Conversation

Notices

1. Embed this notice
   Felix Palmen :freebsd: :c64: (zirias@mastodon.bsd.cafe)'s status on Sunday, 04-May-2025 17:49:41 JST Felix Palmen :freebsd: :c64:

   in reply to

   • Jadi

   @jadi This "#OpenBSD is secure!" claim always annoyed me a lot, mainly because it doesn't tell anything: #Security in IT can only ever be defined in a context of #threat models. Without that, it's meaningless. Somewhat recently, I discovered this:

   https://isopenbsdsecu.re/

   I should warn it uses some sarcasm and other confrontative language in some parts, unfortunately. But it seems to be a pretty professional analysis and assessment of (mostly) the "mitigations" OpenBSD provides in an attempt to counter "typical" attacks by at least making them harder.

   I should also add that I consider this a very interesting and helpful read, and still consider OpenBSD a great project that came up with lots of great stuff (I recently used their #bcrypt code after doing some research on password hashing, for example). And I don't agree with every single criticism on that page either. I just think it's important to build assessments whether something "is secure" on a serious analytical foundation.

   • Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Jadi (jadi@mastodon.bsd.cafe)'s status on Sunday, 04-May-2025 17:49:42 JST Jadi

     What if I told you there’s an OS that’s ultra-secure, actively developed — but without much noise? What if I add that Windows, Mac & Android are all using parts of this Operating System?

     https://youtu.be/CuieeXXhfvY

     Yes, its #openbsd #bsd #review #release