I sure hope they're emulating a CPU. I wish we had a kernel good enough to sandbox untrusted native code, but as far as I know there isn't one. OpenBSD had at l

I sure hope they're emulating a CPU. I wish we had a kernel good enough to sandbox untrusted native code, but as far as I know there isn't one. OpenBSD had at least two local root exploits that we know of, and Linux (which they claim to be using) is worse off.