News for hackers. Stuff that matters.
Re:The time one of my colleagues debugged a line-of-business... by orbifold on Saturday July 19, 2014 @04:44PM (#8058653)
Arguably it would be much better to enforce process isolation and priviledge protection statically in the programming language. Currently system calls have a massive performance overhead, which could be eliminated if the compiler could reason about memory access violations and so on. Legacy code and other applications could run in sandboxed virtual machines. Microsoft has done some research in this direction with their Singularity OS and a programming language called M.
Re:The time one of my colleagues debugged a line-of-business... by scintill76 on Sunday July 20, 2014 @12:42PM (#8060776)
"The Birth & Death of JavaScript"[0] talked about this. From my memory, in "the future" described in the talk, everything is ported to JS so that the VM does the isolation automatically and all the overhead can be thrown away.

[0] https://www.destroyallsoftware.com/talks/the-birth-and-death...

Re:The time one of my colleagues debugged a line-of-business... by eru on Sunday July 20, 2014 @05:04AM (#8059912)
There's also Google NaticeClient (NaCl) which tries a similar static approach, but on the assembly level.