Re:L4 microkernels: The lessons from 20 years of research an...
by wepple on Tuesday September 20, 2016 @01:15PM
(#12541146)
the jeep hack (IIRC) got code exec in userland remotely, but relied upon talking to drivers to be able to flash the CAN chip.
Of course, the whole thing was broken anyhow as everything was running root.
But in almost everything else, I agree. I don't care if you have ring-0 on my Nest camera, because I'm more worried about network-level attacks or an attacker being able to read from the camera which (I'm guessing) is available via user space.
Of course, the whole thing was broken anyhow as everything was running root.
But in almost everything else, I agree. I don't care if you have ring-0 on my Nest camera, because I'm more worried about network-level attacks or an attacker being able to read from the camera which (I'm guessing) is available via user space.