People are testing the mitigations. For example Qualsys&#x27; audit of OpenSMTPD[0] noted that a buffer overflow they found was not exploitable on OpenBSD as even a single byte overflow would smash the stack canary.<p>[0] <a href="https:&#x2F;&#x2F;www.qualys.com&#x2F;2015&#x2F;10&#x2F;02&#x2F;opensmtpd-audit-report.txt" rel="nofollow">https:&#x2F;&#x2F;www.qualys.com&#x2F;2015&#x2F;10&#x2F;02&#x2F;opensmtpd-audit-report.txt</a>