3 ms·
Yes, browsers are a large attack surface. But I'd take a quick peek at the recent Security improvements section on this release page, and also OpenBSD's innovat
by notaplumber 9y ago
Yes, browsers are a large attack surface. But I'd take a quick peek at the recent Security improvements section on this release page, and also OpenBSD's innovations page.
https://www.openbsd.org/innovations.html https://www.openbsd.org/innovations.html
OpenBSD was the second OS to enable W^X JIT on its firefox package, W^X being made mandatory system-wide, and in Theo de Raadt's most recent conference talk he mentions chromium being pledged. Both browsers are compiled as PIE by default.
http://undeadly.org/cgi?action=article&sid=20151021191401 http://undeadly.org/cgi?action=article&sid=20151021191401