3 ms·
OpenBSD mostly operates on a hobbyist's idea of security, where they just make up attacks to defend against rather than being systematic or actually keeping up
by astrange 3y ago
OpenBSD mostly operates on a hobbyist's idea of security, where they just make up attacks to defend against rather than being systematic or actually keeping up with the outside world. (https://isopenbsdsecu.re https://isopenbsdsecu.re)
Although professional security people are also rather bad at this and like to eg stack multiple cool-looking mitigations even if they break each other. (https://siguza.github.io/PAN/ https://siguza.github.io/PAN/)
- yjftsjthsd-h 3y agoOkay, so what threat model successfully attacks an OpenBSD box and fails on... I assume the one "secure" microkernel is seL4? Since OpenBSD only defends against made up attacks, this should of course be very easy to demonstrate.
- astrange 3y agoIt's not "an OpenBSD box" but "an OpenBSD box running a typical amount of third party services".