@mike Some appreciation for your work: https://pauladamsmith.com/blog/2018/07/fixing-bufferbloat-on-your-home-network-with-openbsd-6.2-or-newer.html 👍🏻
Looks like a diff fell into snaps.
2 out of 4 cpus stay idle 😀
#OpenBSD intuition regarding a new side-channel caused by the speculative execution on systems with lazy FPU context switching wasn't unsubstantiated. Intel has just published an avdisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html
Today I was procrastinating ... err, toying around with authenticator and implemented an OATH-compatible login mode for #OpenBSD – RFC 6238 (TOTP) and RFC 4226 (HOTP). https://github.com/reyk/login_oath/blob/master/README.md
May contain spaces Show more
Here we go again…
D. Evtyushkin et al., “BranchScope: A New Side-Channel Attack on Directional Branch Predictor”
http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf (PDF)
This is not exactly surprising: the branch predictor is the new vulnerability Klondike.
I also think the syntax and style is ugly. These :: look a lot like Perl. Still semicolons, really? I also never liked C++-style // comments. No KNF, enforced { on the same line? Rust hast some interesting promises, but why should I learn a language that looks like the worst mix of Linux kernel code and Perl?
I started reading the Rust book, chapter 1.1 “$ curl https://sh.rustup.rs -sSf | sh” … “Of course, if you distrust using curl URL | sh to install software, you can download, inspect, and run the script however you like.” … so why do they even suggest this curl nonsense in the first place?!
https://bsd.network/media/pwndzBCPrM-tgY_1tYM
#OpenSSH just gained it's first post-quantum signature algorithm, the eXtended Merkle Signature Scheme (XMSS): https://marc.info/?l=openbsd-cvs&m=151940152732492&w=2
I for sure will never touch Pale Moon. This is absurd.
... I will continue to use Twitter for the surreal illusion of happiness and Mastodon for all the negativity and raw thoughts. It might include traces of OpenBSD but won’t be that focused as it used to be.
But I have to admit that the Microsoft guy merged my patch very quickly. whatever...
That doesn’t mean that the Azure CLI is specifically bad. ALL of these cloud CLIs are bad. The worst one is OpenStack where you have to use the „obsolete“ version (eg. neutron CLI) for half the options that are unimplemented or broken in the latest &greatest openstack CLI. But, of course, the old CLI always yells at you „I‘m obsolete, use the new CLI“. And why are Python people so keen on throwing their tracebacks at you? You do something wrong - traceback. Typo - traceback. Timeout - traceback.
I hate it when I have to dig into Python code. But Azure’s CLI was throwing tracebacks at me, so I had to fix it: https://github.com/Azure/azure-cli/commit/6b7b0a09ab9349ae51d260b55a60e5ff228781cd
I moved to @reyk ... #wehavecookies
doas cat toot Show more
ok, you convinced me, it’s alive!
Is Mastodon still a thing?