Stefan Sperling
stsp@bsd.network
<p>Posting mostly about tech stuff I'm working on but happy to read and chat about non-tech stuff too. I'm grateful to be learning so much about the world from all of you.</p><p>Tech stuff I'm working on currently includes OpenBSD, Apache Subversion, Software Heritage, Game of Trees, <span class="h-card"><a href="https://exquisite.social/@gothub" class="u-url mention">@<span>gothub</span></a></span>, Dulwich, and Plakar.</p><p>Toots get auto-deleted after one month.</p>
Posts
-
View post
If you are using the bwfm(4) #wifi driver on #OpenBSD, consider updating to -current soon, which just received some fixes for a crafted wifi frame injection issue where according the report "memcpy() then attempts to copy 0xfffffff0 bytes into a fresh mbuf cluster. [...] With datalen 0xfffffff0 and no received payload, the unpatched kernel [...] reset immediately to the boot loader". Which sounds wild, but this reproducer injected fake ethernet frames into the driver via software hack...
-
View post
Every fatal firmware error fix depends on one guy on an IRC channel voluntarily and supportively looking up magic fimware error codes and explaining the implications to me. Bus factor: 1 And for some vendors like Qualcomm there is simply nobody to ask questions to. The Linux ath10k/11k/12k driver maintainer stopped years ago and hasn't been replaced as far as I know. Vendors should never have been allowed to stop providing public documentation for computers they are selling. #OpenBSD #wi...
-
View post
I will be hosting a #GameOfTrees version control system tutorial at #EuroBSDCon 2026, with @op@bsd.network as co-host (edit: Turns out Omar cannot make it; Johannes Thyssen Tishman will be co-hosting instead). This tutorial will be suitable for both #Git experts and complete beginners. The experts will probably spend significant effort temporarily unlearning some things they know, while the beginners will spend moderate effort learning some things they didn't know. Our goal is that both gro...
-
View post
I have published my initial #OpenBSD #WPA3 implementation. Thanks to @nlnet@social.nlnet.nl for supporting this effort. Cc @vanhoefm@infosec.exchange https://marc.info/?l=openbsd-tech&m=178437520390575&w=2
-
View post
I finally have the #WPA3 SAE handshake working on #OpenBSD media: IEEE802.11 autoselect (VHT-MCS1 mode 11ac) status: active ieee80211: join sae-testing chan 149 bssid 7e:8a:xx:xx:xx:xx 74% wpakey wpaprotos wpa2,wpa3 wpaakms psk,sha256-psk,sae wpaciphers ccmp wpagroupcipher ccmp powersave on (100ms sleep)
-
View post
Just in case anyone needs a bit of encouragement: It has always been and is still perfectly reasonable to fix bugs without LLMs. I found 7 WiFi driver bugs this evening and wrote fixes for each of them. With no more than vim-classic, grep, and debug prints. https://marc.info/?l=openbsd-tech&m=178204688871868&w=2 https://marc.info/?l=openbsd-tech&m=178208266083832&w=2
-
View post
The first ever successful SAE message exchange between #OpenBSD (iwx driver) and linux hostapd has occurred. There is still some work left do but the hard part is done! #WPA3 Cc @vanhoefm@infosec.exchange (EDIT: By the way, this exchange was using the randomly chosen secret numbers 2 and 3. Don't tell anyone!)
-
View post
If you are using #gameoftrees (on #OpenBSD or anywhere else) please always be diligent about checking SSH host key fingerprints. Versioned files inside the work tree&#39;s meta-data .got directory can be created during &#39;got checkout&#39; or changed during &#39;got update&#39;. Files in the meta-data directory should never be under version control, yet the current implementation unfortunately allows this. Which provides a way for malicious repositories to configure remot...
-
View post
Finally found out why Tx was broken with iwx(4) on Intel AX211 BZ devices. Another one of those bugs which cannot be found without persistence and some amount of good luck. https://marc.info/?l=openbsd-cvs&amp;m=177341485313105&amp;w=2 #OpenBSD #WiFi
-
View post
The LLM topic has been all over my mastodon feed for months. I find the consequences of LLM adoption depressing overall, with all the damage resulting in several segments of our societies worldwide. Until now, I have been ignoring LLMs, but there is increasing use of LLMs among customers of my company, which means I can no longer ignore this topic entirely. I observe use of LLMs mostly by people who don&#39;t write programs regularly, who are using these tools to fill gaps in their own ski...