OpenBSD workstation hardening.

I wanted to share a list of hardening you can do on your OpenBSD workstation, and explaining the threat model of each change...

https://dataswamp.org/~solene/2023-12-31-hardened-openbsd-workstation.html

#security #system

Some OpenBSD features that aren't widely known.

In this blog post, you will learn about some OpenBSD features that can be useful, but not widespread. They often have a niche usage, but it's important to know they exist to prevent you from reinventing the wheel...

https://dataswamp.org/~solene/2024-02-20-rarely-known-openbsd-features.html

#system #security

Re: lcamtuf on the recent xz debacle

Just for clarity, does anyone know what "Unix-like operating systems" would be affected by this?

None. TLDR: The build process of the backdoor explicitly aborts on platforms other than Linux x86-64...

https://marc.info/?l=openbsd-misc&m=171227941117852&w=2

#security #xz