Re:Chrome 0-day exploit used in Operation WizardOpium
by dexen on Saturday November 02, 2019 @08:05AM
(#21427166)
Security bugs are unavoidable, Rust/Java or not. This calls for architectural defense in depth.
A lot of the exploits would be rendered harmless by employing well established technique of splitting one huge monolithic app into processes with limited capabilities and communicating via simple and narrow channels. Qmail[1] is a good example of such architecture. The architectural support is already present in common OSes.
A lot of the exploits would be rendered harmless by employing well established technique of splitting one huge monolithic app into processes with limited capabilities and communicating via simple and narrow channels. Qmail[1] is a good example of such architecture. The architectural support is already present in common OSes.
--
https://en.wikipedia.org/wiki/Qmail