> > Note that the reason that OpenBSD can claim only two security holes in > the default install in the past 10 years is that there are no services > active in a default install (you have to add commands to the startup > script to enable them).
Except they don't make that claim, OpenBSD claims two _remote_ security holes in the last ten years, which is entirely different from only two security holes. They aren't making any claims about local exploits. > > People reoutinely built appliances like routers using OpenBSD and e.g. a > Soekris box and put it on the shelf. They may only update it when a > security bug happens (rarely). Since there are simple HOWTOs for making > OpenBSD on a CF card, updating the appliance consists of swapping the CF > card. People do the same thing using variants of the Linux kernel. The bsd kernel is nothing special in that regard :) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

