Re: openbsd on present day macintosh

2013-05-20 Thread Jeffrey 'jf' Lim
On Mon, May 20, 2013 at 7:18 PM, Mayuresh Kathe mayur...@devio.us wrote:
 hello, does anyone have any experience with
 installing and running openbsd on a present
 day macintosh, say a macmini?
 would like to know words of caution and
 advice before i commit to purchasing a
 macmini and using it exclusively for openbsd
 software development (my current thinkpad is
 dying quite rapidly).
 thanks.
 -mayuresh


ok, so why are u wanting to get a macintosh exactly if u're going to
be running openbsd on it? Why not stick to the Thinkpad line?

-jf

--
He who settles on the idea of the intelligent man as a static entity
only shows himself to be a fool.

Every nonfree program has a lord, a master --
and if you use the program, he is your master.
--Richard Stallman
--
He who settles on the idea of the intelligent man as a static entity
only shows himself to be a fool.

Every nonfree program has a lord, a master --
and if you use the program, he is your master.
--Richard Stallman


On Mon, May 20, 2013 at 7:18 PM, Mayuresh Kathe mayur...@devio.us wrote:
 hello, does anyone have any experience with
 installing and running openbsd on a present
 day macintosh, say a macmini?
 would like to know words of caution and
 advice before i commit to purchasing a
 macmini and using it exclusively for openbsd
 software development (my current thinkpad is
 dying quite rapidly).
 thanks.
 -mayuresh



Re: newline characters in kernel messages

2013-03-28 Thread Jeffrey 'jf' Lim
If your aim is to introduce newline characters, you got ur patch wrong
(reversed!)

-jf

On Thu, Mar 28, 2013 at 3:27 PM, Sergey Bronnikov este...@gmail.com wrote:
 please commit

 On 17:20 Sat 23 Mar , Sergey Bronnikov wrote:
 Hi

 I have found that several kernel messages doesn't contain newline character.
 Patches attached.

 --
 sergeyb@

 --- arch/i386/i386/acpi_machdep.c Sat Mar 23 16:59:09 2013
 +++ arch/i386/i386/acpi_machdep.c_Sat Mar 23 16:58:48 2013
 @@ -325,7 +325,7 @@ acpi_sleep_cpu(struct acpi_softc *sc, int state)
   if (state == ACPI_STATE_S4) {
   uvm_pmr_zero_everything();
   if (hibernate_suspend()) {
 - printf(%s: hibernate_suspend failed\n,
 + printf(%s: hibernate_suspend failed,
   DEVNAME(sc));
   hibernate_free();
   uvm_pmr_dirty_everything();
 @@ -343,7 +343,7 @@ acpi_sleep_cpu(struct acpi_softc *sc, int state)
   boothowto = ~RB_POWERDOWN;

   acpi_sleep_pm(sc, state);
 - printf(%s: acpi_sleep_pm failed\n, DEVNAME(sc));
 + printf(%s: acpi_sleep_pm failed, DEVNAME(sc));
   return (ECANCELED);
   }
   /* Resume path */

 --- arch/i386/i386/acpi_machdep.c Sat Mar 23 16:59:09 2013
 +++ arch/i386/i386/acpi_machdep.c_Sat Mar 23 16:58:48 2013
 @@ -325,7 +325,7 @@ acpi_sleep_cpu(struct acpi_softc *sc, int state)
   if (state == ACPI_STATE_S4) {
   uvm_pmr_zero_everything();
   if (hibernate_suspend()) {
 - printf(%s: hibernate_suspend failed\n,
 + printf(%s: hibernate_suspend failed,
   DEVNAME(sc));
   hibernate_free();
   uvm_pmr_dirty_everything();
 @@ -343,7 +343,7 @@ acpi_sleep_cpu(struct acpi_softc *sc, int state)
   boothowto = ~RB_POWERDOWN;

   acpi_sleep_pm(sc, state);
 - printf(%s: acpi_sleep_pm failed\n, DEVNAME(sc));
 + printf(%s: acpi_sleep_pm failed, DEVNAME(sc));
   return (ECANCELED);
   }
   /* Resume path */


 --
 sergeyb@



Re: OpenBSD in Rock Band 3

2010-12-06 Thread Jeffrey 'jf' Lim
On Tue, Dec 7, 2010 at 8:38 AM, Doug Clements dcleme...@gmail.com wrote:

 Misc,
   I sat through the ending credits of Rock Band 3 for the PS3
 tonight, and I saw a license inclusion from OpenBSD. I'm guessing they
 lifted some bit of code and used it in the game. Does anyone have any
 idea what portion it might have been?


:) well, possible to sit through those again? This time, prepare your
camera. :)

-jf





 There were also license notifications for AES, MD5, and RSA. I'm
 guessing these were probably for making sure online play integrity is
 assured, but I'm curious of those as well.

 --Doug



Re: Which laptops do the developers use?

2010-01-18 Thread Jeffrey 'jf' Lim
On Tue, Jan 19, 2010 at 8:12 AM, Ted Unangst ted.unan...@gmail.com wrote:
 On Mon, Jan 18, 2010 at 4:55 PM, Pau vim.u...@googlemail.com wrote:
 Thinkpad x200s works perfectly
 -the usb ports seem to be identified as 1.0, so that the speed is very
 low, but that is seemingly
 not a problem of open, but of the bios reporting a wrong value (see
 previous thread in misc)

 They attach as ehci on mine, though I'm not seeing particularly speedy
 transfers.


the config of the ports seems to be different, by virtue of the
magnetized or demagnetized nature of the port. Check out the port on
the left, nearer the heat vent. That seems to be magnetized. Any
difference for that vs the rest of the ports (unmagnetized) for you?

-jf


--
Every nonfree program has a lord, a master --
and if you use the program, he is your master.
--Richard Stallman

It's so hard to write a graphics driver that open-sourcing it would not help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Which laptops do the developers use?

2010-01-07 Thread Jeffrey 'jf' Lim
On Sun, Jan 3, 2010 at 12:33 AM, Tomas Bodzar tomas.bod...@gmail.com wrote:
 A lot of answers eg. here
 http://marc.info/?l=openbsd-miscw=2r=1s=developer+laptopq=b and
 info from this page http://www.openbsd.org/want.html : Laptops. These
 die often enough that our developers need about 2-3 replacements a
 year. is somewhat descriptive too.


just wondering - the url http://www.openbsd.org/i386-laptop.html is
pointed out a few times. What happened to it? I located a mirror (how
up-to-date i have no idea), btw at
http://mirror.hosting-concepts.com/pub/OpenBSD/i386-laptop.html

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Which laptops do the developers use?

2010-01-07 Thread Jeffrey 'jf' Lim
On Fri, Jan 8, 2010 at 1:57 AM, Marco Peereboom sl...@peereboom.us wrote:

 On Thu, Jan 07, 2010 at 11:57:58PM +0800, Jeffrey 'jf' Lim wrote:
 On Sun, Jan 3, 2010 at 12:33 AM, Tomas Bodzar tomas.bod...@gmail.com wrote:
  A lot of answers eg. here
  http://marc.info/?l=openbsd-miscw=2r=1s=developer+laptopq=b and
  info from this page http://www.openbsd.org/want.html : Laptops. These
  die often enough that our developers need about 2-3 replacements a
  year. is somewhat descriptive too.
 

 just wondering - the url http://www.openbsd.org/i386-laptop.html is
 pointed out a few times. What happened to it? I located a mirror (how
 up-to-date i have no idea), btw at
 http://mirror.hosting-concepts.com/pub/OpenBSD/i386-laptop.html

 It was removed because it was out of date and didn't contain anything
 really useful.  Laptops basically work just fine with OpenBSD minus some
 moody ones.


thanks. I understand the problem with maintaining a list like that,
but personally, i prefer a list with a note explaining the situation,
than no list at all. Some stuff would be laptop-specific as well (as
opposed to i386-general). Like how the new fingerprint readers on
thinkpads dont work. That would be good information to put up. People
also care about other things like fan speed control (are the fans
always on high?), and suspend and hibernate. That's my opinion.

-jf



Re: Recent ThinkPad T series

2009-09-21 Thread Jeffrey 'jf' Lim
On Mon, Sep 21, 2009 at 1:41 PM, Jeffrey 'jf' Lim jfs.wo...@gmail.comwrote:

 On Mon, Sep 21, 2009 at 12:11 PM, Michael Burk bur...@gmail.com wrote:


 UltraNav (TrackPoint and TouchPad) - probably



these (plural!) should be detected as standard HID devices.

-jf



Re: Supporting OpenBSD

2009-09-14 Thread Jeffrey 'jf' Lim
On Thu, Sep 10, 2009 at 6:45 PM, Daniel Bolgheroni 
m...@dbolgheroni.eng.brwrote:

 On Tue, 8 Sep 2009, Nick Holland wrote:

  Thanks to those that contribute money and buy CDs.

 I would like to buy CDs, but in Brazil these kind of products have a
 high tax fee applied when they hit the harbour. For a $50 CD, I'll
 probably pay almost $almost $70 to someone I don't want to contribute.
 This doesn't include the shipment cost (~$30 I suspect).

 I don't have a Paypal account (yet). If it's worth to trust him, I don't
 know, but I much prefer to donate $50 (although they will deduct 3.9% in
 my case, but at least OpenBSD doesn't have the CD cost) than to pay
 almost the triple to government, shipment, etc. Don't care if I don't
 get the CDs.

 Is it possible to OpenBSD to make profit for the project selling books
 or manuals? I don't know the costs or if it's worth (like CDs are better
 for the project than T-shirts, mugs, etc.). It's tax free here, and I
 think: if it's free here, maybe it's somewhere else.


I have the same concerns as well (i mean the shipping. F, i'll support the
project - but not the shipping?). I did get the disc set, though, but.. it
would be nice to be able to check out knowing how much i'm supposed to be
paying for shipping.

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Supporting OpenBSD

2009-09-09 Thread Jeffrey 'jf' Lim
On Wed, Sep 9, 2009 at 11:54 AM, Nick Holland
n...@holland-consulting.netwrote:

 What makes OpenBSD unique?  Everyone's got their own list, but here's
 mine:

 * Good work is unacceptable, great work is expected.
 * Quality is the #1 goal, it takes a back seat to NOTHING else.
 * Freedom for the users to use OpenBSD without question and without
  lawyers having to be involved, again without compromise.
 * Strong leadership.  Not a core team, or an elected committee
  that blows in the wind of public opinion, but one person who
  sets direction and policy for the project.  You may not always
  agree with Theo, but you never wonder where he stands on an
  issue, or what direction the project will go.


 all good stuff, yeah.


* Commitment to doing it right in one way, not twenty different
  ways (pick one, maybe you get lucky).


just one question - how do we determine this one right way? (like there
could be a multitude of ways to do the same thing)



 * Refusal to accept the damned all programs have bugs chant as
  an excuse for making crap
 * No fear of retaining things that work, and trashing things
  that are broke or inferior to newer (or older!) alternatives.
 * The Just Works philosophy.

 But...a project like OpenBSD doesn't just run on volunteer effort,
 it takes real money.  Hardware, infrastructure, Internet services,
 and if you are going to have ONE PERSON in charge, you need to
 keep them focused on the project, not in their spare time, and
 give them the money to live in reasonable comfort.

 I just had a talk with Theo, and he shared some numbers with me.
 There's a digit missing from the current CD pre-orders from where
 we were hoping to be now.  There's a trailing zero missing from
 what we'd really like to have.


I have a few questions about the stores in Australia (since we're on the
topic here). (http://www.openbsd.org/orders.html#au/lsl) LSL doesn't seem to
be doing pre-orders (see
http://www.lsl.com.au/advanced_search_result.php?keywords=openbsdx=0y=0);
does anybody know about the status of ESI? I cannot find any mention of
OpenBSD, let alone any pre-orders on their site (http://www.esi.com.au/).

If anybody living in Australia could help out to call the store/s (I dont
live there - it's just that this is the nearest store to me) and enquire,
that would be great.

thanks,
-jf



Re: Q: How to shop for a laptop to run OpenBSD?

2009-08-09 Thread Jeffrey 'jf' Lim
On Mon, Aug 10, 2009 at 2:39 AM, Edd Barrett vex...@gmail.com wrote:

 On Sun, Aug 09, 2009 at 09:19:11PM +0300, Ali M. wrote:
  Greetings,
 
  I will (hope) to buy a new laptop in a couple of months, how to make
  sure that the one I pick will work under OpenBSD.

 Get a thinkpad, and replace the wireless card :)



except that that's still no guarantee. Some thinkpads have nvidias So
remember to double-check still!

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Q: How to shop for a laptop to run OpenBSD?

2009-08-09 Thread Jeffrey 'jf' Lim
On Mon, Aug 10, 2009 at 3:02 AM, Matthew Szudzik mszud...@andrew.cmu.eduwrote:

 On Sun, Aug 09, 2009 at 07:39:19PM +0100, Edd Barrett wrote:
  Get a thinkpad, and replace the wireless card :)

 Maybe I'm paranoid, but I've been reluctant to get a new ThinkPad
 because they all have Intel AMT nowadays.

  http://marc.info/?l=openbsd-miscm=118302016430106

 http://software.intel.com/en-us/articles/architecture-guide-intel-active-management-technology/

 And according to the following forum post, there's no way to disable it

  http://forum.thinkpads.com/viewtopic.php?f=25t=62992


is there a list, some kind of a guide, for which processors have this? Or is
it a case of (?) all current and future processors having this? Would it be
better to go with AMD instead then in order to avoid this crap?

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Low power OpenBSD machine

2009-04-14 Thread Jeffrey 'jf' Lim
On Tue, Apr 14, 2009 at 12:00 AM, Mic J michael.cogn...@gmail.com wrote:
 What about the Intel Atom, there is a version targeted for kind of
 embedded systems.
 Think its called z5xx or something.

 Its a x86, so i suppose its well supported?

 i'm buying 1 soonish, board, with no fan, 2GB ram , and a case.

or you could wait for the soon-to-arrive ARM Cortex A8? At least,
that's what I'm waiting for.

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: F5 FirePass SSL VPN on OpenBSD

2009-04-03 Thread Jeffrey 'jf' Lim
On Fri, Apr 3, 2009 at 6:37 PM, Mikolaj Kucharski
miko...@kucharski.name wrote:
 Hi,

 Anyone knows any open-source client so OpenBSD could connect to it?


http://support.f5.com

-jf



Re: F5 FirePass SSL VPN on OpenBSD

2009-04-03 Thread Jeffrey 'jf' Lim
On Fri, Apr 3, 2009 at 6:58 PM, Andri Braselmann li...@braisel.com wrote:
 On Fri, Apr 03, 2009 at 11:37:47AM +0100, Mikolaj Kucharski wrote:

 Anyone knows any open-source client so OpenBSD could connect to it?

 seems that they use IPSEC:

 man 5 ipsec.conf

 will help you.


I'm sorry, but this F5SE begs to differ.
http://www.f5.com/products/firepass/ : FirePass provides robust,
secure SSL VPN remote access to business applications from a wide
range of client devices, ...

-jf F5SE



Re: might be slightly OT: `probability in PF'

2009-03-23 Thread Jeffrey 'jf' Lim
On Mon, Mar 23, 2009 at 4:27 PM, Stephan A. Rickauer
stephan.ricka...@startek.ch wrote:
 On Sat, 2009-03-21 at 12:14 +0100, Henning Brauer wrote:
 * jmc j...@cosmicnetworks.net [2009-03-11 15:05]:
  so anyway, how are _you_ using probability?

 it's high on my list of useless features in pf I'd rather remove.
 if anybody is actually using it, I'd like to hear about it.

 Once in a while a re-spot this 'feature' in the man pages and find it
 very cool. But then I can't come up with any idea of how to use it
 sanely. Could that be a case of 'uselessness'? ;)

 (never had to simulate bad lines so far, have enough of real ones)


Artur's use of throwing a spanner into the works of anybody who has
been blacklisted seems like a very good use case. I would use it that
way too. As opposed to outright blocking (100%), or outright
dropping, it makes it harder for them to think that they have been
found out. If you drop or block outright, that just means that they
will simply jump onto another different ip. I imagine they would call
up their own ISP, do network troubleshooting, blah blah, before they
conclude that it is you that is really causing the problem.

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: might be slightly OT: `probability in PF'

2009-03-11 Thread Jeffrey 'jf' Lim
On Wed, Mar 11, 2009 at 10:01 PM, jmc j...@cosmicnetworks.net wrote:
 i say this might be slightly OT because i am asking more of a
 philosophical question, not a technical one. the excellent documentation
 has given me all i need to know about the probability directive. thanks,
 devs, for that.


(just as a hint to the rest who are considering whether to read
through) doesnt sound philosophical to me!


 quick story: i have a couple dozen websites spread across two
 OpenBSD/base apache machines. one of my clients runs a web-based forum
 that's experienced a bit of trouble recently with previously banned
 users registering multiple accounts through open proxies and causing
 problems (just open proxies, not tor exit nodes). the mods have quelled
 the activity for now, but i'm thinking of ways to help them in the
 future. i use sensible max-src-conn and max-src-conn-rate to be sure to
 DoS attacks won't cause httpd to knock down my server, but this is a
 solution to a different problem in my eyes---this is just trying to be a
 good sysadmin.

 i have grepped through the logs of other clients, and i don't see any
 evidence of any traffic from the lists of open proxies i've compiled, so
 i don't think this would have un-intended effects on them.


dont see any evidence of *legit* traffic from the list of open proxies
you've compiled, u mean.


 the only reason i guess that i'm cautious about just getting a list of
 known open proxies, creating a pf table and running with something like:

 block in log quick on $ext_if from openproxies to any probability 90%

 is because it seems a little bofh-ly to me. and i guess it borders on
 security-through obscurity, which of course it not really security at
 all.

obscurity may not be true security, - but combined with security, it helps!


 but it seems a bit more sinister than just outright blocking, which
 kinda makes me snicker a bit. make the experience painful enough that
 they just go away.


which is good, dont u think? ;)


 and i suppose i've just been dying to find a use for the probability
 directive.

 so anyway, how are _you_ using probability? does this seem inline with
 what it was designed for? how, if at all, do you deal with open proxies?
 you can respond off-list if this is really too OT for m...@. and i'm not
 afraid to be told this is the stupidest. idea. ever. if that's what you
 think. i'm also open to other ideas.


no, it's not (the stupidest idea ever). I think it's good, in fact.
Frustrates, confuses, and throws a wrench in the works of the low life
and low intelligence scum.

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: http version of spamd, anyone?

2009-02-07 Thread Jeffrey 'jf' Lim
On Wed, Feb 4, 2009 at 5:10 PM, Bryan Irvine sparcta...@gmail.com wrote:
 mod_dosevasive


not looking at something based on apache (more of like a separate
utility, like spamd), but thanks for that.

-jf



Re: http version of spamd, anyone?

2009-02-07 Thread Jeffrey 'jf' Lim
On Sat, Feb 7, 2009 at 9:58 PM, Matt Hildebrand
matt.hildebr...@gmail.com wrote:
 HAProxy appears to have some tarpitting capability (although I've
 never used HAProxy and so cannot comment).

 Hope this helps.


thanks. I use that already in production for load-balancing (and it's
great). But as for tarpitting, it doesn't have the majority of what I
need... - no blacklisting, no tarpitting
open-connections-without-http-request, and no tarpitting for invalid
requests.

Its tarpitting is really quite simplistic. And it's not the tcp
window set to 1 network level tarpitting i'm looking at.

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: http version of spamd, anyone?

2009-02-03 Thread Jeffrey 'jf' Lim
anybody? I'm excluding the projects some of you might think of
(Labrea, and haproxy) for the reasons that none of them fit the
requirements that I have listed below...

-jf

On Tue, Feb 3, 2009 at 1:47 PM, Jeffrey 'jf' Lim jfs.wo...@gmail.com wrote:
 Is the project (or anybody) planning to work on something like spamd
 for http? Or does anybody know of any projects which do this already?

 I am looking for something to be (as per spamd) put in front of an
 actual server. A bunch of possible features i would be looking at:
 - blacklisting (should ideally allow for dynamic reloads without
 killing any existing valid connections)
 - tarpitting for open connections (no http request sent) beyond a
 certain timeout
 - tarpitting for invalid http requests
 - greytrapping (let's say u have only specific url patterns which
 are valid. Anything else, tarpit)


 thanks,
 -jf

 --
 In the meantime, here is your PSA:
 It's so hard to write a graphics driver that open-sourcing it would not 
 help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
 http://kerneltrap.org/node/7228



http version of spamd, anyone?

2009-02-02 Thread Jeffrey 'jf' Lim
Is the project (or anybody) planning to work on something like spamd
for http? Or does anybody know of any projects which do this already?

I am looking for something to be (as per spamd) put in front of an
actual server. A bunch of possible features i would be looking at:
- blacklisting (should ideally allow for dynamic reloads without
killing any existing valid connections)
- tarpitting for open connections (no http request sent) beyond a
certain timeout
- tarpitting for invalid http requests
- greytrapping (let's say u have only specific url patterns which
are valid. Anything else, tarpit)


thanks,
-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: atheros - just curious, ot

2008-07-27 Thread Jeffrey 'jf' Lim
On Mon, Jul 28, 2008 at 9:00 AM, bofh [EMAIL PROTECTED] wrote:


 I went back and re-read the press release.  It seems to be much worse than
 first glance.  [we hired X to] helps enhance regulatory compliance in the
 Linux kernel.  This probably means locking down the driver even more.
 Pretty sad.

 I'm hoping VIA's release of documentation is far better.


not too sure about that!!!
http://www.phoronix.com/scan.php?page=articleitem=via_bluffnum=1

http://linux.via.com.tw/ - the damned bastards released nothing but binary
drivers. And not even theirs at that!! (look at the filename -
via-unichrome This is a vendor, pretending to be offer open source
support - but only pointing to/pushing u back to the reverse engineering
efforts which are in need of the *real* support from VIA in the first
place!!!).

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: OT: BSDanywhere mailing lists online

2008-07-17 Thread Jeffrey 'jf' Lim
On Thu, Jul 17, 2008 at 9:42 PM, Stephan A. Rickauer
[EMAIL PROTECTED] wrote:

 The BSDanywhere project has now its own bug tracker as well as two
 mailing lists. No excuses for spamming the OpenBSD lists any longer ;)
 See http://bsdanywhere.org for details.


woohoo!!! this is cool. A few faq addition suggestions:
- what version of OpenBSD is this based on?
- how is this different from the jggimi discs?


-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Anybody have one of these CD drives to test with?

2008-06-30 Thread Jeffrey 'jf' Lim
On Mon, Jun 30, 2008 at 7:38 PM, Kenneth R Westerback 
[EMAIL PROTECTED] wrote:

 If anyone has one of these CD drives:

 MATSHITA CR-574
 MATSHITA CR-574


is this a repeat?




 SANYO CRD-256P
 SANYO CRD-254P
 SANYO CRD-S54P
 CD-ROM  CDR-S1
 CD-ROM  CDR-N16



-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Continuation of OpenBSD's Stop the Blob

2008-06-26 Thread Jeffrey 'jf' Lim
On Thu, Jun 26, 2008 at 9:46 PM, Lars Noodin [EMAIL PROTECTED]
wrote:

 It seems that OpenBSD's Stop the Blob message is getting more recognition:

http://www.fsdaily.com/stop-blob

 As the article points out, better late than never.

 Though OpenBSD had been on my list of things to look at for years, it
 was the Stop-the-Blob campaign that provided for me the final nudge.


sorry - the final nudge to do what exactly? Stop the blob? Everybody should
listened a long time ago. I suppose it's good that the message has finally
come out now from the linux developers, but man... havent they let those
blobby fools (and we all know the most famous example) entrench themselves
already?

-jf

this has been my signature for like the longest time now... --

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Anyone from this list at BlackHat or DefCon? And a query...

2008-06-26 Thread Jeffrey 'jf' Lim
On Thu, Jun 26, 2008 at 12:07 PM, Amarendra Godbole 
[EMAIL PROTECTED] wrote:

 Hi,

 It would be a pleasure meeting folks on this mailing list, including
 OBSD developers' at BH or DefCon. Thanks.

 [snip]


I look at Intel firmware, and i go oh. BLOB. ;)

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Continuation of OpenBSD's Stop the Blob

2008-06-26 Thread Jeffrey 'jf' Lim
On Thu, Jun 26, 2008 at 9:57 PM, Martin Schrvder [EMAIL PROTECTED] wrote:

 2008/6/26 Lars Noodin [EMAIL PROTECTED]:
  It seems that OpenBSD's Stop the Blob message is getting more
 recognition:
 
 http://www.fsdaily.com/stop-blob
 
  As the article points out, better late than never.

 GPL'd drivers don't help much; some argue that they are part of the
 problem.
 http://www.openbsd.org/papers/opencon06-docs/index.html

 Best
Martin


this is good stuff, but... why'd u even mention GPL? I dont see any mention
of GPL in there.

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



VIA Announces Strategic Open Source Driver Development Initiative

2008-04-09 Thread Jeffrey 'jf' Lim
http://www.via.com.tw/en/resources/pressroom/pressrelease.jsp?press_release_no=2088

would this be good news for the community? This is really mainly
Linux-related, but i'm hoping that their mention of technical
documentation will be good enough for Open to be able to support them...

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: VIA Announces Strategic Open Source Driver Development Initiative

2008-04-09 Thread Jeffrey 'jf' Lim
On Thu, Apr 10, 2008 at 9:41 AM, Zbigniew Baniewski [EMAIL PROTECTED] wrote:

 On Thu, Apr 10, 2008 at 12:08:26AM +, Jacob Meuser wrote:

   Yes, I noticed it's there - but does the driver support all of the
 available
   capabilities?
 
  according to BUGS in envy(4), no.  but emu(4) doesn't support all
  the features of the emu10k1 chips, either.

 I understand - but the mentioned VIA opening is suggesting, that perhaps
 completing the envy driver can be much easier, if VIA will release the
 docs;
 Creative Labs, unfortunately, still doesn't seem to be willing to.


oh it's more than that! Creative: the company that sues you for your
drivers. And gets to decide which features it will want to enable its
drivers for you, the consumer. How's that for a creative perspective on the
rights of the customer!

http://hardware.slashdot.org/hardware/08/03/29/046201.shtml


-Jeff

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: UFS2 status in 4.3?

2008-03-16 Thread Jeffrey 'jf' Lim
On 15 Mar 2008 21:37:45 -0700, Unix Fan [EMAIL PROTECTED] wrote:


 They are the same thing, FFS is an acronym for Berkeley's Fast File
 System - which is a decedent of ATT UFS (Unix File System).

 I agree, the naming conventions between the BSD's are unique... but see
 the following and just accept the fact UFS2 or FFS2 are partially supported
 as Otto explained.


 http://lists.freebsd.org/pipermail/freebsd-current/2003-April/001444.html

 http://en.wikipedia.org/wiki/Unix_File_System


ok, aside from the FFS on UFS, or UFS on FFS disagreement, both documents
are in agreement that UFS and FFS refer to different things?

-jf


--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not
help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: OBSD's perspective on SELinux

2007-09-22 Thread Jeffrey 'jf' Lim
On 9/23/07, Jason Dixon [EMAIL PROTECTED] wrote:
 On Sep 22, 2007, at 12:00 PM, Darrin Chandler wrote:

  On Sat, Sep 22, 2007 at 11:34:33AM -0400, Douglas A. Tutty wrote:
  Linux has SELinux in its 2.6 kernel and debian has gone ahead and
  compiled SELinux into the libraries, although the SELinux policies
  aren't ready on debian yet.  The whole focus seems to be to make
  Linux
  more secure.  I'm not sure what to make of it.  I figure that if
  you
  want secure, you switch to OBSD.
 
  Could someone who knows both the details of OBSDs security
  enhancements
  and the details of SELinux comment?
 
  I don't know all the details, and especially not the SELinux details,
  but that won't stop me from commenting.
 
  Not long ago I was talking with a Linux person about security, and
  they
  pointed me to a set of patches that did a lot of nifty stuff. Good
  stuff, like the things you find OpenBSD doing. But it's not in the
  mainline kernel, it's a set of patches.
 
  Security should not be grafted on, it should be integrated into the
  main development process.

yes you're right. Although that point no longer holds. SELinux is more
or less official now. But for a looong (long) time, it was pretty
apparent what the focus of the developers was *not* on And even
now so (IMO)


  I'm sure the patch maintainers are doing
  their
  best, but this doesn't change the fundamental flaw in the process.
  It's
  not a flaw of their making, it's inherent in the situation. But it's
  still a flaw.
 
  Compare that to a complete operating system (OpenBSD) where
  security is part of
  code quality, and part of the normal mainline development.

 If I could add one thing to Darrin's comment (of which I agree
 completely), it would be this:

 SELinux is a button.  Buttons are easy to turn off.


button, yes. The scary (or interesting, depending on how you see it)
bit is that there is a whole infrastructure (LKM) behind it making it
easy(?) to create, and plug in your own buttons to do your own funky
stuff...


-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: problem sata with asus m2v-mx motherboard

2007-09-08 Thread Jeffrey 'jf' Lim
On 9/8/07, Benoit Chesneau [EMAIL PROTECTED] wrote:

 Anyyway enabled acpi solved my problem.


Enabled acpi, AND disabled isadma (as you previously said - with
the and), or (now) *just* enabled acpi? Pls be clear about
things...

-jf

--
In the meantime, here is your PSA:
It's so hard to write a graphics driver that open-sourcing it would not help.
-- Andrew Fear, Software Product Manager, NVIDIA Corporation
http://kerneltrap.org/node/7228



Re: Looking for readers of RFC's

2007-06-10 Thread Jeffrey 'jf' Lim

On 6/8/07, Peter J. Philipp [EMAIL PROTECTED] wrote:

Hi,

I'm looking for up to 4000+ readers to read one RFC out loud and record it.
Please contact me to be handed a number to read.  I'm looking to give these
to OpenBSD as a community effort.  Please read my blog at http://centroid.eu
for more information.



Why not just give the direct url to ur blog?
https://ssl-id.de/centroid.eu/blog/ Is this shifting anytime soon?

Perhaps it might be obvious to some but... it would be nice to at
least state the why of this exercise. As it is, it's hard to grep
through ur longish blog (https://ssl-id.de/centroid.eu/blog/) to try
to find (if u have posted it) the whys of this exercise.

-jf

--
It's so hard to write a graphics driver that open-sourcing it would not help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228



Re: Virtual interface

2007-05-26 Thread Jeffrey 'jf' Lim

On 5/24/07, Michael [EMAIL PROTECTED] wrote:

Hi,

Renaud Allard schrieb:
 Unfortunately, this doesn't work on sysjail.
 I think the next version of sysjail should support dedicated IP, but I
 have no clue on when it will be out.
Thats just too bad. The project seems neglected too at the moment so I
wonder if that feature will ever come at all.



indeed! the mailing list is dead, there is no way to even subscribe to
it as per instructions (550 5.1.1 [EMAIL PROTECTED]: Recipient
address rejected: User unknown in virtual mailbox table), Kristaps
Johnson (the only dev who lists his email;
http://sysjail.bsd.lv/contact.html) is uncontactable ('dig -t mx
gradient-enterprises.com' fails!), the mailing list archives show the
last post as going back to 16 Feb 2007...

If anybody knows of any hope of life for this project, i'm sure i (and
a lot of other folks too) would be interested.

-jf

--
It's so hard to write a graphics driver that open-sourcing it would not help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228



Re: sysjail and networking

2007-05-24 Thread Jeffrey 'jf' Lim

On 5/23/07, Michael [EMAIL PROTECTED] wrote:

PS: The last news at the sysjail homepage are quite old. I found a bug
on sparc64 and already reported it, no answer so far, just wondering if
maybe someone knows if the project still active and in development?



i have been wondering that myself. Last i tried, i couldnt even get an
email to be sent to majordomo to subscribe on to the list...
(PERM_FAILURE: SMTP Error (state 9): 550 5.1.1
[EMAIL PROTECTED]: Recipient address rejected: User unknown in
virtual mailbox table!)

Perhaps u might have better luck just trying to reach one of the guys
(http://sysjail.bsd.lv/contact.html) directly

-jf

--
It's so hard to write a graphics driver that open-sourcing it would not help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228



Re: more, vs less, for default man pager - why?

2007-04-29 Thread Jeffrey 'jf' Lim

On 4/29/07, Darrin Chandler [EMAIL PROTECTED] wrote:

On Sat, Apr 28, 2007 at 09:46:32PM +0800, Jeffrey 'jf' Lim wrote:
 So it's just a difference in prompt, and behaviour when the pager gets
 to the end of the file? does anybody have any insight into this issue?

I think it's just always been that way in UNIX,


i can accept that if that is the case.


there are valid points
on both sides of the issue, and it's trivial to set PAGER yourself.



of course. It's just a curiosity thing for me. That, and of course,
wanting to find out more and understand more about this great OS here.


Sometimes it's very nice that `more' returns to the prompt with the man
page still on the screen, for instance.



perhaps convenient would be a better word (and that, only for short
man pages)? 'less' can do the same thing too - with the bonus that u
can get to choose exactly where in the man page u want to exit.

-jf

--
It's so hard to write a graphics driver that open-sourcing it would not help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228



more, vs less, for default man pager - why?

2007-04-28 Thread Jeffrey 'jf' Lim

hi, folks, i've been thinking about this for some time now, but havent
actually figured it out - is there any reason why more should be
preferred over less as the default MANPAGER? I cant think of any
reasons myself, and just recently discovered that 'more' is the same
binary as 'less' as well! So to me, any previous considerations that i
may have held about more being more secure than less just go flying
out the window. But perhaps it is a different behaviour then? Well the
only difference that i can tell, from more(1)/less(1) are:

This version of less also acts as more(1) if it is called as more.  In
this mode, the differences are in the prompt and that more exits by de-
fault when it gets to the end of the file.

So it's just a difference in prompt, and behaviour when the pager gets
to the end of the file? does anybody have any insight into this issue?

-jf

--
It's so hard to write a graphics driver that open-sourcing it would not help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228



Re: SSHJail patch for OpenBSD

2007-04-27 Thread Jeffrey 'jf' Lim

On 4/27/07, Chris Lawson [EMAIL PROTECTED] wrote:

Read the web page, it explains the reasoning right at the top.  If you
are instead being disingenuous (yes yes, I know you are) perhaps you
could explain to us why you think this isn't a good idea.



i wouldnt propose to speak for Marco (or anyone else), but perhaps the
answer might lie in
http://chrootssh.sourceforge.net/docs/faq.html#commit (which would
also mean that something better, and more system-wide should be worked
on instead)? The second reason i can think of is that it's a hack,
rather than a correct way of doing things (i forget where i read that
from - but then again, u really shouldnt be missing this - but i
believe that this is very much a part of OpenBSD's philosophy).

One tip for Rico though - given that this is a patch against OpenSSH,
of the OpenBSD project, shouldnt u really be considering using the
safer version of strlcpy, rather than strcpy?

-jf

--
It's so hard to write a graphics driver that open-sourcing it would not help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228



Re: SSHJail patch for OpenBSD

2007-04-27 Thread Jeffrey 'jf' Lim

On 4/27/07, Tobias Weisserth [EMAIL PROTECTED] wrote:

Hi,

On Apr 27, 2007, at 1:38 PM, Jeffrey 'jf' Lim wrote:

 On 4/27/07, Chris Lawson [EMAIL PROTECTED] wrote:
 Read the web page, it explains the reasoning right at the top.  If
 you
 are instead being disingenuous (yes yes, I know you are) perhaps you
 could explain to us why you think this isn't a good idea.

How about a solution involving systrace to lock a user's login shell
within certain parameters? Such a scenario has been done, I've read
about it on undeadly.

regards,
Tobias



can u pls quote properly?

-jf

--
It's so hard to write a graphics driver that open-sourcing it would not help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228



Re: SSHJail patch for OpenBSD

2007-04-27 Thread Jeffrey 'jf' Lim

On 4/28/07, Rico Secada [EMAIL PROTECTED] wrote:

On Fri, 27 Apr 2007 10:30:03 -0700
Ted Unangst [EMAIL PROTECTED] wrote:


 why are you asking this list about somebody else's patch?

Because I was looking for people using OpenBSD who might have issues with
this patch.



Nobody will have any issues with this patch, and here's why:
- nobody will be using it (you are talking about people using OpenBSD)
- the patch is only against the version of OpenSSH as *ported to other
operating systems* (p1) - and not OpenBSD's openssh.


 ask the somebody else if their patch works.

If I could benefit from that, I would.



http://paradigma.pt/~gngs/sshjail/#Credits

-jf

--
It's so hard to write a graphics driver that open-sourcing it would not help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228



Re: 4.0 Installation problems

2007-04-25 Thread Jeffrey 'jf' Lim

On 4/26/07, chayashida [EMAIL PROTECTED] wrote:

chayashida wrote:
 The install appears to go okay, but then it hangs after the file sets are
 copied. It doesn't matter if I select all, some, or the minimal file sets:
 the installation always hangs after the copy is finished. I tried a
 separate set of CDs, just to see if that was the issue,




(Previously, I
had tried from another disc, so I was able to rule out the CD.) The
only other difference was that the files on the CD were in the root of
the disc, instead of 4.0/i386. I made another CD with the files in the
correct directory and tried to install, and I still had problems. I
also tested that CD by copying all the files off the CD without
errors.



uh... so many CDs... which CDs are u using? And why should u be
modifying them in the first place?

-jf

--
It's so hard to write a graphics driver that open-sourcing it would not help.
   -- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228