4 ms·
They are very positive about some mitigations: https://isopenbsdsecu.re/mitigations/pledge/ https://isopenbsdsecu.re/mitigations/pledge/
by mmooss 2y ago
They are very positive about some mitigations:
https://isopenbsdsecu.re/mitigations/pledge/ https://isopenbsdsecu.re/mitigations/pledge/
- tptacek 2y agoSure. I like pledge --- though I think OpenBSD should just do eBPF too.
- mmooss 2y agoMaybe it's just limited resources? In a project that size, I can't imagine having to keep up with the resources of Linux (and to a degree with Apple, Google, and Microsoft) on one side and with all the attackers on the other side. And they want - their reason for being is - higher quality code and security than the rest. Their 'unusual' approach to security might be a distraction they don't need. But maybe it's the only way to hope to pull it off? Maybe they can't do it the GLAM (Google, Linux, Apple, Microsoft) way with OBSD's resources.