Viewing profile — goodthenandnow

That station is said to be one of the signals used by the UK’s nuclear subs to assess the state of the country in a war scenario. https://en.wikipedia.org/wiki/Letters_of_last_reso…

Subthread from a while ago where I wrote some details on how Android sandboxing architecture uses Linux’s primitives: https://news.ycombinator.com/item?id=40676309

> I'd argue that permissions aren't really enforced by binder, just binder is used to talk to the endpoints that enforce permissions. Binder has no interaction with SELinux outside…

> the system described in the post is mostly about taking away I agree. The hard part is, as usual, on the details. How do you take away stuff so that you still end up with an usab…

Android blocks most of Linux syscalls with seccomp. They make heavy usage of SELinux. Binder is not just a simple IPC system. It requires userspace parts which aren't even the part…

Not sure if this is what you meant, but I'd like to expand a little bit on it. - This API should be programming language agnostic (like, with a well defined ABI). Ideally an IPC ba…

I understood the ideia and agree with it. Just want to point out that starting an OS from scratch, even if reusing an existing kernel, is a monstrous epic. I find it difficult that…

Because Linux, the kernel, as well as other Unixes, don't have the right abstractions to easily build these. And there's all the old cruft. Just look at what Android had to do to i…

The ones I could find: Samsung: https://fuchsia-review.googlesource.com/q/owner:sukka.kim@sa... https://fuchsia-review.googlesource.com/q/owner:j_yoon.choi@... Amlogic: https://fuc…

> Could I theoretically use it in my linux program just like any other IPC mechanism? Yes, absolutely. However, binder is implemented as a kernel module not enabled by default, so …

Yes, since quite some time.

Also, as mentioned in the patch's message, it's important to highlight that binder is a core component of Android. Its usage is so widespread that, to me, it kinda makes Android ar…

Trivia: Fuchsia's starnix also has its own implementation of binder [1] and it's written is Rust too (as are most Fuchsia components). [1]: https://cs.opensource.google/fuchsia/fuc…

> One thing though, you focus a lot on syscalls, but I think the challenge in recent years has been to find new ways to have kernel userspace interactions _outside_ of syscall, whi…

> the composition problem Would these be like the “easy problems” then? Besides, wouldn't that be exactly like our current physics? (Where we reduce until we find something fundame…

> Nobody (that I'm aware of) suggests that there is an experience within the electronic circuit There is a theory, Integrated Information Theory (IIT) [0], which argues exactly tha…

Fuchsia has an http client component [0][1] which is part of the platform and, given Fuchsia's component architecture, it's accessed through a message-passing protocol [2] which is…

They are doing this to solve the chicken-and-egg problem of booting the adoption of Fuchsia. Without Android (ie. Linux) support, there's no way to pull off Fuchsia.

They have a deadline profile available for threads, and plans to implement an actual deadline scheduler. So, this is confusing.

This. Wondering how we're going to remember the times before proper capability based security systems go mainstream...