FUG-BR / Grupo Brasileiro de Usuarios de FreeBSD - Todas Categorias

FUG-BR / Grupo Brasileiro de Usuarios de FreeBSD - Todas Categorias

01.11

Inicio

Todas Categorias

Principal

Regras da Lista

Assinar a Lista

Histrico da Lista

Galeria de Imagens

Contador Usurios FUG

-

DOC-BR (FUG BR)

-

+ Noticias

Alertas de Seguranca

Alertas em Ports

DaemonNews (Ingles)

Todas Categorias

-

Login

Sem conta? Crie uma

FreeBSD Brasil LTDA

Todas as Categorias de Noticas Externas

FUG-BR - Espalhando BSD

Dicas Rpidas:

/etc/make.conf:

SUP_UPDATE=YES
SUPHOST=\
cvsup.br.FreeBSD.org
SUPFILE=/seu/supfile

# cd /usr/src
# make update
# cd /usr/ports
# make update

Wallpapers

Fontes Externas

FreeBSD Multimedia Resources List FreeBSD Multimedia Resources
EuroBSDCon - EuroBSDCon 2008 - Anttii Kantee - Converting kernel file systems to services - OGG

EuroBSDCon 2008 - Anttii Kantee - Converting kernel file systems to services - OGG
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, anttii kantee, ogg
ABSD/UNIX operating system is traditionally split into two pieces: the kernel and userspace. Historically the reasons for this were clear: the UNIX kernel was a simple entity. However, over time the kernel has grown more and more complex. Currently, most of the same functionality is available both in userspace and the kernel, but under different names. Examples include synchronization routines and threading support. For instance, to lock a mutex in the NetBSD kernel, the call is mutex_enter(), while in userspace the routine which does exactly the same thing is known as pthread_mutex_enter(). Taking another classic example, a BSD style OS has malloc()/free() available both in userspace and the kernel, but with different linkage (the kernel malloc interface is currently being widely deprecated, though). This imposes a completely arbitrary division between the kernel and userspace. Most functionality provided by an opearating system should be treated as a service instead of explicitly pinning it down as a userspace daemon or a kernel driver. Currently, due to the arbitrarily difference in programming interface names, functionality must be explicitly ported between the kernel and userspace if it is to run in one or the other environment. By unifying the environments where possible, the arbitrary division is weakened and porting between these environments becomes simpler.
Antti Kantee has been a NetBSD developer for many many moons. He has managed to work on quite a few bits and pieces of a BSD system: userland utilities, the pkgsrc packaging system, networking, virtual memory, device drivers, hardware support and file systems.
See also http://www.netbsd.org/docs/puffs/rump.htm

EuroBSDCon - EuroBSDCon 2008 - Anttii Kantee - Converting kernel file systems to services - MP3

EuroBSDCon 2008 - Anttii Kantee - Converting kernel file systems to services - MP3
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, anttii kantee, mp3
ABSD/UNIX operating system is traditionally split into two pieces: the kernel and userspace. Historically the reasons for this were clear: the UNIX kernel was a simple entity. However, over time the kernel has grown more and more complex. Currently, most of the same functionality is available both in userspace and the kernel, but under different names. Examples include synchronization routines and threading support. For instance, to lock a mutex in the NetBSD kernel, the call is mutex_enter(), while in userspace the routine which does exactly the same thing is known as pthread_mutex_enter(). Taking another classic example, a BSD style OS has malloc()/free() available both in userspace and the kernel, but with different linkage (the kernel malloc interface is currently being widely deprecated, though). This imposes a completely arbitrary division between the kernel and userspace. Most functionality provided by an opearating system should be treated as a service instead of explicitly pinning it down as a userspace daemon or a kernel driver. Currently, due to the arbitrarily difference in programming interface names, functionality must be explicitly ported between the kernel and userspace if it is to run in one or the other environment. By unifying the environments where possible, the arbitrary division is weakened and porting between these environments becomes simpler.
Antti Kantee has been a NetBSD developer for many many moons. He has managed to work on quite a few bits and pieces of a BSD system: userland utilities, the pkgsrc packaging system, networking, virtual memory, device drivers, hardware support and file systems.
See also http://www.netbsd.org/docs/puffs/rump.htm

EuroBSDCon - EuroBSDCon 2008 - Anttii Kantee - Converting kernel file systems to services - PDF

EuroBSDCon 2008 - Anttii Kantee - Converting kernel file systems to services - PDF
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, anttii kantee, pdf
ABSD/UNIX operating system is traditionally split into two pieces: the kernel and userspace. Historically the reasons for this were clear: the UNIX kernel was a simple entity. However, over time the kernel has grown more and more complex. Currently, most of the same functionality is available both in userspace and the kernel, but under different names. Examples include synchronization routines and threading support. For instance, to lock a mutex in the NetBSD kernel, the call is mutex_enter(), while in userspace the routine which does exactly the same thing is known as pthread_mutex_enter(). Taking another classic example, a BSD style OS has malloc()/free() available both in userspace and the kernel, but with different linkage (the kernel malloc interface is currently being widely deprecated, though). This imposes a completely arbitrary division between the kernel and userspace. Most functionality provided by an opearating system should be treated as a service instead of explicitly pinning it down as a userspace daemon or a kernel driver. Currently, due to the arbitrarily difference in programming interface names, functionality must be explicitly ported between the kernel and userspace if it is to run in one or the other environment. By unifying the environments where possible, the arbitrary division is weakened and porting between these environments becomes simpler.
Antti Kantee has been a NetBSD developer for many many moons. He has managed to work on quite a few bits and pieces of a BSD system: userland utilities, the pkgsrc packaging system, networking, virtual memory, device drivers, hardware support and file systems.
See also http://www.netbsd.org/docs/puffs/rump.htm

EuroBSDCon - EuroBSDCon 2008 - Edd Barret - Modern Typesetting on BSD - OGG

EuroBSDCon 2008 - Edd Barret - Modern Typesetting on BSD - OGG
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, typesetting, bsd, edd barrett, ogg
Edd Barrett will speak about using the BSD Platform as a means of typesetting from a practical standpoint at EuroBSDcon 2008. Edd Barrett does not wish to go into the technicalities of each typesetter, but rather state which are good for certain types of document, and which tools (ports and packages), integrate well with the available typesetters.
Edd Barrett os a student from the UK, currently on "placement year" as a systems administrator for Bournemouth University. Open Source *NIX has been his platform of choice for many years and he has been using OpenBSD for about 3 years now, simply because it is small, clean, correct and secure. Just recently he has started developing things I want or need for OpenBSD.

EuroBSDCon - EuroBSDCon 2008 - Edd Barret - Modern Typesetting on BSD - MP3

EuroBSDCon 2008 - Edd Barret - Modern Typesetting on BSD - MP3
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, typesetting, bsd, edd barrett, mp3
Edd Barrett will speak about using the BSD Platform as a means of typesetting from a practical standpoint at EuroBSDcon 2008. Edd Barrett does not wish to go into the technicalities of each typesetter, but rather state which are good for certain types of document, and which tools (ports and packages), integrate well with the available typesetters.
Edd Barrett os a student from the UK, currently on "placement year" as a systems administrator for Bournemouth University. Open Source *NIX has been his platform of choice for many years and he has been using OpenBSD for about 3 years now, simply because it is small, clean, correct and secure. Just recently he has started developing things I want or need for OpenBSD.

EuroBSDCon - EuroBSDCon 2008 - Edd Barret - Modern Typesetting on BSD - PDF

EuroBSDCon 2008 - Edd Barret - Modern Typesetting on BSD - PDF
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, typesetting, bsd, edd barrett, pdf
Edd Barrett will speak about using the BSD Platform as a means of typesetting from a practical standpoint at EuroBSDcon 2008. Edd Barrett does not wish to go into the technicalities of each typesetter, but rather state which are good for certain types of document, and which tools (ports and packages), integrate well with the available typesetters.
Edd Barrett os a student from the UK, currently on "placement year" as a systems administrator for Bournemouth University. Open Source *NIX has been his platform of choice for many years and he has been using OpenBSD for about 3 years now, simply because it is small, clean, correct and secure. Just recently he has started developing things I want or need for OpenBSD.

EuroBSDCon - EuroBSDCon 2008 Keynote - George Neville-Neil - Thinking about thinking code - OGG

EuroBSDCon 2008 Keynote - George Neville-Neil - Thinking about thinking code - OGG
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, george neville-neil, ogg
EuroBSDCon 2008 Keynote - George Neville-Neil - Thinking about thinking code

EuroBSDCon - EuroBSDCon 2008 Keynote - George Neville-Neil - Thinking about thinking code - MP3

EuroBSDCon 2008 Keynote - George Neville-Neil - Thinking about thinking code - MP3
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, george neville-neil, mp3
EuroBSDCon 2008 Keynote - George Neville-Neil - Thinking about thinking code

EuroBSDCon - EuroBSDCon 2008 Keynote - George Neville-Neil - Thinking about thinking code - PDF

EuroBSDCon 2008 Keynote - George Neville-Neil - Thinking about thinking code - PDF
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, george neville-neil, pdf
EuroBSDCon 2008 Keynote - George Neville-Neil - Thinking about thinking code

EuroBSDCon - EuroBSDCon 2008 - Brooks Davis - Isolating cluster jobs for performance and predictability - OGG

EuroBSDCon 2008 - Brooks Davis - Isolating cluster jobs for performance and predictability - OGG
From: EuroBSDCon
Tags: eurobsdcon, eurobsdcon2008, freebsd, cluster, brooks davis, ogg
The Aerospace Corporation operates a federally funded research and development center in support of national-security, civil and commercial space programs. Many of our 2400+ engineers use a variety of computing technologies to support their work. Applications range from small models which are easily handled by desktops to parameter studies involving thousands of cpu hours and traditional, large scale parallel codes such as computational fluid dynamics and molecular modeling applications. Our primary resources used to support these large applications are computing clusters. Our current primary cluster, the Fellowship cluster consists of 352 dual-processor nodes with a total of 14xx cores. Two additional clusters, beginning at 150 dual-processor nodes each are being constructed to augment Fellowship. As in In any multiuser computing environment with limited resources, user competition for resources is a significant burden. Users want everything they need to do their job, right now. Unfortunately, other users may need those resources at the same time. Thus, systems to arbitrate this resource contention are necessary. On Fellowship we have deployed the Sun Grid Engine scheduler which scheduled batch jobs across the nodes. In the next section we discuss the performance problems that can occur when sharing resources in a high performance computing cluster. We then discuss range of possibilities to address these problems. We then explain the solutions we are investigating and describe our experiments with them. We then conclude with a discussion of future work.

TaoSecurity Richard Bejtlich's blog on digital security and the practices of network security monitoring, incident response, and forensics.
Vulnerabilities and Exploits Are Mindless

Jofny's comment on my post Unify Against Threats asked the following:

So, Richard, I'm curious which security people - who are decision makers at a business level - are focusing on vulnerabilities and not threats?

If there are people like that, they really need to be fired.

This comment was on my mind when I read the story FBI: US Business and Government are Targets of Cyber Theft in the latest SANS NewsBites:

Assistant Director in charge of the US FBI's Cyber Division Shawn Henry said that US government and businesses face a "significant threat" of cyber attacks from a number of countries around the world. Henry did not name the countries, but suggested that there are about two dozen that have developed cyber attack capabilities with the intent of using those capabilities against the US. The countries are reportedly interested in stealing data from targets in the US. Henry said businesses and government agencies should focus on shoring up their systems' security instead of on the origins of the attacks.

The editors' comments are the following:

(Pescatore): It really doesn't matter where the attacks come from, businesses have been getting hit by sophisticated, financially motivated, targeted attacks for several years now.
(Ullrich): A very wise remark. It doesn't matter who attacks you. The methods used to attack you and the methods used to defend yourself are the same. We spend too much time worrying about geographic origins. In cyberspace, nation states are a legacy concept.

This is the mindset that worries me, even though the FBI AD agrees. It ignores this fact: Vulnerabilities and exploits are mindless. On the other hand, intelligent adversaries are not. Therefore, if you are doing more than defending yourself against opportunistic, puerile attackers, it pays to know your enemy by learning about security threats (as shown on the book cover to the right).

Once your security program has matured to the point where not any old caveman can compromise you, it pays to put yourself in the adversary's place. Who might want to exploit your organization's data? What data would be targeted? How could you defend it? How could you detect failure? When complaining to the government and/or law enforcement, to whom can you attribute the attack? Knowing the enemy helps prioritize what to defend and how to do it.

About the AD telling businesses not to worry about threat sources: he's just quoting official FBI policy. I wrote about this in More Threat Reduction, Not Just Vulnerability Reduction:

Recently I attended a briefing were a computer crimes agent from the FBI made the following point:

Your job is vulnerability reduction. Our job is threat reduction.

In other words, it is beyond the legal or practical capability of most computer crime victims to investigate, prosecute, and incarcerate threats.

Let's briefly address the "In cyberspace, nation states are a legacy concept." comment. We've been hearing this argument for fifteen years or more. Last time I checked, nation states were alive and well and shaping the way cyberspace works. Just this morning I read the following Economist article Information technology: Clouds and judgment; Computing is about to face a trade-off between sovereignty and efficiency:

The danger is less that the cloud will be a Wild West than that it will be peopled by too many sheriffs scrapping over the rules. Some enforcers are already stirring up trouble, threatening employees of online companies in one jurisdiction to get their employers based in another to fork over incriminating data for instance. Several governments have passed new laws forcing online firms to retain more data. At some point, cloud providers may find themselves compelled to build data centres in every country where they do business.

Finally, independent actors do not operate intelligence services who target our enterprises; nation states do. I've written about Counterintelligence and the Cyber Threat before. Part of the problem may stem from a distinction Ira Winkler made at RSA 2006, which I noted in my post RSA Conference 2006 Wrap-Up, Part 3:

I highly recommend that those of you who give me grief about "threats" and "vulnerabilities" listen to what Mr. Winkler has to say. First, he distinguishes between those who perform security functions and those who perform counter-intelligence. The two are not the same. Security focuses on vulnerabilities, while counter-intelligence focus on threats.

Maybe I spend more time on the counterintelligence problem than others, but I can't see how vulnerability-centric security is a good idea -- except for those who sell "countermeasures."

Unify Against Threats

At my keynote at the 2008 SANS Forensics and IR Summit I emphasized the need for a change in thinking among security practitioners. To often security and IT groups have trouble relating to other stakeholders in an organization because we focus on vulnerabilities. Vulnerabilities are inherently technical, and they mean nothing to others who might also care about security risks, like human resources, physical security, audit staff, legal staff, management, business intelligence, and others. I used the following slide to make my point:

My point is that security people should stop framing our problems in terms of vulnerabilities or exploits when speaking with anyone outside our sphere of influence. Rather, we should talk in terms of threats. This focuses on the who and not the what or how. This requires a different mindset and a different data set.

The business should create a strategy for dealing with threats, not with vulnerabilities or exploits. Notice I said "business" and not "security team." Creation of a business-wide strategy should be done as a collaborative effort involving all stakeholders. By keeping the focus on the threats, each stakeholder can develop detective controls and countermeasures as they see fit -- but with a common adversary in mind. HR can focus on better background checks; physical security on guns and guards; audit staff on compliance; legal staff on policies; BI on suspicious competitor activities, and so on. You know you are making progress when management asks "how are we dealing with state-sponsored competitors" instead of "how are we dealing with the latest Microsoft vulnerability?"

This doesn't mean you should ignore vulnerabilities. Rather, the common strategy across the organization should focus on threats. When it comes to countermeasures in each team, then you can deal with vulnerabilities and the effect of exploits.

Note that focusing on threats requires real all-source security intelligence. You don't necessarily need to contract with a company like iDefense, one of the few that do the sort of research I suggest you need. This isn't a commercial for iDefense and I don't contract with them, but their topical research reporting is an example of helpful (commercial) information. I would not be surprised, however, to find you already have a lot of the background you need already held by the stakeholders in the organization. Unifying against the threats is one way to bring these groups together.

Trying Secunia Vulnerability Scanning

One feature which most Unix systems possess, and that most Windows systems lack, is a native means to manage non-base applications. If I install packages through apt-get or a similar mechanism on Ubuntu, the package manager notifies me when an update is needed and it's easy for me to install them. Windows does not natively offer this function, so third party solutions must be installed.

I had heard about Secunia's vulnerability scanning offerings, but I had never tried them. I decided to try the online version (free for anyone) and then the personal version on a home laptop I hadn't booted recently.

You can see the results for the online scanner below. All that was needed was a JRE install to get these results.

The online scanner noticed I was running an older version of Firefox, and I needed to apply recent Microsoft patches. The fact that it checked Adobe Flash and Acrobat Reader was important, since those are popular exploit vectors.

Next I tried the personal version and got the results below.

This scan added more results, but only after I unchecked "Show only 'Easy-to-Patch' programs" on the Settings tab. I like that Secunia told me that my Intel wireless NIC driver needed patching. If I look for details I see this:

Clicking on the Download Solution icon took me to an Intel Web page, but at that point I needed to know what NIC driver I needed. That's why Secunia says "If you have the technical knowledge to handle more difficult programs, then we strongly recommend that you disable this setting" with respect to the "Show only 'Easy-to-Patch' programs" option.

I noticed Secunia doesn't check to see if WinSCP is patched, so I used the easy "Program missing? Suggest it here!" link to offer that idea to Secunia.

What do you use to keep the various applications installed on Windows up-to-date?

Review of OSSEC HIDS Guide Posted

Amazon.com just posted my five star review of OSSEC HIDS Guide. From the review:

I'm surprised no one has offered serious commentary on the only book dedicated to OSSEC, an incredible open source host-based intrusion detection system. I first tried OSSEC in early 2007 and wrote in my blog: "OSSEC is really amazing in the sense that you can install it and immediately it starts parsing system logs for interesting activity." Stephen Northcutt of SANS quotes this post in his foreword to the book on p xxv. Once you start using OSSEC, especially with the WebUI, you'll become a log addict. OSSEC HIDS Guide (OHG) is your ticket to taking OSSEC to the next level, even though a basic installation will make you stronger and smarter.

I'm not kidding about the log addict part. I find myself obsessively hitting the refresh button on my browser when viewing the OSSEC WebUI, even though it refreshes itself. Sad.

Comment on New Amazon Reviewer Ranking System

I just happened to notice a change to my Amazon.com reviews page. If you look at the image on the left, you'll see two numbers: "New Reviewer Rank: 481" and "Classic Reviewer Rank: 434". I found the following explanation:

You may have noticed that we've recently changed the way top reviewers are ranked. As we've grown our selection at Amazon over the years, more and more customers have come to share their experiences with a wide variety of products. We want our top reviewer rankings to reflect the best of our growing body of customer reviewers, so we've changed the way our rankings work. Here's what's different:

Review helpfulness plays a larger part in determining rank. Writing thousands of reviews that customers don't find helpful won't move a reviewer up in the standings.

The more recently a review is written, the greater its impact on rank. This way, as new customers share their experiences with Amazon's ever-widening selection of products, they'll have a chance to be recognized as top reviewers.

We've changed the way we measure review quality to ensure that every customer's vote counts. Stuffing the ballot box won't affect rank. In fact, such votes won't even be counted.

We're proud of all our passionate customer reviewers and grateful for their investment of time and energy helping other Amazon customers.

On my overall profile page I found a second statistic, shown at left, which says that 90% of my votes are considered "helpful." That's cool! I appreciate any helpful votes I get. It's the main feedback for reviews I write so I am glad anytime I see someone logged into Amazon.com who votes for my reviews.

Apparently you shouldn't vote too often for me, because under the new system you're considered a fan voter and ignored!

Fan voters are people who consistently appreciate the author's reviews. These votes are not reflected in the total vote count to provide our customers with the most unbiased and accurate information possible.

Right now I have 131 "fan voters," so that's another reason my ranking dropped from 434 to 481.

The proof for me, however, regarding the new ranking system would be the effect on someone I know writes a dozen or more "reviews" per day, most of which I consider worthless. 4437 "reviews" (i.e., books read) since October 2002? That's two books per day -- no way! As you can see on the right, this person has fallen from the number 11 system using the Classic Ranking, down to 521. Ha ha.

Looking at the profile statistic, you can see a 75% rating. That's higher than I expected, but it definitely had an effect on the overall ranking. I think what really hurt this guy is his "fan voter" count: 892. I have a feeling Amazon.com believes these fans are fake accounts under the control of the reviewer, so Amazon.com has decided to just ignore them. For someone like Mr. 521 with "892 fans," I could see how that would affect his rank.

There's a hot debate in the Amazon.com forums about this topic now. Some people are really bent out of shape over these changes. Take it easy -- it's just Amazon.com.

Security Event Correlation: Looking Back, Part 3

I'm back with another look at security event correlation. This time it's a June 2008 review of SIEM technology by Greg Shipley titled SIEM tools come up short. The majority of the article talk about non-correlation issues, but I found this section relevant to my ongoing analysis:

"Correlation" has long been the buzzword used around event reduction, and all of the products we tested contained a correlation engine of some sort. The engines vary in complexity, but they all allow for basic comparisons: if the engine sees A and also sees B or C, then it will go do X. Otherwise, file the event away in storage and move onto the next. We'd love to see someone attack the event reduction challenge with something creative like Bayesian filtering, but for now correlation-based event reduction appears to be the de facto standard...

Ok, that sounds like "correlation" to me. Let's see an example.

For example, one of the use cases we tackled was the monitoring of login attempts from foreign countries. We wanted to keep a particularly close watch on successful logins from countries in which we don't normally have employees in. To do this, there are a few things that had to be in place: We had to have authentication logs from the majority of systems that would receive external logins (IPsec and SSL VPN concentrators, Web sites, any externally exposed *NIX systems); we had to have the ability to extract usernames and IP addresses from these logs; and, we had to have the ability to map an IP address to a country code. Not rocket science to do without a SIEM, but not entirely trivial, either.

That doesn't quite seem to match. This use case says "if any system to which a user could log in registers a login from a foreign country, generate an alert." This is simply putting login records from a variety of sources in one place so that a generic policy ("watch for foreign logins") can be applied, after which an alert is generated. Do you really need a SIEM for that?

Here's a thought experiment for those who think "prevention" is the answer: why aren't foreign logins automatically blocked? "If you can detect it, why can't you prevent it?" The key word in the example is "usually," meaning "we don't know our enterprise or business well enough to define normality, so we can't identify exceptions which indicate incidents. We can't block the activity, but we'd like to know when it happens, i.e., drop the P, put back the D between I and S.

Back to correlation -- I think a real correlation case would be "if you see a successful login, followed by access to a sensitive file, followed by the exfiltration of that file, fire an alert." Hold on, this is where it gets interesting.

There are three contact points here, assuming the foreign login is by an unauthorized party:

Access via stolen credentials: If it's not the user, the credentials were stolen. However, you didn't stop it, because you don't know the credentials are stolen.

Access to a sensitive file: How did you know it was sensitive? Because the intruder is impersonating a user whose status is assumed to permit access, you don't stop it.

Exfiltration of the file: If this account (under legitimate or illegitimate control) shouldn't be removing this file, why is that allowed to happen? The answer is that you don't know beforehand that it's sensitive, and there is no real control at the file level for preventing its removal.

If you knew enough to identify that this activity is bad, at each contact point you should have stopped it. If you're not stopping it, why? It's probably because you don't know any of these contact points are bad. You don't know the credentials are stolen (yet). The impersonated user probably has legitimate access to a file, so you're not going to block that. Legitimate users also probably can move files via authorized channels (such as would be the case via this "login"), so you don't block that.

In other words, if you're not smart enough to handle this, why would correlation via a SIEM be any smarter?

Cue my Hawke vs the Machine post from almost two years ago:

Archangel: They haven't built a machine yet that could replace a good pilot, Hawke.

Hawke: Let's hope so.

Back to Greg's case. It turns out that generic policy application against disparate devices appears to be the "win" here:

Q1 Labs' QRadar had all of the functionality to do this, and we were able to build a multi-staged rule that essentially said, "If you see a successful login event from any devices whose IP address does not originate from one of the following countries, generate an alert". Because of the normalization and categorization that occurs as events flow into the SIEM, it's possible to specify "successful login event" without getting into the nuances of Linux, Windows, IIS, VPN concentrators. This is the convenience that SIEM can offer. (emphasis added)

Is that worth the money?

Finally, I'm a little more suspicious about the following:

Most modern SIEM products also ship with at least a minimum set of bundled correlated rules, too. For example, when we brought a new Snort IDS box online, there was a deluge of alerts, the majority of them considered false-positives. Because of useful reduction logic, there was only one alert out of 6,000 that actually appeared on our console across all of the products tested. That alert was based on a predefined correlation rule that looked for a combination of "attack" activity and a successful set of logins within a set period of time.

It's more likely the SIEMs considered the "deluge" events to be of lower priority, so they never appeared on screen. Think of the myriad of ICMP, UPnP, and other alerts generated by any stock IDS ruleset being "tuned down" as "informational" so they don't make the front of the dashboard. If I knew this SIEM test correlated vulnerability data with IDS attack indications, the useful reduction logic would make more sense. I can't be sure but you can guess which way I'm leaning.

Security Event Correlation: Looking Back, Part 2

In my last post Security Event Correlation: Looking Back, Part 1 I discussed a story from November 2000 about security event correlation. I'd like to now look at Intrusion Detection FAQ: What is the Role of Security Event Correlation in Intrusion Detection? by Steven Drew, hosted by SANS. A look at the Internet Archive shows this article present as of August 2003, so we'll use that to date it.

[A]s pointed out by Steven Northcutt of SANS, deploying and analyzing a single device in an effort to maintain situational awareness with respect to the state of security within an organization is the "computerized version of tunnel vision" . Security events must be analyzed from as many sources as possible in order to assess threat and formulate appropriate response... This paper will demonstrate to intrusion analysts why correlative analysis must occur in order to understand the complete scope of a security incident.

Ok, let's go. I'll summarize the article rather than post clips here because I can make the point in a few sentences. The article shows how an adversary scans for CGI scripts phf, formmail, and survey.cgi, and how four data sources -- a router, a firewall, an IDS, and a Web server -- see the reconnaissance events. First the author shows the view of the "incident" from the perspective of each of the four data sources. Next he describes how looking at all of the data together results in a better overall understanding of the incident. He provides this "Ven" (sic) diagram and the following text:

The diagram shows that removing the analysis of even just one of the device's log data, our understanding of the incident can drop dramatically. For example, if we remove the analysis of the web server error_log, we would not have known that the script access attempt failed. If we had not analyzed the router, we would not have known the probing host scanned the entire class C of addresses for web servers. If we had not analyzed the www access_log, we would not have known that the probing host was likely using Lynx as the web browser to check for the scripts. If we had not analyzed the network IDS logs, we may not have known that the activity was related to well known exploit attempts. (emphasis added)

Do you see the same problems with this that I do? This is my overall reaction: aside from the access failed ("404") messages from the Web server error logs, who cares? Port scans: who cares. Using Lynx: who cares. Snort saw it: who cares. All that matters is the activity failed. In fact, since it was only reconnaissance, who could care at all? People who spend time on this sort of activity should be doing something more productive.

It appears that getting to the heart of the matter, i.e., looking at the target application logs (i.e., Apache) yields the information one really needs for this sort of incident. In other words, correlation isn't the governing principle; access to the right sort of evidence dominates. If the analyst in this case didn't have access to the Web server logs, we'd be much more concerned (or maybe not).

Furthermore, notice there is zero mention of whether the target of this incident matters, or what compensating controls might exist, or a dozen other lacking contextual issues. As I mentioned in my last post, these sorts of problems are the true obstacle to security event correlation.

Security Event Correlation: Looking Back, Part 1

I've been thinking about the term "correlation" recently. I decided to take a look back to determine just what this term was supposed to mean when it first appeared on the security scene.

I found Thinking about Security Monitoring and Event Correlation by Billy Smith of LURHQ, written in November 2000. He wrote:

Security device logging can be extensive and difficult to interpret... Along with lack of time and vendor independent tools, false positives are another reason why enterprise security monitoring in not easy...

The next advance in enterprise security monitoring will be to capture the knowledge and analytical capabilities of human security experts for the development of an intelligent system that performs event correlation from the logs and alerts of multiple security technologies.

Ok, so far so good.

For example Company A has a screening router outside of their firewall that protects their corporate network and a security event monitoring system with reliable artificial intelligence. The monitoring system would start detecting logs where the access control lists or packet screens on the screening router were denying communications from a certain IP address. Because the intelligent system is intelligent it begins detailed monitoring of the firewall logs and logs of any publicly accessible servers for any communications destined for or originating from the IP address. If the intelligent system determined that there was malicious communication, the system would have the capability to modify the router access control lists or the firewall configuration to deny any communication destined for or originating from the IP address. (emphasis added)

Ok, you lost me. The enterprise is already "denying communications," implying an administrator already knew to configure defensive measures. Because denied traffic is logged, the correlation system looks for traffic somewhere else in the enterprise, and then modifies access control lists it finds that currently allow said traffic? What is this, a mistake detection mechanism?

Let's look at the next example.

What if the intelligent system began detecting multiple failed logins to an NT server by the president of the company? It would be useful for this technology to determine where these failed logins were originating from and "look for" suspicious activity from this IP and/or user for some designated timeframe. If this system determined that the failed logins originated from a user other than the president of the company, it could begin to closely monitor for a period of time all actions by this user and the company president (the user could be impersonating the president). This monitoring could include card readers, PBXs or voice mail access, security alarms from secured doors and gates and access to other servers. If the monitoring system were not correlating events the user impersonating the company president would probably bypass all access control and security monitoring devices because the user's actions appear as "normal" activity. (emphasis added)

This example is a little better, until the end. Failed logins happen every day, but an excessive number of failed logins can indicate an attack. I'm not exactly sure how the inclusion of other log sources is supposed to make a difference here, however. Furthermore, if the "user's actions appear as 'normal' activity," just how is it supposed to be identified as suspicious?

The correlation argument fails to pieces in the penultimate paragraph of this article:

Today there is one major obstacle to intelligent event correlation enterprise-wide. There is no standard for logging security related information or alerts. Every vendor uses their own logging or alerting methodology on security related events. In many cases there are inconsistent formats among products from the same vendor. These issues make enterprise security monitoring difficult and event correlation almost impossible with artificial intelligence. The industry will need to impose a standard method or protocol for logging and alerting security related events before an intelligent system can be developed and successfully implemented enterprise-wide. (emphasis added)

Wow, that is absolutely off-target. Lack of a logging standard is problematic, but the absolute worst problems involve having no idea 1) what assets exist; 2) what assets matter; 3) what activity is normal; 4) who owns what assets; 5) what to do about an incident.

So far the there's nothing compelling about "correlation" here. The article hints that one might learn more about failed login attempts if an analyst could check physical access logs to verify the in-office presence of a person, but couldn't the source IP for the failed logins roughly indicate the same? Even if the company president is in the building, it doesn't mean he/she is at his/her computer.

In the next part of this article we'll move forward in time to look at more correlation history.

Thoughts on Security Engineering, 2nd Ed

One of my favorite all-time security books is Security Engineering by Prof Ross Anderson, which I read and reviewed in 2002. Earlier this year Wiley published Security Engineering, 2nd Ed. The first edition was a 612 page soft cover; the second edition is a massive 1040 page hard cover.

To learn more about the new edition, I recommend visiting Ross' book page. This title should be included in every academic security program. Cambridge University uses each of the three parts of the tome in three separate computer security classes, as noted on the book page. If you're in a formal security program and you've never heard of this book, ask your professors why it's not included. If your professors have never heard of this book, ask yourself why you are studying in that program.

Three years ago I posted What the CISSP Should Be, offering NIST SP 800-27, Rev. A, Engineering Principles for Information Technology Security (A Baseline for Achieving Security) as the basis for the CISSP. The CISSP should use Prof Anderson's book as an historical application and practical expansion of the core ideas of 800-27.

Security Engineering would make a great text for a year-long, meet every-other-week program, where participants read one chapter each week. (The book is 27 chapters, but the last is only a three page conclusion that could be wrapped into week 26.) Those taking the time to read, discuss, and understand the material in this book would know far more about security than anyone wasting time in a series of CISSP CBK cram sessions.

If you read the first edition, I still recommend buying and reading the second edition. As you'll see on the book page, Wiley allowed Ross to post 6 chapters in .pdf format, along with the table of contents, preface, acknowledgements, bibliography, and index. The entire first edition is also still online if you want to start there.

Security Book Publishing Woes

Practical UNIX and Internet Security, 2nd Ed (pub Apr 96) by Simson Garfinkel and Gene Spafford was the first computer security book I ever read. I bought it in late 1997 after hearing about it in a "UNIX and Solaris Fundamentals" class I took while on temporary assignment to JAC Molesworth. Although I never formally listed it in my Amazon.com reviews, I did list it first in my Favorite 10 Books of the Last 10 years in 2007.

Since reading that book, I've read and reviewed over 270 technical books, mostly security but some networking and programming titles. In 2008 I've only read 15 so far, but I'm getting serious again with plans to read 16 more by the end of the year. (We'll see how well I do. I only read 25 last year, but my yearly low was 17 in 2000. My yearly high was 52 in 2006, when I flew all over the world for TaoSecurity LLC and read on each flight.)

Security books are on my mind because I had a conversation with a book publisher this week. She told me the industry has been in serious decline for a while, meaning people aren't buying books. Apparently this decrease in sales is industry-wide, punishing both good books (those recognized as being noteworthy) and bad (which you would expect to sell poorly anyway).

Some people blame the book Hacking Exposed (6th edition due in Feb 09) for creating unrealistic expectations in the minds of book publishers. McGraw-Hill claims HE is the best-selling security book of all time. I've heard numbers between 500,000 and 1,000,000 copies across the editions (not counting the other titles in the HE line.) That blows away any other security book.

I've got about 50 titles on my reading list for the remainder of 2008 and the first half of 2009. About 1/3 are programming books, 1/4 are related to vulnerability discovery, 1/5 could be called "hacking" books, and the remainder deal with general security topics. I only plan to read what I would call "good books," so from my perspective there's plenty of good new-ish books around. However, thus far this year I've only read two five-star books, Applied Security Visualization and Virtual Honeypots.

What do you think of the security book publishing space? Are there too many books? Are there too few good books? Are books too expensive? What books would you like to see published?

Daemonic Dispatches Musings from Colin Percival
FreeBSD on EC2

FreeBSD doesn't run on Amazon's Elastic Compute Cloud service right now. I want to change this. I need to talk to other wannabe FreeBSD-on-EC2 users. If this describes you, please contact me.

Hacking the Amazon S3 SLA

The Simple Storage Service (S3) provided by Amazon comes with a Service Level Agreement: If the Monthly Uptime Percentage is between 99% and 99.9%, you get a 10% refund; if the Monthly Uptime Percentage is below 99%, you get a 25% refund. The Monthly Uptime Percentage is computed in a fairly straightforward manner: Divide the month into 5-minute intervals and compute the Error Rate (failed requests divided by total requests, treating 0/0 as 0) for each interval; compute the average Error Rate over all the 5-minute intervals in the month; and subtract this value from 100%.

If the probability of a request failing during the n th 5-minute interval is p(n), and the number of requests issued during the n th interval is determined solely by p(n), the expected value of the Monthly Uptime Percentage is 100% minus the average value of p(n) over all the intervals; put another way, you can't cheat by waiting for a high p(n) and then quickly running up the failure count by issuing lots and lots of requests. However, this uncheatability applies only if the number of requests issued is independent of the success or failure of individual requests; if we can see whether one request succeeded before issuing the next one, we can cheat the SLA -- quite extravagently, in fact.

Canadian election results trivia.

After the last Canadian federal election, I posted here with some election results trivia; since Elections Canada has again helpfully provided the (preliminary) results in CSV format, I've now done the same for the 40th Canadian federal election:

Canadian Federal election polling

In December 2005, during the last Canadian federal election, I wrote about the discrepancies between polls and how they could be partly explained by different notions of what the population of Quebec was. In the 2008 election, there are even larger polling discrepancies -- on October 6th, Nanos reported 6% support for the Green party while Harris-Decima reported 13% support; and once again, certain pollsters consistently disagree with their colleagues.

UBC Election Stock Market

On September 8th, I invested $25 into the Election Stock Market being run by the University of British Columbia for the 2008 Canadian Federal election. When the market closed, at 10PM PDT on Monday evening, I had increased that to $88.70 (I decided to end up with a cash-only position).

Upcoming posts

I've had a lousy summer. First I got bronchitis; then as I was recovering from that, my wrists started hurting. Since I know several people who ended up effectively unable to work due to wrist pain, I took this as a sign that I should cut down on the amount of typing I did -- and posting here was one of the first things I cut. An ergonomic keyboard, two wrist braces, and many weeks later, I think my wrists are improving (but they might get worse again -- I thought they were improving last week, and the week before last, too), so I wanted to give a quick preview of some of the things I expect to be writing about in the next few weeks... wrists permitting, of course.

High performance single-threaded access to SimpleDB

Last month, Amazon published a code sample which demonstrated the use of SimpleDB as a repository for S3 object metadata. This code sample would probably have gone almost completely unnoticed if it were not for one detail: Using a pool of 34 threads in Java, the code sample sustained 300 SimpleDB operations per second when running on a small EC2 instance. Only 300? We can do better than that...

Dissecting SimpleDB BoxUsage

Billing for usage of a database server which is shared between many customers is hard. You can't just measure the size of databases, since a heavily used 1 GB database is far more resource-intensive than a lightly used 100 GB database; you can't just count queries, since some queries require far more CPU time -- or disk accesses -- than others; and you can't even time how long queries take, since modern databases can handle several queries in parallel, overlapping one query's CPU time with another query's disk time. When Amazon launched their SimpleDB service, it looked like they had found a solution in BoxUsage: As the website states,

Amazon SimpleDB measures the machine utilization of each request and charges based on the amount of machine capacity used to complete the particular request [...]

and reports back a BoxUsage value in every response returned by SimpleDB. Sadly, this "measurement" is fictitious: With the possible exception of Query requests, BoxUsage values returned by SimpleDB are entirely synthetic.

Amazon S3 data corruption

Amazon S3 recently experienced data corruption due to a failing load balancer. While the tarsnap server currently uses S3 for back-end storage, tarsnap was not affected by this.

To everything a season

On April 11, 2003, FreeBSD Update was committed to the FreeBSD ports tree. This binary security update system, which started out by supporting FreeBSD 4.7-RELEASE and added support for newer releases as they came out, was the topic of a paper I presented at BSDCan'03 and is probably the leading factor behind my becoming a FreeBSD committer and ultimately the FreeBSD Security Officer. For five years, I distributed updates via update.daemonology.net; but that site has now outlived its purpose, and I have now taken it offline.

Historico FUG-BR Historico Lista FreeBSD, FUG-BR
[FUG-BR] [OFF TOPIC] Cliente SSH em Abas

[FUG-BR] [OFF TOPIC] Cliente SSH em Abas

Re: [FUG-BR] [OFF TOPIC] Cliente SSH em Abas

Re: [FUG-BR] [OFF TOPIC] Cliente SSH em Abas

[FUG-BR] RES: [OFF TOPIC] Cliente SSH em Abas

[FUG-BR] RES: [OFF TOPIC] Cliente SSH em Abas

Re: [FUG-BR] RES: [OFF TOPIC] Cliente SSH em Abas

Re: [FUG-BR] RES: [OFF TOPIC] Cliente SSH em Abas

Web site Grupo Brasileiro de Usuarios FreeBSD Noticias do Web site FUG-BR
FreeBSD 7.1-BETA2 j disponvel para testes

Como próximo passo para o ciclo da release do FreeBSD 7.1, o FreeBSD 7.1-BETA2 está agora disponível para testes. Uma nota foi publicada junto desta release para os usuários que contém drivers Intel NICs que tiveram 3 PCI IDs modificados de nome para igb(4),que pode ser visto na entrada 20080811 do src/UPDATING.Baixe já a ISO desta versão em:ftp://ftp.freebsd.org/pub/FreeBSD/releases/$/ISO-IMAGES/7.1/ (ftp://ftp.freebsd.org/pub/FreeBSD/releases/$%7Barch%7D/ISO-IMAGES/7.1/)Veja o anúncio oficial em:http://lists.freebsd.org/pipermail/freebsd-stable/2008-October/046037.html (http://lists.freebsd.org/pipermail/freebsd-stable/2008-October/046037.html)

Instalao Cacti + Plugins no FreeBSD 7.0

Neste artigo, Marcio Seiji tenta de forma objetiva nos mostrar a facilidade da implementacão do Cacti com alguns plugins adicionais, utilizando-se do ports do FreeBSD. Ao mesmo tempo que ele detalha todo o processo, ele reune vários pontos que poderiam ser dificuldades em uma implementacão padrão.

PCBSD 7.0.1 disponvel para download

Nesta terça-feira foi lançado o PCBSD 7.0.1 (fibonacci), e como grande novidade é sua versão também disponível para arquitetura 64-bits, abaixo mostro as principais novidades:Versão para amd64;Escrita em partições NTFS;Atualização para o KDE 4.1.2;Plugin Flash 9 (linux) como padrão;Melhoras no suporte WIFI;Bugs consertados no System Updater. Faça o download (http://www.pcbsd.org/content/view/21/11/), e não deixe de ver o Changelog (http://www.pcbsd.org/content/view/79/30/) .

Configurando o Nagios

Nagios (R) é um sistema de monitoramento de rede e de aplicação. Ele vigia hosts e serviços que você especificar, alertando você quando as coisas correm mal. Diego Queiroz nos contribui com um ótimo tutorial para configurar este serviço muito utilizado pelos administradores de redes.

Redundncia de Link com FreeBSD + carp + ifstated

Tiago Ribeiro nos trás um artigo de como preparar uma redundância de links, onde visa obter uma alta disponibilidade do link, em caso de algum problema com um ou mais links existentes. Utilizando uma das combinações mais conhecidas para esta ação, ele nos mostra de forma prática e rápida como fazer.

Roteiro de instalao do Microsiga Protheus 8 no FreeBSD e PostgreSQL 8.3

O roteiro a seguir tem por objetivo instalar o Microsiga Protheus8 + TopConnect versão Linux, em um servidor FreeBSD 7.0 com um banco de dados PostgreSQL 8.3.

Win4BSD agora gratuito para uso no-comercial

A Virtual Bridges tem o prazer de anunciar, imediatamente, que Win4BSD para Desktops serão oferecidos gratuitamente para uso não-comercial. FreeBSD (http://www.freebsd.org/) e PC-BSD (http://www.pcbsd.org/).Win4BSD foi feito pela Virtual Bridges para determinar o nível de aceitação pela comunidade FreeBSD e PC-BSD para software comercial de alto-grau. Após dois anos, nós temos concluídos que aplicações de desktop orientadas a BSD são melhores aceitas pela comunidade não-comercial quando oferecidas gratuitamente.No futuro, suporte para uso não-comercial do produto será via forums da comundiade nas quais estão disponívels em: Win4Lin (http://win4lin.net/) para Desktops, Win4Solaris (http://win4solaris.com/) para Desktops, e Win4VDI (http://win4vdi.com/) para Linux e Solaris.Fonte Original: http://vbridges.com/wp/?p=16 (http://vbridges.com/wp/?p=16)

Faa as teclas Home, End e Delete funcionarem no seu FreeBSD

Talvez alguns se perguntam porque algumas teclas que usamos com certa frequência enquanto utilizando nossos sistemas UNIX-Like de preferência não funcionam, como é o caso de Home, Delete e End. Este tutorial irá explicar-lhe como habilitar as teclas Home, End e Delete no terminal ssh do FreeBSD. Esta configuração não se aplica para distribuições Linux e de todos os outros que eu vi estas teclas funcionando por padrão.

7 Razes porque FreeBSD melhor do que o Linux

Matt Hartley, quem está usando Linux o tempo inteiro nos deu 7 razões porque sistemas operacionais BSD são preferidos do que Linux (mas ele também admite que BSD tem suas falhas).BSD é muito simplesCrie seu próprio OSPerformanceEstabilidadeGerenciamento de SoftwaresSegurançaApto para propriedade intelectual (PI)Siga para este link (http://www.intranetjournal.com/articles/200809/ij_09_22_08a.html) para razões mais completas. E um tipo de artigo relacionado pensava que iria ligar para: Porque você deve usar um estilo de licença BSD para o seu projeto Open Source ? Este documento faz um caso de utilização de um estilo licença BSD para software e dados; especificamente ela recomenda usar um estilo de licença BSD, em substituição do GPL. Ela também pode ser lido como um BSD versus GPL Open Source License. Por favor, não iniciar uma guerra em chamas entre BSD e GPL; Conheço todos os prós e contras, eu estou apenas a fornecer links para artigos, por isso, se você não concordar com a posição defendida, por favor, deixem comentários que citei no link. Fonte Original: http://www.freebsdnews.net/2008/09/23/7-reasons-why-bsd-is-better-than-linux/ (http://www.freebsdnews.net/2008/09/23/7-reasons-why-bsd-is-better-than-linux/)

Chamada de testes para KDE 4.1.2

A equipe do KDE lançou KDE-4.1.2 dois dias depois do que haviam planejado e Martin Wilker (Membro do FreeBSD KDE Team) já anunciou que há o conjunto de patches (patchset) para a nova versão. O FreeBSD se encontra em estado de slush no ports, e por isto não pode atualizar o KDE até que isto termine. Se você não pode esperar para obter KDE 4.1.2, você pode baixar-lo agora do repositório area51. O changelog completo do KDE pode ser visto aqui (http://www.kde.org/announcements/changelogs/changelog4_1_1to4_1_2.php). Nós removemos o suporte a FAM completamente. Isto trará mais performance e o programa iniciará rapidamente. Obrigado à Kris Moore (PC-BSD (http://pcbsd.org/)) que testou este conjunto de patches, nós também removemos os modos de debug do KDE. E Hannes Hauswedell reportou um problema. Ele presenciou alto uso de CPU pelo KDE4 e lentidão com o Konqueror como navegador de arquivos (FileBrowser), ele recomenda você a diminuir radicalmente a lentidão do DirWatch do KDE4, adicionando o seguinte para seu $HOME/.kde4/share/config/kdedrc: [DirWatch] PollInterval=60000Isto é explicado aqui (em inglês) (https://bugs.kde.org/show_bug.cgi?id=155904). Então, se você quer obter o port, por favor leia as seguintes instruções: https://kf.athame.co.uk/access.php (https://kf.athame.co.uk/access.php)Nota: você também precisa atualizar Qt4 primeiramente para 4.4.2. Fonte Original: http://miwi.bsdcrew.de/2008/10/03/call-for-testing-kde-412/

Web site Grupo Brasileiro de Usuarios FreeBSD Noticias do Web site FUG-BR
FreeBSD 7.1-BETA2 j disponvel para testes

Como próximo passo para o ciclo da release do FreeBSD 7.1, o FreeBSD 7.1-BETA2 está agora disponível para testes. Uma nota foi publicada junto desta release para os usuários que contém drivers Intel NICs que tiveram 3 PCI IDs modificados de nome para igb(4),que pode ser visto na entrada 20080811 do src/UPDATING.Baixe já a ISO desta versão em:ftp://ftp.freebsd.org/pub/FreeBSD/releases/$/ISO-IMAGES/7.1/ (ftp://ftp.freebsd.org/pub/FreeBSD/releases/$%7Barch%7D/ISO-IMAGES/7.1/)Veja o anúncio oficial em:http://lists.freebsd.org/pipermail/freebsd-stable/2008-October/046037.html (http://lists.freebsd.org/pipermail/freebsd-stable/2008-October/046037.html)

Instalao Cacti + Plugins no FreeBSD 7.0

Neste artigo, Marcio Seiji tenta de forma objetiva nos mostrar a facilidade da implementacão do Cacti com alguns plugins adicionais, utilizando-se do ports do FreeBSD. Ao mesmo tempo que ele detalha todo o processo, ele reune vários pontos que poderiam ser dificuldades em uma implementacão padrão.

PCBSD 7.0.1 disponvel para download

Nesta terça-feira foi lançado o PCBSD 7.0.1 (fibonacci), e como grande novidade é sua versão também disponível para arquitetura 64-bits, abaixo mostro as principais novidades:Versão para amd64;Escrita em partições NTFS;Atualização para o KDE 4.1.2;Plugin Flash 9 (linux) como padrão;Melhoras no suporte WIFI;Bugs consertados no System Updater. Faça o download (http://www.pcbsd.org/content/view/21/11/), e não deixe de ver o Changelog (http://www.pcbsd.org/content/view/79/30/) .

Configurando o Nagios

Nagios (R) é um sistema de monitoramento de rede e de aplicação. Ele vigia hosts e serviços que você especificar, alertando você quando as coisas correm mal. Diego Queiroz nos contribui com um ótimo tutorial para configurar este serviço muito utilizado pelos administradores de redes.

Redundncia de Link com FreeBSD + carp + ifstated

Tiago Ribeiro nos trás um artigo de como preparar uma redundância de links, onde visa obter uma alta disponibilidade do link, em caso de algum problema com um ou mais links existentes. Utilizando uma das combinações mais conhecidas para esta ação, ele nos mostra de forma prática e rápida como fazer.

Roteiro de instalao do Microsiga Protheus 8 no FreeBSD e PostgreSQL 8.3

O roteiro a seguir tem por objetivo instalar o Microsiga Protheus8 + TopConnect versão Linux, em um servidor FreeBSD 7.0 com um banco de dados PostgreSQL 8.3.

Win4BSD agora gratuito para uso no-comercial

A Virtual Bridges tem o prazer de anunciar, imediatamente, que Win4BSD para Desktops serão oferecidos gratuitamente para uso não-comercial. FreeBSD (http://www.freebsd.org/) e PC-BSD (http://www.pcbsd.org/).Win4BSD foi feito pela Virtual Bridges para determinar o nível de aceitação pela comunidade FreeBSD e PC-BSD para software comercial de alto-grau. Após dois anos, nós temos concluídos que aplicações de desktop orientadas a BSD são melhores aceitas pela comunidade não-comercial quando oferecidas gratuitamente.No futuro, suporte para uso não-comercial do produto será via forums da comundiade nas quais estão disponívels em: Win4Lin (http://win4lin.net/) para Desktops, Win4Solaris (http://win4solaris.com/) para Desktops, e Win4VDI (http://win4vdi.com/) para Linux e Solaris.Fonte Original: http://vbridges.com/wp/?p=16 (http://vbridges.com/wp/?p=16)

Faa as teclas Home, End e Delete funcionarem no seu FreeBSD

Talvez alguns se perguntam porque algumas teclas que usamos com certa frequência enquanto utilizando nossos sistemas UNIX-Like de preferência não funcionam, como é o caso de Home, Delete e End. Este tutorial irá explicar-lhe como habilitar as teclas Home, End e Delete no terminal ssh do FreeBSD. Esta configuração não se aplica para distribuições Linux e de todos os outros que eu vi estas teclas funcionando por padrão.

7 Razes porque FreeBSD melhor do que o Linux

Matt Hartley, quem está usando Linux o tempo inteiro nos deu 7 razões porque sistemas operacionais BSD são preferidos do que Linux (mas ele também admite que BSD tem suas falhas).BSD é muito simplesCrie seu próprio OSPerformanceEstabilidadeGerenciamento de SoftwaresSegurançaApto para propriedade intelectual (PI)Siga para este link (http://www.intranetjournal.com/articles/200809/ij_09_22_08a.html) para razões mais completas. E um tipo de artigo relacionado pensava que iria ligar para: Porque você deve usar um estilo de licença BSD para o seu projeto Open Source ? Este documento faz um caso de utilização de um estilo licença BSD para software e dados; especificamente ela recomenda usar um estilo de licença BSD, em substituição do GPL. Ela também pode ser lido como um BSD versus GPL Open Source License. Por favor, não iniciar uma guerra em chamas entre BSD e GPL; Conheço todos os prós e contras, eu estou apenas a fornecer links para artigos, por isso, se você não concordar com a posição defendida, por favor, deixem comentários que citei no link. Fonte Original: http://www.freebsdnews.net/2008/09/23/7-reasons-why-bsd-is-better-than-linux/ (http://www.freebsdnews.net/2008/09/23/7-reasons-why-bsd-is-better-than-linux/)

Chamada de testes para KDE 4.1.2

A equipe do KDE lançou KDE-4.1.2 dois dias depois do que haviam planejado e Martin Wilker (Membro do FreeBSD KDE Team) já anunciou que há o conjunto de patches (patchset) para a nova versão. O FreeBSD se encontra em estado de slush no ports, e por isto não pode atualizar o KDE até que isto termine. Se você não pode esperar para obter KDE 4.1.2, você pode baixar-lo agora do repositório area51. O changelog completo do KDE pode ser visto aqui (http://www.kde.org/announcements/changelogs/changelog4_1_1to4_1_2.php). Nós removemos o suporte a FAM completamente. Isto trará mais performance e o programa iniciará rapidamente. Obrigado à Kris Moore (PC-BSD (http://pcbsd.org/)) que testou este conjunto de patches, nós também removemos os modos de debug do KDE. E Hannes Hauswedell reportou um problema. Ele presenciou alto uso de CPU pelo KDE4 e lentidão com o Konqueror como navegador de arquivos (FileBrowser), ele recomenda você a diminuir radicalmente a lentidão do DirWatch do KDE4, adicionando o seguinte para seu $HOME/.kde4/share/config/kdedrc: [DirWatch] PollInterval=60000Isto é explicado aqui (em inglês) (https://bugs.kde.org/show_bug.cgi?id=155904). Então, se você quer obter o port, por favor leia as seguintes instruções: https://kf.athame.co.uk/access.php (https://kf.athame.co.uk/access.php)Nota: você também precisa atualizar Qt4 primeiramente para 4.4.2. Fonte Original: http://miwi.bsdcrew.de/2008/10/03/call-for-testing-kde-412/

Web site Grupo Brasileiro de Usuarios FreeBSD Noticias do Web site FUG-BR
FreeBSD 7.1-BETA2 j disponvel para testes

Como próximo passo para o ciclo da release do FreeBSD 7.1, o FreeBSD 7.1-BETA2 está agora disponível para testes. Uma nota foi publicada junto desta release para os usuários que contém drivers Intel NICs que tiveram 3 PCI IDs modificados de nome para igb(4),que pode ser visto na entrada 20080811 do src/UPDATING.Baixe já a ISO desta versão em:ftp://ftp.freebsd.org/pub/FreeBSD/releases/$/ISO-IMAGES/7.1/ (ftp://ftp.freebsd.org/pub/FreeBSD/releases/$%7Barch%7D/ISO-IMAGES/7.1/)Veja o anúncio oficial em:http://lists.freebsd.org/pipermail/freebsd-stable/2008-October/046037.html (http://lists.freebsd.org/pipermail/freebsd-stable/2008-October/046037.html)

Instalao Cacti + Plugins no FreeBSD 7.0

Neste artigo, Marcio Seiji tenta de forma objetiva nos mostrar a facilidade da implementacão do Cacti com alguns plugins adicionais, utilizando-se do ports do FreeBSD. Ao mesmo tempo que ele detalha todo o processo, ele reune vários pontos que poderiam ser dificuldades em uma implementacão padrão.

PCBSD 7.0.1 disponvel para download

Nesta terça-feira foi lançado o PCBSD 7.0.1 (fibonacci), e como grande novidade é sua versão também disponível para arquitetura 64-bits, abaixo mostro as principais novidades:Versão para amd64;Escrita em partições NTFS;Atualização para o KDE 4.1.2;Plugin Flash 9 (linux) como padrão;Melhoras no suporte WIFI;Bugs consertados no System Updater. Faça o download (http://www.pcbsd.org/content/view/21/11/), e não deixe de ver o Changelog (http://www.pcbsd.org/content/view/79/30/) .

Configurando o Nagios

Nagios (R) é um sistema de monitoramento de rede e de aplicação. Ele vigia hosts e serviços que você especificar, alertando você quando as coisas correm mal. Diego Queiroz nos contribui com um ótimo tutorial para configurar este serviço muito utilizado pelos administradores de redes.

Redundncia de Link com FreeBSD + carp + ifstated

Tiago Ribeiro nos trás um artigo de como preparar uma redundância de links, onde visa obter uma alta disponibilidade do link, em caso de algum problema com um ou mais links existentes. Utilizando uma das combinações mais conhecidas para esta ação, ele nos mostra de forma prática e rápida como fazer.

Roteiro de instalao do Microsiga Protheus 8 no FreeBSD e PostgreSQL 8.3

O roteiro a seguir tem por objetivo instalar o Microsiga Protheus8 + TopConnect versão Linux, em um servidor FreeBSD 7.0 com um banco de dados PostgreSQL 8.3.

Win4BSD agora gratuito para uso no-comercial

A Virtual Bridges tem o prazer de anunciar, imediatamente, que Win4BSD para Desktops serão oferecidos gratuitamente para uso não-comercial. FreeBSD (http://www.freebsd.org/) e PC-BSD (http://www.pcbsd.org/).Win4BSD foi feito pela Virtual Bridges para determinar o nível de aceitação pela comunidade FreeBSD e PC-BSD para software comercial de alto-grau. Após dois anos, nós temos concluídos que aplicações de desktop orientadas a BSD são melhores aceitas pela comunidade não-comercial quando oferecidas gratuitamente.No futuro, suporte para uso não-comercial do produto será via forums da comundiade nas quais estão disponívels em: Win4Lin (http://win4lin.net/) para Desktops, Win4Solaris (http://win4solaris.com/) para Desktops, e Win4VDI (http://win4vdi.com/) para Linux e Solaris.Fonte Original: http://vbridges.com/wp/?p=16 (http://vbridges.com/wp/?p=16)

Faa as teclas Home, End e Delete funcionarem no seu FreeBSD

Talvez alguns se perguntam porque algumas teclas que usamos com certa frequência enquanto utilizando nossos sistemas UNIX-Like de preferência não funcionam, como é o caso de Home, Delete e End. Este tutorial irá explicar-lhe como habilitar as teclas Home, End e Delete no terminal ssh do FreeBSD. Esta configuração não se aplica para distribuições Linux e de todos os outros que eu vi estas teclas funcionando por padrão.

7 Razes porque FreeBSD melhor do que o Linux

Matt Hartley, quem está usando Linux o tempo inteiro nos deu 7 razões porque sistemas operacionais BSD são preferidos do que Linux (mas ele também admite que BSD tem suas falhas).BSD é muito simplesCrie seu próprio OSPerformanceEstabilidadeGerenciamento de SoftwaresSegurançaApto para propriedade intelectual (PI)Siga para este link (http://www.intranetjournal.com/articles/200809/ij_09_22_08a.html) para razões mais completas. E um tipo de artigo relacionado pensava que iria ligar para: Porque você deve usar um estilo de licença BSD para o seu projeto Open Source ? Este documento faz um caso de utilização de um estilo licença BSD para software e dados; especificamente ela recomenda usar um estilo de licença BSD, em substituição do GPL. Ela também pode ser lido como um BSD versus GPL Open Source License. Por favor, não iniciar uma guerra em chamas entre BSD e GPL; Conheço todos os prós e contras, eu estou apenas a fornecer links para artigos, por isso, se você não concordar com a posição defendida, por favor, deixem comentários que citei no link. Fonte Original: http://www.freebsdnews.net/2008/09/23/7-reasons-why-bsd-is-better-than-linux/ (http://www.freebsdnews.net/2008/09/23/7-reasons-why-bsd-is-better-than-linux/)

Chamada de testes para KDE 4.1.2

A equipe do KDE lançou KDE-4.1.2 dois dias depois do que haviam planejado e Martin Wilker (Membro do FreeBSD KDE Team) já anunciou que há o conjunto de patches (patchset) para a nova versão. O FreeBSD se encontra em estado de slush no ports, e por isto não pode atualizar o KDE até que isto termine. Se você não pode esperar para obter KDE 4.1.2, você pode baixar-lo agora do repositório area51. O changelog completo do KDE pode ser visto aqui (http://www.kde.org/announcements/changelogs/changelog4_1_1to4_1_2.php). Nós removemos o suporte a FAM completamente. Isto trará mais performance e o programa iniciará rapidamente. Obrigado à Kris Moore (PC-BSD (http://pcbsd.org/)) que testou este conjunto de patches, nós também removemos os modos de debug do KDE. E Hannes Hauswedell reportou um problema. Ele presenciou alto uso de CPU pelo KDE4 e lentidão com o Konqueror como navegador de arquivos (FileBrowser), ele recomenda você a diminuir radicalmente a lentidão do DirWatch do KDE4, adicionando o seguinte para seu $HOME/.kde4/share/config/kdedrc: [DirWatch] PollInterval=60000Isto é explicado aqui (em inglês) (https://bugs.kde.org/show_bug.cgi?id=155904). Então, se você quer obter o port, por favor leia as seguintes instruções: https://kf.athame.co.uk/access.php (https://kf.athame.co.uk/access.php)Nota: você também precisa atualizar Qt4 primeiramente para 4.4.2. Fonte Original: http://miwi.bsdcrew.de/2008/10/03/call-for-testing-kde-412/

FreeBSD VuXML Documenting security issues in FreeBSD and the FreeBSD Ports Collection
phpmyadmin -- Cross-Site Scripting Vulnerability

opera -- multiple vulnerabilities

libspf2 -- Buffer overflow

flyspray -- multiple vulnerabilities

openx -- sql injection vulnerability

FreeBSD Security Advisories Security advisories published from the FreeBSD Project
FreeBSD-SA-08:10.nd6

FreeBSD-SA-08:09.icmp6

FreeBSD-SA-08:08.nmount

FreeBSD-SA-08:07.amd64

FreeBSD-SA-08:06.bind

FreeBSD-SA-08:05.openssh

FreeBSD-SA-08:04.ipsec

FreeBSD-SA-08:03.sendfile

FreeBSD-SA-08:02.libc

FreeBSD-SA-08:01.pty

FreshPorts news The place for ports
japanese/kinput2 - 3.1_5

Use 127.0.0.1 for incoming communication socket (internally-used one) instead of INADDR_ANY. This is not a user-visible change of the original functionality.

lang/erlang - r12b4,1

Remove obsolete patch.

japanese/skkserv - 9.6_2

- Add "-a" option to specify the listen address. - Add rcNG startup script. - $skkserv_flags="-a 127.0.0.1" is set by default. - Update WWW: line in pkg-plist. - Take maintainership.

chinese/FreeWnn-server - 1.1.1.a021_5

- Add "listenaddr 127.0.0.1" to {c|t|k}serverc. - Update startup scripts. - Simplify the pkg-install script.

japanese/FreeWnn-lib - 1.1.1.a021_5

- Add "listenaddr 127.0.0.1" to {c|t|k}serverc. - Update startup scripts. - Simplify the pkg-install script.

japanese/FreeWnn-server - 1.1.1.a021_5

- Add "listenaddr 127.0.0.1" to {c|t|k}serverc. - Update startup scripts. - Simplify the pkg-install script.

korean/FreeWnn-server - 1.1.1.a021_5

- Add "listenaddr 127.0.0.1" to {c|t|k}serverc. - Update startup scripts. - Simplify the pkg-install script.

x11/eaglemode - 0.72.0

- Remove forgotten patch

lang/gcc43 - 4.3.3_20081030

Update to the 20081030 snapshot of GCC 4.3.3.

net-im/licq - 1.3.6

- udpate to 1.3.6

net-im/licq-console - 1.3.6

- udpate to 1.3.6

net-im/licq-qt-gui - 1.3.6

- udpate to 1.3.6

graphics/netpbm - 10.26.58

- update to 10.26.58

graphics/wildmagic - 4.p8

- Make fetchable again by upgrading to 4p8; (1) - s/NOPORTDOCS/NOPORTEXAMPLES/; - elease maintainership. Notified by: Karsten Rothemund (1)

Notícias RNP Últimas notícias da Rede Nacional de Ensino e Pesquisa
RNP inicia reformulao do Portal da Capes

ExLibris ser responsvel pela implantao do novo sistema

Semana Nacional de Cincia e Tecnologia realizada at domingo em todo o pas

Evoluo e Diversidade o tema da 5 edio do evento

Concurso do MCT tem prazo de inscrio prorrogado

Data adiada em funo de reajuste na tabela salarial

Hospital Bettina Ferro de Souza inaugura ncleo da Rede Universitria de Telemedicina

rea de desenvolvimento infantil ser uma das principais beneficiadas

RC participa de reunio com clientes do PoP-DF

Alertas do CAIS
Vulnerabilidade Crtica no Microsoft Windows

Microsoft Security Bulletin MS08-067

Resumo dos Boletins de Segurana Microsoft - Outubro 2008

Microsoft Security Bulletin Summary for October 2008

CAIS Resumo - julho a setembro de 2008

Alertas, vulnerabilidades e incidentes de segurana 20081013

Alteraes de configurao necessrias para o Horrio de Vero 2008/2009

Alerta do CAIS 20081003

Mltiplas Vulnerabilidades no Cisco IOS

Secunia Advisory SA31990: Cisco IOS Multiple Vulnerabilities

[www.MyFreeBSD.com.br] [www.MyFreeBSD.com.br]
Freebsd 7 Xen support

FreeBSD 7.0 ter suporte ao XEN3_DOMU.

Aberto treinamento de capacitao tcnica

A Comunidade Tecnocincia em conjunto com o Jornal QTC de tecnologia e radioamadorismo abriu inscries para o grupo de estudo sobre tecnologia.

Postagem de trabalhos acadmicos

A Comunidade Tecnocincia abriu postagem de trabalhos acadmicos para compartilhamento de informaes universitrias. Para publicar seu trabalho de concluso ou demais atividades envie para suporte@tecnociencia.jor.br

Palestra em Porto Alegre:

O Laboratrio de Pesquisa e Desenvolvimento de HP Brasil, em Porto Alegre, promover no dia 22 de junho, sexta-feira, a apresentao da palestra "HP and Free/Open Source Software". Essa palestra versar sobre a adoo de software livre pela empresa e sobre a contribuio da HP para com projetos de cdigo aberto, em mbito mundial.

FreeBSD 6.2 RELEASE

O grupo de Engenharia de Release orgulhosamente apresenta o FreeBSD 6.2-RELEASE. Nesta verso cotinua o desenvolvimento do ramo 6-STABLE proporcionando melhorias de performance e estabilidade, assim como diversas correes e algumas novidades.

Oportunidade para Administrador de Sendmail

Oportunidade de trabalho oferecida.

Fruns do MyFreeBSD agora com posts e respostas autenticadas

Estamos tendo muito trabalho com a manuteno dos fruns devido a posts de propaganda e spam em geral. Devemos ser mais populares do que antes, mas isso tambm tem seus inconvenientes para o dia-a-dia dos fruns.

Lanado o FreeBSD 6.1-RELEASE

Foi lanado entre domingo e segunda-feira passada a nova verso do FreeBSD, a 6.1-RELEASE, j com as imagens de CD disponveis para download. Veja o texto do anncio original traduzido.

I Encontro de Usurios de OpenBSD

o primeiro encontro de usurios de OpenBSD em So Paulo, o informe foi de Rafael Floriano Sousa Sales.

Review: Mailrep, uma ferramenta para anlise de logs de email no FreeBSD

Nosso amigo Araujo postou este review da ferramenta de relatrios para logs de email mailrep. Conforme menciona, em breve estar disponvel na rvore de ports do FreeBSD.

BR-Linux.org Linux levado a sério desde 1996
IPv6.br promove o uso do novo Protocolo Internet

Escritrio aberto: arquivos para o BrOffice

Benchmark: Minefield, Firefox, Chrome, IE, Opera e Epiphany

pl2method 0.0.1 - Acesso transparente a Stored procedures do PG via mtodos php de mesmo nome

Brasileiro lana driver para Acer Aspire srie 3000

Relato de 10 anos de uso de Software Livre

Chrome ganhar terceira verso beta nos prximos dias

O Google revelou, na quarta-feira (29/10), que os usurios recebero automaticamente a terceira atualizao do browser Chrome nos prximos dias. A verso 0.3.154.9 corrige os principais bugs de segurana descobertos pelos usurios da ltima verso beta, especialmente com plug-ins. Segundo o Google, o Chrome corrigiu problemas com pop-ups maliciosas. Com a atualizao, o Google no mais armazenar [...]

Fedora e Sneaker Pimps: Spin, Spin, Sugar

OzOS: Mais uma distribuio com Enlightenment 17

Disponibilizado GeoServer 1.7.0

Projeto Software Livre Brasil Projeto Software Livre Brasil
Projetos brasileiros so apresentados na Campus Party Iberoamrica

Uma delegao de 16 pessoas representa o Brasil na 1 Campus Party Iberoamrica, que teve incio tera-feira (28) e segue at este sbado (01), em San Salvador (El Salvador). O evento, verso ibero-americana do maior encontro de Internet e cultura digital do planeta, integra a programao oficial da XVIII Cpula Ibero-Americana de Chefes de Estado e de Governo. A proposta destacar a inovao tecnolgica como potencializadora do desenvolvimento social.

Amrica-Latina ter traduo de software livre do Brasil

Campanha Software Pblico Internacional deve verter programas para o espanhol estimulando participao de latino-americanos Os softwares livres (que no precisam de licena de uso) presentes no site do Portal do Software Pblico Brasileiro devem ganhar, a partir de 2009, traduo para o espanhol e uma pgina especial na lngua para estimular mais colaborao internacional de desenvolvedores e usurios da Amrica Latina com os brasileiros.

Solunix firma parceria com Tallard Technologies

Solunix firma parceria com Tallard Technologies

Richard Serraria lana contedo livre agora em cpia fsica

Depois de lanar o contedo cultural Vila Brasil sob licena Creative Commons, free download em www.iteia.org.br/tarrafa, desde o ms de agosto de 2008, agora chega a cpia fsica do SMD Vila Brasil, com preo final de R$5,00 e shows de lanamento em locais de reconhecida atuao junto incluso social, digital, cultural, etc, na cidade de Porto Alegre.

KyaPanel faz do Zimbra apenas um excelente webmail

Como assim? O KyaPanel um software com quatro anos de idade. Maduro e confivel no gerenciamento de servidores ele possu um dos seus mdulos focado no gerenciamento de servidores de e-mail. Algumas de suas caractersticas so exclusivas nesse tipo de software, pelo menos entre os softwares FLOSS disponveis no mercado. O controle por usurio e por domnio do controle de anexos. claro que h muito mais. Ento, se voc ainda no conhece bem o KyaPanel, d uma olhada em sua descrio.

Latinoware 2008 oferece diversidade de eventos

A V Conferncia Latino-Americana de Software Livre - Latinoware 2008, que acontece nos dias 30, 31 de outubro e 1 de novembro, em Foz do Iguau - PR, ser marcada pela diversidade de eventos paralelos nas instalaes da Conferncia.

ASL apia 3 edio do Senactech

Com o apoio da ASL.Org, ocorre nos dias 3 e 4 de novembro, a 3 edio do Senactech. O evento abordar temas como Inovao e Tecnologia atravs de palestras e workshops sobre diversos temas relacionados a software livre, como PHP, Java EE5 e Proteo de Rede com Linux.

Prazo prorrogado: chamada de trabalhos para o EMSL2008

Vrias pessoas pediram para enviar propostas de trabalhos aps a data de encerramento da chamada de trabalhos. A organizao do EMSL2008 decidiu prorrogar o prazo para envio de trabalhos at as 23:59 do dia 31 de Outubro, sexta-feira, quando o sistema de envio de trabalhos ser desativado. Aps o trmino deste prazo, no haver nova prorrogao. Os trabalhos devem ser enviados pelo sistema, no link http://emsl.softwarelivre.org/chamada_trabalhos/. A comunicao dos resultados ser...

OpenDocument Format analisado na frica do Sul

No incio do ms de outubro, em Pretoria - frica do Sul, representantes de governo de vrios pases que j adotaram o ODF como formato padro para documentos digitais reuniram-se para discutir sobre o tema.

IPv6.br promove o uso do novo Protocolo Internet.

O IPv6.br um projeto que abrange uma srie de iniciativas para a disseminao do uso do IPv6, o novo protocolo Internet, no Brasil. A implantao do IPv6 na rede mundial j comeou e tem de ser acelerada nos prximos anos, pois isso garantir a capacidade da Internet para continuar a crescer! Mais informaes podem ser encontradas acessando o stio Web do projeto, lanado oficialmente no dia 27 de outubro de 2008: http://www.ipv6.br

FreeBSD Project News News from the FreeBSD Project
New committer: Konrad Jankowski (src) - SoC2008 alumnus.

FreeBSD 7.1-BETA2 Available

FreeBSD 6.4-RC1 Available

New committer: Lawrence Stewart (src)

Summer of Code Projects Completed

New committer: Marko Zec (src)

PC-BSD 7 Released

New committer: Robert Noland (src)

FreeBSD 6.4-BETA/7.1-BETA Available

New committer: Josh Paetzel (ports)

OpenBSD Journal The OpenBSD Community.
DCBSDCon 2009 Call For Papers

The DCBSDCon site has opened up a Call for Papers. Speakers are welcome to submit any topic of interest, although security themes are preferred. This conference leads up to the very popular ShmooCon hacker convention in Washington, D.C. where OpenBSD developers and users are always in attendance.

Check out their website for more information and details about the planned events.

Editor's Note: ShmooCon registration opens Saturday, November 1 at 12pm EDT. If you're planning to attend both events, make sure you register for their event. Those tickets vanish fast!

OpenBSD 4.4 released

The OpenBSD team is pleased to announce the release of OpenBSD 4.4. See the announcement for more information.

Place an order worldwide or order in Europe, or if you only download from FTP then make a donation. If you do FTP your release, be sure to use a local mirror and not the main ftp server:

o spargel.kd85.com		Austria		o ftp.eu.openbsd.org		Sweden
o anga.funkfeuer.at		Austria		o openbsd...uni-erlangen.de		Germany
o obsd.cec.mtu.edu		MI, USA		o ftp3.usa.openbsd.org		CO, USA
o ftp5.usa.openbsd.org		CA, USA		o rt.fm		IL, USA

Highlights of OpenBSD 4.4 are listed below.

Read more...

Ports Hackathon p2k8 in Budapest, Hungary

This week there is another OpenBSD hackathon. This time, the focus is on ports. Thirteen guys from all over Europe have gathered in one room in Budapest, Hungary to work on new ports, update existing ones, and improve the infrastructure. It is the third time the event has taken place here and my first time to attend. Please read on for my take on the events and what the others were up to.

Read more...

New pflow(4) Features Added

Joerg Goltermann (gollo@) recently committed changes to pflow(4) to expand its usefulness for troubleshooting and accounting.

Read on for more details.

Read more...

Pesquisa do Google: freebsd Pesquisa do Google: freebsd
TCE/MS instala sofware livre em todos os seus computadores - ltima Hora

TCE/MS instala sofware livre em todos os seus computadores
ltima Hora - 20 out. 2008
... a possibilidade de utiliz-lo em diversos sistemas operacionais (Windows, GNU/Linux e FreeBSD); a compatibilidade com formatos de arquivo de outros ...

VLC, o Chuck Norris dos media players - Info Online

VLC, o Chuck Norris dos media players
Info Online - 16 out. 2008
O player tem verses para BeOS, FreeBSD, Syllabe, Solaris... Mesmo no tendo nenhuma empresa gigante o apoiando (como o Windows Media Player eo iTunes), ...

Servidor DNS de cdigo aberto lanado - Baguete (liberao de imprensa)

Servidor DNS de cdigo aberto lanado
Baguete (liberao de imprensa) - 15 out. 2008
O sistema roda em sistemas operacionais baseados no Posix, como Linux, MacOS X, FreeBSD e Solaris. O cdigo, a documentao e informaes adicionais esto ...

RE: Congrats!!! - OS News

RE: Congrats!!!
OS News - 11 horas atrs
Have you guys got ZFS yet, from FreeBSD? No way ZFS will even be taken into consideration until it is under an acceptable license which is not the case at ...

ProjectForum 6.2 Simplifies Wiki Collaboration for Workgroups - PR Web (press release)

ProjectForum 6.2 Simplifies Wiki Collaboration for Workgroups
PR Web (press release) - 31 out. 2008
Versions are available for Mac OS X, Windows, Linux, Solaris and FreeBSD, while users of the software need only a web browser. ProjectForum offers a free ...

Pesquisa do Google: bsd Pesquisa do Google: bsd
Mulher presa por acorrentar filha ao p da cama em Juina - 24Horas News

Mulher presa por acorrentar filha ao p da cama em Juina
24Horas News - 29 out. 2008
... bairro Padre Dulio, de acordo com a policia ela acusada de leso corporal e maus tratos contra a prpria filha a menor das iniciais BSD de 11 anos. ...

Spintrnica abre novos rumos ao associar a carga dos eltrons ... - O Globo Online

Spintrnica abre novos rumos ao associar a carga dos eltrons ...
O Globo Online - 26 out. 2008
Por trs dessa maravilha o que roda na verdade um BSD [o UNIX de Berkeley] embelezado - esclarece. - Mas preciso mesmo comprar um notebook novo, ...

Uniethos promove novas turmas para o curso de Relatrio de ... - Consumidor Moderno

Uniethos promove novas turmas para o curso de Relatrio de ...
Consumidor Moderno - 15 out. 2008
Em 2007 a parceria entre o UniEthos, a Fundao Getulio Vargas ea BSD foi a primeira do mundo a alcanar a certificao pela GRI. ...

BSD Medical: Hyperthermia Therapy Used to Activate a Gene Delivery ... - MarketWatch

BSD Medical: Hyperthermia Therapy Used to Activate a Gene Delivery ...
MarketWatch - 29 out. 2008
BSD Medical Corp. is the leading developer of systems used to deliver precision-focused microwave/RF energy to diseased sites in the body, including cancer. ...

Servidor DNS de cdigo aberto lanado - Baguete (liberao de imprensa)

Servidor DNS de cdigo aberto lanado
Baguete (liberao de imprensa) - 15 out. 2008

RE[4]: ZFS - OS News

RE[4]: ZFS
OS News - 5 horas atrs
Most of the command-line network tools that come with Windows were derived from BSD versions. So utilities like ping, traceroute, nslookup, telnet, ...
RE[4]: ZFS Newmobilecomputing.com
todos os 4 relacionados

RE[2]: Yes it would - OS News

RE[2]: Yes it would
OS News - 19 horas atrs
As *BSD OS are still here (despite their license in your view) they could definitedly have done the job as Internet servers (one of the strong point of the ...

BSD Medical Supports National Breast Cancer Awareness Month in ... - MarketWatch

BSD Medical Supports National Breast Cancer Awareness Month in ...
MarketWatch - 27 out. 2008
In a greater sense, however, BSD Medical is focused on offering hope for breast cancer patients throughout the United States and the rest of the world by ...

RE: It would run on BSD - Newmobilecomputing.com

RE: It would run on BSD
Newmobilecomputing.com - 29 out. 2008
Of course - or something similar to Linux and BSD, but it would have to be open. A big part of the net always has run on BSDs. The text may, of course, ...
RE[2]: Innovation doesn't depend on the software license Newmobilecomputing.com
todos os 4 relacionados

RE: It would run on BSD - OS News

RE: It would run on BSD
OS News - 29 out. 2008
And furthermore, without Linux there'd be one or more GNU/BSD distributions running a BSD kernel, GNU userland, and either KDE or Gnome. ...

freebsd - Google News freebsd - Google News
RE: Congrats!!! - Newmobilecomputing.com

RE: Congrats!!!
Newmobilecomputing.com - 11 hours ago
Have you guys got ZFS yet, from FreeBSD? No way ZFS will even be taken into consideration until it is under an acceptable license which is not the case at ...

RE: Congrats!!! - OS News

RE: Congrats!!!
OS News - 11 hours ago
Have you guys got ZFS yet, from FreeBSD? No way ZFS will even be taken into consideration until it is under an acceptable license which is not the case at ...

Apple's Need for Speed Has a Mission, and it's Not Supercomputers - The Mac Observer

Apple's Need for Speed Has a Mission, and it's Not Supercomputers
The Mac Observer - 23 hours ago
(FreeBSD, essentially). With virtualization, Macs can now run Windows at full speed, and numerous articles have confirmed that virtualization of Windows has ...

ProjectForum 6.2 Simplifies Wiki Collaboration for Workgroups - Emediawire (press release)

ProjectForum 6.2 Simplifies Wiki Collaboration for Workgroups
Emediawire (press release), WA - Oct 31, 2008
Versions are available for Mac OS X, Windows, Linux, Solaris and FreeBSD, while users of the software need only a web browser. ProjectForum offers a free ...

Gregory Shapiro Promoted to Vice President and Chief Technology ... - Emediawire (press release)

Gregory Shapiro Promoted to Vice President and Chief Technology ...
Emediawire (press release), WA - Oct 31, 2008
Shapiro is a FreeBSD committer, has served as program committee member for BSDCon 2002, and program chairman for BSDCon 2003. ...

Gregory Shapiro Promoted to Vice President and Chief Technology ... - PR Web (press release)

Gregory Shapiro Promoted to Vice President and Chief Technology ...
PR Web (press release), WA - Oct 31, 2008
Shapiro is a FreeBSD committer, has served as program committee member for BSDCon 2002, and program chairman for BSDCon 2003. ...

Microsoft exec lays claim to roots of Mac OS X - MacNN

Microsoft exec lays claim to roots of Mac OS X
MacNN, CA - Oct 30, 2008
Rashid is partly responsible for the Mach kernel used in the FreeBSD variant of Unix. Apple based Mac OS X on FreeBSD, creating its own kernel called Darwin ...

C/C++ interpreter Ch 6.1, and Embedded Ch 6.1 Released - Emediawire (press release)

C/C++ interpreter Ch 6.1, and Embedded Ch 6.1 Released
Emediawire (press release), WA - Oct 30, 2008
Ch and Embedded Ch for Windows, Linux x86, Linux PPC, Mac OS X, Solaris, HP-UX, FreeBSD and QNX Neutrino RTOS are available. Ch Standard Edition is free for ...

C/C++ interpreter Ch 6.1, and Embedded Ch 6.1 Released - PR Web (press release)

C/C++ interpreter Ch 6.1, and Embedded Ch 6.1 Released
PR Web (press release), WA - Oct 30, 2008
Ch and Embedded Ch for Windows, Linux x86, Linux PPC, Mac OS X, Solaris, HP-UX, FreeBSD and QNX Neutrino RTOS are available. Ch Standard Edition is free for ...

s/Internet/WorldWideWeb/g - OS News

s/Internet/WorldWideWeb/g
OS News - Oct 29, 2008
FreeBSD 1.0 came out towards the end of 93, NetBSD predating it by a matter of months. Yet at that time Linux had far better hardware support for the crop ...

bsd - Google News bsd - Google News
RE[2]: Another great release - OS News

RE[2]: Another great release
OS News - 3 hours ago
They let me do what *I* need to do and stay the heck out of my way the rest of the time, something that OS X thankfully inherited from its BSD roots as well ...

RE[2]: Another great release - Newmobilecomputing.com

RE[2]: Another great release
Newmobilecomputing.com - 3 hours ago
They let me do what *I* need to do and stay the heck out of my way the rest of the time, something that OS X thankfully inherited from its BSD roots as well ...

RE[4]: ZFS - OS News

RE[4]: ZFS
OS News - 3 hours ago
The basic gist is that in pre-release versions of NT, some BSD code may have been used in boot-strapping the networking effort. ...

RE[4]: ZFS - Newmobilecomputing.com

RE[4]: ZFS
Newmobilecomputing.com - 3 hours ago
The basic gist is that in pre-release versions of NT, some BSD code may have been used in boot-strapping the networking effort. ...

Bye Week Open Thread - Black Shoe Diaries

Bye Week Open Thread
Black Shoe Diaries, PA - 3 hours ago
by BSD on Nov 1, 2008 10:21 AM EDT in Open Threads Even though Penn State is off today I thought you all might appreciate a thread to discuss the games. ...

RE[4]: ZFS - Newmobilecomputing.com

RE[4]: ZFS
Newmobilecomputing.com - 5 hours ago
Most of the command-line network tools that come with Windows were derived from BSD versions. So utilities like ping, traceroute, nslookup, telnet, ...

RE[4]: ZFS - OS News

RE[4]: ZFS
OS News - 5 hours ago
Most of the command-line network tools that come with Windows were derived from BSD versions. So utilities like ping, traceroute, nslookup, telnet, ...

RE[2]: ZFS - Newmobilecomputing.com

RE[2]: ZFS
Newmobilecomputing.com - 7 hours ago
Just a note on Windows TCP/IP: It's not related to any BSD or other networking stack out there. There has never been any BSD code in the networking stack in ...

RE[2]: ZFS - OS News

RE[2]: ZFS
OS News - 7 hours ago
Just a note on Windows TCP/IP: It's not related to any BSD or other networking stack out there. There has never been any BSD code in the networking stack in ...

ASP.NET - Introducing the "DotNetNuke" Web Application Framework - SYS-CON Media

ASP.NET - Introducing the "DotNetNuke" Web Application Framework
SYS-CON Media, NJ - 7 hours ago
DotNetNuke is offered under a nonrestrictive BSD License, a standard open source license that allows for full usage in both commercial and noncommercial ...

Online:
Ns temos 20 visitantes online

ATOM 0.3

OPML

Devil Store - Sua loja BSD

FreeBSD Brasil LTDA

CONISLI 2008

FUG-BR: Desde 1999, espalhando BSD pelo Brasil.