HN Explorer

Ask HN: Is OpenBSD still considered secure?

3 points by plaguepilled ↗ HN
Title says it all. OpenBSD is not set up for SecureBoot out-of-the-box - which, while its not a deal breaker, would be a disadvantage in some contexts. Does anyone know about where the project is at?

5 comments

[ 3.1 ms ] story [ 22.2 ms ] thread
cylinder714
Version 7.2 just dropped a few days ago; M2 Macs and the new Windows Dev Kit 2023/Project Volterra computer are supported, although things like full graphics hardware acceleration are a work in progress. So it's a going concern. Grab a spare PC or fire up a VM, and jump in!
plaguepilled
That rules! Do you know if secure boot is something 'on their radar' at the moment?
cylinder714
Nope; OpenBSD boots fine via UEFI, but secure boot must be disabled. Here's a critical piece on the subject: https://isopenbsdsecu.re/mitigations/secure_boot/
plaguepilled
Thanks for clarifying! I hope you don't mind me asking since you've already helped, but do you know if Xenocara isolates app input from other apps a-la Wayland?

I know they do some cool stuff to harden X but I've never been clear whether isolation is included.