4 ms·

> we've got one remote hole Are you forgetting the time they sent local filesystem searches to some spyware company? And that's just things that were a: delibe

by a1369209993 7y ago

> we've got one remote hole Are you forgetting the time they sent local filesystem searches to some spyware company? And that's just things that were a: deliberate, and b: public enough that I remember them off the top of my head despite not having used Ubuntu in years? (I forget which specific problem made me drop it, or I'd probably have a third example.) OSX is a toxic, vendor-supplied-malware infested cesspit that I've never used and don't pay much attention to, and I've never even heard of Amazon Linux, so I wouldn't expect to have examples for those. > the "OpenBSD cares more about security than everyone else" narrative Actually, my claim was that Ubuntu (and maybe a significant fraction of "everyone else", but that wasn't really my point) is actively opposed to security. > even if we don't admit a difference between unintentional remote holes and "deliberate backdoors," There is a difference; there's a huge difference; deliberate backdoors are much, much worse. This kind of shit is something I would expect of Microsoft (Windows) or Google (Chrome).

geofft 7y ago
> Are you forgetting the time they sent local filesystem searches to some spyware company? That was not a remote hole. > OSX is a toxic, vendor-supplied-malware infested cesspit that I've never used Sure, but is any of the vendor-supplied malware in that cesspit a remote hole? I'm happy to have broad, open-ended arguments about who sucks more in new and innovative ways, but let's finish the argument we're already having first. Is OpenBSD meaningfully more secure than other operating systems on the axis they are choosing to advertise, namely "remote holes in the default install," than other OSes? In particular, whatever you believe about deliberate backdoors, toxic cesspits, being actively opposed to security, etc., none of that is something the choice of programming language is in any way relevant to. If Theo's argument were "We don't need Rust because we are the only operating system that isn't actively opposed to security, so everyone else has lost the game already," we'd be having a very different conversation. But it's not and we aren't.

geofft 7y ago

> Are you forgetting the time they sent local filesystem searches to some spyware company? That was not a remote hole. > OSX is a toxic, vendor-supplied-malware infested cesspit that I've never used Sure, but is any of the vendor-supplied malware in that cesspit a remote hole? I'm happy to have broad, open-ended arguments about who sucks more in new and innovative ways, but let's finish the argument we're already having first. Is OpenBSD meaningfully more secure than other operating systems on the axis they are choosing to advertise, namely "remote holes in the default install," than other OSes? In particular, whatever you believe about deliberate backdoors, toxic cesspits, being actively opposed to security, etc., none of that is something the choice of programming language is in any way relevant to. If Theo's argument were "We don't need Rust because we are the only operating system that isn't actively opposed to security, so everyone else has lost the game already," we'd be having a very different conversation. But it's not and we aren't.