5 ms·
It's easy to invent a chart that only you can get a nearly perfect score on. This does nothing to explain what any of these features are, what are "Boot harden
by brynet 2y ago
It's easy to invent a chart that only you can get a nearly perfect score on.
This does nothing to explain what any of these features are, what are "Boot hardening" and "sysctl hardening"?
At least OpenBSD's innovations page makes an attempt to explain new concepts and features that have been developed over the years, and people can make any comparisons for themselves.
https://www.openbsd.org/innovations.html https://www.openbsd.org/innovations.html
- saagarjha 2y agoI mean, both of these are really just lists of mitigations. What would really be useful is why each of these has been developed, what attacks it tries to stop, why that was chosen as something worth protecting against, and what is out of scope for each of them.
- transpute 2y agoGood LLM prompt seed :)
- saagarjha 2y agoI doubt it. Most humans do a pretty poor job at this already, and LLMs train on things other humans have written. If you have examples to the contrary for a novel mitigation I'd love to see it, but I will also only believe it when I see it.
- transpute 2y agoStill useful for a formatted markdown table based on a specified list of non-novel mitigations.
- saagarjha 2y agoSure, but that’s not what we want here?
- transpute 2y agoThe HardenedBSD list isn't focused on novel mitigations, so LLM summary is possible. For the OpenBSD list, an LLM can help a knowledgeable reader to quickly separate the novel and non-novel mitigations, so that a human can focus on the novel mitigations.
- JdeBP 2y agoIt says "Please note that this page is out-of-date. For a more detailed and up-to-date guide to HardenedBSD's features, please visit our wiki." at the bottom. So I tried that. I'm guessing that "sysctl hardening" is https://git.hardenedbsd.org/hardenedbsd/HardenedBSD/-/wikis/home#modified-sysctl-nodes https://git.hardenedbsd.org/hardenedbsd/HardenedBSD/-/wikis/... There's no clue on the wiki what "boot hardening" is, though.