4 ms·
Ask HN: Is OpenBSD still considered secure?
Title says it all. OpenBSD is not set up for SecureBoot out-of-the-box - which, while its not a deal breaker, would be a disadvantage in some contexts. Does anyone know about where the project is at?
- cylinder714 4y agoVersion 7.2 just dropped a few days ago; M2 Macs and the new Windows Dev Kit 2023/Project Volterra computer are supported, although things like full graphics hardware acceleration are a work in progress. So it's a going concern. Grab a spare PC or fire up a VM, and jump in!
- plaguepilled 4y agoThat rules! Do you know if secure boot is something 'on their radar' at the moment?
- cylinder714 4y agoNope; OpenBSD boots fine via UEFI, but secure boot must be disabled. Here's a critical piece on the subject: https://isopenbsdsecu.re/mitigations/secure_boot/ https://isopenbsdsecu.re/mitigations/secure_boot/
- plaguepilled 4y agoThanks for clarifying! I hope you don't mind me asking since you've already helped, but do you know if Xenocara isolates app input from other apps a-la Wayland? I know they do some cool stuff to harden X but I've never been clear whether isolation is included.
- cylinder714 4y agoSadly, I can't answer that. I'd check the docs at openbsd.org and search the mailing list archives (https://www.openbsd.org/mail.html https://www.openbsd.org/mail.html).