1. 21

https://isopenbsdsecu.re/mitigations/

    1. 4

      All of the “is X a Y?” questions are supposed to be answered “no”, right? :) I don’t even think OpenBSD devs would call their product secure, they’re more than aware that there’s no absolute security, only a gradient and at best you can be closer to secure than other people are.

      Still, this was an interesting talk and insight like this is much appreciated. I don’t know if this is just me but stein came across as bitter for no reason. But maybe that’s just the way he’s handling the anxiety associated with public performances. Either way, time well spent.

      1. 3

        understandable, considering those tweets and toots were saying he was setting himself up for international humiliation and other things of the sort, I too, would be bitter

      2. 3

        I don’t even think OpenBSD devs would call their product secure

        When I log into OpenBSD it says:

        Welcome to OpenBSD: The proactively secure Unix-like operating system.

        ;)

        BTW: Should it be “log into” or “login to”?

        1. 1

          I’d say it should be “proactively secured”. English is not Theo’s first language. ;) /excuses

        2. 1

          BTW: Should it be “log into” or “login to”?

          Neither, because you don’t log onto the OpenBSD website.

          1. 1

            I meant the OS (via SSH), not the website ;)

    2. 1

      This isn’t stein from jcs.org, is it?

      1. 2

        I don’t think so, because @jcs is a OpenBSD dev, while this person says “[a few weeks ago …] I didn’t know much about OpenBSD”, in the introduction.

      2. 2

        No he is not jcs :)