4 ms·
> Went to the homepage, saw the last 6.6 release was 6 months ago, and thought Hmm thats kinda old. OpenBSD has done a release every 6 months for ~23 years. I
by asveikau 6y ago
> Went to the homepage, saw the last 6.6 release was 6 months ago, and thought Hmm thats kinda old.
OpenBSD has done a release every 6 months for ~23 years.
I really don't understand comments around here where they look at a repo and say "hmmm, no updates in a while, it must be bad". There is really crappy software that updates frequently. It isn't evidence of anything. Many people are capable of committing total garbage every week, and this would satisfy your check. OpenBSD with its 6 month release schedule does pretty well by comparison with a lot of other projects.
> but I have concerns about Xenocara/X11/Xorg/Xfree86, (idk what to call it) being insecure: root perms
Pretty sure that X doesn't run as root on OpenBSD.
- genr8 6y agoI didnt say it was bad... I said, I was surprised given there is a 6 month schedule, that I randomly decided to check exactly 1 day before said schedule, and yet it was still secretly available. I don't think it runs as root either, I'm more concerned about xinput and keyloggers running as my normal user being able to snoop on even sudo/su prompts running as root in a GUI terminal window running as my user. You know about this right? https://theinvisiblethings.blogspot.com/2011/04/linux-security-circus-on-gui-isolation.html https://theinvisiblethings.blogspot.com/2011/04/linux-securi... Wayland was supposed to prevent this, but I don't think its going well on OpenBSD. Does OpenBSD have a solution for this?
- asveikau 6y agoAh ok. I misunderstood for a common comment trope I see around here. Apologies. Yes I am aware that it's relatively easy to write a keylogger for X.