THE VIDEO SHELF · operating system security
Hackfest 2015: Theo de Raadt presented "Pledge: A new security technology in openbsd"
Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.
Why HN readers recommended it
HN points to it as the canonical overview of pledge and the ideas behind OpenBSD's exploit mitigations.
This is a summary from the source dataset, not an endorsement by Hacker News or the video creator.
Video & recommendation details
- Creator / channel
- Hackfest Communication
- Topic
- operating system security
- Format
- talk
- Level
- advanced
- HN recommenders in dataset
- 2
- HN mentions in dataset
- 6
- Recommendation years in dataset
- 2015–2022
These counts and years describe the included Hacker News records; they are not YouTube views or the video’s publication date.
From the original HN conversations
Excerpts from the recorded comments. Follow each source for the full comment and surrounding discussion.
I thoroughly enjoyed Theo de Raadt recent talk, "Pledge: A new security technology in openbsd". It left me itching to try OpenBSD. "Pledge() is designed as a mitigation rather than a cure-all, de Raadt explains, but it's a mitigation with an interesting approach: a process …
lloydde on Hacker News · 2015-12
In Software developed or maintained by the OpenBSD projectUntil we build in security mitigation into the kernel and standard libraries of our operating systems, we will always have failure modes where minor errors in code can result in critical vulnerabilities and privilege escalation. I love what OpenBSD is doing with pledges[0] and hope …
Timothycquinn on Hacker News · 2017-04
In Computer security is broken, but things are starting to improve
Summaries, classifications and recommendation records are from the HackerTube source dataset. Read about this library and its limitations.