From the Leanpub Blog: Leanpub Book LAUNCH 🚀 Three Essays on NetBSD by Chris Pinnock

https://leanpub.com/blog/leanpub-book-launch-three-essays-on-netbsd-by-chris-pinnock/

#books #leanpublishing #selfpublishing #NetBSD #ELF #BSD #OpenBSD #operatingsystems

@nixCraft

When I saw Theo's name mentioned, I was hoping that it would be a new thread talking about how they're going to excise all the slop from #OpenBSD. 😓

Hey #openbsd people.

What are some low-cost low-energy machines to run OpenBSD ?

Theo de Raadt: "You've been smoking something mind altering" (2007)

https://marc.info/?l=openbsd-misc&m=119318909016582

#openbsd

Theo de Raadt: "You've been smoking something mind altering" (2007)

https://marc.info/?l=openbsd-misc&m=119318909016582

Comments: https://news.ycombinator.com/item?id=48882189

#HackerNews #Theo #de #Raadt #OpenBSD #TechCommunity #MindAlteration #2007

a great example of why you unveil on #OpenBSD is such a good thing:

https://infosec.place/objects/47f4e1fa-0fb1-4c29-ab5a-660e5a64f4cb

Out of desperation, I updated the BIOS - something I have never done before, oops - and now it seems to be working again. For updating, I created a bootable USB flash stick from the ISO on #OpenBSD, following this blog post: https://blog.raveland.tech/post/thinkpad_update_bios/

Computers are weird machines.

📄 A Final Return for OpenBSD Anti-Return-Oriented Programming Mitigations

｢ We bring this mitigation, originally developed for the custom OpenBSD implementation of the LLVM compiler suite, to GCC by way of a standalone utility that sits in between the compiler and the assembler and rewrites potential gadget instructions before assembly into object code ｣

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6869668

#openbsd #bsd #cybersecurity

#engkiosk hörenswerter Podcast mit Johannes Näder zum Thema Openwashing, wenn Open Source nicht wirklich offen ist.

#digitale_souveranitat #Openwashing #publicmoneypubliccode #foss #freiesoftware #isitreallyfoss #linux #FreeBSD #OpenBSD #freiheit

https://engineeringkiosk.dev/podcast/episode/274-openwashing-wenn-open-source-nicht-wirklich-offen-ist-mit-johannes-n%C3%A4der/#headline-content

• #protectli vp2430 with #openbsd
• #projectaudio dac box s2+
• #tonefactory amp s
• #tonefactory speaker l
• #logitec pebble 2 combo
• #samsung frame tv
  

  Alt...

  line diagram of my media player setup: tv, openbsd server, dac, stereo amplifier, speakers, keyboard, mouse

current setup:

openbsd -- usb dac -- apm -- speakers
openbsd -- hdmi tv

Alt...

dac box s2+

Upgraded "Tianve", my HP 250 G3 notebook to OpenBSD 7.9-current.
All is well.

https://mastodon.bsd.cafe/@Tionisla/116636336058010823

#OpenBSD #RunBSD #LXQt

Tionisla » 🌐 2026-05-25
@Tionisla@mastodon.bsd.cafe

Secondary: "Tianve" - HP-250 G3
Operating System: OpenBSD 7.9 amd64
Desktop: LXQT 2.2.0
Windowmanager: XFWM4
Qt Version: 6.10.2
Graphics Platform: X11/xenocara

https://bsd-hardware.info/?probe=23dc29b97f

#runbsd #openbsd #fishlinux #unix #foss #lxqt #desktop #screenshot #shareyourdesktop

Alt...

Screenshot of OpenBSD running LXQT as Desktop environment Styling: Qogir-Manjaro gtk2/3/xfwm, QT theming via qt6gtk2/qt5gtk2 LXQT Panel: Graphite Icons: Qogir-Manjaro Wallpaper: Dancers by @orbite There's a panel with some pinned icons floating on the left, a qterminal running a minimal neofetch with some system stats. At the bottom is a floating panel with two desktop switcher buttons. In the bottom right corner there's an OpenBSD Pufferfish icon (https://logodix.com/logos/1867876) labeled with LXQT Desktop and its logo. Above are two badges with slogans dealing with cancer.

then i discovered that openbsd doesn't support audio over hdmi and my openbsd server doesn't have analog audio output, obviously.

my tv had been connected to a stereo amplifier anyway, so my setup is actually even better now: a dedicated usb dac connected directly to the amplifier.

We really appreciate the work done on the TLS settings in relayd(8) and httpd(8).

It makes it even easier to get a tried and tested secure connection to your favorite OS and service!

"Both relayd(8) and httpd(8) now have the "secure" list of allowed crypto methods for HTTPS, which include TLSv1.3 and the TLSv1.2 AEAD cipher suites.

The previous list was "HIGH:!aNULL" which contain non-perfect-forward-security methods and this change may cause old clients to not be able to connect."

Source: https://undeadly.org/cgi?action=article;sid=20260629165750

Hat Tip to @sizeofvoid and others!

#RUNBSD #OpenBSD

Alt...

Meme of "The Most Interesting Man in the World" is an advertising campaign for Dos Equis beer featuring actor Jonathan Goldsmith as a bearded, debonair older gentleman with voiceovers that were both humorous and outrageous. It has the text: I don't always tip, but when I do, it's my hat. Source: https://en.wikipedia.org/wiki/The_Most_Interesting_Man_in_the_World

The single downside of running a mailserver with a modern CPU and NVMe storage is that sysupgrade blasts through it so fast that it does not allow to fetch a coffee (or whatever).

2m16s from running sysupgrade -s to it being back in production.

What a complete and utter madness.

#OpenBSD #OpenSMTPD

Pique adversial computing: we have silently switched out a part of the government email infra from US Big Tech to EU, #OpenBSD / #OpenSMTPD based infra.

How do you like us now Bezos? 😈

🌗 NVD - CVE-2026-57589 安全漏洞公告
➤ OpenBSD 核心漏洞解析：權限提升風險與防範
✤ https://nvd.nist.gov/vuln/detail/cve-2026-57589
美國國家漏洞資料庫（NVD）近日發布了針對 OpenBSD 作業系統的安全性通報。該漏洞（編號 CVE-2026-57589）存在於核心組件 `sys/kern/sysv_sem.c` 中，影響版本涵蓋至 7.9。攻擊者可利用此「釋放後使用」（Use-After-Free）漏洞，在特定情境下進行權限提升，進而取得系統根權限（Root）。目前相關單位已確認該問題與 `sys_semget()` 函數中的背景切換處理不當有關。
+ OpenBSD 一向以安全性著稱，這次出現 Use-After-Free 導致提權的問題，確實令人驚訝，建議管理員儘速檢查覈心版本。
+ `sys_semget()` 的背景切換問題通常極難偵測，這次能被挖掘出來並修復，證明瞭開源社羣對底層代碼的審計強度。
#資訊安全 #漏洞分析 #OpenBSD #Use-After-Free

Trying to organize all my #OpenBSD guides/tutorials into a single place (mostly for my future self)

https://openbased.xyz/

(Also being served by my local HP T630 running OpenBSD as a bonus 😜)

I finally published the CWM configuration I use on Slackware-current as a practical example of that approach.

The repository keeps CWM focused on window management, while sxhkd, small shell scripts, and shared .xinitrc components provide a portable desktop workflow that can be reused across different WMs.

Repository:
https://git.sr.ht/~r1w1s1/cwm-config

Background:
https://r1w1s1.srht.site/posts/window-manager-agnostic-workflows/

#OpenBSD #Slackware #Linux #X11 #cwm #Unix

Mark the date, OpenBSD has a local root security hole. Very rare!

#openbsd #cve

https://nvd.nist.gov/vuln/detail/cve-2026-57589

Amazing… just solved* a problem on my #OpenBSD desktop thanks to a tiny program posted to a mailing list back in 12002: https://marc.info/?l=netbsd-users&m=103719000328428&w=2

The layers of awesomeness here:
• the code is tiny enough to know it contains no nasties
• it compiles without any changes
• it still does the job it was programmed for
• it works around the problem I have today (xenodm crashes on resume)
• the author wrote it to work around the same problem
• 23½ years ago!

OpenBSD has a use-after-free allowing local privilege escalation to root

https://nvd.nist.gov/vuln/detail/cve-2026-57589

#gov #openbsd

OpenBSD has a use-after-free allowing local privilege escalation to root

https://nvd.nist.gov/vuln/detail/cve-2026-57589

Comments: https://news.ycombinator.com/item?id=48831658

#HackerNews #OpenBSD #UseAfterFree #PrivilegeEscalation #Cybersecurity #Vulnerability #CVE-2026-57589

Oh, joy! 😒 A riveting tale of OpenBSD's latest "oopsie-daisy" moment, where users can magically escalate privileges—because who doesn't love a good #security blunder? Meanwhile, the article itself is a masterpiece of accessibility: blocked by Cloudflare like a bouncer at a club for nerds. 🕵️‍♂️🔒
https://nvd.nist.gov/vuln/detail/cve-2026-57589 #OpenBSD #Blunder #Accessibility #Issues #HackerNews #PrivilegeEscalation #HackerNews #ngated

Academic studies of OpenBSD’s features and their practical impact on security are somewhat rare, but we were pleasantly surprised to see the recent paper A Measurement Study on the Adoption of Pledges and Unveils in the OpenBSD Operating System, by Jukka Ruohonen, Krzysztof Sierszecki, Abhishek Tiwari (all at University of Southern Denmark).

RE: https://infosec.exchange/@BleepingComputer/116883360054214680

I guess if you run #OpenBSD on their hardware you are not affected 🤭

OpenBSD's pledge(2) and unveil(2) are developer-friendly, study finds https://www.undeadly.org/cgi?action=article;sid=20260708055608 #openbsd #security #pledge #unveil #development #programming

OpenBSD's pledge(2) and unveil(2) are developer-friendly, study finds #openbsd
https://undeadly.org/cgi?action=article;sid=20260708055608

RE: https://mastodon.social/@openbsdjournal/116882846854329956

“The paper studies the adoption of the pledge(2) and unveil(2) in the #OpenBSD base system and packages over time, and finds that the features provided actually seem to facilitate adoption of secure coding practices.”

OpenBSD Journal RSS 🤖 » 🤖 🌐 2026-07-08
@openbsdjournal@mastodon.social

OpenBSD's pledge(2) and unveil(2) are developer-friendly, study finds #openbsd
https://undeadly.org/cgi?action=article;sid=20260708055608

OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root (CVE-2026-57589) https://lobste.rs/s/7hmu0w #openbsd #security
https://nvd.nist.gov/vuln/detail/cve-2026-57589