|
|
|
|
|
by bch
3173 days ago
|
|
> Do you really think the tools you use like your web browser, mail client etc, have less vulnerabilities on OpenBSD... A reasonable question, but presumptuously and poorly framed, I think. Mitigation efforts like privilege separation[0] (for daemons), ASLR[1], SSP[2], and now KARL[3] are designed to make things systemically better. I'm personally a NetBSD person, and don't see that ending anytime soon, but I do appreciate the work that OpenBSD does and pay attention with interest. I expect some of their work to be ported to my environment directly, and other effects to be felt tangentially. People running different or "weird" environments is a good thing. [0] https://en.wikipedia.org/wiki/Privilege_separation [1] https://en.wikipedia.org/wiki/Address_space_layout_randomiza... [2] http://wiki.osdev.org/Stack_Smashing_Protector [3] http://undeadly.org/cgi?action=article&sid=20170613041706 |
|