Slashdot Mirror


OpenBSD 5.0 Unleashed On the World

First time accepted submitter tearmeapart writes "A new version of the operating system that most of us would love to love, but probably hardly ever directly use, has been released. As scheduled, release 5.0 brings support for more hardware, network improvements, and OpenSSH 5.9. The links: changelog; download; main 5.0 page; and how to order your OpenBSD products!"

185 comments

  1. EPIC headline by seandiggity · · Score: 2

    ...no but srsly, OpenBSD is not actually a giant blowfish out to destroy our cities.

    --
    Geeks like to think that they can ignore politics, you can leave politics alone, but politics won't leave you alone.-rms
    1. Re:EPIC headline by daid303 · · Score: 2

      ...no but srsly, OpenBSD is not actually a giant blowfish out to destroy our cities.

      Which would be more exciting then an OpenBSD release. I for one, welcome our new blowfish overlords.

    2. Re:EPIC headline by ByOhTek · · Score: 1

      Of course, it is to protect us from the space hackers trying to invade our networks!

      It is a friendly (to us) giant blowfish!

      I once was at a job interview, and they asked if I had any experience with "the OpenBSD variant of Linux".
      I was silent for a moment trying to gain my composure, and then said "... Well, it isn't actually a variant of Linux. It's derived from the original Unix work that Berkley did in conjunction Bell Labs, and not Linus Torvalds independently written Kernel."

      Needless to say, I didn't get a job.

      --
      Self proclaimed typo king, and inventor of the bear destroying coffee table (patent not pending).
    3. Re:EPIC headline by Moridineas · · Score: 2, Funny

      Well, no wonder--you didn't use a possessive apostrophe after Linus Torvalds! Amateur mistake...

    4. Re:EPIC headline by tqk · · Score: 1

      Needless to say, I didn't want that job.

      FTFY. "Ah, a smartass know-it-all, eh?" It's always best to avoid managers who're easily intimidated by competence.

      --
      "Tongue tied and twisted, just an Earth bound misfit ..." -- Pink Floyd.
    5. Re:EPIC headline by perpenso · · Score: 1

      Needless to say, I didn't get a job.

      Somewhere in the conversation did you answer the question as to whether or not you had OpenBSD experience? :-)

    6. Re:EPIC headline by Anonymous Coward · · Score: 0

      Which would be more exciting then an OpenBSD release.

      As it should be.

      There is an old BSD curse: "May your computer run an interesting operating system."

    7. Re:EPIC headline by Jeremiah+Cornelius · · Score: 1

      You will never get hired, wearing a ComiCon T-shirt, and opening your sentences by saying: "Actually,..."

      --
      "Flyin' in just a sweet place,
      Never been known to fail..."
    8. Re:EPIC headline by perpenso · · Score: 1

      You will never get hired, wearing a ComiCon T-shirt, and opening your sentences by saying: "Actually,..."

      Actually :-), I got a job because when the interviewing manager asked how the programming test I had just taken went I told him how poor a test it was. He was very interested in my opinions regarding the matter. One of the first things I was assigned to do once hired was to create a new test. The manager was a business guy and knew nothing about programming but he understood rational arguments when he heard them.

      Of course maybe I was hired because I wore a suit and tie for the interview.

    9. Re:EPIC headline by kat_skan · · Score: 1

      Welcome them? We've already got an entire Congress full of them!

    10. Re:EPIC headline by Anonymous Coward · · Score: 0

      My wife once got a job because in the interview she was supposed to show she could run the company's test suite but instead spent the time debugging the fault she'd found and writing a patch. I was _so_ proud :-)

    11. Re:EPIC headline by Compaqt · · Score: 1

      You mean Linus' Torvalds?

      --
      I'm not a lawyer, but I play one on the Internet. Blog
    12. Re:EPIC headline by tehcyder · · Score: 1

      Needless to say, I didn't get a job.

      I imagine many of your job interview stories have the same punchline.

      --
      To have a right to do a thing is not at all the same as to be right in doing it
    13. Re:EPIC headline by ByOhTek · · Score: 1

      a bit over 50%. A bit under if you count the job offers I've turned down as "successes".

      I've actually had better luck than most on interviewing for positions.

      --
      Self proclaimed typo king, and inventor of the bear destroying coffee table (patent not pending).
  2. obligatory by nimbius · · Score: 4, Informative

    link to the 5.0 song, art and lyrics.
    http://www.openbsd.org/lyrics.html#50
    it is recommended best practice to play the correct release song while upgrading your openbsd.

    --
    Good people go to bed earlier.
    1. Re:obligatory by unixisc · · Score: 1

      Speaking of which, the pic on the OBSD DVD reminds me of the Smashing Pumpkins

    2. Re:obligatory by Anonymous Coward · · Score: 0

      link to the 5.0 song, art and lyrics.

      <snip>
      Little black flies
      on a pile of GNU
      With a Dairy Queen tip
      And Imma comin' for you
      </snip>

    3. Re:obligatory by Anonymous Coward · · Score: 0

      I thought you were going to say something about Netcraft

  3. Re:BSD is dead by Anonymous Coward · · Score: 0, Insightful

    Mac OS X is based upon BSD, you fucktard.

  4. Re:BSD is dead by Anonymous Coward · · Score: 0

    I use OpenBSD on many devices. I wouldn't run anything else for a firewall. I have already got a copy of 5.0 and setting it up on my work desktop now.

  5. Install media? by raydobbs · · Score: 1

    I remember trying to install this back in the 3.0 days, being thwarted by the fact that one of the authors of the software owned the copyright on the OS in ISO disc format, effectively making it impossible to get a version to install without paying him. After a few failed days of missing this or that file, and corrupt BitTorrent copies, I gave up, went back to FreeBSD (at the time).

    1. Re:Install media? by Richard_at_work · · Score: 3, Informative

      Not been the case for years, you can download the "install50.iso" image from the mirrors right now.

      http://www.openbsd.org/ftp.html

      Example:

      http://mirror.bytemark.co.uk/pub/OpenBSD/5.0/i386/install50.iso

    2. Re:Install media? by Anonymous Coward · · Score: 0

      What are you possibly talking about? OpenBSD has been free to download as long as it's been economical to(ie, the advent of broadband) and the CDs are fairly cheap. It's completely against their way to force you to pay for it, really.

    3. Re:Install media? by raydobbs · · Score: 1

      Sounds like something I might have to give a try then. The 'I own the copyright on the ISO image, so you have to pay me to get an installable copy' stuff was bullshit, to be honest.

    4. Re:Install media? by Richard_at_work · · Score: 2, Informative

      It was one of their main fundraising abilities - and to be quite honest, they never stopped other people putting together slightly different ISO layouts and going with those. Plus it was trivial to do an install from the tgz themselves.

    5. Re:Install media? by tlhIngan · · Score: 2

      I think they offer a free "net install" CD, and many others have put together offline install versoins.

      But yeah, that's the OpenBSD way - they sell the One True Install media to ensure you're getting a pristine copy and not something potentially hacked up with hidden vulnerabilities and such. After all, OpenBSD is about security - and having a way to distribute unmodified CDs is quite hard.

      If you're testing, fine, netinstall or "unofficial offline install" CDs and DVDs work. But if you're wanting a secure installation, you probably sould buy the official blessed media.

    6. Re:Install media? by dolmant_php · · Score: 0

      No, they do it that way to to have money and operating funds. It has nothing to do with a pristine copy. The checksums are all online. As another poster mentioned, the full install ISOs are now freely available (and have been for some years), in addition to the net install ISOs.

    7. Re:Install media? by Raenex · · Score: 0

      But yeah, that's the OpenBSD way - they sell the One True Install media to ensure you're getting a pristine copy and not something potentially hacked up with hidden vulnerabilities and such.

      They're just trying to extract money.

      and having a way to distribute unmodified CDs is quite hard

      No it isn't. All you need is a secure checksum for the image.

    8. Re:Install media? by jawtheshark · · Score: 1

      I don't get this "burn to CD". Who cares? I rarely, if ever, do that. Just use PXE and be done with it. All Linuxes and all BSDs, I know of, allow that easily. Apparently even Windows XP could be installed over PXE, but it was a series of hacks and not easy. I don't know about the more modern Windows versions.

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    9. Re:Install media? by tqk · · Score: 0

      Sounds like you are a very stupid individual. All you had to do was download the install floppy image and you were set. Yes, there are install cd images now. No, you should not try again. Stick to freebsd, we don't need any more idiots that can't read clogging up the mailing list with stupid questions that are answered in the FAQ.

      I realize others have probably told you this today, but you're a despicable human being.

      Sigh. Some people just can't handle the truth.

      --
      "Tongue tied and twisted, just an Earth bound misfit ..." -- Pink Floyd.
    10. Re:Install media? by hedwards · · Score: 1

      I remember in the late 90s that it would be more efficient and cost effective to buy the discs and have them shipped, but that was more a matter of the cost of dial up service and the time it would take to deal with that.

      I don't recall one ever having to pay for it as the BSD license does allow people to sell copies of it if they wish.

    11. Re:Install media? by X0563511 · · Score: 1

      Perhaps I'm missing something, but how are you supposed to boot from compressed tarballs?

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    12. Re:Install media? by LearnToSpell · · Score: 1

      You make a floppy bootdisk, which were always available, and do a network install?

    13. Re:Install media? by afabbro · · Score: 2

      You misunderstood.

      You have always been able to download an .ISO, install OpenBSD over the net, etc. Although I give money to the OpenBSD guys, I have always just downloaded an .ISO from openbsd.org and installed with it.

      You can get all the packages, ports, sources, binaries - everything - over the net.

      Now, they do sell ISOs that have all the packages on them. If you want that, yes, you do have to pay it. That is explicitly stated as a fundraising method for the project. It wasn't "one of the authors" - it is the project lead, Theo.

      Yes, it is slightly more convenient to have all the packages in one set of ISOs. But you can download the install ISO and get packages from the net, or download all the packages and put them on DVDs yourself, or host your own repository yourself, or whatever you want. The only reason to buy the pre-packaged CD set is because you like OpenBSD and want to support the project financially (and you get some stickers, etc.)

      BSD's license is far more permissive than Linux, btw. There's really no way they can thwart.

      --
      Advice: on VPS providers
    14. Re:Install media? by n3v · · Score: 1

      They have to fund the project and development efforts.

      However, (and obviously) everyone only buys the CDs for the stickers!

    15. Re:Install media? by JonySuede · · Score: 1

      use a Forth bios assuming that it has a LOAD verb and usb support.
      write a UNTAR verb and an UNZIP verb
      put the floppy
      A:/image.tgz
      LOAD.
      UNTAR.
      UNZIP.
      EXECUTE '.

      see that was easy as pie ;)

      --
      Jehovah be praised, Oracle was not selected
    16. Re:Install media? by Wandering+Voice · · Score: 1

      haha, I once downloaded a Linux .iso over dialup. It took a little over 2 days to download, which during that time my phone was disconnected but because of the data transfer the line was live for that time. After finishing the download, I rebooted (win98), and went to reconnect, but had no dial tone. Walked a couple blocks to a payphone and talk to a CSR at Qwest who was just blown away that I kept the line live that much longer and was able to download a 700mb file over a 56k connection.

    17. Re:Install media? by e9th · · Score: 1
      Theo retained copyright of the CD layout, to prevent counterfeits. But even as far back as 1999, way before 3.0 was released, the FAQ included this:

      Does OpenBSD provide an ISO image available for download?

      You can't. The official OpenBSD CD-ROM layout is copyright Theo de Raadt, as an incentive for people to buy the CD set.
      Note that only the layout is copyrighted, OpenBSD itself is free. Nothing precludes someone else to just grab OpenBSD and make their own CD. [emphasis mine]

      So I could produce a functionally identical CD and even sell it, but if I stuck the original artwork on it, I'd be in violation.

    18. Re:Install media? by Anonymous Coward · · Score: 1

      It was actually _always_ *very* easy to install OpenBSD as long as you werent a complete idiot

      FTP install..
      burn the tgz's onto a CD, if you know how to burn a CD (i.e. you are not an idiot) you can download the files from their FTP site and put it on your own CD

      Not to mention that nowdays you can just use installxx.iso which has everything you need in the one iso

      Seriously what kind of a douche newb are you if you thought it was 'effectively impossible to get a version to install without paying him'
      I mean srlsly r u some kind of dumbass?

      Better you buy a PC from best buy with Windows pre-installed and a support contract, because obviously you are too dumb to use a computer

    19. Re:Install media? by Anonymous Coward · · Score: 0

      You're not qualified to be making statements about 'secure installations' because you are too dumb to verify hashes

    20. Re:Install media? by Anonymous Coward · · Score: 0

      mod parent up.. the OP was even dumb enough to use random bittorrent ISOs for a security oriented OS

    21. Re:Install media? by X0563511 · · Score: 1

      Use a what BIOS? And floppy, really? It's 2011, almost 2012.

      Not being able to burn an .ISO and boot from it is and was, well, stupid. I'm glad you can actually download ISOs now.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    22. Re:Install media? by X0563511 · · Score: 1

      It's 2011, almost 2012, and we're expected to use floppies? You seriously don't see anything wrong with this idea?

      Now, the last time I had to dig in the mirrors looking for media, I didn't know how to do PXE. Was there / is there PXE-bootable "media" available?

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    23. Re:Install media? by Anonymous Coward · · Score: 0

      Duuuude, pay attention - he was explaining how you could do it back then. I did it that way lots of times, it was easy and consumed less bandwith because you just ticked the stuff you needed to download (mostly skipping the X stuff). Even for making a desktop (I ran 2.8 with fvwm) I found it faster to install from diskette+net. Just sayin.

    24. Re:Install media? by X0563511 · · Score: 1

      Oh. Well, allow me to say "Hurr!"

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    25. Re:Install media? by Anonymous Coward · · Score: 0

      It was a lame tentative at humour... I profoundly apologize for my failure.

    26. Re:Install media? by barbazoo · · Score: 1

      Did you actually read the superb installation manual? It's all in there, dude.

  6. Wow! KDE 3.5 and Gnome 2.3 .... by Jerry · · Score: 1

    It's Linux, direct from 2005!

    --

    Running with Linux for over 20 years!

  7. Re:How is this news? by future+assassin · · Score: 0

    Ubuntu? I though eveyone has already switched to LMDE. Windows 8 my homework.

    --
    by TheSpoom (715771) Uncaring Linux user here. I have nothing to add to this but please continue. *munches popcorn*
  8. Re:Wow! KDE 3.5 and Gnome 2.3 .... by AdamJS · · Score: 4, Insightful

    So it's not corrupted by the utter crap that is Gnome 3 and Unity? SIGN ME UP.

  9. Major release? by Anonymous Coward · · Score: 0

    Is 5.0 meant to be a major release? Looks like it is only the next version in the regular schedule. Why don't use 4.10 then?

    1. Re:Major release? by unixisc · · Score: 1

      How does one differentiate 4.10 and 4.1? Mathematically, they are equal. Either, the creators should have marked the first minor rev as 01, making it 4.01, which mathematically allows for up to 99 minor revs before the next major 1. Or have something like 4.9.x, and keep rev'ing x until they're ready for 5.x. I like it being 5.0, that way, it's not buggy like every other x.0 software normally is.

    2. Re:Major release? by Anonymous Coward · · Score: 0

      The OpenBSD release system doesn't contemplate major versions. Releases are but snapshots of a single bloodline improved by incremental upgrades.

  10. Re:Wow! KDE 3.5 and Gnome 2.3 .... by cachimaster · · Score: 5, Insightful

    It is crazy to think that shipping gnome 2.32, OpenBSD 5.0 has become much more desktop-friendly than Ubuntu.

  11. Re:Wow! KDE 3.5 and Gnome 2.3 .... by dolmant_php · · Score: 1

    Some people don't even like Gnome 3.

  12. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Medievalist · · Score: 3, Insightful

    It's Linux, direct from 2005!

    So it's not corrupted by the utter crap that is Gnome 3 and Unity? SIGN ME UP.

    I can't decide whether to mod you "funny", "insightful", "flamebait", or "sad".

    Maybe we need an "all of the above" category.

  13. Oh boy. by Hatta · · Score: 1

    I get to rebuild my firewall from source yet again.

    --
    Give me Classic Slashdot or give me death!
    1. Re:Oh boy. by Hatta · · Score: 1

      Fair enough. I forget, because I generally follow CURRENT. It's hard to know what's best with OpenBSD. Check out this bit from the FAQ:

      In fact, as our hope is to continually improve OpenBSD, the goal is that -current should be more reliable, more secure, and of course, have greater features than -stable. Put bluntly, the "best" version of OpenBSD is -current.

      Most users should be running either -stable or -release.

      If I want the best version of OpenBSD I have to run CURRENT, which means I have to rebuild my system from source often. It's a real pain in the ass, but I think that's intentional. Someday I'll just switch over to pfsense.

      --
      Give me Classic Slashdot or give me death!
    2. Re:Oh boy. by bill_mcgonigle · · Score: 1

      Someday I'll just switch over to pfsense.

      C'mon in, the water's warm. pfSense 2.0 is an excellent improvement over 1.2.3, which I thought was pretty grand itself. You might wait for 2.1, though, if you're in no rush, as it will have some new infrastructure and better IPv6 support.

      Great dev. team and community, and they're finally starting to push most of their BSD patches upstream.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    3. Re:Oh boy. by the_brobdingnagian · · Score: 1

      Just install from snapshots every few weeks.

    4. Re:Oh boy. by Anonymous Coward · · Score: 0

      It's called a binary upgrade from snapshots, you don't have to compile anything. Try reading the documentation some time.

    5. Re:Oh boy. by fialar · · Score: 1

      pfSense is based on the pf in OpenBSD 4.5. OpenBSD 5.0's pf is greatly improved.
      There has been a lot of work going into getting an updated pf into FreeBSD, but they're only able to get the PF from OpenBSD 4.5 into 9.0-CURRENT (which is what pfSense 2.1 uses).

      I run OpenBSD on my firewall and I mainly run -CURRENT from snapshots and I've never had any problems. -CURRENT rarely breaks.

    6. Re:Oh boy. by bill_mcgonigle · · Score: 1

      but they're only able to get the PF from OpenBSD 4.5 into 9.0-CURRENT (which is what pfSense 2.1 uses).

      It looks like the big news is IPv6 packet fragment reassembly and ACK prioritization, which would have been really useful to have if pfSense 2.1 is supposed to be 'the' IPv6 release.

      I see some groundwork for future traffic shaping features - what else did I miss?

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    7. Re:Oh boy. by fialar · · Score: 1

      There's been quite a bit of improvement with pf's performance.
      Check out Henning Brauer & Ryan McBride's 10 years of PF presentation.

    8. Re:Oh boy. by bill_mcgonigle · · Score: 1

      Great stuff, thanks. Looks like some important NAT and ICMP handling changes too.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    9. Re:Oh boy. by Anonymous Coward · · Score: 0

      At least it is not installing on a PDP11-34 and you don't have to toggle in a boot loader.
      Thank the great frog we have come at least that far.

  14. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  15. Re:How is this news? by tqk · · Score: 2

    Why is this news on the main page?

    Because OpenBSD matters?

    Ubuntu 11.10 is out too and Windows 8 will be out soon!

    ... as compared to them.

    In other news, Kim Kardashian got divorced after 72 days!

    Who?

    Seriously, I didn't know they'd released a new version, and I was just wondering what I should do with a presently mothballed system I have. Now, I can build an OpenBSD sandbox to play with. Woohoo! :-)

    --
    "Tongue tied and twisted, just an Earth bound misfit ..." -- Pink Floyd.
  16. Re:Wow! KDE 3.5 and Gnome 2.3 .... by AdamJS · · Score: 1

    If it makes you feel any better I'm using Lubuntu, Xubuntu, CentOS and various Windows installs in VMs between work and home. Just calling a spade, a spade.

  17. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Anonymous Coward · · Score: 0

    The jury is still out as to whether KDE and Gnome from 2011 is an improvement over KDE and Gnome from 2005. Last I heard, Linus Torvalds was urging people to drop KDE and Gnome in favor of Xfce. As is typical in these GUI-centric times, you are confusing the GUI with the OS itself. If your first priority is the latest candy-coated GUI goop, then by all means stick with Ubuntu. If you're more concerned with stability, security and code correctness, then any of the BSD flavors may be for you.

  18. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  19. All you lowly people! by Anonymous Coward · · Score: 0

    I have been using it for 3 days! I ordered the CDs and they arrived early! I installed it to test out, plus I upgraded my works subversion server to this.

  20. Hardly ever use? by Ptolom · · Score: 1

    My server runs OpenBSD. It has a really good firewall, and it's absurdly secure. I'm not enough of a masochist to run it on a desktop but if you configure it properly it makes an excellent server OS.

    1. Re:Hardly ever use? by sleepy_weasel · · Score: 2

      You should... you aren't forced to use GNOME or KDE (I use sctrotwm), and I can run gimp, vlc, mplayer, libreoffice (or openoffice.org, because choice=freedom). Most all of the software you use is available on OpenBSD, and if not, the ports system is pretty easy to use to create software ports and packages in OpenBSD.

      plus, as long as you do your homework before posting something to the list, you'll generally get some great people to help you...

      --
      It's all damned lies and statistics!! I mean 47% of all people use statistics to back up their arguments.
    2. Re:Hardly ever use? by Anonymous Coward · · Score: 0

      The worst part about FreeBSD and OpenBSD is that every piece of software that's not in the base system needs to be compiled from source fairly regularly because the binary packages are usually so out of date. I shouldn't have to recompile Firefox (or any other piece of software that is in the ports tree) regularly to get security updates... I love BSD, but package management is so far behind Debian, Fedora and Arch that it gets frustrating.

    3. Re:Hardly ever use? by unixisc · · Score: 1

      Is there anything that prevents the BSDs from adapting apt, yumm or other such installation software?

    4. Re:Hardly ever use? by the_B0fh · · Score: 1

      You do know that packages exist right? Why would you make pain for yourself?

    5. Re:Hardly ever use? by Anonymous Coward · · Score: 0

      The packages exist, but the packaged version is often behind the version that is in ports because they're lacking the resources to keep the packaged version up to date. For example, it's fairly common that the packaged version of Firefox has known security vulnerabilities while the version in ports does not.

  21. Not provably secure by kriston · · Score: 1, Flamebait

    OpenBSD is only perceptually secure. There is no unbiased audit process. There is no verification by a third party. There's just narcissism. The only reasons we think OpenBSD is secure are:

    1) OpenBSD supporters said so.

    2) Few people who say they use OpenBSD actually use OpenBSD. As a result, few security holes are found and published.

    Please prove this wrong. All I'm seeing are various forms of cognitive distortion and fallacies when people try to prove to me that OpenBSD is truly more secure.

    --

    Kriston

    1. Re:Not provably secure by Ptolom · · Score: 1

      It's quite tricky to prove you wrong, but easy to prove you right. (if you are right) Just find a remote exploit or two.

    2. Re:Not provably secure by Anonymous Coward · · Score: 0

      All but the most trivial programs are not provably secure.
      I guess you're right, but not for your troll reasons.

    3. Re:Not provably secure by hedwards · · Score: 1

      You're wrong, because of the claims and the track record, finding a vulnerability in the base install is a great way to make a name for oneself as a security researcher. In the last decade only one has been found. Which is pretty damn impressive by any standard.

      Probably the only better way of ensuring that level of security would be paying out a million dollars for such an exploit.

    4. Re:Not provably secure by MikeBabcock · · Score: 3, Informative

      If its security is important to you, you're fully capable of funding your own audit from a third party, either solo or as a group effort. Put together a requirements list, find out a price, and start asking others to chip in until you can afford it.

      You're also free to Google for "OpenBSD exploit" and look at all the (very few) results for actual remote exploits.

      OpenBSD has always had much more intelligent (secure) default settings for its installed services and packages than Linux or Windows, but I don't administer any OpenBSD boxes regularly myself because its a bit of a pain for day to day patches and updates compared to Linux. There's a trade-off to be made between security and hours available in the week.

      --
      - Michael T. Babcock (Yes, I blog)
    5. Re:Not provably secure by Anonymous Coward · · Score: 1

      ...did you use SSH today?

    6. Re:Not provably secure by Uberbah · · Score: 4, Insightful

      The only reasons we think OpenBSD is secure are:

      1) OpenBSD supporters said so.

      So we should all realize that OpenBSD is overrated. Because you said so.

    7. Re:Not provably secure by Anonymous Coward · · Score: 0

      OpenBSD brags that there have only been a few remote holes in the default install in so many years. But if that is the metric of overall security, Ubuntu is the most secure OS out there. By default, there are ZERO listening ports on an Ubuntu installation. The only possible remote exploits would have to be in the IP drivers themselves.

      On the other hand, if you look at architecture and coding practices, OpenBSD probably is tops. It only has one listening port by default, and its developers use secure coding practices for everything they do. But this is harder to quantify.

    8. Re:Not provably secure by bill_mcgonigle · · Score: 1

      OpenBSD brags that there have only been a few remote holes in the default install in so many years. But if that is the metric of overall security, Ubuntu is the most secure OS out there. By default, there are ZERO listening ports on an Ubuntu installation

      Default install or default installation set. I thought OpenBSD claimed the latter, which is something quite different.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    9. Re:Not provably secure by UnknownSoldier · · Score: 1

      Well, at least the OpenBSD guys admit on their _own_ homepage the last time they were vulnerable. What other OS manufacturer does that at _all_ ??

      I appreciate the honesty and public disclosure -- not trying to sweep it under the rug like almost every OS does.

    10. Re:Not provably secure by Anonymous Coward · · Score: 0

      > 2) Few people who say they use OpenBSD actually use OpenBSD. As a result, few security holes are found and published.

      Few people who say that oranges are orange have actually seen oranges. As a result, oranges are not really orange.

    11. Re:Not provably secure by Anonymous Coward · · Score: 0

      OpenBSD brags that there have only been a few remote holes in the default install in so many years. But if that is the metric of overall security, Ubuntu is the most secure OS out there. By default, there are ZERO listening ports on an Ubuntu installation. The only possible remote exploits would have to be in the IP drivers themselves.

      Yeah, well, MS-DOS 3.0 doesn't even have IP drivers, so that makes it even more secure than Ubuntu, right?

      You're being silly. OpenBSD is a server OS; you can't compare it with a desktop setup. Open a port or two in your Ubuntu, as you must if it's to be a server, and the picture changes.

    12. Re:Not provably secure by Anonymous Coward · · Score: 0

      Man, when did the good trolls come back to slashdot? Last time I was here it was all the boring cut&paste crap. Thank you kriston for upholding the glorious tradition of the real slashdot troll!

    13. Re:Not provably secure by optymizer · · Score: 1

      Since Halloween was yesterday:

      Kriston, if there are no candies at the store, the store has no candies for sale. That's not to say there couldn't be any candies left in a drawer by accident, but, no one knows if they exist, hence the above still holds true: the store has no candies for sale. There is no need for an external audit, because, even if you found some candies in a drawer as a result of the audit, the store still had no candies for sale at the time when they claimed they didn't have candies for sale (unless the audit finds tons of candies not disclosed to the public, which is not the case here).

      Your argument about the community doesn't hold either. Here's a counter-example: I'm part of an extremely small group of people dealing with a specialized web application. There are only about 20 people in the world using it. I've found at least 10 critical security holes in the default install, just by using it. I've patched about 20 minor bugs, and I'm just a user, I'm not on the developer/QA team. When a product has issues, the community (regardless of size) will still find a percentage of the total issues available. The fact that OpenBSD had 3 issues found in the default install in a decade is impressive, especially since they have _way more_ than 20 users in the entire world AND OpenBSD, as a package, is enormous, with hundreds of utilities and dozens of services waiting to be exploited. But, where are the exploits? That's right.

      So, in that context, it's a hell of a lot more secure than other OSes. q.e.d.

    14. Re:Not provably secure by EETech1 · · Score: 1

      The kiddie porn sites that anonymous took over were BSD. I had to laugh again when I saw that!

      Cheers!

    15. Re:Not provably secure by trancemission · · Score: 0

      There is no unbiased audit process. There is no verification by a third party.

      So who do you trust to verify the code you run?

    16. Re:Not provably secure by afabbro · · Score: 1

      The kiddie porn sites that anonymous took over were BSD. I had to laugh again when I saw that!

      Said sites were running FreeBSD . I had to laugh at you when I saw that! Cheers!

      --
      Advice: on VPS providers
    17. Re:Not provably secure by EETech1 · · Score: 1

      I admit I didn't remember which one it was and was too lazy to go back and look.

      Do the FreeBSD folks not proclaim their OS as having any of the inherent security of the Other BSDs? In my ignorance I thought they would all make similar claims of a more secure than most nature.

      At least you got a laugh at my expense! I hope I made your day a little bit brighter! You are well on your way to my learn something new every day!

      Cheers!

    18. Re:Not provably secure by Anonymous Coward · · Score: 1

      I'm a Mac user. I don't use OpenBSD, I find myself alienated in that system and I have no intent of gaining any *BSD knowledge in the near future, but what you just said is plain wrong.

      OpenBSD is designed ground-up with security in mind. It approaches security as a process not as a 'set of configurations'. The openbsd system supports:

      1. Unique memory protection features: W^X was introduced prior to Grsecurity and it's INTEGRATED to the system (version 3.4). PropoLice and StackGhost were also introduced to all operating systems by OpenBSD. During the development cycle of the 3.8 release, changes were made to the malloc memory management functions.

      2. Cryptography and Randomization at levels never seen in 'default' linux installations and really complicated to achieve at any level, no matter what 'security' model you choose.

      The fact that all these things come 'out of the box' makes the system more secure by default which makes perfectly sense because I know of no other OS which chooses security over anything else.

      I don't want to mention the importance of projects like OpenSSH, PF, etc. which are developed by the OpenBSD team.

      So before talking shit about something you probably don't know how to use, at least Google it!

    19. Re:Not provably secure by LWATCDR · · Score: 1

      Actually yes you should.
      He did not say that it wasn't secure he said that it wasn't provably secure. They say they are secure but their has been no third party testing or auditing of the code so It all comes down to "We are secure because we say so."

      OpenBSD does have a very good track record but that could be in part luck or just that they are a small target. It could also mean that it is that secure but without a security audit by a third party it is all just taking the developers word for it.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    20. Re:Not provably secure by tokul · · Score: 1

      Just find a remote exploit or two.

      How many remote services OpenBSD has in base install? How fast OpenBSD can downplay importance of remote exploit? How many people run only base install?

      People might praise OpenBSD for their docs, until they find piece of documentation which does not match actual system function and system function is fubared.

    21. Re:Not provably secure by Thiarna · · Score: 1

      Not provably secure - maybe not, but sometimes you have to settle for more provably secure than readily available alternatives.

    22. Re:Not provably secure by epine · · Score: 1

      Please prove this wrong.

      Why? So that you can stand there raising and lowering the bar with your brain on dial-tone while everyone else does the heavy lifting?

      I'm sure it costs tens of millions of dollars to prove that any system is secure, and the proof won't even be correct. Does OpenBSD say "provably secure" on its web site? I didn't think so.

      You want proof? You can't afford the proof!

      In the real world, this is actually a matter of judgement and prudence. Your assertion that no-one tries to attack OpenBSD falls under [citation needed].

      OpenSSH for certain is among the juiciest targets out there for a zero-day. If portable SSH falls, you can bet that the native OpenBSD SSH would be scoured for the same vulnerability. There's no reason to regard OpenBSD itself is any less secure than OpenSSH on public information about how the project operates. While other projects are busy adding features, OpenBSD is busy adding chroot jails and stack guards.

      I will concede that in many ways it's legendary host-based security matters a lot less than it once did, because the attack vectors on what people care about (credentials) are mostly application specific.

      No one secures the social network.

      That's the number one sad-sack reason why OpenBSD is fading in relevance. Technical arguments have nothing to do with it.

    23. Re:Not provably secure by Anonymous Coward · · Score: 0

      Please prove this wrong.

      How about you prove it right?

    24. Re:Not provably secure by Anonymous Coward · · Score: 0

      It's major components like openssh are used EVERYWHERE; which makes is visible to everyone. Other components are ported to FreeBSD and other places. It has major corporate use. IBM has at least one page about it as a corporate firewall. Homeland Security uses it.

      And after all of its visibility it hasn't had a SINGLE security advisory in Secunia since 4.4!

      STFU.

    25. Re:Not provably secure by Anonymous Coward · · Score: 0

      An OS is only as secure as the applications running on it. The fact that a machine was compromised is not enough information to imply that the OS is at fault. Also, having a website compromised doesnt necessarily mean the whole machine was. It could be isolated to the user account the server software is running under.

      -HasH

    26. Re:Not provably secure by EETech1 · · Score: 1

      Wouldn't the ideal OS prohibit any application from doing anything malicious to the rest of the system?

      Don't we somewhat measure OS security as a function of how hard it is to compromise, and the damage that can be done by the various exploits? Example, a buffer overflow. One OS might detect the out of bounds condition and terminate the application, while another OS might happily execute whatever you put there.

      I agree that a buggy application could be the starting point to compromise any OS, but I think the damage that can be done is largely a byproduct of the design and security features employed by the OS.

      Cheers!

    27. Re:Not provably secure by iggymanz · · Score: 2

      There you go, raising that tired old misconception that the only security work OpenBSD team did was to "secure the base install only". Why don't you educate yourself on its architecture, its security libraries and softwares, and how the OS protects against privilege escalation and execution of malicious code. Why not learn why the OpenBSD filesystem is more robust than most? Then you can discuss real shortcomings (yes I know some, but they're not anything you mentioned) instead of aping same old nonsense that gets raised every six months.

    28. Re:Not provably secure by iggymanz · · Score: 1

      A small target? Their security wares (including openssh and openssl) are used by almost all the Unix, BSD, Linux. and by major companies (cisco, juniper, HP, etc.). That makes some of the wares of the OpenBSD team a HUGE target. Now where will you find the most secure implementation of those wares in an operating system?

    29. Re:Not provably secure by Chrisq · · Score: 1

      Then you can discuss real shortcomings

      Like performance. I know that this is like complaining that entry to a secure data centre is slower than entering a public building, but it is one reason why it won't be a desktop of choice for many people.

    30. Re:Not provably secure by Chrisq · · Score: 1

      Please prove this wrong.

      Right, just after you prove that there isn't an invisible pink unicorn sitting on my monitor.

    31. Re:Not provably secure by unixisc · · Score: 1

      Can anybody describe what actually changed from NetBSD to OpenBSD that made the latter more secure than the former? Assuming of course, that that's the case?

    32. Re:Not provably secure by Anonymous Coward · · Score: 0

      Small correction -- OpenSSL is a separate, unrelated project.

    33. Re:Not provably secure by Anonymous Coward · · Score: 0

      From what I recall from somewhere: Theo got hacked with NetBSD and went on a major bug hunt. He and others trekked through the code finding errors with common ground. His ideal for security clashed with the portability others of NetBSD strived for.

      Obviously when security is the main focus, there are going to be drawbacks. New features mean new code has to be vetted to maintain the same security.

      Theo kept it clean.

    34. Re:Not provably secure by LWATCDR · · Score: 1

      So?
      First OpenSSL are a separate project.
      Second their is more to an OS then SSH and SSL.
      Third do you know what provably means? Until you have a formal 3rd party code audit it isn't provably secure. It could be the most secure OS on the planet but it is that provable part that OpenBSD is lacking. If OpenBSD had good support for ZFS I would be tempted to use it on a NAS because it does have such a good track record.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    35. Re:Not provably secure by tokul · · Score: 1

      There you go, raising that tired old misconception that the only security work OpenBSD team did was to "secure the base install only".

      Then maybe OpenBSD should stop emphasizing that on their front page.

  22. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Medievalist · · Score: 1

    Oh, I wasn't disagreeing.

    I don't think I've ever seen OpenBSD with a GUI installed in the real world. I usually see it in DNS/DHCP and firewall roles... deep infrastructure for highly secure nets.

  23. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Anonymous Coward · · Score: 0

    And not everyone thinks that change for the sake of change is good. Secondly foisting tablet UIs on desktop users is fucking stupid.

  24. Desktops bonanza... by unixisc · · Score: 2

    From the Distrowatch site, looks like the list of destops supported by BSD include AfterStep, Blackbox, Enlightenment, Fluxbox, GNOME, IceWM, KDE, Openbox, WMaker, Xfce. And as CarsonChittom pointed out below, it's offering 2 choices of KDE - 3.5.10 and 4.4.5. Chances are that when their Gnome 3.2 is ready, it'll be offered alongside 2.32. My favorite aspect - it offers both AfterStep & WindowMaker - two GNUSTEP based DEs.

    As an aside, even Firefox 3.5.19 and 3.6.18 are included. As well as version 5 - thay ain't up to 7.x as yet.

    Linux distros would do well to do what the BSDs do - offer a wide choice of desktops, so that everyone can pick their own w/ minimum heartburn. All 3 BSDs - Open, Free & Net offer the wide choice of desktops. Wonder how widespread is the driver support for OBSD, particularly for Wi-Fi?

    1. Re:Desktops bonanza... by Anonymous Coward · · Score: 0

      Now all they need are graphics drivers!

    2. Re:Desktops bonanza... by Anne+Thwacks · · Score: 2
      Driver support is usually better than any other OS, IME.

      As others have commented, the graphics drivers are an exception, and may may be a bit behind the curve. I don't know, cos all my OBSD machines are headless.

      --
      Sent from my ASR33 using ASCII
    3. Re:Desktops bonanza... by timbo234 · · Score: 1

      "Linux distros would do well to do what the BSDs do - offer a wide choice of desktops, so that everyone can pick their own w/ minimum heartburn."

      They already do, have a look at Opensuse for example. Even in Ubuntu your favourite DE is only a package install away.

      --
      Pre-canned Evolution Links for all those Slashdot holy wars.
  25. Re:Prehistoric by hedwards · · Score: 1

    Larry hasn't yet gotten around to buying them out.

  26. BSD is dying by Baloo+Uriza · · Score: 0
    It is now official. Netcraft has confirmed: *BSD is dying

    One more crippling bombshell hit the already beleaguered *BSD community when IDC confirmed that *BSD market share has dropped yet again, now down to less than a fraction of 1 percent of all servers. Coming on the heels of a recent Netcraft survey which plainly states that *BSD has lost more market share, this news serves to reinforce what we've known all along. *BSD is collapsing in complete disarray, as fittingly exemplified by failing dead last [samag.com] in the recent Sys Admin comprehensive networking test.

    You don't need to be the Amazing Kreskin [amazingkreskin.com] to predict *BSD's future. The hand writing is on the wall: *BSD faces a bleak future. In fact there won't be any future at all for *BSD because *BSD is dying. Things are looking very bad for *BSD. As many of us are already aware, *BSD continues to lose market share. Red ink flows like a river of blood. FreeBSD is the most endangered of them all, having lost 93% of its core developers. The sudden and unpleasant departures of long time FreeBSD developers Jordan Hubbard and Mike Smith only serve to underscore the point more clearly. There can no longer be any doubt: FreeBSD is dying.

    Let's keep to the facts and look at the numbers.

    OpenBSD leader Theo states that there are 7000 users of OpenBSD. How many users of NetBSD are there? Let's see. The number of OpenBSD versus NetBSD posts on Usenet is roughly in ratio of 5 to 1. Therefore there are about 7000/5 = 1400 NetBSD users. BSD/OS posts on Usenet are about half of the volume of NetBSD posts. Therefore there are about 700 users of BSD/OS. A recent article put FreeBSD at about 80 percent of the *BSD market. Therefore there are (7000+1400+700)*4 = 36400 FreeBSD users. This is consistent with the number of FreeBSD Usenet posts.

    Due to the troubles of Walnut Creek, abysmal sales and so on, FreeBSD went out of business and was taken over by BSDI who sell another troubled OS. Now BSDI is also dead, its corpse turned over to yet another charnel house.

    All major surveys show that *BSD has steadily declined in market share. *BSD is very sick and its long term survival prospects are very dim. If *BSD is to survive at all it will be among OS dilettante dabblers. *BSD continues to decay. Nothing short of a miracle could save it at this point in time. For all practical purposes, *BSD is dead.

    --
    Furries make the internet go.
    1. Re:BSD is dying by Anonymous Coward · · Score: 0

      Do you have any citations for your claim that FreeBSD is dead? From what I know, it's the largest of the BSDs out there.

  27. OBSD 5, F YEAH!!! by Anonymous Coward · · Score: 0

    I dunno what crack these ppl are smoking, but not only is OBSD more secure than most other OSes and makes an excellent server/netapp, but is an awesome desktop and/or HTPC. Been using OpenBSD as my primary desktop for years.

    Im proud to celebrate another major BSD release and props to Theo for being a stubborn prick and stickin to his purist ways.

    -HasH

  28. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Anonymous Coward · · Score: 0

    Thank you, Captain Obvious.

  29. Pre-built VMware Virtual Machines? by billstewart · · Score: 1

    Does anybody know if there are pre-built VMware appliances with the new OpenBSD and VMware tools on them? Or will I need to do that from scratch?

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
    1. Re:Pre-built VMware Virtual Machines? by gmhowell · · Score: 1
      --
      Jesus was all right but his disciples were thick and ordinary. -John Lennon
    2. Re:Pre-built VMware Virtual Machines? by Anonymous Coward · · Score: 1

      Does anybody know if there are pre-built VMware appliances with the new OpenBSD and VMware tools on them? Or will I need to do that from scratch?

      Openbsd now has "vmware toolsish" built it. It isn't the official Vmware tools, but it works with most of the functions that Vmware tools would provide. This was added with 4.9. See here:
      http://www.openbsd.org/cgi-bin/man.cgi?query=vmt&sektion=4&format=html

  30. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Anonymous Coward · · Score: 0

    I don't like Unity, but I do like Gnome 3. For me, it is just as desk-top friendly as its predecessors. I haven't had any trouble with it, and I'm surprised that people do. There may be an aesthetic dislike of it, but in terms of usability and friendliness for the desktop it is on par with what came before.

  31. Re:BSD is dead by Mitchell314 · · Score: 1

    Only a git uses Mac OS X. A real OS is Darwin BSD! (To those modding parent down, it's a sarcastic joke. A lot of OS X (user space and kernel space (and nested parenthesis space!)) is derived from BSD).

    --
    I read TFA and all I got was this lousy cookie
  32. OpenBSD always had a free install by perpenso · · Score: 1

    I remember trying to install this back in the 3.0 days, being thwarted by the fact that one of the authors of the software owned the copyright on the OS in ISO disc format, effectively making it impossible to get a version to install without paying him. After a few failed days of missing this or that file, and corrupt BitTorrent copies, I gave up, went back to FreeBSD (at the time).

    OpenBSD always had a simple free install if you had a network connection. There were free bootable images available for download. You boot from one of these and it downloads components as needed during the install. The only thing you had to pay for was a CD that contained all components and could do an install *without* a network connection. At least for the current release, the full CD images for previous releases were available for download.

  33. Not had a good experience by Staticharge · · Score: 1

    I keep wanting to try one of the BSDs out on a preliminary basis to see how it compares to Linux, but honestly every one of them has irked me from the point of installation. I've tried FreeBSD, OpenBSD, and PC-BSD.

    The former two were somewhat cryptic to me, despite 10 years of Linux experience. I've done everything from manage servers to develop for embedded systems, and I always managed to figure things out. But FreeBSD, for example, gives me this somewhat counter-intuitive menu to go through, most of which I figured out, despite my lack of understanding of BSD partition types and all that. The problem though came from the packages. If you don't do anything, it just defaults to a console installation. And that's fine for some situations, sure. But actually trying to install the GUI was another story. I felt like a complete idiot trying to figure out their menus. It wasn't smart enough to just realize that the packages it might need aren't on the basic install CD, so initially I couldn't even find Gnome to install it. Immediately I was turned off by this seemingly primitive package system. But even when you get into the menu to select an internet source, it's a huge mess. I tried to pick Gnome, but it seemed that no matter what I did, I ended up with a plain CLI installation without even basic X. I had no idea where I was going wrong. I tried sysinstall afterward, read some stuff online, but I could not make the damn thing work. So I ended up trying to do it from the command line instead, which in fact was a million times more straightforward than their interface. But without knowing what all packages I actually needed for a full install without digging around, and upon realizing I still would have to manually edit my config files to make X launch with Gnome and all, I just threw my hands up and said forget that mess. If I wanted to go to that much trouble just to try something out, I'd install Arch or Gentoo or something. It's also worth pointing out that pkg_add is a very ugly tool, and not nearly as informative of progress as, say, APT. Perhaps I'm spoiled from all of my Linux use, though.

    PC-BSD is supposed to be the most friendly, yet not only did it contradict itself in how much space it would require between two different install attempts, but the first time it failed after the install began, and the second time it said it needed more space than I had allocated in the partitions (and that was both with auto-allocate as well as me doing it manually). Considering there's absolutely nothing different you can choose at that stage of the installation to affect disk space or anything (selecting basic stuff like keyboard type), I have honestly no idea why it was different on each attempt. The third time, when I gave up and just created a bigger virtual partition than I wanted to originally allow it, it then appeared to start downloading a single huge image rather than separate packages. I canceled it after realizing it would take a million years to get from their slow server.

    I heard that the release candidate for FreeBSD 9 had a friendlier installer, but a) it seemed pretty much the same text-based one to me, and b) none of the download mirrors in the installer would acknowledge the version I had and wouldn't let me download any packages.

    I'm sure many BSD veterans will simply think I'm a moron, am too impatient, or maybe I just had a string of bad luck. And maybe you're right on all counts! And sure, I could go read tutorials on how to do it "properly." But honestly, after using so many variations of Linux over the years, all the way back to the much more cryptic Red Hat installations of yesteryear, you'd think I would be able to figure out BSD no problem. Instead, I just gave it a big sigh, threw my hands up, and said forget it. I haven't needed it so far, so I probably won't need it anytime soon either.

    And yet the (stubborn) geek in me still wants to know if it's any better once it's actually up and running, because I know the kernel is supposed to be much cleaner and more optimized than Linux, so I doubt this will be my last attempt.

    1. Re:Not had a good experience by the_B0fh · · Score: 1

      And what the fuck does anything you said have to do with OpenBSD?

      Hint: OpenBSD is NOT Linux. It's *UNIX* so you have to understand slices.

    2. Re:Not had a good experience by sleepy_weasel · · Score: 1

      Real Admins know and love the powerful command line.

      GUIs are for Windows lovers...

      Here's the steps to run a GUI on OpenBSD

      1. Install openbsd (use the FAQ on www.openbsd.org to install)
      2. After install, reboot
      3. After reboot, login as a user (you should have set one... NEVER use root)
      4. type 'man afterboot' and read it
      5. to get a GUI, type 'startx' at the prompt, this is cwm, but you can install any of the other excellent window managers (I use scrotwm)
      6. If you require a bloated GNOME or KDE, you can install it using pkg_add (follow the instructions on the FAQ)

      Really, all it requires is 5 minutes of work to read the FAQ. Everything is in the FAQ, or in the well written man pages. OpenBSD even treats misspellings in man pages as bugs, and with the same severity as other bugs...

      If you still have a question, e-mail openbsd-newbies@sfobug.org... you can also e-mail misc@openbsd.org, but be sure to have done your homework if you ask a question...

      --
      It's all damned lies and statistics!! I mean 47% of all people use statistics to back up their arguments.
    3. Re:Not had a good experience by Staticharge · · Score: 1

      I don't run a GUI on any of the servers I've ever managed, and BSD won't be run on any of those, so that isn't the problem. I do however run GUIs on machines which monitor those systems, because it doesn't take a "Windows lover" to acknowledge the usefulness of an efficient interface (which I also develop). Implying that only someone with less intelligence or skill would use one is rather childish and isn't a good way to begin a response.

      The problem was that neither GNOME or X were installing to begin with, despite my attempts to use their menu during the install to do so. Even when I figured out the CLI package interface, I didn't know all the packages I would need for a complete GNOME system, since it apparently does not get all dependencies (such as Xorg itself). I know how to manually start and configure X as I've done it many times in the past (back when it was actually still necessary), but at the time I didn't feel like reliving years ago and dig around on the web on a different machine just to try the thing out. OpenBSD's install may have been different (I don't recall the details now), but the experience was essentially the same.

      I do appreciate your offer for help, but if I do try again, I will likely do my homework first. My point was simply that after experiencing so many years of Linux evolving, BSD was not a very intuitive experience. When I need a FAQ just to install it properly considering my background, then I feel I'm within my right to be a grumpy nerd about it.

      But hey, this is OpenBSD 5, so maybe it's better now. Maybe I'll get past the installer without it complaining about a lack of packages for the version, as the RC of FreeBSD did.

    4. Re:Not had a good experience by moderators_are_w*nke · · Score: 1

      I'm a KDE man myself and an occasional FreeBSD user. FreeBSD at least has meta-packages for the gnome and kde desktops that pull in all the dependencies for you. Sure, it's harder then Ubuntu, but then what isn't?

      --
      "XML is like violence. If it doesn't solve your problem, use more." - Anonymous Coward
    5. Re:Not had a good experience by iggymanz · · Score: 2

      How strange, OpenBSD even gives you option of automatic disk partition layout, they'll do it for you! on a DHCP network with typical desktop PC you could take defaults all the way except for providing root password and any username/password you want through the install, and have a bootable system in less than ten minutes. It's faster than installing typical GNU/Linux or Unix, that's for sure.

    6. Re:Not had a good experience by Anonymous Coward · · Score: 0

      from the FAQ

      export PKG_PATH=ftp://your.ftp.mirror/pub/OpenBSD/5.0/packages/`machine -a`/

      pkg_add gnome*

      (note: to install xorg you just select Yes when asked by the installer if you want to use X)

      btw it does automatically install dependencies

      Xorg -configure auto generates a config file so that X "just works"

      seriously its not rocket science, my friend who works in a different field than IT figured it all out and hes just good with computers no professional work with them

  34. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Anonymous Coward · · Score: 0

    You missed his point; he knows that BSD is not Linux, he was saying that this is just like Linux from 2005.

  35. I plan to upgrade sometime in the near future by BigDaveyL · · Score: 1

    I run OpenBSD/amd64 on a small Intel Atom box as a firewall.

    It is lightweight, fast and reliable - so it's served me well.

  36. Re:Wow! KDE 3.5 and Gnome 2.3 .... by cachimaster · · Score: 1

    I like gnome 3 too, I just found it too different and not really mature for the time being.
    As every human, I need time to adapt, and gnome 3 do not provide for a good backwards-compatible interface (there is one but is a hack and it sucks) .
    Even windows 8 has a fallback interface that looks exactly like windows 7.

  37. Netinstall: cd50.iso OR Base: install50.iso by Artemis3 · · Score: 1

    This is how you install Openbsd. You can download a small iso for your usb/cd, and that will download anything needed thru the net.

    Back in the version 3 days, you needed only a floppy or two to start such an install, nowdays is the same, but ppl mostly use usb sticks now (the floppy image still exists).

    Going for randomly made iso images on bittorrent was a very stupid idea. The only reason i could see someone needing a whole iso is if they lack connectivity.

    You can compare this install method to Debian netinstall, or Ubuntu minimal iso images.

    TIP: The installation and configuration guide is called "FAQ" for some reason.

    --
    Artix
    Your Linux, your init.
    1. Re:Netinstall: cd50.iso OR Base: install50.iso by tqk · · Score: 1

      The only reason i could see someone needing a whole iso is if they lack connectivity.

      If you're doing multiple installs, it'd be a lot nicer for their servers if you're not slurping down a fresh copy for every install.

      --
      "Tongue tied and twisted, just an Earth bound misfit ..." -- Pink Floyd.
    2. Re:Netinstall: cd50.iso OR Base: install50.iso by froggymana · · Score: 1

      The only reason i could see someone needing a whole iso is if they lack connectivity.

      If you're doing multiple installs, it'd be a lot nicer for their servers if you're not slurping down a fresh copy for every install.

      A lot of times for multiple installs you only install it on to one machine, and then image that computer. After that you just put that image on the other computers that you need it installed on. That way is often easier too since you don't need to reconfigure anything.

      --
      "To prevent this day from getting any worse, I'll just read ERROR as GOOD THING" 1GJU8xLuDKDxEs4KLf8fAGyptoDsqvEsBT
  38. I love OpenBSD by Anonymous Coward · · Score: 1

    The code is great. It's clean, understandable, and auditable.

    Best I've seen.

    Anyone who actually reads a decent portion of OpenBSD's cleaned up and perfected code, and its associated documentation, should fall in love with it.

    Unfortunately their weird 'security at the expense of anything' will steer a lot of people away from ever digging that far into it. Their loss.

  39. Best reason to use OpenBSD - It's not GNU. by Anonymous Coward · · Score: 0

    1. Somehow, Richard Stallman hasn't claimed that OpenBSD is also "the Gnu System".

    2. The installer reminds me of Slackware from 1993.

    3. The xdm desktop is totally Slackware from 1993.

    4. The fvwm desktop menu. Ah, the memories.

    openbsd 5.0.

    It's like 1993 all over again.

    W

    1. Re:Best reason to use OpenBSD - It's not GNU. by BigDaveyL · · Score: 1

      At the risk of feeding the troll... It should support more modern hardware than Slackware from 1993.

    2. Re:Best reason to use OpenBSD - It's not GNU. by Drinking+Bleach · · Score: 1

      1. Somehow, Richard Stallman hasn't claimed that OpenBSD is also "the Gnu System".

      Probably because it's not GNU, what a shocker. Even though it might sound pedantic of him to keep repeating it, he emphasizes the name GNU/Linux precisely because Linux filled in the kernel void where HURD failed to deliver. On GNU/Linux, you're using the GNU system, just not with the kernel they wanted (for better or worse). This is the same reason that Debian 6.0 and later have an install disc for GNU/kFreeBSD; it's GNU with the kernel of FreeBSD.

      OpenBSD (and FreeBSD) are not based on GNU; you can install GNU separately (typically with all their filenames prefixed with the letter g), but it's still not GNU.

    3. Re:Best reason to use OpenBSD - It's not GNU. by unixisc · · Score: 1

      What exactly does an OS need before one has to (in Stallman's mind) call it GNU/___? GCC? GTK+? GIMP? Emacs? How many/what % of the apps have to be from GNU before one is expected to use it w/ everything?

  40. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  41. Re:Wow! KDE 3.5 and Gnome 2.3 .... by thenewt · · Score: 1

    They're working the obsolescence angle. Nobody remembers how to compromise security on any OSS that old.

  42. ZFS performance? by LWATCDR · · Score: 1

    Any benchmarks with ZFS yet?

    --
    See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    1. Re:ZFS performance? by iggymanz · · Score: 1

      yes, Oracle still refuses to put a decent license on their wares. So once again they fail the OpenBSD's team's benchmark

  43. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Anonymous Coward · · Score: 0

    As far as the GUI is concerned maybe but usability is a whole other story. You think a regular person would enjoy compiling updates from source? That's not too big an issue for power users though. However...

    Besides that the biggest problems with OpenBSD on the desktop are poor performance and complete lack of any decent desktop virtualization for running things like Windows when needed. Hell, VirtualBox may be a poorly written piece of crap but it is open-source and even it isn't available for BSD.

    Virtualization is the future and BSD lags way behind in that area.

  44. The Little Devil Mascot by Anonymous Coward · · Score: 0

    .. in hindsight, was a bad move

  45. Versioning by Anonymous Coward · · Score: 0

    I like how they never fuck around with their version number. Just keep incrementing it as they should do.

  46. OpenBSD is dying. by Anonymous Coward · · Score: 0

    This news is clear evidence that OpenBSD's greatest years are coming to an end. With the advent of new and better operating systems such as Haiku and Puppy linux the old stalwart's days are numbered. If you want to install 5.0 and find out what the end really looks like, go right ahead. Nobody is stopping you.

  47. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Nightshade · · Score: 1

    I use OpenBSD for everything from online banking and web surfing with Chrome to playing games, to watching youtube and viewing PDFs and my photo collection. About the only desktop activity I can't do on OpenBSD is use Wine for windows emulation which isn't supported and probably never will be. But in a pinch they have qemu which I keep meaning to try out because unfortunately I still need to use MS Office for work. And I use gnome which very closely follows the latest releases. KDE is another story and is quite far behind but there's been a recent effort to finally get it updated and maybe the next release will have some of that work included.

  48. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Nightshade · · Score: 2

    They're actually far ahead in some areas. WiFi is a breeze to setup compared to some Linux distros. And they really do aim for extreely high standards (i.e. POSIX) compliance. The other area that's outstanding is the documentation. Most *commercial* products don't have the level of quality the openbsd documentation has.

  49. HAH! youare ignorant of IT security industry by iggymanz · · Score: 1

    Then why does the OpenBSD team have recognized leadership in the security industry, their wares are part of major OS such as HP/UX, Sun Solaris, sgi IRIX, and in products such as certain models of Cisco and Juniper routers and HP Procurve switches?

  50. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Compaqt · · Score: 1

    It's the "downgrade to upgrade" meme all over again. We saw it all the time with /. posters talking about "upgrading to XP" from Vista.

    Now it's playing out with Linux.

    --
    I'm not a lawyer, but I play one on the Internet. Blog
  51. Re:Wow! KDE 3.5 and Gnome 2.3 .... by makomk · · Score: 1

    I think later versions of Gnome are basically Linux-only, with a lot of desktop functionality being tied to low-level parts of Linux.

  52. Re:Wow! KDE 3.5 and Gnome 2.3 .... by Anonymous Coward · · Score: 0

    The -CURRENT Party line is that virtualization sucks. At least they've gotten around implementing multi-byte support, which used to be teh sucks. Maybe in 20 years, when the future is past.

  53. Re:Wow! KDE 3.5 and Gnome 2.3 .... by hrimhari · · Score: 1

    It's the tweeter syndrome. People only see the first phrase you typed.

    --
    http://dilbert.com/2010-12-13
  54. wrong!!!! by iggymanz · · Score: 1

    I was referring to the OpenSSH and OpenSSL implementations that the OpenBSD team developed from scratch.

    1. Re:wrong!!!! by LWATCDR · · Score: 1

      Remove one and renumber the rest then. WRONG!!!! Still not provably secure.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    2. Re:wrong!!!! by iggymanz · · Score: 1

      Yes, "real world" provably secure rather than your "ivory tower knothead" secure. The thing has stood the attacks of the wild, and has the admiration and use of experts in the field. the kind of audit and certification you are talking about means nothing, suppose the pathological liars of Gartner commissioned some agenda-driven study.....

    3. Re:wrong!!!! by LWATCDR · · Score: 1

      Real world provable?
      Dude get you panties out of a twist. I never said that OpenBSD was terrible or that it's security sucked. Heck if it supported XFS well, I would be tempted to use it for a SAN or NAS because it has such a good track record.
      Mindless fandom like you exhibit is unprofessional and frankly hurts the reputation of OpenBSD.
      I am sure that the OpenBSD team would love to have someone pay for a third party security audit of their code. I can understand that it is expensive and they do not have the resources to pay for it but without that you just have to go on their track record. Thing is that just because the last version is secure that doesn't mean this one is. Past performance is NOT a 100% effective predictor of current performance and past performance does show that they can make errors.
      Dud take a deep breath and calm yourself.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
  55. When's the next NBSD & FBSD? by unixisc · · Score: 1

    When will the next versions of NetBSD (5.2?) and FreeBSD (8.3?) be out?