LibreSSL 4.1.2 and 4.2.1 released https://www.undeadly.org/cgi?action=article;sid=20251102090208 #openbsd #libressl #tls #ssl #security #networking #cryptography #crypto #realcrypto #libresoftware #freesoftware

Happy Halloween!

I submitted a few Pull Requests as follows:

libressl 4.2.1 for MacPorts here:
https://github.com/macports/macports-ports/pull/29892

opensmtpd 7.8.0p0 for MacPorts here:
https://github.com/macports/macports-ports/pull/29893

libressl-devel 4.2.1 for MacPorts here:
https://github.com/macports/macports-ports/pull/29894

(the distinction between libressl and libressl-devel comes from a time before I became a MacPorts maintainer when the -stable and -development branches were tracked separately. While LibreSSL did also announce a 4.1.2 release? For now, it seems saner to just have libressl and libressl-devel within MacPorts be the same, if upstream tags their branches as -stable and -development again, we'll follow their lead)

Note: the OpenSMTPD 7.8.0p0 release also addresses a CVE as mentioned in the release notes.

GitHub Continuous Integration checks passed for all of them, it's up to someone else with commit access to merge them.

I also submitted announcements to undeadly.org, but I will let some of the other editors sanity check my submissions and publish them.

It's currently 22:18 more or less Pacific time, and I bought a ticket to a party that supposedly starts at 22:00 and goes until 05:00 tomorrow morning, so while maybe I am being "fashionably late"? I am happy to actually tend to some libre/free open source software maintenance before attempting to have much fun, because even though it's a Friday and "no pushes on Friday" I am not currently employed in those realms and for me? Coding is fun already! Not to mention, I rented a car and driving with all the folks in costumes crossing where ever seems to be posing additional hazards and I am in no rush.

I've got a lot going on tomorrow and Sunday too, before I fly to BCN for Mira Festival. So much going on, but mostly interesting things I think?

#HappyHalloween #LibreSSL #OpenSMTPD #MacPorts #OpenSource #TLS #Security #Email #MTAs

I was AFK a bit longer than anticipated. AMP Festival was fantastic! My main regret is I arrived too late the first night and missed the opening band, SU. I heard they were good? I guess I will have to hope I have an opportunity to see them another time! The VJs were excellent!

I think that may have been the first time I saw Orphx live? DJ Sarin (of Dekonstrukt) recommended them to me long ago and I bought some CDs, but live? They were totally different! Reminded me of clubbing in Berlin, in a good way. Honestly, there were too many bands to succinctly describe, but I am really grateful I got to attend.

Returning to SF Tuesday morning, in time to see Purity Ring that evening, who were also outstanding! One their openers (Brett Bolton) was using Notch during his set, and apparently he did the visuals for Purity Ring (also presumably using @[email protected]) so their show didn't just sound fantastic, it was excellent to watch! I had never encountered yuniVERSE before, but also an enjoyable opener!

Meanwhile, while I was at AMP and without a laptop? I noticed OpenSSH 10.2p1 got released. Thankfully, someone else within MacPorts submitted a Pull Request and it got merged without me having to lift a finger!

However, LibreSSL 4.2.0 was also released, and I am only now getting around to submitting a Pull Request here:
https://github.com/macports/macports-ports/pull/29678

GitHub Continuous Integration checks passed OK. It's up to someone else to merge it.

I rented a car and drove down to San Diego after work yesterday, to attend TwitchCon. Mostly? To see DJ Jessu, and I am grateful I at least caught some of her opening set! Albeit, I left my TwitchCon app unsynced, and I didn't realize that Diplo was apparently added to the opening ceremonies? Not really my cup of tea (nor Lil Debbie's if I recall her lyrics correctly somethin like: "Diplo? Boi you betta dip low. Tryin ta lace mah sheet? Hell no!"). The crowd seemed to love it, but I wanted to hear more of Jessu spinnin live. Thankfully after she exited backstage I was able to speak with her briefly and gifted her some vinyl which hopefully she'll dig? There was mention of a couple of after parties tonight, but I cannot seem to figure out where, even if I know the when. There's something else she's scheduled for on Sunday I guess, but I am going to be leaving early tomorrow morning to give myself plenty of time for the drive and rest before work on Sunday morning.

Quite a whirlwind of a week or so! I think things will be relatively mellow after Sunday. That is, until I prepare to leave for Mira Festival in early November!

Not that I dislike contributing to libre/free open source software; but I am feelin as if I am kind of contendin with a void in my creative life. There are many artistic outlets which I would like to focus more time and energy and resources and attention on, but I have limited space and other constraints challenging me still.

Being surrounded by a lot of streamers, who aren't, "adult" streamers, when I was previously Senior System Administrator for the company which supposedly pioneered HD live streaming on the web and that company was most certainly within the realms of producing adult content? Is kind of weird. Tame I guess, but also like, what a can of worms I may have inadvertently had a hand in unleashing on this world?

The VJs at AMP and the use of Notch during Purity Ring are more the sorts of real-time VFX realms that I enjoy so much and never seem to play with enough. That's not entirely the itch which I want to be skratchin more; but it's part of it for sure.

I saw the M5 MacBook Pro announcement; and after benchmarking some ShaderToy stuff with a honkin M4 MacBook Pro in an Apple Store? I do not have high hopes. The M4 stuff was still laggin behind an RTX1080, severely. My guess is from having read what I read about the M5? It is still way behind. ;(

NVIDIA has a LOT of issues IMHO, but while I think LLMs and A"I" are mostly awful, for real-time VFX and demo scene stuff? Their GPUs are pretty good for the price I suppose? Not that I can afford anything current!

Meanwhile, when I see some of the Twitch streamers with their likenesses plastered all around in HUGE blow ups? I can't help but think: "holy shit, some of these people are making Jeff Bezos a LOT of money and he doesn't need it and he doesn't deserve it, and OFC, there's no PeerTube track at TwitchCon to help live streamers cultivate self hosting and independence, because that isn't in Jeff Bezos' selfish interests."

sigh It's a weird world to look at from my vantage. These words, as many as I write, do not even begin to encapsulate how friggin horrid hegemony looks and how I know better is possible, and yet I see so many fail to even grasp the rudimentary elements which would help them further along towards self sufficiency. Maybe, interdependence, sure, that seems impossible to avoid, but less in the way technocrat robber baron worship.

#LibreSSL #MacPorts #TLS #TwitchCon #PurityRing #AMPFestival #Jessu #Deejayin #DJ

LibreSSL 4.2.0 Released https://www.undeadly.org/cgi?action=article;sid=20251015043527 #openbsd #libressl #tls #ssl #security #cryptography #development #freesoftware #libresoftware #newrelease

LibreSSL 4.1.1 and 4.0.1 released https://www.undeadly.org/cgi?action=article;sid=20251002054519 #openbsd #libressl #tls #https #cryptography #security #newrelease #development #freesoftware #libresoftware