News for hackers. Stuff that matters.

A comment on OpenBSD 5.6. Parent comment

Re:OpenBSD 5.6 by aortega on Saturday November 01, 2014 @03:21PM (#8544260)
The problem with FreeBSD is that it has almost no security features turned on by default. It's more unsafe than windows and much worst than Linux.
[ Parent | on HN ]
Re:OpenBSD 5.6 by stock_toaster on Saturday November 01, 2014 @03:44PM (#8544322) 

  > The problem with FreeBSD is that it has almost no
  > security features turned on by default.
What security features would you like to see turned on by default?
[ Parent | on HN ]
Re:OpenBSD 5.6 by tedunangst on Sunday November 02, 2014 @07:24PM (#8548745)
Stack protector for one. Though they finally did that. http://marc.info/?l=freebsd-stable&m=141495893928493&w=2
[ Parent | on HN ]
Re:OpenBSD 5.6 by stock_toaster on Sunday November 02, 2014 @07:43PM (#8548802)
Yeah. Just saw that recently too. Good news!

ASLR is apparently around the corner+ as well.

Didn't OpenBSD get ASLR in 2008 or something like that? It only took 6 years for FreeBSD to get it.... >_<

  +for some definition of corner.
[ Parent | on HN ]
Re:OpenBSD 5.6 by tedunangst on Sunday November 02, 2014 @09:22PM (#8549034)
First OpenBSD commit to add ASLR was Sep 2003. Released in 3.5 on May 1 2004 (also the first release to support amd64).
[ Parent | on HN ]
Re:OpenBSD 5.6 by stock_toaster on Sunday November 02, 2014 @10:10PM (#8549183)
Thanks for the clarification!
[ Parent | on HN ]
Re:OpenBSD 5.6 by aortega on Saturday November 01, 2014 @10:09PM (#8545339)
All of these https://wiki.ubuntu.com/Security/Features
[ Parent | on HN ]
Re:OpenBSD 5.6 by vezzy-fnord on Saturday November 01, 2014 @03:27PM (#8544278)
FreeBSD is the only mainstream operating system that I know of which has absolutely no ASLR by default to this day.

Thankfully, it looks like they're finally gonna get there soon: http://www.bsdcan.org/2014/schedule/events/452.en.html

[ Parent | on HN ]