softraid, bioctl -c 1C failed array question

2025-01-24 Thread James Boyle
requires two or more chunks At one point I put the failed drive back in to see if it could start. I'm afraid that may have been the wrong thing to do. Is there a way to troubleshoot and restart the array with just the single working drive as a degraded array again? Thank you, --James

Re: SDR's?

2024-12-14 Thread James Colderwood
I'd also be interested to know if anyone has attempted to build ASL3. I believe getting the PTT/COS working on the CM108 device could be interesting. M0ZAH On 14/12/2024 01:08, deich...@placebonol.com wrote: From a fellow ham thanks for the information. On another note anyone tried to build

Re: advice debugging lockups with swap-thrashing symptoms?

2024-11-11 Thread James Cook
2M act/tot free: 9746M Cache: 151M Swap: 877M/32G [0] https://photos.falsifian.org/photo/IJ1gRH7ERkW5/IMG_20241111_171352_436.jpg [1] https://photos.falsifian.org/video/PjdfzVzv3LAm/VID_2024_165503.mp4 -- James OpenBSD 7.6-current (GENERIC.MP) #407: Fri Nov 1 20:31:42 MDT 2024 dera...@amd64.openbsd

Re: ld on startup - wish to disable

2024-09-18 Thread James Cook
x27;s answer is about kernel relinking, which I think happens in the background after every boot. It might slow things down too. -- James

Re: Installer cannot open hd0a

2024-07-02 Thread James Cook
On Sun, Jun 23, 2024 at 11:50:31AM GMT, Anon Loli wrote: On Sun, Jun 23, 2024 at 11:44:30AM +, Anon Loli wrote: On Sat, Jun 22, 2024 at 06:34:19PM +, James Cook wrote: > On Sat, Jun 22, 2024 at 03:46:16PM GMT, Anon Loli wrote: > > On Sat, Jun 22, 2024 at 03:11:50PM +,

Re: Installer cannot open hd0a

2024-06-22 Thread James Cook
xist. Probably it is a regular file you created with a command like cat image > /dev/rsd1. This is a great way to accidentally fill up your root partition. If you want to overwrite the contents of sd1, the device you want is /dev/rsd1c. -- James

Re: advice debugging lockups with swap-thrashing symptoms?

2024-05-23 Thread James Cook
2KB Region 7: type 3 at 0xcfde3000 for 52KB Region 8: type 4 at 0xcfde for 12KB REgion 9: type 1 at 0x1 for 13369344KB Low ram: 609KB High ram: 3404292KB Total free memory: 16774245KB -- James

Re: advice debugging lockups with swap-thrashing symptoms?

2024-05-23 Thread James Cook
On Thu, May 23, 2024 at 08:00:37AM GMT, Nick Holland wrote: On 5/23/24 03:18, Stuart Henderson wrote: On 2024-05-22, James Cook wrote: One of my OpenBSD boxes sometimes gets in a weird locked-up or almost-locked-up state. I'm wondering what I can do to debug it further next time it ha

advice debugging lockups with swap-thrashing symptoms?

2024-05-22 Thread James Cook
served this on 7.4 and/or 7.5 before I switched to current. -- James angel ~ $ top -ud1 load averages: 8.17, 10.86, 10.03angel.falsifian.org 18:44:22 200 processes: 1 starting, 6 running, 171 idle, 1 stopped, 18 dead, 3 on processor up 0 days 04:10:10 CPU0 states: 7.6% user, 0.0% nice,

Re: smtpd outgoing mail configuration

2024-05-16 Thread James Watt
On 17/05/24 11:42, fr...@lilo.org wrote: How to forward outgoing mail to a remote SMTP server with smtpd? I found this page, but it's out of date I think. https://romanzolotarev.com/openbsd/smtpd-forward.html Tks Pascal The config looks fine, use:  man smtpd.conf -James

Re: How to use the tun0 interface (VPN)?

2024-05-09 Thread James Colderwood
1 iwx0 192.168.0.255 192.168.0.14 UHb0 32 - 1 iwx0 -- Kind Regards James B Colderwood M0ZAH

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-09 Thread James Johnson
Thanks a lot to you all for these recommendations.

Hardware recommendation for small form factor, noiseless, server

2024-05-06 Thread James Johnson
drive at least - will be used only remotely, for basic and low-intensity server-type applications (no desktop use) - under $500 Thanks! James

Re: Security questions: Login spoofing, X11 keylogging, and sandboxed apps

2024-03-30 Thread James Huddle
ter security. The mantra I developed, as my coworkers insisted on using (for instance) the React JS package that had "Exfil" as a dependency, was: "When in Rome." On Fri, Mar 29, 2024 at 4:44 PM wrote: > Luke A. Call writes: > > > > On 2024-03-29 09:

Re: Security questions: Login spoofing, X11 keylogging, and sandboxed apps

2024-03-29 Thread James Huddle
Exfiltrator. There's an 11-letter word that starts with "ex". X11. On Thu, Mar 28, 2024 at 7:39 PM Luke A. Call wrote: > On 2024-03-28 17:28:56+0100, Jan Stary wrote: > > > (2) I've learned that X11 allows locally running malware to sniff the > > > keystrokes input to any other X11-using app

Re: pdftotext

2024-03-20 Thread James Cass
pkg_info poppler-utils - Information for https://cdn.openbsd.org/pub/OpenBSD/7.5/packages/amd64/poppler-utils-24.02.0.tgz Comment: PDF conversion tools and utilities Description: This package contains xpdf-workalike command line utilities for getting information of PD

Re: "FollowSymLinks" equivalent in httpd?

2024-03-08 Thread James Cook
d httpd by default runs chrooted to /var/www, so if you want to use absolute paths you will need to leave out /var/www. For example if you want c.txt to be a a symlink pointing to /var/www/htdocs/a.txt you could run ln -s /htdocs/a.txt symlink_file_name.txt -- James

Re: Manpages offline?

2023-12-22 Thread James Grey
Awesome, thanks for the info! On Fri, Dec 22, 2023 at 4:09 PM William Demchick wrote: > Kia ora James, > > I believe that service is currently down for maintenance, with a > planned restoration in around 12 hours: > https://marc.info/?l=openbsd-tech&m=170301840617

Manpages offline?

2023-12-22 Thread James Grey
Hi, I'm not sure if this is the place for this, but I noticed that https://man.openbsd.org/ seems to be offline. Does anyone know if these manpages are hosted somewhere else, or maybe if this will be fixed? Thanks

relayd not retrying relay's server-side connections

2023-08-06 Thread James Cook
sifian.org" \ forward to tls { keypair "falsifian.org" } } relay reverse_proxy_https_6 { listen on ::1 port 7201 tls protocol reverse_proxy forward to port 7203 forward to port 7204 } -- James

Re: How to set up a data disk of 4TB?

2022-12-09 Thread James Johnson
Perfect, thanks a lot. It worked like a charm. > On 9 Dec 2022, at 17:23, Crystal Kolipe wrote: > > On Fri, Dec 09, 2022 at 04:19:49PM +0000, James Johnson wrote: >> Hi all, >> >> I have installed an internal hard drive of 4TB. This drive will be used for >&g

How to set up a data disk of 4TB?

2022-12-09 Thread James Johnson
Hi all, I have installed an internal hard drive of 4TB. This drive will be used for storing data only. It will not contain the OpenBSD system itself. Knowing the limitations of MBR, I have opted for a GPT partitioning system : fdisk -A sd0 Following this, I am trying to add the partition with

Re: Configure OpenBSD for remote server rarely used

2022-11-28 Thread James Johnson
Ah, pretty cool, I'll keep it in mind for my next project ;) On 28.11.2022 10:36, Bodie wrote: And if you really need low consumption, rugged computer and do not mind about the costs you can go eg. this way :-) https://teguar.com/ip67-box-pc-twb-2945 /

Re: Configure OpenBSD for remote server rarely used

2022-11-28 Thread James Johnson
Thanks a lot for all the great advice, that is very useful. It all makes sense. > On 27 Nov 2022, at 21:10, Tomasz Rola wrote: > > On Sun, Nov 27, 2022 at 09:37:19AM +0000, James Johnson wrote: >> Hi all, >> >> OpenBSD is amazing. But I need help in configuring

Re: Configure OpenBSD for remote server rarely used

2022-11-27 Thread James Johnson
reboots? Should I do a daily, weekly, monthly reboot? > On 27 Nov 2022, at 20:00, Bodie wrote: > > > > On 27.11.2022 10:37, James Johnson wrote: >> Hi all, >> OpenBSD is amazing. But I need help in configuring it correctly as a >> remote server, rarely used. &g

Re: Configure OpenBSD for remote server rarely used

2022-11-27 Thread James Johnson
"Does it just need to wake up to run a script and then shut down again" -> yes, that's basically that. Of course, requirements might evolve. "Why does it even have to be a separate machine?" -> There are benefits to this, including data safety (different location). Thank you for your help, have

Re: Configure OpenBSD for remote server rarely used

2022-11-27 Thread James Johnson
> On 27 Nov 2022, at 17:28, Jan Stary wrote: > > On Nov 27 17:10:11, mytraddr...@gmail.com wrote: >> I am not intending to switch the machine. > > Why? It is just not an option for this specific project. > >> In terms of resources, I am mainly concerned about hard drives >> and cpu being w

Re: Configure OpenBSD for remote server rarely used

2022-11-27 Thread James Johnson
Thank you for the pointer, I will look into that. > On 27 Nov 2022, at 14:13, T K wrote: > > "I have been able to lower the CPU speed by running `apm -L`." > For automation purposes consider using obsdfreqd (pkg_add obsdfreqd) instead. > > niedz., 27 lis 2022, 10

Re: Configure OpenBSD for remote server rarely used

2022-11-27 Thread James Johnson
Thanks for your response. I am not intending to switch the machine. In terms of resources, I am mainly concerned about hard drives and cpu being worn down unnecessarily. I am not sure how much of a concern this should be though. Yes, I do know in advance when the machine needs to run and when i

Configure OpenBSD for remote server rarely used

2022-11-27 Thread James Johnson
Hi all, OpenBSD is amazing. But I need help in configuring it correctly as a remote server, rarely used. The main thing I am trying to do is to make it sleep every now and then to protect resources. I am very flexible on how to do this, but have been unable to do so. Here's what I tried : 1)

Re: inet6 autoconf fails; "slaacd[##]: sendmsg: Can't assign requested address"

2021-12-26 Thread James Cook
> but it's with unmodified 7.0 release source. (I lost the original Oops, I mean 7.0 stable. I followed the anoncvs FAQ instructions using the OPENBSD_7_0 tag. -- James

inet6 autoconf fails; "slaacd[##]: sendmsg: Can't assign requested address"

2021-12-26 Thread James Cook
the original kernel after trying out ramnode's patch.) [0] https://clientarea.ramnode.com/knowledgebase.php?action=displayarticle&id=120 [1] https://marc.info/?l=openbsd-misc&m=158860746708443&w=2 [2] https://marc.info/?l=openbsd-cvs&m=15825831624&w=2 -- James Op

Re: Disk partition not recognized

2021-12-22 Thread James Cook
an't have a disklabel, right? Could the in-memory disklabel be out of sync? Does the problem persist if you reboot, or detach/re-attach the disk? -- James

Re: suspend/resume kills X

2021-12-18 Thread James Cook
rc.info/?l=openbsd-bugs&m=149005961017985&w=2 I work around it by switching to a different virtual console before suspending. This is the command I use to lock my X session, switch vts, and sleep: xlock -startCmd 'wsconsctl -f /dev/ttyCcfg display.focus=0 && zzz' For that to work, I need to have access to /dev/ttyCcfg. I added /dev/ttyCcfg to /etc/X11/xenodm/{Give,Take}Console (handled the same way as the other devices files in those scripts) to solve that. I can't comment on the security implications of doing that. -- James

Re: nvme boot

2021-10-15 Thread James Cook
tor, 25784 sectors root on sd1a (44a8e9daa00bd12b.a) swap on sd1b dump on sd1b inteldrm0: 1920x1080, 32bpp wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation), using wskbd0 wsdisplay0: screen 1-5 added (std, vt100 emulation) iwx0: hw rev 0x340, fw ver 63.c04f3485.0, address 4c:1d:96:49:90:03 video0 detached uvideo0 detached uhub0 detached uhub1 detached uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1 uhub1 at usb1 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1 uvideo0 at uhub0 port 5 configuration 1 interface 0 "CN09357G8LG0098MAFA2A01 Integrated_Webcam_HD" rev 2.01/80.08 addr 2 video0 at uvideo0 iwx0: unhandled firmware response 0x3fd/0x200c rx ring 64[10] -- James

Re: Server certs expired higher up the chain, imaps and https

2021-09-30 Thread James Cook
from LetsEncrypt, if you want one that doesn't end with the expired one. I couldn't find this functionality in OpenBSD's acme-client. However, I tried manually editing the fullchain pem file downloaded by acme-client, deleting the third of three certificates in the file, and now my older clients are happy (but presumably old Android phones will not be happy). -- James

Re: snapshot miniroot69.img not bootable anymore

2021-07-04 Thread James Cook
onfigured dt: 445 probes uvideo0 at uhub0 port 5 configuration 1 interface 0 "CN09357G8LG0098MAFA2A01 Integrated_Webcam_HD" rev 2.01/80.08 addr 2 video0 at uvideo0 axen0 at uhub1 port 3 configuration 1 interface 0 "ASIX Elec. Corp. AX88179" rev 3.00/1.00 addr 2 axen0: AX88179, address 00:90:9e:9d:0f:34 rgephy0 at axen0 phy 3: RTL8169S/8110S/8211 PHY, rev. 5 vscsi0 at root scsibus2 at vscsi0: 256 targets softraid0 at root scsibus3 at softraid0: 256 targets sd1 at scsibus3 targ 1 lun 0: sd1: 125903MB, 512 bytes/sector, 25784 sectors root on sd1a (44a8e9daa00bd12b.a) swap on sd1b dump on sd1b inteldrm0: 1920x1080, 32bpp wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation), using wskbd0 wsdisplay0: screen 1-5 added (std, vt100 emulation) iwx0: hw rev 0x340, fw ver 48.1335886879.0, address 4c:1d:96:49:90:03 -- James

Re: autofs

2021-06-12 Thread James Cook
rful, but the wolves do not perform > in the circus See amd(8). I have not used it or Linux's autofs, but I think they have the same purpose. -- James

Re: openrsync manpage error

2021-05-16 Thread James Cook
--rsync-path=/usr/bin/openrsync. It is also sufficient to make rsync an alias for openrsync on the remote machine. -- James

Re: VMM 6.9amd64 host video acceleration

2021-05-16 Thread James Cook
rrrors on the console. I think some involved "Channel closing". If it would help, I can keep more careful track and report them to the list. The LibGl errors look less familiar. Stab in the dark: are your ports and system in sync? (I always run pkg_add -u after upgrading to a new snapshot.) -- James

Re: CWM + Web Browser Navigation

2021-04-23 Thread James Cook
So if I type something that doesn't involve Mod4, cwm won't intercept it. Also for some reason the Firefox keyboard shortcut ctrl-[ for back is stuck in my head so I can always use that. -- James

Re: help debug NFS

2021-04-11 Thread James Stark
Linux-tcp-clients-after-5-minutes-idle-td402844.html As a work around, I've set up a cron script that stat's the mount point every four minutes. That stops the mount from hanging. I hope that helps. James On Sun, Apr 11, 2021 at 2:04 AM Родин Максим wrote: > > Hello > I have

Relayd cannot load keypair

2021-02-28 Thread James Chase
I'm on openbsd 6.8, ran syspatch today. relayd.conf: table { 192.168.1.158 } http protocol "httpproxy" { pass request quick header "Host" value "nextcloud.mydomain.com" \ forward to block } relay "proxy" { listen on 192.168.1.156 port 80 protocol "httpproxy" forward to

Re: Default partitions allocate only 1GB to /

2021-02-27 Thread James Cook
On Sat, Feb 27, 2021 at 11:21:45PM +, tetrahe...@danwin1210.me wrote: > On Sat, Feb 27, 2021 at 08:27:07PM +0000, James Cook wrote: > > Something's strange about your setup. The installer normally creates a > > separate partition for /usr and maybe /usr/local. If you'r

Re: Default partitions allocate only 1GB to /

2021-02-27 Thread James Cook
installer normally creates a separate partition for /usr and maybe /usr/local. If you're using pkg_add, then packages go in /usr/local, so they shouldn't end up on your root partition. If your disk is really tiny the installer won't create a separate /usr partition, but in that case it won't make a separate /home either. -- James

Re: Unknown process modifying routing table

2021-02-06 Thread James
I've disabled my VPN on the machine as well as dhclient, connecting via a fixed static IP address and DNS servers. My routing table is still being modifed by PID 0 (which I assume to be the kernel) every 30 minutes or so. Ntpd is also disabled. I have also caught my machine communicating to on

Re: Keyboard on raspberry pi rpi3b not working

2021-02-02 Thread James
I have a similar situation with a Logitech G series keyboard. From reading man pages for usb, usbhid, wscons, ect. I'm able to get the keyboard input using usbhidctl(8) and if I leave this program running I I'm able to use my external keyboard. Does anyone know how to have the keyboard automati

Unknown process modifying routing table

2021-02-02 Thread James
Hi all, My routing table is being modified by an unknown process. I have system accounting enabled and I'm monitoring route changes but the PID of the process reported by `route monitor` is always 0 for these unknown changes. I've seen my default route (VPN) being delet

Re: Issues with Teclast F7 Plus

2020-12-24 Thread James Hastings
On 13 Dec 2020, 13:27:48 +, Joel Carnat wrote: > Hello, > > I just got a Teclast F7 Plus laptop and installed OpenBSD 6.8-current on > it. Most things works except apm and touchpad > > Using zzz or ZZZ, it seems suspend/hibernation start but are never > achieved. The backlight keyboard and powe

Re: Dissing Misks

2020-12-23 Thread James Cook
e usual MBR solutions.) > > I've never regretted setting up a MBR boot system on an "either will > do" machine. I have regretted setting up a GPT system on a machine > that became unreliable, and thus had to be replaced, and I spent too > long trying to find a new used system that was also GPT capable. Oops; fair enough; I forgot about booting. -- James

Re: Dissing Misks

2020-12-23 Thread James Cook
blow through that barrier with the 'b' command, as Allan indicated. > > If you are using softraid, you will have to repeat the disklabel 'b' > thing for the softraid disks, too. I usually forget that part. > > Nick. If you're starting fresh, isn't it simpler to use a GPT partition table if you want to go past that limit? -- James

Predict which changes will be in snapshot pulled by sysupgrade?

2020-12-09 Thread James Cook
[0] https://undeadly.org/cgi?action=article;sid=2008094306 [1] https://ftp.openbsd.org/pub/OpenBSD/doc/history/obsd-faq43.pdf ("It is sometimes asked...") -- James

Re: softraid0 errors after 6.8 upgrade

2020-11-22 Thread James Cook
upgrade? I did not find anything in the changelog. Could this happen if there's a problem with the disk blocks backing the content of those files? I don't think fsck tries to read blocks that only store file content. -- James

Re: System auditing and logging

2020-11-13 Thread James
g syscalls recorded to a specific subset. Is there any interest in modifying ktrace to allow for specifying individual names of syscalls to trace? e.g. ktrace -t c -u execve,sendmsg On Fri, Nov 13, 2020 at 07:57:54AM -0700, Theo de Raadt wrote: man accton James wrote: Recently a machine runni

System auditing and logging

2020-11-13 Thread James
Recently a machine running OpenBSD 6.8 had its configuration changed and I believe it to have been subject to a malicious attack. This change is completely unexplainable, compromised security, and would have required root access. The log files reveal nothing out of the ordinary except for wtmp

Re: Approved way to update installed ports after system upgrade?

2020-10-20 Thread James Cook
FAQ. Thanks in advance. >From https://www.openbsd.org/faq/upgrade68.html , I think this is your answer: "Finish up by upgrading the packages using pkg_add -u." -- James

No longer can change brightness

2020-10-13 Thread james . luigy
Hello, The latest snapshots (maybe 1 week ago) have made wsconsctl(8) no longer functional for changing display brightness on my MacBook Pro mid 2014. The expected behavior would be to `wsconsctl display.brigthness=X` to change the value for the desired percentage, but it always return `display

Re: time_t

2020-10-05 Thread James Cook
above code would do if they were unsigned. There are probably more compelling examples where it's even more obvious unsigned ints will not do what you probably wanted, but that's what came to me on the spot. In any case, my previous employer's (C++) style guide strongly discouraged use of unsigned integer types for this reason. -- James

Re: Microsoft's war on plain text email in open source

2020-08-26 Thread James Huddle
She never really says how old her "partner" is. Perhaps he is a developer who has literally "...grown up in the last five or ten years..." On Wed, Aug 26, 2020 at 9:50 AM Rafael Possamai wrote: > >- Original message - > >From: Greg Thomas > > > >"... he had to set up an entirely new mai

Re: multiple simultaneous X sessions?

2020-08-25 Thread James Cook
stand Xnest and Xephyr? Right, I think the vnc / Xnest / Xephyr suggestions assume you've got one "main" user accessing the sessions that belong to the other users. I don't really know enough to comment on how much any of this helps with security. -- James

Re: multiple simultaneous X sessions?

2020-08-24 Thread James Cook
my normal practice in my Debian days, switching among them with Ctrl-Alt-FN.) Either way, thanks much for any info. Luke Call I don't know if it's possible to do exactly what you want, but as an alternative, maybe you could get a similar effect using Xnest or vnc. -- James

Re: email attachments in firefox

2020-08-21 Thread James Cook
ystem right now but probably look for "firefox" in that directory.) -- James

pkg_add man page doesn't document default path properly

2020-08-09 Thread James Cook
t I'm on a release. Neither page seems to give a straightforward answer. Eventually I figured it out by looking at the output of pkg_info.) -- James (previously jc...@cs.berkeley.edu)

Re: mpd: failed to open default sndio device

2020-06-15 Thread James
Did you find a solution to this? Copying ~/.sndio/cookie into _mpd's home directory did not fix this error for me. On Fri, Oct 18, 2019 at 02:34:48PM +0300, Кирилл wrote: Hello. After install mpd: $ mpc play Antimatter - Over Your Shoulder [paused] #1/7 0:00/4:41 (0%) volume:100% repeat: of

Re: DNS and rdomains

2020-05-28 Thread James
restart the daemon Hope this helps, Tom Smyth On Wed, 27 May 2020 at 23:24, James wrote: Hi all, How can I allow different rdomains to use separate DNS nameservers? Thanks -- Kindest regards, Tom Smyth.

DNS and rdomains

2020-05-27 Thread James
Hi all, How can I allow different rdomains to use separate DNS nameservers? Thanks

dhcp dhcp problem with ramnode.com: "CLASSLESS_STATIC_ROUTES too long" (workaround included)

2020-05-04 Thread James Cook
though dhclient said "CLASSLESS_STATIC_ROUTES too long". I haven't delved deep enough into the code to understand the significance of that, but mentioning it in case it's relevant. BTW, this is my first time using OpenBSD, and I'm quite happy so far. James

Re: Question regarding server hardware

2019-09-10 Thread James Huddle
On 2019-09-07, James Huddle wrote: >> I recently purchased a Dell T-330 server that I had intended to >> install OpenBSD on and use as a serious web server. My goal was to >> have more control than would be (naturally) given with, say an AWS VM. >> And by control, I mean

Question regarding server hardware

2019-09-07 Thread James Huddle
I recently purchased a Dell T-330 server that I had intended to install OpenBSD on and use as a serious web server. My goal was to have more control than would be (naturally) given with, say an AWS VM. And by control, I mean what is *not* running on the box - security-wise. Apparently, Dell ships

Re: Piping multiple lines of text via ssh

2019-08-26 Thread James Cass
derstanding your problem, take a look at the "-n" switch in the ssh man pages. I ran in to a similar issue that you're having and this solved it. I hope this helps...James

Re: PF firewall for desktop

2019-05-28 Thread James Huddle
Lots of miscommunications in these threads. The original poster here was talking about setting up a virtual firewall machine to deal with traffic on a single box. Most of the war stories are from sys admins protecting a corporate LAN (or larger) with lawyers and accountants weighing in. Of course

Re: PF firewall for desktop

2019-05-27 Thread James Huddle
IP is a fairly high-order construct. Beneath it , the data link and physical layers remain almost unnoticed. One thought that came to mind would be to attack a machine on the same LAN, and then exploit an Ethernet vulnerability to listen to "the wire". Not sure how many (if any) Ethernet vulnera

Re: PF firewall for desktop

2019-05-25 Thread James Huddle
I like your suggestion! I am security paranoid to a fault. For me, a system is either rock solid or wide open. obsd is the closest I've found to rock solid, and frankly a virtualbox vm running on win7 feels wide open. But the more I thought about your idea, the more I liked it. Win7 w/o the vi

Re: single user question

2019-05-21 Thread James Huddle
Sorry. Stefan. Batting 1000. -Jim On Tue, May 21, 2019 at 1:20 PM James Huddle wrote: > Just a quick shout-out to Roderick: > Thank you for the paper reference. It's probably perfect for my needs, > but I've been a bit busy, as of late. So no papers, regardless of year

Re: single user question

2019-05-21 Thread James Huddle
Just a quick shout-out to Roderick: Thank you for the paper reference. It's probably perfect for my needs, but I've been a bit busy, as of late. So no papers, regardless of year written. One of my favorite references is Thompson's "Reflections on Trusting Trust" so I'm hep to your SuperFly-Era wa

Re: single user question

2019-05-16 Thread James Huddle
First of all, I must say that it is with genuine gratitude that I read your responses! Moving on... On Wed, May 15, 2019 at 3:05 PM James Huddle wrote: >> What I am trying to do (thank you Troy Martin), is work through >> the standard answers and missteps toward a more secure OS,

Re: single user question

2019-05-15 Thread James Huddle
>What I"m saying is that it takes less work overall to subtract from a >system in a supportable way than it is to try and handcraft an >unsupportable system. If you know the supportable system well and your goal is only a slight variation of that that system does, then that makes perfect sense. I

single user question

2019-05-09 Thread James Huddle
If the following questions trigger a sense of road rage, you may safely assume they are not directed to you. Is anyone running in single-user mode regularly? Is anyone running a web server, for instance, in single-user mode? Many thanks in advance. Shields up. -Jim

Re: When will be created a great desktop experience for OpenBSD?

2019-05-08 Thread James Cass
I love the default minimalism, simplicity and freedom of OpenBSD to make it how I want it. My "Perfect OpenBSD": spectrwm, dmenu, urxvt (with perl tabbing), tmux, etc. On Wed, May 8, 2019 at 7:40 AM Peter N. M. Hansteen wrote: > > When will be created a great desktop experience for OpenBSD? > >

Re: Research and OpenBSD: How can I help?

2019-02-21 Thread James Huddle
Thank you, Mihai. I needed that. And honest, sincere thanks to Theo, for working hard, smart, and continuously for decades. You are unique. -Jim Huddle On Thu, Feb 21, 2019 at 8:31 AM Mihai Popescu wrote: > > Frankly, I'd settle for popping the BIOS out and replacing it > with a 1970's EPROM >

Re: Research and OpenBSD: How can I help?

2019-02-21 Thread James Huddle
On Thu, Feb 21, 2019 at 1:03 AM Frank Beuth wrote: > On Wed, Feb 20, 2019 at 09:16:04PM -0500, James Huddle wrote: > >Personally, I envision a sort of "open source BIOS" > >library in the distant future. Something we jack in on jtag > >if we have to. There is no

Re: Research and OpenBSD: How can I help?

2019-02-20 Thread James Huddle
>An area that I am personally interested in is running >OpenBSD on fully open-source / binary-blob-free >hardware: hardware where there is no proprietary >firmware that could hide vendor backdoors, and >ideally where even the design of the chip is available >to the user for review. (Heck yes)^2 Of

Re: wscons API question: input handling?

2019-02-20 Thread James Huddle
is ncurses too high-level for your needs? That might work. On Tue, Feb 19, 2019 at 1:27 PM Leonid Bobrov wrote: > On Tue, Feb 19, 2019 at 04:01:08PM +, tfrohw...@fastmail.com wrote: > > Is the package x11/xbindkeys what you are looking for? > > > > No, I need a direct access to keyboard out

Re: Firefox (and SeaMonkey) automatically creates a Desktop folder in $HOME

2018-02-14 Thread James Anderson
Xianwen, If you create ~/.config/user-dirs.dirs with the following lines it will prevent Firefox from creating those folders: XDG_DESKTOP_DIR="$HOME" XDG_DOCUMENTS_DIR="$HOME" XDG_DOWNLOAD_DIR="$HOME" Jim On Wed, Feb 14, 2018 at 7:23 AM, Xianwen Chen wrote: > Dear OpenBSD users, > > I find t

Re: password-free SSH was Re: [ot] Security of my bit coin wallet

2017-11-15 Thread James
use passwords when speaking the protocol and establish some sort of reality to host mapping. Remember we can never actually verify anything in the internet due to MITM. We can just increase our probability of success while decreasing the attack surface for dictionaries. What do you think? Cheers, James

password-free SSH was Re: [ot] Security of my bit coin wallet

2017-11-15 Thread James
does not count as password-free. My motivation is turn the internet upside down. Does any current crypto mechanism come to mind? A possible example is the use of Diffie-Hellman at the network layer to identify hosts. I think that would be password-free. > Thanks, > > -- > Raul >

[ot] Security of my bit coin wallet

2017-11-15 Thread James
r of trust somewhere, but eventually someone has a password that is used to, unlock a bitcoin. Is that correct reasoning or are there alternatives? Thanks, James

Re: X710 10Gb card not configured

2017-09-27 Thread James A. Peltier
- On 26 Sep, 2017, at 20:25, Jonathan Gray j...@jsg.id.au wrote: | On Tue, Sep 26, 2017 at 05:35:40PM -0700, James A. Peltier wrote: |> Hi Misc, |> |> I am running the latest OpenBSD snapshot and it appears that the 10Gb cards that |> we have in the unit aren't recogni

X710 10Gb card not configured

2017-09-26 Thread James A. Peltier
anced Capability 0x03: Device Serial Number 0x0150: Enhanced Capability 0x0e: Alternate Routing ID 0x01a0: Enhanced Capability 0x17: TPH Requester 0x01b0: Enhanced Capability 0x0d: Access Control Services 0x00e0: Capability 0x03: Vital Product Data (VPD) -- James A. Pelti

Re: OpenBSD-based ISP

2017-08-16 Thread James Shupe
the high performance configurations but I think > that OpenBSD can handle 400mbps without tweaking. > > I'm wrong? > What am I doing bad? > > Thank you! > > > > -- James Shupe, HermeTek developer/ engineer BSD/ Linux support & hosting jsh...@hermetek.com | www.hermetek.com Office 5127922525 | Mobile 5122846350

Re: KERNEL PANIC: HP 250 G5 Notebook PC (W4M67EA)

2017-01-08 Thread James Hastings
On Sat, Jan 07, 2017 at 03:32:22PM -0800, Mike Larkin wrote: > Also, this is the third time (that I recall) that HP has thrown us a curveball > in their ACPI implementation (although at least this time they seem to be > spec-compliant and it's us missing stuff). Toshiba is another vendor that > ten

Re: DigitalOcean and OpenBSD

2016-08-24 Thread James Pole
replacement for my exisiting FreeBSD and Debian VPS instances. I have been impressed enough that I plan to replace my FreeBSD and Debian instances with OpenBSD instances before the end of the year. - James > On 25/08/2016, at 8:25 AM, Pedro Tender wrote: > > Not helping to the que

httpd.conf(5) macros not expanding for tls options

2016-07-30 Thread James Pole
thing to do A similar error occurs if I explicitly define the path for the certificate (i.e. without using the macro) and use the macro for the key. Are macros not supported for the 'tls certificate' and 'tls key' options? Regards, James

Re: Weird errors during install.site

2016-07-28 Thread James Pole
y initial thought was I would have to echo all the scripted commands I wanted to make to >> rc.firsttime. But your suggestion of creating a separate rc.firstime.tail script and then appending the whole thing to rc.firsttime at once seems like an elegant solution which I will adopt. Thank you, James

Weird errors during install.site

2016-07-28 Thread James Pole
any, would be appropriate. I would appreciate any tips. :) Regards, James

producing SHA256 & release(8)?

2016-07-12 Thread James Hartley
Before proposing a diff, I need clarification. The release(8) manpage states: "xenocara uses DESTDIR and RELEASEDIR as described above. While they may be set to the values used to build the rest of the system, be aware that the existing contents of DESTDIR will be removed as part of the xenocara

support update

2016-02-19 Thread James Shupe
0 C USA P Texas T Pflugerville Z 78691 O HermeTek Network Solutions I James Shupe A P.O. Box 2264 M sa...@hermetek.com U https://www.hermetek.com/bsd-linux-support B 512.792.2525 X 512.888.9889 N We provide open infrastructure design, development, deployment, maintenance and training. We

Clarification on vhid/carpnode settings for load-balanced fw configuration

2015-12-23 Thread James L Baker
Hi, all. I'm setting up a pair of load-balanced firewalls using carp. I've got nearly everything going, but encountered this in the man page: "If IP balancing is being used on a firewall, it is recommended to configure the carpnodes in a symmetrical manner. This is achieved by simply using the sa

Re: Boot loader uses INT 13h [WAS BIOS call fallback]

2015-12-22 Thread Read, James C
>> a security consideration, as far as I can see the bootloader loads using INT >> 13h calls. How can the kernel be sure it is really operating in ring 0 and not >> in some VM given that this is the case? >Hey, it looks like you are just trying to be a dick. On the assumption that you are not sug

Re: BIOS call fallback

2015-12-22 Thread Read, James C
>The OpenBSD process is quite well understood. Use the best methods, >doubt what you do, refractor. Simple in concept, but it takes a lot >of time. >Therefore I am looking forward to seeing what you and James can do. >How long do you think it will take you? Can we expect to se

  1   2   3   4   5   6   7   8   9   >