openbsd/src on Hacker News

…object stack protector cookie extended for the per-function cookies required for RETGUARD. https://github.com/openbsd/src/blob/master/libexec/ld.so/SPE... https://www.openbsd.org/innovations.html No other OS has this.

comment by notaplumber · 2020-01-08 · in Removing the Linux /dev/random blocking pool

…should hopefully obviate the need to depend on GPG for hardware token solutions. See for example https://github.com/openbsd/src/commit/094c80e0a523faf92a99f6...

comment by beefhash · 2019-12-18 · in OpenSSH Key Shielding

…steps in the direction of allowing host keys and client keys to be backed by security keys.[3] [0] https://github.com/openbsd/src/commit/707316f931b35ef67f1390... [1] https://en.wikipedia.org/wiki/Avalanche_effect [2]…

comment by lucb1e · 2019-12-18 · in OpenSSH Key Shielding

Here's the patch: https://github.com/openbsd/src/commit/eee3c75f9abd5ea51e066d... https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/libexec/ld.so/...

comment by duelingjello · 2019-12-12 · in Local Privilege Escalation in OpenBSD's Dynamic Loader

…is stupid, so I'm not advocating for using this tool or enabling it in OS's as default policy. [1]: https://github.com/openbsd/src/tree/master/sbin/unwind

comment by loeg · 2019-12-05 · in Inferring and hijacking VPN-tunneled TCP connections

…has been fighting the ecosystem on this for a long time, there are no executable stacks on OpenBSD. https://github.com/openbsd/src/commit/32c3fa3f83422ae0dec73c... The pmap support appeared in subsequent commits for multiple platforms,…

comment by brynet · 2019-11-16 · in Infectious Executable Stacks

https://github.com/openbsd/src , as well as any software built by that team: https://github.com/openssh https://github.com/opensmtpd https://github.com/libressl-portable/ etc.

comment by moviuro · 2019-10-15 · in Ask HN: Examples of Good Software

…PS: the most secure open-source OS out there has a package manager written in perl, with priv-sep ( https://github.com/openbsd/src/tree/master/usr.sbin/pkg_add ).

comment by moviuro · 2019-09-20 · in Kiss – A Linux distribution with a focus on “less is more”

…making a hard link pointing to the new data. In userspace? That seems to be what's happening here - https://github.com/openbsd/src/blob/master/bin/cp/utils.c This is made a bit more confusing by the differences in man pages. For GNU ln,…

comment by throwaway5d097 · 2019-09-07 · in Everything I googled in a week as a professional software engineer

…and define well-known numerical constants for each (documented!) system call. https://github.com/openbsd/src/blob/master/sys/sys/syscall.h https://github.com/lattera/freebsd/blob/master/sys/sys/sysca... http://cvsweb.netbsd.org/bsdweb.c

comment by bediger4000 · 2019-09-02 · in Windows X86-64 System Call Table

…pool of random data built into it, and writing that to disk as part of the install. Take a look at https://github.com/openbsd/src/blob/master/distrib/miniroot/... , specifically, feed_random and store_random

comment by ori_b · 2019-07-17 · in OpenSSH taking minutes to become available, booting takes half an hour (2018)

…'yes' example from the other thread: https://github.com/coreutils/coreutils/blob/master/src/yes.c https://github.com/openbsd/src/blob/master/usr.bin/yes/yes.c Really, my main beef is the suppression of history and misrepresentation of a…

comment by cat199 · 2019-07-02 · in Decoded: GNU Coreutils

Sure: https://github.com/openbsd/src/commit/707316f931b35ef67f1390...

comment by mulander · 2019-06-21 · in SSH gets protection against side-channel attacks

See the blame on tar.1 [0] : documentation does not change very much... [0] https://github.com/openbsd/src/blame/f84583fe5d7899ab1504dc1...

comment by moviuro · 2019-05-28 · in What are the differences between OpenBSD and Linux?

It’s /usr/bin/true on Mac, and the OpenBSD source for it is at https://github.com/openbsd/src/blob/master/usr.bin/true/true... .

comment by robin_reala · 2019-03-06 · in Open-Sourcing Windows Calculator

…This will place them in a similar position they had with GCC, since the GPLv3 license change. [0] https://github.com/openbsd/src/commit/e688c2b0648a80551cf735... [1] https://github.com/openbsd/src/commit/9866f44de26a847eaed067... [2]…

comment by notaplumber · 2018-12-17 · in LLVM Relicensing Effort

…easy to code an integer overflow when doing something like malloc(sizeof(member) * nmembers). [1] https://github.com/openbsd/src/blob/master/lib/libc/stdlib/r...

comment by 0xcde4c3db · 2018-12-02 · in Undefined Behavior Is Really Undefined

…listserv and the problem was fixed within day. (Wow that was almost 10 years ago?! How time flies) https://github.com/openbsd/src/commit/13fba73cec6be16d64c86e... We ultimately went with VyOS (back then called Vyatta) and Quagga but it…

comment by mrunkel · 2018-11-29 · in How we spent two weeks hunting an NFS bug in the Linux kernel

GitHub mirror: https://github.com/openbsd/src/tree/master/usr.bin/nc

comment by jwilk · 2018-10-13 · in The byproducts of reading OpenBSD netcat code

…EDIT: freebsd: https://github.com/freebsd/freebsd/blob/master/sys/netinet/i... openbsd: https://github.com/openbsd/src/blob/master/sys/netinet/in4_c...

comment by dronemallone · 2018-09-04 · in A bug story: data alignment in C on x86 (2016)

…to use the deterministic variants if needed. I guess that would be hard with things like CPAN. https://github.com/openbsd/src/commit/2e109fb9e8c0dc273648dd... https://github.com/openbsd/src/commit/2e109fb9e8c0dc273648dd...…

comment by notaplumber · 2018-08-29 · in The setup of OpenBSD Amsterdam

…b.com/coreutils/coreutils/commit/24053fbd8f9bd3... OpenBSD true(1) however... seems pretty much dead. https://github.com/openbsd/src/tree/master/usr.bin/true

comment by moviuro · 2018-07-25 · in Be Nice and Write Stable Code

…and rarely used for anything else. Unveal lives in kernel, it just keeps a reference to vnode ( https://github.com/openbsd/src/blob/03249988e9bbffb48a568839... )

comment by dchest · 2018-07-19 · in Unveil(2) – Unveil parts of a restricted filesystem view

https://github.com/openbsd/src/commit/96c11352863a7f6240b4e5...

comment by foodstances · 2018-06-20 · in OpenBSD disables Intel's hyperthreading due to security concerns

…longer implements the kernel mechanism, had had it since the initial import from NetBSD in 1995. * https://github.com/openbsd/src/blob/df930be708d50e9715f173ca... Illumos has it, and has had since at least the OpenSolaris launch. *…

comment by JdeBP · 2018-06-14 · in Ancient “su – hostile” vulnerability in Debian 8 and 9

…and just make using it an error. * http://undeadly.org/cgi?action=article&sid=20170701132619 * https://github.com/openbsd/src/commit/baecf150995d4609cd1479... Others take a different view. * http://www.openwall.com/lists/oss-security/2017/0…

comment by JdeBP · 2018-06-14 · in Ancient “su – hostile” vulnerability in Debian 8 and 9

…from what's been committed today (see other comments). Github mirror, for easier review: https://github.com/openbsd/src/commit/e688c2b0648a80551cf735...

comment by brynet · 2018-06-06 · in Retguard: An improved stack protector for OpenBSD

…https://git.busybox.net/busybox/tree/libbb/remove_file.c And finally openbsd: https://github.com/openbsd/src/blob/master/bin/rm/rm.c

comment by zokier · 2018-04-24 · in Unraveling rm: what happens when you run it?

On GitHub, appears at [0] with comments coming in today at [1]. 0 - https://github.com/openbsd/src/commit/2e40dd69ac29d6a858309b... 1 - https://github.com/openbsd/src/commit/cc66e8f557d6f3d4dea5ea...

comment by kodablah · 2017-10-16 · in Key Reinstallation Attacks – Breaking WPA2 by Forcing Nonce Reuse

…through NetBSD to OpenBSD. * https://github.com/NetBSD/src/blob/516da8a02fc8bc10555ed9acd... * https://github.com/openbsd/src/blob/df930be708d50e9715f173ca... Manual pages are not standards, not specifications, but implementation…

comment by JdeBP · 2017-09-13 · in Systemd-resolved does not keep the order of the DNS servers

…(e.g. [1] [2] [3]) [1] https://github.com/freebsd/freebsd/blob/master/sys/dev/drm/d... [2] https://github.com/openbsd/src/blob/master/sys/dev/pci/drm/d... [3] https://github.com/illumos/illumos-gate/blob/master/usr/src/...

comment by 0xcde4c3db · 2017-08-31 · in Intro to Low-Level Graphics on Linux

https://github.com/openbsd/src/blob/master/sys/dev/acpi/dsdt... https://github.com/openbsd/src/blob/master/sys/dev/acpi/dsdt...

comment by foodstances · 2017-08-12 · in Show HN: Extension-blocking domains removed by threat from other blacklists

…in pthread_mutex_init, unlikely but certainly a valid change given lack of synchronization. [0] https://github.com/openbsd/src/blob/0ecb71b5ec9e4b22a484606f...

comment by wuch · 2017-07-27 · in OpenBSD switches the default compiler on amd64 and i386 to clang

OpenBSD has had a github mirror for awhile now. The commit is here: https://github.com/openbsd/src/commit/bc04e837fd81a3001f68f1... As for clang version, it looks to be 4.0.0 per https://github.com/openbsd/src/commit/53d771aafdbe5b919f264f.…

comment by voutilad · 2017-07-27 · in OpenBSD switches the default compiler on amd64 and i386 to clang

…is exactly what OpenBSD has done since Markus Friedl switched arc4random() to use ChaCha20 in 2013: https://github.com/openbsd/src/commit/90c1fad70a3483c2c72c3c... The design was inspired by Nick Mathewson's libottery:…

comment by djmdjm · 2017-07-24 · in Fast-key-erasure random-number generators

…cat is a little more convoluted than the simplest possible implementation (at least to my eyes): https://github.com/openbsd/src/blob/master/bin/cat/cat.c https://github.com/coreutils/coreutils/blob/master/src/cat.c (That is, Gnu "cat" and…

comment by e12e · 2017-06-14 · in How is GNU `yes` so fast?

…"easier, cleaner and shorter to write it in python"? Did you look at the OpenBSD implementation? https://github.com/openbsd/src/blob/master/usr.bin/yes/yes.c It's essentially line for line identical to your python code...

comment by raptorfactor · 2017-06-13 · in How is GNU `yes` so fast?

Speed vs readability: https://github.com/coreutils/coreutils/blob/master/src/yes.c https://github.com/openbsd/src/blob/master/usr.bin/yes/yes.c

comment by exxo_ · 2017-06-13 · in How is GNU `yes` so fast?

…of it with the help of an amazing team. Here it is pulling in the OpenBSD sources: https://sourcegraph.com/github.com/openbsd/src/-/blob/lib/li... . Sourcegraph has advanced features for several languages; see…

comment by sqs · 2017-06-09 · in Reading OpenBSD source code daily

…I'm going to say nobody checked for overflow prior to the August 2002 security advisory. https://github.com/openbsd/src/commit/c7b2af4b3f7e78424f8943... https://github.com/bminor/glibc/commit/0950889b810736fe7ad34...…

comment by ksherlock · 2016-12-06 · in Why does calloc exist?