← Back to context

Comment by hn92726819

17 hours ago

Falling apart? You mean getting stronger? Every single one of these is an existing hole being patched. It isn't making new holes

Government agencies probably already have half of these exploits in their private toolbox for years now. Finding and patching them is good, but there probably needs to be some systematic change to prevent them rather than just patching bugs when they get found.

  • Something something microkernels + capability-based security.

    • I've seen microkernels mentioned a few times between these LPE posts and I'm curious about why. Would they be fundamentally more secure against forgetting to add bounds checking, or assuming user-provided input buffers should be writable without checking?

As other people said in this thread: so many devices won't be patched. And that can easily lead to users and manufacturers moving away from Linux. Linux is in a glass house.

I remember when people used to joke with Windows security and something like that would never happen on Linux, well..