Self-host a password manager on OpenBSD

https://www.tumfatig.net/20210105/self-host-a-password-manager-on-openbsd/

#security #password

Secure WireGuard VPN server setup on OpenBSD (and configure Windows 10 clients to connect through it).

https://ozgur.kazancci.com/secure-fast-vpn-server-wireguard-setup-on-openbsd-and-configure-windows-10-clients-to-connect-through-it/

#wireguard #network

List of some Shell goodies for OpenBSD

I'm sharing here some practices I'm following and some small tips/tools which facilitate my usage of OpenBSD in my day to day. Some a really specific to my usage, others could be re-used.

https://www.vincentdelft.be/post/post_20210102

#shell #cli

Syncthing server setup on OpenBSD.

I go over how to setup a Syncthing server on OpenBSD. Syncthing is not necessarily a backup server specifically as it is a peer-to-peer file synchronization program, but it does a great job of fulfilling that function in an easy way. These steps should apply to OpenBSD 6.7 or greater.

https://daulton.ca/2020/09/openbsd-syncthing-server/

#syncthing

And a lot of articles also: https://daulton.ca/tags/openbsd/ 👍🏻

Just another router guide.

https://hakk.gg/openbsd-router-guide

#network

Hexo on OpenBSD.

Hexo can be used for blogging op OpenBSD. Hexo converts your markdown files into a html blog, similar to mkdocs, hugo, pelican and others...

https://bsdnerds.org/hexo-on-openbsd/

#hexo

How to Compile OpenVAS on OpenBSD.

The Open Vulnerability Assessment System (OpenVAS) security tool is great! It's a free fork of the Nessus project. It is a network security scanner with a graphical front end, and it applies many thousands of vulnerability tests to machines across a network...

https://cromwell-intl.com/open-source/compiling-openvas-on-openbsd.html

#openvas #security

How to Compile OpenCV on OpenBSD.

The OpenCV (Open Computer Vision) package is great! It lets you very quickly develop code for dealing with arbitrary image file formats...

https://cromwell-intl.com/open-source/compiling-opencv-on-openbsd.html

#opencv #graphics

Block spammers/abusive IPs with Pf-badhost in OpenBSD. A 'must have' security tool!

Pf-badhost is a very practical, robust, stable and lightweight security script for network servers.

https://www.undeadly.org/cgi?action=article;sid=20210119113425

#network #security

LWJGL 3 for Minecraft on OpenBSD.

This repository is an attempt to make Minecraft >= 1.13 work on OpenBSD. As of this moment, Minecraft 1.16.5 has been tested to work on my T450s OpenBSD 6.8 -stable.

https://github.com/octeep/lwjgl3

#desktop #games

Calibrate your touch-screen on OpenBSD

I didn’t expected it but my refurbished T460s came with a touch-screen. It is recognized by default on OpenBSD and not well calibrated as-is. But that’s really simple to solve.

https://www.tumfatig.net/20210122/calibrate-your-touch-screen-on-openbsd/

#desktop #system

OpenBSD Authentication Bypass | HTTP Header Tampering | Kernel OS Local Root Exploit

Summary. User - This machine is running an OpenBSD httpd site which has a login portal with only a sign-in feature working. Upon research, it was found to have a vulnerability that exposes the user’s private key enabling us to login using SSH. Root - A local exploit was found for openbsd; executing which gave me the root!

https://medium.com/bugbountywriteup/htb-openkeys-writeup-531264648200

#security

AAA gaming on OpenBSD with Google Stadia

robert@ updated OpenBSD's chromium port to enable Stadia. This significantly expands what is possible in terms of gaming on OpenBSD. In this video, I provide some game footage from OpenBSD with discussion of performance, pros, cons, and the implications for users with different interests in gaming and OpenBSD.

https://marc.info/?l=openbsd-ports-cvs&m=161147252332522&w=2
https://www.youtube.com/watch?v=WMTmUfcILso&feature=emb_title

#desktop #games

Enable multi-factor authentication on OpenBSD

In this article I will explain how to add a bit more security to your OpenBSD system by adding a requirement for user logging into the system, locally or by ssh. I will explain how to setup 2 factor authentication (2FA) using TOTP on OpenBSD.

https://dataswamp.org/~solene/2021-02-06-openbsd-2fa.html

#ssh #totp #security

Missing Cron Email When Restarting smtpd

I have a cron job that renews an SSL certificate from Let's Encrypt, and then restarts the smtpd daemon so that the new certificate is picked up. This all works fine--as proven by both the presence of a new, valid cert on disk, and smtpd successfully restarting--but cron never sends an email with the output of the job. What gives?

https://www.packetmischief.ca/2021/02/03/missing-cron-email-when-restarting-smtpd/

#cron #mail #opensmtpd

How To Setup Cloudflare Warp on OpenBSD.

Here we look at how to setup Cloudflare Warp on OpenBSD.

https://rodneylab.com/how-to-setup-cloudflare-warp-openbsd/

#wireguard #vpn #network

What security does a default OpenBSD installation offer?

In this text I will explain what makes OpenBSD secure by default when you install it. Do not take this for a security analysis, but more like a guide to help you understand what is done by OpenBSD to have a secure environment. The purpose of this text is not to compare OpenBSD to others OS but to say what you can honestly expects from OpenBSD.

https://dataswamp.org/~solene/2021-02-14-openbsd-default-security.html

#security #system

Tor Hidden Services on OpenBSD with HTTPD.

The following guide will help you stand up a simple web-site hosted behind a TOR V3 Hidden Service using OpenBSD.

https://medium.com/@sarala.saraswati/tor-hidden-services-on-openbsd-with-httpd-52852f49358c

#httpd #tor