kevlo retweeted
Apparently my pet project tlgs.one is affected by the Brotli vuln. But OpenBSD's allocator and relinked libc saved my day.
Same principal is now applied to everything I run. Even on Linux, per launch!
kevlo retweeted
A new dbupdate(8) utility is being backported and released as a syspatch(8) update for #OpenBSD 7.9/8.0. This will make it easier for users to periodically update /etc/ssl/cert.pem and /usr/share/zoneinfo.
It's also available as an errata patch: openbsd.org/errata80.html#p0…
#eMudhra
Errata patches released to address the eMudhra certificate compromise: openbsd.org/errata80.html (More details: emudhra.we-have-a-problem.co…)
kevlo retweeted
pbxscience.com/wine-is-being…
Wine Is Being Ported to OpenBSD, and The Witcher 3 Remaster Already Runs.
#OpenBSD developer Thomas Frohwein proposed the port on the project's ports mailing list on October 19, calling it perhaps the most surprising port proposal of the year....
#BSD
kevlo retweeted
vincentschmalbach.com/cve-20…
httpd(8):
header block "Content-Type" "*multipart*" 403 "multipart blocked"
relayd(8):
block request quick header "Content-Type" value pattern "[Mm][Uu][Ll][Tt][Ii][Pp][Aa][Rr][Tt]" label "multipart blocked"
Ordered another 𝗕𝗿𝗼𝘀𝗧𝗿𝗲𝗻𝗱 5GbE NIC from Amazon. As hoped, a new hardware revision.
amazon.com/BrosTrend-PCIe-Wi…
kevlo retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
kevlo retweeted
OpenBSD 8.0 release song? Oh yes— there's a release song.. 😏
"The Simps on AI"
openbsd.org/lyrics.html#80
ALT "The Simps on AI" - Composed & produced by Bob Kitella.
Surprise! #OpenBSD 8.0 is released! Happy release day! 🐡
openbsd.org/80.html
This is the 61st release of OpenBSD. Now get to upgrading/installing on all your machines. 👍
Announcement mail: marc.info/?l=openbsd-announc…
kevlo retweeted
OpenBSD 8.0 is out now! See what's new: openbsd.org/80.html
kevlo retweeted
Pigs really can fly, the moon is made of cheese and Wine now runs on #OpenBSD! 😅
Largely made possible by the work of Andrii (NethIafin), fabien@, and thfr@, 64-bit Windows applications (yes, games) run on -current!
WIP ports@ patch here: marc.info/?l=openbsd-ports&m…
#PlayOnBSD 🎮
Oh yeah btw, Thomas Frohwein (thfr@) is currently streaming some Death Stranding on OpenBSD. 😉
video.gamerstavern.online/w/…
#PlayOnBSD
kevlo retweeted
Heads up, Theo de Raadt has committed some additional tightening of setuid/setgid programs in #OpenBSD -current.
marc.info/?l=openbsd-cvs&m=1…
"If [a binary] has become setuid/setgid accidentally, unintentionally, or due to attacker control, and libc will log the event and abort."
kevlo retweeted
It's close to that time again.. if you're looking for some OpenBSD #80HYPE I have a summary post over on the fediverse, which allows more longform posts. 😎
#OpenBSD 8.0 releases later this month!
bsd.network/@brynet/11740703…
kevlo retweeted
Mischa Peters from over at OpenBSD Amsterdam with their fancy AMD EPYC servers showed off OpenBSD running with 64 VCPUs in vmm/vmd(8). 😆
dmesgd.nycbug.org/dmesgd?do=…
Blink and you might have missed it, mlarkin@ landed vmm/vmd(8) SMP guest support in #OpenBSD -current! 😁
This includes a new "cpus" param in vm.conf(5), and '-p' flag for vmctl(8). The default number of virtual guest CPUs is 1, with current max of 64.
github.com/openbsd/src/commi…
#OpenBSD rge(4) now supports multiple Rx queues, RSS and TSO on 𝗥𝗧𝗟𝟴𝟭𝟮𝟳 :)
marc.info/?l=openbsd-cvs&m=1…
kevlo retweeted
‼️ BREAKING: Google's Pixel 10 was remotely hacked three times in one day at Pwn2Own Ireland.
Three separate teams broke into the phone. Ikotas Labs chained multiple bugs for $300,000, the contest's top prize, and won Master of Pwn. Xint earned $150,000 and a CENSUS Labs and Mobile Hacking Lab team $112,500 for their own Pixel 10 exploits.
Google has 90 days to patch.
kevlo retweeted
IERAE CTF 2026 — FINAL for Humans #1
One Web challenge. A vanilla AI agent couldn't solve it in testing. AI is welcome.
October 10 · 09:00 JST
alpacahack.com/ctfs/ierae-fi…
