5 ms·

This isnt a really good reason to not run windows, they have similar 0days for any nix system as well.

• rsync 9y ago
  Do they ? I have watched very closely for 20 years now for any chatter or evidence of a FreeBSD/OpenBSD zero-day vuln that was weaponized or sold or used for state-sponsored covert action and I am not aware of any. None of the leaked information from Snowden, et. al, gave any evidence of their existence either. Technically speaking they should exist but I'm not seeing them ...
  • jve 9y ago
    Here you are: https://vuxml.freebsd.org/freebsd/6f4d96c0-4062-11e7-b291-b499baebfeaf.html https://vuxml.freebsd.org/freebsd/6f4d96c0-4062-11e7-b291-b4... aka SambaCry
    • rsync 9y ago
      That's a samba vuln, not a FreeBSD vuln in particular ... Further, if you were worried about attackers or hardening a system, etc., you wouldn't be running samba (or anything like it). I'm talking about a remote-root vuln in the FreeBSD kernel or in any of the default system daemons that were bundled with an OS release (like openssh, crond, syslogd, etc.)
      • throwaway91111 9y ago
        In all honesty, there are probably both zero days for both BSDs (the software was written by humans after all) and great reasons to prefer them that don't involve this argument. I'd finger the "security ethos" of OpenBSD in particular.
  • dajt 9y ago
    Because the NSA is keeping those secret so they can still use them. All these recent 'leaks' are just misdirection so when OpenBSD becomes the defacto standard PC OS they still have a way in ;)