News for hackers. Stuff that matters.

A comment on The Pixelbook is being used to test Google's Fuchsia OS. Parent comment

Re:The Pixelbook is being used to test Google's Fuchsia OS by aceofspad3s on Sunday December 31, 2017 @11:15AM (#16041074)
Using a microkernel just pushes the vulnerabilities to the userspace.
[ Parent | on HN ]
Re:The Pixelbook is being used to test Google's Fuchsia OS by krylon on Sunday December 31, 2017 @11:21AM (#16041107)
Yes. That is part of the idea. So the vulnerability is isolated and does not automatically compromise the entire system.
[ Parent | on HN ]
Re:The Pixelbook is being used to test Google's Fuchsia OS by aceofspad3s on Sunday December 31, 2017 @12:42PM (#16041554)
Who cares? In consumer devices, userspace is the entire system.
[ Parent | on HN ]
Re:The Pixelbook is being used to test Google's Fuchsia OS by greenhouse_gas on Sunday December 31, 2017 @01:00PM (#16041681)
Well, not in i.e Android.

For example, I have an app that has a vulnerability (let's say my alarm app accidentally runs unauthorized code). What can it do? Nothing. It can't read from my banking app, it can't get my SSH keys, it may not even be able to read from my SD card.

But what happens when my Linux kernel is also compromised? Any app can get root.

[ Parent | on HN ]
Re:The Pixelbook is being used to test Google's Fuchsia OS by lobster_johnson on Sunday December 31, 2017 @01:52PM (#16042011)
It's not just one userspace. Fuchsia is capabilities-oriented, when apps are sandboxed by default and only get access to the services it has been granted access to.
[ Parent | on HN ]