News for hackers. Stuff that matters.

A comment on The Operating System That Can Protect You Even if You Get Hacked. Parent comment

Re:The Operating System That Can Protect You Even if You Get... by throwaway7767 on Monday April 14, 2014 @07:14AM (#7585491)
The attack surface of a paravirtualized Xen VM to its hypervisor is much smaller than a linux application talking to the linux kernel.

Of course it's not perfect, but xen has a pretty good track record. And a significant chunk of the flaws that have been found xen were found by the qubes devs.

[ Parent | on HN ]
Re:The Operating System That Can Protect You Even if You Get... by zurn on Tuesday April 15, 2014 @03:09AM (#7590689)
The Chrome sandbox setup doesn't correspond to a regular linux application talking to the kernel though. It has a 2-layer sandbox, with the seccomp-bpf and setuid sandboxes. They restrict the kernel interface to a whitelisted subset.
[ Parent | on HN ]