norbert's weblog

NetBSD 3.0 RC1 released!

Posted by Norbert on Sun Nov 20 03:50 PHT 2005
From the "of course, it runs netbsd!" section

NetBSD 3.0 RC1 is now available. This is the first release candidate of the 3.0 series, and can be downloaded from this link.

For more information, see Matthias Scheler's announcement.

MD4 and MD5 collision

Posted by Norbert on Wed Nov 16 01:56 PHT 2005
From the "catching up on security issues" section

Patrick Stach released his collision generator for MD4 and MD5 in the bugtraq mailing list. He said that these collision generators have significant improvements over the ones described in the papers by Xiaoyun Wang et. al. (Cryptanalysis for Hash Functions MD4 and RIPEMD and How to Break MD5 and Other Hash Functions), with an average run time of 45 minutes on a P4 1.6GHz PC for MD5 collision generation, and 5 seconds for MD4.

http://www.stachliu.com/collisions.html

More and more hash collisions concepts are constantly appearing. Another good example is a pair of valid X.509 certificates based on MD5 hash, that have identical signatures. Now this proves that MD5 is already broken. Unfortunately, SHA-1 is also broken. For sure, this will have an impact in the crypto world's future.

FreeBSD 6.0 released!

Posted by Norbert on Sat Nov 5 03:52 PHT 2005
From the "the power to serve!" section

As expected, FreeBSD 6.0 is now officially released! Scott Long states in his announcement that FreeBSD 6.0-RELEASE is the next step in delivering the high performance and enterprise features that have been under development in the FreeBSD 5.x series for the last several years. For more information see the FreeBSD 6.0-RELEASE announcement.

NetBSD 2.1 released!

Posted by Norbert on Thu Nov 3 04:09 PHT 2005
From the "of course, it runs netbsd!" section

NetBSD 2.1 has been released! This is the first maintainance release of the NetBSD-2 release branch. This release includes many enhancements, kernel updates, bug fixes, and security fixes. For more information, see the NetBSD 2.1 release announcement.

Welcome to 6.0-STABLE

Posted by Norbert on Wed Nov 2 15:21 PHT 2005
From the "the power to serve!" section

It seems that the RELENG_6 branch of FreeBSD is now tagged as 6.0-STABLE in src/sys/conf/newvers.sh (commited by scottl).

"Welcome to 6.0-STABLE."

OpenBSD 3.8 released!

Posted by Norbert on Tue Nov 1 15:00 PHT 2005
From the "they called it bsd, and open because its always free!" section

OpenBSD 3.8 has been officially released! Many improvements, new features, and new tools are introduced in this release like RAID management interface, IPsec management tool, UDF filesystem support, network interface aggregation, heap based buffer overflow detection, NFS write improvements, various code cleanup, and more. This release also includes the countermeasures against various ICMP attacks as described by Fernando Gont. See the detailed list of changes for more information. You can order the 3.8 CD set on the project's order page.