From george at ceetonetechnology.com Tue Jun 2 06:35:25 2026 From: george at ceetonetechnology.com (George Rosamond) Date: Tue, 2 Jun 2026 06:35:25 -0400 Subject: June 3 NYC*BUG: Let's review some OpenBSD mitigations Message-ID: <0e9d1ae1-23d0-491e-b4aa-c7fb5de81ee9@ceetonetechnology.com> Let's review some OpenBSD mitigations, Brian Callahan 2026-06-03 @ 18:45 local (22:45 UTC) - Backroom of Brass Monkey 55 Little West 12th St Remote participation: Plans are to stream via NYC*BUG website. Q&A will be via IRC on libera.chat channel #nycbug - please preface your questions with '[Q]'. How do we know that security mitigations actually work? How often should we review code to ensure they are continuing to provide? Following two recent publications, let?s explore some of OpenBSD?s anti-ROP mitigations. We will explore what they do, how to test they work, how to port them to other operating systems, and how to understand larger questions about security mitigations. You?ll leave having a deeper appreciation for OpenBSD?s sustained security track record. Brian is a long-time face in the *BSD world. While he claims semi-retirement from OpenBSD development, in reality he probably spends even more time on it getting students excited about the BSDs. He is the Director of the Monmouth University Cybersecurity Research Center, where here leads quantum cybers ecurity and other security research. Nearest NYC Subway is the 14th Street/Eighth Avenue station L, A, C, E. To get to the backroom, you must enter the front door, follow the long bar on your left, and walk all the way to the back. At the rear of the BrassMonkey, you will see an alcove for the 3 bathrooms our room is off to your right. From george at ceetonetechnology.com Wed Jun 3 13:16:34 2026 From: george at ceetonetechnology.com (George Rosamond) Date: Wed, 3 Jun 2026 13:16:34 -0400 Subject: TONIGHT 645 PM EDT: OpenBSD Security Mitigations Message-ID: NOTE: this meeting will end before 8 PM EDT due to the Knicks in the finals, so we will start promptly at 645 PM. Let's review some OpenBSD mitigations, Brian Callahan 2026-06-03 @ 18:45 local (22:45 UTC) - Backroom of Brass Monkey 55 Little West 12th St Remote participation: Plans are to stream via NYC*BUG website. Q&A will be via IRC on libera.chat channel #nycbug - please preface your questions with '[Q]'. How do we know that security mitigations actually work? How often should we review code to ensure they are continuing to provide? Following two recent publications, let?s explore some of OpenBSD?s anti-ROP mitigations. We will explore what they do, how to test they work, how to port them to other operating systems, and how to understand larger questions about security mitigations. You?ll leave having a deeper appreciation for OpenBSD?s sustained security track record. Brian is a long-time face in the *BSD world. While he claims semi-retirement from OpenBSD development, in reality he probably spends even more time on it getting students excited about the BSDs. He is the Director of the Monmouth University Cybersecurity Research Center, where here leads quantum cybers ecurity and other security research. Nearest NYC Subway is the 14th Street/Eighth Avenue station L, A, C, E. To get to the backroom, you must enter the front door, follow the long bar on your left, and walk all the way to the back. At the rear of the BrassMonkey, you will see an alcove for the 3 bathrooms our room is off to your right. From mcevoy.pat at gmail.com Fri Jun 5 17:40:52 2026 From: mcevoy.pat at gmail.com (Pat McEvoy) Date: Fri, 5 Jun 2026 17:40:52 -0400 Subject: NYC*BUG talks for July and beyond. Message-ID: <485A178B-37A5-4EF2-BF72-36E386861083@gmail.com> Does anyone here have a talk they would like to give or see at NYC*BUG in The future? Our next scheduled meeting is set for July 1st.