Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [openbsd]

OpenBSD is a Unix computer operating system descended from Berkeley Software Distribution (BSD) which emphasizes portability, standardization, correctness, proactive security and integrated cryptography.

Filter by
Sorted by
Tagged with
0 votes
3 answers
364 views

Would FreeBSD and OpenBSD have similar known-past-vulnerability stats if they were configured similarly?

OpenBSD has had much fewer "code execution" vulnerabilities and even fewer exploits than FreeBSD, according to https://cvedetails.com : https://www.cvedetails.com/product/163/Openbsd-...
MWB's user avatar
  • 333
5 votes
4 answers
3k views

Why do people use "burner phones" rather than Signal or similar solutions?

Why do people use burner phones rather than Signal or similar? I would imagine that if you are high value target the police or intelligence service would simply eavesdrop every phone call passing the ...
d-b's user avatar
  • 489
2 votes
1 answer
1k views

Is there something similar to Firejail for OpenBSD?

On Linux, Firejail (https://firejail.wordpress.com/) offers an easy way to sandbox web browsers and other programs. Is there an easy way to sandbox a web browser on OpenBSD ? (reserve question: is ...
puzzle's user avatar
  • 81
6 votes
2 answers
2k views

Is installing an old version of OpenBSD on an internet-facing server a security risk?

I have one specific package (moodle) which is not available on newer versions of the aforementioned OS. The last version of moodle was available on OpenBSD 5.3, which is more than 4 years old. ...
user166931's user avatar
7 votes
1 answer
2k views

OpenBSD is implementing KARL. How does this improve security?

According to this article, OpenBSD is implementing a feature that will create a unique kernel every time a user reboots or upgrades his computer. It is called KARL, "Kernel Address Randomized Link". ...
Digital fire's user avatar
  • 3,186
4 votes
3 answers
466 views

How should I respond to an unrecognized client in my DHCP logs?

I've found a strange hostname in my dhcpd.leases file and I'm wondering what steps I should take in response. I have a simple home network: my modem is plugged into a router running OpenBSD 6.0, and ...
Ben's user avatar
  • 141
3 votes
2 answers
779 views

Is OpenBSD's low number of exploits really that relevant?

The number of OpenBSD's known vulnerabilities is tiny, but so it's the number of users. How significant is this scarceness of exploits found?
Pierre B's user avatar
  • 248
2 votes
2 answers
371 views

How does separating concerns into separate processes (without enforcement) help security?

In this talk on privilege separation, Theo de Raadt explains that OpenBSD's ntpd has a master process which calls settimeofday(), a DNS process responsible for querying DNS servers, and an NTP ...
strugee's user avatar
  • 719
1 vote
1 answer
968 views

Why does paxtest show OpenBSD as vulnerable?

install60.iso Executable anonymous mapping (mprotect) : Vulnerable Executable bss (mprotect) : Vulnerable Executable data (mprotect) : Vulnerable Executable heap (mprotect) : Vulnerable Executable ...
Peter84753's user avatar
1 vote
2 answers
349 views

cc-memtest for testing memory security for OpenBSD

http://blog.acumensecurity.net/revisiting-wx-with-openbsd-6-0/ http://blog.acumensecurity.net/fpt_wx_ext-1-a-rundown/ Has anybody got the cc-memtest binary or source code or cc-memtest? A program ...
Peter84753's user avatar
6 votes
2 answers
857 views

Is there any safe OpenBSD desktop screenlocker?

Linux screen lockers don't seem so very secure, at least not in the past [1, 2, 3]. But is there any very secure OpenBSD screen locker? (Or perhaps OpenBSD uses the same desktop related source code ...
KajMagnus's user avatar
  • 707
1 vote
1 answer
4k views

Is BSD more secure than GNU/Linux? [closed]

BSD controls the OS while Linux is just a kernel. BSD is less popular than Linux, but which one is better in terms of security?
Henry WH Hack v3.0's user avatar
2 votes
2 answers
217 views

Does OpenBSD's security protect against identical vulns in other OSs?

I have been reading about OpenBSD and its more secure design. I was wondering therefore about the difference this makes to applications which can run on any number of OS. Lets take the example of a ...
Ekrem's user avatar
  • 103
0 votes
3 answers
245 views

Verifying consistency of OpenBSD LiveCD [closed]

OpenBSD offers a live cd that can be downloaded at http://livecd-openbsd.sourceforge.net/ However, there is no md5sum, no sha256, no checksum of any kind on this page. How can we test this version ...
Pierre B's user avatar
  • 248
8 votes
1 answer
3k views

Is receiving IPv4 connections on AF_INET6 sockets insecure?

The FreeBSD man page for inet6 has the following: By default, FreeBSD does not route IPv4 traffic to AF_INET6 sockets. The default behavior intentionally violates RFC2553 for security reasons. Listen ...
imgx64's user avatar
  • 1,380
1 vote
1 answer
2k views

How to detect/mitigate UDP port scan using OpenBSD and pf

One of our OpenBSD firewalls experienced a flood of UDP traffic from a compromised host within our internal network. The traffic was exchanged between the compromised internal host and a single ...
Jeff Stice-Hall's user avatar
2 votes
3 answers
2k views

How to detect suspicious activity on a web and mailserver?

There is a OpenBSD (64bit; 5.5) server having nginx (HTTP/HTTPS) and SMTP (OpenSMTP). Question: What are the best practices to detect suspicious activity? Are there any scripts that shows ...
somelooser28533's user avatar
3 votes
2 answers
442 views

What's there to harden for a home Unix-box behind Comcast cable modem?

I'm learning that much of the security advice I come across under the "hardening" heading simply does not apply to a single-user home desktop box sitting in a private wireless IPv4 LAN behind a ...
kjo's user avatar
  • 1,063
14 votes
2 answers
2k views

Do any OpenBSD protections mitigate the damage from Heartbleed?

OpenBSD provides a list of substantial protections against exploits inherent to the OS. Most of these features are not found in other operating systems, or at least are not turned on by default. The ...
Brian M. Hunt's user avatar
3 votes
0 answers
265 views

BSD encryption advantages [closed]

If someone who knows about the BSD project has a moment to answer this, I'm wondering a few things about the encryption used. It's more than what I'm finding in the docs and on Wiki/Google (even the ...
stackuser's user avatar
  • 431
3 votes
2 answers
2k views

For a simple purpose, a simple httpd server is more secure?

Using OpenBSD for example, we have a task to serve static html files, no php/cgi/etc. Q: What would be more secure? Using a default apache/nginx -OR- using (KISS principle) a chrooted www server ...
gasko peter's user avatar
6 votes
4 answers
1k views

In this case, does Virtualization gives more security?

A: running an OpenBSD machine with a httpd and a smtp server? vs. B: running an OpenBSD machine as virtualization host with QEMU having two guest OpenBSD system: one for smtp and one for httpd. Q: ...
gasko peter's user avatar
5 votes
1 answer
237 views

OpenBSD, fbtab and X Window [closed]

The afterboot(8) man page of OpenBSD advises "You might wish to tighten up security more by editing /etc/fbtab as when installing X. " I would like to know what entries in /etc/fbtab would make sense ...
Nicholas's user avatar
0 votes
2 answers
995 views

Why is systrace insecure?

Why is the: http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=4 Systrace marked as insecure? Can someone explain the "why"?
gasko peter's user avatar
3 votes
4 answers
808 views

Learn about network and security for securing a server

I'm setting up an OpenBSD server that I want to connect to the Internet (it's going to be used to host a site - so, with Apache, SQLite and the like). I want it to be as secure as possible. Social ...
David Moore's user avatar
2 votes
3 answers
2k views

Is running an OpenBSD in QEMU on an OpenBSD machine safe?

Is running an OpenBSD** using QEMU on an OpenBSD safer then running just natively an OpenBSD? ** = only used for apache + scp + ssh I'm thinking about running the OS/webserver in QEMU because then I ...
LanceBaynes's user avatar
  • 6,279
12 votes
3 answers
15k views

How to best set up public WiFi without giving access to the rest of my network?

For reference, this is just for my home network. Anyway, I have quite a few of my neighbors ask me to share my internet with them. I'd really like to eliminate this "here's the password" portion ...
Earlz's user avatar
  • 614
6 votes
3 answers
2k views

Increase security without using "dynamic" kernel modules?

I recently read that NOT using loadable kernel modules could increase security. In my interpretation this consist about recomplying the kernel with only built-in kernel modules. (how to disable ...
LanceBaynes's user avatar
  • 6,279
12 votes
9 answers
3k views

Where to download OpenBSD release ISO's over HTTPS?

OpenBSD claims to be highly secure. So why doesn't it allow downloading the release iso's over HTTPS? Or I'm missing something? Can someone please explain this to me?
LanceBaynes's user avatar
  • 6,279
3 votes
2 answers
536 views

OBSD X11 as non-root?

If running X11 as root is not a very good idea, then can anyone mention a method/solution, how to still use a GUI, and not having X11 as root?
LanceBaynes's user avatar
  • 6,279
5 votes
1 answer
992 views

OpenBSD-based LiveCD/LiveDVD - is it secure? is it offical?

Does the OpenBSD LiveCD/LiveDVD get deeply audited like the original OpenBSD? Is it an official "port"? Experiences with it?
LanceBaynes's user avatar
  • 6,279
4 votes
2 answers
2k views

OpenBSD 32 or 64bit installer?

is the 64 bit or the 32 bit installer better? (not counting that if i have x>4 GByte RAM) - so i mean like is there any ASLR in OpenBSD? https://secure.wikimedia.org/wikipedia/en/wiki/...
LanceBaynes's user avatar
  • 6,279
14 votes
3 answers
12k views

OpenBSD vs. NetBSD security

If I search for the two words: OpenBSD and NetBSD on http://www.exploit-db.com/ then I get 17 hits regarding security bugs on OpenBSD, and 8 hits regarding security bugs on NetBSD. So what are the ...
LanceBaynes's user avatar
  • 6,279
15 votes
5 answers
950 views

What is the potential impact of the alleged OpenBSD IPSEC attack?

Recently there is a bit of concern over encryption back doors in IPsec and while the status of this has not been confirmed, I don't know what impact something like this might have. For instance, does ...
Incognito's user avatar
  • 5,264