Slashdot Log In
OpenBSD Foundation Announced
Posted by
samzenpus
on Thu Jul 26, 2007 03:07 AM
from the check-it-out dept.
from the check-it-out dept.
OpenBDSfan writes "KernelTrap is reporting on the creation of the OpenBSD Foundation, a Canadian not-for-profit corporation intended to support OpenBSD and related projects, including OpenSSH, OpenBGPD, OpenNTPD, and OpenCVS. The announcement explains, "the OpenBSD Foundation will initially concentrate on facilitating larger donations of equipment, funds, documentation and resources. Small scale donations should continue to be submitted through the existing mechanisms.""
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Accounced? (Score:5, Funny)
Re: (Score:2, Funny)
Heh... actually, the spell-check-it dept. accounced they are absconscding, it seems they have abandondoned
NOT a mispelling. (Score:2, Funny)
Accountable, but... (Score:2)
Yes, that's great. But... does it actually have drivers for modern hardware?
Re: (Score:2)
Re: (Score:2)
Re: (Score:2, Funny)
When spell-naziing, don't ever forghet (Score:2)
OpenBSD Logo (Score:3, Insightful)
not-for-profit vs. non-profit (Score:2)
OpenCVS? (Score:3, Insightful)
You're a codin' machine Theo, but I wish you could learn to play well with others.
Re:OpenCVS? (Score:5, Informative)
Parent
Re:OpenCVS? (Score:5, Informative)
What people seems to forget is that even if CVS usage is replaced with something else (like for example SVN) it doesn't make all the old CVS repositories go away. So, 20 years into the future (when we have flying cars which runs on water) you sit there (on your levitating chair) and wants to extract some files from an old CVS repo you found in the company's archive. No problem, except that GNU CVS isn't available on SuperDuper Windows Extra Deluxe 2027, due to the fact that code base and build system is such a mess that no one manages to make packages for Cygwin anymore (that and the fact that Microsoft (Operating Systems Division) does not any longer permit that GPLed software is used on its products.
Ok, I'm exaggerating, but the point is that there is no fault in having a clean and maintainable code base for the future - even if it's only used for handling legacy projects.
Besides, who are we to tell these people how to use their spare time? If anyone want to re-implement Unix in Brainf*ck, then let them.
Parent
Re: (Score:2)
I tell ya one thing though.. all those pig-headed people who are reluctant to upgrade their CVS servers already are even less likely to do it if OpenCVS is a success.
Re: (Score:3, Informative)
Re: (Score:2, Flamebait)
This is a pretty common pattern. Complex == insecure to them. Which, to me, implies that secure == poverty. I like security as much as the next guy, but living in poverty because you're p
Re:OpenCVS? (Score:4, Insightful)
Complex == insecure to them. Which, to me, implies that secure == poverty.
No, you have your negation wrong.... If Complex == Insecure then !Complex = !Insecure, and thus Simple = Secure. The funny thing is: you cannot argue with that: simple is easier to audit and thus easier to audit. It really is that simple (Dah-dum!). Simple doesn't equate poverty, or a Lotus Elise is a poor-mans-car. (Having no radio, AC, etc...) Sorry for the "bad car analogy"(tm).
You also forget the target demographic for OpenBSD: this is not for your Desktop, nor even for your high-load server. You can use it for that, but the niche in which it lives is firewall, NAT, transparent bridging. Places where security matters more than anything else. Sure, a bit more complex to set up, you need to work more, but this is not your moms OS.
Parent
Re: (Score:2, Informative)
simple is easier to audit and thus easier to audit.
Should be: simple is easier to audit and thus easier to secure.
Re: (Score:3, Interesting)
Re: (Score:2)
Yeah, figured.
Re:OpenCVS? (Score:5, Informative)
If Complex -> Insecure, then:
!Insecure -> !Complex; and
Secure -> Simple
Otherwise your method of reasoning would go like this:
Square = Four-sided-figure
!Square = !Four-sided-figure
. . . which doesn't make sense because then you could say "and thus, a non-square rectangle isn't a four-sided figure".
Good old Wikipedia has the details [wikipedia.org].
Parent
Re:OpenCVS? (Score:4, Funny)
Logical terminology! So We Meet Again, My old Arch Nemesis. ;-)
That's for clearing that up, you are of course 100% right.
Parent
Re: (Score:2)
Re: (Score:2, Informative)
Yes? Which is based on FreeBSD and not OpenBSD. FreeBSD which is also used by many people on the desktop (I did a while ago, but that laptop died, unrelated to FreeBSD of course ;-) ). They are really only related by their name and their license. OpenBSD is a fork of NetBSD, which came from 386BSD which also forked into FreeBSD. [wikimedia.org] Let's say OpenBSD and PC-BSD are something like cousins.
Re: (Score:2, Funny)
Re:OpenCVS? (Score:5, Insightful)
Besides, choosing a stable and secure algorithm is not a bad idea. See this post for a valid example [undeadly.org].
Finally, I can't help but notice that Subversion is available as an OpenBSD package [openbsd.org], so quit your yakking already.
Sheesh, anti-OpenBSD trolls these days.
Parent
Re: (Score:2)
All we're saying is that we should work together instead of fragmenting all the time.
Why is that a troll?
Re: (Score:2)
Re: (Score:2)
hell it might save them wasting their spare time, get the point?
Re:OpenCVS? (Score:5, Informative)
OpenBSD has a long history with CVS. It was the first open source project to run a public CVS server; previously all open source projects had run a private CVS server that only a few people could access, and published snapshots as tarballs.
They have a lot of revision history in their CVS repository, and feel it's important to maintain this due to the way in which their auditing process works. They might switch to something else at some point, but for now CVS is the best way they have of ensuring compatibility with CVS.
Currently, they use GNU CVS, but there have been a number of security problems with it in the recent past. Part of this comes from the fact that, when it was written, GNU projects used the private-CVS-public-snapshots development model, so only trusted people got access to the CVS server anyway. After fixing a few security holes in GNU CVS, the team decided that the code was in such a state that doing a full audit and getting it up to the standard required by OpenBSD would be more effort than writing a replacement, so they decided to replace it instead. So far, they have OpenRCS, which is a drop-in replacement for GNU RCS (on which CVS is built). Now they are working on the CVS component, and seem to be making good progress.
It's really not hard to understand. Considering the code quality of the rest of OpenBSD, I'd be more inclined to use their version than the GNU one if I needed CVS. Take a look at the recent BIND vulnerability that affected every platform except OpenBSD for an example.
Parent
Re: (Score:2)
Re: (Score:3, Interesting)
Almost every other major source control system would have allowed him to maintain his own fork and publish it, keeping his software synced with or development integrated with the main source tree: Bitkeeper, git, Subversion, Perforce, etc. CVS fails this task pretty s
Re: (Score:2)
Re:OpenCVS? (Score:4, Insightful)
Perhaps for your purposes. However, the CVS license it not consistent with the goals and philosophies of OpenBSD. So they created OpenCVS with a license that is appropriate.
the main source of theo thinking SVN isn't secure, is because that control freak didn't write it himself.
Do you have a link pointing to his quote on that?
openssl and openssh are 2 packages responsible for huge security holes over the years, both of which are his babies.
OpenSSL [openssl.org] is not Theo's "baby".
OpenSSH's security, while not perfect, has been excellent. Your unsubstantiated attribution of "huge security holes" to it seems to be intended as little more than a troll, since you did not provide any citations.
Parent
Re:OpenCVS? (Score:5, Insightful)
Except, of course, you have no fscking idea what you are talking about, since OpenSSL is not developed, or related to, OpenBSD and Theo de Raadt in any way [openssl.org].
As far as OpenSSH security holes [secunia.com] are concerned, please excuse me while I laugh. Most of these vulnerabilities are either denial of service, or someone who messed up with their OpenSSH implementation. A lot of people think they can improve on a perfectly good product by adding security holes in it.
As far as OpenCVS is concerned, they explain their rationale quite clearly:
Now, let me ask you: what part of "development has been mostly stagnant in the last years and many security issues have popped up" don't you understand?
Allow me to finish by adding this: read up a little bit before you start trolling. But that would be a waste of a perfectly good troll, right? Sheesh. Go back under your bridge, little troll.
Parent
Re: (Score:2)
CVS has had plenty of security holes
Re: (Score:2)
Re: (Score:2)
You seem to think that me saying Theo doesn't get along with others is somehow belittling his work.. it isn't.
It's belittling his ability to get along with others.
Interesting (Score:3, Insightful)
Either way i'm happy. At least there's even more support for open source software and anything non-windows related.
Re: (Score:2, Insightful)
> so I wonder if he'll embrace this with open arms, or just shun it like he does most things.
This is an official OpenBSD effort, all of the directors are OpenBSD developers. I'm sure
Theo was pretty central to setting it up, he is unlikely to shun it.
Re:Interesting (Score:5, Interesting)
Besides, the OpenBSD Foundation stated very clearly [openbsdfoundation.org] that it will focus on large donations (of funds, hardware, etc) and that small donations should be sent directly to OpenBSD through the usual channels. RTFA and all that.
I do think Theo will be A-OK with that.
Parent
Did anyone notice the spelling error? (Score:2)
Accounced (Score:4, Funny)
Not tax deductable! (Score:2)
From their Donations page:
If it's so stinking hard to do in Canada, maybe they should have
Re: (Score:2)
Re: (Score:2, Redundant)
Re: (Score:2)
Thkfly, ntrl lngag hs evlvd engh rdndncy to prvd fr frly rlibl err crrctn.
Even better, it's compressed, and can be decompressed by using the error correction already present and running. Score!
Re: (Score:2)
Re:WTF (Score:4, Funny)
Another time I accounced my neighbours dog for barking while I was trying to sleep. I used a teaspoon. It was fun.
Parent
Re: (Score:2, Offtopic)
I very much doubt that. I suspect that what your country was in the shadow of was Stalinism. Just because the nice American man said you were living under communism doesn't mean anything as Americans generally can not tell the difference between Communism, Stalinism, and Socialism (and assume they're all Stalinism).
Communism, like capitalism, is based on a model of the world which only works if everyone acts in exactly the way the inventor of the mo