HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
hardenedbsd.org
HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
1–10 of 81 posts
Re: HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
#2Security feature comparison, is should be said. Though I would guess it otherwise matches FreeBSD?
Re: HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
#3Security feature comparison, is should be said. Though I would guess it otherwise matches FreeBSD?
Pretty much yes? -
> Introduction
> Founded in 2014 by Oliver Pinter and Shawn Webb, HardenedBSD is a security-enhanced fork of FreeBSD. The HardenedBSD Project is implementing many exploit mitigation and security technologies on top of FreeBSD. The project started with Address Space Layout Randomization (ASLR) as an initial focal point and is now implementing further exploit mitigation techniques.
> Why Fork FreeBSD?
> HardenedBSD forked the FreeBSD codebase for ease of development. Prior to ...
Re: HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
#4Hand in glove, the only distro with stack zero-initialized by default. As of yet, still no SSL integration in crypto library.
Re: HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
#5Read these claims with a pretty big asterisk. Implementation quality of HBSD features is often poor or very poor. https://www.fabiankeil.de/gehacktes/hardenedbsd/ is just one example. Specifically some of the changes made to "harden" the system are pretty dubious and introduce new bugs, possibly security relevant, that did not previously exist. No one runs or pen tests HBSD. It's even more niche than OpenBSD.
Re: HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
#6Read these claims with a pretty big asterisk. Implementation quality of HBSD features is often poor or very poor. https://www.fabiankeil.de/gehacktes/hardenedbsd/ is just one example. Specifically some of the changes made to "harden" the system are pretty dubious and introduce new bugs, possibly security relevant, that did not previously exist. No one runs or pen tests HBSD. It's even more niche than OpenBSD.
Self promotion / advertisement should always be read with a _big_ *.
What should probably not be read with a _big_ * is their roadmap end: 2021...
Re: HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
#7Read these claims with a pretty big asterisk. Implementation quality of HBSD features is often poor or very poor. https://www.fabiankeil.de/gehacktes/hardenedbsd/ is just one example. Specifically some of the changes made to "harden" the system are pretty dubious and introduce new bugs, possibly security relevant, that did not previously exist. No one runs or pen tests HBSD. It's even more niche than OpenBSD.
A positive scenario for forks is when the original project incorporates downstream changes that were positive.
Could FreeBSD implement some of the security features identified by HardenedBSD?
Re: HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
#8Read these claims with a pretty big asterisk. Implementation quality of HBSD features is often poor or very poor. https://www.fabiankeil.de/gehacktes/hardenedbsd/ is just one example. Specifically some of the changes made to "harden" the system are pretty dubious and introduce new bugs, possibly security relevant, that did not previously exist. No one runs or pen tests HBSD. It's even more niche than OpenBSD.
I can just think of so many better things to do than to write online arguing which BSD implementations of features is better.
Re: HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
#9Read these claims with a pretty big asterisk. Implementation quality of HBSD features is often poor or very poor. https://www.fabiankeil.de/gehacktes/hardenedbsd/ is just one example. Specifically some of the changes made to "harden" the system are pretty dubious and introduce new bugs, possibly security relevant, that did not previously exist. No one runs or pen tests HBSD. It's even more niche than OpenBSD.
Self promotion / advertisement should always be read with a _big_ *. What should probably not be read with a _big_ * is their roadmap end: 2021... https://hardenedbsd.org/content/roadmap
With small projects, websites tend to be updated infrequently. On the other hand, there seem to have been 11 commits to the main project repo today: https://groups.google.com/a/hardenedbsd.org/g/src-commits-al...
Re: HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
#10Read these claims with a pretty big asterisk. Implementation quality of HBSD features is often poor or very poor. https://www.fabiankeil.de/gehacktes/hardenedbsd/ is just one example. Specifically some of the changes made to "harden" the system are pretty dubious and introduce new bugs, possibly security relevant, that did not previously exist. No one runs or pen tests HBSD. It's even more niche than OpenBSD.
I can just think of so many better things to do than to write online arguing which BSD implementations of features is better.
Write online how Linux distributions of features are better?