共 8 篇文章。
很久以前我曾经建议过别人使用足够长的一大串英文单词作为密码，现时这样做已经完全不能保障安全了。
Colin Percival最近在 一篇文章 中提到了这样的数据：使用价值 $10k 的 GPU 破解使用MD5的34位英文密码（例如"You will never guess this password"）所需要的时间仅为两小时（如果使用专用的硬件，以$1M投资的ASIC可以在一秒之内完成破解）。如果密码长度不够长的话，采用了特殊符号的帮助也不大。足够复杂的8位密码，例如"6,uh3y[a"使用 $10k 的 GPU 破解只需10个小时。
Colin has finally added portsnap and related stuff (bsdiff, etc) to FreeBSD 7.0-CURRENT. This would not be MFC’ed before 6.0-RELEASE, but still good enough because it will attract more users to use it.
Portsnap is a secure and efficient alternative to the current ports tree update approach. Since it goes through HTTP, it is much easier than other existing methods to use it to obtain ports, especially from some brain-damaged administrated networks.
This is an important step of getting the tools like freebsd-update and portsnap into base system, which provides good method of updating the base system (through binary updates) and ports tree.
Colin Percival has released his paper about a complex security issue that accompany with Intel HyperThreading Technology. This has became FreeBSD Security Advisory SA-05:09.htt.
Colin is very effective man that has made some changes to the kernel, and so@ has approved this, and 5.4-RELEASE gets its first patchlevel.
I’m happy that this did not forced me to go to the hosting provider :-)
Today, Colin has committed three security fixes that addresses three medium-risk security issues in FreeBSD kernel. That results in p11, p12 and p13 of FreeBSD 5.3-RELEASE, and has been committed to RELENG_5_4 as well so we will get that in the final release build.
Ken Smith has announced the tagging (with a mini heads-up in developers@), and then committed the naming (5.4-RELEASE) to the RELENG_5_4 tree. After that, RELENG_5_4 was tagged as RELENG_5_4_0_RELEASE, which is the last step of the release engineering that is related to the src/tree.
Please note that, this is not the final step of the final release. FreeBSD is very careful about the quality (not only as opposed to the kernel with colorful history of its security record, which is released under GPL and often release from time to time, haha, you know which is that) of a release, therefore, tagging does not mean that “we made it”, that is just a stage. Please be patient to wait for the PGP signed 5.4-RELEASE announcement BEFORE you download isos, even they were found on any sites.
Robert Watson wrote:
Please welcome Colin Percival, our newest src committer. Colin has been using and abusing FreeBSD for several years, but in the past couple has produced “FreeBSD update”, and a host of bugfixes and changes from that work. Colin will be picking up his own PRs to merge, and picking up some others. Let this be a lesson to you all: no good deed goes unpunished. I’ll be his mentor.