Hacker News: brynet

New comment by brynet in "Ask HN: What Are You Working On? (April 2026)"

brynet — Mon, 13 Apr 2026 09:58:32 +0000

Making rent as an open source developer.

Shamelessly trying to attract new monthly sponsors and people willing to buy me the occasional pizza with my crap HTML skills.

https://brynet.ca/wallofpizza.html

New comment by brynet in "FreeBSD Capsicum vs. Linux Seccomp Process Sandboxing"

brynet — Mon, 09 Mar 2026 21:28:50 +0000

> EDIT: Article seems to have been updated to remove mention of Chromium.

Archive: https://archive.ph/rLmTq

New comment by brynet in "FreeBSD Capsicum vs. Linux Seccomp Process Sandboxing"

brynet — Mon, 09 Mar 2026 20:50:57 +0000

It's very difficult to reason about, for instance compare the OpenSSH sshd sandbox implementations.

https://github.com/openssh/openssh-portable/blob/master/sshd...

https://github.com/openssh/openssh-portable/blob/master/sand...

w/ Capsicum, beyond faffing around with some file descriptors, it's unclear what security cap_enter() adds:

https://github.com/openssh/openssh-portable/blob/master/sand...

New comment by brynet in "FreeBSD Capsicum vs. Linux Seccomp Process Sandboxing"

brynet — Mon, 09 Mar 2026 19:27:44 +0000

EDIT: Article seems to have been updated to remove mention of Chromium.

This article contains a lot of errors, for example Chromium on FreeBSD does NOT use Capsicum, it never has. That was experimental and invasive work done 17 years ago that was NEVER committed to their official ports repository. In fact, not a single browser on FreeBSD uses Capsicum or any form of sandboxing _at all_.

https://github.com/rwatson/chromium-capsicum

https://www.freshports.org/www/chromium/

https://cgit.freebsd.org/ports/log/www/chromium/Makefile?qt=...

Contrast that with OpenBSD, where the Chromium port has used pledge(2) since January 2016, and unveil(2) since 2018. Both are enabled by default. Mozilla Firefox ports also use both pledge and unveil since 2018-2019, with refinements over the years.

https://marc.info/?l=openbsd-ports-cvs&m=145211683609002&w=2

https://marc.info/?l=openbsd-ports-cvs&m=153250162128188&w=2

OpenBSD's fork of tcpdump has been privsep for ~22 years, and its packet parser runs with no privileges. It's pledged tightly "stdio" and has no network/filesystem access, and uses OpenBSD specific innovations like bpf descriptor locking (BIOCLOCK) missing from both FreeBSD/Linux tcpdump today (despite FreeBSD adding the ioctl in 2005).

In the years since it was added, the reason Capsicum has only been applied to a handful of utilities is because it's a tree barren of decades worth of incremental work on privilege separation and security research.

New comment by brynet in "Ask HN: What Are You Working On? (March 2026)"

brynet — Mon, 09 Mar 2026 01:07:59 +0000

Making rent as an open source developer.

Shamelessly trying to attract new monthly sponsors and people willing to buy me the occasional pizza with my crap HTML skills.

https://brynet.ca/wallofpizza.html

New comment by brynet in "OpenBSD on SGI: A Rollercoaster Story"

brynet — Fri, 06 Mar 2026 18:31:52 +0000

I didn't say Loogson the company was dead, or that LoongArch was either. I said the predecessor Loongson/Godson CPUs are, like the 2E and 2F, which were MIPS-compatible. They're not manufactured anymore, and were practically unobtainium when they were.

LoongArch is not MIPS, despite it having similarities. It's a new platform/ISA and requires a completely different toolchain and new OS port.

It is not at all "new MIPS-family hardware is being made today" like you originally wrote, and it has little to no relevance to SGI hardware.

New comment by brynet in "OpenBSD on SGI: A Rollercoaster Story"

brynet — Fri, 06 Mar 2026 14:30:44 +0000

AFAIK Loongson is dead and isn't made anymore, and unlike OpenBSD/sgi, Loongson was a little-endian arch. OpenBSD/octeon is a closer match, but also discontinued as Cavium switched to making ARM CPUs.

LoongArch is a new ISA and isn't MIPS compatible, and OpenBSD doesn't support it.

New comment by brynet in "OpenBSD on SGI: A Rollercoaster Story"

brynet — Thu, 05 Mar 2026 19:23:39 +0000

There is someone on GitHub who's been trying to keep OpenBSD/sgi alive out-of-tree using bits and pieces (e.g: userland binaries) of OpenBSD/octeon, which remains supported.

https://github.com/the-machine-hall/openbsd-sgi

OpenBSD on SGI: A Rollercoaster Story

brynet — Thu, 05 Mar 2026 06:16:36 +0000

Article URL: http://miod.online.fr/software/openbsd/stories/sgiall.html

Comments URL: https://news.ycombinator.com/item?id=47258169

Points: 85

# Comments: 10

New comment by brynet in "Motorola announces a partnership with GrapheneOS"

brynet — Mon, 02 Mar 2026 08:20:24 +0000

Congrats to Daniel and the team.

New comment by brynet in "Ask HN: What are you working on? (February 2026)"

brynet — Mon, 09 Feb 2026 04:19:01 +0000

Making rent as an open source developer.

Shamelessly attracting new monthly sponsors and people willing to buy me the occasional pizza with my crappy HTML skills.

https://brynet.ca/wallofpizza.html

New comment by brynet in "Adventure Game Studio: OSS software for creating adventure games"

brynet — Sun, 01 Feb 2026 16:16:53 +0000

ScummVM added support for AGS a few releases back, it works great for a number of free/commercial games.

https://wiki.scummvm.org/index.php?title=AGS/Games

New comment by brynet in "Adventure Game Studio: OSS software for creating adventure games"

brynet — Sun, 01 Feb 2026 16:14:10 +0000

Yes they still do, and fun fact, SummVM has integrated support for AGS a few releases back, so one of my favourite titles from Wadjet Eye Games, Unavowed, works great on a ton of different OSes/platforms.

https://wiki.scummvm.org/index.php?title=AGS/Games

I've played it on OpenBSD before!

https://pobsd.chocolatines.org/2953591878

New comment by brynet in "Ask HN: Who do you follow via RSS feed?"

brynet — Tue, 27 Jan 2026 08:01:52 +0000

Shamelessly, I have a low volume rss feed for my static-HTML articles, but I'm also using rss for the embedded mastodon feed on my website.

https://brynet.ca/

New comment by brynet in "OpenBSD-current now runs as guest under Apple Hypervisor"

brynet — Fri, 16 Jan 2026 16:45:44 +0000

tmux was my first OpenBSD port, way back in 2008, albeit it was rather short-lived.

https://marc.info/?l=openbsd-ports-cvs&m=121226747005033&w=2

I had discovered it searching on SourceForge originally, but the tmux creator Nicholas Marriott was already an OpenBSD user and he took MAINTAINER for the port.

A year later, tmux was imported by nicm@ to the OpenBSD base system, where it has remained upstream for last 16 years (GitHub sync's from OpenBSD).

https://marc.info/?l=openbsd-cvs&m=124389728412353&w=2

New comment by brynet in "Ask HN: Share your personal website"

brynet — Wed, 14 Jan 2026 22:13:49 +0000

https://brynet.ca

OpenBSD, static articles, microblogging, etc.

Can you find the Easter egg? Hint: "Praetorian"

https://brynet.ca/wallofpizza.html

Wall of pizza.

New comment by brynet in "Ask HN: What are you working on? (January 2026)"

brynet — Tue, 13 Jan 2026 06:36:14 +0000

I'd like to hope my past work, and activity on social media/forums/mailing lists have been helpful in some way... although I admit I could probably do better. I haven't always been that good at self-promotion.

I'm sorry I don't have a better answer, unfortunately.

New comment by brynet in "Ask HN: What are you working on? (January 2026)"

brynet — Sun, 11 Jan 2026 18:38:16 +0000

Making rent as an open source developer.

Attracting new monthly sponsors and people willing to buy me the occasional pizza with my crappy HTML skills.

https://brynet.ca/wallofpizza.html

New comment by brynet in "Ask HN: Anyone still using RSS feeds?"

brynet — Wed, 31 Dec 2025 20:56:16 +0000

I have a low volume rss feed for my static-HTML articles, but I'm also using rss for the embedded mastodon feed on my website.

https://brynet.ca/

New comment by brynet in "Ask HN: What are your predictions for 2026?"

brynet — Wed, 17 Dec 2025 05:14:43 +0000

I finally get adopted by a nice family of sentient pizzas in 2026.

https://brynet.ca/wallofpizza.html