Linked by Thom Holwerda on Wed 20th Jun 2007 20:07 UTC, submitted by Valour
Thread beginning with comment 249557
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
RE: Besides services not being on...
by Almafeta on Thu 21st Jun 2007 16:16
in reply to "Besides services not being on..."




Member since:
2005-11-07
...doesn't OpenBSD do other things like encrypt on-the-fly and randomly assign memory addresses required by the applications?
My feeling is the OpenBSD team is very conscious about keeping the hardware, OS, and applications separate. Meaning, they know the OS is the middle man between the hardware and applications so they work to make sure the OS can fulfill the various requests while keeping applications from messing with other applications and their data. At no point are they concerned with the applications since it is the job of the developers to develop their applications within the confines of the OpenBSD security model.
Microsoft, on the other hand, seems to do the opposite in that they come up with a feature for an application and then modify the OS to make it happen. Internet Explorer is one that comes to mind. I am sure Microsoft is working on improving security, but they are still trying to "bake" stuff into the OS.