Hacker News new | ask | show | jobs
by smoldesu 1290 days ago
I mean, Redox is cool but it's not going to replace real, full-fat kernels. Linux is just as secure (if not more secure) than Apple's XNU kernel, or Microsoft's NT kernel, in that respect.
1 comments

The Linux kernel is very bad in terms of security. For example, Linux namespaces had several critical CVE's, and much more.
So? Every other kernel ever designed also has critical kernel-mode vulnerabilities. The difference is, on Linux, they get fixed.
That's a wrong fact. Every critical vuln gets fixed as fast as possible in any kernel. Linux actually sometimes takes their time.
The Linux kernel has the best security you can get with a C based monolithic kernel in production. Vulnerabilities often get patched hours to at worst a few days after they become disclosed; Which is faster than NT & XNU which often can take from weeks to months, and even a year or more in some past cases; which makes sense because they have limited dev power while Linux is the largest collaborative project on the planet.

The new kernels simply aren't production ready except for some niche areas, while Linux is used anywhere from PC, Servers, Embedded Devices, Supercomputers, The National Space Station, to even NASA's Mars Helicopter.

The largest security problem the Linux kernel faces to date is memory unsafety mistakes, and is where Rust comes in. Rust's approach to memory safety is from what I can tell a match made in heaven for Linux kernel development and is very likely going to greatly reduce the amount of memory unsafety bugs introduced into the production code, but time will tell.

On the flip Rust in Android has had a great impact on reducing memory unsafety bugs; which is very good news and gives us measurable data on the potential impact of Rust in Linux.

Thanks for the info. I must say that actually the kernel isn't the problem, but how distros use the kernel by providing bloat and other.
Critical Linux vulnerabilities often get livepatched in a number of hours, the NT kernel and XNU kernel normally takes months to roll out patches. You don't seem to know what you're talking about here, so I'm not going to provoke you any further.