pinyo_villany blogja

HardenedBSD for 10-STABLE experimental

Backportolva lettek az eddig valtozasok nagyresze FreeBSD 10-STABLE-re.
Akit erdekel, az itt elerheti:
* installer: http://jenkins.hardenedbsd.org/builds/HardenedBSD-10-experimental-amd64…
* git branch: https://github.com/hardenedbsd/hardenedbsd/tree/hardened/experimental/1…
* twitter kepek:

@HardenedBSD 10-STABLE experimental, paxtest output pic.twitter.com/lgWZitmA5V

— O. P. (@Zer0Pntr) May 2, 2015

<3 btrfs


root@ubuntu:/home/ubuntu# btrfs rescue chunk-recover /dev/sda2
We are going to rebuild the chunk tree on disk, it might destroy the old metadata on the disk, Are you sure? [y/N]: y
btrfs: malloc.c:2372: sysmalloc: Assertion `(old_top == (((mbinptr) (((char *) &((av)->bins[((1) - 1) * 2])) - __builtin_offsetof (struct malloc_chunk, fd)))) && old_size == 0) || ((unsigned long) (old_size) >= (unsigned long)((((__builtin_offsetof (struct malloc_chunk, fd_nextsize))+((2 *(sizeof(size_t))) - 1)) & ~((2 *(sizeof(size_t))) - 1))) && ((old_top)->size & 0x1) && ((unsigned long) old_end & pagemask) == 0)' failed.
Aborted (core dumped)

FreeBSD 11-CURRENT: URGENT: RNG broken for last 4 months



If you are running a current kernel r273872 or later, please upgrade
your kernel to r278907 or later immediately and regenerate keys.

I discovered an issue where the new framework code was not calling
randomdev_init_reader, which means that read_random(9) was not returning
good random data.  read_random(9) is used by arc4random(9) which is
the primary method that arc4random(3) is seeded from.

This means most/all keys generated may be predictable and must be
regenerated.  This includes, but not limited to, ssh keys and keys
generated by openssl.  This is purely a kernel issue, and a simple
kernel upgrade w/ the patch is sufficient to fix the issue.

HardenedBSD stable repo

A https://github.com/HardenedBSD/hardenedBSD-stable cimen talalhato repo alatt vannak a stabilnak minositett kodok, aki erdeklodik a project irant, annak elso sorban ezen repot ajanlom figyelmebe.

Az elkovetkezo napokban ugyancsak ebben a repoban fog megjelenni a 10-STABLE es 10.1-RELEASE agra backportolt HardenedBSD is.

Aki szeretne kovetni a projectet, az pedig ezen a https://twitter.com/HardenedBSD oldalon teheti meg, vagy a http://hardenedbsd.org cimen.

memo: windows hacks

caps_lock_to_control.reg:


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout]
"Scancode Map"=hex:00,00,00,00,00,00,00,00,02,00,00,00,1d,00,3a,00,00,00,00,00 

utc-hw-time.reg:


[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation]
"RealTimeIsUniversal"=dword:00000001

MS-Windows focus-follows-mouse Registry hacks - http://sinewalker.wordpress.com/2010/03/10/ms-windows-focus-follows-mou…

Linux kompatibilis rendszert irnak C++11-ben VM-re optimalizalva

Egy erdekes project van kibontakozoban, reszletek a linkeken.

Why a new operating system?

Operating systems have evolved over decades to perform two distinct functions: manage the hardware, and provide isolation between the multiple applications and user running on the system.

However, in modern deployments, the hardware is virtualized, so there is very little for the operating system to manage. In addition, common deployment scenarios have one application per server, leaving the the isolation capabilities of the OS unutilized.