The insecurity of [¿a not default?] Openbsd reddit / BSD ---------------------------------------------------------------------- [deleted] · 2010-01-28 14:14 I think that overall, a nice discussion runs here ---------------------------------------------------------------------- masta · 2010-01-28 15:41 > It is also odd that for a project that claims to be focused on security, sendmail is still their MTA of choice and BIND is still their DNS server of choice. Sendmail and BIND are old, and they both have atrocious security records. To look through OpenBSD’s security history, many of the vulnerabilities can be attributed to BIND or Sendmail. Why would anyone choose these programs for a security focused operating system, when far more secure alternatives designed from the ground up to be secure are available? Examples might include Exim or Postfix and MaraDNS or NSD. I lol'ed. I have always hated two people in the world, and they are Theo and Bernstein. I don't think either of the two would want their softwarez mingling with each others if they could do anything about it. The funny thing is they are identical minds, and personalities. I will say that Sendmail. or any other Vixie warez don't belong in any OS, EVER! Vixie is the one man most responsible for the most security bugs and problems online than any single other person. If I met him in a dark ally ... ---------------------------------------------------------------------- hanklords · 2010-01-28 15:50 > An argument often made by proponents of OpenBSD is the extensive code auditing performed on the base system to make sure no vulnerabilities are present. The goal is to produce quality code as most vulnerabilities are caused by errors in the source code. If you are willing to write a secure OS this should be the prerequisite. SELinux and friends are great but they are the second step. If you want a vulnerability free software, write a code with no vulnerability (in practice : follow a process to limit the number of vulnerabilities) and then write code to make it harder to exploit the vulnerabilities which passed through. ---------------------------------------------------------------------- dwchandler · 2010-01-28 16:48 See the [misc@openbsd.org thread](http://marc.info/?l=openbsd- misc&m=126412951221902&w=2) for a discussion on this. ---------------------------------------------------------------------- dx__ · 2010-01-30 21:37 That was actually far more informative than the article itself! Thanks.