Linked by Thom Holwerda on Wed 30th Apr 2008 22:24 UTC
OpenBSD Theo de Raadt has lifted the veil off OpenBSD 4.3. "We are pleased to announce the official release of OpenBSD 4.3. This is our 23nd release on CD-ROM (and 24rd via FTP). We remain proud of OpenBSD's record of more than ten years with only two remote holes in the default install." Boasting as always, but when it's justified, arrogance is a virtue.
Thread beginning with comment 312346
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE: WPA
by kaiwai on Thu 1st May 2008 10:40 UTC in reply to "WPA"
kaiwai
Member since:
2005-07-06

And, in related news, WPA is now part of OpenBSD -current (so it will be in 4.4 scheduled for release later this year). Many, but not all chipsets are supported, including Atheros and Intel, and more are coming.

I have tested it on my Thinkpad x40 and it works great. WPA is one thing I really wanted OpenBSD to have and now it's here.


Its terrible that it has taken this long; for something that is meant to be security orientated operating system, WPA seems very low on their priorities.

Reply Parent Bookmark Score: 3

RE[2]: WPA
by Oliver on Thu 1st May 2008 22:19 in reply to "RE: WPA"
Oliver Member since:
2006-07-15

Because WPA _is_ low security.

Reply Parent Bookmark Score: 4

RE[3]: WPA
by 0brad0 on Fri 2nd May 2008 04:06 in reply to "RE[2]: WPA"
0brad0 Member since:
2007-05-05

Because WPA _is_ low security.


WPA is, WPA2 is NOT.

Reply Parent Bookmark Score: 1

RE[2]: WPA
by Sunnz on Thu 1st May 2008 23:53 in reply to "RE: WPA"
Sunnz Member since:
2008-04-09

VPN with some sort of strong software encryption such as Blowfish, AES, is preferred in the OpenBSD circles to secure any kinds of network connections, including WiFi... which usually secures the IP packets at layer 3... which means, you can effectively transmit data securely over an unsecure WiFi data link (layer 2)... therefore, it was not a priority for OpenBSD dev to secure layer 2 such as WPA.

Last time Theo written about WPA in misc was that WPA has become an accessibility problem rather than security. People use OpenBSD on their laptop would like to be able to access a WPA AP at a coffee shop.

Reply Parent Bookmark Score: 2

RE[3]: WPA
by 0brad0 on Fri 2nd May 2008 04:22 in reply to "RE[2]: WPA"
0brad0 Member since:
2007-05-05

VPN with some sort of strong software encryption such as Blowfish, AES, is preferred in the OpenBSD circles to secure any kinds of network connections, including WiFi... which usually secures the IP packets at layer 3... which means, you can effectively transmit data securely over an unsecure WiFi data link (layer 2)... therefore, it was not a priority for OpenBSD dev to secure layer 2 such as WPA.


It was not a priority because the people working on the net80211 layer were not using Wifi in the real world so they didn't care. This has since changed. Recommending the use of IPsec was only a workaround for your own network and it is not realistic to recommend the use of IPsec for everyone trying to connect to your AP anyway.

Last time Theo written about WPA in misc was that WPA has become an accessibility problem rather than security. People use OpenBSD on their laptop would like to be able to access a WPA AP at a coffee shop.


I cannot find any such comment from Theo and if he did it would have been about WPA and not WPA2. Anyway, this goes way beyond just coffee shops. WPA is in use everywhere.

Reply Parent Bookmark Score: 1

RE[2]: WPA
by 0brad0 on Fri 2nd May 2008 04:05 in reply to "RE: WPA"
0brad0 Member since:
2007-05-05

Code does not come out of thin air. It requires developers interested and willing to write the code.

Reply Parent Bookmark Score: 1