A Kernel Hacker Meets Fuchsia OS

#1

Post by chrisdinn » Tue, May 24, 2022, 9:39 PM UTC

A Kernel Hacker Meets Fuchsia OS
a13xp0p0v.github.io

Re: A Kernel Hacker Meets Fuchsia OS

#2

Post by binkHN » Wed, May 25, 2022, 1:40 AM UTC

Very nice right up on how unfinished and insecure Fuchsia is as a result of it being so unfinished.

Re: A Kernel Hacker Meets Fuchsia OS

#3

Post by [deleted] » Wed, May 25, 2022, 2:35 AM UTC

[deleted]

Re: A Kernel Hacker Meets Fuchsia OS

#4

Post by raggi » Wed, May 25, 2022, 3:07 AM UTC

binkHN wrote: post #2

Very nice right up on how unfinished and insecure Fuchsia is as a result of it being so unfinished.

Was that your takeaway from reading it, or something else?

Re: A Kernel Hacker Meets Fuchsia OS

#5

Post by SpectralTheory » Wed, May 25, 2022, 3:20 AM UTC

binkHN wrote: post #2

Very nice right up on how unfinished and insecure Fuchsia is as a result of it being so unfinished.

Better than being insecure by design, I would think.

Re: A Kernel Hacker Meets Fuchsia OS

#6

Post by binkHN » Wed, May 25, 2022, 3:21 AM UTC

raggi wrote: post #4

binkHN wrote: post #2

Very nice right up on how unfinished and insecure Fuchsia is as a result of it being so unfinished.

Was that your takeaway from reading it, or something else?

My take away, but the author goes into a bit of detail on this.

Re: A Kernel Hacker Meets Fuchsia OS

#7

Post by ThePowerOfFuet » Wed, May 25, 2022, 5:47 AM UTC

binkHN wrote: post #2

Very nice right up on how unfinished and insecure Fuchsia is as a result of it being so unfinished.

The word you were looking for is _writeup_.

Re: A Kernel Hacker Meets Fuchsia OS

#8

Post by Someone » Wed, May 25, 2022, 6:54 AM UTC

binkHN wrote: post #2

Very nice right up on how unfinished and insecure Fuchsia is as a result of it being so unfinished.

FTA: But to simplify my first security experiment with Fuchsia, I decided to disable SMAP and SMEP in the script starting QEMU and create the fake vtable in my exploit in the userspace

I don’t see them re-enabling it later, so yes, they found security problems, but they didn’t show a complete attack, either.

Re: A Kernel Hacker Meets Fuchsia OS

#9

Post by ge96 » Wed, May 25, 2022, 9:12 AM UTC

ThePowerOfFuet wrote: post #7

binkHN wrote: post #2

Very nice right up on how unfinished and insecure Fuchsia is as a result of it being so unfinished.

The word you were looking for is _writeup_.

It's weird in my later 20s I started doing this, writing homophones. I at least get my then/their/effect right still.

Re: A Kernel Hacker Meets Fuchsia OS

#10

Post by maverick74 » Wed, May 25, 2022, 9:20 AM UTC

Would be nice to see something like this on seL4 (in some OS like Sculpt, for example)