PickVids36C3 - A systematic evaluation of OpenBSD's mitigations
推荐理由
the presenter explicitly calls out OpenBSD's tendency to present mitigations without specific examples of CVEs it defeats
说明
这是2019年由media.ccc.de发布的一部演讲，主题归在Security & hacking。它讲的是operating system security这一支里的具体问题，而不是把整个领域扫一遍。适合想看推导、证明或实现细节的人。内容上可以概括成：A 36C3 talk that systematically evaluates OpenBSD's exploit mitigations, asking how effective they really are and what they cost in performance, complexity and inspectability. It challenges the project's security marketing.这些读者给出的理由，核心是：Cited in OpenBSD threads as a skeptical, evidence-based counterpoint to claims about its security, though some dispute its objectivity.它贴着当时的技术，看的时候要记得那是那个年份的判断。从2020年到2024年，有1位不同的读者在1个不同月份把它推荐出来，其中明确叫别人去看的有0次。适合一次性看完。讲者把一个判断讲透，演示是在给这个判断配例子。如果已经会了基本定义，就把注意力放在它怎么把operating system security变成能跟着复述的例子。
视频信息
- 频道
- media.ccc.de
- 时长
- 53 分 2 秒
- 发布年份
- 2019
同主题更多
- Behind the Scenes of iOS Security
- Why Electronic Voting Is Still A Bad Idea
- USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
- Defcon 18 Changing threats to privacy Moxie Marlinspike Part
- 28c3: The Science of Insecurity
- DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome