3 ms·
Depends on the target audience. For example, Haiku most probably won't get around to implement KPTI any time soon. But then again, most people consider it more
by starsinspace 9y ago
Depends on the target audience.
For example, Haiku most probably won't get around to implement KPTI any time soon. But then again, most people consider it more of a fun/hobby OS[0] anyway, so it wouldn't matter that much.
[0] And that isn't meant negatively at all, I actually think the computing landscape would be way more fun again if there were many more projects like it again. Not every OS needs to try and be an everything-OS, and not every OS needs to follow the "always online, everything through the internet" paradigm. If the most interesting use-cases are entirely offline, most of today's popular attack vectors cease to exist.
- userbinator 9y ago...and don't forget TempleOS, which follows the philosophy/religion of deliberately running everything in ring0 and one address space, because it believes the user should have full control over everything in the system.
- waddlesplash 9y agoHaiku has run all GUI applications as root since forever, so as soon as you got RCE you could install a rogue keylogging driver silently. Obviously fixing that is higher up on the priority list than KPTI... and it's unclear when we'll get around to that, even. :(