A long-time kernel developer happened to be sitting next to me, while I was listening to this talk at FOSDEM last weekend, and he politely pointed out after the

A long-time kernel developer happened to be sitting next to me, while I was listening to this talk at FOSDEM last weekend, and he politely pointed out after the talk (paraphrasing): "Hmm, I'm not quite convinced -- this lives in the Kernel, and if it's compromised, then it's game over." PS: Day-21 of QEMU Advent Calendar 2016 was WireGuard (contributed by: Jason A. Donenfeld and Stefan Hajnoczi) -- http://www.qemu-advent-calendar.org/2016/#day-21 http://www.qemu-advent-calendar.org/2016/#day-21 -- "This image runs iperf inside containers & prints out the performance statistics along with commands used to configure the VPN." [Edit: I just noticed 'mtgx' has posed this question in this thread -- https://news.ycombinator.com/item?id=13600614 https://news.ycombinator.com/item?id=13600614]