News for hackers. Stuff that matters.

A comment on Initial support for guided disk encryption in OpenBSD installer. Parent comment

Re:Initial support for guided disk encryption in OpenBSD ins... by Zurrrrr on Wednesday March 08, 2023 @02:35PM (#35073697)
> That statement indicates you do not fully understand pledge(2) and unveil(2).

Not so, not so at all. You have to take my statement in context.

The point was those technologies, while nifty, are entirely irrelevant if an attacker gains remote root.

[ Parent | on HN ]
Re:Initial support for guided disk encryption in OpenBSD ins... by bentley on Wednesday March 08, 2023 @02:41PM (#35073769)
OpenBSD’s heavy use of pledge, unveil, privilege separation, unprivileged processes, chroot, and strong memory protections do an excellent job of keeping attackers from gaining root.
[ Parent | on HN ]
Re:Initial support for guided disk encryption in OpenBSD ins... by Zurrrrr on Wednesday March 08, 2023 @03:06PM (#35074053)
A car can have all the tech in the world to avoid an accident, but I still expect it to have seatbelts.
[ Parent | on HN ]