Semi-retirement, or, really, changing my relationship with the BSDs
Summary
Dr. Brian Callahan reflects on his long OpenBSD involvement, semi-retirement, and a research-backed critique of two ROP mitigation techniques. The post presents nuanced results showing modest gadget reductions with non-free costs and discusses how security promises should be evaluated and validated across BSDs and compilers.