Theo de Raadt (ruBSD 2013) on HackerTube: recommended by 1 Hacker News commenter across 1 month, 2014–2020.
interview · intermediate · dated
A roughly 14-minute interview with OpenBSD founder Theo de Raadt at ruBSD 2013. He talks about making painful changes, getting real feedback, mitigation techniques compared to other OSs, and virtualization.
Pointed to in OpenBSD and virtualization threads for Theo's candid views on security mitigations and supporting modern x86 VMs.
“I found this ~14 minute interview with Theo de Raadt from ruBSD very interesting”
7 Hacker News comments link this video. Each one links back to its thread.
I found this ~14 minute interview with Theo de Raadt from ruBSD very interesting and apropos OpenBSD's approach to trail-blazing "painful" changes: ▶ this video tl;dw: Changes that must be done, must be DONE. The only way to see the ACTUAL impact is to just do it already and get feedback from real users. When the dust has settled, less brave projects can follow suit. I'm donating.
in “OpenBSD 5.5 Released” · View on HN
Linux security has been criticised[1] for not having security enabled by default, and for allowing users to disable the security measures. This leads to users avoiding setting minimal-rights policies, and leaving the doors open. When security is optional, policy issues in distributions also aren't fixed quickly. To limit applications rights to a minimum, SELinux, firewalls, and (systemd) sandboxes are all tools that could be used, but aren't in most installs. However, I think we are still lacking user-friendly interfaces (opensnitch is ported from MacOS). One idea could be to let the desktop environment restrict one more capability a application on every run, inform the user before running it and ask the user after if the software worked correctly. That would gradually lead to a minimum set of software rights. [1] ▶ this video
in “Linux kernel lockdown, integrity, and confidentiality” · View on HN
your link is from 2007-10-24. more recently: from ruBSD in 2013 ▶ this video (6:36 mark) People do change their minds as they learn new things or the world changes.
in “A native hypervisor is coming to OpenBSD” · View on HN
▶ this video Edit: First 5 Minutes De Raadt speaks about Mitigation Techniques in comparison to other OSs, including FBSD. I fear, this is still true in mid-2015..
in “Docker on FreeBSD” · View on HN
"The biggest problem with OpenBSD has been lack of support for hardware and virtualization, though a lot of the reason for this has been the OpenBSD team's own hostility towards virtualization. I get their reasoning (virtualization is a security issue), but the economic consequences have been devastating to their user base." If you watch the the ruBSD 2013 interview video with Theo de Raadt[1] at the 6:36, he states that they should take a shot at dealing with modern x86 VMs. That gives me quite a bit of hope along with the work on vmware related drivers in each release. I use VMware at work, seems to do ok. 1) ▶ this video
in “Quick and dirty way to have OpenBSD running on Linode” · View on HN
If you watch the the ruBSD 2013 interview video with Theo de Raadt[1] at the 6:36, he states that they should take a shot at dealing with modern x86 VMs. That gives me quite a bit of hope along with the work on vmware related drivers in each release. I use VMware at work, seems to do ok. 1) ▶ this video
in “Welcome to OpenBSD [pdf]” · View on HN
If you watch the the ruBSD 2013 interview video with Theo de Raadt[1] at the 6:36, he states that they should take a shot at dealing with modern x86 VMs. That gives me quite a bit of hope along with the work on vmware related drivers in each release. 1) ▶ this video
in “Security: OpenBSD vs. FreeBSD” · View on HN