Re: The OpenBSD talk at 36c3

2019-12-31 Thread eecd
> seem to even know that stable exists. My original thought was that there were mal \ > intent. I think not now, unless it has been shaped by criticism. It is a highly \ no i think your first thought was right. there's clearly malice he just lacks the maturity to be forthright and honest

Re: The OpenBSD talk at 36c3

2019-12-31 Thread Kevin Chadwick
On 2019-12-31 05:19, g...@isdaq.com wrote: > he completely misses the mark. > rather than think "hmm 75% of commits are only 20 chars or less which seem Having watched the video now, that particular part of the talk is poor. He doesn't seem to even know that stable exists. My original thought

Re: The OpenBSD talk at 36c3

2019-12-30 Thread gbcd
Case in point: commit messages. as claudio proved, he posited inaccurate and blatantly false assertions that any objective researcher would immediately realize is obviously wrong but because he's seeking data that confirms his preconceived notion that "HUR DUR OPENBSD BAD!" he completely misses

Re: The OpenBSD talk at 36c3

2019-12-30 Thread gbcd
frankly the impression the speaker gives is of someone who feels aggrieved by an OpenBSD dev or more likely some story he heard about Theo or some similar event affronted this boy's sensibilities and his first instinct was to lash out as most children do and say "but you're wrong!". it's like a

Re: The OpenBSD talk at 36c3

2019-12-30 Thread Karl Pettersson
On Mon, Dec 30, 2019 at 11:46:58AM +0100, Claudio Jeker wrote: > Sorry but 25k is no where close to 75% of 202198. > Seems he did count words not characters. > Yes, the author has published code for generating the chart: https://isopenbsdsecu.re/mitigations/development_practises/ The count is

Re: The OpenBSD talk at 36c3

2019-12-30 Thread Edgar Pettijohn
On Dec 30, 2019 5:31 AM, Kevin Chadwick wrote: > > > > I liked the presentation.  An excerpt from https://isopenbsdsecu.re/about/: > >> This website was done because studying mitigations is fun, not to get > >> involved in a huge flamewars or endless bike-shedding on mailing lists. > > It is

Re: The OpenBSD talk at 36c3

2019-12-30 Thread Martijn van Duren
On 12/30/19 11:46 AM, Claudio Jeker wrote: > On Sun, Dec 29, 2019 at 01:29:12PM +0100, Henry Jensen wrote: >> Greetings, >> >> for those who didn't watched it, there is an accompanied site at >> https://isopenbsdsecu.re/ >> >> Summary: There are a lot of claims. The speaker basically said, that >>

Re: The OpenBSD talk at 36c3

2019-12-30 Thread Kevin Chadwick
> I liked the presentation. An excerpt from https://isopenbsdsecu.re/about/: >> This website was done because studying mitigations is fun, not to get >> involved in a huge flamewars or endless bike-shedding on mailing lists. It is not my place to comment, however I will say that it did not

Re: The OpenBSD talk at 36c3

2019-12-30 Thread Claudio Jeker
On Sun, Dec 29, 2019 at 01:29:12PM +0100, Henry Jensen wrote: > Greetings, > > for those who didn't watched it, there is an accompanied site at > https://isopenbsdsecu.re/ > > Summary: There are a lot of claims. The speaker basically said, that > some mitigations are "cool", but other, more or

Re: The OpenBSD talk at 36c3

2019-12-29 Thread Neeraj Pal
Hi Henry, Thanks for sharing the link. > for those who didn't watched it, there is an accompanied site at > https://isopenbsdsecu.re/ Here is the video link, if anyone wants to see. Video link: https://media.ccc.de/v/36c3-10519-a_systematic_evaluation_of_openbsd_s_mitigations -- Thank you!

Re: The OpenBSD talk at 36c3

2019-12-29 Thread Peter Nicolai Mathias Hansteen
> 29. des. 2019 kl. 13:29 skrev Henry Jensen : > > Summary: There are a lot of claims. The speaker basically said, that > some mitigations are "cool", but other, more or less, useless. > > Further accusations are, that OpenBSD still uses e-mail and cvs and not > more advanced CI tools. > > I

Re: The OpenBSD talk at 36c3

2019-12-29 Thread Johnathan M.
Hi Henry, I liked the presentation. An excerpt from https://isopenbsdsecu.re/about/: > This website was done because studying mitigations is fun, not to get > involved in a huge flamewars or endless bike-shedding on mailing lists. On Sun, Dec 29, 2019 at 8:55 AM Henry Jensen wrote: > >

Re: The OpenBSD talk at 36c3

2019-12-29 Thread Peter J. Philipp
On Sun, Dec 29, 2019 at 01:29:12PM +0100, Henry Jensen wrote: > Greetings, > > for those who didn't watched it, there is an accompanied site at > https://isopenbsdsecu.re/ > > Summary: There are a lot of claims. The speaker basically said, that > some mitigations are "cool", but other, more or

The OpenBSD talk at 36c3

2019-12-29 Thread Henry Jensen
Greetings, for those who didn't watched it, there is an accompanied site at https://isopenbsdsecu.re/ Summary: There are a lot of claims. The speaker basically said, that some mitigations are "cool", but other, more or less, useless. Further accusations are, that OpenBSD still uses e-mail and