I'm sure there will be a few people chuckling at the news that the Hurd is still under development. Yesterday I learned from one of my colleagues that the newer versions of OSX will only run kernel extensions signed by Apple. The need for the GNU project is as great now as it was in the 1980s.
Windows has required code signing for kernel drivers since Vista on x64. Also, OSX doesn't require the kexts to be signed by Apple themselves - the requirement is that the kext is signed by a certificate that is blessed by Apple's CA. There are plenty of third party kexts out there. Also, you can modify the bootloader's kernel parameters to disable kext signing and you will be back where you were on 10.9 security-wis…
I'm curious who has Apple blessed to do so, and what those kexts are?