News for hackers. Stuff that matters.

A comment on We should have the ability to run any code we want on hardware we own. Parent comment

Re:We should have the ability to run any code we want on har... by fsflover on Monday September 01, 2025 @09:48AM (#45092673)
> Any security mechanism has a weakness or it will be bypassed by other means. So all this will give you a false sense of security.

> The moment you think you are safe. Is when you are most unsafe.

This is demonstrably false. Qubes OS has the lowest number of CVEs, even less than that of Xen. Last VM escape in it was found in 2006 by the Qubes founder (it's called "Blue Pill").

Also: https://news.ycombinator.com/item?id=27897975

[ Parent | on HN ]
Re:We should have the ability to run any code we want on har... by extraisland on Monday September 01, 2025 @10:05AM (#45092778)
You are only thinking of attacking computer directly itself. Often people socially engineer access to a computer system. Many UK super markets were hacked, using some of the software that is very secure, because people managed to socially engineer access.

There is nothing and I mean nothing that is completely secure.

[ Parent | on HN ]
Re:We should have the ability to run any code we want on har... by fsflover on Monday September 01, 2025 @10:11AM (#45092818)
> There is nothing and I mean nothing that is completely secure.

You're not wrong, but dismissing security because there are always other threats is just security nihilism. See my link.

[ Parent | on HN ]