OpenBSD Innovations (openbsd.org)

Article summary

The OpenBSD project has developed and maintained various software and ideas, including IPSec, IPv6, privilege separation, and stack protection, among others. These innovations have been implemented over the years, with some being the first of their kind in a free operating system. The project's focus on security and quality has led to the development of unique features and mitigations. The article lists these innovations in chronological order, highlighting the project's contributions to the field.

Main themes

• OpenBSD innovations
• Security features
• Operating system development
• Software maintenance
• Security mitigations

What commenters say

• The pledge and unveil features are underrepresented in the article, despite being a significant security innovation in OpenBSD.
• The approach of pledge and unveil is confusing and may not be effective in all scenarios, as it relies on the program to set its own permissions.
• OpenBSD's security features, such as pledge and unveil, are not widely adopted due to limited resources and the complexity of implementing them.
• The lack of Bluetooth support in OpenBSD is a significant drawback for laptop users, but it was removed due to code quality concerns.
• OpenBSD's focus on security and quality has led to the development of unique features, but it may not be suitable for all use cases, such as gaming or desktop environments.
• The article's criticism of OpenBSD is harsh but fair, highlighting both the project's strengths and weaknesses.
• The use of eBPF could be an alternative or complementary approach to OpenBSD's security features, such as pledge.
• OpenBSD's slow performance on laptops is a significant issue, but it can be mitigated by using GPU-accelerated rendering and other workarounds.