/tech/ - Technology

Buffer overflow

Posting mode: Reply

Check to confirm you're not a robot
Drawing x size canvas

Remember to follow the rules

Max file size: 350.00 MB

Max files: 5

Max message length: 4096

Manage Board | Moderate Thread

Return | Catalog | Bottom

Expand All Images

(672.01 KB 1249x496 casth.png)
Anonymous 12/03/2019 (Tue) 20:07:28 [Preview] No. 13952
OpenBSD, Qubes + Whonix, Tails, ???
What's the secure setup now?

Anonymous 12/04/2019 (Wed) 04:06:11 [Preview] No.13953 del
Secure from what?

Anonymous 01/08/2020 (Wed) 12:11:53 [Preview] No.14000 del
(643.14 KB 800x533 AutRally.png)
And what hardware are you using?

Anonymous 01/09/2020 (Thu) 00:46:55 [Preview] No.14003 del
If you're not using something like a Commodore 64 with an ethernet cartridge behind a NAT box, you're just one of a million noobs running stuff pulled off github thinking they've got a secure setup.

Anonymous 01/09/2020 (Thu) 11:16:43 [Preview] No.14004 del
Please stop posting pictures of autistic people (especially Greta) with a photoshopped flag looking like the Nazi flag.

This is slightly out-of-topic, but:

there’s a weird dude in my country, being both an eugenicist and a climate denier, claiming to be "anti-Greta Thunberg" (in his literal Twitter biography). (The dude’s life is so empty he’s campaigning against a 16-years-old girl, but he’s still writing in major media outlets.)

The literal US President said she was an angry kid who should chill with a friend of her. She’s written it in her Twitter bio (because look, she’s literally tougher than the US President).

I’m writing this here because there’s a good BO, so I assume you’re slightly more educated than the average 4chan user. Please don’t prove me wrong.

Now, to answer to the OP:

There are four major differences between Qubes OS and OpenBSD.

1) Qubes OS runs with Linux as its kernel, which makes it faster than OpenBSD.

2) Qubes OS is a desktop OS, while OpenBSD can be used for servers, firewalls, etc.

3) Qubes OS will guide you to use it safely, while you need to read MWL’s Absolute OpenBSD to correctly use OpenBSD.

4) Qubes OS is full of competent contributors devoted to help you to safely use OpenBSD, while the OpenBSD contributors don’t care that you use it: they target OpenBSD for themselves; you’re free to use it for your personal use or as a base for your server’s operating system, but not to ask the devs to debug your installation, unless you’ve narrowed your answer and provided meaningful logs (Absolute OpenBSD, chapter 1, IIRC).


1) Qubes OS is a secure and _safe_ operating system. If you use it properly, you shouldn’t mess up.

2) OpenBSD is a security-first operating system, with poor parallelism and defaults such as "we will only use 2 cores of your CPU, to improve your installation’s security". You can make an illegal copy of an Absolute OpenBSD .epub file on the Library of Trantor (click here: http://xfmro77i3lixucja.onion/download/KwPy9zRfQ4304KPm/Absolute%20OpenBSD.epub).


TAILS is different. TAILS is for activists, to manage one’s secret identity. It’s intended to pass everything through Tor, to be hard to misuse, and it loads in your computer’s RAM so when you turn it off, there’s no trace (except in the encrypted persistent storage).

TAILS is for grassroot activists, anticapitalists, and so on, and it runs on a boum.org SLD. boum.org claim to be anticapitalist and to like Debian and GNU, so I wouldn’t praise their opinions too high, but I’d still unconditionally recommend TAILS to student movements, civic disobedience, and so on, because even if it’s not a magic bullet it would painlessly and dramatically improve their anonymity compared to Microsoft-owned, Apple-owned, and Google-owned operating systems. (The persistent storage lets users keep a single identity on their keys.)

TAILS isn’t meant to be a workstation, like Qubes OS and OpenBSD may be (and for example, you probably won’t keep your music library on a single USB key, because for the price of a 128 GB USB key you may buy a 2 TB HDD). TAILS should be used and understood as a mean of communication, whose heaviest use would be to write a document in Libreoffice.

Anonymous 01/09/2020 (Thu) 12:22:41 [Preview] No.14005 del
(82.76 KB 310x165 Autami.png)
>Please stop posting pictures of autistic people (especially Greta) with a photoshopped flag looking like the Nazi flag.
It's not a Nazi flag and I'm not sure why you mention the BO, is there a specific rule being broken?

As for the original point, What's the secure setup now? cannot be achieved though software when your system is riddled with hardware vulnerabilities, e.g. x86. What >>14003 said isn't too far from the truth.

Anonymous 01/09/2020 (Thu) 16:26:51 [Preview] No.14006 del
Excuse-me, is it a non-photoshopped image? I thought it was about >muh autism.

But thanks for the answer, I'll look at exotic CPU architectures. Is it possible to run a decent CPU on a (modern) laptop? I don't find stuff on Ahmia.

Anonymous 01/09/2020 (Thu) 16:28:23 [Preview] No.14007 del
Huuh, and I'm not aware of this board's rules tbh, I just think that with proper moderation you don't end like 4chan

Anonymous 01/10/2020 (Fri) 04:10:58 [Preview] No.14008 del
The rules are linked right below the post box area (above Max file size tag). They are simple and fairly standard: no-cp like stuff, off-topic threads, low-effort posts...

You can still use x86 stuff, just don't make it your primary, Internet connected machines. ARM, MIPS, Power, RISC-V will have better options. Even some of those will have issues, but if you research them, you can find which ones are likely to be more secure. Non-integrated NICs/WiFI is a good idea, firmware has to be programmed specifically to use peripherals so it will likely not have included drivers for anything that isn't integrated directly into the board unless it can load external firmware in add-on cards (like some PCI(e) NICs/videocards can do). Intel Management Engine can use integrated NIC and WiFi, it can be provisioned to do so and the hardware is known to it. Integrated is not some random USB dongle device. Many of those listed architectures are minimalist and targeted for embedded type devices, not typically used in desktops, laptops, or workstations. They can be used for thin clients or ultra-portable netbook like machines for which heavy processing power is not needed or beneficial.

betamax Board owner 01/12/2020 (Sun) 05:39:58 [Preview] No.14009 del
(377.69 KB 588x391 1574218221093.png)
>low effort threads
>includes posts
I lacked the insight to explicitly express that, thanks autism police officer! *changes rule #3

Anonymous 05/27/2020 (Wed) 18:23:09 [Preview] No.14203 del
It always depends on what you want. Newpipe inside of whonix I find is the best way to use youtube, since the workstation is void of all internet capabilities but is still the javascript host, tails gives you the most anonymity and is harder to hack but javascript will always fuck you up, openbsd doesn't help you much with privacy and anonymity, but with it's secure code alternatives, line checker, bsd licenses, etc., etc. I think that has to be the most secure os.

Anonymous 05/27/2020 (Wed) 18:26:19 [Preview] No.14204 del
forget my post
this, except without the butthurt over national socialism and making fun of autists and spergerbergers.

Anonymous 05/28/2020 (Thu) 08:58:32 [Preview] No.14212 del
Not something that's running on top of buggy-ass x86 hardware, virtualized or not. You've got to be really fucking dumb to use x86 at this point. But whatever, I don't give a fuck what you do. Not my problem, if you fuck yourself up.

Top | Return | Catalog | Post a reply