5 ms·

That reputation was and still is propagated by OpenBSD fanboys. When put to scrutiny OpenBSD fails the same way any other operating system does(https://isopenb

That reputation was and still is propagated by OpenBSD fanboys. When put to scrutiny OpenBSD fails the same way any other operating system does(https://isopenbsdsecu.re/about/ https://isopenbsdsecu.re/about/)

bombcar 3y ago
OpenBSD is secure in the default install; it's just that their default install has basically had everything turned off since forever. Mind you, that was a great improvement over things like Windows NT, but "this is super secure as long as you don't do anything with it" is not as incredibly useful as it sounds like at first.
- lcall 3y ago
  I like having to install the things I really want, which gives me a chance to consider the security implications of them, instead of having many things pre-installed and I don't know what the total risks are. And nothing else I know of has gone since ~1996 with only 2 of the worst kind of security holes (i.e., remote exploit of something I didn't even need, but was installed by default). In the base install are many useful things (including a web server IIRC, though the port is not exposed by default), and those are audited and have that excellent track record. Then when you install extra things, they are usually limited by what user they run as, and usually have pledge/unveil run (limiting access to predetermined/approved syscalls and parts of the file system) so they can't break other things if compromised.
zvmaz 3y ago
I have read that many security innovations [1] get implemented in OpenBSD soon, like W^X [2]. But I don't know enough about OpenBSD and I would like to hear as well if any organization uses it for mission critical applications. [1] https://www.openbsd.org/innovations.html https://www.openbsd.org/innovations.html [2] https://en.wikipedia.org/wiki/W^X https://en.wikipedia.org/wiki/W^X
PrimeMcFly 3y ago
That site is great!
starcraft2wol 3y ago
This site states that its main reason for not working with the openbsd community is they don't like their politics.

bombcar 3y ago

OpenBSD is secure in the default install; it's just that their default install has basically had everything turned off since forever. Mind you, that was a great improvement over things like Windows NT, but "this is super secure as long as you don't do anything with it" is not as incredibly useful as it sounds like at first.

lcall 3y ago
I like having to install the things I really want, which gives me a chance to consider the security implications of them, instead of having many things pre-installed and I don't know what the total risks are. And nothing else I know of has gone since ~1996 with only 2 of the worst kind of security holes (i.e., remote exploit of something I didn't even need, but was installed by default). In the base install are many useful things (including a web server IIRC, though the port is not exposed by default), and those are audited and have that excellent track record. Then when you install extra things, they are usually limited by what user they run as, and usually have pledge/unveil run (limiting access to predetermined/approved syscalls and parts of the file system) so they can't break other things if compromised.

zvmaz 3y ago

I have read that many security innovations [1] get implemented in OpenBSD soon, like W^X [2]. But I don't know enough about OpenBSD and I would like to hear as well if any organization uses it for mission critical applications. [1] https://www.openbsd.org/innovations.html https://www.openbsd.org/innovations.html [2] https://en.wikipedia.org/wiki/W^X https://en.wikipedia.org/wiki/W^X

PrimeMcFly 3y ago

That site is great!

starcraft2wol 3y ago

This site states that its main reason for not working with the openbsd community is they don't like their politics.