Ask HN: Is OpenBSD still considered secure?

3 pointsplaguepilled5 comments

Title says it all. OpenBSD is not set up for SecureBoot out-of-the-box - which, while its not a deal breaker, would be a disadvantage in some contexts. Does anyone know about where the project is at?

View on HN

Version 7.2 just dropped a few days ago; M2 Macs and the new Windows Dev Kit 2023/Project Volterra computer are supported, although things like full graphics hardware acceleration are a work in progress. So it's a going concern. Grab a spare PC or fire up a VM, and jump in!

That rules! Do you know if secure boot is something 'on their radar' at the moment?

Nope; OpenBSD boots fine via UEFI, but secure boot must be disabled. Here's a critical piece on the subject: https://isopenbsdsecu.re/mitigations/secure_boot/

Thanks for clarifying! I hope you don't mind me asking since you've already helped, but do you know if Xenocara isolates app input from other apps a-la Wayland?

I know they do some cool stuff to harden X but I've never been clear whether isolation is included.

Sadly, I can't answer that. I'd check the docs at openbsd.org and search the mailing list archives (https://www.openbsd.org/mail.html).

Reply on news.ycombinator.com