News for hackers. Stuff that matters.
Re:An iOS zero-click radio proximity exploit odyssey by pfundstein on Tuesday December 01, 2020 @05:54PM (#25271140)
C#? You've got to be joking.
Re:An iOS zero-click radio proximity exploit odyssey by kogir on Tuesday December 01, 2020 @06:16PM (#25271348)
It’s less insane than you might think:

https://en.m.wikipedia.org/wiki/Singularity_(operating_syste...

I agree rust is probably better suited. Or Apple could make their own memory safe language. They’re clearly capable.

Re:An iOS zero-click radio proximity exploit odyssey by pfundstein on Tuesday December 01, 2020 @06:32PM (#25271475)
That's an interesting experiment, but that's all it is. The project relies on ASM/C/C++ to boot into a microkernel and to interpret and run the C#. But I suppose it would greatly reduce the attack surface of C/C++/ASM code.

I just wonder, for example, how a capable hardware abstraction layer would work in C#, interrupt handling, CPU and IO scheduling, etc.

Re:An iOS zero-click radio proximity exploit odyssey by pjmlp on Wednesday December 02, 2020 @05:54AM (#25275274)
Here is another experiment, this one being delivered into production,

https://www.wildernesslabs.co/

Re:An iOS zero-click radio proximity exploit odyssey by olliej on Tuesday December 01, 2020 @06:35PM (#25271505)
You mean Swift?
Re:An iOS zero-click radio proximity exploit odyssey by snazz on Tuesday December 01, 2020 @05:56PM (#25271164)
C#, Go, and Java all go in the same category (roughly)—they wouldn't work for kernel code. Rust will be a valid replacement for C++ kernel code in the near future, I'm sure.
Re:An iOS zero-click radio proximity exploit odyssey by yencabulator on Tuesday December 01, 2020 @10:29PM (#25272934)
Here's a POSIX kernel in Go, written explicitly to prove your point wrong:

https://github.com/mit-pdos/biscuit

https://pdos.csail.mit.edu/projects/biscuit.html

Re:An iOS zero-click radio proximity exploit odyssey by fulafel on Wednesday December 02, 2020 @12:58AM (#25273656)
Where do you get that? Those have all been used in kernels, they work.

Also on another front Apple seems to have already enabled device drivers in user space: https://developer.apple.com/system-extensions/

Re:An iOS zero-click radio proximity exploit odyssey by bitcharmer on Wednesday December 02, 2020 @02:35AM (#25274054)
Yes, you can use them to play around and experiment with OS-level stuff and even have some fun with it.

But you definitely cannot build a performant and robust kernel from scrtach with these languages.

Re:An iOS zero-click radio proximity exploit odyssey by fulafel on Wednesday December 02, 2020 @05:23AM (#25275112)
> you definitely cannot build a performant and robust kernel from scrtach with these languages.

I think this is irrelevant (and less importantly, false). Its's fine to use eg se4l as a foundation, or as a incremental step even just have a safety focused driver runtime inside the kernel proper.

Re:An iOS zero-click radio proximity exploit odyssey by pjmlp on Wednesday December 02, 2020 @05:56AM (#25275286)
Re:An iOS zero-click radio proximity exploit odyssey by saagarjha on Tuesday December 01, 2020 @06:22PM (#25271396)
Writing the majority of a kernel in those languages is certainly possible.
Re:An iOS zero-click radio proximity exploit odyssey by pfundstein on Tuesday December 01, 2020 @07:18PM (#25271816)
Possible, perhaps, but feasible? Microsoft certainly had a go at it with the likes of Midori and Singularity, but these were met with the same fate that will likely befall any managed code kernel. While it's an honorable pursuit with certain merit, to produce a fully featured OS in this way -- without serious concessions -- is just not feasible.
Re:An iOS zero-click radio proximity exploit odyssey by pjmlp on Wednesday December 02, 2020 @05:58AM (#25275296)
Those projects died due to management politics from WinDev, nothing to do with capabilities.

So much that many of the System C# features are now in .NET 5 and other ones will eventually land on .NET 6.

Re:An iOS zero-click radio proximity exploit odyssey by pjmlp on Wednesday December 02, 2020 @05:55AM (#25275277)
Nope, some people are actually quite serious about it.

https://www.wildernesslabs.co/