36C3 - A systematic evaluation of OpenBSD’s mitigations

OpenBSD markets itself as a secure operating system, but doesn’t provide much evidences to back this claim. The goal of this talk is to evaluate how effective OpenBSD’s security mitigation are, in a systematic, rational and comprehensive way. OpenBSD’s website advertises a secure and modern operating system, with cool and modern mitigations. But no rational analysis is provided: are those mitigations effective? what are t