![[OpenBSD]](images/smalltitle.gif){kind=small}
Theo de Raadt held a BOF ("Birds Of a Feather", ie. a meeting of people interested in the same thing) about OpenBSD.
At this conference, the OpenBSD team sold 100 or so 2.1 release CDROMs.
Since this is the primary security conference, many speakers said very good things about our stance on security... particularily people like the L0phT.
The terminal room consisted primarily of Decstation running OpenBSD 2.1. Once again, the L0phT people had very good things to say about our security.
Niels held a talk about the problems of unencrypted TCP/IP connections, offering IPSEC as possible solution.
At this conference, Theo presented an evening talk which basically turned into a list of fixed security problems and cautionary tales about subsystems in which future problems may be encountered.
The terminal room PC's ran OpenBSD 2.2.
At Usenix 1998 there was a strong OpenBSD presence both in the Freenix and normal tracks. Theo did a general talk about what the OpenBSD project offers. Angelos held a panel about IPSEC (which is quite an OpenBSD topic since IPSEC development at that time was so much further ahead in OpenBSD than anywhere else).
The terminal room PC's ran OpenBSD 2.3. We sold many CDROMs. The first style of OpenBSD t-shirt also sold quite well.
Theo de Raadt presented a talk entitled "Auditing software for security" about the OpenBSD security auditing team's process and the lessons the team learned. The talk concentrated on how our process fixes bugs -- not just holes -- since one never knows when 5 bugs will act together to become a hole.
The router to the outside world was an OpenBSD 2.3 box. It was involved in a "capture the flag" competition in which an entire room of crackers attempted to break into it and machines running other operating systems. The OpenBSD box was not broken into.
Almost 100 CDROMs were sold (we ran out again). The primates at monkey.org brought 2.3 "wire-frame" OpenBSD t-shirts to the conference and sold almost 200 of them. The proceeds from the sales were donated to the OpenBSD project.
![[ORA Logo]](images/oraonline.gif)
OpenBSD team members will be on-hand to discuss OpenBSD's role among the other free software projects available as well as sell CDs and t-shirts.
Theo de Raadt spoke in a panel about Open/Free software with Eric Raymond and others.
An extensive after-action report was sent to advocacy@openbsd.org. While sales of shirts and CDROM's left much to be desired, we did have good opportunities to further project visibility and highlight its strengths.
At this conference, entirely devoted to IP, Niklas Hallqvist from the OpenBSD team held a talk on the IKE (a.k.a ISAKMP/Oakley) key management protocol and experiences from the implementation of isakmpd, an IKE implementation funded by Ericsson Radio Systems and developed primarily for the OpenBSD IPSEC stack.
Isakmpd will be shipped with OpenBSD after 2.4 is released.
Theo de Raadt gave a talk about security auditing, sponsored by CORE SDI S.A., an Argentinian security auditing company who strongly believes in the future of OpenBSD.
More than 10 OpenBSD team members showed up. By far, OpenBSD was the largest representative group from free software at the conference.
Usenix donated us a table in the vendor area where we sold 2.4 CDROMs, 2.3 "wire-frame" t-shirts, and the new 2.4 embroidered "Because security matters..." t-shirts, polos, and sweaters.
An OpenBSD BOF was held one evening, led by Theo de Raadt.
The terminal room ran OpenBSD 2.4 on 45 machines. Obviously people's trust in OpenBSD has increased, since numerous people who have not used the Usenix terminal room (due to security problems that have come from such use in the past) before were seen using the machines.
A PalmPilot schedule loader was at the membership booth, powered by OpenBSD.
OpenBSD was represented as one of about a dozen IPsec implementations who were tested for interoperability. The tests were successful, both for the technology in general, and for OpenBSD in specific. We managed to communicate encrypted with every vendor present, and to negotiate keys via IKE with everyone capable.
