@oclsc

Arch has #OpenBSD #nc twice in the AUR. One package applies all of the Debian patches. One does not.

But they won't have noticed this difference, since they added these to the AUR around the time that Debian stopped patching the if test.

https://aur.archlinux.org/packages/openbsd-netcat-tls

https://aur.archlinux.org/packages/openbsd-netcat-git

#NetBSD, #FreeBSD, and #DragonFlyBSD all use the Jackson netcat.c with the if statement as in the original, so their ncs will all do this too.

https://gitweb.dragonflybsd.org/?p=dragonfly.git;a=blob;f=crypto/libressl/apps/nc/netcat.c;hb=HEAD#l718

@cks
#netcat

Silly question of the #NetBSD folk… I know some of the BSD kernels (notably #FreeBSD, and once upon a time, #OpenBSD) were capable of Linux syscall emulation, meaning they could run Linux applications.

Is this still the case, and if so, does it extend to containerisation like #Docker? Platforms of interest would be `x86-64` and `aarch64`.

https://kb.shells.com/tutorials/NetBSD/Docker/ seems to suggest it was at least at one point, a thing, but the link to the Docker download site is a 404.

Live Stream of the NetBSD dev summit at BSDcan 2026, day 1

https://www.youtube.com/live/GLBcjfTXpJA

#NetBSD #bsdcan

#NetBSD booting on the ACube Systems Sam460ex!

https://dmesgd.nycbug.org/dmesgd?do=view&id=9016

#powerpc

Wishing all our *BSD 😈⛳🐡 friends an amazing time at @bsdcan in Ottawa!

#RUNBSD #FreeBSD #NetBSD #OpenBSD #BSD #BSDCan

Alt...

Still image from the movie Monsters Inc. Mike Wazowski seen from the back looking into a wide hallway with a group of monsters walking towards him. It has the text: Me watching my friends having fun without me.

@bpl

I'll look into it, thanks.

I don't care so much about the janky third-party external battery, but I'd like to keep the original internal battery in good condition. If it doesn't look like I can do that with NetBSD, I might go to OpenBSD instead.

I still want to try and #NetBSD on some hardware though.

Of course it is a glorious day but BSDCan is likely to be wet. Typical.

https://weather.gc.ca/en/location/index.html?coords=45.403,-75.687

#BSDCan #OpenBSD #NetBSD #FreeBSD #DragonFlyBSD #BSD

Preparing a patch NetBSD userland tools to accept long options if, and only if, preceded by an emdash. If we're going to do it, we do it properly.

#NetBSD

@governa

"Nuanced" debate over LLM bug discovery aside, this just makes it feel like even more of a good time to try #NetBSD, to me.

@nixCraft

No hate towards my BTW brethren, but this is why I bounced from CachyOS to #Devuan on my laptop last night.

Planning on switching this laptop from #FreeBSD to #NetBSD soon.

portability(TM) #netbsd #pkgsrc #tigersrc

* alix3d3 (i586) - it finds out what uses SSE2 when it shouldn't
* er4 (evbmips64n64eb) - it finds out when things hardcode a list of supported archs
* mac mini (powerpc; usually runs darwin) - it finds out when things don't specify a c/c++ lang std
* olimex a64 (aarch64) - it finds out when the arm drivers get too piney.
* banana pi (earmv7hfeb) - ugh.
* blade 150 (sparc64, bottom) - it finds out EVERYTHING.

100% not running 24/7.

Alt...

some smaller computers that run netbsd piled on top of a larger one that runs netbsd. see post body for descriptions of computers in this image.

https://www.flickr.com/photos/dyanora/52907815419/in/album-72177720308387859

2023 BSDCan group photo.

Yes @stefano
I'll get the rest of the photos up soooooon.

#BSD #FreeBSD #OpenBSD #NetBSD #DragonFlyBSD

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟲/𝟭𝟱 (Valuable News - 2026/06/15) available.

https://vermaden.wordpress.com/2026/06/15/valuable-news-2026-06-15/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

Why is the FreeBSD Project home page the #2 result when using DuckDuckGo to seek NetBSD in the freebsd.org domain?

<https://duckduckgo.com/?ia=web&t=h_&q=NetBSD+site%3Afreebsd.org>

There's no mention of NetBSD at the home page, or about FreeBSD:

<https://www.freebsd.org/>, <https://www.freebsd.org/about/>

Google Search results are less confused than DuckDuckGo:

<https://www.google.com/search?q=NetBSD+site%3Afreebsd.org&udm=14>

#DuckDuckGo #Google #FreeBSD #NetBSD

It's been a hot humid time lately but of course it is predicted to be wet as usual for BSDCan.org

https://weather.gc.ca/en/location/index.html?coords=45.403,-75.687

#BSD #FreeBSD #OpenBSD #NetBSD #DragonFlyBSD #Ottawa #BSDCan

Getting closer by the day...

The European *BSD event of 2026! 😈⛳🐡

Get your 🎟️ at https://tickets.eurobsdcon.org/eurobsdcon/brussels/

While you're at it, don't forget to drop your abstract like it's hot! 🔥
https://events.eurobsdcon.org/

We are still and always looking for first-time *BSD speakers.
Whether you are just starting out or have a unique perspective to share, your voice matters!

The schedule will be published on 🗓️ 2026-07-15

For everything else, peek at https://2026.eurobsdcon.org/
More information is added all the time.

EuroBSDCon 2026 in Brussels, Belgium 🇧🇪
September 09-13, 2026

#RUNBSD #FreeBSD #NetBSD #OpenBSD #EuroBSDCon #EuroBSDCon2026 #BSD #CFP #Conference #Register

One year ago, today.

"Why and how we're migrating many of our servers most of our servers from Linux to the BSDs" - aka, "I solve problems"

https://www.youtube.com/watch?v=UnVp25-6Qao

#RunBSD #BSDCan #FreeBSD #OpenBSD #NetBSD #DragonflyBSD

@moses_izumi @hikari @AnachronistJohn

#NetBSD definitely deserves some love for being one of the very few, and perhaps the most featureful Operating Systems that has a strong #NOAi stance.❤️‍🔥

I definitely want to start supporting them. I need to get on that.

Kinda postmortem:

1) The maximal log size before rotation and count of gzipped logs to store should be increased in the newsyslogd configuration. This should be applied to any service, which is looking into the void^WInternet. So, I will not loss log records, related to the start of attack…

2) Also, Asterisk log should be added to newsyslogd configuration first. It weren't added here, so *.log files became too big (> 1 Gb) and of course fail2ban ate a lot of memory while parsing these big logs. If they were rotated properly, then fail2ban will not eat so much memory, parsing small enough files.

3) Since start of attack in logs were lost, then I could only imagine possible root cause of an attack. By default, any IP, which once failed to provide the proper credentials to login somewhere in my kitchen server, is banned immediately and forever.
But somehow those attackers managed to use just 2 IPs to make an attack and they weren't banned before manual intervention

According to fail2ban logs they were banned, but they were obviously not banned by npf. So, I think, they started attack right in time when my blacklists were successfully updated and npf was reloading — as a result their IPs appeared as "banned" in the fail2ban, but the fail2ban failed to ban them via npf, so "IRL" their IPs still weren't banned. Time to revisit my script to update blacklists

4) Looks like I need to install some Intrusion Detection System (possibly snort since it is mature enough). It isn't good to rely only on one mechanism (fail2ban + blacklists + npf) to protect my precious machine.

#NetBSD #selfhosting #fail2ban #npf

Kinda postmortem:

1) The maximal log size before rotation and count of gzipped logs to store should be increased in the newsyslogd configuration. This should be applied to any service, which is looking into the void^WInternet. So, I will not loss log records, related to the start of attack…

2) Also, Asterisk log should be added to newsyslogd configuration first. It weren't added here, so *.log files became too big (> 1 Gb) and of course fail2ban ate a lot of memory while parsing these big logs. If they were rotated properly, then fail2ban will not eat so much memory, parsing small enough files.

3) Since start of attack in logs were lost, then I could only imagine possible root cause of an attack. By default, any IP, which once failed to provide the proper credentials to login somewhere in my kitchen server, is banned immediately and forever.
But somehow those attackers managed to use just 2 IPs to make an attack and they weren't banned before manual intervention

According to fail2ban logs they were banned, but they were obviously not banned by npf. So, I think, they started attack right in time when my blacklists were successfully updated and npf was reloading — as a result their IPs appeared as "banned" in the fail2ban, but the fail2ban failed to ban them via npf, so "IRL" their IPs still weren't banned. Time to revisit my script to update blacklists

4) Looks like I need to install some Intrusion Detection System (possibly snort since it is mature enough). It isn't good to rely only on one mechanism (fail2ban + blacklists + npf) to protect my precious machine.

#NetBSD #selfhosting #fail2ban #npf

@sjvn What a perfect candidate for #NetBSD (of course)! 🚩 ​​

BSDCan next week.
See you there!

https://www.bsdcan.org/2026/

#OpenBSD #NetBSD #FreeBSD #DragonFlyBSD #BSD #Ottawa

@bobjonkman So long as it, of course, runs #NetBSD. 🚩 ​

By the way, our first two publications on evaluating #OpenBSD mitigations are out. Both of these papers evaluate some amd64 anti-ROP mitigations: specifically changing the register selection order and semantically equivalent rewriting of instructions that may produce a potential polymorphic gadget instruction. This tracks a paper by mortimer@ back in 2019 at AsiaBSDCon.

The TL;DR is "OpenBSD can shrink binaries a little and gain a little performance without any security loss simply by reverting these mitigations." The mitigations did not hold up to independent evaluation.

The first paper did an exact 1:1 port of these mitigations to FreeBSD and found that register reallocation eliminates only about 0.3% of unique gadgets, for a 0.5% increase in binary size (mortimer@ claimed 6% reduction and "entirely free"). It is useless at best but more likely actively detrimental, as it produces a false sense of security. It also found the instruction rewriting reduces unique gadgets by about 3.5% with a binary size increase of about 1.8% (mortimer@ claimed 5% reduction with 0.15% binary size increase).

We then did a separate implementation of the instruction rewriting mitigation to GCC in the second paper. Our GCC implementation does the older <xchg; op; xchg> dance, as that's what mortimer@'s paper described. This is way worse; producing about a 3% performance hit for no security benefit at all.

The only part of both mitigations worth saving is for basic arithmetic, OpenBSD LLVM now takes advantage of the fact that basic arithmetic has two forms. For example, the newer instruction rewriting mitigation turns
addq %rax, %rbx (48 01 c3)
into
{load} addq %rax, %rbx (48 03 d8)

The new instruction rewriting mitigation is genuinely free in terms of binary size and execution speed, but doesn't move the security needle, so this one can stay as it is harmless. Other rewritings still have the flaw of increasing binary size and reducing performance for no security benefit.

Anyhow feel free to read the papers:
https://ieeexplore.ieee.org/abstract/document/11458911
https://www.researchgate.net/publication/405728967_A_Final_Return_for_OpenBSD_Anti-Return-Oriented_Programming_Mitigations

#BSD #FreeBSD #NetBSD #DragonFlyBSD #Linux #Unix #security #cybersecurity

Some graphs from #Munin with LLM-bots attacking my kitchen server.
Graphs spans to the whole week, so on the left there is a normal state of my server. And on the right — attack is happening.

#NetBSD #LLM #AInt #selfhosting

Alt...

Graph of CPU usage, which going high after LLM bots attack (at near 08 Jan Monday). At near 2 CPU cores were used by LLM bots, trying to abuse my PBX as an Web-server.

Alt...

Graph with main network interface bits per minute — before attack there were almost no data receivin/transmitting, only some cron jobs at night. But after attack there are at near 20 Mb per minute both receiving and transmitting.

Alt...

Graph with PostgreSQL connections. Active connections has green color. Before the attack there are almost no active connections, but after attack there are a lot of them, since Asterisk using PostgreSQL as a main backend.

Alt...

Load average for my server. After attack it increased at near 4 times.

As the #FreeBSD pkg of the postgis extension is not tied to a database version and the #NetBSD one seems to be, I moved the geo databases to the former. The rest, to NetBSD.
Zabbix, on the other hand, might need to be a little more performant. We'll see.

1204605:20260608:155730.445 slow query: 6.477221 sec, [...]

Plan is to move Zabbix back to the faster machine when #PostgreSQL18 is set.

(15 minutes down time for export, copy, import, restart).

Alt...

Temperature of a CPU, with a gap for the database switcheroo.

Who was at BSDCan.org 2016?
Remember this?

https://www.cbc.ca/news/canada/ottawa/ten-years-ago-a-sinkhole-tore-up-rideau-street-it-could-have-been-much-worse-9.7224904?cmp=Mastodon

Those of us in Desmarais remember the lights flickering!

Speaking of which, the conference is open to anyone walking in off the street. Might interest some Ottawa natives as well.

#BSD #FreeBSD #OpenBSD #NetBSD #DragonflyBSD #Ottawa