Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenBSD 7.9

openbsd.org

Post reply on HN
Print view View original

221–230 of 314 posts

Re: OpenBSD 7.9

#221

Post by irusensei »

stackghost wrote: post #166
maxall4 wrote: post #90

Earlier quoted context omitted.

Is OpenBSD actually more secure than Linux? I have not been able to find any data to support this—only some vague opinions.

It's not meaningfully more secure than e.g. Debian. Their claim to fame ("only two remote holes in the default install in X number of years") is definitionally only valid for the default install in its default configuration which means: no httpd, no smtpd, no unbound, etc. etc. etc. The default install isn't very useful, because it doesn't do a lot, and so "only two remote holes" or whatever isn't really saying much.…

> The default install isn't very useful, because it doesn't do a lot, and so "only two remote holes" or whatever isn't really saying much.

Thats not really true. Comes with spamd, pf, httpd, OpenSMTPD and others. Its actually one of the open source unix-like systems that packs more functionality out of the box.

Great firewall and VPN server. You can setup wireguard with just ifconfig.

Re: OpenBSD 7.9

#222

Post by nelsonic »

infinet wrote: post #172
nelsonic wrote: post #11

With all the security issues constantly being uncovered in other Operating Systems - which will only accelerate with Ai - it’s time everyone considers OpenBSD. Their decades-long security-focus is second to none. We have fully converted from Ubuntu/Debian to OpenBSD. No looking back.

I tried OpenBSD recently and found it behaves very differently from other OS. The same code works on Linux/FreeBSD/Windows but has poor multi thread performance on OpenBSD, async socket stopped working after sending at high speed for few seconds. I am not saying there is anything wrong in OpenBSD, it is just different.

Is the code you ran on your OpenBSD available (e.g. on GitHub) for others to test? Curious what async issue you faced, did you report it? Or ask for help addressing?

Re: OpenBSD 7.9

#223

Post by Galanwe »

ska80 wrote: post #25

I wish OpenBSD supported Bluetooth. Unfortunately, its absence is a deal breaker for me. I did use OpenBSD on the desktop it was great.

You can often build generic dongles for pretty much anything on the cheap if that really matters to you.

E.g. I use the Seeed Studio XIAO nRF52840 for my BLE keyboard.

Re: OpenBSD 7.9

#225

Post by MisterTea »

brynet wrote: post #217
MisterTea wrote: post #211

Earlier quoted context omitted.

The images for the last two shirts appear to have gibberish on the hat indicating AI was somehow involved. https://openbsd.creator-spring.com/listing/openbsd-7-9?produ... Edit: oops, bad eyesight led my brain to believe "no way this is legible text" when in fact it is. Needed a screen magnifier to read it clearly. Though the other items have police in place of security.

I don't see any "gibberish".

My bad. I have poor eye sight and on my first look the fonts appeared jumbled. On second look with a screen magnifier I can see it reads security while the others read police.

Re: OpenBSD 7.9

#227

Post by stackghost »

irusensei wrote: post #221
stackghost wrote: post #166

Earlier quoted context omitted.

It's not meaningfully more secure than e.g. Debian. Their claim to fame ("only two remote holes in the default install in X number of years") is definitionally only valid for the default install in its default configuration which means: no httpd, no smtpd, no unbound, etc. etc. etc. The default install isn't very useful, because it doesn't do a lot, and so "only two remote holes" or whatever isn't really saying much.…

> The default install isn't very useful, because it doesn't do a lot, and so "only two remote holes" or whatever isn't really saying much. Thats not really true. Comes with spamd, pf, httpd, OpenSMTPD and others. Its actually one of the open source unix-like systems that packs more functionality out of the box. Great firewall and VPN server. You can setup wireguard with just ifconfig.

Again: It comes with them on disk, but are they enabled by default? If not, then they are not covered by their "default install" boast.

Re: OpenBSD 7.9

#228

Post by fsflover »

sunshine-o wrote: post #183
fsflover wrote: post #58

Earlier quoted context omitted.

If you care about security, why not consider Qubes OS? Related discussion: https://forum.qubes-os.org/t/qubesos-vs-openbsd-security/790...

I was looking at that thread and honest question: how does Qubes OS deal with the binary blob issue? I would guess it is deblobbed to a certain extend according to [0] But I couldn't find if they have a strict "no binary blob allowed" policy like OpenBSD. - [0] https://doc.qubes-os.org/en/r4.3/user/troubleshooting/pci-tr...

They do not have a strict "no binary blob allowed" policy. Concerning VMs, they have a policy of minimal modifications: https://doc.qubes-os.org/en/latest/introduction/faq.html#wha...

The dom0 is based on Fedora and has the Fedora's policy for firmware blobs. See also: https://doc.qubes-os.org/en/latest/introduction/faq.html#wil...

Re: OpenBSD 7.9

#229

Post by skydhash »

sunshine-o wrote: post #128

I would really love to adopt OpenBSD but the one thing I can't deal with is the absence of journalized filesystem. Just the idea not to be able to recover after a power cut and work is hard to accept to be honest. I have been recently considering running it on a minimal Alpine ZFS host but I am not sure how much I can optimize the display experience since I do not think OpenBSD support QXL/SPICE. I would be curious i…

fsck is good. I have to hard reset my laptop a few times and I didn’t have corruption. Maybe a server has a different risk profile, but journalized systems are not file backup, which is what you should focus on.

Re: OpenBSD 7.9

#230

Post by bigyabai »

nelsonic wrote: post #193
bigyabai wrote: post #176

Earlier quoted context omitted.

Naming a few peripherals on my desk that see regular usage on Linux: - Kensington Expert Trackball (I lost the 2.4ghz dongle) - JBL wireless earbuds/Audio Technica M40xs - Nintendo Switch controller

Ah, losing the 2.4ghz USB dongle ... Sucks. Feel you. :-( Wireless Earbuds/Headphones are a legit use case. (Still use bluetooth with iPhone every day, sadly, still addicted to the convenience of AirPods ...) But I've got decent wired headphones for my OpenBSD setup. bonus: never have to charge them. ;-) Even more curious now: what do you use the Nintendo Switch controller for on your computer? Have you got it hooked…

Switch controller gets used for flight simming, just as a simple analog input that I can take to the couch (or bed). I've also got a wired pair of my wireless Audio Technica headphones, but I'm not confident that my DAC (or Bitwig for that matter) would work as well on OpenBSD as it does on Linux.

For desktop use, I don't think I'll ever end up on OpenBSD. It might power my gateway router one day, but the cost/benefit analysis falls through on hardware like a laptop or gaming PC.

Post reply on HN