On 8/26/18, nusenu nusenu-lists@riseup.net wrote:

Conrad Rockenhaus:

...

I just wanted to say congratulations to Nullvoid, who is currently running the second fastest exit in France in my colo in Europe.

allowing port 25 on purpose or accidentally?

Either way, up to the operator, some do it for the lols.

...

Also, go FreeBSD!

consider updating that tor version

Not a problem with FreeBSD.

Switch over to https and latest...

/etc/pkg/FreeBSD.conf:

url: "pkg+https://pkg.FreeBSD.org/$%7BABI%7D/latest",

and run 'pkg upgrade' .

If it's a shared box, you probably also want devcpu-data, and optionally cpupdate.

...

devcpu-data

Luckily, the instances aren’t running on shared boxes, each user runs on their own XenServer HVM instance, so they have dedicated control of their own instance.

Seem to recall, as with most re Spectre Meltdown FPU Etc, the Xen fixes require pairing of microcode and kernel support. Didn't look at it much so DYOR as needed.

Regardless, unless local testing indicates otherwise, running any CPU / hw without latest ucode firmware could be foolhardy.

As is continuing to clamor for, publicly support, and buy, anything that isn't...

#OpenFabs , #OpenHW , #OpenSW , #OpenDev , #OpenBiz

That's another topic elsewhere.

...

url: "pkg+https://pkg.FreeBSD.org/$%7BABI%7D/latest"

Egads. I had no idea HTTPS wasn't the default for pkg.

To bootstrap with that you'll have to install ca_root_nss manually. There's way to do that and other bits automagically over TLS, but it takes much setup, isn't ideal, nor free of various trust.

Some opensource OS's still resist even the most basic of things privacy / integrity / traceability / reproducible, for no unsolvable reasons, for years.

Ditto topic.

At least people are starting to progress both topics now.