On Fri, Oct 13, 2017 at 9:51 PM, Luke Small <lukensm...@gmail.com> wrote:

> Maybe more things should be randomized like the stack canaries. Is that a
> new idea?


OpenBSD randomize perhaps more than any other OS.  Randomization comes up
often in discussions.  If something isn't randomized that could be, it's
probably because it's really hard or would break stuff that people really
need to work.

If you think you know of something that could be randomized with no costs
or downsides, you should research it (who else has tried it?), or implement
it yourself, or at least work through the consequences enough to
demonstrate that it won't make people hate you afterwards.

If you have to ask "What about <blah>?", then you're still unsure of the
costs and consequences, so stop, go back, and figure them out!  Or are you
expecting OpenBSD developers to field, implement, and test every random
(heh) suggestion about randomization?


Philip Guenther

Reply via email to