> Quernus <[email protected]> wrote:
>> On 27 Sep 2015, at 16:10, Stuart Henderson <[email protected]> wrote:
>>
>>> On 2015-09-27, Quernus <[email protected]> wrote:
>>>
>>> I actually run OpenBSD in a VM on FreeBSD using bhyve which gives me the
>best
>>> of both worlds.
>>
>> This has an impact on security, of course.
>
>In what way? If you mean the hypervisor does not provide adequate separation
>between VMs then that is not really an issue as I control the host and all
>VMs. If any are compromised then I have bigger issues.
We don't need to make precise claims about which parts will break, nor
how.
The problem here is the process of gluing all-the-parts together
without evaluating what is oging on. You need not talk about big
issues once things go worng -- you do have big issues right from the
start, just like everyone else.
Once you hook a system up to the internet, it is the internet that is
trying to push the buttons of the system.
By combining many disparate pieces together, you require all those
layers of software to make the right decisions, and never make wrong
decisions. You require all the programmers to be largely infallable.
You are testing all the parts at once.
There's a general rule which may apply here:
More software, more bugs.
It is clear that your priority is on gaining more operational
features, rather than greater quality.
I know lots of people are doing the same. Anyways, good luck with it
long term.
