Operating Systems
OpenBSD
A BSD project built around security and code correctness, with a long-standing "secure by default" philosophy.
OpenBSD is a BSD descendant whose project culture is organized around one central idea: minimize the chance of a security hole existing in the first place, rather than only reacting once one is found. That shows up in practice, not just in marketing.
What it’s actually known for:
- Secure by default. The project’s long-standing goal is to ship a system that’s reasonably secure out of the box, with a minimal attack surface, rather than one that needs a long hardening checklist before it’s safe to expose to anything.
- Proactive code auditing. The OpenBSD team has a reputation for going through code line by line looking for bugs before they become security incidents, rather than waiting for reports.
- It’s the origin of tools you’ve probably already used. OpenSSH — the SSH implementation that ships on most Linux, macOS, and BSD systems — was created by the OpenBSD project, as was the pf firewall, both now used far beyond OpenBSD itself.
- Minimalism. The base system is intentionally kept small and conservative, favoring simplicity and auditability over having every feature turned on.
A fitting choice if the priority for a machine is being as defensible as reasonably possible, and you’re comfortable with a smaller, more deliberate software ecosystem than Linux offers.