Skip to main content.

Episode 051: Engineering Nginx

2014-08-20

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent

This episode was brought to you by

iXsystems - Enterprise servers and storage for open sourceTarsnap - online backups for the truly paranoid


Headlines

Password gropers take spamtrap bait

  • Our friend Peter Hansteen, who keeps his eyes glued to his log files, has a new blog post
  • He seems to have discovered another new weird phenomenon in his pop3 logs
  • "yes, I still run one, for the same bad reasons more than a third of my readers probably do: inertia"
  • Someone tried to log in to his service with an address that was known to be invalid
  • The rest of the post goes into detail about his theory of why someone would use a list of invalid addresses for this purpose

Inside the Atheros wifi chipset

  • Adrian Chadd - sometimes known in the FreeBSD community as "the wireless guy" - gave a talk at the Defcon Wireless Village 2014
  • He covers a lot of topics on wifi, specifically on Atheros chips and why they're so popular for open source development
  • There's a lot of great information in the presentation, including cool (and evil) things you can do with wireless cards
  • Very technical talk; some parts might go over your head if you're not a driver developer
  • The raw video file is also available to download on archive.org
  • Adrian has also recently worked on getting Kismet and Aircrack-NG to work better with FreeBSD, including packet injection and other fun things

Trip report and hackathon mini-roundup

  • A few more (late) reports from BSDCan and the latest OpenBSD hackathon have been posted
  • Mark Linimon mentions some of the future plans for FreeBSD's release engineering and ports
  • Bapt also has a BSDCan report detailing his work on ports and packages
  • Antoine Jacoutot writes about his work at the most recent hackathon, working with rc configuration and a new /etc/examples layout
  • Peter Hessler, a latecomer to the hackathon, details his experience too, hacking on the installer and built-in upgrade function
  • Christian Weisgerber talks about starting some initial improvements of OpenBSD's ports infrastructure

DragonFly BSD 3.8.2 released

  • Although it was already branched, the release media is now available for DragonFly 3.8.2
  • This is a minor update, mostly to fix the recent OpenSSL vulnerabilities
  • It also includes some various other small fixes

Interview - Eric Le Blan - info@xinuos.com

Xinuos' recent FreeBSD integration, BSD in the commercial server space


Tutorial

Building a hardened, feature-rich webserver


News Roundup

Defend your network and privacy, FreeBSD version

  • Back in episode 39, we covered a blog post about creating an OpenBSD gateway - partly based on our tutorial
  • This is a follow-up post, by the same author, about doing a similar thing with FreeBSD
  • He mentions some of the advantages and disadvantages between the two operating systems, and encourages users to decide for themselves which one suits their needs
  • The rest is pretty much the same things: firewall, VPN, DHCP server, DNSCrypt, etc.

Don't encrypt all the things

  • Another couple of interesting blog posts from Ted Unangst about encryption
  • It talks about how Google recently started ranking sites with HTTPS higher in their search results, and then reflects on how sometimes encryption does more harm than good
  • After heartbleed, the ones who might be able to decrypt your emails went from just a three-letter agency to any script kiddie
  • He also talks a bit about some PGP weaknesses and a possible future replacement
  • He also has another, similar post entitled "in defense of opportunistic encryption"

New automounter lands in FreeBSD

  • The work on the new automounter has just landed in 11-CURRENT
  • With help from the FreeBSD Foundation, we'll have a new "autofs" kernel option
  • Check the SVN viewer online to read over the man pages if you're not running -CURRENT
  • You can also read a bit about it in the recent newsletter

OpenSSH 6.7 CFT

  • It's been a little while since the last OpenSSH release, but 6.7 is almost ready
  • Our friend Damien Miller issued a call for testing for the upcoming version, which includes a fair amount of new features
  • It includes some old code removal, some new features and some internal reworkings - we'll cover the full list in detail when it's released
  • This version also officially supports being built with LibreSSL now
  • Help test it out and report any findings, especially if you have access to something a little more exotic than just a BSD system

Feedback/Questions


  • All the tutorials are posted in their entirety at bsdnow.tv
  • We want to give a special thanks to our viewer Remy for writing the basis of today's tutorial
  • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
  • If you want to come on for an interview or have a tutorial you'd like to see, let us know
  • Watch live Wednesdays at 2:00PM Eastern (18:00 UTC)
  • FreeBSD is now entering its third week of not being patched for the latest OpenSSL vulnerabilities
  • Final reminder: OpenBSD is moving to a new distributor in September (which is very soon!) so this is your last chance to buy any of their tshirts, CDs or posters - grab them now while you still can, and support the project

Latest News

How did you get into BSD?

2014-11-26

We've got a fun idea for the holidays this year: just like we ask during the interviews, we want to hear how all the viewers and listeners first got into BSD. Email us your story, either written or a video version, and we'll read and play some of them for...

EuroBSDCon 2014

2014-09-18

As you might expect, both Allan and Kris will be at EuroBSDCon this year. They'll be busy hunting down various BSD developers and forcing them to do interviews, but don't hesitate to say hi if you're a listener!...

BSDCan 2014

2014-04-30

We just wrapped up episode 35 after having some horrible audio issues. Sorry about the quality being lower than usual, we did the best we could given the circumstances. Next week we've got a normal episode, but the following week Allan and Kris will be at BSDCan. That week will...

AsiaBSDCon 2014

2014-03-05

Both Allan and Kris will be going to AsiaBSDCon this year, so episode 28 will be shorter than usual. We'll be back the following week with a huge episode. Hopefully they can get some interviews there!...


Episode 068: Just the Essentials

2014-12-17

Direct Download: Video | HD Video | MP3 Audio | OGG Audio | Torrent This episode was brought to you by Headlines More BSD conference videos We mentioned it a few times, but the "New Directions in Operating Systems" conference was held in November in the UK The presentations videos are now online, with a few...

Episode 067: Must Be Rigged

2014-12-10

Direct Download: Video | HD Video | MP3 Audio | OGG Audio | Torrent This episode was brought to you by Headlines Bitrig 1.0 released If you haven't heard of it, Bitrig is a fork of OpenBSD that started a couple years ago According to their FAQ, some of their goals include: only supporting modern hardware...

Episode 066: Conference Connoisseur

2014-12-03

Direct Download: Video | HD Video | MP3 Audio | OGG Audio | Torrent This episode was brought to you by Headlines More BSD presentation videos The MeetBSD video uploading spree continues with a few more talks, maybe this'll be the last batch Corey Vixie, Web Apps in Embedded BSD Allan Jude, UCL config Kip Macy, iflib While we're...

Episode 065: 8,000,000 Mogofoo-ops

2014-11-26

Direct Download: Video | HD Video | MP3 Audio | OGG Audio | Torrent This episode was brought to you by Headlines Even more BSD presentation videos More videos from this year's MeetBSD and OpenZFS devsummit were uploaded since last week Robert Ryan, At the Heart of the Digital Economy FreeNAS & ZFS, The Indestructible Duo -...