Re:FreeBSD – A lesson in poor defaults
by jshowa3 on Friday July 05, 2019 @02:24PM
(#20364606)
I was really interested in FreeBSD a while back. Guess I should look elsewhere after reading this since I'm kind of a newbie and it would've taken me a while to figure all this out on my own.
[ Parent
| on HN ]
Re:FreeBSD – A lesson in poor defaults
by blauekapelle on Friday July 05, 2019 @02:47PM
(#20364798)
Not really, this guy is kinda missing the point of FreeBSD - which is stability not security. Many of these problems are overstated or non-issues for desktop systems. If you do have a need for any of the changes this guy is talking about, then you can make the change. If you just want max security, OpenBSD is a thing. But this list of complaints probably isn't much worse than many linux distros.
I don't see the security concerns regarding package tools being non-issues, nor the weirdness regarding OpenSSH patches.
Re:FreeBSD – A lesson in poor defaults
by blauekapelle on Friday July 05, 2019 @02:58PM
(#20364882)
For context on "is FreeBSD any good?" > FreeBSD foundation has a list of testimonials from users of FreeBSD including Netflix, Whatsapp etc. Many security focused and trusted companies.
Don’t put any machine in a public IP if you’re not going to fine grain it’s security. Take the time to do it right or keep it local.
The point is you shouldn't avoid implementing best practice security because it will "never be on the network".
And quite frankly, deliberately shipping a product with gimped security, especially when it comes to OpenSSH, is kind of not very excusable and has nothing to do with "stability".