@jhx

#OpenBSD
#NetBSD
#HardenedBSD

Want to know of alternatives to #RedHat / #RHEL for your #Server? Consider these options that lack systemd & you can more easily install #ZFS on:

#FreeBSD, #HardenedBSD, #NetBSD, #Illumos.

@Dianora

This might be of interest to you.

"Would you like to help contribute to #HardenedBSD?"

RT @mischapeters
#BSD enthusiasts unite! Help me make @eurobsdcon even better this year by finding more world class sponsors.

In return, we promise not to use Windows during the event! :)

#EuroBSDCon #RUNBSD #OpenBSD #FreeBSD #NetBSD #DragonFlyBSD #HardenedBSD

@swagpussc (...continued)
#FreeBSD, #OpenBSD, and #NetBSD (and their derivatives such as #DragonFlyBSD, #HardenedBSD, #MirBSD, #GhostBSD, et al.) are actually some of the former types of operating system in the "Unix" class.

They're the full operating system "nut", both "kernel" and "shell", in one and can trace their lineages, complete with long version control histories going back decades, to old #Unix flavours of the 1970s.

They're not the same as one another.
(continued...)

New #OpenSSL DoS in certificate chain validation, time to upgrade or patch!

1.1.1u or 3.0.9 or 3.1.1

I noticed on #HardenedBSD that ports OpenSSL version shows as 3.1.0 but is patched.

Good luck everyone.

Reminder: do yourself a favor and run your stuff on either #OpenBSD or #HardenedBSD. Both are pretty secure and stable. Fuckups can be rolled back easily, using bsd.rd (OpenBSD) or ZFS BEs (HardenedBSD).

And always #RUNBSD.

Have a nice day all!

We continue working toward adding a second server, but we are taking our time and building it on #HardenedBSD for a bit of diversity.

With us being delisted from the “tech” category on mobile our sign up rate has crashed so we don’t feel the urgency to rush a second server.

@daevien @stefan why is #vyos good (compared to #opnsense)? I worry that it's less secure, being based on #debian rather than #hardenedbsd

A Decade of #HardenedBSD

https://git.hardenedbsd.org/shawn.webb/articles/-/blob/master/hardenedbsd/2023-01_decade/article.md

@kkarhan cooling the basement #HardenedBSD rack

Just added a portable air conditioning unit to our unfinished basement
to keep the #HardenedBSD infrastructure cool.

Any #GrapheneOS project member peeps here? I'm curious if there's any
desire to support deployments for those who need to do so using human
rights infrastructures. For example, being able to check for and apply
updates using a #Tor Onion Service endpoint.

#HardenedBSD users can download OS updates and packages using Tor,
being able to point the package manager to a Tor Onion Service that we
control and that hooks directly into the HardenedBSD infrastructure.

So it's somewhat akin to an nginx reverse proxy, but with Tor.

Is this something the GrapheneOS peeps would be interested in? I'd
love to help get something like this going.

#infosec #HumanRights #HumanRightsTech #Android

Current status: Attempting to get a very basic package build working
with #HardenedBSD compiled with Cross-DSO CFI. Lots of third-party
projects fail to build (surprise!)

The biggest problem I see is that so many projects assume a gcc
toolchain and plenty of Linuxisms.

The other problem I see is that llvm-objcopy doesn't support .a
artifacts with inner object files that are LLVM IR bitcode files.
llvm-objcopy, when in strip mode, expects ELF, Mach-O, or PE-COFF.
LLVM IR bitcode files are wholly unsupported.

@lechindianer I normally would rm -rf in favor of #HardenedBSD, but Windows is the right tool for my job.

🎂 A Decade of HardenedBSD
— @HardenedBSD
#HardenedBSD #bsd #opensource #cybersecurity
https://git.hardenedbsd.org/shawn.webb/articles/-/blob/master/hardenedbsd/2023-01_decade/article.md?utm_source=pocket_mylist

@ParadeGrotesque @liw Don't forget how to create your own production build system for #HardenedBSD, a little wiki article I wrote to demonstrate how to build your own updates for the base OS and packages: https://git.hardenedbsd.org/hardenedbsd/HardenedBSD/-/wikis/own-infra

:-D

Some really nice technical/rant articles came out recently, so here they are for your viewing pleasure in this new year:

- #Linux on the desktop rant by none other than @liw :

https://blog.liw.fi/posts/2022/goalposts/

(as a Linux user since 1995, this one made me laugh heartily)

- 10 years of #HardenedBSD by @lattera :

https://git.hardenedbsd.org/shawn.webb/articles/-/blob/master/hardenedbsd/2023-01_decade/article.md

- I am not a supplier by T. Depierre:

https://www.softwaremaxims.com/blog/not-a-supplier

- #NetBSD and reproducible builds:

https://blog.netbsd.org/tnf/entry/reproducible_builds_summit_venice_2022

Listening to Lacuna Coil - Dark Adrenaline and settling into a session of configuring the base OS on two new 24 core systems to replace our existing DEFCON.social 16 core system. Oddly relaxing.

#FreeBSD #HardenedBSD #MastoAdmin

A Decade of #HardenedBSD

https://git.hardenedbsd.org/shawn.webb/articles/-/blob/master/hardenedbsd/2023-01_decade/article.md