A Systematic Evaluation of OpenBSD’s Exploit Mitigations

Cited in OpenBSD threads as a skeptical, evidence-based counterpoint to claims about its security, though some dispute its objectivity.

A 36C3 talk that systematically evaluates OpenBSD's exploit mitigations, asking how effective they really are and what they cost in performance, complexity and inspectability. It challenges the project's security marketing.