Re:The Web of Alexandria
by walterbell on Wednesday May 27, 2015 @05:36AM
(#9610244)
>We need operating systems that treat programs as adversarial rather than trusted
A few client platforms are moving in the direction of isolating workloads: Qubes, Genode, unikernels.
OS X and Windows 10 include hypervisors that could be used to isolate risky workloads, but they are not yet positioned for mainstream use. Recent Intel GPUs include support for 3D graphics virtualization.
With strong isolation, we can localize competing vendors, filesystems, SDNs, DRM, monetization and data retention approaches into isolated VMs on the same device. No need to force all workloads into one walled garden, or put stable workflows at risk from experimental software.
A few client platforms are moving in the direction of isolating workloads: Qubes, Genode, unikernels.
OS X and Windows 10 include hypervisors that could be used to isolate risky workloads, but they are not yet positioned for mainstream use. Recent Intel GPUs include support for 3D graphics virtualization.
With strong isolation, we can localize competing vendors, filesystems, SDNs, DRM, monetization and data retention approaches into isolated VMs on the same device. No need to force all workloads into one walled garden, or put stable workflows at risk from experimental software.