Page 1 of 1

OpenSSL forked into LibreSSL

Posted: 23 Apr 2014, 13:47
by gR!ns

Re: OpenSSL forked into LibreSSL

Posted: 23 Apr 2014, 17:04
by gaoesa
Hardware support is usually lagging in BSDs. Otherwise, there are some benefits and some not so great things. Though usually the not so great things are equally present in Linuxes, but just hidden from the users. I'll just name one good thing on BSDs: Jails. There is nothing equivalent to that on Linux distributions.

Re: OpenSSL forked into LibreSSL

Posted: 23 Apr 2014, 18:25
by TheSilencerPL
A little bit about FreeBSD jails, so that you don't get hurt by it:
http://aboutthebsds.wordpress.com/2013/ ... ty-danger/

Re: OpenSSL forked into LibreSSL

Posted: 23 Apr 2014, 18:49
by gaoesa
Hehe. I see you have been troll baited. That is a well known troll acount. His other posts include claims of known BSD people being convicted serial killers. Apple hand picking BSD developers etc. I didn't read this article because I have read couple in the past already. But you get the idea of how valuable all the information is that from that source.

Re: OpenSSL forked into LibreSSL

Posted: 23 Apr 2014, 20:19
by gaoesa
Ok. I had a little time so I skimmed over what he has written this time. First of all I will attach to the chroot thing. He has the history wrong. Here is a better reference for it http://en.wikipedia.org/wiki/Chroot. Now, he is correct that chroot has long history of vulnerabilities and it is not only tedious to create, but also there are several security considerations http://www.unixwiz.net/techtips/chroot-practices.html. However, he seems to have the usual Linux misconception that a jail and a chroot is the same thing. They are not the same thing. Jails are practically virtual machines that have read only access to kernel services in their own sandboxes. Without any extra overhead that comes from other virtualization techniques. The limitation is of course, that you can't run just any OS in the jails. But they are useful for separating public services from the whole system with the added benefit that setting them up is a lot easier than chrooting. Most of the time you can't even properly chroot programs in any *nix OS because of all the dependencies. Let alone allowing some users to a chroot and thinking they wouldn't break out.

In terms of security, I would place FreeBSD in the middle of Linux and OpenBSD. The Linux people don't always put too much effort to secure their stuff or even supplying the users the program versions with the latest exploit fixes. Maybe not exactly relevant but I'll reference this anyway in here: http://article.gmane.org/gmane.linux.kernel/706950. The OpenBSD is most likely the most secure operating system just as it claims. It's also not necessarily as hard to use as the reputation claims. However, they don't make any compromises for the sake of convenience. FreeBSD does have a good security track, but they also do make compromises and apparently they are a little bit on the dark side when it comes to security announcements from the OpenBSD people.

So take your pick, for maximum security take OpenBSD, for maximum (*nix) convenience with less focus on security, take Linux. If neither one especially appeals to you, pick FreeBSD.

Bottom line is that most of the time the technical stuff (everything else is just weird) this guy writes is the opposite to the truth. FreeBSD is certainly not the greatest thing out there, but not a bad one either.

Re: OpenSSL forked into LibreSSL

Posted: 01 May 2014, 11:24
by gaoesa
Some background for the LibreSSL fork
http://www.tedunangst.com/flak/post/origins-of-libressl