Calibrate your touch-screen on OpenBSD

I didn’t expected it but my refurbished T460s came with a touch-screen. It is recognized by default on OpenBSD and not well calibrated as-is. But that’s really simple to solve.

https://www.tumfatig.net/20210122/calibrate-your-touch-screen-on-openbsd/

#desktop #system

OpenBSD Authentication Bypass | HTTP Header Tampering | Kernel OS Local Root Exploit

Summary. User - This machine is running an OpenBSD httpd site which has a login portal with only a sign-in feature working. Upon research, it was found to have a vulnerability that exposes the user’s private key enabling us to login using SSH. Root - A local exploit was found for openbsd; executing which gave me the root!

https://medium.com/bugbountywriteup/htb-openkeys-writeup-531264648200

#security

AAA gaming on OpenBSD with Google Stadia

robert@ updated OpenBSD's chromium port to enable Stadia. This significantly expands what is possible in terms of gaming on OpenBSD. In this video, I provide some game footage from OpenBSD with discussion of performance, pros, cons, and the implications for users with different interests in gaming and OpenBSD.

https://marc.info/?l=openbsd-ports-cvs&m=161147252332522&w=2
https://www.youtube.com/watch?v=WMTmUfcILso&feature=emb_title

#desktop #games

Enable multi-factor authentication on OpenBSD

In this article I will explain how to add a bit more security to your OpenBSD system by adding a requirement for user logging into the system, locally or by ssh. I will explain how to setup 2 factor authentication (2FA) using TOTP on OpenBSD.

https://dataswamp.org/~solene/2021-02-06-openbsd-2fa.html

#ssh #totp #security

Missing Cron Email When Restarting smtpd

I have a cron job that renews an SSL certificate from Let's Encrypt, and then restarts the smtpd daemon so that the new certificate is picked up. This all works fine--as proven by both the presence of a new, valid cert on disk, and smtpd successfully restarting--but cron never sends an email with the output of the job. What gives?

https://www.packetmischief.ca/2021/02/03/missing-cron-email-when-restarting-smtpd/

#cron #mail #opensmtpd

How To Setup Cloudflare Warp on OpenBSD.

Here we look at how to setup Cloudflare Warp on OpenBSD.

https://rodneylab.com/how-to-setup-cloudflare-warp-openbsd/

#wireguard #vpn #network

What security does a default OpenBSD installation offer?

In this text I will explain what makes OpenBSD secure by default when you install it. Do not take this for a security analysis, but more like a guide to help you understand what is done by OpenBSD to have a secure environment. The purpose of this text is not to compare OpenBSD to others OS but to say what you can honestly expects from OpenBSD.

https://dataswamp.org/~solene/2021-02-14-openbsd-default-security.html

#security #system

Tor Hidden Services on OpenBSD with HTTPD.

The following guide will help you stand up a simple web-site hosted behind a TOR V3 Hidden Service using OpenBSD.

https://medium.com/@sarala.saraswati/tor-hidden-services-on-openbsd-with-httpd-52852f49358c

#httpd #tor

httpd-plus

Add-ons for the OpenBSD httpd(8) web server applicable to the lastest -current branch.

https://github.com/mpfr/httpd-plus

#httpd

Introducing veb(4) - a new Virtual Ethernet Bridge

In this commit, David Gwynne (dlg@) adds a new veb(4) driver to the tree. David's goal is to replace the old bridge(4) driver...

https://undeadly.org/cgi?action=article;sid=20210223111210

#network

Security Headlines with Antoine Jacoutot

In this episode of Security Headlines, we are joined by one of the minds behind the OpenBSD project, Antoine Jacoutot. He is responsible for porting over 300 packages into OpenBSD. He is also involved in syspatch which handles security binary upgrades for OpenBSD.

https://blog.firosolutions.com/2020/12/security-headlines-antoine-jacoutot/

#system

pftable-rs

A small Rust library for managing pf tables on OpenBSD.

https://github.com/d3npa/pftables-rs

#pf #security #network

Signal-cli on OpenBSD 6.8

If anyone wants to receive or send Signal Messenger messages from the terminal, here is a short guide for installing Signal-cli.

https://www.unitedbsd.com/d/389-using-signal-cli-on-openbsd-68

#cli #signal

Graphical view of the x86 OpenBSD boot process.

#system #boot

Where does the OpenBSD source code start?

To clarify the original post below, I mean when I hit the power button on my OpenBSD machine, what exactly happens? What line of code in what file does (I suppose the UEFI app) say to the CPU "okay I want you to start running this thousands-of-files-of-code software package that is OpenBSD here"?

https://www.reddit.com/r/openbsd/comments/lzw13b/where_does_the_openbsd_source_code_start/

#boot #system

Top 12 best opensource games available on OpenBSD.

This article features the 12 best games (in my opinion) in term of quality and fun available in OpenBSD packages. The list only contains open source games that you can install out of the box. This means that game engines requiring proprietary (or paid) game assets are not part of this list.

https://dataswamp.org/~solene/2021-03-07-openbsd-best-games.html?utm_source=discoverbsd

#games #desktop