Re: Secure end points for Internet tunnel, the most secure hardware

2020-05-12 Thread info
>That is a kernel level issue, not an SOC level one. Well, I have ordered a couple of Orange PI ONE. According to: http://philip.xinqu.net/orangepi.html it shall work on OpenBSD at least without a video port. Good features for my use case: 1) No video port means anyone non qualified enough can

Re: Secure end points for Internet tunnel, the most secure hardware

2020-05-12 Thread Aaron Mason
On Tue, May 12, 2020 at 1:27 PM wrote: > > Aaron, thank you for your suggestion. > > For now I prefer to try to use the oldest suitable hardware I can find, not > sure if it is a good idea. > YMMV. Don't fall into the sunk cost fallacy. > Please someone let me know if AllWinner SoC backdoor des

Fwd: Secure end points for Internet tunnel, the most secure hardware

2020-05-12 Thread info
Dear OpenBSD gurus, Please suggest which one of the following types of CPU and preferably the whole system too is the most secure and backdoor free: ARM, PowerPC, SPARC64, SH-4, MIPS Can you please suggest a specific model of the board compatible with OpenBSD? Пересылаемое сообщение

Re: Secure end points for Internet tunnel, the most secure hardware

2020-05-11 Thread info
> What about other compatible boards like AllWinner A10 Orange PI One? Sorry for my mistake, Orange PI One is based on Cortex A7 AllWinner H3.

Re: Secure end points for Internet tunnel, the most secure hardware

2020-05-11 Thread info
Aaron, thank you for your suggestion. For now I prefer to try to use the oldest suitable hardware I can find, not sure if it is a good idea. Please someone let me know if AllWinner SoC backdoor described at: https://www.theregister.co.uk/2016/05/09/allwinners_allloser_custom_kernel_has_a_nasty

Re: Secure end points for Internet tunnel, the most secure hardware

2020-05-11 Thread Aaron Mason
On Mon, May 11, 2020 at 5:16 PM wrote: > > Hi, Hi! > > [SNIP] > > Can you offer anything better than Cortex A7 board which is immune to Spectre? > What is the most secure Cortex A7 board on which OpenBSD can run? I guess it > shall have as little BLOBs as possible - only a small Boot ROM like

Secure end points for Internet tunnel, the most secure hardware

2020-05-11 Thread info
Hi, Please let me know, is it a good idea to use OpenBSD to connect to a remote LAN via SSH? Port forwarding is enough for me, though I can pass-through OpenVPN via SSH forward too. SSH seems to me as the most secure channel compare to other software and it is easy to get it working. I need a