Viewing profile — bestorworse

I want that as well, but I don't think it's practical to do that on the Linux desktop ecosystem. Too slow, too much politics. The gist of it is done by Android though, but that req…

Sure, like you said, having control of the endpoints you could communicate anything if you can transmit bits. That’s unavoidable. But don’t lose the perspective on the benefits of …

Yeah, it's brand new as far as you would consider in practice (they use existing libraries and the like). The answer is not much time. The real question is how long to develop good…

The joy of having a properly implemented capability system is that, well, you can create arbitrary capabilities. You don't need to give a process/component the “unrestricted networ…

Yep. It's anyone's guess what's been going on there. Lots of theories out there. IMO Google doesn't consider this a high priority and the cost to keep the development going on cons…

It's technically a general-purpose OS. They had a workstation build target sometime ago which was used for the desktop use-case. They've shipped only for an IoT device so far (Goog…

> On mobile devices, the proprietary drivers are in user space. So, the situation would stay the same regarding that. > The drivers will probably be back in the kernel Manufacturer…

But that seems to be exactly what they are doing. They're surely porting the Android runtime to Fuchsia, or even already ported it. Remember there are Android APKs containing nativ…

Isn't this growth pattern a straightforward consequence of disorderly growth? When microorganisms divide, the children "appear" in the same location. Our species growth dynamics ki…

"And you exist only because of us" - Neo I think this pattern of exponential growth of human beings is a curse of their intelligence. All other animals end up being controlled by t…

This can be done with a proper capability system.

Outch! Thanks for the refs.

Thanks! I searched for this rewritten version and couldn't find anything.

Functionally it's the same. The functions called could live in the kernel (a system call), in the process itself or in a shared lib loaded into the process address space. Interpret…

IMHO this is the main objective. They even mention in the RFC the case of running Android native code.

This wouldn't solve the problem. It would push the problem one level lower.

> In Fuschia's case it will be like that but the exploitation either gives you access to that driver's capabilities, or simply that driver is giving out handles with permissions in…

When looking more closely on Fuchsia architecture you might well be back into OS design obsession. As the kernel is, IMHO strongly based on a microkernel design, the OS APIs presen…

That is true. I think this is the greater challenge now for Google. A system being very well designed and implemented only attracts enthusiasts and people like that with free time.…

> for malicious software you’re just looking for a process handing out high privilege handles In the end, that is true. But the thing is the way Fuchsia's implementation of the 'ca…

I see it as better way of developing a product. Or actually, a foundational system , if Fuchsia really ends up becoming something like that. You see, lots of things that today are …