All That Is Wrong
allthatiswrong.wordpress.com · Personal blog · on HN since 2010
An anonymous blogger writes critical, heavily documented posts on security claims, software history and technology myths, including OpenBSD, Steve Gibson and browser tabs.
What HN saysCommenters cite it for a contrasting view of OpenBSD's security and for documentation that Opera did not invent tabbed browsing.
18HN people shared it
9linked it in comments
9stories submitted
317story points
6 years agolast shared
2010people per year2026
Most-shared posts
- 1The Insecurity of OpenBSD (2010)9 people · 104 points · first shared 2010 · 84 comments on HN
- 2Opera did not invent tabbed browsing3 people · first shared 2012
- 3Steve gibson is a fraud3 people · first shared 2011
- 4OS X – Safe, yet horribly insecure1 people · 207 points · first shared 2011 · 126 comments on HN
- 5A comparison of books for learning assembly language1 people · 5 points · first shared 2013 · 1 comments on HN
- 6Is making use of unprotected Wi-Fi stealing?1 people · 1 points · first shared 2010 · 1 comments on HN
What HN people wrote when they linked it
stefanp · 2010-06-02
On the subject of OpenBSD's approach to security, check this out: http://allthatiswrong.wordpress.com/2010/01/20/the-insecurity-of-openb…
The title is a little provocative, but the article is really worth it.
xorcist · 2021-05-03
That's not right. Opera had tabs in version 4, released in early 2000.
Some people apparently think tabs has to be drag-and-droppable, which Opera had in 2003, in order to be called tabs:
https://allthatiswrong.wordpress.com/2011/01/14/opera-did-not-invent-t…
Eupolemos · 2019-05-29
According to this site with a bit of link-documentation, FF was first and the Opera-claim is false.
https://allthatiswrong.wordpress.com/2011/01/14/opera-did-not-invent-t…
DanBC · 2017-12-07
nullc · 2014-05-05
I'll leave this link here as offering a contrasting view of openbsd's security posture, and talks about an orthogonal set of security features: http://allthatiswrong.wordpress.com/2010/01/20/the-insecurity-of-openb…
saint-loup · 2012-08-23
Opera didn't invent [modern] tabs http://allthatiswrong.wordpress.com/2011/01/14/opera-did-not-invent-ta…
sciurus · 2011-09-02
The last time I saw a Steve Gibson discussion here, I bookmarked a few good links.
http://attrition.org/errata/charlatan/steve_gibson/
http://radsoft.net/news/roundups/grc/
http://allthatiswrong.wordpress.com/2009/10/11/steve-gibson-is-a-fraud…
Terretta · 2011-08-10
Was this an inside joke?[1]
1. http://allthatiswrong.wordpress.com/2009/10/11/steve-gibson-is-a-fraud…
2. http://news.ycombinator.com/item?id=2510614
dandelion_lover · 2016-06-29
Thank you for a comprehensive answer. I do not think that one vulnerability in 8+ years proofs insecurity of QubesOS (by the way, it was found by their developers). OpenBSD is not free from kernel vulnerabilities on such a long time scale. Security through correctness never works, because people are not ideal. (Xen developers are also trying to decrease the code base and make sure the code is as correct as possible.) The only "silver bullet" is defense in depth [0], i.e., trying everything you can.
I heard [1] that OpenBSD is concentrated on the security of the kernel too much, ignoring the isolation of applications. However, most frequently, attacks come through applications. And this is exactly the point of QubesOS: to isolate the applications as much as possible.
You might also be interested in a comparison between different approaches to security [2].
[0] https://en.wikipedia.org/wiki/Defense_in_depth_(computing)
[1] https://allthatiswrong.wordpress.com/2010/01/20/the-insecurity-of-open…
[2] https://theinvisiblethings.blogspot.de/2008/09/three-approaches-to-com…