hackertube.io

Hackfest 2015: Theo de Raadt presented "Pledge: A new security technology in openbsd"

Hackfest Communication · talk · Watch on YouTube

Security & hackingOperating systems & kernelsLinux & open-source ecosystems

What it is

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

Why Hacker News recommends it

HN points to it as the canonical overview of pledge and the ideas behind OpenBSD's exploit mitigations.

  • 2 people recommended it
  • 2 different months
  • 1 strong recommendations
  • first 2015, last 2022

What HN commenters said

  1. “I thoroughly enjoyed Theo de Raadt recent talk”

    Talk on pledge, a mitigation that kills processes exceeding declared needs

    lloydde, 2015-12 · Strong recommendation · in “Software developed or maintained by the OpenBSD project”

  2. “Here is a good overview of Pledge[1] by Theo de Raadt.”

    Good overview of pledge by Theo de Raadt

    Timothycquinn, 2017-04 · Recommendation · in “Computer security is broken, but things are starting to improve”

Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.

Topics: openbsd, pledge, sandboxing, theo de raadt, mitigations

Also recommended by the same people