I thoroughly enjoyed Theo de Raadt recent talk, &quot;Pledge: A new security technology in openbsd&quot;. It left me itching to try OpenBSD.<p>&quot;Pledge() is designed as a mitigation rather than a cure-all, de Raadt explains, but it&#x27;s a mitigation with an interesting approach: a process or application stipulates the system services it needs, and if it steps beyond its boundaries, it&#x27;s killed.&quot; <a href="http:&#x2F;&#x2F;www.theregister.co.uk&#x2F;2015&#x2F;11&#x2F;10&#x2F;untamed_pledge_hopes_to_improve_openbsd_security&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.theregister.co.uk&#x2F;2015&#x2F;11&#x2F;10&#x2F;untamed_pledge_hopes...</a><p>Hackfest 2015: Theo de Raadt presented &quot;Pledge: A new security technology in openbsd&quot;<p>video: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=F_7S1eqKsFk" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=F_7S1eqKsFk</a><p>slides: <a href="http:&#x2F;&#x2F;www.openbsd.org&#x2F;papers&#x2F;hackfest2015-pledge&#x2F;index.html" rel="nofollow">http:&#x2F;&#x2F;www.openbsd.org&#x2F;papers&#x2F;hackfest2015-pledge&#x2F;index.html</a>