www/press.html - diff

Return to press.html CVS log

Up to [local] / www

Diff for /www/Attic/press.html between version 1.111 and 1.112

version 1.111, 2000/06/24 22:42:57

version 1.112, 2000/06/26 00:25:47

Line 1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">

<html>

<head>

<title>OpenBSD Media Coverage</title>

</head>

<h2>Media Coverage</h2>

<h2>Media Coverage</h2>

<h3>

</h3>

<hr>

<hr />

<h3>English press coverage</h3>

<dl>

<h3><a id="en" name="en">English press coverage</a></h3>

<li>

<ul>

<li>

<a href="http://www.securityportal.com/closet/closet20000621.html">Securing

Your Network With OpenBSD</a>, Kurt's Closet, Security Portal, June 21, 2000

Kurt Seifried looks at some new features in OpenBSD 2.7 and recommends it

as a platform for patrolling your network. He also gives a sampling of

the many security tools available for intrusion detection, vulnerability

analysis and network management, all available from the

<a href="ports.html">"Ports" collection</a>.

</li>

<li>

<li>

<a href="reprints/pr27.html">OpenBSD 2.7 press release</a>, June 15, 2000

This press release was translated into several languages and distributed to the

trade press and Internet news sites.

</li>

<li>

<li>

<a href="http://www.bsdtoday.com/2000/June/News196.html">Coming

soon: a real-time OpenBSD?</a>, BSD Today, June 14, 2000

Randy Lewis of RTMX explains why they picked OpenBSD and how their real-time

extensions will be folded back into the OpenBSD source tree in time for the

next release. Interview by Jeremy C. Reed.

</li>

<li>

<li>

<a href="http://www.oreillynet.com/pub/a/bsd/2000/06/13/OpenBSD.html">Introduction

to OpenBSD Networking</a>, BSD DevCenter, O'Reilly Network, June 13, 2000

David Jorm, no stranger to OpenBSD, gives a detailed tour of the basic steps for

setting up an OpenBSD system as a gateway with a LAN interface and a PPP connection.

He also points out the little differences that could trip up somebody just

arriving from the Linux world.

</li>

<li>

<li>

<a href="http://www.unixreview.com/open_source/articles/0006bsd.shtml">The

state of the daemon</a>, UNIX Review, June 7, 2000

Michael Lucas reviews the state of the art for BSD-derived systems,

and finds much cause for optimism.

"OpenBSD delves further into constructive paranoia", he writes.

Agreed, security is a state of mind, but unless the rash of serious incidents

abates, it's not really paranoia.

</li>

<li>

<li>

<a href="http://www.infosecuritymag.com/jun2000/junopens.htm">Security

By DEFAULT</a>, OPEN SOURCES, Information Security, June 2000

OpenBSD is one OS that's likely to be voted "Most Secure."

"OpenBSD is one OS that's likely to be voted "Most Secure."

So why not use it for all enterprise apps? Columnist Pete Loshin

So why not use it for all enterprise apps?" Columnist Pete Loshin

looks at OpenBSD as a serious contender for secure Internet servers.

</li>

</ul>

<li>

<ul>

<li>

<a href="http://rootprompt.org/article.php3?article=493">Cracked! Part4: The

Sniffer</a>, # RootPrompt.org, May 31, 2000

Noel continues his chronicle of a cracker attack on his LAN.

In part 4, he notes that even local user vulnerabilities cannot

Line 107

Line 112

he mentions he would like to explore OpenBSD for systems that

need user accounts. The first three parts also make for interesting

reading for all system administrators.

</li>

<li>

<li>

<a href="http://www.computerworld.com/home/print.nsf/all/000526E30E">Flaw

found in PGP 5.0</a>, Computer World, May 26, 2000

PGP 5.0 was found to have a serious coding error under Linux and

OpenBSD, where it replaced the random data obtained from /dev/random

with a string of '1' digits when generating key pairs under certain

conditions.

</li>

<li>

<li>

<a href="http://www.beopen.com/features/articles/security_article.html">Security

Beyond the Garden of Eden</a>, BeOpen.com, May 19, 2000

Sam Williams strikes again. He interviews OpenBSD lead developer Theo de Raadt

and Tom Vogt, a lead developer of Nexus, a "maximum security" Linux

distribution unveiled on May 9. This article contrasts two different

approaches to security.

</li>

<li>

<li>

<a href="http://www.upside.com/texis/mvm/story?id=3921a9080">OpenBSD

perfects security by one-upmanship</a>, Upside Today, May 17, 2000

Freelance writer Sam Williams captures the dynamics of the OpenBSD

development effort in OpenBSD, dubbing it "geeking out for perfection".

Williams also takes note of OpenBSD's business-friendly non commercial

stance -- no corporate backers, yet plenty of commercial products

with embedded OpenBSD.

</li>

<li>

<li>

<a href="http://www.securityfocus.com/frames/?vdb=vdb&content=/vdb/stats.html">Vulnerability

Database Statistics</a>, Security Focus, May 15, 2000

"3 out of 2 people can't figure out statistics", the saying goes. In this light,

we'd like to present Security Focus's summary of vulnerabilities. Read

Line 154

Line 159

admit it makes OpenBSD look good compared to other widely used OSes.

We think the most important chart is the top one, total vulnerabilities.

The upward trend is disturbing; it means the industry still doesn't

"get it", and the users who trade off security for feature

creep are delivering the wrong message.

</li>

<li>

<li>

<a href="http://www.securityportal.com/closet/closet20000510.html">Why

We're Doomed to Failure</a>, Security Portal, May 10, 2000

Kurt Seifried talks about what people can do to promote security and

protect themselves against the now-commonplace attacks. His first

Line 172

Line 177

think he gave up too easily: by accepting mudflaps in the place of

airbags, he is taking the heat off software vendors to clean up the

defects in their products.

</li>

<li>

<li>

<a href="http://www.computerworld.com/home/print.nsf/all/000502db52">Open

Source Smugglers</a>, ComputerWorld, May 5, 2000

"Psssstt! Wanna a good, reliable operating system on the cheap? Thing is,

you just can't tell your boss about it" Technology writer Peter Wayner

tells of the techies who break the rules and sneak open source

systems on the job. He mentions the "security-conscious" OpenBSD as a

successful secure e-commerce server against an rival NT implementation,

as well as how Marcus Rannum embeds OpenBSD in the Network Flight Recorder

IDS appliance to sidestep NT vs. UNIX prejudices.

</li>

<li>

<li>

<a href="http://biz.yahoo.com/bw/000502/va_global__1.html">PowerCrypt

Encryption Accelerator Endorsed by OpenBSD</a>, Business Wire, May 2, 2000

Press release from Global Technologies Group, Inc. announcing OpenBSD

support for their PowerCrypt IPSec hardware accelerators cards.

</li>

<li>

<li>

<a href="http://www.bsdtoday.com/2000/May/Features138.html">An experience

installing OpenBSD</a>, BSD Today, May 2000

Another "how I installed OpenBSD" article. Jeremy C. Reed writes

a blow-by-blow, prompt & response chronicle of how he installed OpenBSD

2.6, to the point of setting up X, the blackbox window manager and

Netscape -- elapsed time, 4 hours and 38 minutes. Phew.

</li>

<li>

<li>

<a href="http://www.daemonnews.org/200005/adventure.html">My Adventures

In OpenBSD 2.6</a>, Daemon News, May 2000

Alison describes how she gave in to the geekier side of her nature and

rescued a castaway PC and put OpenBSD on it. "Contrary to popular

opinion, however, I think it's not just a matter of reliability," she

writes, "but also of clarity and simplicity - two very important and

oft-overlooked characteristics of computer software.".

</li>

</ul>

<h2>April, 2000</h2>

<li>

<ul>

<li>

<a href="http://e-zine.nluug.nl/hold.html?cid=91">Interview with OpenBSD's

Theo de Raadt</a>, eup E-zine,

Theo de Raadt</a>, eup E-zine,

April 20, 2000

In this interview by Daniel De Kok, lead developer Theo de Raadt comments

on the BSDI/FreeBSD merger, OpenBSD as an embedded OS, and future plans for

OpenBSD.

</li>

<li>

<li>

<a href="reprints/article_20000419.html">Security Experts Say Proprietary

Code Isn't Scrutinized Well Enough</a>, SOURCES, April 19, 2000

This bulletin discusses security concerns raised by recent reports of

vulnerabilities in commercial software such as backdoors and automatic

registration forms. The article quotes Jerry Harold, president & co-founder of

Network Security Technologies Inc. "This is why NetSec builds its products

on an operating system (OpenBSD) that has made security its number one goal."

</li>

<li>

<li>

<a href="http://securityportal.com/direct.cgi?/topnews/os20000417.html">Open

Source - Why it's Good for Security</a>, SecurityPortal.com, April 17, 2000

In another FUD-fighting article, security writer Kurt Seifried and

Bastille Linux project leader Jay Beale refute a recent well-circulated

article saying open source software is more vulnerable because the

black hats can find bugs just by reading the source. If this were the

case, they argue, OpenBSD could not have achieved its security record.

They counter the claim by demolishing "security through

obscurity", the myth that just won't go away.

</li>

<li>

<li>

<a href="http://www.securityfocus.com/commentary/19">Wide Open Source</a>,

SecurityFocus.com, April 16, 2000

Elias Levy of BUGTRAQ fame discusses the security of open- vs. closed-source

software. OpenBSD developers are mentioned first among a few groups of people

who care about auditing code for security vulnerabilities.

</li>

<li>

<li>

Bad Press</a>,

32Bits Online, April 2000

Slamming some recent press which had said that Open Source (and in particular

Linux) leads to more software security problems, Clifford Smith states

Linux) leads to more software security problems, Clifford Smith states

"If there is ONE definitive proof that the source code being opened up for

review provides the opportunity to create secure operating systems, OpenBSD

is that proof." (his emphasis)

</li>

</ul>

<h2>March, 2000</h2>

<li>

<ul>

<li>

<a href="http://securityportal.com/closet/closet20000329.html">Linux

is a security risk, I don't think so!</a>,

Security Portal, March 29, 2000

Columnist Kurt Seifried uses OpenBSD's code audit as an example to

refute a FUD piece on a major computer industry website that claims

that Linux is a security risk because the bad guys can find the holes

simply by reading the source code.

</li>

<li>

<li>

<a href="http://www.linux.com/interviews/20000308/44/">The

Kurt Seifried interview</a>, Linux.com, March 8, 2000

The roles have changed; security columnist Kurt Seifried is now the subject.

He discusses his role at <a href="http://www.securityportal.com/">Security

Line 307

Line 320

Linux hardening scripts like Bastille Linux. He's pessimistic about the

future and predicts that with management apathy towards security,

"we're in for 10-50 more years of miserable computer security problems".

</li>

<li>

<li>

Open source software: Ready for Credit Union Primetime, March 6, 2000

An article explaining the trade-offs of using open source software, how it

might be applied to credit union enterprises and some caveats about the

Line 320

Line 333

written for credit union IS managers. Unfortunately, it's on the

subscription-only portion of <a href="http://www.cuestechport.com/">CUES

Tech Port</a>, a web site for member credit unions.

</li>

<li>

<li>

<a href="http://www.sunworld.com/sunworldonline/swol-03-2000/f_swol-03-silicon.html">The

Unix players change, but the (r)evolution continues</a>, SunWorld, March 2000

Rich Morin puts the 80's UNIX history of fragmentation in perspective by

examining the creative tensions between the five operating systems derived

Line 334

Line 347

projects and companies cooperate even though they have diverging goals. And

now that Sun has cautiously moved to open source some of its source, how

will the open source world react, he asks.

</li>

<li>

<li>

<a href="http://boardwatch.internet.com/mag/2000/mar/bwm79.html">Getting

to know OpenBSD</a>, Boardwatch Magazine, March 2000

UNIX columnist Jeffrey Carl continues his survey of the freenix alternatives

for ISPs with an interview with Louis Bertrand. The author also discusses

the relative merits of OpenBSD and how ISPs might want to use it for a

competitive advantage.

</li>

</ul>

<h2>February, 2000</h2>

<li>

<ul>

<li>

<a href="http://securityportal.com/direct.cgi?/research/ssh-part2.html">All

About SSH - Part II: OpenSSH</a>, Security Portal, February 28, 2000

Seán Boran wraps up his look at SSH with an article devoted to OpenSSH

running on OpenBSD and other OSes, mentioning problems porting OpenSSH to

platforms without good crypto support.

</li>

<li>

<li>

<a href="http://securityportal.com/direct.cgi?/closet/closet20000216.html">Firewalling with IPF</a>, Security Portal, February 16, 2000

Kurt Seifried, author of the Linux Administrators Security Guide, explains

how to set up packet filtering with

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&apropos=0&sektion=8&manpath=OpenBSD+Current&format=html">ipf</a>. His examples are based on OpenBSD 2.6

even though his article isn't aimed at any specific OS.

</li>

<li>

<li>

<a href="http://securityportal.com/direct.cgi?/closet/closet20000209.html">OpenBSD 2.6 - new features</a>,

Security Portal, February 9, 2000

Kurt Seifried reviews OpenBSD 2.6 and finds new features like

<a href="http://www.openssh.com/">OpenSSH</a>, Apache

DSOs, and new device drivers. He also finds comfort in an old friend, the

"secure by default" installation.

</li>

<li>

<li>

<a href="http://www.computerworld.com/home/print.nsf/all/000207E972">Three

Unixlike systems may be better than Linux</a>, ComputerWorld, February 7, 2000

We really like Simson when he writes "But if you're trying to get the

most for your money or if you want a higher level of security, take a look at

the BSDs. The rewards can be considerable." But he misses the point

about strong crypto because of the fuss over 128-bit browsers. The RSA patent

has been a more effective muzzle on innovation than the export prohibitions.

Also note OpenBSD and FreeBSD also integrate IPv6 in their current codebase.

</li>

<li>

<li>

<a href="http://www.32bitsonline.com/article.php3?file=issues/200002/fbsd34&page=1">Review

of FreeBSD 3.4</a>, 32BitsOnline, February 2000

In a review of FreeBSD 3.4, the author, Clifford Smith, was impressed

enough about OpenBSD to say "OpenBSD is probably the most secure

distribution out of the box because it comes with a source code that has

been given a complete security audit. It also comes with KERBEROS enabled

out of the chute, OpenSSL and ssh is part of the distro now, too. IPFilter

works immediately. Just Brilliant."

</li>

<li>

<li>

<a href="http://www.infosecuritymag.com/feb2000/Linux.htm">Securing Linux</a>,

Information Security, February 2000

Pete Loshin surveys the state of the industry in Linux and UNIX-like

security. He highlights an emerging problem, novice Linux users

who may unknowingly leave installation holes, or inadvertently create some.

The OpenBSD sidebar explains the goals and purpose of OpenBSD, and highlights

its reputation among security experts.

</li>

<li>

<li>

<a href="http://www.osopinion.com/Opinions/KeithRankin%20/Keith%20Rankin1.html">FreeBSD,

OpenBSD and SuSE 6.2 Eval Review</a>, OS Opinion, February 2000

Can't decide? Let's try a bunch. Veteran computer jockey Keith Rankin

compares a Linux distro and two of the BSDs. Long and quite detailed.

</li>

</ul>

<h2>January, 2000</h2>

<li>

<ul>

<li>

<a href="http://www.epinions.com/cmd-review-7105-3AF042F-388EBC43-prod1">Secure

by default - a review of OpenBSD</a>, Epinions.com, January 26, 2000

OpenBSD gets a five-star rating in this reader contributed review by

Justin Roth. It's a short glowing article that focuses on the security

of OpenBSD. The reviewer cautions however that it's only secure if

the administrator is vigilant.

</li>

<li>

<li>

<a href="http://www.zdnet.com/enterprise/stories/linux/news/0,6423,2426206,00.html">Opening up, government style</a>, ZDNet, January 24, 2000

Linux columnist Evan Leibovitch notes a small victory for open source

when the US government recognised it as being for "the

Public Good" in the recently relaxed cryptography export rules.

He quotes Theo mentioning that the RSA patent has had a far greater

chilling effect on US-based cryptography than the export prohibitions.

</li>

<li>

<li>

"Info.sec.radio" radio show. 11:00AM, Monday, January 10, 2000

"Info.sec.radio" radio show. 11:00AM, Monday, January 10, 2000

<A href="http://www.cjsw.com">CJSW 90.9 FM campus radio in Calgary</a> in

<a href="http://www.cjsw.com">CJSW 90.9 FM campus radio in Calgary</a> in

association with <a href="http://www.securityfocus.com">SecurityFocus</a>

In the inaugural show of Info.sec.radio, Dean Turner of

Security Focus interviews Theo de Raadt about OpenBSD, security,

and cryptography.

</li>

<li>

<li>

Mudge, the halo and the 2.4 sticker</a>, MSNBC, January 6, 2000.

The beastie sticker from OpenBSD 2.4 was spotted on Mudge's laptop cover

in a file photo for this story about L0pht joining with corporate heavyweights.

</li>

<li>

<li>

<a href="http://www.nwfusion.com/newsletters/sec/0103sec2.html">Does 'open'

mean secure?</a>, NetworkWorld Fusion Newsletters, January 5, 2000

Security Portal founder Jim Reavis calls OpenBSD "Linux's Linux". We're not

sure what it means, but he was making the point that public scrutiny of

source code helps security, so it must be a compliment.

</li>

<li>

<li>

<a href="http://www.zdnet.com/sr/stories/news/0,4538,2416865,00.html">Giving

Back</a>, Sm@rt Reseller Online, January 4, 2000

Back</a>, Sm@rt Reseller Online, January 4, 2000

Linux columnist Steven J. Vaughan-Nichols writes mostly about VA Linux

creating a source repository for open source projects, but there's an

interesting quote: "Whether an open-source program runs on OpenBSD,

Palm or even Windows, so long as it's an open-source program it's game

for SourceForge." OpenBSD, soon to be a household word!

for SourceForge." OpenBSD, soon to be a household word!

</li>

<li>

<li>

<a href="http://www.sunworld.com/sunworldonline/swol-01-2000/swol-01-supersys.html">A

report from LISA</a>, SunWorld, January 2000

Columnist Peter Galvin gives a recap of LISA '99, mentioning among others

Bob Beck's <a href="events.html#lisa99">paper</a> about securing public

access Ethernet jacks on a university campus.

access Ethernet jacks on a university campus.

</li>

<li>

<li>

<a href="http://www.northernjourney.com/opensource/linside/li006.html">Canadian open source projects</a>, The Computer Paper, January 2000

OpenBSD is featured in a year-end review of Canadian Open Source projects

<a href="http://www.canadacomputes.com/cc/section/pub/1,1100,33,00.html?pub=1&iss=52">The Computer Paper</a>.

Linux columnist Gene Wilburn gets it right. Unfortunately, the article isn't on

the Computer Paper's site, but it is available at the author's site.

</li>

<li>

<li>

A Home-Grown Operating System?</a>, Alberta Venture Magazine,

January/February, 2000

Grace Casselman interviews Theo about the development process of OpenBSD.

</li>

</ul>

<h2>December, 1999</h2>

<li>

<ul>

<li>

<a href="http://securityportal.com/closet/closet19991222.html">OpenSource

projects - what I learned from Bastille (and others)</a>, Security

Portal, December 23, 1999

Kurt Seifried

(<a href="mailto:seifried@seifried.org">seifried@seifried.org</a>), security

analyst and author of the Linux Administrators Security Guide, discusses

the effort needed to create a Linux distribution. He mentions OpenBSD's

code audit as a reference point for securing the OS.

code audit as a reference point for securing the OS.

</li>

<li>

<li>

<a href="http://serverwatch.internet.com/news/1999_12_03_a.html">OpenBSD

2.6 Now Available</a>, Server Watch, December 3, 1999

Picked up on OpenBSD 2.6 press release.

</li>

<li>

<li>

<a href="http://www.tekpress.com/Archives/1999/Dec/openbsd.html">OpenBSD

Review</a>, TekPress.COM, December 1999

Vlad Sedach offers a detailed look at OpenBSD, its history, security stance

and cryptography. He notes the lack of

<a href="http://www.openbsd.org/smp.html">multiprocessor support</a>

but rates the security as best available, especially compared to NT.

</li>

</ul>

<h2>November, 1999</h2>

<li>

<ul>

<li>

<a href="http://linux.com/featured_articles/19991115/206/">Buddying

up to BSD: Part Three - Regrouping</a>, Linux.com, November 15, 1999

Reviewer Matt Michie responds to critics of his previous OpenBSD

article in an opinion piece that discusses OpenBSD and Linux advocacy.

</li>

<li>

<li>

OpenBSD comes close to security nirvana with a system that is

'secure by default'</a>, InfoWorld, November 8, 1999

Security Watch columnists Stuart McClure and Joel Scambray say good things

about OpenBSD's security stance. "As you've come to expect from us,

our faith in vendors' attention to security is waning, but OpenBSD

gives us hope. OpenBSD is a group that has done it

right -- or at least strives to".

</li>

<li>

<li>

<a href="http://www.linux.com/featured_articles/19991108/200/">Buddying

up to BSD: Part Two - OpenBSD</a>, Linux.com, November 8, 1999

Reviewer Matt Michie narrates his experience with an FTP installation

of OpenBSD 2.5 on an aging P-133. Despite trouble with the installation he

recommends it to experienced Linux users who wish to broaden their horizons.

Then the reader feedback flames him for his trouble.

</li>

<li><a href="http://slashdot.org/interviews/99/11/04/1716225.shtml">UK Royal Family webmaster prefers OpenBSD</a>,

<li><a href="http://slashdot.org/interviews/99/11/04/1716225.shtml">UK Royal Family webmaster prefers OpenBSD</a>,

Slashdot, November 4, 1999

Mick Morgan, of the UK's Central Computer and Telecommunications Agency,

answers Slashdot readers and talks about the design of a high profile

web site like the Royal Family's. In hindsight, he would have chosen

OpenBSD for its security aspects.

</li>

<li>

<li>

Turning on the Zedz</a>, ZDNet, November 2, 1999

Linux columnist Evan Leibovitch tries to make sense of the byzantine

US crypto laws and offers some alternative crypto software and

resources including OpenBSD and <a href="http://www.openssh.com/">OpenSSH</a>.

resources including OpenBSD and <a href="http://www.openssh.com/">OpenSSH</a>.

</li>

<li>

<li>

<a href="http://www.boardwatch.com/mag/99/nov/bwm77pg4.html">Freenix

flavors or, three demons and a penguin</a>, Boardwatch Magazine, November, 1999

Boardwatch Magazine's UNIX columnist Jeffrey Carl surveys the freenix choices

for ISPs. We debate his conclusion that security and functionality are

mutually exclusive choices. If that were the case, security conscious users

would unplug from the Net and just send faxes.

</li>

</ul>

<h2>October, 1999</h2>

<li><a href="http://securityportal.com/direct.cgi?/closet/closet19991027.html">OpenBSD - a secure alternative</a>,

<ul>

<li><a href="http://securityportal.com/direct.cgi?/closet/closet19991027.html">OpenBSD - a secure alternative</a>,

Security Portal, October 27 1999

Kurt Seifried

(<a href="mailto:seifried@seifried.org">seifried@seifried.org</a>), security

analyst and author of the Linux Administrators Security Guide,

discusses setting up an OpenBSD firewall.

</li>

<li><a href="http://slashdot.org/article.pl?sid=99/10/22/1157259&mode=thread">Interview with The Cult of the Dead Cow</a>,

<li><a href="http://slashdot.org/article.pl?sid=99/10/22/1157259&mode=thread">Interview with The Cult of the Dead Cow</a>,

Slashdot, October 22, 1999

In between cheeky and rude answers to slashdot reader questions, cDc'ers

mention OpenBSD's security model and code audit.

mention OpenBSD's security model and code audit.

</li>

<li><a href="http://www.lwn.net/1999/1014/security.phtml">The existence of OpenSSH-1.0 has been confirmed</a>,

<li><a href="http://www.lwn.net/1999/1014/security.phtml">The existence of OpenSSH-1.0 has been confirmed</a>,

Linux Weekly News, October 14, 1999

Linux Weekly News was the first non-BSD news agency to report the existence of

<a href=crypto.html#ssh>OpenSSH</a>, which will ship with OpenBSD 2.6.

<a href="crypto.html#ssh">OpenSSH</a>, which will ship with OpenBSD 2.6.

</li>

<li><a href="http://www10.nytimes.com/library/tech/99/10/biztech/articles/11code.html">Easing on Software Exports Has Limits</a>,

<li><a href="http://www10.nytimes.com/library/tech/99/10/biztech/articles/11code.html">Easing on Software Exports Has Limits</a>,

New York Times, October 11, 1999

Peter Wayner takes a closer look at some consequences of the US government's

restrictions on the export of strong cryptographic software, and finds no

small amount of irony. OpenBSD is prominently featured, along with a picture

of Theo de Raadt brandishing CD-ROMs. (No charge registration required to

read the NY Times on the web).

read the NY Times on the web).

</li>

<li><a href="http://www.netsec.net/press_100699.html">NSTI announces commercial support services for OpenBSD</a>,

<li><a href="http://www.netsec.net/press_100699.html">NSTI announces commercial support services for OpenBSD</a>,

Yahoo News, Oct. 6, 1999

Network Security Technologies press release on the PR Newswire. NSTI

already uses OpenBSD in their Network Ops Center.

already uses OpenBSD in their Network Ops Center.

</li>

<li>

<li>

<a href="http://www.daemonnews.org/199910/openbsd.html">I've been hacked!

How OpenBSD saved our project</a>, Daemon News, October 1999

Overworked system administrator John Horn tells us about his adventures with

a publicly-accessible Lynx server.

a publicly-accessible Lynx server.

</li>

</ul>

<h2>September, 1999</h2>

<li><a href=http://www.calgaryherald.com/business/technology/stories/990930/2929913.html>Calgarian heads team ensuring OpenBSD security</a>,

<ul>

<li><a href="http://www.calgaryherald.com/business/technology/stories/990930/2929913.html">Calgarian heads team ensuring OpenBSD security</a>,

Calgary Herald, Sept. 30, 1999

Technology reporter Matthew McClearn interviewed system administrators and

security specialists in Calgary and Edmonton who choose OpenBSD for its

stability and proactive security audit. He also gives some project history.

stability and proactive security audit. He also gives some project history.

</li>

<li>

<li>

Small town in Kentucky has Internet connectivity unlike the rest of

America, MSNBC, Sept. 29, 1999

America, MSNBC, Sept. 29, 1999

Jethro reports on the mailing lists that MSNBC aired a segment about a small

town in Kentucky with high-speed Internet connectivity. During an interview

with the town's teenage security guru, you could read the prompt on his

terminal:

<code>Connected to spanweb.glasgow-ky.com.

<pre>

Escape character is '^]'.

Connected to spanweb.glasgow-ky.com.

Escape character is '^]'.

OpenBSD/mac68k (spanweb.glasgow-ky.com) (ttyp0)

</code>

</blockquote>

<li>

OpenBSD/mac68k (spanweb.glasgow-ky.com) (ttyp0)

<a href="http://www.infoworld.com/cgi-bin/displayStory.pl?/features/990927hack.htm">Hack this! Microsoft and its critics dispute software-security issues, but users make the final call</a>, Infoworld, Sept. 27, 1999

</pre>

<li><a href="http://www.cnn.com/TECH/computing/9909/28/ms.security.idg/index.html">Microsoft: Bad security, or bad press?</a>, CNN, Sept. 28, 1999

</li>

<li>

<a href="http://www.cnn.com/TECH/computing/9909/28/ms.security.idg/index.html">Microsoft: Bad security, or bad press?</a>, CNN, Sept. 28, 1999

A scathing look at the Microsoft "Insecure by Default" scheme quotes the

CDC as saying that "The most secure platform 'out of the box' is OpenBSD,

because security is a focus on the project". Contrast the Microsoft scheme

with <a href=security.html#default>ours</a>.

with <a href="security.html#default">ours</a>.

</li>

<li>

<li>

<a href="http://www.usatoday.com/life/cyber/tech/ctg183.htm">Open source has roots in the Net</a>, USA Today, Sept. 20, 1999

Nice high profile mention of OpenBSD by Will Rodger:

"Yet backers say the speed and transparency with which open source

Line 716

Line 764

operations from traditional software shops. OpenBSD -- still another

open source operating system -- is often called the most secure

operating system in the world."

</li>

<li>

<li>

Even better than Linux, <a href="http://www.boston.com/globe/">Boston Globe</a>, Sept 16, 1999

Even better than Linux, <a href="http://www.boston.com/globe/">Boston Globe</a>, Sept 16, 1999

Technology writer Simson L. Garfinkel confesses he prefers the BSDs better

than Linux and explains why. He writes a nice paragraph or two about OpenBSD

and its security and cryptography goals. However, reading this, you'd think

all the developers were Canadian (hint: they're not). The article has moved

to the archives, free registration required.

</li>

<li>

<li>

<a href="http://www2.idg.com.au/CWT1997.nsf/Home+page/83CB1A288A3B3EB54A2567E5001FEF41?OpenDocument">Microsoft,

Linux to become duopoly?</a>, ComputerWorld Australia, Sept 8, 1999.

Reporter Natasha David interviews lead developer Theo de Raadt, who notes that cross-UNIX

compatibility is losing ground in the rush for Linux applications. de Raadt

was a keynote speaker at the Australian Unix User Group (AUUG) meeting in

Melbourne.

Melbourne.

</li>

<li>

<li>

<a href="http://www.idg.net/idgns/1999/09/08/GNULaunchesFreeEncryptionTool.shtml">GNU

launches free encryption tool</a>, IDG News Service, September 08, 1999

<a href="http://www.gnupg.org/">GNU Privacy Guard</a> runs fine on OpenBSD.

<a href="http://www.gnupg.org/">GNU Privacy Guard</a> runs fine on OpenBSD.

</li>

<li>

<li>

<a href="http://www.samag.com/archive/0809/feature.shtml">Maintaining

Patch Levels with Open Source BSDs</a>, SysAdmin feature article, Sept. 1999

Michael Lucas explains the broad lines of the BSD development model and

how to keep *BSD systems up-to-date with CVS. The author takes most of the

examples from FreeBSD, but he takes the time to explain differences

between the three systems. (Most of this is technology was originally

invented by the earliest OpenBSD developers, as described in a

<a href=events.html#anoncvs_paper>paper presented at Usenix</a>).

<a href="events.html#anoncvs_paper">paper presented at Usenix</a>).

</li>

<li>

<li>

My own private IRP</a>, open source IT tutorial, Sept. 1999

Sean Sosik-Hamor descibes how he built up his own Internet resource provider

(IRP) and web hosting business out of available hardware and freenix

software. He chose OpenBSD exclusively for his DMZ and describes the FTP

installation.

</li>

<li>

<li>

<a href="http://www2.idg.com.au/CWT1997.nsf/cwtoday/C02D91FFCD8CD68A4A2567F3007A9A05?OpenDocument">India-based

Web site offers raft of free OSes</a>,

ComputerWorld Australia, September 1999

ComputerWorld Australia, September 1999

OpenBSD is one of many free OSes offered at <a href="http://www.freeos.com/">FreeOS</a>,

an India-based alternative OS news and portal site.

an India-based alternative OS news and portal site.

</li>

</ul>

<h2>August, 1999</h2>

<li>

<ul>

<li>

A Secure and Open Society</a>,

ComputerWorld Canada, Aug 27, 1999

ComputerWorld Canada, Aug 27, 1999

The article starts off as a personal story about lead developer Theo de Raadt,

but if you read carefully, it does explain a lot about the origins and goals

of OpenBSD.

</li>

<li>

<li>

1999's Technically Excellent Canadians</a>,

COMPUTERMAGS.COM, Aug 10, 1999

COMPUTERMAGS.COM, Aug 10, 1999

"CCW is very pleased to name our five Technically Excellent Canadians,

who are significantly impacting on technology both at home and

Line 801

Line 857

The Computer Paper (September 1999) presented this award

to Theo de Raadt for his part in OpenBSD (the sub-article is half

way down the page).

</li>

</ul>

<li>

<ul>

<li>

The Net's stealth operating system</a>, MSNBC, July 22, 1999

The Net's stealth operating system</a>, MSNBC, July 22, 1999

"The OpenBSD group, which did a line-by-line security audit of BSD

code, and now has what is widely regarded as the most secure OS

available."

</li>

</ul>

<li>

<ul>

<li>

<a href="http://www.data.com/issue/990607/ipsec.html">IPsec Tech Tutorial</a>,

Data Communications, June 1999

Data Communications, June 1999

"IPsec may be an open standard, but that's no guarantee that different

vendors' gear will work together. To assess interoperability, we put an even

dozen products through their paces." OpenBSD 2.4 and commercial IPsec

implementations were tested by an independent lab for interoperability

and ease in setting up tunneling gateways.

</li>

<li>

<li>

<a href="http://www.sunworld.com/swol-06-1999/swol-06-usenix.html?IDG.net">A

glimpse at the USENIX Technical Conference</a>, SunWorld, June 1999

In a review of this year's event subtitled "USENIX

and Unix -- then and now", writer Vicki Brown contrasts the first

conference in 1979 to the recent one in Montery, California. Although it

only mentions OpenBSD in the links section below the article, it's still

an interesting read.

</li>

</ul>

<li>

<ul>

<li>

Operating system designed to foil hackers</a>,

National Post, May 25, 1999

National Post, May 25, 1999

The Post's technology reporter David Akin interviews Theo de Raadt for

in a story that ran on the front page of the business section.

</li>

<li>

<li>

OS Also-Rans: After Windows 98, Mac OS and Linux, what's left for your

Macintosh or Intel PC? Lots</a>, St.Paul-Minneapolis Pioneer-Planet, May 17 1999

Despite the terrible title, staff writer Julio Ojeda-Zapata gives fair

treatment to the alternatives.

treatment to the alternatives.

</li>

<li>

<li>

<a href="http://www.daemonnews.org/199905/open-japan.html">In Search of OpenBSD</a>, DaemonNews, May 1999

<a href="http://www.daemonnews.org/199905/open-japan.html">In Search of OpenBSD</a>, DaemonNews, May 1999

Ejovi Nuwere in Japan: three days, three locations, one operating system.

Ejovi Nuwere in Japan: three days, three locations, one operating system.

</li>

<li>

<li>

<a href="http://www.daemonnews.org/199905/chroot.html">Safe and friendly

read-only chroot jails for FTP and WWW</a>, DaemonNews, May 1999

"Ruffy" explains how to set up safe and friendly read-only FTP and WWW services

with OpenBSD's ftpd as an example.

with OpenBSD's ftpd as an example.

</li>

</ul>

<h2>March, 1999</h2>

<li>

<ul>

<li>

Why to BSD in a Linux world</a>, March, 1999

Why to BSD in a Linux world</a>, March, 1999

Description of the OpenBSD development process, and arguments as to why

Linux probably cannot achieve the same level of security audit.

</li>

<li>

<li>

<a href="http://archive.infoworld.com/cgi-bin/displayNew.pl?/peer/990308pp.htm">Alternative

OSes face a Sisyphean struggle to get into the PC mainstream</a>, Infoworld, March 8, 1999

Guest columnist Brett Arquette points out that Linux isn't the only alternative

PC OS out there, then describes why hardware drivers and end user support is

crucial to popularising an OS. He mentions OpenBSD and adds a link to this

site.

site.

</li>

</ul>

<h2>February, 1999</h2>

<ul>

<li>

<li>

NFR Performance Testing</a>, report written by

<a href="http://www.anzen.com">Anzen</a>. February, 1999

<a href="http://www.anzen.com">Anzen</a>. February, 1999

This report compares the network monitoring performance of the

<a href="http://www.nfr.net">NFR (Network Flight Recorder)</a> package at

Line 906

Line 985

Linux, and Solaris. OpenBSD comes out as a clear winner just for raw

performance; even before you consider the superior security of OpenBSD

which you probably would want for a network-monitoring station.

</li>

<li>

<li>

DaemonNews: Serving NT filesystems from an OpenBSD server</a>

February, 1999

February, 1999

A system administrator debunks the myth that you must use NT as a file server

when you run Windows clients. Squeezing performance out of vintage hardware and

adding in some scripts to automate the setup of new projects won management

over to OpenBSD.

</li>

<li>

<li>

Security Watch, end of year Golden Guardian awards.</a>

February, 1999

February, 1999

"Finally, we'd be remiss in ignoring OpenBSD in any discussion of top

open-source security products. It registered high in our e-mail

survey, and we promise to take a more active look at it in future

columns."

</li>

</ul>

<h2>January, 1999</h2>

<li>

<ul>

<li>

<a href="http://www.planetit.com/techcenters/docs/linux/technology/PIT19990701S0039/">Open-Source

Software: Power to the People</a>, Data Communications, January 4, 1999

Columnist Lee Bruno marvels that free software is serving alongside name-brand

software. Page three mentions OpenBSD in the roundup.

software. Page three mentions OpenBSD in the roundup.

</li>

<li>

<li>

<a href="http://www.sunworld.com/sunworldonline/swol-01-1999/swol-01-bsd_p.html">The

return of BSD</a>, SunWorld, January 1999

return of BSD</a>, SunWorld, January 1999

BSD veteran Greg Lehey notes the strong loyalty of SunOS 4 users and surveys the

BSD-derived OSes available on SPARC and PC hardware. The article also comes with

a long list of useful links (some are stale).

a long list of useful links (some are stale).

</li>

</ul>

<h2>November, 1998</h2>

<li>

<ul>

<li>

OpenBSD and IPSec, leading the pack</a>, November, 1998

A two-part article by Ejovi Nuwere focusing on OpenBSD's IPSec Development.

Part one is an introduction to OpenBSD's Photurisd and its current

Implementation, including a brief interview with

Photurisd creator Neils Provos.

</li>

</ul>

<h2>August, 1998</h2>

<li>

<ul>

<li>

Beyond HOPE coverage, Wired Magazine</a>, Aug 11, 1997

Beyond HOPE coverage, Wired Magazine</a>, Aug 11, 1997

Completely bogus (but quite amusing) description of what

OpenBSD is.

</li>

</ul>

<li>

<ul>

<li>

Security Watch: Monthly Editorial.</a>

July, 1998

July, 1998

Points at our <a href="http://www.openbsd.org/security.html">security page</a>

calling it "OpenBSD's mantra".

</li>

Wired Magazine</a>, June 1998, page 96 (paper edition only)

Wired Magazine</a>, June 1998, page 96 (paper edition only)

A half-page description of what OpenBSD is, with a strange picture

of project founder Theo de Raadt (Wired loves Photoshop).

</li>

</ul>

<li>

<ul>

<li>

WebServer Online</A>, reprinted in

WebServer Online</a>, reprinted in

Server/Workstation Expert (formerly

SunExpert Magazine)</a>, June 1998, page 81

SunExpert Magazine)</a>, June 1998, page 81

A glowing four-page description of OpenBSD emphasizing its use

as a server and an OS that ships with security in the box

(the SunExpert version is in PDF but includes their own

graphic - a cross between Superman and the BSD Daemon, which

the WebServer version in HTML does not).

</li>

</ul>

<li>

<ul>

<li>

Usenix coverage, Wired Magazine</a>, May 1, 1998

Usenix coverage, Wired Magazine</a>, May 1, 1998

Mention of OpenBSD with regards to our involvement in the

Freenix track held at Usenix in New Orleans.

</li>

</dl>

</ul>

<hr>

<hr />

<h3>Swedish press coverage (in Swedish)</h3>

<h3><a id="se" name="se">Swedish press coverage (in Swedish)</a></h3>

<dl>

<ul>

<li>

<li>

Säkerhet & Sekretess</a>, No 4, 2000

Säkerhet & Sekretess</a>, No 4, 2000

This article reports in a positive tone on OpenBSD's latest security feature,

hardware-supported cryptography.

</li>

</dl>

</ul>

<dl>

<ul>

<li>

<li>

Computer Sweden</a>, May 2, 2000

Computer Sweden</a>, May 2, 2000

An article describing *BSD as the choice of the "very demanding".

OpenBSD is noted for its focus on security and cryptography.

</li>

</dl>

</ul>

<h2>November, 1998</h2>

<dl>

<ul>

<li>

<li>

Datateknik</a>, Nov 20, 1998

Datateknik</a>, Nov 20, 1998

An article on the swedish <a href="events.html#ipsec98">IPSec interop</a> event

mentions OpenBSD as one of the successful participants, and has a

mini-interview with OpenBSD developer Niklas Hallqvist.

</li>

<li>

<li>

Datateknik</a>, Nov 13, 1998 and

Datateknik</a>, Nov 14, 1998

Datateknik</a>, Nov 14, 1998

Two published letters talking about OpenBSD's role in MacOS X. The first

one has some misconceptions which are corrected by the second which

explains the licensing issues and points to our

<a href="policy.html">copyright policy</a> page.

</li>

</dl>

</ul>

<hr>

<hr />

<h3>Japan press coverage (in Japanese)</h3>

<dl>

<h3><a id="jp" name="jp">Japan press coverage (in Japanese)</a></h3>

<h2>September, 1999</h2>

<li>

<ul>

<li>

<a href="http://www.ascii.co.jp/books/bsd/index.html">BSD Magazine</a>,

Sept. 28, 1999

ASCII Corporation is launching a Japanese language magazine that covers the

freenix BSDs, BSD/OS and related subjects. The magazine will also be

translating and reprinting articles from

<a href="http://www.daemonnews.org/">Daemon News</a>, the BSD ezine.

</li>

</dl>

</ul>

<hr>

<hr />

<h3>Germany press coverage (in German)</h3>

<dl>

<h3><a id="de" name="de">Germany press coverage (in German)</a></h3>

<h2>February, 2000</h2>

<li>

<ul>

<li>

<a href="http://linux.kbst.bund.de/index.html">Open Source Software in der Bundesverwaltung</a>, Bundesministerium des Innern,

Februar 2000

A paper on open source software in the German federal government,

published by the Federal Ministry of the Interior. The paper, which

gave reference to OpenBSD among many other OSes and applications, was

posted then retracted on "orders from above" in the ministry.

Giving way to

the pressure and protests</a> of the open source movement the ministry

rerelased the document after cutting out some numbers.

(the Microsoft Licence fees, btw.!)

</li>

</ul>

<h2>December, 1999</h2>

<li>

<ul>

<li>

OpenBSD 2.6 ist da</a>, heise online newsticker, December 2, 1999

Brief summary of the OpenBSD 2.6 press release.

</li>

</dl>

</ul>

<hr>

<h3>Russian press coverage (in Russian)</h3>

<dl>

<hr />

<h3><a id="ru" name="ru">Russian press coverage (in Russian)</a></h3>

<h2>January, 2000</h2>

<li>

<ul>

<li>

Byte Magazine, Russia,

<a href="http://byte.piter-press.ru/magazine/1.17.2000">January 2000 issue</a>

Interview with Theo de Raadt about history and feature of OpenBSD project.

</li>

</ul>

<li>

<ul>

<li>

Byte Magazine, Russia,

<a href="http://byte.piter-press.ru/magazine/7-8.11-12.1999">July/August 1999 issue</a>.

A review of OpenBSD 2.5 and OpenBSD project goals.

</li>

</dl>

</ul>

<hr>

<hr />

<h3>Poland press coverage (in Polish)</h3>

<dl>

<li>

<h3><a id="pl" name="pl">Poland press coverage (in Polish)</a></h3>

<ul>

<li>

<a href="http://www.linux.news.pl/openbsd.html">OpenBSD - ma same zalety?</a>,

OpenBSD - Nothing but advantages?, LinuxNews Serwis Informacyjny,

January 2000

Bartek Rozkrut combines an overview of OpenBSD with a review of how to

download and install the system. He mentions Theo de Raadt's "craze"

Line 1173

Line 1292

mails like "the problem was fixed a year ago in OpenBSD".

The author spends some time explaining the disklabel partitioning scheme and

reassuring would-be users that the no-frills installation script actually

works even though it doesn't have a fancy point & click interface. He even

gives typical download times from the various national ISPs.

gives typical download times from the various national ISPs.

Thanks to Vadim Vygonets, Wojciech Scigala and Tenyen for their help

with the translation. For the full text, see the

<a href="http://www.openbsd.org/mail.html">advocacy@openbsd.org

mail archives</a>. Interpretation errors are mine --louis

</li>

</dl>

<hr>

</ul>

<a href=mailto:www@openbsd.org>www@openbsd.org</a>

<hr />

$OpenBSD$

<a href="mailto:www@openbsd.org">www@openbsd.org</a>

$OpenBSD$

</body>

</html>