News for hackers. Stuff that matters.
Re:Kaspersky OS by nickpsecurity on Friday November 18, 2016 @04:13PM (#12990122)
re MINIX 3. It's not made for high-security. It's about high-reliability. Safety is usually a precursor to security but security can take a lot more. The core has to be designed for it like Genode is doing.

re Redox. It's a nice project I've praised before. It's an alpha work-in-progress, changing rapidly, and unclear how much of its design is truly for security. A trimmed OpenBSD is probably a safer bet than it so far given the staggering amount of review that went into it. Rust's features and a microkernel only prevent so many kinds of problems.

Re:Kaspersky OS by Recoveringhobo on Saturday November 19, 2016 @08:32AM (#12993397)
For the uninformed, what problems would Rust's features and microkernel not protect against?
Re:Kaspersky OS by nickpsecurity on Saturday November 19, 2016 @10:23AM (#12993838)
I can't even remember for Rust. I just know Rust team here admitted there was a cut-off point in terms of safety features it provides like any other language. For microkernels, all they do is memory isolation plus limit kernel-mode damage. Past that, you have to design extra capabilities into the microkernel, trusted code, or apps. You can even have concurrency errors in your apps with those if there's a shared-memory space allowed.