News for hackers. Stuff that matters.
Re:OpenBSD – pinning all system calls by lmm on Monday December 11, 2023 @10:31PM (#38609061)
Imagine trying to write secure code in C by hand.
Re:OpenBSD – pinning all system calls by wolverine876 on Tuesday December 12, 2023 @12:11AM (#38609777)
Kids today ... Anyway, how has it worked out for OpenBSD?
Re:OpenBSD – pinning all system calls by MyMonkeyBalls on Monday December 11, 2023 @10:35PM (#38609084)
Yeah and imagine advertising yourself as the "most secure OS in the world" at the same time
Re:OpenBSD – pinning all system calls by gkbrk on Monday December 11, 2023 @11:13PM (#38609365)
Anyone else with their track record?
Re:OpenBSD – pinning all system calls by MyMonkeyBalls on Tuesday December 12, 2023 @12:23AM (#38609833)
Which track record exactly? Their slogan is known to be a complete lie
Re:OpenBSD – pinning all system calls by IntelMiner on Tuesday December 12, 2023 @02:02AM (#38610471)
[citation needed]
Re:OpenBSD – pinning all system calls by SSLy on Tuesday December 12, 2023 @07:07AM (#38611149)
> Two remote public holes in the default install, as in “unauthenticated remote code execution”. How many local privilege escalation? How many remote/local denial of service? How many remote code execution in software not present in the non-default install? How many private ones that were never disclosed? Other operating systems didn’t have many unauthenticated RCE either
Re:OpenBSD – pinning all system calls by MyMonkeyBalls on Tuesday December 12, 2023 @08:42AM (#38611938)
Here are a lot of citations: https://isopenbsdsecu.re/quotes/
Re:OpenBSD – pinning all system calls by ectospheno on Tuesday December 12, 2023 @05:59PM (#38619984)
Few groups confuse me more than the ones who vigorously argue I shouldn’t like an operating system.
Re:OpenBSD – pinning all system calls by starcraft2wol on Tuesday December 12, 2023 @01:23AM (#38610219)
Yep, they implement kernel level security, rather than obsessing over language.
Re:OpenBSD – pinning all system calls by saagarjha on Tuesday December 12, 2023 @08:38PM (#38621562)
Kernel level security doesn’t help if you have a heap overflow in the kernel itself.