ϟт℮ ♥ε Ḻ ☺ґḓ is a user on mastodon.social. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.
ϟт℮ ♥ε Ḻ ☺ґḓ @stevelord

I'd like to get more involved with . Does anyone have any suggestions/ideas on how we could support OpenBSD more effectively?

· Web · 0 · 1

@stevelord I buy an m:tier Platinum subscription even though it is much more than I can afford right now.

@phessler delivers a beautiful talk on OpenBGP which might not be strictly security but is of crucial importance, as BGP, to the Internet as a whole.

You could get @mlarkin to talk about VMM which is a model for beautifully simple VM setup.

Just a couple of ideas but mainly I think development money is what is needed most :(

@cynicalsecurity @phessler @mlarkin I was thinking of asking more of the community to submit talks next year. We have an awfully big red team tilt I'm trying to rebalance but there's only so many "How to set up logging" talks you can put on. Something on designing virtualization security would be incredible.

@stevelord @phessler @mlarkin you could also try to put together a "funding drive" for #OpenBSD or organise a hackaton at the same time as #44CON where people can see how #OpenBSD developers work and what they focus on?

For example make the "hackaton daily report" the last talk of the day at #44CON for the days of the conference?

Might not be practical of course but just an idea.

@stevelord @phessler @mlarkin one day I might find the courage and the will to submit a historical talk.

I think there is a lot of lost lore that the younger generations are simply never exposed to.

There is no comp.unix.wizards any longer, amongst other more worthwhile losses…

@cynicalsecurity @stevelord @mlarkin a historical talk would be excellent! Especially if the statute of limitations has passed and scary bits can be named ;).

@phessler @stevelord @mlarkin I would need someone legal to verify several statutes of limitations before I utter a peep.

@cynicalsecurity @phessler @mlarkin if you're willing to come and do a historical talk, I'm happy to turn the cameras off.

If we can get enough people doing workshops on I'll make the space for a 2.5 day hackathon too, and I'll fly in OpenBSD peeps and put them up if they do talks/workshops teaching others how to do cool things and contribute.

We can call it (Yet)

@cynicalsecurity @stevelord @phessler @mlarkin Kirk McKusick has given historical talks more than once. They go over quite well.

@kurtm @stevelord @phessler @mlarkin I am definitely /not/ in the same league… my only advantage is the European perspective which he probably does not have (I don't know for sure, just speculation, simply because he didn't live here).

@cynicalsecurity @stevelord @phessler @mlarkin Few are in the same league. Still, it's more the precedent for historical talks I was trying to establish :D

They had *me* give a talk this year, you are qualified to do the same :D

Just based on stuff you've written on Mastodon, I'm positive you could put multiple interesting talks together.

@kurtm @stevelord @phessler @mlarkin I'm honoured you should say that but I need to trial-run the talk before I give it elsewhere. It was meant to be WarCon PL but that wen't down the drain at the last minute.

@stevelord @cynicalsecurity @phessler @mlarkin I would *would* love to hear talks (by @mlarkin ?) about that topic!

@Kensan @cynicalsecurity @phessler @mlarkin I think talks about how and why are often so much more meaningful than "I broke a widget" talks.

@stevelord @cynicalsecurity @phessler @mlarkin Exactly!

Personally, I feel I learn more if somebody explains to me their motivation and the reasoning and how something ended up the way it is than the particular technology/gadget du jour...

@Kensan @cynicalsecurity @phessler @mlarkin also the dead ends. One of the best talks I've seen was about someone failing at modding a childhood computer, not realising that they could've done most of the work in software till it was pointed out at the end of the talk.

@Kensan @cynicalsecurity @phessler @mlarkin it was a fantastic talk because they explained their process, the rabbit holes the fell down and their working out. Even though they didn't succeed they absolutely pushed the envelope for this platform and learned (and shared) so much.

@stevelord @cynicalsecurity @phessler @mlarkin Indeed, negative learnings are very valuable. I think a very recent and highly impactful example was Anders Foghs blog post on speculative execution which basically pointed a flashlight on the speculative execution issues for many people.

I recently had the chance to ask one of the Meltdown authors about his opinion on the concurrent discovery/collision topic and he confirmed this line of thinking.

@Kensan @stevelord @cynicalsecurity @phessler @mlarkin I said once to a new coworker: "This stuff comes to me easier because I have made far more mistakes than you have."

@cynicalsecurity @stevelord @mlarkin i have a 1 day BGP tutorial, aimed at non-experts. I think its good for blue team, red team, sysadmins, programmers, pretty much anyone that wants to understand how it works from the ground up.

@phessler @stevelord @mlarkin Side-remark: we would *never* be able to have this constructive conversation on the birdsite without being flooded by different haters…

@cynicalsecurity @phessler @mlarkin also that day will come for here, but there'll always be the cabal list ;)

@phessler @cynicalsecurity @mlarkin that sounds good. Unfortunately our CFP closed last month but next year is defo an option. Also we have training if anyone wants to run any OpenBSD in the workplace training next year.