Well this freaking sucks.

Turns out people are poisoning everything out there.

From: Gregory Perry
To: “[email protected]
Subject: OpenBSD Crypto Framework
Thread-Topic: OpenBSD Crypto Framework
Thread-Index: AcuZjuF6cT4gcSmqQv+Fo3/+2m80eg==
Date: Sat, 11 Dec 2010 23:55:25 +0000
Message-ID: <8D3222F9EB68474DA381831A120B1023019AC034@mbx021-e2-nj-5.exch021.domain.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset=”iso-8859-1″
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Status: RO

Hello Theo,

Long time no talk. If you will recall, a while back I was the CTO at NETSEC and arranged funding and donations for the OpenBSD Crypto Framework. At that same time I also did some consulting for the FBI, for their GSA Technical Support Center, which was a cryptologic reverse engineering project aimed at backdooring and implementing key escrow mechanisms for smart card and other hardware-based computing
technologies.

My NDA with the FBI has recently expired, and I wanted to make you aware of the fact that the FBI implemented a number of backdoors and side channel key leaking mechanisms into the OCF, for the express purpose of monitoring the site to site VPN encryption system implemented by EOUSA, the parent organization to the FBI. Jason
Wright and several other developers were responsible for those backdoors, and you would be well advised to review any and all code commits by Wright as well as the other developers he worked with originating from NETSEC.

This is also probably the reason why you lost your DARPA funding, they more than likely caught wind of the fact that those backdoors were present and didn’t want to create any derivative products based upon the same.

This is also why several inside FBI folks have been recently advocating the use of OpenBSD for VPN and firewalling implementations in virtualized environments, for example Scott Lowe is a well respected author in virtualization circles who also happens top be on the FBI payroll, and who has also recently published several tutorials for the use of OpenBSD VMs in enterprise VMware vSphere deployments.

Merry Christmas…

Gregory Perry
Chief Executive Officer
GoVirtual Education

“VMware Training Products & Services”

540-645-6955 x111 (local)
866-354-7369 x111 (toll free)
540-931-9099 (mobile)
877-648-0555 (fax)

Honestly I don’t know what that means for people who want privacy. Basically trust no one, trust nothing..

And certainly don’t run OpenBSD in a VMWare environment.

The only wikilleaks post worth repeating:

zS E C R E T SECTION 01 OF 02 LONDON 000368
NOFORN
SIPDIS
DOE FOR GPERSON, CHAYLOCK
EO 12958 DECL: 12/12/2018
TAGS EPET, ENRG, PGOV, RS”>RS, NI
SUBJECT: ENGLAND: RELIABILITY AND LONGEVITY OF UK-US RELATIONSHIP CONFIRMED
REF: A. LONDON 365 B. LONDON 366
Classified By: Consul General Robbie Honerkamp for reasons 1.4 (B) and (D )

1. (S/NF) Summary: We’re no strangers to love. You know the rules and so do I.
A full commitment’s what I’m thinking of. You wouldn’t get this from any other guy.
I just wanna tell you how I’m feeling. Gotta make you understand.

2. (C/NF) Chorus: Never gonna give you up, never gonna let you down, never gonna run around and desert you.
Never gonna make you cry, never gonna say goodbye, never gonna tell a lie and hurt you.

3. (S/NF) We’ve known each other for so long Your heart’s been aching but You’re too shy to say it
Inside we both know what’s been going on We know the game and we’re gonna play it
And if you ask me how I’m feeling Don’t tell me you’re too blind to see

4. (C/NF) Chorus: Never gonna give you up, never gonna let you down, never gonna run around and desert you.
Never gonna make you cry, never gonna say goodbye, never gonna tell a lie and hurt you.

5. (C/NF) Chorus: Never gonna give you up, never gonna let you down, never gonna run around and desert you.
Never gonna make you cry, never gonna say goodbye, never gonna tell a lie and hurt you.

6. (C/NF) Background Singers: (Ooh, give you up) (Ooh, give you up) (Ooh) Never gonna give, never gonna give
(Give you up) (Ooh) Never gonna give, never gonna give (Give you up)

7. (S/NF) We’ve know each other for so long Your heart’s been aching but You’re too shy to say it
Inside we both know what’s been going on We know the game and we’re gonna play it
I just wanna tell you how I’m feeling Gotta make you understand

8. (C/NF) Never gonna give you up, never gonna let you down, never gonna run around and desert you.
Never gonna make you cry, never gonna say goodbye, never gonna tell a lie and hurt you.

9. (C/NF) Never gonna give you up, never gonna let you down, never gonna run around and desert you.
Never gonna make you cry, never gonna say goodbye, never gonna tell a lie and hurt you.

10. (C/NF) Never gonna give you up, never gonna let you down, never gonna run around and desert you.
Never gonna make you cry, never gonna say goodbye, never gonna tell a lie and hurt you. ASTLEY

Old Unix tree’s

Well I was looking for a good way to see what changed between Net/2, 386BSD 0.0 and 386BSD 0.1 and it appears that nobody has a cvsweb of these early versions….

What is strange, is that cvsweb package for debian is lacking the actual cgi file.. So after going insane with cvsweb, I set one up.

http://unix.superglobalmegacorp.com/cgi-bin/cvsweb.cgi/#dirlist

I’ve never really setup a CVS repository before so this was my first shot…

rm -rf /var/lib/cvs
mkdir -p /var/lib/cvs
cvs -d /var/lib/cvs init
cd /var/www/unix.superglobalmegacorp.com/source/Net2
cvs -d /var/lib/cvs import -m “Net/2” Net2 CSRG Net2
cd /var/www/unix.superglobalmegacorp.com/source/386BSD-0.0
cvs -d /var/lib/cvs import -m “386BSD 0.0” Net2 BJolitz Jolix00
cd /var/www/unix.superglobalmegacorp.com/source/386BSD-0.1
cvs -d /var/lib/cvs import -m “386BSD 0.1” Net2 BJolitz Jolix01
cd /var/www/unix.superglobalmegacorp.com/source/NetBSD-0.8
cvs -d /var/lib/cvs import -m “NetBSD 0.8” Net2 NetBSD NetBSD08
cd /var/www/unix.superglobalmegacorp.com/source/NetBSD-0.9
cvs -d /var/lib/cvs import -m “NetBSD 0.9” Net2 NetBSD NetBSD09 

From what I saw the more the directories align, the better, so I moved all the i386 and other platform stuff into arch directories to better match NetBSD 0.9 …

I also setup src2html to browse various levels, it’s great for quickly finding things that may have moved… It’s here.

Now I just have to see about doing ‘forks’ in CVS and adding in the 4.4 lite stuff.

VMWare Fusion updated to 3.1.2

Honestly I didn’t really go through the release notes

I think 386 BSD 0.0 may just need to be installed on an actual disk, as me trying to duplicate the settings of that connor disk doesn’t produce a bootable disk… I thought it was in the step that disklabel doesn’t supply the bootblocks, but even doing that manually got me nothing.

I mashed in Net/2 into NetBSD 0.8 to get something that is one file away from compiling, but it’s short about 50 references from linking….

I should try it again but not using Net/2 it’s probably too old.. but I’m afraid there was way more drift between 386 BSD pl24 and Net 0.8, and certainly in those files between Net 8 & Net 9.

At least we have a nearly complete Net 9 (it’s only i386, but that’s ok.).

NetBSD 0.8

Thanks to Bert Kiers, the source to NetBSD 0.8 has been located!

Currently it resides at http://netbsd.itsx.net/netbsd-0.8-src.tgz

I haven’t tried to build it yet, but I would imagine that it should be possible from either 386 BSD 0.1 with all the patchkits installed, or maybe from within NetBSD 0.9 …

I don’t know if the install diskettes are easily generated… So this may be a source up/down grade depending on how you look at it.

But this is a ‘good thing’ as this would be the last ‘lost’ version of NetBSD. Then I can tackle 386 BSD 0.0 & FreeBSD.

Your submission has been rejected by our reviewers. Please read the notes below regarding your submission:

Reviewer Notes: REJECTED – Issues with plug-in
There appears to be an issue with the plug-in not working with local speex files once an http version is played and shows a messagebox of ‘Speex Error’ – ‘Not a Speex stream’. Restarting Winamp will then play the local file but am sure this shouldn’t be happening. Please fix and then re-submit the fixed version.

Don’t you hate it when you focus so much on the big things you forget the small stuff, like switching between local and remote?

Sigh.

Thankfully the fix was trivial, and only involved one line of code… I spent more time re-building a VM with Visual C++ 4.2 then I did fixing the code & recompiling…

Naturally the download is on the sourceforge page, and I bumped the version to 0.76a … If anyone ever wonders years from now what the deal was… lol

Net Hack wiki moved

I just received notice that the NetHack wiki has now moved and the new site is nethackwiki.com.

It’s great when old software just doesn’t revive for a little while then fade back to obscurity, so update your links, or just browse the site and be blown away by all their information on such a great (and difficult) game.

And of course, I have NetHack for the Windows NT 4.0 MIPS, and various 4.X BSD on sourceforge under the package tapes….

For anyone shopping around for a VPS

check out this incredible site, lowendbox.com. I was thinking of having a cheap backup site for some of my stuff in my own cloud (thanks google!) and we aren’t talking any major investment here… And for the added sake of paranoia they even review and list places in the UK and heck Egypt at a glance…

And of course the tags make it nice to jump around to see nations, hosting types etc etc….

And check the prices, you can actually find some VPS’s for around $2.50 USD a month!!! (on a month to month basis!!).

I’m kind of glad in retrospect to have not really gotten into this business it is way too cut throuat.