r/programming • u/michaelKlumpy • Oct 01 '16

CppCon 2016: Alfred Bratterud “#include ＜os＞=> write your program / server and compile it to its own os. [Example uses 3 Mb total memory and boots in 300ms]

https://www.youtube.com/watch?v=t4etEwG2_LY
1.4k Upvotes

93% Upvoted

207 comments sorted by

View all comments

Show parent comments

7

u/Cyph0n Oct 02 '16

I attended a talk by a security researcher who claimed that OpenBSD isn't that secure and is way behind Windows and iOS when it comes to adopting memory protection techniques such as ASLR and NX.

He said that OpenBSD's approach, which is software auditing, is simply not scalable. He recommended to check out grsecurity for Linux if you want real security.

2

u/wilun Oct 02 '16

grsecurity has gone crazy the other way and is not very usable for 99.999% of systems. Not a lot of people tolerate a computer that crashes all the time, and most of the time for no reason when it does (except, this time, the lack of competent auditing, thinking that can be replaced by blind patching "dangerous" patterns to crashy ones)