Re: Status of hardware encryption accelerators

2006-11-04 Thread shanejp
Bhima,

Quoting Bhima Pandava <[EMAIL PROTECTED]>:

> Interesting.
> 
> I had assumed that hardware accelerators kept more or less the same
> pace of improvement as general purpose CPUs.  Can you point to any
> literature that shows that it doesn't?

CPU's keep getting faster and crypto accelerators keep getting faster. But 
from what I can tell, due to the bus between them, you can be taking two steps 
forward and then one step back.

The amazing AES performance of the VIA CPU's seem to show a better way.


Shane




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: RMS vs TdR (WAS: Re: OLPC)

2006-10-11 Thread shanejp
Breen,

Quoting Breen Ouellette <[EMAIL PROTECTED]>:

> PS - Jack, some friendly advice, you are only encouraging them each time
> you reply. They obviously don't care about why you find interest in this
> subject. They only want to find a way to link you to RMS and then trash you.

I wasn't trying to start a holy war. I asked the question because "interesting" 
was placed in quotes, as if it had some greater unspoken meaning...

>> I find the contrast between them ... um ... "interesting".

RMS being a bit out of touch sometimes is just my opinion. I'm not trying to 
link RMS to anyone or trash Jack.


Shane




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: Version 4.0 release

2006-10-09 Thread shanejp
Quoting Darrin Chandler <[EMAIL PROTECTED]>:

> The willingness to take in code submissions is almost surprising,
> really. Surely no person has any right to *gripe*!

I'm really surprised by the attitude of some people.

Generous person: Here, have a free car.

Ungrateful person: Aww, it's RED! I don't like RED! And the Windows are
not automatic! I have to wind them myself?!

Then the generous person gets accused of being rude due to his
completely reasonable reaction to such ungrateful behaviour.

Amazing.


Shane




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: FYI SK(4) D-Link DGE-530T Rev B1 does not appear in dmesg. (SOLVED)

2006-06-21 Thread shanejp
Quoting [EMAIL PROTECTED]:

> Quoting Nick Holland <[EMAIL PROTECTED]>:
> 
> > [EMAIL PROTECTED] wrote:
> > ...
> > > The dmesg with the B1 card only lacks the three appropriate lines which
> > > appear for the Rev A1 card when it is inserted in the same PCI slot:
> >
> > IF that is true, your card wasn't inserted properly.

I tried it in all the other slots and neither OpenBSD nor Windows
detected it.

> > PCI cards show up.  SOMETHING will show up...even if it isn't
> > recognized.  The only exceptions are if the card is behind a broken or
> > unrecognized bridge.

I tried it in a different PC and the card was shown in the dmesg as a
DGE-560T_2.

So it seems that first PC is a quirky one. Sorry about the bogus "FYI".


Shane




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: FYI SK(4) D-Link DGE-530T Rev B1 does not appear in dmesg.

2006-06-21 Thread shanejp
Hello Nick,

Quoting Nick Holland <[EMAIL PROTECTED]>:

> [EMAIL PROTECTED] wrote:
> ...
> > The dmesg with the B1 card only lacks the three appropriate lines which
> > appear for the Rev A1 card when it is inserted in the same PCI slot:
> 
> IF that is true, your card wasn't inserted properly.

I saved each dmesg to a file and then ran diff to make sure of it before
posting to the list.

> PCI cards show up.  SOMETHING will show up...even if it isn't
> recognized.  The only exceptions are if the card is behind a broken or
> unrecognized bridge.

I'll try it in some other slots and I'll also see if it works at all under
Windows XP just to eliminate the card.

Thanks,


Shane




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: Doubts about OpenBSD security.

2006-06-21 Thread shanejp
Quoting Jared Solomon <[EMAIL PROTECTED]>:

> That's why I always hardware hack my servers with a fragmentation
> grenade.  And, for good measure, anti-personnel mines underneath the
> raised flooring.

I prefer to have the doors automatically locked and then have the halon 
deployed.

Much cleaner.  ; )




This email was sent from Netspace Webmail: http://www.netspace.net.au



FYI SK(4) D-Link DGE-530T Rev B1 does not appear in dmesg.

2006-06-21 Thread shanejp
Hello list,

Just an FYI on the B1 revision of the D-Link DGE-530T.

I recently purchased another D-Link DGE-530T and noticed when I got it
home that it is a Rev B1 card, unlike all my others which are Rev A1.
The Rev B1 card is not shown in the dmesg and thus does not yet work.

The chips on the cards are marked with these numbers:

Rev A1: 88E8003-LKJ
Rev B1: 88E8001-LKJ1

The dmesg with the B1 card only lacks the three appropriate lines which
appear for the Rev A1 card when it is inserted in the same PCI slot:



dmesg with DGE-530T Rev A1:

OpenBSD 3.9 (GENERIC) #617: Thu Mar  2 02:26:48 MST 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 349 MHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
real mem  = 402235392 (392808K)
avail mem = 359677952 (351248K)
using 4278 buffers containing 20213760 bytes (19740K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(c7) BIOS, date 04/14/98, BIOS32 rev. 0 @ 0xec700
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xec700/0x3900
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf69e0/176 (9 entries)
pcibios0: PCI Interrupt Router at 000:20:0 ("Intel 82371AB PIIX4 ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0x8000 0xe/0x8000!
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82443BX AGP" rev 0x03
ppb0 at pci0 dev 1 function 0 "Intel 82443BX AGP" rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "ATI Rage Pro" rev 0x5c
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
skc0 at pci0 dev 16 function 0 "D-Link Systems DGE-530T" rev 0x11, Marvell Yukon
(0x1): irq 11
sk0 at skc0 port A, address 00:11:95:f7:3c:5e
eephy0 at sk0 phy 0: Marvell 88E1011 Gigabit PHY, rev. 3
pcib0 at pci0 dev 20 function 0 "Intel 82371AB PIIX4 ISA" rev 0x02
pciide0 at pci0 dev 20 function 1 "Intel 82371AB IDE" rev 0x01: DMA, channel 0
wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA, 19470MB, 39876480 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  SCSI0 5/cdrom 
removable
cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
uhci0 at pci0 dev 20 function 2 "Intel 82371AB USB" rev 0x01: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
piixpm0 at pci0 dev 20 function 3 "Intel 82371AB Power" rev 0x02: SMI
iic0 at piixpm0
"unknown" at iic0 addr 0x18 not configured
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
sb0 at isa0 port 0x220/24 irq 5 drq 1: dsp v3.01
midi0 at sb0: 
audio0 at sb0
opl0 at sb0: model OPL3
midi1 at opl0: 
pcppi0 at isa0 port 0x61
midi2 at pcppi0: 
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask ff45 netmask ff45 ttymask ffc7
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
uhidev0 at uhub0 port 1 configuration 1 interface 0
uhidev0: Microsoft Basic Optical Mouse, rev 1.10/0.00, addr 2, iclass 3/1
ums0 at uhidev0: 3 buttons and Z dir.
wsmouse0 at ums0 mux 0
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302



dmesg with DGE-530T Rev B1 is the same but without these:

skc0 at pci0 dev 16 function 0 "D-Link Systems DGE-530T" rev 0x11, Marvell Yukon
(0x1): irq 11
sk0 at skc0 port A, address 00:11:95:f7:3c:5e
eephy0 at sk0 phy 0: Marvell 88E1011 Gigabit PHY, rev. 3



I noticed while Googl'ing for info on this, that NetBSD has added
support for the B1. Here are links to the entries if it helps at all:

http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/pci/if_sk.c?rev=1.7.2.3.2.9&content-type=text/x-cvsweb-markup

http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/pci/if_skreg.h?rev=1.7&content-type=text/x-cvsweb-markup


I hope D-Link don't go radically changing chipsets on these cheap sk's
like they have been known to do with their wireless cards.

Bye for now,


Shane




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: Fw: Why packets are not blocked

2006-03-08 Thread shanejp
Hey Jim,

Quoting Jim <[EMAIL PROTECTED]>:

> If I were her, and I saw these rules, I would just change my IP with
> ifconfig :D
> 
> two problems here.
> 1. she is not smart enough

I hope you mean, "she is not knowledgeable enough".


Shane




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: Pf que for voip

2006-02-02 Thread shanejp
Quoting Graham Gower <[EMAIL PROTECTED]>:
Hi Graham,

> This begs the question, what should you do if your bandwidth is variable?

I've wondered that myself. I figured someone in that situation might
have to settle for an upload bandwidth limited to the worst case?


Shane




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: Pf que for voip

2006-02-01 Thread shanejp
Hi Alex,

Quoting Alex Stamatis <[EMAIL PROTECTED]>:

> Now I need an advise from you who know it very well and especially the pf (i
> am a total noob on pf). I bought a voip device today. And i want the router
> no matter what the network usage is and packets to always give full priority
> and the needed speed to 4 ports and a port range in 1 ip in order this
> device can work properly because if I am on the phone and start a download
> from another computer on the network the voip goes down

Before tinkering with queues, you might like to figure out your usable
upload bandwidth to know what you're playing with. I would consider my
VoIP altq rules a work in progress at the moment, but defining the
upload bandwidths seem to be quite sensitive.

I have ADSL PPPoA 1536/256 kbit/s and define my upload bandwidth as
212kbit/s and VoIP seems to be working great (quality at both ends).
However if I define my upload bandwidth as 213kbit/s then it is as if
I have just switched altq off. Setting it lower than 212kbit/s then
gradually hurts download speeds (with pri of empty acks to minimize
that problem coming second to VoIP).

So it might be a good idea to know what you have to play with first.
If you estimate too high, your VoIP queues are not going to be effective
and you might waste lots of time trying to figure out why queues which
should be working fine, are not.


Shane




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: track release cycle by mumber of whiny posts to misc@

2005-10-19 Thread shanejp
Quoting Diana Eichert <[EMAIL PROTECTED]>:

> Perhaps I should post a URL for a plot of whiny posts vs. worthwhile
> posts over time.

A Signal to Noise Ratio of sorts? We could measure it in decitrolls!




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: OpenBSD's 10th birthday

2005-10-18 Thread shanejp
Quoting Theo de Raadt <[EMAIL PROTECTED]>:

> Now it is really OpenBSD's 10th birthday ;)

A big thank you and congratulations for this one-of-many milestones, to
Theo and all the other developers.


Shane J Pearson, Sydney. A happy OpenBSD user since 2.5.




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: External, USB hard drives

2005-06-24 Thread shanejp
Quoting Steven Bowers <[EMAIL PROTECTED]>:

> speaking are they all compatible? Are there specific brands/models to
> stay away from?

I have a USB2/Firewire combo unit based on the Prolific PL-3507 chipset.
It is problematic and doing a search for it with Google finds that many
other people have disasterous trouble with this garbage chipset.

Some can supposedly be almost fixed with firmware updates done via
software, but the first revision cant (desoldering required). I have the
first version but I'd rather stay away from them altogether.

A chipset to stay away from. Found in cheap units.

A have a USB2 Lacie 80GB unit which works well.




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: OpenBSD in commercial firewalls?

2005-06-14 Thread shanejp
Quoting [EMAIL PROTECTED]:

> Quoting James Harless <[EMAIL PROTECTED]>:
> 
> > I know that several firewall vendors use various flavors of Linux as
> > the basis for their devices.  Are there any that use OpenBSD
> > similarly?  If so, which?  Any comments on the devices?  Links would
> > be appreciated.
> 
> http://www.ml-ip.com/html/products/esw-230firmware.html#openbsd_upgrade

Sorry, that was for their software version (run on PC's).

This is the link to their hardware devices...

http://www.ml-ip.com/html/products/2000-230firmware.html#openbsd_upgrade





This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: OpenBSD in commercial firewalls?

2005-06-14 Thread shanejp
Quoting James Harless <[EMAIL PROTECTED]>:

> I know that several firewall vendors use various flavors of Linux as
> the basis for their devices.  Are there any that use OpenBSD
> similarly?  If so, which?  Any comments on the devices?  Links would
> be appreciated.

http://www.ml-ip.com/html/products/esw-230firmware.html#openbsd_upgrade

Used to be from Stallion Technologies, I have not been watching them
lately, but when I was, the ePipes looked expensive to me.




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: Linus at NewsForge...

2005-06-14 Thread shanejp
Quoting [EMAIL PROTECTED]:

> A little Interview by Linus (just another "Linux vs BSD"..) at NewsForge:

Linux, where in the name of progress and flying in the face of
perfection, you can expect to have the VM system suddenly ripped out and
replaced mid stable branch.

With Linux being a system which chops and changes major components
completely between versions and even mid stable branch, as if their
foundations are experimental, I find his attitude ridiculous.

'In contrast, one of my favorite mantras is "perfect is the enemy of
good," and the idea is that "good enough" is actually a lot more
flexible than some idealized perfection.'

Wow, Linux really is becoming more like Microsoft.




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: openbsd list fckery

2005-06-03 Thread shanejp
Quoting Dimitri Georganas <[EMAIL PROTECTED]>:

> I do like the installer though, I'm serious. Not for it's user
> friendliness, but because
> it works for me. I've seen better ones, I've seen worse.

I'm right in the middle of installing 3.7 via serial port B on a Sun
Ultra 10. I LOVE the OpenBSD installer. Installs from CD in minutes. If
I make a mistake, Ctrl-C and run the install script again. Gorgeous.




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: Problems with CPU/ARCH specific compilation!?

2005-06-02 Thread shanejp
Quoting Markus Kolb <[EMAIL PROTECTED]>:

> official offend those people. Where is your respect.

Respect? That is pretty rich. You come in here, challenge an OpenBSD
policy which strives for highest stability and then state:

"I don't want to ask OpenBSD.org-developers because they always think
they are right" and claim the stance to be "an unobjective evasion".

And you are asking where *my* respect is? Do a google search and you
will find that gcc optimization instability is NOT confined to OpenBSD.

> Think about it in real life. You are in a pub and discuss for example
> political stuff which the owner hears and doesn't like. Do this owner
> offend you or even kick you out of his pub? No.

Actually where I come from you could get kicked out of a pub for
wearing the wrong football jacket.

> You do it here.

No, I'm trying to tell you that you are wasting your own time, and the
time which anyone else here is willing to give you.


BTW, you are wearing the wrong jacket. Please get back into the taxi
and tell him that you want the Gentoo Players Association.





This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: howto clean disks ?

2005-06-01 Thread shanejp
Hi Dennis,

Quoting Dennis Lindahl <[EMAIL PROTECTED]>:

> Once information on a digital media has been overwritten, it cannot be
> recreated/restored in any lab. All this talk about electron microscopes
> and overwriting in multiple passes is just a load of crap derived from
> an old DoD standard. It has no practical meaning. One overwrite is
> enough. Please let this ugly rumour die :)

You seem a little quick to discount something as impossible. Do you
think Military choose physical destruction for the heck of it?

IBAS can't do it on the cheap, so they claim it impossible? And you
take that as gospel?

The nature of digital signals comes down to thresholds. The actual
analog values are not absolutely digital and remnants often remain.
When you open up a storage device and circumvent the part which
enforces and interprets the thresholds which define what constitutes
a one or a zero, you then have the ability to see the remnants
without the masking effect of those digital parts. If only zeroes
where witten to the disk, these remnants stand out and make it easier
to reconstruct the original data. By overwritting with ones, zeroes
(or an alternating pattern of ones and zeroes) and then random data,
the remnants become lost in a sea of noise.

http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html

It comes down to cost/benefit. The fact that you don't hear about it
much is because it is costly and time consuming. Just because you
can't do it at home, does not mean it can't be done.


Shane J Pearson




This email was sent from Netspace Webmail: http://www.netspace.net.au



Re: Problems with CPU/ARCH specific compilation!?

2005-06-01 Thread shanejp
Quoting Markus Kolb <[EMAIL PROTECTED]>:
 
> You don't know after 2 mails that it will be only noise.

The noise starts when the person who brings up the FAQ, decides to
pursue an issue which developers have already decided on long ago.

This is OpenBSD. If you don't trust the developers but want to use
OpenBSD in a way which they are not willing to support, then take it,
make your own changes and support yourself.

This "most stable", "known quantity" policy is based on experience!

The experience is that gcc is most stable in the areas where it is most
often used. Step off the yellow brick road and things start getting
weird.


Shane J Pearson




This email was sent from Netspace Webmail: http://www.netspace.net.au