Ask HN: How do you trust that your personal machine is not compromised?

Re:Ask HN: How do you trust that your personal machine is no... by charcircuit on Sunday January 15, 2023 @04:22PM (#34393559)

OpenBSD doesn't have proper sandboxing. If you download malware it can easily steal and upload your ssh keys.

[ Parent | on HN ]

Re:Ask HN: How do you trust that your personal machine is no... by jazzyjackson on Sunday January 15, 2023 @04:43PM (#34393832)

> proper sandboxing

Do jails not fulfill this?

[ Parent | on HN ]

Re:Ask HN: How do you trust that your personal machine is no... by charcircuit on Sunday January 15, 2023 @05:05PM (#34394072)

OpenBSD doesn't have jails. Jails take effort to setup. It's much easier to just run the malware instead of going through the effort of making a jail for it.

[ Parent | on HN ]

Re:Ask HN: How do you trust that your personal machine is no... by lcall on Monday January 16, 2023 @12:22PM (#34402969)

It certainly has chroot jails, and many other protections. You might find interesting: https://www.openbsd.org/security.html .

[ Parent | on HN ]

Re:Ask HN: How do you trust that your personal machine is no... by lcall on Monday January 16, 2023 @12:23PM (#34402974)

Yes, among other protections that are even more convenient or built in. https://www.openbsd.org/security.html

[ Parent | on HN ]

Re:Ask HN: How do you trust that your personal machine is no... by lcall on Monday January 16, 2023 @12:21PM (#34402948)

There is a package repository where many of the packages have been "pledged" and "unveiled", meaning that they execute with fewer unneeded privileges. And a general lack of privilege escalation exploits in base. And privilege separate by running things as distinct users. So jails might be less needed or less helpful by comparison, overall. There are chroot jails though, not sure why anyone would think they are not available in OBSD.

[ Parent | on HN ]