DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD General

OpenBSD General Other questions regarding OpenBSD which do not fit in any of the categories below.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 18th December 2014
muflon muflon is offline
Fdisk Soldier
 
Join Date: Jul 2013
Location: Poland
Posts: 56
Default OpenBSD - papers, publications

"The number of UNIX installations has grown to 10, with more expected."
-> The UNIX Programmer's Manual, 2nd Edition, June, 1972.

----------------------------------------
A) OpenBSD - papers, publications
----------------------------------------


[1] Boutaba A., Murenin C.A., OpenBSD HARDWARE SENSORS FRAME WORK. A unified and ready to use system for hassle-free hardware monitoring., 2009 -[pdf]

[2] Brauer H., The surprising complexity of TCP/IP checksums in the network stack, 2013 - [pdf]

[3] Britt A.M., Data Structures Used in the OpenBSD Kernel, 2012 -[pdf]

[4] Burnside M., Keromytis A.D., Raadt de, T., Wright J.L., Cryptography As An Operating System Service: A Case Study, ACM, 2006[/I] -[pdf] [u1]

[5] Callahan B., OpenBSD: a crash course, 2014 -[pdf] [Also look at part C) Miscellanea - to hear the recorded and related version to this conference]

[6] Callahan B., Intro to OpenBSD, 2014 - [pdf]

[7] Faurot E., OpenSMTPD: We deliver!, 2013 -[pdf] [u1]

[8] Guillaume K., SECURITY : OPENBSD VS FREEBSD, 2014 - [html] [blog entry]

[9] Hartmeier D., Firewall Management, 2006[?] - [html]

[10] Hartmeier D.,Firewall Ruleset Optimization, 2006[?] - [html]

[11] Hartmeier D.,Testing Your Firewall, 2006[?] - [html]

[12] Jeker C., OpenBGPD bringing full views to OpenBSD since 2004, 2009 -[pdf] [u1]

[13] Jeker C., Oppermann A., The Design and Implementation of OpenBGPd, 2004[/I] -[pdf] [u1]

[14] Keromytis A.D., Raadt de, T., Wright J.L., The Design of the OpenBSD Cryptographic Framework, Usenix, 2003 -[pdf] [u1]

[15] Kirillov V., OpenBSD Kernel Internals - The Hitchhiker's Guide, 2009 -[pdf]

[16] Lawrence T., Managing 600 OpenBSD-based Firewalls in Microsoft-Centric Small and Medium Businesses, 2010 - [pdf] [u1]

[17] Miller D., Secure Portability, 2005 -[pdf]

[18] Miller D., Security measures in OpenSSH, 2007 -[pdf] [u1]

[19] Miller D., What's new in OpenSSH?, 2011 -[pdf] [u1]

[20] Miller T. C., Raadt de, T., strlcpy and strlcat — consistent, safe, string copy and concatenation, Usenix, 1999 -[pdf] [u1]

[21] Millican E., Building an IPv6 Firewall with OpenBSD, ? - [pdf]

[22] Murenin C.A., History of the OpenBSD - Hardware Sensors Framework, 2008 -[pdf]

[23] Murenin C.A., OpenBSD Hardware Sensors: Environmental Monitoring and Fan Control, 2010 -[pdf]

[24] Schneeberger C., Firewalling IPv6 with OpenBSD's pf (packet filter), 2003 - [pdf]

[25] Schiffman M., The Belt And Suspenders Approach [OpenBSD Kernel Enhancements], 1998 -[pdf] [u1]

[26] Schwarze I., Let’s make manuals more useful!, 2014 -[pdf]

[27] Schwarze I., Let’s make manuals more useful!: Tutorial on software documentation, 2014 -[pdf]

[28] Schwarze I., New trends in mandoc: Enhancing the modern toolbox for the classic documentation formats, 2014 -[pdf]

[29] Unangst T., rthreads: A New Thread Implementation for OpenBSD, 2005 -[pdf] [u1]

[30] Urig V., IPv6 HowTo for OpenBSD, 2008 -[pdf]

[31] GPU Accelerated Cryptography as an OS Service, 2009 - [pdf]


-------------------------------
B) BSDTalk Interviews:
-------------------------------


[1] bsdtalk236 - NYCBSDCon 2014 with Brian Callahan and Ike Levy (December 21, 2013) - Interview with Brian Callahan and Ike Levy about the upcoming NYCBSDCon 2014.


---------------------------------------------------------
C) Miscellanea [Video/Audio Interviews-Presentations, etc.]:
---------------------------------------------------------


[1] Interview with Henning Brauer , (ruBSD 2013) - [YouTube]

[2] BSD Now 38 - A BUG's Life; "This week on the show we'll be chatting with Brian Callahan and Aaron Bieber about forming a local BSD users group." - [YouTube]

[3] Brian Callahan, OpenBSD: a crash course, at NYC*BUG, January 2014 - [mp3]

[4] Interview with Theo de Raadt, (ruBSD 2013) - [YouTube]

Last edited by muflon; 28th December 2014 at 10:58 PM.
Reply With Quote
  #2   (View Single Post)  
Old 20th December 2014
sacerdos_daemonis's Avatar
sacerdos_daemonis sacerdos_daemonis is offline
Real Name: Will forever be a secret.
Spam Deminer
 
Join Date: Sep 2014
Posts: 283
Default

What about Lucas, Michael W., Absolute OpenBSD, UNIX for the Practical Paranoid, 2013?
Reply With Quote
  #3   (View Single Post)  
Old 20th December 2014
muflon muflon is offline
Fdisk Soldier
 
Join Date: Jul 2013
Location: Poland
Posts: 56
Default

Quote:
Originally Posted by sacerdos_daemonis View Post
What about Lucas, Michael W., Absolute OpenBSD, UNIX for the Practical Paranoid, 2013?
Moin sacerdos_daemonis,

My intention with creating this [and NetBSD] Topic, was to published here only those documents, books.. that are publicly available for download.

But Yes, If you wish You can also add here - for notice reason - also those that are "listed" on bookstore shelves

Salut!
Marcin
Reply With Quote
  #4   (View Single Post)  
Old 20th December 2014
hitest's Avatar
hitest hitest is offline
Real Name: George Nielsen
VPN Cryptographer
 
Join Date: Sep 2008
Location: B.C., Canada
Posts: 373
Cool

Quote:
Originally Posted by sacerdos_daemonis View Post
What about Lucas, Michael W., Absolute OpenBSD, UNIX for the Practical Paranoid, 2013?
A wonderful read. Michael writes with clarity and wit.
__________________
hitest
Reply With Quote
  #6   (View Single Post)  
Old 20th December 2014
ibara ibara is offline
OpenBSD language porter
 
Join Date: Jan 2014
Posts: 783
Default

Quote:
Originally Posted by muflon View Post
My talk was also recorded and audio (with these slides) are available here:
http://www.nycbug.org/index.cgi?acti...id=10343#10343
In other news, there is a slightly updated/broader version of that talk I gave here:
http://devio.us/~bcallah/openbsdrpisec.pdf
Reply With Quote
  #7   (View Single Post)  
Old 20th December 2014
hitest's Avatar
hitest hitest is offline
Real Name: George Nielsen
VPN Cryptographer
 
Join Date: Sep 2008
Location: B.C., Canada
Posts: 373
Thumbs up

Quote:
Originally Posted by ibara View Post
My talk was also recorded and audio (with these slides) are available here:
http://www.nycbug.org/index.cgi?acti...id=10343#10343
In other news, there is a slightly updated/broader version of that talk I gave here:
http://devio.us/~bcallah/openbsdrpisec.pdf
Thanks, ibara. Enjoying your lecture now.
__________________
hitest
Reply With Quote
  #8   (View Single Post)  
Old 20th December 2014
Oko's Avatar
Oko Oko is offline
Rc.conf Instructor
 
Join Date: May 2008
Location: Kosovo, Serbia
Posts: 1,102
Default

Quote:
Originally Posted by ibara View Post
My talk was also recorded and audio (with these slides) are available here:
http://www.nycbug.org/index.cgi?acti...id=10343#10343
In other news, there is a slightly updated/broader version of that talk I gave here:
http://devio.us/~bcallah/openbsdrpisec.pdf
Thank you.
Reply With Quote
  #9   (View Single Post)  
Old 20th December 2014
ibara ibara is offline
OpenBSD language porter
 
Join Date: Jan 2014
Posts: 783
Default

I guess since people are interested, I also did a MIPS on OpenBSD talk back in 2013 (audio and slides):
http://www.nycbug.org/index.cgi?acti...id=10334#10334
Reply With Quote
Old 22nd December 2014
muflon muflon is offline
Fdisk Soldier
 
Join Date: Jul 2013
Location: Poland
Posts: 56
Default

Quote:
Originally Posted by ibara View Post
My talk was also recorded and audio (with these slides) are available here:
http://www.nycbug.org/index.cgi?acti...id=10343#10343
In other news, there is a slightly updated/broader version of that talk I gave here:
http://devio.us/~bcallah/openbsdrpisec.pdf
I've done an Update to the above list. Also including BSD Now 38 - A BUG's Life.

Thank You for this Talk.

Salut,
Marcin
Reply With Quote
Old 23rd December 2014
scottro's Avatar
scottro scottro is offline
Real Name: Scott Robbins
ISO Quartermaster
 
Join Date: Apr 2008
Location: NYC
Posts: 652
Default

ibara, that was very nice, thank you.
Reply With Quote
Old 25th December 2014
vanGrimoire's Avatar
vanGrimoire vanGrimoire is offline
Port Guard
 
Join Date: Nov 2012
Posts: 43
Default

Thanks ibara, I hadn't read the terms of the ISC license until now.
Reply With Quote
Old 25th December 2014
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,125
Default

http://daemonforums.org/showthread.php?t=4376 has some background info from Theo de Raadt about the ISC license.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
Old 28th December 2014
muflon muflon is offline
Fdisk Soldier
 
Join Date: Jul 2013
Location: Poland
Posts: 56
Default

I've added to the above list 3 articles written by Daniel Hartmeier, and related to pf

[1] Hartmeier D., Firewall Management, 2006[?] - [html]
[2] Hartmeier D.,Firewall Ruleset Optimization, 2006[?] - [html]
[3] Hartmeier D.,Testing Your Firewall, 2006[?] - [html]

BTW: I recommend His website www.benzedrine.cx

Also added an interview with Theo de Raadt, taken at ruBSD 2013
Reply With Quote
Old 29th December 2014
Oko's Avatar
Oko Oko is offline
Rc.conf Instructor
 
Join Date: May 2008
Location: Kosovo, Serbia
Posts: 1,102
Default

As I replay to a long thread OpenBSD projects http://marc.info/?l=openbsd-misc&m=141980851122724&w=2

Ingo has just assembled the most incredible list of OpenBSD related projects.

http://mdocml.bsd.lv/openbsd_projects.html

As he noted it is really difficult to draw a line what is or what is not OpenBSD related. For example I don't see nvi even though developers practically forked nvi version 1.79 which is shipped with BSDs and created OpenBSD fork clean of bugs and lots of obsolete code. It will be available for 5.7 release.
Reply With Quote
Old 29th December 2014
ibara ibara is offline
OpenBSD language porter
 
Join Date: Jan 2014
Posts: 783
Default

Quote:
Originally Posted by Oko View Post
For example I don't see nvi even though developers practically forked nvi version 1.79 which is shipped with BSDs and created OpenBSD fork clean of bugs and lots of obsolete code. It will be available for 5.7 release.
nvi has been part of OpenBSD since the very first commit of OpenBSD (literally: see http://cvsweb.openbsd.org/cgi-bin/cv....bin/vi/README and scroll all the way to the bottom). Nvi 1.79 was imported on July 27, 1997 (17 years, 5 months ago according to the CVS logs).

Yes, there has been some work done on vi(1) recently. Namely, ansification (a diff that I personally reviewed), removal of the Perl API that was broken for years, and removal of portability goo we don't need. But it's still a mess. Personally I would love to build a new, modern vi from scratch but ENOTIME. I wouldn't call this in any way an OpenBSD project. All the BSDs have made extensive changes to their import of nvi. I like what FreeBSD has done with theirs. But it's still kludge on a program from the early 90s (and older).
Reply With Quote
Old 5th January 2015
backrow backrow is offline
Real Name: Anthony J. Bentley
Shell Scout
 
Join Date: Jul 2009
Location: Albuquerque, NM
Posts: 136
Default

Quote:
Originally Posted by Oko View Post
For example I don't see nvi even though developers practically forked nvi version 1.79 which is shipped with BSDs and created OpenBSD fork clean of bugs and lots of obsolete code. It will be available for 5.7 release.
This is really exaggerating things. It was a handful of commits making nice but basically trivial changes. It’s not a fork. Actually it nudges things a little closer to FreeBSD nvi (but not close enough).
__________________
Many thanks to the forum regulars who put time and effort into helping others solve their problems.
Reply With Quote
Old 4th September 2015
muflon muflon is offline
Fdisk Soldier
 
Join Date: Jul 2013
Location: Poland
Posts: 56
Default

Out there, in the vast space of Internet, there is a good presentation about network stack virtualization in OpenBSD, presented in 2009 by Claudio Jeker at Slackathon; Schizophrenic Firewalls - virtualized network stack and other crazyness in OpenBSD: https://www.youtube.com/watch?v=NfyyBI7JHQI - as usual, youtube-dl is good choice to preserve it. Slides: http://www.openbsd.org/papers/f2k9-vrf/
And the article written also by C. Jeker in 2008, OpenBSD network stack internals: http://www.openbsd.org/papers/asiabsdcon08-network.pdf that is related to VRF (virtual routing and forwarding) and Label Distribution Protocol, which distributes MPLS label mappings between routers <-- and to MPLS I found also text written by him; Demystifying MPLS The MPLS framework in OpenBSD: https://2011.eurobsdcon.org/papers/jeker/MPLS.pdf

Last edited by muflon; 4th September 2015 at 09:31 AM.
Reply With Quote
Old 9th September 2015
muflon muflon is offline
Fdisk Soldier
 
Join Date: Jul 2013
Location: Poland
Posts: 56
Default

Results of a 2006 statistical study done by Andy Ozment and Stuart Schechter, MIT, Milk or Wine: Does Software Security Improve with Age? that reported an overall vulnerability density in OpenBSD distributions from version 2.3 till 3.7, presented at 15th USENIX Security Symposium in 2006:

https://www.usenix.org/legacy/event/...t/ozment_html/
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
NetBSD - papers, publications muflon NetBSD General 9 21st December 2014 04:51 PM
EuroPython 2010: Call for Papers J65nko News 0 16th March 2010 11:22 PM
Writing Papers in FreeBSD kagayaki General software and network 4 14th July 2008 11:31 PM


All times are GMT. The time now is 09:34 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick