Pinned post

I will be hosting a version control system tutorial at 2026, with @op as co-host (edit: Turns out Omar cannot make it; Johannes Thyssen Tishman will be co-hosting instead).

This tutorial will be suitable for both experts and complete beginners. The experts will probably spend significant effort temporarily unlearning some things they know, while the beginners will spend moderate effort learning some things they didn't know. Our goal is that both groups will broaden their version control horizons a bit and have fun doing so :flan_hacker:​

events.eurobsdcon.org/2026/tal

Pinned post

For my company I have put together and support packages which cover tasks I have been doing via ad-hoc consulting gigs for years now. And I asked some freelancing friends from the OpenBSD community to share the work with me.

We support deployments of OpenBSD in server and firewall roles via yearly fixed-price contracts. All base system components can be supported.

From our existing client base we know for a fact that there are small and mid-sized businesses out there who run OpenBSD and would benefit from working with us. We want to find more of them.

chirpysoft.be/support.html

Pinned post

I will be hosting and firewall courses at @linuxhotel in the city of Essen, Germany.

OpenBSD: linuxhotel.de/course/openbsd-d

PF: linuxhotel.de/course/pf-de

Currently there are no dates set for either course, but it is possible to send Linuxhotel a proposal for the next date.

The target audience are system administrators who would like to learn about OpenBSD and PF in order to use them as part of their network security tool set.

(Do not be afraid to sign up if you do not understand German. While the courses are advertised in German, written course material will be in English and the presentation will be entirely in English if preferred by participants.)

Almost 2 years later, here's the reason why I built this: github.com/carrotIndustries/ta A chipTAN TAN generator that runs on a laptop with a smart card reader.

Big thanks go to @schiermi for having reverse engineered the protocol: wiki.ccc-ffm.de/projekte:tange

Show thread

Hello everyone,

I've released the -portable version of got-0.130, in-line with upstream got.

See their changelog for what's included:

gameoftrees.org/releases/chang

For portable-specific information, see:

gameoftrees.org/portable.html

Any questions, shout!

Dear friends and enemies,

My latest summaries of the main recent changes to OpenBSD-current (linuxians might call it the "rolling release branch," from around Oct 2nd to yesterday):

https://www.openbsd.org/plus.html

#openbsd


compatible version control system version 0.130 has been released.

This version adds server-side support for SHA256 repositories and defaults to SHA256 for newly created repositories.

We will be upgrading our @gothub hosting service to this version soon.

gameoftrees.org/releases/chang

I've been curious though what I can find out about the data that's out there about me. So rather than asking companies to delete my data, I've been using the GDPR's article 15 to request what data companies have about me, where they got it from and who they have given it to.

I started by emailing a couple hundred companies that cold-contacted me, and then iterated as they told me who they got their data from or who they gave it to. After a couple of months of emails I'm now at about 500 companies in my graph, which is in some places 5 or 6 levels deep (i.e. chains of data brokers).

Show thread

This is one of the absolute coolest shots of the expanding debris from a supernova explosion I have ever seen, and I've seen a *lot*.

So what the heck's going on here with this thing? Hey, let me explain.

badastronomy.beehiiv.com/p/an-

"Wir testen einen von Grund auf neu gebauten Shop - probier ihn aus"

("We are testing a newly built from scratch shop -- try it out")

:flan_facepalm:​

Just had a conversation with peers that was like:

"my friend says github's changed their SSH key fingerprint again and it's generating scary warnings you have to ignore"

"oh? it hasn't changed for me"

"or me"

"can't find any documentation on them having changed it since 2023"

"... uh-oh."

If you get a scary warning about Github's ssh fingerprint changing: STOP! it's scary for a reason! You might be a victim-in-progress! Don't proceed unless and until you know exactly what's wrong!

Alas, I suspect the fact that Github really did have to force a key rotation a few years ago has planted the recollection in everyone's minds that this is a normal Github failure mode.

(Yes, messages have hastily been sent to warn people about the possible account compromise. Edit: well the good news is that it's already been diagnosed that they somehow still had the old key from pre-2023 saved, so it's *probably* not an active compromise. )

The Universe Is Scarier And More Beautiful Than You Thought, Part 5.72 x 10e14:

https://josephhall.org/blog/runaway-black-holes/

^/ to @joebeone for taking the time to do this thoroughly satisfying write-up.

You want to run a gotd (Game of Trees) server and manage it via gotsysd, here’s a quick guide to get you started: rock-y.org/howto_gotd_with_got #got #openbsd

@johanneskastl Trying out got-portable binaries from the openSUSE buildservice on openSUSE Leap 16, I noticed a small problem:

Trying to clone a repository from github over HTTPS ends in an error: got-fetch-http: bufio_starttls

Can you reproduce this? If so, any idea why this happens?

When I try the same clone operation on OpenBSD it works as expected.

Is there some problem with libtls maybe?

A little to welcome the week! These little opalescent are still thriving despite the anoxia in Hood Canal. Shot last Thursday night.

The Gotweb authenticator app written by Johannes Thyssen Tishman which makes it easy to browse repositories hosted on servers which require authentication is now available in :

f-droid.org/en/packages/org.ga

Deshittification of your Smart TV at Home using OpenBSD pf and Unbound: block Ad Networks and Telemetry while keeping apps like Netflix and Smart TVs working flawlessly - Detailed Article by Lari Huttunen fabricati-diem.inform.social/p

Removed a couple of idle VMs at @gothub from elapsed subscriptions yesterday. And promptly received a new subscription today :flan_squee:​ Always makes me happy when new people give it a try. And I don't mind people leaving when they discover it is not for them. Anyone who leaves is making space for new subscriptions. And quite a few subscribers do stick around, so we are healthy.

Damn I am tired of people laughing about Deutsche Bahn.

Travel in many other places in Europe and you will discover Germany is trying to do many things right with its railways. A quick blog post / rant from me:
jonworth.eu/your-deutsche-bahn

#CrossBorderRail

18 pictures show how profoundly large our cosmos is

From planet Earth to the inflationary multiverse, our conception of the Universe spans an enormous range of cosmic scales.

This photo tour takes us from here to eternity.
bigthink.com/starts-with-a-ban

I've asked several @gothub subscribers whether they would consent to be listed on our public list of projects because the list we had was almost empty. A few people obliged, which is great! The list is now less empty.

When some people told me they had no public content to share for this list, I replied this didn't matter because the goal was showing public support for our Git hosting project, not making more of our hosted content visible to the public.

An interesting fact I learned is that some projects are keeping their repositories completely private not because they generally want them to be private, but because they don't want them to be scraped by big tech LLM companies.

This is a use case I had not really considered from this angle before. I assumed every project would follow our recommendation to allow the public "anonymous" user in, unless the project's code was indeed proprietary. Which effectively blocks stupid crawlers that don't know how to log in, but isn't 100% tight and future-proof. And this shows that some projects are starting to shut their doors, not really because they don't want to share code, but because of all this external pressure. Which is sad. But we can give them one way forward. Adding additional accounts for known users is easy to do and accounts are virtually limitless (we could keep adding users until user ID "UINT_MAX - 1", though the /home filesystem would probably give in way before then). It is possible to build sizeable closed communities here without being forced to share code in the open, without allowing any LLM to look at it, and without a need to setup a complicated VPN or similar to hide everything away. Every user account is essentially just a public SSH key. If your key is accepted, you get access. People with access shouldn't be creating public mirrors of the content elsewhere, of course, which is an inherent risk in this big-tech-scraper threat model, and in any closed community really.

But overall, this is a very sad sate of affairs for young FOSS projects who want to avoid big tech. The situation was very different when I started out in the 2000s. Avoiding big tech wasn't difficult.

Show older
BSD Network

bsd.network is a *BSD-adjacent Mastodon Instance. We have a code of conduct.