8 ms·
Why we use OpenBSD at VidiGuard
- joshbaptiste 10y agoWish he went more into how exactly OpenBSD is keeping their customer data safe, are they running a database on OpenBSD? Storing data on the file system?
- phantom_oracle 10y agoI'm guessing if you're going to blog about security, it would make sense that vidiguard.com (the main site) should be, at the very least, HTTPS-enabled.
- microcolonel 10y agoWhy does their marketing website need to be HTTPS-enabled? I mean, they will need to do it to appease Chrome in a few months, but really it has no effect on just about anything. They don't administrate the drones through their marketing front page. The website has other problems though, mainly the excess of effects and reliance on hover states for presenting useful information. Nothing that HTTPS is going to fix.
- nxzero 10y agoHTTPS has been a ranking factor in Google Search Results for awhile; meaning not using HTTPS is a negative.
- subway 10y agoMarketing sites often provide contact information for your organization. A MITM on your marketing site means Mallory can alter your contact details and potentially intercept your communications. This is one reason to enable HTTPS on your marketing site. There are many many others. What reason do you have for not enabling HTTPS?
- hodwik 10y agoI've noticed a number of security-related companies opting against HTTPS for their website. Does anyone have any idea why that might be the case?
- brianwawok 10y agoThey are lazy and human and try to prioritize effort. Same reason some security guards forgot to lock the door to their house at night.
- jlgaddis 10y agoTheir main web site is 100% completely unusable on my iPad. The content is completely covered by a blue overlay with a couple of "spinny things" on it that never go away. I took a screenshot but can't upload it anywhere at the moment. I'll send it over to my laptop and upload it shortly. Screenshot: http://i.imgur.com/t079tiF.png http://i.imgur.com/t079tiF.png
- thepumpkin1979 10y agoWell, I was expecting a little hit of more information out of it.
- tptacek 10y agoIt is --- let's put it this way: --- not uniformly the opinion of software security pros that OpenBSD is your obvious-choice best bet for secure operating systems. It may depend on what you're doing with the system, too.
- na85 10y agoWhat's your suggested alternative? (downvotes for asking a followup?)
- joshAg 10y agothis is good: https://tails.boum.org/ https://tails.boum.org/
- DominoTree 10y agoTails is for an almost entirely different use case.
- deleted 10y ago[deleted]
- hodwik2 10y agoThomas, I would love to get some insight on OS choice from someone so well respected in the security community, and maybe a short mention of why OpenBSD's security laurels may not be well deserved.
- tedunangst 10y agoSome of the hype exceeds reality. I think the OpenBSD team at least tries to keep it level headed (but that's hard, everyone's biased in their own way), but the forum chatter version tends to eradicate subtlety. Second, what the operator does to a system matters at least as much as what they start with.
- technion 10y agoI don't know if it's what Thomas is referring to, but I ran OpenBSD in production for several years at a previous job. I found that, in practice, actually getting our platform to do what we wanted involved large amounts of ports (ie, outside the base system) to be installed. Sometimes, dozens of them. And this is where obviously your mileage will vary, because that depends what your servers are doing. OpenBSD's incredible code quality quite obviously doesn't apply to the ports tree (and that's not their fault) but we quite often ran into less popular products and third party libraries where the ports were updated in the order of weeks later than things like RedHat RPM for the latest vulnerability. At point I backported a hotfix myself, the requirement of which was not conducive to security. Disclaimer: This was years ago, things may have changed.
- sivers 10y agoFor those expecting a little more content, here's a better "why": https://deftly.net/posts/2016-05-31-why-i-run-openbsd.html https://deftly.net/posts/2016-05-31-why-i-run-openbsd.html (I agree and have gone 100% OpenBSD on all servers and even all my laptops now. Love love love.)
- na85 10y agoIf you don't mind: which laptop models do you run it on and how is the performance compared to other OSes? I found openbsd ran horridly hot and sluggish on my thinkpad so I've been trying to find a laptop that will work well with it.
- sivers 10y agoLenovo ThinkPad W520 = my main Lenovo ThinkPad T440s = a clone of my main Both work great. I had some issues before OpenBSD 5.9 but since 5.9 everything is wonderful, which is why I finally switched over 100%. Doesn't run hot. Only a miniscule slower than my souped-up super-fast Arch Linux was on the same laptop, but that's a fair trade. Happy to answer any questions and offer any advice. Click my username here and get my email address from my HN profile.
- notaplumber 10y agoLinking to some old HN submission from a known troll blog "The insecurity of OpenBSD" doesn't inspire much confidence. What I think is that you're stuck in denial and holding onto some preconceived notions, I think you have no clue about the present climate.
- ysleepy 10y agoSSL seems to be broken. https://vidiguard.com/ https://vidiguard.com/ Failed to load resource: net::ERR_SSL_VERSION_OR_CIPHER_MISMATCH