We sit down with Jim Brown from the BSD Certification group to talk about the BSD exams. Following that, we\’ll be showing you how to build OpenBSD binary packages in bulk, a la poudriere. There\’s a boatload of news and we\’ve got answers to your questions, coming up on BSD Now – the place to B.. SD.

Thanks to:

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | HD Vid Feed | HD Torrent Feed

– Show Notes: –

Headlines

BSDCan schedule, speakers and talks

• This year\’s BSDCan will kick off on May 14th in Ottawa
• The list of speakers is also out
• And finally the talks everyone\’s looking forward to
• Lots of great tutorials and talks, spanning a wide range of topics of interest
• Be sure to come by so you can and meet Allan and Kris in person and get BSDCan shirts

NYCBSDCon talks uploaded

• The BSD TV YouTube channel has been uploading recordings from the 2014 NYCBSDCon
• Jeff Rizzo\’s talk, \”Releasing NetBSD: So Many Targets, So Little Time\”
• Dru Lavigne\’s talk, \”ZFS Management Tools in FreeNAS and PC-BSD\”
• Scott Long\’s talk, \”Serving one third of the Internet via FreeBSD\”
• Michael W. Lucas\’ talk, \”BSD Breaking Barriers\”

FreeBSD Journal, issue 2

• The bi-monthly FreeBSD journal\’s second issue is out
• Topics in this issue include pkg, poudriere, the PBI format, hwpmc and journaled soft-updates
• In less than two months, they\’ve already gotten over 1000 subscribers! It\’s available on Google Play, iTunes, Amazon, etc
• \”We are also working on a dynamic version of the magazine that can be read in many web browsers, including those that run on FreeBSD\”
• Check our interview with GNN for more information about the journal

OpenSSL, more like OpenSS-Hell

• We mentioned this huge OpenSSL bug last week during all the chaos, but the aftermath is just as messy
• There\’s been a pretty vicious response from security experts all across the internet and in all of the BSD projects – and rightfully so
• We finally have a timeline of events
• Reactions from ISC, PCBSD, Tarsnap, the Tor project, FreeBSD, NetBSD, oss-sec, PHK, Varnish and Akamai
• pfSense released a new version to fix it
• OpenBSD disabled heartbeat entirely and is very unforgiving of the IETF
• Ted Unangst has two good write-ups about the issue and how horrible the OpenSSL codebase is
• A nice quote from one of the OpenBSD lists: \”Given how trivial one-liner fixes such as #2569 have remained unfixed for 2.5+ years, one can only assume that OpenSSL\’s bug tracker is only used to park bugs, not fix them\”
• Sounds like someone else was having fun with the bug for a while too
• There\’s also another OpenSSL bug that\’s possibly worse that OpenBSD patched – it allows an attacker to inject data from one connection into another
• OpenBSD has also imported the most current version of OpenSSL and are ripping it apart from the inside out – we\’re seeing a fork in real time (over 55000 lines of code removed as of yesterday evening)

Interview – Jim Brown – info@bsdcertification.org

The BSD Certification exams

Tutorial

Building OpenBSD binary packages in bulk

News Roundup

Portable signify

• Back in episode 23 we talked with Ted Unangst about the new \”signify\” tool in OpenBSD
• Now there\’s a (completely unofficial) portable version of it on github
• If you want to verify your OpenBSD sets ahead of time on another OS, this tool should let you do it
• Maybe other BSD projects can adopt it as a replacement for gpg and incorporate it into their base systems

Foundation goals and updates

• The OpenBSD foundation has reached their 2014 goal of $150,000
• You can check their activities and goals to see where the money is going
• Remember that funding also goes to OpenSSH, which EVERY system uses and relies on everyday to protect their data
• The FreeBSD foundation has kicked off their spring fundraising campaign
• There\’s also a list of their activities and goals available to read through
• Be sure to support your favorite BSD, whichever one, so they can continue to make and improve great software that powers the whole internet

PCBSD weekly digest

• New PBI runtime that fixes stability issues and decreases load times
• \”Update Center\” is getting a lot of development and improvements
• Lots of misc. bug fixes and updates

Feedback/Questions

• There\’s a reddit thread we wanted to highlight – a user wants to show his friend BSD and why it\’s great
• Brad writes in
• Sha\’ul writes in
• iGibbs writes in
• Matt writes in

• All the tutorials are posted in their entirety at bsdnow.tv – there\’s a couple new ones on the site now that we\’ll be covering in future episodes
• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
• If you\’ve got something cool to talk about and want to come on for an interview, shoot us an email
• Also if you have any tutorial requests, we\’d be glad to show whatever the viewers want to see
• If you\’re in or around Colorado in the US, there\’s a brand new BSD users group that was just formed and announced – they\’ll be having meetings and doing tutorials, so check out their site (also, if you have a local BUG, let us know!)
• Watch live Wednesdays at 2:00PM Eastern (18:00 UTC)

The post Certified Package Delivery | BSD Now 33 first appeared on Jupiter Broadcasting.

We chat with OpenBSD founder Theo de Raadt, and we\’ll show you how to securely run graphical applications in a jail. Then we get you caught up on all the latest news.

All that and more, this week on BSD Now – the place to B.. SD.

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | HD Vid Feed | HD Torrent Feed

– Show Notes: –

Headlines

HAMMER2 GSOC improvements merged

• A student from the Google Summer of Code\’s patches were committed to upstream Dragonfly
• It focuses mainly on compression and updating the I/O infrastructure to work with compression
• The ability to boot from HAMMER2 volumes was also added
• Check the show notes for a full list of additions and improvements
• We\’ll have someone on the show to talk about HAMMER FS in the future

OSNews starts a \”BSD family\” segment

• An OSNews reader decided to share some info about the BSDs
• He\’s writing a three-part series covering FreeBSD, OpenBSD and NetBSD
• Pretty good info for Linux switchers

pkgsrc-2013Q3 branch announcement

• pkgsrc is similar to the ports concept, but for 21 different OSes
• The pkgsrc developers make a new release every three months.
• 13184 total packages for AMD64
• If there\’s any interest, we\’ll try to get a pkgsrc tutorial written in the future

PCBSD 9.2 released

• Shortly after the official FreeBSD 9.2 release, PCBSD follows up
• Highlights include bootable ZFS boot environments, a rewritten life-preserver utility for backups, improved pkgng support, updated appcafe, major improvements to warden, a GUI pkgng management system, filesystem-based encryption for home directories and much more

Interview – Theo de Raadt – deraadt@openbsd.org

Tutorial

Jailed VNC sessions

• VNC lets you run GUI applications remotely and detach from them like tmux
• Running it in a jail provides another layer of security
• Can be used for isolated web browser instances and lots of other things
• If you don\’t know how to set up a jail, fear not – we\’ve already got a jail tutorial in the works

The place to B…SD

• vBSDCon October 25-27th
  • At the Dulles Hyatt in Virginia
  • Hybrid unconference, good mix of formal and informal
• Speakers include: Baptiste Daroussin, Devin Teske, Scott Long, Luigi Rizzo, and David Chisnall
• iXsystems hosts FreeBSD Anniversary party – November 2nd
• Celebrating FreeBSD’s 20th anniversary
• Saturday, November 2nd at the DNA Lounge in San Francisco
• Same location as the 10th anniversary party
• Notable FreeBSD figures will contribute words of wisdom on the past, present, and future of FreeBSD

News Roundup

Curve25519 patch for OpenSSH

• Because of recent NSA news, someone implemented an alternative key exchange mechanism
• It uses Curve25519 instead of the traditional Diffie-Hellman
• Comes from the developer of libssh and is already implemented there

FreeBSD 10-ALPHA5 is out

• Includes the big removal of BIND
• More GNU stuff removed
• Bhyve and XEN improvements
• Some LLVM fixes

M:Tier offering \”Long Time Support\” for OpenBSD ports

• Starting with 5.4, M:Tier will be offering a subscription for LTS support, in addition to their free 6 month version
• OpenBSD releases are only supported for 1 year normally (5.2 becomes unsupported when 5.4 comes out, etc.)
• This model makes it easier to keep your ports patched for security in a corporate environment

Ohio Linuxfest talks uploaded

• The OLF 2013 talks have been uploaded
• Includes Kirk Mckusick\’s keynote about building an open source community and Ken Moore\’s talk about lots of new PCBSD stuff

Theo\’s absence and other updates

• In an uncharacteristic manner, Theo started a thread on misc@ instead of finishing it
• For the last year, he\’s not been as involved in OpenBSD development as he should be
• He\’s been busy with setting up an Internet Exchange in Calgary
• Also mentions some troubles with an imposter Twitter account (which is now suspended)

Feedback/Questions

• Kenneth writes in: https://slexy.org/view/s24yODHGaW
• Jason writes in: https://slexy.org/view/s21SbqaOPi
• Alex writes in: https://slexy.org/view/s2yY3vHoIo
• Henson writes in: https://slexy.org/view/s20GDMHSUf

• All the tutorials are posted in their entirety at bsdnow.tv
• Send questions, comments, show ideas/topics, etc to feedback@bsdnow.tv
• We don’t check YouTube comments, JB comments, Reddit, etc. If you want us to see it, send it via email (the preferred way) or Twitter (also aceptable)
• Watch live Wednesdays at 2:00PM Eastern (18:00 UTC)

The post Doing It de Raadt Way | BSD Now 6 first appeared on Jupiter Broadcasting.