Re:Unsafe at any clock speed: Linux kernel security needs a ...
by tedunangst on Wednesday September 28, 2016 @01:13AM
(#12595565)
But cars still only offer protection against mostly random events, not determined adversaries rail gunning projectiles through the wind shield.
Re:Unsafe at any clock speed: Linux kernel security needs a ...
by eximius on Wednesday September 28, 2016 @01:19AM
(#12595581)
There should be some limit to the threat model, though. It should not attempt to remain secure when something can do arbitrary read and writes (VM), for example. Even determined adversaries will merely be armed, not equipped with WMDs.
His point is that cars used to be built assuming there would never be an accident. They were very comfortable until you crashed into something, and then everyone died. Today cars are built defensively, so that when the unforeseen happens, you are still protected.
That's the idea. Building in defenses that protect you against unknown bugs and exploits.