undeadly honked https://honk.any-key.press/u/undeadly/h/NBzK6x2KM8C7YMcRQQ

Wed, 08 Jul 2026 06:00:05 +0000

OpenBSD's pledge(2) and unveil(2) are developer-friendly, study finds

Academic studies of OpenBSD 's features and their practical impact on security are somewhat rare, but we were pleasantly surprised to see the recent paper A Measurement Study on the Adoption of Pledges and Unveils in the OpenBSD Operating System , by Jukka Ruohonen, Krzysztof Sierszecki, Abhishek Tiwari (all at University of Southern Denmark ).

The paper studies the adoption of the pledge(2) and unveil(2) in the OpenBSD base system and packages over time, and finds that the features provided actually seem to facilitate adoption of secure coding practices.

The paper's abstracts concludes,

All in all, the measurement results indicate that the adoption of system call minimization and sandboxing techniques is not necessarily as troublesome as has often been discussed in the literature.

The full text of the paper is available too, as PDF, HTML, or TeX source

undeadly honked https://honk.any-key.press/u/undeadly/h/84GM38dK6W4N2TVCd7

Mon, 06 Jul 2026 20:00:05 +0000

OpenSSH 10.4/10.4p1 released!

The OpenSSH project has released OpenSSH 10.4.

From the Release Notes: