3 ms·

HardenedBSD fixes several of these issues.

tachion 7y ago
No, it doesn't. HardenedBSD is one guy who became sore when FreeBSD rejected his patches due to complete lack of design, simple and common C programming errors and overall extremely poor code quality. Despite being provided with the usual review and suggestions he kept submitting them like that and at some point FreeBSD devs became bored with his attitude and moved on. And that's how HardenedBSD came to life.
- meruru 7y ago
  It would be nice if you provided sources when making such harsh accusations.
  - andoriyu 7y ago
    Whole HardenedBSD single man PR campaign started here: https://reviews.freebsd.org/D473 https://reviews.freebsd.org/D473 Author thought that having ASLR is absolutely must (hint: it's not[1].) HardenedBSD is poorly reviewed ASLR implementation by a person who didn't take criticism well + recommended new defaults from subj. Later hBSD added neat things like different update mechanism (hint: it's the same minus delta patches), retpoline enabled by default a little earlier than FreeBSD and probably still haven't disabled it. It's a fact that FreeBSD had poor defaults for ages and only recently (last couple of years) started cleaning things up. That said I never seen FreeBSD user running default system settings. Many not even running GENERIC kernel, me included. I think FreeBSD has a lot of issues, but 90% are political bullshit. [1]: https://arstechnica.com/information-technology/2017/02/new-aslr-busting-javascript-is-about-to-make-drive-by-exploits-much-nastier/ https://arstechnica.com/information-technology/2017/02/new-a...
  - tachion 7y ago
    I'm not making any accusations, I'm merely stating facts. Those are easily reachable on FreeBSD reviews portal, simply search for Shawn's patches.
- radikalerludwig 7y ago
  You seem to pop up every time someone mentions the project and spread this copypasta. Where did they hurt you?
  - tachion 7y ago
    I like to share the facts and dissolve the myths around HardenedBSD. There's nothing copypasta about it.

No, it doesn't. HardenedBSD is one guy who became sore when FreeBSD rejected his patches due to complete lack of design, simple and common C programming errors and overall extremely poor code quality. Despite being provided with the usual review and suggestions he kept submitting them like that and at some point FreeBSD devs became bored with his attitude and moved on. And that's how HardenedBSD came to life.

meruru 7y ago
It would be nice if you provided sources when making such harsh accusations.
- andoriyu 7y ago
  Whole HardenedBSD single man PR campaign started here: https://reviews.freebsd.org/D473 https://reviews.freebsd.org/D473 Author thought that having ASLR is absolutely must (hint: it's not[1].) HardenedBSD is poorly reviewed ASLR implementation by a person who didn't take criticism well + recommended new defaults from subj. Later hBSD added neat things like different update mechanism (hint: it's the same minus delta patches), retpoline enabled by default a little earlier than FreeBSD and probably still haven't disabled it. It's a fact that FreeBSD had poor defaults for ages and only recently (last couple of years) started cleaning things up. That said I never seen FreeBSD user running default system settings. Many not even running GENERIC kernel, me included. I think FreeBSD has a lot of issues, but 90% are political bullshit. [1]: https://arstechnica.com/information-technology/2017/02/new-aslr-busting-javascript-is-about-to-make-drive-by-exploits-much-nastier/ https://arstechnica.com/information-technology/2017/02/new-a...
- tachion 7y ago
  I'm not making any accusations, I'm merely stating facts. Those are easily reachable on FreeBSD reviews portal, simply search for Shawn's patches.
radikalerludwig 7y ago
You seem to pop up every time someone mentions the project and spread this copypasta. Where did they hurt you?
- tachion 7y ago
  I like to share the facts and dissolve the myths around HardenedBSD. There's nothing copypasta about it.