Next NYC*BUG: 2026-06-03

Let's review some OpenBSD mitigations, with Brian Callahan
2026-06-03 @ 18:45 local (22:45 UTC) - Backroom of Brass Monkey 55 Little West 12th St
How do we know that security mitigations actually work? How often should we review code to ensure they are continuing to provide?
Following two recent publications, let’s explore some of OpenBSD’s anti-ROP mitigations. We will explore what they do, how to test they work, how to port them to other operating systems, and how to understand larger questions about security mitigations. You’ll leave having a deeper appreciation for OpenBSD’s sustained security track record.
Brian is a long-time face in the *BSD world. While he claims semi-retirement from OpenBSD development, in reality he probably spends even more time on it getting students excited about the BSDs. He is the Director of the Monmouth University Cybersecurity Research Center, where here leads quantum cybers ecurity and other security research.
Nearest NYC Subway is the 14th Street/Eighth Avenue station L, A, C, E.
To get to the backroom, you must enter the front door, follow the long bar on your left, and walk all the way to the back. At the rear of the BrassMonkey, you will see an alcove for the 3 bathrooms our room is off to your right.

Remote participation: Plans are to stream via NYC*BUG website. Q&A will be via IRC on libera.chat channel #nycbug - please preface your questions with '[Q]'.

#runbsd #openbsd

I love FreeBSD so much more every new day §8-)

Don't let you WPA password sit in plain text in /etc/wpa_supplicant.conf

Use the wpa_passphrase(8) tool to encrypt it and to get the config:

wpa_passphrase yourwifiname yourwifipassword

You get:
network={
ssid="yourwifiname"
#psk="yourwifipassword"

psk=3a1950109e0a6bf36a0bc27171a14e94c6cf36c9d9ecef406b3326122b5db536
}

Check out:
https://stevengharms.com/longform/my-first-freebsd/installation/part-4-wifi/

#FreeBSD #runbsd #BSD #OpenBSD

RE: https://infosec.exchange/@silent/116675655035312057

What about BSD? There is https://www.secbsd.org #RunBSD @secbsd

OpenBSD 7.9 will be deployed on the hosts as soon as possible!
We want to wait for the first errata to appear.

21 new VMs were added and 61 VMs were renewed.

We donated €1125 to the #OpenBSD Foundation, €66755 since we started.

Thank you, our users, and OpenBSD developers for an awesome OS!

Stay safe, healthy & sane!

#RUNBSD in 2026

At 19:00 I receive a notification: the backup server has problems. I log in and check: a drive had died. No big deal; since it's a RAIDZ1, the system kept running. I had already copied the EFI partitions and set things up, so it would be able to boot from the other drives as well. I request a replacement from Hetzner, which they carry out in less than half an hour. Despite being hot-swappable, the server detects the disconnection of another drive and crashes. At that point, I ask them to look into it, and they test the machine. Reboot: it won't start. I request a KVM console. I get it: I had forgotten to update the ⁠fstab⁠ and it was trying to mount ⁠/boot/efi⁠ from ⁠ada0p1⁠, but ⁠ada0⁠ was the replaced drive, and it wouldn't go any further.
Fixed the ⁠fstab⁠, recreated the partitions, rebooted, and issued the ZFS command for resilvering.
Result: resilvering in progress and backups working again.

I can turn off the computer and start my Friday evening.

#FreeBSD #RunBSD #IT #SysAdmin