zlacker

>>feross+(OP)
The only practical security is security through isolation, like what Qubes OS provides. Security through correctness is impossible.

>>fsflov+Vp
You seem to have missed the point of the article completely.

We can’t achieve perfect security (there’s no such thing). What we can achieve is raising the bar for attackers. Simple things like using memory-safe languages for handling untrusted inputs, least-privilege design, defense in depth, etc.