<?xml version="1.0" encoding="utf-8"?>
<!-- If you are running a bot please visit this policy page outlining rules you must respect. http://www.livejournal.com/bots/ -->
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:lj="http://www.livejournal.com">
  <id>urn:lj:livejournal.com:atom1:deraadt</id>
  <title>diary of a kernel hacker</title>
  <subtitle>a day in the life of OpenBSD</subtitle>
  <author>
    <name>deraadt</name>
  </author>
  <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/"/>
  <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom"/>
  <updated>2006-04-01T17:49:32Z</updated>
  <lj:journal username="deraadt" type="personal"/>
  <link rel="service.feed" type="application/x.atom+xml" href="http://deraadt.livejournal.com/data/atom" title="diary of a kernel hacker"/>
  <entry>
    <id>urn:lj:livejournal.com:atom1:deraadt:2691</id>
    <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/2691.html"/>
    <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom/?itemid=2691"/>
    <title>New laptop, and binary blob support thanks Project Evil!</title>
    <published>2006-04-01T17:49:32Z</published>
    <updated>2006-04-01T17:49:32Z</updated>
    <category term="blobs project evil ndisulator new laptop"/>
    <content type="html">OK, I didn't get much at the pawn shop for all the gear, in particular, no one saw much value in the Sun's.  But, I did get a nice new shiny, if cheap, laptop!&lt;br /&gt;&lt;br /&gt;The first problem I noticed was that the wireless card wasn't working.  Thankfully, ethernet worked, but being tethered just isn't my thing.  I know &lt;a href="http://undeadly.org/cgi?action=article&amp;amp;sid=20041102234803&amp;amp;mode=expanded"&gt;in the past&lt;/a&gt; I've harped on binary blobs and encouraged activism measures, not supporting uncooperative hardware vendors and so on, but desparate times call for desparate measures.  After all, sometimes you just want do some couch surfing without involving a television!  That's a good enough justification, isn't it?&lt;br /&gt;&lt;br /&gt;At any rate, I've gone ahead and added FreeBSD's ndisulator to the base OpenBSD install.  Sure I've said bad things about ndiswrapper, but &lt;a href="http://lists.freebsd.org/pipermail/freebsd-hardware/2004-January/001005.html"&gt;wpaul's Project Evil&lt;/a&gt; is BSD licensed, therefore it must be OK.  At the least, Bill certainly has done his share to get ethernet vendors to open up in the past, so this is probably part of an ultimate strategy somewhere and not just because he needed to use wireless at work on his OS of choice.  Anyway, I'm sure him calling it Project Evil isn't reflective of anything bad.&lt;br /&gt;&lt;br /&gt;OH COOL!  I can turn WPA-2 on my access point now that this windows driver supports it!  I don't even remember why I needed it, particularly with the improved ipsec tools, and now OpenSSH layer 2 tunneling, but whatever more features is more better!</content>
  </entry>
  <entry>
    <id>urn:lj:livejournal.com:atom1:deraadt:2349</id>
    <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/2349.html"/>
    <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom/?itemid=2349"/>
    <title>OpenSSH REMOTE?!?!?!</title>
    <published>2006-04-01T17:20:25Z</published>
    <updated>2006-04-01T17:20:25Z</updated>
    <category term="x86 only openssh remote two roots in 8 y"/>
    <content type="html">DAMNIT, &lt;a href="http://www.metasploit.com/archive/framework/msg00919.html"&gt;second remote in 8 years&lt;/a&gt;?!  How is this possible?  I'm going to have the head of Mathieu Sauvé-Frankel (msf@) for his involvement in this!&lt;p&gt;

This can't go on - I have to keep the project going, no matter what the cost!&lt;p&gt;

I am hearby announcing that OpenBSD is going x86 only!&lt;p&gt;

I am selling off all of my hardware and will trade it in for a cheap laptop to make sure that we go on, fixing bugs, with or without donations even if I end up on the street mooching free wifi to keep things running.</content>
  </entry>
  <entry>
    <id>urn:lj:livejournal.com:atom1:deraadt:2285</id>
    <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/2285.html"/>
    <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom/?itemid=2285"/>
    <title>uh oh... OpenBSD is dying!</title>
    <published>2006-04-01T01:35:32Z</published>
    <updated>2006-04-01T01:36:33Z</updated>
    <category term="openbsd kaput need $$$ help!"/>
    <content type="html">Maybe I had one drink too many, or more appropriately - I think I had less in the rainy day fund than I thought.  I'm tapped out!&lt;br&gt;&lt;br&gt;

Crap, until further notice this means I need to get a 9-5 job, OpenBSD production is going to be on hold until someone comes up with enough funds!  This is terrible!</content>
  </entry>
  <entry>
    <id>urn:lj:livejournal.com:atom1:deraadt:1923</id>
    <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/1923.html"/>
    <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom/?itemid=1923"/>
    <title>FTP releases to be delayed until next CD set released</title>
    <published>2006-04-01T01:31:08Z</published>
    <updated>2006-04-01T02:10:52Z</updated>
    <category term="ftp donations need money beer hackathon"/>
    <content type="html">This lack of beer money situation needs to be stopped.  I can't dip into the rainy day savings for that, and I don't even want to think about putting an end to the hackathons.  Or worse yet, hackathons without enough money for beer!!  This calls for action!&lt;br&gt;&lt;br&gt;

I gave Bob a call to let him know that we won't be making 3.9 available for ftp until the 4.0 CD's are out.  He suggested we just block connections from IBM, Sun, Apple, etc.  He knows just as well as I how ineffective that would be so it didn't take much convincing.  I sure hope this will help.&lt;br&gt;&lt;br&gt;

In the meantime, maybe I could dip into that rainy day money for just one drink.</content>
  </entry>
  <entry>
    <id>urn:lj:livejournal.com:atom1:deraadt:1781</id>
    <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/1781.html"/>
    <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom/?itemid=1781"/>
    <title>Trickle of donations</title>
    <published>2006-04-01T01:27:18Z</published>
    <updated>2006-04-01T01:27:18Z</updated>
    <content type="html">I checked the post.  A donation came in, I know that every bit counts, and today I've been sending out thank you emails to those who have donated as positive reinforcement.  That said, it's hard &lt;i&gt;not&lt;/i&gt; to look a gift horse in the mouth when you see a check for $5 CDN.  For that expense, I think I like it better when people just buy me a beer at a conference.  Right about now, I could certainly use a beer at least with so little money coming in, I don't think I can keep things up much longer.</content>
  </entry>
  <entry>
    <id>urn:lj:livejournal.com:atom1:deraadt:1327</id>
    <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/1327.html"/>
    <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom/?itemid=1327"/>
    <title>Publicity, rss and animated GIF's.</title>
    <published>2006-04-01T01:22:23Z</published>
    <updated>2006-04-01T01:23:42Z</updated>
    <category term="undeadly press undsoweiter"/>
    <content type="html">I turned my attention to &lt;a href="http://undeadly.org"&gt;undeadly&lt;/a&gt; for a moment.  I know there's no such thing as bad press, the increase in ftp downloads proves we keep gaining in popularity - but another interview that asks me the same questions I've answered 20 times before can't be &lt;i&gt;that&lt;/i&gt; exciting for people, can it?  Well those pieces may get OpenBSD out to new readers on the sites they're posted on at least.  As far as the existing readers of undeadly, the rest of the site seems pretty dead, we need more action - some good hooks, someone get these editors some journalism experience!  I do like those developer blogs though, at least there's &lt;i&gt;some&lt;/i&gt; original content.  But seriously, maybe deadly.org was better left in peace on April 1st, 2004.&lt;br&gt;&lt;br&gt;

Damnit, how do you &lt;a href="http://undeadly.org/cgi?action=submit"&gt;Add a Story&lt;/a&gt; to undeadly?  Livejournal is way easier.  Plus, undeadly doesn't have any animated puffy icons.&lt;br&gt;&lt;br&gt;

Well, neither does my LJ, but the cat's pretty cute dontcha think?</content>
  </entry>
  <entry>
    <id>urn:lj:livejournal.com:atom1:deraadt:1032</id>
    <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/1032.html"/>
    <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom/?itemid=1032"/>
    <title>mailing lists - the bane of my existence.</title>
    <published>2006-04-01T01:14:53Z</published>
    <updated>2006-04-01T01:14:53Z</updated>
    <category term="sendwhaling with qmail harpoons"/>
    <content type="html">Having ripped out GCC was a bit of a pain, I'm sure there's a lot of breakage in the tree - but that's not a problem, is it?  Anyway, I decided to catch up on email.&lt;br /&gt;&lt;br /&gt;I blazed through cvs@ to see if there's anything I've overlooked amidst my changes.  Looks like some good work on ipsecctl.  Not much on ports@ or ports-cvs@.  Pretty much all the architecture specific lists are nothing but spam.  Even tech@ is mostly dead today.  I take a deep breath, grit my teeth, and turn to misc@.  On second thought, my CAPS LOCK key could use a rest; I don't even want to deal with that right now.&lt;br /&gt;&lt;br /&gt;What to do?  The sendmail patches announced on security-announce@, though announced a little late, our sane defaults make this a non issue for the most part, but man am I sick of dealing with sendmail!  Screw it - I think it's time to get rid of that dog, and replace things with &lt;a href="http://cr.yp.to/qmail.html"&gt;qmail&lt;/a&gt;.  I know in the past I didn't like how it crammed things in /var, and djb's "license" (i.e. rant) doesn't suit us at all, but at least it's not as bad as postfix's license - or as bug ridden as exim (yech!).</content>
  </entry>
  <entry>
    <id>urn:lj:livejournal.com:atom1:deraadt:1011</id>
    <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/1011.html"/>
    <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom/?itemid=1011"/>
    <title>Getting rid of GCC - begone GPL!</title>
    <published>2006-04-01T01:06:32Z</published>
    <updated>2006-04-01T01:06:32Z</updated>
    <category term="gooooodbye gpl &amp;amp; gcc!"/>
    <content type="html">After this morning's excitement I grabbed some breakfast and thought of what I wanted to do for the day before checking on email.  There was an interloper on icb the other day who reminded me to take a look at &lt;a href="http://www.advogato.org/proj/Kencc/"&gt;kencc&lt;/a&gt;.  Of course we would love to get rid of GPL code, and gcc is our biggest dependency.  I know in the past I'd mentioned admiration for this compiler (originally written for Plan9), it's small, supports various architectures, and well is written by &lt;a href="http://cm.bell-labs.com/who/ken/"&gt;someone&lt;/a&gt; who better damned well know C better than just about anyone else.  It's under an MIT license now, so we would get that benefit without dealing with &lt;a href="http://www.tendra.org"&gt;TenDRA&lt;/a&gt;.  However, migrating from gcc will be quite a chore.  Their CVS looks untouched since last year, this will be a pain to even get into a form from which to work.  Enough daydreaming, I'd better get cracking!</content>
  </entry>
  <entry>
    <id>urn:lj:livejournal.com:atom1:deraadt:722</id>
    <link rel="alternate" type="text/html" href="http://deraadt.livejournal.com/722.html"/>
    <link rel="self" type="text/xml" href="http://deraadt.livejournal.com/data/atom/?itemid=722"/>
    <title>Problem with CVS?!</title>
    <published>2006-04-01T01:00:38Z</published>
    <updated>2006-04-01T01:24:32Z</updated>
    <category term="not an openbsd cvs break in sensorsd ope"/>
    <content type="html">My day started in a panic when my cell phone began ringing at 5 a.m. with alerts from cvs.openbsd.org.&lt;br&gt;&lt;br&gt;

Thankfully, it was a false alarm.&lt;br&gt;&lt;br&gt;

The new &lt;a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd.conf&amp;amp;sektion=5&amp;amp;arch=i386&amp;amp;apropos=0&amp;amp;manpath=OpenBSD+Current"&gt;sensorsd.conf&lt;/a&gt; file I created obviously needs some threshold tuning, so that I won't get woken up when the cpu temperature goes up just because someone commits a new port.  Still, it was good to see the sensor framework improvements working properly.&lt;br&gt;&lt;br&gt;

Still, since I was already on the machine, I figured I'd make the switch to &lt;a href="http://www.opencvs.org/"&gt;OpenCVS&lt;/a&gt;.  What the hey?</content>
  </entry>
</feed>
