Skip to content
HomeVideosBooksBlogs
AllTop postsTopics
Podcasts
HistoryListsWatch laterLiked videosFollowing

The videos, books, blogs and podcasts Hacker News keeps recommending, all in one place.

VideosBooksBlogsPodcastsAboutPrivacySettings

Data from Hacker News, HackerTube, HackerBooks, HackerBlogs and Open Library. Credits · Not affiliated with Y Combinator.

HomeVideosBooksBlogsPodcasts
Ctrl K
    A

    All That Is Wrong

    allthatiswrong.wordpress.com · Personal blog · on HN since 2010

    An anonymous blogger writes critical, heavily documented posts on security claims, software history and technology myths, including OpenBSD, Steve Gibson and browser tabs.

    Visit blogHN submissions
    SecurityOpen Source & Linux
    What HN says

    Commenters cite it for a contrasting view of OpenBSD's security and for documentation that Opera did not invent tabbed browsing.

    Stats for nerds
    18HN people shared it
    9linked in comments
    317story points
    May 2021last shared
    2010people per year2021

    Top posts on HN

    1. 1
      OS X – Safe, yet horribly insecure
      1 person · 207 points · first shared 2011 · 126 comments on HN
    2. 2
      The Insecurity of OpenBSD (2010)
      9 people · 104 points · first shared 2010 · 84 comments on HN
    3. 3
      A comparison of books for learning assembly language
      1 person · 5 points · first shared 2013 · 1 comments on HN
    4. 4
      Is making use of unprotected Wi-Fi stealing?
      1 person · 1 points · first shared 2010 · 1 comments on HN
    5. 5
      Steve gibson is a fraud
      3 people · first shared 2011
    6. 6
      Opera did not invent tabbed browsing
      3 people · first shared 2012

    What HN people wrote when they linked it

    • dandelion_loverJun 2016

      Thank you for a comprehensive answer. I do not think that one vulnerability in 8+ years proofs insecurity of QubesOS (by the way, it was found by their developers). OpenBSD is not free from kernel vulnerabilities on such a long time scale. Security through correctness never works, because people are not ideal. (Xen developers are also trying to decrease the code base and make sure the code is as correct as possible.) The only "silver bullet" is defense in depth [0], i.e., trying everything you can.

      I heard [1] that OpenBSD is concentrated on the security of the kernel too much, ignoring the isolation of applications. However, most frequently, attacks come through applications. And this is exactly the point of QubesOS: to isolate the applications as much as possible.

      You might also be interested in a comparison between different approaches to security [2].

      [0] https://en.wikipedia.org/wiki/Defense_in_depth_(computing)

      [1] https://allthatiswrong.wordpress.com/2010/01/20/the-insecurity-of-openbsd/

      [2] https://theinvisiblethings.blogspot.de/2008/09/three-approaches-to-computer-security.html

    • xorcistMay 2021

      That's not right. Opera had tabs in version 4, released in early 2000.

      Some people apparently think tabs has to be drag-and-droppable, which Opera had in 2003, in order to be called tabs:
      https://allthatiswrong.wordpress.com/2011/01/14/opera-did-not-invent-tabbed-browsing/

    • sciurusSep 2011

      The last time I saw a Steve Gibson discussion here, I bookmarked a few good links.

      http://attrition.org/errata/charlatan/steve_gibson/
      http://radsoft.net/news/roundups/grc/
      http://allthatiswrong.wordpress.com/2009/10/11/steve-gibson-is-a-fraud/

    • nullcMay 2014

      I'll leave this link here as offering a contrasting view of openbsd's security posture, and talks about an orthogonal set of security features: http://allthatiswrong.wordpress.com/2010/01/20/the-insecurity-of-openbsd/

    • stefanpJun 2010

      On the subject of OpenBSD's approach to security, check this out: http://allthatiswrong.wordpress.com/2010/01/20/the-insecurity-of-openbsd/

      The title is a little provocative, but the article is really worth it.

    • DanBCDec 2017

      https://allthatiswrong.wordpress.com/2009/10/11/steve-gibson-is-a-fraud/

      http://attrition.org/errata/charlatan/steve_gibson/

      https://web.archive.org/web/20070622061544/http://www.grcsucks.com/

    Related

    Neilneil.computer21 people

    Dear Spotify, can we just get a table of songs?

    Neil
    Personal · last shared 2026
    Errata Securityblog.erratasec.com357 people

    Extracting the SuperFish certificate

    Errata Security
    Personal · last shared 2025
    jwzjwz.org880 people

    Watch a VC use my name to sell a con

    jwz
    Personal · last shared 2026
    Dubfireparanoia.dubfire.net44 people

    Responding to Wired's ad hominem hatchet job

    Dubfire
    Personal · last shared 2023
    Joanna Rutkowskatheinvisiblethings.blogspot.com91 people

    The Linux Security Circus: On GUI isolation

    Joanna Rutkowska
    Personal · last shared 2026
    Jonathan Zdziarskizdziarski.com100 people

    Apple Confirms “Back Doors”, Downplays Their Severity

    Jonathan Zdziarski
    Personal · last shared 2026
    Put.asreverse.put.as49 people

    Abusing Go's Infrastructure

    Put.as
    Personal · last shared 2025
    Signal v. Noisesignalvnoise.com941 people

    The open-plan office is a terrible, horrible, no good, very bad idea

    Signal v. Noise
    Company · last shared 2026