News for hackers. Stuff that matters.

A comment on Fuchsia: Google's modular, capability-based, non-Unix operating system. Parent comment

Re:Fuchsia: Google's modular, capability-based, non-Unix ope... by naasking on Monday September 18, 2017 @12:29AM (#15273411)
You seriously think that open source drivers would have fewer CVEs than sandboxed drivers?
[ Parent | on HN ]
Re:Fuchsia: Google's modular, capability-based, non-Unix ope... by catern on Monday September 18, 2017 @10:01AM (#15275977)
How exactly are you going to sandbox your drivers? Run them in user-mode, perhaps? But then you've constructed a microkernel, and no-one uses your system because it's slow.

Anyway, what I said is that sandboxing isn't a substitute for open-sourcing. They are complements, not substitutes.

[ Parent | on HN ]
Re:Fuchsia: Google's modular, capability-based, non-Unix ope... by naasking on Tuesday September 19, 2017 @01:02AM (#15281926)
> But then you've constructed a microkernel, and no-one uses your system because it's slow.

FUD. L4 is the most widely deployed kernel in the world.

> Anyway, what I said is that sandboxing isn't a substitute for open-sourcing.

Given reality, something must substitute for open source drivers. Sandboxing is certainly the obvious choice.

[ Parent | on HN ]
Re:Fuchsia: Google's modular, capability-based, non-Unix ope... by catern on Tuesday September 19, 2017 @10:31AM (#15284915)
>Given reality, something must substitute for open source drivers

Linux is quite real, I assure you.

[ Parent | on HN ]