Re:Qubes OS: A reasonably secure operating system
by monocasa on Sunday November 19, 2017 @12:27PM
(#15734803)
No, I'd say that the weakest point is the IPC marshalling necessary to connect all of the containers together into a cohesive system. That's what I'd attack first.
[ Parent
| on HN ]
Re:Qubes OS: A reasonably secure operating system
by JoachimSchipper on Sunday November 19, 2017 @12:29PM
(#15734817)
A good place to look, but do note that that's the code written by the Qubes OS people - presumably, it's written with security in mind. Of course, Xen has had more eyeballs, so...
Re:Qubes OS: A reasonably secure operating system
by monocasa on Sunday November 19, 2017 @12:34PM
(#15734850)
Chrome's IPC was written with security in mind too, but most of the sandbox escape exploits have been around IPC marshalling.
Unlike the nitty gritty of how the sandbox works, the IPC changes often with new releases. And quite frankly it isn't as fun, cool, or interesting as VMMs or other sandboxing techniques, so a lot of the time it isn't given the close eye that it should.