[mtgx]

It's uses a microkernel so probably around 100x-1,000x fewer lines of code, which should improve security.

Smartphones are one thing, but I think the recent trend of using the Linux kernel in self-driving cars is a terrible idea that we'll only start regretting 10-15 years from now.

[aceofspad3s]

Using a microkernel just pushes the vulnerabilities to the userspace.

[krylon]

Yes. That is part of the idea. So the vulnerability is isolated and does not automatically compromise the entire system.

[aceofspad3s]

Who cares? In consumer devices, userspace is the entire system.

[greenhouse_gas]

Well, not in i.e Android.

For example, I have an app that has a vulnerability (let's say my alarm app accidentally runs unauthorized code). What can it do? Nothing. It can't read from my banking app, it can't get my SSH keys, it may not even be able to read from my SD card.

But what happens when my Linux kernel is also compromised? Any app can get root.

[lobster_johnson]

It's not just one userspace. Fuchsia is capabilities-oriented, when apps are sandboxed by default and only get access to the services it has been granted access to.