News for hackers. Stuff that matters.

A comment on L4 microkernels: The lessons from 20 years of research and deployment. Parent comment

Re:L4 microkernels: The lessons from 20 years of research an... by mtgx on Tuesday September 20, 2016 @11:32AM (#12540278)
Only because that's still the low hanging fruit. Why would most hackers bother with kernel exploits, when hundreds of thousands of routers use their manufacturer's default password?
[ Parent | on HN ]
Re:L4 microkernels: The lessons from 20 years of research an... by tptacek on Tuesday September 20, 2016 @12:30PM (#12540782)
This is almost tautological. Application vulnerabilities will always be the low-hanging fruit, because that's where the attack surface is. 20 years ago, an OS had juicy attack surface, because the bugs hadn't been shaken out of TCP/IP stacks and OS's shipped with stupid services enabled that nobody used. But it hasn't been 1998 for quite some time now.
[ Parent | on HN ]