Hacker News Reader

OpenBSD is the most security hardened OS out there, and the project maintains many pieces of software people take for granted, like pf, openssh, and libressl. FreeBSD is definitely the most robust, and is a very good server OS. NetBSDs niche is how many platforms can run it. If it's supported by GCC, theres a decent chance NetBSD will run on it

View on HN

OpenBSD is the most security hardened OS out there,

I think this requires a lot of additional qualifications. For instance, AOSP and Android are much more hardened when it comes to isolation between GUI applications.

Among those qualifiers would also be 'free open source'. I'd think there are hardened operating systems which are not much, if at all, talked about in public. Perhaps, in the age of LLMs finding most security vulnerabilities, those are actually demonstrably more secure now than the well reviewed public ones.

... then there's Qubes OS, which beats the pants off AOSP isolation using Xen. Feels like the labelled desktop of the Trusted Solaris days! If one wanted to utilize SELinux in TemplateVMs for further hardening, that is always an option.

It definitely isn't, when placed against IBM and Unisys mainframes/micros, where security leads OS design for decades.

Reply on news.ycombinator.com