Re:How a researcher hacked his own computer and found 'worst...
by waddlesplash on Thursday January 04, 2018 @08:13PM
(#16075673)
Haiku has run all GUI applications as root since forever, so as soon as you got RCE you could install a rogue keylogging driver silently. Obviously fixing that is higher up on the priority list than KPTI... and it's unclear when we'll get around to that, even. :(
Re:How a researcher hacked his own computer and found 'worst...
by userbinator on Thursday January 04, 2018 @07:51PM
(#16075554)
...and don't forget TempleOS, which follows the philosophy/religion of deliberately running everything in ring0 and one address space, because it believes the user should have full control over everything in the system.
For example, Haiku most probably won't get around to implement KPTI any time soon. But then again, most people consider it more of a fun/hobby OS[0] anyway, so it wouldn't matter that much.
[0] And that isn't meant negatively at all, I actually think the computing landscape would be way more fun again if there were many more projects like it again. Not every OS needs to try and be an everything-OS, and not every OS needs to follow the "always online, everything through the internet" paradigm. If the most interesting use-cases are entirely offline, most of today's popular attack vectors cease to exist.