3 ms·
I sometimes wonder if verifying properties of the code we run wouldn't be smarter than relying on hardware isolation. Or at-least in addition to hardware isolat
by jopsen 9y ago
I sometimes wonder if verifying properties of the code we run wouldn't be smarter than relying on hardware isolation. Or at-least in addition to hardware isolation, so that there is two layers.
By verify I'm thinking NativeClient-like or JVM isolation.
Obviously, it would entail complete OS rewrite, or maybe partial...
- cjbprime 9y agoYou can't do secure computation on a CPU that is insecure in this way. The insecure CPU will ignore any abstractions you create in software.
- fluffysquirrels 9y agoThis is an exciting research area. See unikernels, HaLVM (Haskell on Xen), MirageOS (Ocaml), OSv, Microsoft Singularity / Midori.