allep

4 ms·

1. 1.▲
   by allep 11y ago

   that's the point, was not a weaponized device, does not mean it did not go boom.
2. 2.▲
   by allep 11y ago

   depends on the definition of bomb: Ivy Mike was not a weapon, was a nuclear device, as big as a building
3. 3.▲
   by allep 11y ago

   Pledge is much easier to user that seccomp-bpf and is now forced in more than half of the binary distribuited in the base system. Also, there is a big difference between having a technology and enforcing the technology: Seccomp has been inc
4. 4.▲
   by allep 11y ago

   a fundamental difference between W^X and PAX is that PAX can be disabled on a per binary based, where W^X is applied on the whole system. That more aggressive aproach has been applied first on OpenBSD and i like to believe that's that