4 ms·
I wonder if there is a company that's really interested in developing a secure (by design) operating system. Apart from you-know-who?
by java-man 7y ago
I wonder if there is a company that's really interested in developing a secure (by design) operating system. Apart from you-know-who?
- sp332 7y agoOpenBSD?
- java-man 7y agohttps://www.cvedetails.com/vulnerability-list/vendor_id-97/product_id-163/Openbsd-Openbsd.html https://www.cvedetails.com/vulnerability-list/vendor_id-97/p... I might hazard to say that (in my opinion) no OS written in a memory unsafe language is secure by design.
- tadfisher 7y agoTock might fit the bill then (Rust): https://www.tockos.org/documentation/design https://www.tockos.org/documentation/design
- yellingdog 7y agoGHS Integrity?
- java-man 7y agohttps://nvd.nist.gov/vuln/detail/CVE-2019-7715 https://nvd.nist.gov/vuln/detail/CVE-2019-7715 https://nvd.nist.gov/vuln/detail/CVE-2019-7711 https://nvd.nist.gov/vuln/detail/CVE-2019-7711
- jnwatson 7y agoWow that's a blast from the past. That's well over 12 years old (maybe 14?) software, third party to Integrity.
- dls2016 7y agoThey have a cool T-rex skull in their office. https://twitter.com/phil_torres/status/700115845540765697 https://twitter.com/phil_torres/status/700115845540765697
- dplavery92 7y agoI don't know who.
- ChuckMcM 7y agoThere have been efforts to do this. Back during the first crypto-wars I had some code in Java that would give it capabilities similar to the way that the language Joule did it (basically the class loader would elide any methods from the loaded class based on capabilities so they weren't even available) I got a couple of patents out of it but sadly the politics inside of Sun kept it from going anywhere useful. Highly constrained OSes and languages that do so in order to minimize attack surface tend to be challenging to work in. As a result they constrain productivity which increases time to market and the folks who got something out, even insecure, would "win" the market. It was a sad thing to see happen.
- jnwatson 7y agoI found that working on Green Hills' Integrity was quite a bit easier than working in user space on a typical UNIX userspace. The primary reason is that the API for Integrity was designed in the late 90's, where the POSIX API was inherited from the first thing folks thought of in the late 70's. The other aspect was that IPC via message passing is a very natural way to program.
- jnwatson 7y agoTake a look at seL4 [1]. That it has never taken off is more evidence that there's no money in securing software, just cleaning up the mess insecure software leaves behind. 1. https://sel4.systems/ https://sel4.systems/
- javert 7y agoIs it true that seL4 has never "taken off"? And might it be too early to tell? I am under the impression that the people behind seL4 have managed to successfully commercialize earlier other versions of L4 before seL4 was created. Anyway, even if we grant the premise that seL4 has not taken off, that does not seem to justify saying that there is no money in securing software.
- irundebian 7y agoseL4 just celebrated its 10th anniversary. seL4 isn't widespread in COTS systems but rather in high assurance government systems as explained in this blog post: https://microkerneldude.wordpress.com/2019/08/06/10-years-sel4-still-the-best-still-getting-better/ https://microkerneldude.wordpress.com/2019/08/06/10-years-se...
- twic 7y agoSeL4 is a small microkernel, not a complete operating system. It is very, very cool, and deserves more adoption, but a customer would need a load of stuff on top of it for it to be a viable option.
- somesortofsystm 7y agoTHALES has put Linux into battle mode. EDIT: bzlg. SYSGO GmBH