Hacker News new | ask | show | jobs
by aceofspad3s 3098 days ago
Using a microkernel just pushes the vulnerabilities to the userspace.
1 comments
krylon 3098 days ago
Yes. That is part of the idea. So the vulnerability is isolated and does not automatically compromise the entire system.
link
aceofspad3s 3098 days ago
Who cares? In consumer devices, userspace is the entire system.
link
greenhouse_gas 3098 days ago
Well, not in i.e Android.

For example, I have an app that has a vulnerability (let's say my alarm app accidentally runs unauthorized code). What can it do? Nothing. It can't read from my banking app, it can't get my SSH keys, it may not even be able to read from my SD card.

But what happens when my Linux kernel is also compromised? Any app can get root.

link
lobster_johnson 3098 days ago
It's not just one userspace. Fuchsia is capabilities-oriented, when apps are sandboxed by default and only get access to the services it has been granted access to.
link