ijanc'
@ijanc.org
hi g33ks, Fewer things, bigger impact, done well, shipped 📌 São Paulo, São Paulo 🌍 https://ijanc.org
Help test OpenSSH 10.4 ahead of its release marc.info?l=openssh-un...
'Call for testing: OpenSSH 10.4' - MARC
marc.info
small urxvt patch.. when a url gets split by a real newline (long link wrapped across two lines in an email) the matcher used to grab only the first half and open a broken/404 link. now it joins the rest and opens the full url on click termbin.com/d0sd
https://termbin.com/d0sd
--- a/src/perl/matcher +++ b/src/perl/matcher @@ -6,6 +6,7 @@ #:META:RESOURCE:%.launcher:string:default launcher command #:META:RESOURCE:%.button:string:the mouse button used to activate a match +...
termbin.com
du(1) using st_blocks stat(2). hammer2_inode_data_count(ip) returns 0 because the inode has no DATA children. Then the 64KB fallback kicks in o.O
#OpenBSD back to 2011 #Bluetooth another step completed LESC (LE Secure Connections) with ECDH P-256 😰😰 working. Turn off the sound, construction in the background. www.bluetooth.com/wp-content/u...
Now we have a starting point #hammer2 #FFS #OpenBSD and FFS won the first match. Perhaps lists.dragonflybsd.org/pipermail/co... XOP (executable operation) github.com/kusumi/openb... doesn't appear to have
Spent the evening chasing a #HAMMER2 bug on #OpenBSD every mtime stuck at "31-12-1969". Not epoch zero the on-disk field is µs since 1970, but the kernel wrote seconds microtime(9) gettime() rt a count of sec *t = (uint64_t)ts.tv_sec * 1000000ULL + ts.tv_nsec / 1000; github.com/kusumi/openb...
github.com
OpenBSD on Firecracker. 1.4 MB kernel, ~30 ms cold boot, no BIOS, no PCI, virtio-mmio only. Experimental port. Wrote up how to build the kernel, prep an FFS2 disk with vnd(4), and boot the thing from Linux. ijanc.org/posts/openbs... Commit: git.sr.ht/~ijanc/openb...
OpenBSD on Firecracker: from source to first boot, step by step
Hands-on tutorial to fetch the OpenBSD source (or my mirror with the patch already applied), build the FIRECRACKER kernel, generate the disk image with vnd(8), install Firecracker on the Linux host an...
ijanc.org
Wacom Intuos S (usb tablets) on OpenBSD. uwacom(4) see everything pen, pad, pressure levels but Xenocara ships no Wacom driver though, so it ends up as a fancy mouse. PS: you now get to endure my "artistic skills". Irony included 😇 ijanc.org/posts/wacom-...
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain https://lobste.rs/s/x79usb #security
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
socket.dev
#OpenBSD on #Firecracker, a 1.4 MB kernel booting in ~30 ms ijanc.org/posts/openbs...
⚠️ An active phishing attack is targeting crate owners by asking them to "confirm that your email address is still active". These messages are not from crates.io, and should be ignored. (We will never ask you to confirm that your e-mail address is still active.) ⚠️
OpenSSH 10.3 has just been released. This includes a few minor security fixes, some small new features and a bunch of bugfixes. www.openssh.org/releasenotes...
OpenSSH: Release Notes
OpenSSH release notes
openssh.org
Bluetooth keyboard working on #OpenBSD Logitech MX Keys Mini connected via BLE (HOGP). - USB HCI transport - SMP LESC pairing ECDH + AES-CMAC crypto - ATT/GATT - HID over GATT
Owww habemus inquiry bt classic, not support LE yet ubt0: inquiry command status: 0x00 ubt0: inquiry: 1 response ubt0: found 2c:15:bf:47:a6:e8 class 5a020c ubt0: inquiry complete (status=0x00)
i've been testing bt on an obsd snapshot ThinkPad X1 Nano, mainly for mouse/keyb use, is just for personal use. The learning experience has been incredible the OpenBSD codebase is exceptionally clean and insightful. HID (mouse/keyb) is still not reliable enough for daily use. #OpenBSD #bluetooth
Privilege separation in Tesseras! 5 isolated processes OpenBSD-style (relayd(8)): parent supervises net, dns, http and control via Unix socketpairs. Each child with seccomp-bpf restricting syscalls to the minimum. And about crash? Parent auto-restarts it. #p2p #security #opensource
Building a DNS layer where every zone is a keypair, not a leased string from a registrar. Lookups are encrypted, records are signed, resolution is peer-to-peer. No one can take your name because no one gave it to you. #p2p #dns #decentralized #privacy #cryptography #networking
no company, no blockchain, no infrastructure dependency. just you =] the shot shows reading a post by its content hash, resolving its .tes URL, and DNS stats You can now open http://<base32_zone_pubkeys>.tes in a regular browser and see a rendered
The way #OpenBSD allows restrictions on system calls is very nice. pledge(2) man.openbsd.org/pledge #tesseras.net
tesseras run on #openbsd i still need to add pledge(2) and unveil(2) support tesseras> put "hello openbsd k1dS"