zlacker

[return to "Reasonably Secure Computing in the Decentralized World"]
1. jstewa+B6[view] [source] 2017-10-27 09:53:18
>>Dyslex+(OP)
Classic Theo:

"x86 virtualization is about basically placing another nearly full kernel, full of new bugs, on top of a nasty x86 architecture which barely has correct page protection. Then running your operating system on the other side of this brand new pile of shit.

You are absolutely deluded, if not stupid, if you think that a worldwide collection of software engineers who can't write operating systems or applications without security holes, can then turn around and suddenly write virtualization layers without security holes."

https://marc.info/?l=openbsd-misc&m=119318909016582

◧◩
2. tptace+hH[view] [source] 2017-10-27 15:21:04
>>jstewa+B6
You want the rest of the list of architectural security features Theo also doesn't believe in? It's pretty long.

For a very long time, Theo subscribed to the philosophy that the way to get a secure OS was to keep it as simple as POSIX and historical BSD would allow him to (and no simpler) while eradicating all the bugs. Eradicating bugs is obviously a good thing, but the track record of that strategy in the real world has not been great.

That's obviously changed over the last 5 years or so, but you should be careful reflecting DeRaadt cynicism from a decade ago into modern discussions.

Qubes is surely a better bet than vanilla OpenBSD.

◧◩◪
3. jstewa+E41[view] [source] 2017-10-27 17:55:26
>>tptace+hH
We've had all the king's horses and all the kings men, working around the clock, decade after decade, applying layer upon layer of tweaks and countermeasures, and all we have to show for it is a sort of paper mache wad that no one fully trusts or understands. Fix one flaw, introduce two.

At the same time we treat the underlying hardware as inviolable because of "costs", which are probably just a drop in the bucket compared to the damage wrought by still using hardware that takes a life's work for a Linus Torvalds or a Matt Dillon to program, and even then there's still doubt about what they missed.

I just get the creeping feeling that we've got the economics backward, and that maybe it's time to do "code review" on the underlying architecture instead of investing in more bandages.

◧◩◪◨
4. tptace+691[view] [source] 2017-10-27 18:28:05
>>jstewa+E41
Something something definition of insanity is something something.
◧◩◪◨⬒
5. jstewa+Nb1[view] [source] 2017-10-27 18:51:39
>>tptace+691
Serves me right for expecting anything more from HN's prince of bandages.
[go to top]