Hacker News Reader

You mean, overriding defaults as conditions to get a remote hole?

Can you exploit a bare OpenBSD install by default remotely, yes or not?

Everything else is bullshit.

This is a bit like whether Magneto can escape the Plastic Prison (yes or no) without Logan traveling back in time and altering the timeline.

Or Trunks killing Cell.

Security is not Boolean

By default you can only set two service settings: Enabling sshd, or not.

And sshd is, by default:

- not exploitable by this bug

- PF rules are not set for incoming connections

The X issue. By default:

- PF doesn't accept any connection to X ports to

anything not coming from lo0, localhost interface

Smtpd. By default:

- it just listens on localhost

- there is no forwarding

- PF rules aren't enabled