Slashdot Mirror

← Back to Stories (view on slashdot.org)

OpenBSD 5.3 Released

Posted by Unknown on from the time-to-dump-core dept.

An anonymous reader writes "Today, OpenBSD 5.3 has been released. It has many improvements, updates, and new stuff. Also, OpenSMTPD 5.3 is included. This is the first version of OpenSMTPD considered to be ready for production. Many pre-built packages are available for many architectures. OpenBSD 5.3 ships with various Desktop Environments, including Gnome 3.6, KDE 3.5, and XFCE 4.10." And don't forget the release song, "Blade Swimmer."

7 of 109 comments (clear)

  1. BSD, ftw! by Leafwiz · · Score: 4, Insightful

    :)

  2. OpenBSD is very cool by Anonymous Coward · · Score: 5, Interesting

    OpenBSD is very cool. It's amazing what Theo and team have done over the years, and sadly, they don't get the cred they so richly deserve: OpenSSH, OpenBGP, pf, etc., and an awesome operating system that just works out of the box.

    I'm very surprised more has not been done with OpenBSD. If I ran a company of any kind, it would be OpenBSD on the servers and Linux on the desktop. I would trust nothing else on my servers. I've worked with OpenBSD professionally and it's a joy to use an easy, well-documented system.

    Kudos to you, Theo!

    1. Re:OpenBSD is very cool by Anonymous Coward · · Score: 3, Interesting

      You're right! Their code quality is over-hyped. OpenBSD code isn't appreciably better than experienced Linux and GNU developers, although they do favor portability more than most.

      What sets OpenBSD apart is a reluctance to write a shit ton of new code, and to inflict it on the world. Great developers write buggy code on occasion; developers with an eye to security and reliability choose to write less code.

      Just about _any_ Linux box could be easily rooted from the shell because there's so much code churn in the kernel and elsewhere. Linux security is no better than Windows at this point (and all the policy won't save you when the kernel is buggy). However, I would be cautiously optimistic that a stock OpenBSD box could resist being rooted from the shell.

    2. Re:OpenBSD is very cool by Anonymous Coward · · Score: 3, Interesting

      There is some truth to what you say. However, as an experienced IT security guy, one thing that makes OpenBSD "better" than Linux out of the box is its simplicity. Complexity is the enemy of security. And, more importantly, you did allude to the fact that security is a process, not a product. If I get root on anything, I own the box. Secret is to not allow this remotely. Use SSH keys, not SSH passwords for access. Use Radius, Kerberos, and others as a defense-in-depth measure, not just SSH. SSH alone might be fine for an at-home server, but in the real world, it's not.

      OpenBSD has better than Linux security out of the box because they do keep it simple. Theo and team understand that complexity is the enemy of security, and the tenets of UNIX also dictate that things be kept simple, that a program should do one thing and one thing well. Pipes exist to make complex commands and shell scripts to automate.

      OpenBSD is still a breath of fresh air in regard to code audits. While their code may not be the best, it's the most audited of any OS I'm familiar with, and it generally just works with little trouble.

      OpenBSD: not for everyone, but for those discriminating enough to want a very solid base from which to build certain services-based servers and gateways/firewalls.

  3. Re:Let us rejoice! by cold+fjord · · Score: 3, Informative

    But seriously, it looks like a great set of improvements. It is also great to have a new stable choice for mail transfer.

    Subject: Announce: OpenSMTPD 5.3.1 released

    OpenSMTPD 5.3.1 has just been released and the archives are available at
    our main site: www.OpenSMTPD.org

    OpenSMTPD is a FREE implementation of the SMTP protocol with some common
    extensions. It allows ordinary machines to exchange e-mails with systems
    speaking the SMTP protocol. It implements a fairly large part of RFC5321
    and can already cover a large range of use-cases.

    It runs on OpenBSD, NetBSD, FreeBSD, DragonFlyBSD, MacOSX and Linux.

    OpenSMTPD presentation is here.

    --
    much of left-wing thought is a kind of playing with fire by people who don't even know that fire is hot - George Orwell
  4. my favorites by anarcat · · Score: 5, Informative

    My favorite improvements:

    * OpenSMTPd - can't have too many solid mail servers out there
    * OpenSSH 6.2 - new crypto algorithms and other goodies
    * pf improvements - sloppy state tracking for ICMP
    * relayd and OpenBGPd improvements

    now the question is: how long until those trickle down to sister projects like FreeBSD or Debian/kFreeBSD?

    --
    Semantics is the gravity of abstraction
  5. Re:v1.0 not production ready ... by X0563511 · · Score: 3, Insightful

    OpenBSD is not Ubuntu. Changes are not made because they feel like it.

    --
    For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...