EU study recommends OpenBSD

#1

Post by fcambus » Mon, Apr 27, 2015, 12:44 PM UTC

EU study recommends OpenBSD
undeadly.org

Re: EU study recommends OpenBSD

#2

Post by s_dev » Mon, Apr 27, 2015, 1:23 PM UTC

Theo De Raadt always complained that many of the institutions that run and use OpenBSD don't contribute back. Good to see the EU at least acknowledging that its something that they should explore. They probably use it and its features more than they realise.

I suspect there is a strong political motive as well behind being "technologically independent" after the NSA mass surveillance revelations.

I like the sound of an EU BSD fork - hopefully they fund one. We've always been lacking in the Operating Systems dev department over here in Europe. Linux is our main contribution but we can do more.

Re: EU study recommends OpenBSD

#3

Post by tormeh » Mon, Apr 27, 2015, 1:28 PM UTC

The EU also funds Minix 3 development, though that is more about reliability than security.

Re: EU study recommends OpenBSD

#4

Post by jkyle » Mon, Apr 27, 2015, 1:30 PM UTC

s_dev wrote: post #2

Theo De Raadt always complained that many of the institutions that run and use OpenBSD don't contribute back. Good to see the EU at least acknowledging that its something that they should explore. They probably use it and its features more than they realise. I suspect there is a strong political motive as well behind being "technologically independent" after the NSA mass surveillance revelations. I like the sound of…

> Theo De Raadt always complained that many of the institutions that run and use OpenBSD don't contribute back.

Sounds like he needs a different license then.

Re: EU study recommends OpenBSD

#5

Post by andrewstuart2 » Mon, Apr 27, 2015, 1:31 PM UTC

Didn't everyone recommend Linux and Mac OS back when vulnerabilities on these systems just hadn't been discovered (or possibly written) yet?

Make OpenBSD popular, add a ton of devs, and attack value, and I'm pretty sure these problems will repeat themselves.

I think the second study, which briefly names OpenBSD, does a good job of pointing out that technological changes alone are insufficient.

Re: EU study recommends OpenBSD

#6

Post by masklinn » Mon, Apr 27, 2015, 1:31 PM UTC

tormeh wrote: post #3

The EU also funds Minix 3 development, though that is more about reliability than security.

The pypy project also benefited from EU grants early in its history.

Re: EU study recommends OpenBSD

#7

Post by brudgers » Mon, Apr 27, 2015, 1:32 PM UTC

Link to Part 1 of the study (wherein the recommendation lies):

http://www.europarl.europa.eu/RegData/etudes/STUD/2015/52740...

Part 2 of the study recommends government funding of Open Source Projects:

http://www.europarl.europa.eu/RegData/etudes/STUD/2015/52741...

Potential and actual conflicts of interest between governments and citizens in regard to privacy are not addressed.

Re: EU study recommends OpenBSD

#8

Post by masklinn » Mon, Apr 27, 2015, 1:32 PM UTC

andrewstuart2 wrote: post #5

Didn't everyone recommend Linux and Mac OS back when vulnerabilities on these systems just hadn't been discovered (or possibly written) yet? Make OpenBSD popular, add a ton of devs, and attack value, and I'm pretty sure these problems will repeat themselves. I think the second study, which briefly names OpenBSD, does a good job of pointing out that technological changes alone are insufficient.

Well there's the difference that security is basically the core focus of OpenBSD's development, and the project actively researches and updates development practices with that in mind.

Re: EU study recommends OpenBSD

#9

Post by [deleted] » Mon, Apr 27, 2015, 1:34 PM UTC

jkyle wrote: post #4

s_dev wrote: post #2

Theo De Raadt always complained that many of the institutions that run and use OpenBSD don't contribute back. Good to see the EU at least acknowledging that its something that they should explore. They probably use it and its features more than they realise. I suspect there is a strong political motive as well behind being "technologically independent" after the NSA mass surveillance revelations. I like the sound of…

> Theo De Raadt always complained that many of the institutions that run and use OpenBSD don't contribute back. Sounds like he needs a different license then.

[deleted]

Re: EU study recommends OpenBSD

#10

Post by cbd1984 » Mon, Apr 27, 2015, 1:35 PM UTC

andrewstuart2 wrote: post #5

Didn't everyone recommend Linux and Mac OS back when vulnerabilities on these systems just hadn't been discovered (or possibly written) yet? Make OpenBSD popular, add a ton of devs, and attack value, and I'm pretty sure these problems will repeat themselves. I think the second study, which briefly names OpenBSD, does a good job of pointing out that technological changes alone are insufficient.

Yes, and a Brinks armored truck is just as vulnerable to carjackings as a Ford Pinto, we just don't know about the vulnerability because nobody drives them.

People were saying the same things about Linux. In the late 1990s and early 2000s. By which time Linux had already become the de-facto go-to OS for web servers around the world. It was, in short, already a high-value target, and yet the apocalypse didn't occur.