Slashdot Mirror
OpenBSD 2.9 Preorders Available
dj_flux writes: "OpenBSD is now taking preorders for v2.9. New features include a significant improvement in filesystem speed and enhancements in documentation. The release will be begin shipping on June 1."
← Back to Stories (view on slashdot.org)
Mine is already ordered. Everyone should take some time and check out OpenBSD. Excellent product. Secure and functional, and the default install doesn't install 2GB worth of junk.
I'll make a point to order enough CD's for me and my Linux friends.
This seems like the greatest release of OpenBSD thus far. Im certainately glad to see the Alpha port back, and it's great to see OpenBSD _finally_ including new software. I know sometimes including the latest and greatest isn't exactly in the vein of OpenBSD, but it's still nice to see them shipping X4.0.3. I still can't believe the filesystem improvements. This is by far the best release yet!
---------------
Except that none of the developers ever said they are security gurus. Most of them don't even know how to craft an exploit. One of the most important goals to the OpenBSD project, is correctness, which includes writing code.
If you think about it, 95% of the exploits out there exploit the same thing over and over again... buffer overflows, format strings, etc. The person to blame is the programmer for creating sloppy code and using functions that do not perform bounds checking. When the OpenBSD team 'audits' their code, they don't go looking for exploitable code, they just go looking for programming errors (bugs). A side effect of such scrutiny is code that is more 'secure'.
Not to mention the project is based in Canada, which allows for the exportation of some awesome crypto.
Remember, a system is as secure as it's weakest link. OpenBSD is far from perfect, it's just a lot better than most of the stuff out there.
---------------
very true. However I hardly think it is fair to assign blame to the programmer. This stuff is open source after all. The programmer didn't have to write anything, be thankful that he/she put in any effort at all. Fix the code, not the blame.
How we know is more important than what we know.
How do you know most of them cannot craft exploits? Even if they claim they either don't or can't, does'nt necessarily reflect what they like to do when nobody is watching.
The proof is in the pudding. Most people that "can" craft exploits, cannot do so for OpenBSD it would seem.
"Far from perfect", what can be perfect in a World that embraces ill thought out standards? "Better than most", then what would you say is the best if it is only better than most?
It's an OS that does'nt just adhere to very strict programming protocol and it's not just an OS with strong crypto tacked on to give a warm fuzzy feeling either. It has those along with other, real security features added on, a feature that allows logs that not even root can modify/delete?, without being in single user mode and thus actually being logged in locally to the machine.
Perhaps, TDR and the gang could'nt be bothered hacking crap systems because building a system that does'nt suck is so much more fulfilling. I think their Script Kitty kinda shows that they want to be a group that is above all that.
4 years without a remote exploit in the default install, speaks volumes.
War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
How do you know most of them cannot craft exploits?
..only better than most?
..that is above all that.
Because one of the developers came right out and said it in an article.
Even if they claim they either don't or can't, does'nt necessarily reflect what they like to do when nobody is watching.
What the fsck are you talking about.
"Far from perfect", what.. [snip]
*sigh* You obviously missed the point. Far from perfect as in nothing in this fucking universe is perfect. And what is the best? IMHO, OpenBSD... something being the "best" is just a matter of someones opinion.
Perhaps, TDR and the gang.. [snip]
Honestly, what was the point of that rant... you had no point and drew no conclusion. It's like you were argueing with yourself.
Your post gave me a headache... I award you no points, and may God have mercy on your soul.
---------------
Sorry if I misinterpreted your post. Of course I don't beleive anything can be truely perfect. But you say OpenBSD is far from perfect, which sounds a bit extreme when the assumption is that you are speaking about the OS comparatively.
/.? Yeah, I rekon they could, if they could be bothered.
My point here is, that if it is obvious that "nothing in this fucking universe is perfect", then what was the point in stating that OBSD is far from perfect?
Being the best is just a perception? Well, for many people, this may be their "reality". Assuming they base their opinions on assumption, marketing hype, someone elses opinions, etc. But from where I stand, the best tool for the job is, the best tool for the job. Regardless of whether it actually ends up being chosen as the best tool. Many mistakes are made because people think they know what is best, but that does'nt make it the best.
Can you point me to that article? Was he speaking for himself or "most of" the core group? I really doubt that these guys can build, audit and fix OBSD source code so quickly when holes arise, without knowing how to actually make an exploit for their own code. Especially in light of their success in avoiding many holes before they become exploitable.
The [snip] point? I rekon they're more than just anal programmers, they know a bit about network security. Could they write an exploit that overflows a broken buffer with code that will rm -rf
Hope your headache is gone... I don't want any points, I don't beleive in any God and my soul is happy enough.
This is not a competition for me, my questions are real questions and I am happy to have my statements corrected if I am wrong. I could'nt care less about Karma.
War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
Don't use OpenBSD, the security sucks!!! It's the most insecure piece of crap I've ever seen. If you want real security, go with Windows 95, 98, or Me. That's REAL security! I mean, come on, who needs password protection? So far, it's been 2 WHOLE HOURS since I've been 0wNeD!! Beat THAT OpenBSD!!!
Oh boy, I just got an email... it says open this attachment; it's a picture of Anna Kornikova!!! Gotta go!!!
I KNOW I'm right. And if I'm not, I'm STILL right...