Slashdot Mirror
OpenBSD 3.4 Released
tedu writes "We just couldn't wait another 2 days, so now you can enjoy OpenBSD 3.4 a little early and protect yourself from ghosts and goblins. More details at the OpenBSD website and official announcement. Remember to please use a mirror."
"Remember to please use a mirror."
Since when does Slashdot care about overloading webservers?
Manipulate the moderator system! Mod someone as "overrated" today.
OpenBSD 3.4 was a real stinker in these tests. The installation routine sucks, the disk performance sucks, the kernel was unstable, and in the network scalability department it was even outperformed by it's father, NetBSD. OpenBSD also gets points deducted for the sabotage they did to their IPv6 stack. If you are using OpenBSD, you should move away now.
Server is working just fine.
Yet Socrates himself is particularly missed.
A lovely little thinker but a bugger when he's pissed.
It appears I was wrong! From Netcraft:
OS: Solaris Server: Apache/1.3.27 (Unix) PHP/4.3.1 mod_perl/1.27
When anger rises, think of the consequences.
Confucius (551 BC - 479 BC)
...perfect code is irrelevant to security! Didn't you hear me?!
-Bill
Given a choice between free speech and free beer, most people will take the beer.
Nothing strange about that.
http://www.openbsd.org/faq/faq8.html#wwwsolaris
I for one, would like security on my Tablet, so will they make a Tablet version of OpenBSD?
That should be "Only 3 remote root exploits in the default install, IN SEVEN YEARS!!" I think they forgot to update their website though to acknowledge the fact that OpenSSH had a nice big gaping remote exploit a couple months ago.
How can anyone trust an operating system like OpenBSD when its insecure, come on it still has a root account, You obvoously haven't used Cryptech Radicacally Advanced PowerBSD. This operating system uses the "swallow the key" principle. Once installed, you are pernemently in a sandbox, with NO WAY to get root access becasue THERE IS NONE, For extra security the Installation CDROM has a built in Self destruct mechanism. Once It installs it scans a special diode embedded into the disk and destroys the CDROM. No one has managed to hack a Cryptech RAP BSD box, and I have ran one connected to the Internet on a high volume site (10,000,000 hits a month) which publishes controversail material. Noone out of the THOUSANDS of kiddies have manged to get in so far, and good riddance.
And make sure you listen to the release song too. It's great :-)
No GNU has been Hurd during the making of this comment.
Note: this is purely an academic question, it is not my intention to critisize anyone, but just to learn why these things happen, not being a very experienced programmer myself.
All it says is "BSD is dying".
No GNU has been Hurd during the making of this comment.
No, it is:
RTFMA.
This is a troll honeypot. I'd like to warn my fellow trolls: This article is just a simulation to get your IP-address, MAC-adresses and your trolling license number. Congress just passed a law that gives ISPs the right to surgically remove the testicles of newsgroup-posters when it is obvious that an allergic reaction to a mix of certain hormones is causing them to write annoying messages against their will. I sent this info to slashdot three days ago, but they're holding back the article to catch as many trolls as they can. Please trust me and stay away for at least 6 months. I will post again, when it is safe, and I will then lead the davastating counterstrike against the slashdot facilities. At this time just wait and reform our troops.
The Brainbug.
Looks like the announcement has been delayed a little as I've had the OpenBSD3.4 CDs for over a week now, ordered from the OpenBSD online store!
... how did this get voted "informative"?
Remove unlicensed MATH_EMULATE code (written by some guy named Torvalds) from the kernel, leaving only the GNU emulation code for the moment.
Gotta love that.
Feeling better now?
here in "europe", we've already been through fascism. we'll see you if you ever get out the other side.
Unlike 3.3, which made it months before a single security-related patch was issued, 3.4 LAUNCHES with 3 such patches.
That said, it's such a huge release in terms of changes made (x86 Write or eXecute memory pages, for one) that it's more than worth the upgrade.
As with most such fundamental updates to OBSD, though, I expect this release to be significantly patchier than the last couple.
--Ryv
I am pretty sure that TCP/IP was developed by the millitary. They needed a better protocol. What you said is true though, BSD and Microsoft did develop the implementations that they use in thier OS's at the same time. I think both tcp and ip have been around since the 70's though (just in use at DoD and not majorly on arpa net, but I could be wrong). Am I correct, or am I making my self look terribly stupid here. PS. Dont Feed The Trolls! :)
Stop signs are only Suggestions
"here in "europe", we've already been through fascism. we'll see you if you ever get out the other side"
Europe is living through it now, while America is fighting against fascism.
Anti-semitism is alive and well in today's Vichy France and Nazi Germany. The governments in much of Europe control and run too much of private matters, such as health care and media.
As I was lucky enough to run into this on a relatively new install I could just do a complete reinstall, but not reading the upgrade instructions can get you in a lot of trouble this time... :)
karma capped
YHBT
YHL
HAND
You're wrong. TCP/IP was developed by Berkely and later included in AT&T Unix. Microsoft's TCP/IP is derived from the Berkely (BSD) version.
Does anyone who runs a mirror care to describe the traffic hit that comes with the rush to download 3.4? I remember seeing the stats for the FreeBSD Walnut Creek server handling tons of traffic whenever the next version of something it was serving was released. Generally it was RedHat, ironically.
While I order CDs to support the project, I run snapshots for many things, and being close to a mirror (OC-3 linking our sites), it takes minutes to install via ftp.
it will be called the "Tombstone".
Ummm...this is really old news...I've purchased the CD at my local computer book store over a week ago.
TDz.
And a Canadian, too.
Let's see how it turns out. That way I could relocate the UK Mediterranean Navy to the Atlantic and when the Germany attacks France, they'll end up fighting on the Italian front as well.
Some representatives from the national security services will arrive shortly to discuss this with you. Don't move, the drones are overhead already.
was more like
"Given the ferocity with which the OpenBSD nazis fix things like this in their code wouldn't this sort of thing, in the kernel, be one of the first things they did?"
Indeed, I thought this was done quite a while ago...
It's the DAEMONS you have to worry about... (it had to be said, right? RIGHT???)
Elegy For *BSD
I am a *BSD user
and I try hard to be brave
That is a tall order
*BSD's foot is in the grave.
I tap at my toy keyboard
and whistle a happy tune
but keeping happy's so hard,
*BSD died so soon.
Each day I wake and softly sob
Nightfall finds me crying
Not only am I a zit faced slob
but *BSD is dying.
TCP/IP was developped for 4.3 BSD NET/2 release funded by a governmental DARPA grant.
All other OSes borrowed from it, and Microsoft didn't steal it, since Microsoft pays taxes too.
as a story on Slashdot recently highlighted.
TCP/IP was developed by Berkely under contract with DARPA (Defense Advanced Research Projects Agency), as an upgrade to DARPAnet to improve on our ability to have the computer network survive a disaster (aka, Nuclear War). DARPA, of course, how now been renamed just "ARPA" to bring it out of the strictly military realm.
Microsoft was working on MSDOS upgrades and maybe Windows 286 at the time. So, don't even *include* Microsoft in the history of TCP/IP.
From a University of Texas CS instructor's web site:
The Transmission Control Protocol was first formally specified in December of 1974 by Vint Cerf, Yogen Dalal and Carl Sunshine.
The link can be found here:
http://www.cs.utexas.edu/users/chris/think/Early_D ays_Of_TCP/index.shtml
And supporting documentation will be found here:
http://www.cs.utexas.edu/users/chris/think/Early_D ays_Of_TCP/Annotated_Bibliography/index.shtml
Since everyone else is doing it now, why isn't there a *.torrent file for this release of OpenBSD?
It was a joke if ya didn't get that...
This is 2 days old ....
Please go use some Linux and clean up so you stop smelling your own funk, M-kay
You can relicense the code. Look at the numerous projects out there that are avaliable under multiple licenses.
1.6 Gbit/sec of AES-128? Damn, I gotta get me one of these!
I want to delete my account but Slashdot doesn't allow it.
1 point for sarcasm, -2 points for not knowing that the p designation refers to the portable version of OpenSSH, not patch release.
is how you got past the all-caps lameness filter. Way to go!
I don't use Linux, I use OpenBSD. And I took the pain of downloading the Linux kernel just to give an accurate answer to this guy...
Like he could have done, unless he doesn't have broadband...
At most 2, if the first one found is shown to be exploitable at some point. The other one was in the portable (i.e. non-OpenBSD) version of OpenSSH only.
Because OpenBSD does not offer any iso images for download. The official iso images are copyrighted by Theo and can only be gotten by buying the CD's or by pirating them. Or course you could make your own homebrew iso images, that's perfectly legal, and then distribute them as torrent files. But the OpenBSD project depends on CD sales to fund the continued development of the OS. Go buy the official CD's.
OpenBSD is heavily optimised for security; and added security has the con of having an adverse effect on performance. now, im certainly not saying OpenBSD is slow in any way... all im saying is, it will never have the performance potential of FreeBSD. Add to that, Fefe's "benchmarks" are about scalabiliy, and are suspect at best.
OpenBSD makes a distinction between ports and packages; packages are recommended because they are maintained actively and more thoroughly audited; ports are sort of `use at your own risk'.
Zero points for not being able to pull your head out of your ass and laugh, and for chrissakes, it was NOT a troll, it was a JOKE. Jesus you OpenBSD people are touchy.
Please help metamoderate.
Actually thanks to great loopholes Microsoft doesn't actually pay taxes...
I'll go download the FreeBSD ISO's instead.
and the same BSD zealots claim the BSD license is "more free" than the GPL
Jesus you OpenBSD people are touchy.
How true.. Just hang out on the mailing lists and see the sort of crap replies and overreactions those guys have to everything.
..as an upgrade to DARPAnet to improve on our ability to have the computer network survive a disaster (aka, Nuclear War).
NO
Please stop spreading this urban myth. DARPANet was not created to survive a nuclear war. Packet switching was not invented to solve the problem of survivable networks. Stop it.
TCP/IP was simply developed because the original NCP was poorly designed and limited the growth of the DARPANet quite badly. The NCP to TCP/IP switch over is analogous to the IPv4 to IPv6 switch over.
The ones that have the root passwd posted on port 80. And yes, the sshd is open and root can login. Still nobody has hacked those machines. And hey, they're actually running services, unlike the obsd "secure by default" but only because all the ports are closed up in the default install...
Switch to obsd if you want to deal with big developers egos. Switch to Linux if you want to actually get shit done.
Can't you hurry up? Look at the front page of bsd.slashdot.org....
Freebsd released 4.9 before your 3.4!!!
(j/k)
On a side note, reading the 2nd or 3rd post about trojaned obsd ISOs floating around the web is really sad and upsetting. I love the open sharing of software and source code around the internet, but i always fear that someday it will be to a point that *everything* has been tampered with, essentially creating a need to look through more source code than anyone has time for. Sure we can solve this with technology (such as with MD5 Checksums) but as we create smarter verification, the internet will create smarter shitheads. I'd hate to think that it will eventually degrade into a win-some/lose-some cat-and-mouse game.
I actually lost some sleep few months back when the GNU folks announced that their main ftp site got compromised. I realise that servers get cracked every day, but when it's gnu/linux/bsd/oss folks it feels personal.
I'm not well acquainted with any $krYp+ KyddI3z, cr4x0rz or know what they use, but i'll be willing to bet that their OS and many of their tools are based on software from those they are attacking.
Assholes.
do() || do_not();
Here's the page with login info:
http://selinux.dev.gentoo.org/
Good luck there Mr. "Linux is about as secure as Windows".
This isn't a boy band, or a high school rock group! It is supposed to be a rendition of UNIX. This garage band mentality as applied to UNIX is not fun to watch, nor is it funny.
On several occasions OpenBSD has proven to be unusable due to its horrific performance.
I don't particularly care for the incoherent mess that is Linux, but there is no compelling reason I see to not deal with Linux over this when considering performance.
OpenBSD is amateurish because security without performance is purely academic and is has no value, commercial or otherwise.
I'll be sticking with FreeBSD. I tend to like the coders and the project to have serious goals and real commercial value.
For all you fanboys out there, get a job doing something else. Sipping on a latte in a net cafe on your laptop running OpenBSD furiously sucking down the battery isn't cool. Working for a place without an air conditioner unit is also just as lame, because using deprecated PC equipment running an attempt at BSD isn't cool either. And of course, the last possibly is that you neither have a job making latte, nor work at a garage ISP, you are probably unemployed. I'd like to suggest you stay that way so the rest of us can make progress without another fumbling retard in mix.
You. Your pathetic OpenBSD. Low low/no paid existence. Hahahahahaha.
you are a pathetic loon tune fat sexless greasy fucking DORK.
you also suck, you suck at your job, and you wouldnt know if you sucked in the sack unless a blowup doll could do a tell all.
and i know you order yoda buttplugs, you fucking queer.
I really hope this was a joke post, cause I am pissing myself laughing over here...
The two bugs you mention, weren't actually bugs
in OpenBSD.
* one was a bug in PAM and most GNU vendors
* one is a bug, but can't be exploited due to
W^X, propolice, NXSTACK, NXHEAP and friends.
Heck, I've tried the gobbles exploit again
against OpenBSD-2.9-OpenSSH where it worked
back then. It failed to run due to these four.
My Karma isn't excellent, damn it! (And
Fefe has written a very interesting article about the current state of art in system performance and how OpenBSD stacks up. Plenty of good insights there for the technically savvy reader. Sad to say, this latest release of OpenBSD 3.4 has not yet addressed the problems, but future releases will hopefully be in a better postion to deal with these shortcomings.
Theo has said that he is not interested in network performance or even competing with other systems performance-wise. He went on to say that his main concern is buffer overruns. That is where the bulk of the OpenBSD development work is being directed.
Theo is trying to make *a living* here. Its called being realistic!
And yes, the BSD license is more free than the GPL
And no, I am not a zealot, you are just a troll.
Heh, rather amusing since you're guilty of exactly the thing you accuse me of. :)
Bones said it best:It's dead, Jim.
:cough: hypocrisy :cough:
you just proved my point exactly
Yes it's dead. The BSD zealots need to wake up and smell the coffee.
They also need to shower, brush their teeth, lose 100 lbs, and get a life.
I fail to see how what you said in reply to him could possibly even remotely even be interpreted as a joke.
Just admit that you missed the joke and move on.
One thing that I regret is when you wanted to open my car door for me, but I always got it myself. I wish I would have let you do it. And when you wanted to hold my hand, I sometimes would pull away because I didn't want people to see me holding my daddy's hand ... I feel so ashamed that
I cared what people thought of me walking down the parking lot holding
your hand. But now I would give anything just to feel the warmth of your
hand holding mine.
Do bugs really matter when it's dead anyway? I don't think so.
retard fuck off
i see you have freetime on your callcenter day job to answer slashdot
fuck the rest! they call it BSD!
The license IS more free. Your comment has nothing to with the license.
Getting the distribution is of course completely free. You are apparently just too lazy to get and install anything other than an ISO.
Hi.
When backward people don't understand something, they lash out at that something, often blaming it's behavior on demons or other supernatural things.
When looking at my wisdom with your primitive mind you may feel anger, hate and fear. But it's ok. Pull up a chair and learn something, my little stupid subject. You have a lot to learn about using computers as tools, clearly. Now you might be having fun being Theo's bitch, but you are a bad employee, and idiot, and fairly useless and most likely not employed at the moment. You are a sad person, Mr. Small Penis man.
Now go grab your antonio banderas blow up doll and fill your mind with some serotonin after that orgasmic release. You'll need it after reading this ad realizing you are below me, at the bottom of the food chain, and a poor fat sexless greasy nerd idiot that cant even function at any level physically, with your frail girly body with little T-rex barney arms.