about Microsoft's sign-everything approach, the Linux community needs to develop security technologies like these that provide real security. This is better than what Microsoft is proposing. And most of the hard work is already done. The main task is to get the browser people to use it.

This makes a lot of sense for the Mozilla project to do, making them a superior alternative to IE. But their code base may be too big to try this easily. The process architecture of the browser, at the "who talks to what" level, needs to be redesigned with security in mind. Basically, the rendering engine for each page needs to be in a separate process with limited privileges. This has impacts on many browser features, although the main rendering task isn't impacted much.

Think of it as a firewall inside the browser.

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking?

What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her!

Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie. Let's face it: there's just no way Tux is ever going to compete with the divine Ceren. She is surely the woman of every computer geek's dreams. Wouldn't you kill to get just this close to her.

Join the campaign for more cute open source babes today!

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking?

What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her!

Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie. Let's face it: there's just no way Tux is ever going to compete with the divine Ceren. She is surely the woman of every computer geek's dreams. Wouldn't you kill to get just this close to her.

Join the campaign for more cute open source babes today!

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking?

What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her!

Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie. Let's face it: there's just no way Tux is ever going to compete with the divine Ceren. She is surely the woman of every computer geek's dreams. Wouldn't you kill to get just this close to her.

Join the campaign for more cute open source babes today!

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking?

What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her!

Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie. Let's face it: there's just no way Tux is ever going to compete with the divine Ceren. She is surely the woman of every computer geek's dreams. Wouldn't you kill to get just this close to her.

Join the campaign for more cute open source babes today!

1. Please cvsup your ports. If you need help, your daddy can read you a cvsup bed time story from the big fluffy handbook at www.freebsd.org [freebsd.org].
2. Next, install the extra special fun fun portable openssh port at /usr/ports/security/openssh-portable. You and your cat can take turns reading the pkg-descr about why it's called portable. It's fun! It's happy! Smiles for everyone!! :) :)
   If you are a good little boy, you will find that this special port links against openssl 0.9.6d. Gosh and gollies, that's why you needed to cvsup your ports, silly! Ain't that a fucking riot? More emoticons to take the bitter edge off: :) :)
3. Next, help out Mr. Config File, so he can enable the fun fun privsep powers:
   UsePrivilegeSeparation yes
   Wheeeee! Now I don't run 20K of code as root, and run only ~2K as root in a chroot.
4. Since the port requires privsep, you'll need a new friend called "sshd". This friend is actually a whole big new user, with no login, that is part of special fun group called sshd. Special hints and treasures are found in the command man adduser(8) so you and your mommy can read about adding new friends to your system. Get your parents permission first before adding new scary users!! ;)
5. Since privsep requires a chroot, you can make a special resting place for it in a directory called /var/empty. Why is it called empty? Because it's empty, silly! That's where the chroot takes place. That way, when your new friend Mr.sshd get buffer overflowed in a few days, he'll only be analy raped in the alley in /var/empty, and the mean attackers won't get to the other files. Yay! This protects us! To bad Mr. sshd will have to die several times in the dark cell of /var/empty. But that's his sad fate in life: get raped so that other processes may live. :(

1. cvsup your ports. Need help? Read the handbook at www.freebsd.org. READ IT, DAMMIT
2. Install the portable openssh port at /usr/ports/security/openssh-portable. Read the pkg-descr about why it's called portable. READ, DAMMIT. It should link against openssl 0.9.6d, so that's why you needed to cvsup your ports.
3. Enable privsep in the config file:
   UsePrivilegeSeparation yes
   Read the rest of the config. READ, DAMMIT.
4. Since the port requires privsep, add a user and group for sshd. Just: man adduser(8). Read this man page. READ, DAMMIT.
5. Since privsep requires a chroot, make a directory in /var/empty for it to chroot to.

The FreeBSD ``Jail'' facility provides the ability to partition the operating system environment, while maintaining the simplicity of the UNIX ``root'' model. In Jail, users with privilege find that the scope of their requests is limited to the jail, allowing system administrators to delegate management capabilities for each virtual machine environment. Creating virtual machines in this manner has many potential uses; the most popular thus far has been for providing virtual machine services in Internet Service Provider environments.

That's apparently the basic concept. Only "authorized programs" ("Genuine Microsoft") will run. That's where we are now with the XBox. Read up on how the XBox boots, and you'll see where Microsoft is going.

This isn't security. Real security would mean you could run anything in a jail with no risk of it getting out and hurting anything. That's what a secure OS is supposed to do.

And if the Genuine Microsoft code has a hole in it, attacks may still work. Microsoft might set up memory management so that only signed code can be in executable pages, but that only protects agains one class of attacks.

(assuming you want to run Windows or some other commercial OS and don't wish to steal it)

That's quite an assumption. What happened to slashdot's Linux and *BSD majority? Did everyone here give up and go to Windows or OSX?

In case the poster doesn't know, you can save tons of money on your next PC by skipping the Windows tax and using a free, open-source operating system. email me and I'll mail you a CD of your choice of Debian Linux, FreeBSD or OpenBSD to install on your shiny new PC.

PLC requirements:
Crash: Unthinkable
Transient anomaly (glitch): Unacceptable
Dependent on flawed assumptions: Unacceptable

Commercial software requirements:
Ignore bugs, they'll upgrade and the company will get more $$$ fro paid upgrades. If I was Machiovellian I'd suggest put bugs in deliberately, I'm sure this is why those managers keep a respectful distance from coders.
Testing => delay => competitors will steal your profits so you might as well scrap the project completely.

Commerical systems can be reliable if it's demanded, e.g. Cisco 12000 series, and with some of the bugs in FreeBSD until the latest version "FileSystem corruption on heavy disk usage at shutdown e.g. after kernel rebuild" I mean WTF?????? I don't believe it, file corruption ain't no joke and it's halfway down the release notes. If you can't rely on your fs then you can't rely on your computer, how could FreeBSD have such a bad bug until recently, this is a "game over dude" bug. Nobody on /. has any right to bash Micro$oft any more. fs corruption is the main sign of an immature childish pre-alpha operating system, both Windows and FreeBSD had this bug until recently.

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking?

What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her!

Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie. Let's face it: there's just no way Tux is ever going to compete with the divine Ceren. She is surely the woman of every computer geek's dreams. Wouldn't you kill to get just this close to her.

Join the campaign for more cute open source babes today!

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking?

What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her!

Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie. Let's face it: there's just no way Tux is ever going to compete with the divine Ceren. She is surely the woman of every computer geek's dreams. Wouldn't you kill to get just this close to her.

Join the campaign for more cute open source babes today!

Probably not as pissed as the FreeBSD folks would be because you're wasting their precious bandwidth by downloading successive ISO images, instead of learning how to use CVSUP, or buying CD's.

...Yahoo employee Bill Fumerola rebates that

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her! Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie.

Join the campaign for more cute open source babes today!

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her! Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie.

Join the campaign for more cute open source babes today!

You obviously haven't actually used FreeBSD then... USB is supported in the generic kernel, along with 802.11b, Gigabit Ethernet and SCSI RAID. There's no need for a journaling filesystem due to softupdates, you don't need end user books when you have the Handbook and helpful user support, and...

/usr/ports/graphics/sane-backends
/usr/ports/graphics/sane-frontends
/usr/ports/emulators/wine
/usr/ports/java/*

all seem to be in there last time I cvsupped, and many times before that. It's mostly all current versions too. Oh, and KDE 3.0.1 and GNOME2 beta both sit happily in the ports tree. Admittedly 1394 isn't in there, but by current standards it will be soon. I'm running 4.6.

You should read 19.4.3 in the FreeBSD Handbook.

FUCK Bill Fumerola

FUCK Bill Fumerola

FUCK Bill Fumerola

FUCK Bill Fumerola

Dude..the machine has a 10 Mhz CPU and 640 K of RAM. It runs an old MS-DOS. It won't run 3.11, let alone XP. This is an assumption, as I don't feel like splitting up an XP install CD into a few hundred 720 K floppies and giving it a whirl.
Come to think of it, XP is larger than the available memory. Too bad. I just wanted to try something new.
PicoBSD didn't even fit.

Coming in November. Look at the release schedule.

I just installed 5.0 yesterday. Sigh.

You mean *BSD (instead of BSD*). Like FreeBSD, OpenBSD, NetBSD. Its just a little thing but it shows you probably don't know what you are talking about.

The question as to whether we should migrate to distributions offering more sophisticated and trouble-free package management is presented. I have a solution.
I got tired of 'an RPM for Redhat. An RPM for other distros. Or even a tar.gz for REDHAT and a tar.gz for OTHER distros' (see opera's download page for an example of what I mean.
FreeBSD, baby.
I've never looked back and wished I'd stayed with Linux.

Simply upgrade the source code in /usr/src (I recommend using CVSUP), then type "make buildworld && make installworld" while in /usr/src.

Er....do not forget to run mergemaster before you reboot. It will help you adjust anything in /etc that needs changing without destroying everything you had altered before. Or better yet, as the previous poster suggests, read the upgrade part of the handbook.

Heh, fortunately, upgrading FreeBSD is pretty painless (at least, in my experience). Simply upgrade the source code in /usr/src (I recommend using CVSUP), then type "make buildworld && make installworld" while in /usr/src. More detailed instructions can be found in the handbook.

There's a release engineering information page: http://www.freebsd.org/releng/index.html

The information can be update and revised, though. Just to give you an idea.

# cd /usr/ports/emulators/linux_base
# make install
# echo 'linux_enable="YES"' >> /etc/rc.conf

Note that if you choose linux binary compatibility during installation, the above is done for you.

For some things (vmware) you may need to add linprocfs to /etc/fstab.

linux_base comes with rpm, et al. Rarely, you may need to copy some shared libraries from a linux box to the the appropriate directories under /usr/compat/linux/

Really, its easy. The FreeBSD handbook does a good job of explaining.

Don't you think open source software would be more popular if it were advocated by girls like this instead of old guys with beards? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. If we do have to have the old guys with beards, we could at least make sure they are plenty of hot chicks too. I mean just look at this girl! Doesn't she make you hard? I know this little hottie floats my boat!

Join the campaign for more cute open source babes today!

Don't forget to watch the video too!!

Don't you think open source software would be more popular if it were advocated by girls like this instead of old guys with beards? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. If we do have to have the old guys with beards, we could at least make sure they are plenty of hot chicks too. I mean just look at this girl! Doesn't she make you hard? I know this little hottie floats my boat!

Join the campaign for more cute open source babes today!

Don't forget to watch the video too!!

Don't you think open source software would be more popular if it were advocated by girls like this instead of old guys with beards? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. If we do have to have the old guys with beards, we could at least make sure they are plenty of hot chicks too. I mean just look at this girl! Doesn't she make you hard? I know this little hottie floats my boat!

Join the campaign for more cute open source babes today!

Don't forget to watch the video too!!

Don't you think open source software would be more popular if it were advocated by girls like this instead of old guys with beards? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. If we do have to have the old guys with beards, we could at least make sure they are plenty of hot chicks too. I mean just look at this girl! Doesn't she make you hard? I know this little hottie floats my boat!

Join the campaign for more cute open source babes today!

Don't forget to watch the video too!!

This is true even on Windows where there was no way to read a jpeg file via Win32 until recently.

This is not true at all, Internet Explorer has been able to view jpeg files for as long as it's been around. Outlook Express, an extremely popular e-mail client, uses IE's activex control to display html e-mail's. All it would take is for someone to view an html e-mail with a jpeg image in it.

More information on recent buffer overflows in widely used compression imlementations (all of them can be exploited with a specially constructed file):

MP3 Files can Cause Code Execution under Winamp

Double Free Bug in zlib Compression Library

bzip2 contains multiple security vulnerabilities

If you really want to know when a new release of FreeBSD is available, /. is just not the answer. Subscribe to the freebsd-announce list for some better coverage.

• Perl - Artistic License and GPL
  
• PHP - PHP License
  
• Apache - Apache Software License
  
• Free/Open/NetBSD - BSD License, and some bits of Beerware
  
• Mozilla - Mozilla Public License
  
• Python - Python Software Foundation License
  
• Zope - Zope Public License
  
• zlib/libpng - The zlib/libpng License
  

Actually, it is just that simple. There is an explanation for all of this.

Why did you get 10 submissions that the release was out? Because the release has been tagged in the cvs tree, that's why. This doesn't mean that it's been released, just that we know what versions of what files (may) make up the release. It may only take an hour of so to build the release itself, but it takes a lot longer to build all the packages, get the stuff shipped to the mirrors and all the other things the RE people have to do before they can announce the release.

Why are the release notes on the website? Easy, the website is part of the cvs tree. The website build system has been building the release notes for 4.6-RELEASE for weeks (if not months). With that said, I note that the 4.6 release notes are NOT linked anywhere, but it does provide access to the handy release schedule.

Part if the issue here, IMO, is the transparency of the Project itself (this is a good thing). People can see the release happening in real time as each part is completed, so I can see how some people would jump the gun a bit and start submitting stuff to /. before the RE process has completed.

As for Murray? Well, I understand his feelings, but I may have taken a different path to the same result...

Actually, it is just that simple. There is an explanation for all of this.

Why did you get 10 submissions that the release was out? Because the release has been tagged in the cvs tree, that's why. This doesn't mean that it's been released, just that we know what versions of what files (may) make up the release. It may only take an hour of so to build the release itself, but it takes a lot longer to build all the packages, get the stuff shipped to the mirrors and all the other things the RE people have to do before they can announce the release.

Why are the release notes on the website? Easy, the website is part of the cvs tree. The website build system has been building the release notes for 4.6-RELEASE for weeks (if not months). With that said, I note that the 4.6 release notes are NOT linked anywhere, but it does provide access to the handy release schedule.

Part if the issue here, IMO, is the transparency of the Project itself (this is a good thing). People can see the release happening in real time as each part is completed, so I can see how some people would jump the gun a bit and start submitting stuff to /. before the RE process has completed.

As for Murray? Well, I understand his feelings, but I may have taken a different path to the same result...

ALL of the release stages are detailed on this page. And actually, the simplest way to verify whether or not 4.6 is really released is to take a look at the FreeBSD FTP site. After the 4.6-RELEASE directory and the ISO directory is populated on the main server, the mirrors will be updated and the hammering can begin. I could be wrong, but for the time that I've been running FreeBSD, the binaries are usually available before the actual announcement, so if the binaries aren't there, there is no release.

ALL of the release stages are detailed on this page. And actually, the simplest way to verify whether or not 4.6 is really released is to take a look at the FreeBSD FTP site. After the 4.6-RELEASE directory and the ISO directory is populated on the main server, the mirrors will be updated and the hammering can begin. I could be wrong, but for the time that I've been running FreeBSD, the binaries are usually available before the actual announcement, so if the binaries aren't there, there is no release.

I honestly don't think it's that simple. Why are release notes up for it?

Interresting[sp?] point. Why were there so many magazines, websites, books about WindowsME (I think that's the one, I can't keep track of it anymore. I mean the successor of WindowsNT) before the product was on the shelves in the shops? Why are there all these technical documents / HOWTOs already available on the websites before the product is available? It's called preparations! Nobody was able to buy WindowsME before that day, but everybody had read about it and everybody had seen books about.

Why did I get 10 submissions celebrating it's release?

If you go to this url:
http://www.freebsd.org/releases/ you will see a list of release-notes, erratas and announcements. Add some creative surfing to it et voila, there is your 4.6 announcement.

I've tried to find it, but no, I couldn't find any direct links to the release notes. Only with creative surfing I could find it.

So, oops, sorry, really don't do it for me, no, not yet.

There is a damned good reason for it:

Murray Stokely writes "We have gone over this for the past 2 releases now. I thought I had made it clear that you were not to publish information about FreeBSD being released until you saw a signed PGP message from one of the release engineers.

Screwing it up once, "no problem just don't do it next time". Screwing it up twice, "I told you how this was going to be done, can you *PLEASE* do it right?". Screwing it up three times... Now that's a sign that there is something really wrong.

Anybody who bothered to check the official release status would know that the release has not yet been made. In particular, note this:
Announcement sent out after a majority of the mirrors have received the bits.

Very few mirrors have got the full release yet, so the release has not yet occurred.

To post this story early will only ensure that first-tier mirrors are overloaded.

I guess it's a good thing about having a script that automatically updates the source tree and does the make world every other night :)

You mean like this?

http://www.freebsd.org/cgi/cvsweb.cgi/src/usr.sbin / ysinstall/dispatch.c

==== ==== ====
Revision 1.41, Mon Jun 3 19:39:28 2002 UTC (6 days, 16 hours ago) by jhb
Branch: MAIN
Changes since 1.40: +9 -0 lines
Diff to previous 1.40 (colored)

Add a 'mediaClose' script command to close the open media. An example use
would be to unmount the CD you installed from and prompt the user to
eject it before rebooting the machine.

Sponsored by: The Weather Channel

==== ==== ====

Don't you think open source software would be more popular if it were advocated by girls like this instead of old guys with beards? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. If we do have to have the old guys with beards, we could at least make sure they are plenty of hot chicks too. I mean just look at this girl! Doesn't she make you hard? I know this little hottie floats my boat!

Join the campaign for more cute open source babes today!

Don't forget to watch the video too!!

Don't you think open source software would be more popular if it were advocated by girls like this instead of old guys with beards? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. If we do have to have the old guys with beards, we could at least make sure they are plenty of hot chicks too. I mean just look at this girl! Doesn't she make you hard? I know this little hottie floats my boat!

Join the campaign for more cute open source babes today!

Don't forget to watch the video too!!

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her! Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie.

Join the campaign for more cute open source babes today!

How can BSD be dying when it has girls like this supporting it? The best Linux can come up with is an obese penguin. What are those Linux people smoking? What we need are more free software babes like her. This guy looks like he is about to cream his pants standing next to such a fox. Even this old Unix guru looks like he's having trouble keeping his wang under control when close to such an amazing babe. This girl has to be one of the hottest ever! I can tell you that I'll be installing BSD after catching sight of her! Linux will never be able to compete until it ditches the fat arctic birdlife and gets itself a mascot like this little hottie.

Join the campaign for more cute open source babes today!