OpenBSD security features (English Wikipedia)

Madhavapeddy, Anil (June 26, 2003). "CVS: cvs.openbsd.org: src". openbsd-cvs (Mailing list). Retrieved March 31, 2013.
email 2017-06-13
de Raadt, Theo (May 25, 2005). "CVS: cvs.openbsd.org: src". OpenBSD-CVS mailing list. Removed files: libexec/telnetd
de Raadt, Theo (May 11, 2006). "Re: security bug in x86 hardware (thanks to X WIndows)". openbsd-misc (Mailing list). Retrieved May 26, 2016.
Herrb, Matthieu (November 29, 2006). "CVS: cvs.openbsd.org: XF4". openbsd-cvs (Mailing list). Retrieved May 26, 2016.
Kettenis, Mark (February 15, 2014). "CVS: cvs.openbsd.org: xenocara". openbsd-cvs (Mailing list). Retrieved May 26, 2016.
Madhavapeddy, Anil (July 31, 2003). "CVS: cvs.openbsd.org: src". openbsd-cvs (Mailing list). Retrieved March 13, 2026.
Acar, Can Erkin (January 28, 2004). "CVS: cvs.openbsd.org: src". openbsd-cvs (Mailing list). Retrieved March 13, 2026.

openbsd.org (Global: low place; English: 9,957^th place)

openbsd.org

"OpenBSD 3.3". OpenBSD. Retrieved May 28, 2016. Integration of the ProPolice stack protection technology [...] into the system compiler.
"OpenBSD 3.4". OpenBSD. Retrieved May 28, 2016. ProPolice stack protection has been enabled in the kernel as well.
"OpenBSD 5.8". OpenBSD. Retrieved May 28, 2016. Support for the NX (No-eXecute) bit on i386, resulting in much better W^X enforcement in userland for hardware that has this feature.
"OpenBSD 5.3". OpenBSD. Retrieved May 26, 2016.
"OpenBSD 7.3". www.openbsd.org. Retrieved April 19, 2023.
Unangst, Ted. "signify: Securing OpenBSD From Us To You". www.openbsd.org. BSDCan 2015 (June), Ottawa, Canada. Retrieved July 12, 2022.
"OpenBSD 5.5". www.openbsd.org. Retrieved July 12, 2022.
"OpenBSD: Innovations". www.openbsd.org.
"OpenBSD 6.4 Errata". www.openbsd.org. Retrieved May 23, 2019.
"OpenBSD: Security — "Secure by Default"". www.openbsd.org. Retrieved September 27, 2023.
"pledge() - a new mitigation mechanism". OpenBSD. Retrieved May 19, 2018.

man.openbsd.org

"strncpy – copy part of a string to another". OpenBSD manual pages. Retrieved May 14, 2021.
"strncat – concatenate a string with part of another". OpenBSD manual pages. Retrieved May 14, 2021.
"strlcpy, strlcat – size-bounded string copying and concatenation". OpenBSD manual pages. Retrieved May 14, 2021.
"issetugid – is current executable running setuid or setgid". OpenBSD manual pages. Retrieved May 14, 2021.
"arc4random, arc4random_buf, arc4random_uniform – random number generator". OpenBSD manual pages. Retrieved May 14, 2021.
"gcc-local – local modifications to gcc". OpenBSD manual pages. Retrieved May 28, 2016. gcc comes with the 'ProPolice' stack protection extension, which is enabled by default.
"xf86 – X Window System aperture driver". OpenBSD manual pages. Retrieved May 14, 2021.
"unveil — unveil parts of a restricted filesystem view". OpenBSD manual pages. Retrieved May 15, 2020.

cvsweb.openbsd.org

de Raadt, Theo (April 10, 1999). "disable telnet/ftp/login by default, for now". OpenBSD.

qubes-os.org (Global: low place; English: low place)

"Verifying signatures". Qubes OS. Retrieved July 12, 2022.

securedrop.org (Global: low place; English: low place)

"Share and accept documents securely". SecureDrop. Freedom of the Press Foundation. Retrieved July 12, 2022.

securityfocus.com (Global: low place; English: low place)

Biancuzzi, Federico (October 12, 2005). "OpenBSD's network stack". SecurityFocus. Retrieved December 10, 2005.

slashdot.org (Global: 6,993^rd place; English: 6,086^th place)

bsd.slashdot.org

Miller, Robin (December 11, 2000). "Theo de Raadt Responds". Slashdot. Archived from the original on July 28, 2011. Retrieved May 16, 2014.

sourceware.org (Global: low place; English: low place)

Drepper, Ulrich (August 8, 2000). "Re: PATCH: safe string copy and concatenation". libc-alpha@sources.redhat.com (Mailing list). Retrieved May 26, 2016.

torproject.org (Global: low place; English: low place)

support.torproject.org

"How can I verify Tor Browser's signature? | Tor Project | Support". support.torproject.org. Retrieved July 12, 2022.

undeadly.org (Global: low place; English: low place)

"Initial support for guided disk encryption in the installer". undeadly.org. Retrieved April 19, 2023.
"Xorg can now run without privilege on OpenBSD". OpenBSD Journal. February 22, 2014. Retrieved May 26, 2016.

usenix.org (Global: 7,359^th place; English: 4,657^th place)

Miller, Todd C.; de Raadt, Theo (June 6, 1999). strlcpy and strlcat - Consistent, Safe, String Copy and Concatenation. USENIX Annual Technical Conference. Monterey, California. Retrieved May 26, 2016.
Frantzen, Mike; Shuey, Mike (August 13, 2001). StackGhost: Hardware Facilitated Stack Protection. 10th USENIX Security Symposium. Washington, D.C. Retrieved May 26, 2016.
de Raadt, Theo; Hallqvist, Niklas; Grabowski, Artur; Keromytis, Angelos D.; Provos, Niels (June 6, 1999). Cryptography in OpenBSD: An Overview. USENIX Annual Technical Conference. Monterey, California. Retrieved January 30, 2005.
Provos, Niels; Mazières, David (June 6, 1999). A Future-Adaptable Password Scheme. USENIX Annual Technical Conference. Monterey, California. Retrieved May 26, 2016.
Provos, Niels (August 14, 2000). Encrypting Virtual Memory. 9th USENIX Security Symposium. Denver, Colorado. Retrieved April 9, 2006.
Provos, Niels; Friedl, Markus; Honeyman, Peter (August 4, 2003). Preventing Privilege Escalation. 12th USENIX Security Symposium. Washington, D.C. Retrieved May 26, 2016.

veracrypt.fr (Global: low place; English: low place)

"VeraCrypt - Free Open source disk encryption with strong security for the Paranoid". veracrypt.fr. IDRIX. Retrieved July 12, 2022.

web.archive.org (Global: 1^st place; English: 1^st place)

"GCC extension for protecting applications from stack-smashing attacks". IBM Research. Archived from the original on June 4, 2014. Retrieved May 26, 2016.
Miller, Robin (December 11, 2000). "Theo de Raadt Responds". Slashdot. Archived from the original on July 28, 2011. Retrieved May 16, 2014.

OpenBSD security features (English Wikipedia)

apple.com (Global: 70th place; English: 55th place)

support.apple.com

books.google.com (Global: 3rd place; English: 3rd place)

debian.org (Global: 3,258th place; English: 2,984th place)

freebsd.org (Global: 6,366th place; English: 5,010th place)

docs.freebsd.org

ibm.com (Global: 1,369th place; English: 968th place)

research.ibm.com

kali.org (Global: low place; English: low place)

marc.info (Global: low place; English: low place)

openbsd.org (Global: low place; English: 9,957th place)

openbsd.org

man.openbsd.org

cvsweb.openbsd.org

qubes-os.org (Global: low place; English: low place)

securedrop.org (Global: low place; English: low place)

securityfocus.com (Global: low place; English: low place)

slashdot.org (Global: 6,993rd place; English: 6,086th place)

bsd.slashdot.org

sourceware.org (Global: low place; English: low place)

torproject.org (Global: low place; English: low place)

support.torproject.org

undeadly.org (Global: low place; English: low place)

usenix.org (Global: 7,359th place; English: 4,657th place)

veracrypt.fr (Global: low place; English: low place)

web.archive.org (Global: 1st place; English: 1st place)

apple.com (Global: 70^th place; English: 55^th place)

books.google.com (Global: 3^rd place; English: 3^rd place)

debian.org (Global: 3,258^th place; English: 2,984^th place)

freebsd.org (Global: 6,366^th place; English: 5,010^th place)

ibm.com (Global: 1,369^th place; English: 968^th place)

openbsd.org (Global: low place; English: 9,957^th place)

slashdot.org (Global: 6,993^rd place; English: 6,086^th place)

usenix.org (Global: 7,359^th place; English: 4,657^th place)

web.archive.org (Global: 1^st place; English: 1^st place)