OpenBSD Lands $2 Million In DARPA Money
An anonymous reader writes "Canada's National Post is reporting today that DARPA is (indirectly) funding $2-million (US) to Theo de Raadt of OpenBSD. The article is available here." Update: 04/07 21:01 GMT by T : As several readers have pointed out, this blurb should credit instead The Globe and Mail rather than the National Post.
I don't understand why getting money from DARPA makes them uncomfortable. He mentions it comes with no strings attached.
Shouldn't we be happy about grants like this that will promote and advance Open Source software in general?
Doug Tolton
"The destruction of a value which is, will not bring value to that which isn't." -John Galt
Why is this news?
$2 million is news. That's a lot of money to be out into open source.
There is no reasonable defense against an idiot with an agenda
:wq
1. Posses huge, pain-in-the-ass ego.
Alas, this happens.
Highly talented and intelligent people get exasperated with us mortals and let us know in no uncertain terms that we are stupid. I knew someone in school like this once. He would put pointed questions out that would show people's stupidity in broad daylight. But he was so intelligent, and I had enough intelligence still left, to know when he was right.
True intelligence is being able to recognize someone more intelligent than you are and to be able to support their work even if they have a grating personality.
Don't ever make the mistake of putting them in a role of managing people, though.
"Provided by the management for your protection."
I reckon they thought they were using "hacker" in the sense that we would consider the "wrong" way, and got it right by accident. Besides, "globetechnology.com" sounds like a techie news site to me, even if it is a part of a general news outlet.
* And remember, it's spelled N-e-t-s-c-a-p-e, but it's pronounced "Mozilla."
from the openbsd website:
"Today cryptography is an important means for enhancing the security of an operating system...
'...When we create OpenBSD releases or snapshots we build our release binaries in free countries to assure that the sources and binaries we provide to users are free of tainting. In the past our release binary builds have been done in Canada, Sweden, and Germany...'
Gov spends millions to control crypto exports.
Gov spends millions to support OpenBSD which
bypasses US crypto export laws?!
Why should it matter, if DARPA could not Coop Theo, they could just get the code and hire thier own "hackers" to modify it to thier own desires.
DARPA is a research oriented group, they are paying to continue the research and development of openBSD to keep thier (the DODs) options open. Not that the DOD is going to see the light any time soon and get off the MS software nipple.
Author Steven Brill is experiencing total friction among his close circle of elitist liberal media associates after releasing a book which claims: Homeland Security under President Bush is working!
And why have there been no fresh terror strikes in the United States since the start of the war?
Coincidentally, I have a rock that keeps away tigers. I know it works because I don't see any tigers.
If he were taking money to implement DARPA-requested features, I could see the issue. However, if all he's doing is taking no-strings-attached money to do work he'd be doing anyway, I don't see the moral conundrum. If there are any negative effects of his work (OpenBSD being used by TIA, for example), they'd exist even if he wasn't funded by DARPA; the only solution would be to stop developing OpenBSD entirely, not to keep doing it without DARPA funding. So insofar as DARPA funding doesn't change anything, I'd say take it. Plus, at least it ensures that this portion of DARPA's budget goes to something worthwhile and unobjectionable, rather than letting them keep it to spend on something else.
10 PRINT CHR$(205.5+RND(1)); : GOTO 10
Theo is making OpenBSD. It is freely available to anyone who wants it. If the US military/gov wants it, they already have it and can use it for whatever unseen motive anyway.
As of now, they are just helping him do what he was doing anyway.
The motive of the US gov as it currently relates to OpenBSD is they want to help its development.
They can already incorporate it into closed source products, and they can't take it away and lock it up from everyone else.
Since anyone anywhere can make use of the products that will come out of this two million dollars, the benefit to wider mankind far outbweighs the benefit to DARPA | TIA | $evil_project.
Now, if that same money went into one of the many secret software projects at Lawrence Livermore or teh NSA, then no one benefits except the evil parties.
The use of this money to develop OpenBSD can be nothing but a good thing, due to the security everyone will gain, world wide, which will further protect from the real bad guys.
ATH0 Bitcoin: 1DnwFLXczVZV8kLJbMYoheUrpqHesjxrSi
The brilliant thing here is that this move recognises the importance of communities; the OpenBSD community IS all over the world, with Mr de Raadt a Canadian the work can be done in Canada, in the USA, in India, wherever the TALENT is.
As the grant is intended to help "testing the security of commercial software systems against the security of open source software projects", it will point to the truth in this old dispute what makes better secure software AND it will help to point to the relative merits of "security by obscurity".
However to assess this, I expect DARPA not to select Microsoft Windows as the champion of the proprietary world, I would choose OS/400. Given the smaller size of the OpenBSD community, the effect of methodology can be better assessed.
As DARPA throws bread on the water, I hope they will land a big fish!
Thanks, Gerard
The U.S. Government is a huge organization that sponsors all sorts of programs. DARPA didn't cause the war. NASA didn't cause the war. The IRS didn't cause the war. Like Theo said, taking the money prevented that money from being used on a cruise missile.
red cananadian commie hippy bastard
I'm glad you believe in political freedom. You're an example to us all of how free Americans are: even small-minded bigots can voice their opinions!
But, MAN, how can he take $2,000,000 from the US Gov't and still criticize them at the same time?
He can do this because he's not selling out. He's taking the money to help him do what he's been doing all along, because it benefits everyone. Just because someone pays you to do something (business) doesn't mean you can't dislike them (personal), it just means you can't let your bias determine how you react.
This shows me that De Raadt is mature enough to know the difference between business affairs and personal affairs, and doesn't let his (world) politics get in the way of doing what he thinks is right, and getting paid for it to boot.
--Dan
If "only one vulnerability or hole has been found in its software" means anything aside from "only one remote hole in the default install" (your suggested substitution), then it is completely meaningless.
If you are discussing non default configurations, there are infinite holes in all operating systems. For example, there is the non-default remote-root vulnerability when I set all my passwords to "PASSWORD".
I assume there were specific non-default remote roots you were thinking of, but still.
There are no trails. There are no trees out here.
Sun just needs to decide: do we want US Government as a customer, or not? Turning down customers might be a popular business model in 1999, but many of the companies that used that model, aren't around in 2003.
I would consider it to be more of an investment on DARPA's part, rather than some sort of influence on the direction of OpenBSD development. They see a project that meets their needs, and they want to ensure that it does well, so it will serve them well. It's not that different from IBM spending $1 billion on Linux because they want to see it do well.
I don't know what kind of developers he's hiring but for $500,000 a pop -- I'm sending him my damn resume.
I can see a GUI packge/ports manager, but you have all of about 8 options in the installer. A GUI instller would be larger and more error prone. I've used GRUB to boot OpenBSD and it works fine, although it's a bit much for just a bootloader.
Copyright Violation:"theft, piracy"::Anti-Trust Violation:"thermonuclear price terrorism"<-Overly dramatic language.
Stop being so hard on him for voicing his concerns. He does this merely to emphasize to the community that OpenBSD is still (and always will be) pig-headed, dogmatic, and not subject to corporate and governmental pressure. And that's the way the project should be.
Also, Mr. de Raadt wants to make sure that those who may receive money realize that they should not rely on these funds, and that DARPA support may be pulled if OpenBSD has goals that conflict with those of DARPA. However, I doubt that this will be the case, since DARPA knows what they are getting into with OpenBSD. If anything, OpenBSD has had the most consistent and specific philosophy of all the open-source OSes. Regardless, OpenBSD development should never be contigent on outside funding, and Mr. de Raadt wants to make sure that this is clear.
Yeah, they never should have wasted all that money on arpanet, since it was just going to die out. Microwave technology was another big waste of money. I suppose I could go one for quite a while with these.
Beware of the Redittor who loans you a Sharpie.