Re:NetBSD 11.0
by mghackerlady on Saturday August 01, 2026 @04:51PM
(#49138366)
OpenBSD is the most security hardened OS out there, and the project maintains many pieces of software people take for granted, like pf, openssh, and libressl. FreeBSD is definitely the most robust, and is a very good server OS. NetBSDs niche is how many platforms can run it. If it's supported by GCC, theres a decent chance NetBSD will run on it
[ Parent
| on HN ]
Re:NetBSD 11.0
by microtonal on Saturday August 01, 2026 @04:55PM
(#49138396)
OpenBSD is the most security hardened OS out there,
I think this requires a lot of additional qualifications. For instance, AOSP and Android are much more hardened when it comes to isolation between GUI applications.
Re:NetBSD 11.0
by rustfreeforme on Saturday August 01, 2026 @06:38PM
(#49139218)
Unfortunately AOSP is owned by Satan, which does not seem to be the case with OpenBSD.
Among those qualifiers would also be 'free open source'. I'd think there are hardened operating systems which are not much, if at all, talked about in public. Perhaps, in the age of LLMs finding most security vulnerabilities, those are actually demonstrably more secure now than the well reviewed public ones.
Re:NetBSD 11.0
by rustcleaner on Sunday August 02, 2026 @01:04PM
(#49146258)
... then there's Qubes OS, which beats the pants off AOSP isolation using Xen. Feels like the labelled desktop of the Trusted Solaris days! If one wanted to utilize SELinux in TemplateVMs for further hardening, that is always an option.