← Back to context

Comment by kjs3

5 hours ago

Like when graphics stack and drivers were "imported" into the WinNT kernel as an optimization for the user-space version. And thus began 30 years of "another week, another graphics subsystem crash/vuln".

Indeed. These are gigantic mistakes. The quest for performance is diametrically opposed to having a secure system. There will always be a price, sometimes a big one for having a system that enforces proper boundaries. In my opinion: if something can be a process then it should be a process.

  • Plan9 or HURD? Mach anyone?

    • The boat long ago sailed on Mach/Hurd; there are probably better options in microkernel-land. There's Zircon, but Google laid off a bunch of the Fuchsia folks and has been pretty quite lately. QNX is still a thing, but closed source yadda yadda. Best hope there is probably the L4 family (seL4, et. al).