weirdr.net is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
For my NetBSD install I wanted to include _disk encryption_ to protect personal data in case the device is lost or stolen.
Its not really enough to simply encrypt home directories. Passphrases and sensitive data can linger and be extracted from locations such as system logs and swap memory. There is a trade-off to be made between how much to encrypt, the convenience of operating the system, and the ability for the system to boot.
This is how I do it...
Next #swad improvement: Make sure to #wipe #passwords from RAM directly after used. That's more of a #security precaution, because there *should* be no way how an attacker can access a running process' memory, but you never know which bugs surface ๐.
Unexpectedly, that posed #portability issues. #C11 has #memset_s ... a pretty weird function, but suitable for wiping. It's there on #FreeBSD and on #OpenBSD. Not on #NetBSD though. But NetBSD offers the much saner #C23 function #memset_explicit. Looking at #Linux, there's neither. But there is the (non-standard!) #explicit_bzero ๐คฏ .. and with glibc, it requires _DEFAULT_SOURCE to be defined as soon as you compile with a C standard version given to the compiler. This function exists on some other systems as well, but there's confusion whether it should be declared in string.h or strings.h. ๐คช
Here's the full set of compile-tests I'm now doing, only to find the best way to really erase memory:
https://github.com/Zirias/swad/blob/master/src/bin/swad/swad.mk#L6
And if none of these functions is found, swad uses the "hacky" way that most likely works as well: Access the normal memset function via a volatile pointer.
Does #NetBSD support ZRAM?
About the #random thingie ... I need random data in #swad to generate unpredictable #session IDs.
I previously had an implementation trying the #Linux-originating #getrandom if available, with a fallback to a stupid internal #xorshift #PRNG, which could be disabled because it's obviously NOT cryptographically secure, and WAS disabled for the generation of session IDs.
Then I learned #arc4random is available on many systems nowadays (#FreeBSD, #NetBSD, even Linux with a recent-enough glibc), so I decided to add a compile check for it and replace the whole mess with nothing but an arc4random call IF it is available.
arc4random originates from #OpenBSD and provides the only sane way to get cryptographically secure random data. It automatically and transparently (re-)seeds from OS entropy sources, but uses an internal CSPRNG most of the time (nowadays typically #ChaCha20, so it's a misnomer, but hey ...). It never fails, it never blocks. It just works. Awesome.
Look at my makeshift exhibit at #IndyClassic!
Latest ๐ฉ๐ฎ๐น๐๐ฎ๐ฏ๐น๐ฒ ๐ก๐ฒ๐๐ - ๐ฎ๐ฌ๐ฎ๐ฑ/๐ฌ๐ฐ/๐ญ๐ฐ (Valuable News - 2025/04/14) available.
https://vermaden.wordpress.com/2025/04/14/valuable-news-2025-04-14/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
@stefano @justine @stablehorde_generator generated the following artist's impression of the #NetBSD posse
ostan101, saw this Linux only meme added some flavour for BSDs ๐ #RunBSD #DragonflyBSD #FreeBSD #NetBSD #OpenBSD
./build.sh #NetBSD
Framework Laptop 12 is now on pre-order:
https://frame.work/fr/en/products/laptop12-diy-intel-13gen/configuration/new
That little machine looks gorgeous and the prices are surprisingly reasonable.
I have to resist ordering such a machine for #OpenBSD 7.7...
What about #NetBSD 10.1?
But is it supported by BSD...? Only one way to find out! ๐ค
I just launched the new @BoxyBSD self-service portal where you can finally manage your BSD based box instances on your own - and I really love this minimalistic and terminal alike design.
The installer currently supports #FreeBSD, #OpenBSD, #NetBSD, #DragonflyBSD, #MidnightBSD and also #Illumos (#OpenSolaris).
Have fun and #RUNBSD!
Registration for BSDCan 2025 is open!
Tutorials Jun 11-12
Talks & BOFs Jun 13-14,
See https://blog.bsdcan.org/blog/ and register at https://www.bsdcan.org/2025/registration.html
#bsdcan #conference #unixlike #bsd #netbsd #freebsd #openbsd #freesoftware #development #sysadmin #devops #security #networking #libresoftware
At EuroBSDCon 2025, we're eager to read your paper, BOF or tutorial submission!
Please go to https://2025.eurobsdcon.org/ for info, submit at https://events.eurobsdcon.org/2025/cfp
See you in Zagreb in September!
#eurobsdcon #conference #unixlike #bsd #netbsd #freebsd #openbsd #freesoftware #development #devops #sysadmin #networking #libresoftware #security
Happy #WorldSparrowDay! By the NetBSD community. Just like these resilient little birds, #NetBSD is adaptable and thrives in diverse environments. Let's appreciate the small but mighty! ๐ฆ๐ป #OpenSource #Linux #MacOS #RunBSD
Registration is open for #bsdcan, program published - see the blog post at https://blog.bsdcan.org/2025/03/18/bsdcan-2025-talks-tutorials-and-registration/ for details, or go to https://bsdcan.org (direct to registration link: https://indico.bsdcan.org/event/5/registrations/8/) #bsd #unix #openbsd #freebsd #netbsd #development #devops #sysadmin #freesoftware #libresoftware
Now that it's official, I can announce it - although I may have dropped a few hints earlier! ๐
My talk "Why (and how) weโre migrating many of our servers from Linux to the BSDs" has been accepted, and Iโll be honored to present it in June at BSDCan in Ottawa.
The joy of meeting BSD friends in person again (and those I havenโt had the chance to meet live yet) will be immense, and the honor of sharing my story in Canada is truly beyond measure, especially considering the level of other talks and all the people attending.
Of course, Iโll be bringing various BSD Cafe gadgets with me!
For more information, hereโs @mwl 's post with further details: https://blog.bsdcan.org/2025/03/18/bsdcan-2025-talks-tutorials-and-registration/
EuroBSDcon 2025 in Zagreb
- Call for Papers runs until June 21st, 2025 https://2025.eurobsdcon.org/cfp/
Conference 2025-09-25 - 2025-09-28
Tutorials September 25-26 2025
Talks September 27-28 2025
#eurobsdcon #bsd #unix #conference #openbsd #freebsd #netbsd #development #devops #sysadmin
Latest ๐ฉ๐ฎ๐น๐๐ฎ๐ฏ๐น๐ฒ ๐ก๐ฒ๐๐ - ๐ฎ๐ฌ๐ฎ๐ฑ/๐ฌ๐ฏ/๐ญ๐ณ (Valuable News - 2025/03/17) available.
https://vermaden.wordpress.com/2025/03/17/valuable-news-2025-03-17/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Well, I did not go back to the gym and I certainly did not install #NetBSD today...
Ah well, there is always tomorrow.
Oh wait, tomorrow is Monday... โน๏ธ