On Jan 9, 2008, at 1:03 PM, Nikns Siankin wrote:
Facts about OpenBSD:
# Stable release cycle.
If you want to run latest bugfree ClamAV or FireFox - upgrade to
CURRENT!
But don't forget to buy release CD's!!!
# Secure By Default.
OpenBSD uses broken WEP for securing WiFi networks.
Search the list for why WPA is considered a "mess" and "complicated".
Has no WPA/WPA2 support.
# Do not let serious problems sit unsolved.
OpenBSD doesn't need MAC because it has their own security flawed
systrace.
# Use of Cryptography.
OpenBSD uses file-backed encryption (svnd) which is very suited
for Full-disk-encryption. NOT.
# Full Disclosure.
OpenBSD at first denies remote exploitable flaws.
That's just not true.
DoS flaws gets marked as reliability not security issues.
That is true. Do you propose lumping every issue as a security issue?
I hope they don't.
# Easy maintainable.
OpenBSD distributes source patches to make your farm of
Pentium2 firewalls updated easly.
Are you hoping for "apt-get upgrade"? There are lots of people that
compile their updates and apply them to multiple servers with ease.
Just because you don't know how to do something, doesn't mean it can't
be done.
# Secure Distribution.
The most secure operation system gets distributed on FTP servers
as unsigned binaries.
You should create your own binaries if you want secure binaries.
Disclaimer: Like it or not. I'm OpenBSD user for 4 years.
Shit on my head - shit on all OpenBSD supporters.
I'm not subscribed, cc me, if have something to say.
I too have been an OpenBSD user for number of years. All of the issues
that you bring up have been addressed a number of times on this list.
Solutions for most of these issues exist. OpenBSD does not claim to be
an auto-magic do-it-all-for-you OS like some of the linux distros. You
don't really think OpenBSD provided binaries are more secure than
building your own do you?
I am no developer, however, I have learned that to get something done,
you need to contribute something. As a user I don't fully understand
the technical reasons for implementing something a certain way or not
implementing something at all.
You have different expectations of OpenBSD than what OpenBSD actually
does and provides. If you want to see changes, this email is the wrong
way to do that. If you just want to complain, well now you did it and
now you should try another OS.
Regarding your email etiquette, you should have thought through your
email a little more before sending it. I would hate to work with you
or be one of your customers if that's how you write emails.
