7 ms·
Falling apart? You mean getting stronger? Every single one of these is an existing hole being patched. It isn't making new holes
by hn92726819 4mo ago
Falling apart? You mean getting stronger? Every single one of these is an existing hole being patched. It isn't making new holes
- Gigachad 4mo agoGovernment agencies probably already have half of these exploits in their private toolbox for years now. Finding and patching them is good, but there probably needs to be some systematic change to prevent them rather than just patching bugs when they get found.
- FriedFishes 4mo ago> for years now ZCRX is less than half a year old. I'm so tired boss.
- onjectic 4mo agoSomething something microkernels + capability-based security.
- mattstir 4mo agoI've seen microkernels mentioned a few times between these LPE posts and I'm curious about why. Would they be fundamentally more secure against forgetting to add bounds checking, or assuming user-provided input buffers should be writable without checking?
- Gigachad 4mo agoYes, because as a userspace program if you forget to do bounds checking or read the wrong thing, the kernel kills the process. But if the buggy code is the kernel then there’s no protection. Microkernels aim to have as little code as required in kernel space.
- tgv 4mo agoAs other people said in this thread: so many devices won't be patched. And that can easily lead to users and manufacturers moving away from Linux. Linux is in a glass house.
- pjmlp 4mo agoI remember when people used to joke with Windows security and something like that would never happen on Linux, well..