Please create an account to participate in the Slashdot moderation system


Forgot your password?

+ - OpenBSD releases a portable version of its OpenNTPD

Submitted by Noryungi
Noryungi (70322) writes "Theo De Raadt roundly criticized NTP due to its recent security advisories, and pointed out that OpenBSD OpenNTPD was not vulnerable. However, it also had not been made portable to other OS in a long time. Brent Cook, also known for his work on the portable version of LibreSSL (OpenBSD cleanup and refactoring of OpenSSL) decided to take the matter in his own hands and released a new portable version of OpenNTPD. Everyone rejoice, compile and report issues!"

Comment: Do no evil, right? (Score 5, Insightful) 281

by Noryungi (#48600089) Attached to: Eric Schmidt: To Avoid NSA Spying, Keep Your Data In Google's Services

Here is my problem: Google has a long history of cooperating with NSA.

Don't believe me? Fine: read these links instead... Yahoo News article about cooperation between Google and NSA, Guardian article, Tom's Guide article.

Even if Google does not/did not/will not cooperate with NSA, Eric Schmidt himself has been cooperating with the US Government, which cast serious doubts about his desire to protect the private information of Google clients.

Again, don't believe me? Fine, read this instead: Julian Assange on Eric Schmidt. Or (even better) this transcript.

Even if Eric Schmidt does not cooperate with the US Government, he has said himself, repeatedly, that privacy is dead and that it's something for hackers.

Don't believe me? Fine, read this instead: EFF article, Gawker article.

In other words, a company that cooperated with the NSA, led by a man who does not care about your privacy (but cares very much about his) is telling you that there is nothing to see here, sure we are protecting your privacy, please buy our products, we are safe and professionals and there is nothing to be afraid of.

Seriously? How come this gasbag is a freaking CEO, paid millions of dollars a year?

Comment: Best Script Ever? (Score 1, Funny) 299

by Noryungi (#48591479) Attached to: Blade Runner 2 Script Done, Harrison Ford Says "the Best Ever"

From a man who starred in such unwatchable turds as "Indiana Jones and the Last Crusade"and "Indiana Jones and the Kingdom of the Crystal Skull"?

Shoot, those movies were just plain BAD. And that is NOT the kind of recommendation I expect for a new movie.

And before you flame me: yes, Harrisson Ford was in a shitload of great movies. But his glory days are over, and have been over, for at least 10 years now.

Comment: Speaking of what I know... (Score 2) 267

by Noryungi (#48429001) Attached to: Ask Slashdot: Workaday Software For BSD On the Desktop?

Both OpenBSD and NetBSD come with XFCE, OpenBox, Firefox, mplayer (or equivalent). NetBSD pkgsrc may be a bit closer to Gentoo than OpenBSD ports/packages, but both are excellent package systems. You may get more games with NetBSD, including Minecraft and others but I haven't checked, so don't quote me on this.

If you are used to Gentoo, picking one or the other should not be too difficult, but OpenBSD, while a bit picky when it comes to hardware, is also a bit easier to use: if a piece of harware is supported, it is supported. Period. NetBSD often requires compiling a specific kernel to add this or that peripheral. OpenBSD usually supports everything out of the box, as long as it is in its harware compatibility list. Plus, there is this schweet schweet security goodness, now with LibreSSL gooey core!

Here is a quick example: I have had a motherboard die on me. I just ripped off the main HDD out, put it into a slightly different machine, and OpenBSD just picked up the harware changes, reconfigured, checked the filesystems and worked without making a fuss. I have used OpenBSD for many years in a second-hand laptop, where everything was supported, and it was a pleasure to use as my main machine. The update procedure is quick and easy, and a new version of the OS comes out every 6 months like clockwork.

So there you go, hope this helps.

Comment: Re:I hope it... (Score 3, Insightful) 127

by Noryungi (#48377207) Attached to: Senate May Vote On NSA Reform As Soon As Next Week

Repeals the Patriot Act and shuts down Homeland Security. How many redundant players do we need to keep us safe?

As many as it takes to give tons of money to all the little cogs in the militaro-industrial complex.

Seriously, the USA were already spending more than everyone else in the world on its military (and its security apparatus, including the NSA), before 9/11.

Was this able to prevent the WTC/Pentagon attacks? No. And not just that, but Osama bin Laden was able to hide practically in plain sight for years, communicating all the time with his organization through written and recorded messages (meaning: outside the reach of the NSA).

Will the NSA be able to prevent the next 9/11? Let me go out on a limb and say "No" again. If the hard-core terrorists haven't got it by now, every single telecommunication in the world is being spied upon. The safest way is to organize the next attack by courier and letters, and not through electronic communications at all.

The Iraq war was all about oil, Halliburton and Exxon bottom line. Today's enless wars, conflicts and spying is all about keeping the money machine going strong, and the US Government doling mountains of cash to contractors and sub-contractors.

The whole thing will end very badly.

Comment: I have said it before... (Score 2, Insightful) 219

by Noryungi (#48327203) Attached to: Silk Road 2.0 Seized By FBI, Alleged Founder Arrested In San Francisco

... And I will say it again: if the FBI can arrest these people and bring down these ''black'' markets, who are supposed to be on Tor and protected by iron-clad crypto, it means only two things:

1. Tor is not as secure as everybody says it is (because _____ insert your favourite conspiracy theory/security failure here).

2. NSA/GCHQ, etc... justification for snooping on everyone (terrorists! drugs! guns!) is just complete and utter bull****. Hard detective work pays every time, and is probably more cost-effective than the massive surveillance and privacy violations we have right now.

Please note that 1 and 2 are not necessarily opposed to each other. We may well have 1 AND 2 at the same time..

Comment: And remember people... (Score 4, Interesting) 228

by Noryungi (#48308839) Attached to: New GCHQ Chief Says Social Media Aids Terrorists

Slashdot IS social media, which is why NSA and GCHQ created a fake Slashdot to hack into a Belgian Telecom company.

You dirty terrorists, you! Bad Slashdot! BAD!

Seriously, though, this is beyond belief and beyond the pale. Where do they get these morons? Most of these people are guilty of perjury (at best) and outright conflict of interests and gross violations of basic human rights at worst.

When is this going to stop and when are we going to get rid of these idiots? Where is Senator Franck Church when we need him?

Comment: Re:Puzzling (Score 1, Interesting) 162

by Noryungi (#48256023) Attached to: OpenBSD Drops Support For Loadable Kernel Modules

As an avid OpenBSD user and fan, this puzzle me because it would seem like a giant step backwards. Yes, loadable kernel modules do weaken the security some but it makes adding hardware drivers difficult.

Again: compiling the OpenBSD kernel is an emergency measure only. Most of the time, patches distributed by the project require you to compile the userland only.

As for adding device drivers, you usually do not need to: the standard kernel works very well with most hardware configurations.

I have motherboards burn on me, restarting the OpenBSD server usually was a question of taking the drive out of the machine, connecting it into a new machine and powering the system. The kernel just picked up and accepted whatever new hardware was in the replacement machine. Much, much easier than Linux.

Comment: Re:Not surprising. (Score 1, Informative) 162

by Noryungi (#48255993) Attached to: OpenBSD Drops Support For Loadable Kernel Modules

Yes, yes, little troll, you just demonstrated your total lack of knowledge when it comes to OpenBSD.

Straight from the horse's mouth:

And I quote the aforementioned:

Why do I need a custom kernel?

Actually, you probably don't.

The only time you need to recompile OpenBSD kernel is when a major security issue has been found and your system is vulnerable.

Comment: Re:Djeezus (Score 1) 162

by Noryungi (#48255911) Attached to: OpenBSD Drops Support For Loadable Kernel Modules

Well, I was surprised by the bitbucket link as well, but a lot of developpers (OpenBSD or not) use git these days. The repo linked to seems to be a copy of the official OpenBSD CVS.

A better link could be, for instance:


The interesting thing is that the diff just before Ted Unangst is more than 11 years old -- which means LKMs really haven't been used for a long time in OpenBSD...

User Journal

Journal: An unbiased comparison of Windows and OpenBSD

Journal by Noryungi

Freaking hilarious. A bit dated, but definitely still valid... ;-)

Money quote:


Web browser:

OpenBSD comes with a text based browser called lynx, which is limited in functionality. Windows comes with Internet Explorer. Let's face it: Internet Explorer is a hunk of crap.

Winner: OpenBSD

Text editor:

Comment: Re:Hilarious (Score -1, Flamebait) 97

by Noryungi (#48139609) Attached to: Windows Flaw Allowed Hackers To Spy On NATO, Ukraine, Others

Hmmm... NSA_KEY anyone?

Sure, sure, it's just a conspiracy theory BUT... Isn't it surprising (for instance) that Apple and Google both announced full-phone encryption recently, while Microsoft announced exactly... Nothing?

Oh, and one other thing: companies do not exist in a vacuum and have to respect the laws of the different jurisdictions they operate in. Microsoft has been condemned by the US Government in the past for anti-competitive behaviour. Think about this for a second.

Mathemeticians stand on each other's shoulders while computer scientists stand on each other's toes. -- Richard Hamming