I do mean ASLR. I even tried to correct it, but I spelled it wrong again ... They all have ASLR, but the Windows implementation is supposed to be better than L

I do mean ASLR. I even tried to correct it, but I spelled it wrong again ... They all have ASLR, but the Windows implementation is supposed to be better than Linux' (even if it's just a little). Anyway, they're both better than Apple's. The details really do matter here. --- By the way: Linux plays a very odd role here because it's also run on servers. Might be an unfair comparison. --- You really shouldn't google for these things (for the same reason you shouldn't listen to me either). Having said that, this source seems alright: https://www.cert.org/blogs/certcc/post.cfm?EntryID=191 https://www.cert.org/blogs/certcc/post.cfm?EntryID=191 Make sure to have a look at the Reddit discussion as well. Another good example for this is how /dev/urandom is implemented in Linux and FreeBSD/OS X. They both have it but it's not quite the same. --- Also note that the reason MS invests more into security than Apple does is because of their painful history. Makes all the sense in the world, doesn't it? --- Here's another one: https://en.wikipedia.org/wiki/Comparison_of_operating_system_kernels#In-kernel_security https://en.wikipedia.org/wiki/Comparison_of_operating_system... Note that Capsicum and SELinux aren't used that much (unfortunately). I don't know if Apple's sandbox is "inspired by" Capsicum. I also don't know why the MS sandbox isn't listed there. What's the feature called that gives each app it's own System32?