Comment by mtlmtlmtlmtl

I'll never understand this point. It's not as though that slogan is the entirety of OpenBSDs security posture. It's just a damn slogan, but OpenBSD naysayers will never stop talking about it.

And no, OpenBSD is not the most secure OS out there, and very few serious people claim it is. What OpenBSD is, is the most secure option if you want a simple, no bullshit, well documented unix that can still run on obscure legacy hardware using a potato as your RAM. As such, when you actually compare it to other options in that space, I would say it is the most secure. They care about security very deeply, but they do it within that context. So yes, they still use C, because they need to compile on a bunch of dead platforms. And OpenBSD is never gonna be something like Qubes because Qubes needs things like VT-D and a boatload of memory/cores, it's never gonna be GrapheneOS because they can't rely on having MTE, TPM, etc. And that's fine.

They also deserve a lot of credit for contributions to the wider ecosystem as well. Just to give one example, making sure the OS can provide high quality entropy in all contexts with arc4random, which eventually percolated to FreeBSD, Linux, and even MacOS.

But sure, keep talking about the two holes if you want.