Theo de Raadt gets 2004 FSF Award
Caligari writes "Richard Stallman, presents this year's award to Theo de Raadt.
"For recognition as founder and project leader of the OpenBSD and OpenSSH projects. Theo de Raadt's work has also led to significant contributions to GNU/Linux and other BSD distributions. Of particular note is Theo's work on OpenSSH. Theo's leadership of OpenBSD, his selfless commitment to Free Software and his advancement of network security, were cited by this year's award committee.""
"leader of the OpenBSD and OpenSSH projects. Theo de Raadt's work has also led to significant contributions to GNU/Linux and other BSD distributions"
notice the word "ALSO"? So his work has ALSO contributed to GNU/Linux and other BSD distributions BESIDES the BSD distribution OpenBSD.
try to read next time!
FSF people giving an award to a BSD guy? Delete this new, it's not 1st April tooday!
Looking at past winners, no doubt they all deserve it .. but what about Linus Torvalds?
.. OpenSSH rocks. Theo de Raadt and everyone else who contributes to OpenSSH should be proud.
Is there a reason he didnt get this award?
That said
Not only from a pure lines-of-code point-of-view, but also by the way the OpenBSD-project scrutinizes licenses and pushes security and cryptography forward every day.
Congratulations, Theo - keep on fighting !
Windows 2000 - from the guys who brought us edlin
..by refusing the award on the grounds that the GNU license "isn't free enough". ;-)
"Your admirers in the street
Got to hoot and stamp their feet
in the heat from your physique" -King Crimson
Does it involve monetary prizes?
> Didn't know Linux was a BSD distribution.... :)
It isn't. If it were, it would have a much hotter mascot
Does this mean Theo gets to speech? I can't wait to hear him rant on a stage :-)
Congrats, Theo.
HAD
Imagine a world without the networking Swiss Army knife that is ssh.
OpenBSD is a totally underrated OS too. Even if it is a bit slow, its packet filter actually works.
i was just about say something along these lines. Theo can turn folks who encounter him for the first time, but i gotta tell ya, i sleep better at night with a stripped, clean, secure OpenBSD firewall. i give money to the FSF, i think OpenBSD is deserving of my monetary support as well. Glad to see this type of recognition for his work :)
Eventually, Stallman is going to ask us to call it Gnu/OpenBSD ;-)
I must say that the first two postings to this bulletin are shameful. This man is without doubt one of the brightest software engineers on the planet. His expertise and insight into securing our systems is breathtaking. Everyone owes Theo a great deal. His contributions to open source software have given us the unbreakable, impenetrable OpenBSD AND the ubiquitous OpenSSH. His devotion to and competence in security have finally been recognised by the community. I didn't have an answer to the question "who should win the FSF award??" until about 5 minutes ago when I saw the announcement. The award couldn't have gone to anyone more deserving.
Oh, and dickhead: BSD is not dead.
Congratulations Theo!! *two thumbs up*
Previous winners of the Free Software Award * 2003 Alan Cox * 2002 Lawrence Lessig * 2001 Guido van Rossum * 2000 Brian Paul * 1999 Miguel de Icaza * 1998 Larry Wall Why he is no yet on the list?. May be because his public use of some proprietary software
>BSD is not dead.
That's too weak an assertion. BSD is not even declining.
--
Requiem for the FUD
;-D
/. after all, no need to take it serious.
Seriously, I totally agree with you.
About the shameful postings, don't get to upset, it's
'Also' makes no difference to the meaning (and your rewrite also contains the problem phrase). I had to read it twice as the most obvious meaning isn't the correct one this time.
It would probably have been better as 'other BSD distributions and GNU/Linux' as that's harder to misread. Can't think of anything clearer without bringing the grammar nazis out.
Lighen up... RMS describing Linux as a BSD distribution would be quite funny actually.
Theo is a good candidate for this award. He is dedicated to creating a free, secure operating system that includes only truly Free software.
Of course, Theo can be acrimonious, but that doesn't change if contribution to Free software.
I use Linux every day, and appreciate the fact that I have a good method to connect to my servers in a secure manner, thanks to Theo.
And I want to thank him for his other contributions, as it has made me some good cash, installing BSD boxes in front of Windows email servers with packet filtering!
Again Thanks Theo. I wish this type of stuff could reach more mainstream news, but we can all know just like other major happenings in the world, there is a army of unsung heros who make things happen.
Some grammar nazis might complain about the tautology `Berkley Software Distribution Distributions'.
I am TheRaven on Soylent News
.. if you wanna be honest, of course.
--
Requiem for the FUD
Take NetBSD and make your own spinoff ...
Take SSH and make your own spinoff
Take CVS and make your own spinoff
Take NTP and make your own spinoff
Wasn't the Open Source idea to collaborate and feed back changes, working one source, instead of celebrating the Microsoft-style "share and embrace"?
Reading this FAQ entry should shed some light on why linus has never been, and probably will never be up for this award.
"Your admirers in the street
Got to hoot and stamp their feet
in the heat from your physique" -King Crimson
Considering this, and especially Theo's view on Free Software; i.e. that it isn't anywhere close to real freedom, a stance I agree with btw; I'm quite surprised, pleasantly surprised.
Anyway, go Theo!
...that the FSF honors a developer who releases his work under a non-copyleft (=the BSD) license and whose main project is an operating system alternative to GNU and Linux.
gopher://cramer.plaintext.cc http://cramer.plaintext.cc:70
Theo De Raadt is one of the unfriendliest assholes in the world.
He has repeatedly stolen security technology like PAX and claims to have only one remote hole in 8 years, while there were atleast 3-5 remote holes in the minimal installation.
I cannot understand how RMS can sell himself off like this...
There will be a number of talks this week in Dublin, Ireland from Theo de Raadt, Henning Brauer and Ryan McBride which are open to the public and completely free of charge!
If you had any kind of clue about the way `proactive security' works, you wouldn't write such drivel.
Why is OpenBSD called OpenBSD ? because it was the first BSD to make its CVS tree accessible for everyone. That's right, anyone can subscribe to source-changes and see the commit messages. And anyone can get the sources.
Now, most security fixes are NOT tagged as security fixes. They're tagged as clean-up, or reliability issues, or normal bug-fixes.
Why is this so ?
Quite simply, because those fixes are done while reading the code, NOT in reaction to a security hole.
That's what `proactive security' means. When you find something fishy, you just go and fix it, you don't sit on your fat ass and wait for months until someone finds a way to exploit it.
As a result, OpenBSD is more secure than most other OSes out there. Not because of cool technology like ProPolice or W^X, but simply because of good engineering practices.
OpenBSD doesn't have the latest cool feature. It's never been about that. But it has obsessive-compulsive developers who care about security.
Security is not a plug-in. It's not something you add to a distribution after you've put in all the carelessly designed and dangerous features.
Security is a process.
Security is a state of mind.
Security is a priority: either you put it right there, in front of you, and FIX THINGS when you think they might get broken, or... you will run into actual nasty holes, and make the front page of bugtraq.
Haha, that made me chuckle. Funny because it's metaphorically true.
You still don't know what you are talking about.
Yes, most bugs we fix have some kind of security relevance. This is obvious. Now, are we going to tag each single entry we commit with `possible security fix' ? Are we going to spend a lot of time convincing other people this might be relevant ?
Nope, we are not.
We tried. This is simply a waste of time. It doesn't work. A lot of other projects don't have a clue. You tell them that what you're doing might be security-related, and you waste hours explaining the issue to them.
Think about it. Every time you simplify a piece of code, or replace an obfuscated algorithm with something simpler, you ARE handling security issues... or you might be. That's not important.
You are not going to waste time figuring out whether that fix is an actual security fix, or just some clean-up.
Because you can use the same amount of time fixing other issues, and that's more useful.
Want actual proof ? Look at all the changes in OpenBSD that replaced strcpy/strcat with strlcpy/strlcat. Now, go out on the linux lists, and ask why strlcpy still isn't a part of the glibc, but strfry is. Or look for comments on the above subject from Ulrich Drepper.
Make up your own mind.
Who do you think has a clue ?
The people who found out countless potential buffer overflows all over the place, fixed these, and still find that new code has the same mistakes and buffer overflows ?
Or the people who think that strlcpy is irrelevant because good programmers don't write buffer overflows ?
You could also look at tmpnam and mkstemp, and countless other examples.
As another instance, look at chroot and privilege separation. In many cases, the added safety translates to less features (like, a chroot'ed daemon that can no longer read its configuration file on a kill -HUP, or an http server that needs a whole set of libraries to run cgi). Bottomline, do you want the extra features, or the added security.
Most time, there is a trade. Those security fixes rely on non-portable parts of the libc. In many cases, third party software will buy back the extra stuff (look at rsync, kde and strlcpy), but this takes time...
try to do some development work, instead of posting opiniated, clueless comments on slashdot. Spend some time fixing security issues. See your patches take months to get accepted upstream. See the next release still have the bug, because some clueless, feature-conscious developer added some code with the exact same wrong pattern in another area than the one you've been fixing...
A few posts later:
----------
> To accuse a person of sabotage, a crime, is a serious matter. If the
> accusation comes from Brett Glass, it can be ignored, but when other
> people do say it I'm entitled to refute it. I am sorry that the
> accusation was made on your mailing list.
>
> Yesterday you said you would, so
> keep your word for once.
>
> I did not make any promises to you yesterday; I stated a decision that
> I had made for my own reasons.
Bugger off, Richard.
Get off these lists, or you'll see me on the gnu lists much more.
----------
Now there's a threat... glad to see they've made up.
For the love of God, please learn to spell "ridiculous"!!!
May I not be the last to say,
/me Stands and applauds
/roommates give quizzical glances
Congratulations Theo!
Now mod this insightful!!!
Stallman is constantly the target of criticism for being so concerned with distinguishing Free software form Open Source software. But the posts above show even the technically literate audience of /. still don't get it.
I think you explained well why TdR would be more deserving of a Free software award than Torvalds.
"Richard Stallman, presents this year's award to Theo de Raadt."
Ahem. Richard Stallman, presents? WHAT is that COMMA doing there?! Did you just decide it would be a good idea to stick a comma betwee the subject and predicate? Did you pass third grade?
When you reincarnate please remember to stay in line and get double helpings on observance (you missed the emoticon which provides *gasp* context) and humor (ummmm, it was an obvious joke) before coming back. The gift of "leading sheep into making bad mods on /." really wasn't meant to be taken seriously.
I don't want knowledge. I want certainty. - Law, David Bowie
You seem to be stating that the other BSD's didn't do this or at least not until OpenBSD did it first. Granted, I wasn't around at the time OpenBSD forked off of NetBSD, but looking at this message it would seem that NetBSD's commit messages were public quite a while before OpenBSD existed. It would also seem that at that, anybody could get the sources. Just FYI.
-- "Tradition is the illusion of permanence."
I find this entirely ironic. I'd love to see de Raadt accept the award from Stallman personally. I would bet de Raadt's reaction would be memorable.
That said, this is awesome. de Raadt definitely deserves the award for all the hard work he's given to the community.
// file: mice.h
#include "frickin_lasers.h"
Normally I'm not this anal, but I just can't help it. Why in ${DEITY}'s name is there a *comma* after 'Richard Stallman'? Who could have *possibly* thought that it was a good idea to put a comma there?
Yes, I know, we're geeks, and we butcher the English language on a daily basis. But come *on*, people, at least make *some* effort to use some common sense.
"The freedom of BSD has the danger of making you a prisoner of its distributed derivatives."
How? If you don't like the version the company you're dealing with (Sun, Apple) is shipping, you can always get the official software from openssh.org.
"GPL code belongs to you for the asking. That is also why GPL will eventually out-evolve all other software."
No. What has become obvious is that the community of developers is what drives the evolution of a system. Either can stagnate, either can advance quickly.
I rarely criticize things I don't care about.
I'd like to explore the sentiment behind the troll I am replying to. I think this comes from a natural and warranted level of suspicion about the utopian vision of RSM. Doesn't RSM realize that he already lives in a world where he is free to distribute software according to the GNU manifesto? Likewise, I am free to require payment from users of the software that I create. Isn't that enough for you RSM fans out there? I get nervous that you won't rest easy until you can take my rights to require payment away.
Richard: "We have gathered here to honor another Free Software giant. Ladies (hello you two geeky, but quite cute girls in the back) and gentlemen, I hereby present this award to Theo de -"
Theo: "What?! An award??? I thought we were going to discuss you ditching GNU/Hurd and adopting OpenBSD as its replacement?! You got me here under false pretense, I can't fucking believe this!!!"
Richard: "Well, we knew you wouldn't have come otherwise, so I -"
Theo: "Do you realize you robbed me out of a whole day of code auditing?! Do you?! That's it, I'm suing!"
Richard: "What do you mean, you don't even have an account and I don't give out root - "
Theo: "Ohhh, veeery funny! I'm taking you to the bank for everything you've got, buddy!"
Richard: "Well, then I should just give you the $2.49 because that's all I got."
Theo: "No, here's $10, now go and have that beard trimmed for the love of everything you GNU! You look like a damned hobo!"
Richard: "Well, actually, purely technically speaking, I am as free as a hobo, except that I smell nice."
I think the following goes too far:
If de Raadt were that committed to software freedom, he would agree with copyleft which preserves software freedom for derivatives. Instead, the software de Raadt distributes is non-copylefted free software; software which is licensed to allow non-free derivatives. That means someone else (or some organization) has the power to separate the freedom from the software for their derivative and distribute that derivative which denies software freedom to their users. The effect on society is not the same with non-copylefted and copylefted free software licenses.
I think RMS is grateful for all the free software de Raadt writes and distributes, but I doubt that RMS and de Raadt would agree that they are equally committed to software freedom. One promotes non-copylefted free software licenses to encourage popularity (popularizing Ogg Vorbis, for instance, where the reference libraries are licensed under a new-BSD-like license) and the other uses a non-copylefted free software license routinely. None of this is to take anything away from de Raadt's award or how much he deserves it; he's done good work that ought to be celebrated.
Digital Citizen
Its logo says it all, it's a ñu.
For those that doesn't know how to pronounce 'ñ', it's like 'gn' in cognac or Avignon.
The best way to predict the future is to invent it
I think what RMS is now mostly worrying about is that patents and such are turning the world into a place where you wouldn't be able to publish even a trivial piece of software for free.
world was created 5 seconds before this post as it is.
OpenSSH is licensed in this evil way that you falsely claim allows people to seperate the freedom from the software. Why hasn't this happened? There are closed source implimentations of openssh in various network appliances, switches, routers, etc. But yet I can still download the source and compile openssh myself. Why hasn't the freedom been taken from me? Because you are wrong. The license allows people to use openssh in their proprietary products without having to open source the whole deal, and the source is still available by the author. Its freedom for everyone, instead of freedom if you follow our politics and accept our restrictions and don't want to make proprietary software. Quit spreading anti-BSD FUD and join the rest of us (or some of us at least) here in reality.
Ok... I want to make a point here....
At one point I looked at the data and concluded that BSD was dying. I think that some people really think this and are not really trolling. The confusion comes in part due to a couple simple mistakes.
It is true that Netcraft has in the past indicated that *BSD is losing market share to Linux in at least the web server markets. However, these numbers are percentage based (regarding domains hosted) and probably don't represent an absolute decline. In fact, I suspect that the absolute number domain running on web servers running *BSD is probably currently growing but doing so slower than the market. This would fit with the observation that proprietary UNIX doesn;t seem to be in much of an absolute decline (with a few punctuations in the equalibrium) and that all such flavors are losing marketshare (percentage-wise) much faster than *BSD.
Secondly, because we are not seeing a mass exodus of the core developers from *BSD to Linux, I don't think one can ever say these are dying. Just as Microsoft can't kill Linux, Linux can't really kill *BSD. The only thing that can kill *BSD is, well, *BSD. More likely, we will see the licensing advantages that Linux offers disappear as proprietary UNIX and later Windows falls. At this point, Linux will still have some competative advantages, but we may see *BSD grow more rapidly once proprietary competition is eliminated.
LedgerSMB: Open source Accounting/ERP
Hmm, this AC sounds just like the actual Theo.
From every person that I know that got the "privilege" to meet RMS in person the expression "smelling nice" usually is not in their description...
Neither is "smelling like the wino down the street" but still...
Sure it can lead to customer confusion, but it can also mean that you have a larger number of small teams working on specific niches. If a contribution is generally useful, it can be merged back. For example, the Samba NT4 PDC/BDC stuff was first developed in the Samba-TNG fork and later merged back. Similarly sook at how many forked Linux kernels have been generally available (merging third party patches).
LedgerSMB: Open source Accounting/ERP
Have you any info on the current BSD market share?
:)
These are the latest data I could find about BSD market share - and they say it's gaining it.
Nearly 2 Million Active Sites running FreeBSD
"FreeBSD secured a strong foothold with the hosting and internet services communities at the genesis of the web and has anything but gone away. Indeed it is the only other operating system [besides Windows and Linux] that is gaining, rather than losing share of the active sites found by the Web Server Survey."
A more recent article doesn't talk about market share, but is quite enough for everybody to see how "Netcraft confirms it"..
Nearly 2.5 Million Active Sites running FreeBSD (Jun 2004)
"[FreeBSD] has secured a strong foothold with the hosting community and continues to grow, gaining over a million hostnames and half a million active sites since July 2003."
I think this pretty much says it all..
--
Requiem for the FUD
Theo, is that you?
And remember kids: Never trust a computer you can actually lift.
Your information is newer than the information I had previously seen. I see it as further evidence that *BSD will grow rapidly once the viability of proprietary competition is reduced to the extent that it is no longer competitive.
LedgerSMB: Open source Accounting/ERP
The price for freedom is eternal vigilance. The latest stance has been towards taking liberties from consumers and giving producers more control (e.g. DMCA, Broadcast flag). If people do not fight back, eventually it will be illegal for you to use a fully free software system.
I forgot to include this in my previous follow-up: it seems quite a political statement to me to favor convenience above software freedom. I'd hardly call Torvalds apolitical, I'd say that his views are the views people have been taught to value--use what helps you get jobs done, push aside any other concerns regardless of their effect on society--hence they are popular.
Digital Citizen
Theo deserves a lot of recognition for his technical achievements and his commitment to freedom. Getting this award proves that you can blow off everyone in the world except your personal fanboys and still be a success.
My company based a commercial product on O-BSD, then converted to Linux when it became clear that Theo doesn't know how to anchor a diverse community. We even tried to fund his project but never got past being personally abused.
If you don't understand why this "right" of yours harms the software-development economy and the rights of everyone involved in it, then you are too blinkered by the "IP"-encumbered status quo for it to be worth explaining to you in this of all forums. Read about it, think about it, then post about it.
parent is +5 !!!!
rofl
...and his advancement of network security.
This will probably get modded flamebait, but I'd like to point out Theo doesn't exactly have an outstanding reputation in the security community.
"OpenBSD kernel: the first remotely exploitable kernel in history." -GOBBLES Security (defcon 2002)
smattawichu
i'm going to release an OpenBSD remote root
Or you could just use rsync over ssh instead:
And if the rsync dies, you just run the same command again.
Much less typing. :-)
i didn't know a music group gave out awards. I don't even think they know what free BSD is.
FSF = Further Seems Forever
Did he get the congeniality award?
Definately a good mimic if it isn't, the security is a process, security is a state of mind had me thinking so.
I'm sick of following my dreams - I'm just going to ask them where they're going and hook up with them later.
You have lost software freedom for those "various network appliances, switches, routers, etc." and you still have software freedom for OpenSSH. They are different programs licensed differently despite that the non-free programs are derivatives of the free software program. It's sad that you chose to make your point with swearing and exaggerating to prove a false point. It doesn't make your argument more convincing.
Digital Citizen
For you see Hitler was the strong dictator and Stalin was the insane communist.
Mind, I have nothing against de Raadt, just pointing out that the inappropriet metaphor was backwards.
I'm sick of following my dreams - I'm just going to ask them where they're going and hook up with them later.
Theo and RMS.
So no need to speculate :)
n/t
Theo deserves this award for his uncompromising stance on security in OpenBSD. In these modern times, what we need is software that actually works. Theo and his team are doing more than almost anyone else to achieve what we need most in software and operating system development.
Definitely a good mimic...
You keep using that word. I don't think it means what you think it means. The word you're looking for is "meme".
To copy or imitate closely, especially in speech, expression, and gesture.
IE: That was either Theo or a person which is skilled in simulating his style of typing.
A meme however would be the idea of security being important.
I'm sick of following my dreams - I'm just going to ask them where they're going and hook up with them later.