4 ms·
And there's the Chinese proverb, roughly translated and paraphrased: "solder who ran away 50 paces mocks another who ran 100 paces for his cowardice" [0]. I ge
by RJIb8RBYxzAMX9u 9y ago
And there's the Chinese proverb, roughly translated and paraphrased: "solder who ran away 50 paces mocks another who ran 100 paces for his cowardice" [0].
I get it, preventing local privilege escalation on *NIX is hard, and I appreciate OpenBSD's focus and stance on security, v.s. say Linus's more laid-back attitude. And having arguably fewest of them is an achievement, even if it's not zero. Let's focus on making OpenBSD better and not belittling other's shortcomings.
[0] https://zh.wikipedia.org/zh/%E4%BA%94%E5%8D%81%E6%AD%A5%E7%AC%91%E7%99%BE%E6%AD%A5 https://zh.wikipedia.org/zh/%E4%BA%94%E5%8D%81%E6%AD%A5%E7%A...
- 43224gg252 9y agoDoes OpenBSD have so few vulnerabilities because no one looks for them (compared to Linux/Windows) or because it's actually more secure? I have an OS I coded my self that no one has ever found a vulnerability on.
- ender341341 9y agoI would imagine that it's a bit of both, but 1 point of comparison in OpenBSD's favor would be libressl vs openssl, the number & severity of issues in the OpenBSD maintained project has been significantly lower.
- snikeris 9y agoNo one can answer this question.
- nopcode 9y agoI was at the defcon presentation & talked with Ilja after. The answer is a bit of both.