3 ms·
Why aren’t lightweight hypervisors used more outside the public cloud? It seems that would go a long way in protecting the rest of the device from poorly writte
by ec109685 5y ago
Why aren’t lightweight hypervisors used more outside the public cloud? It seems that would go a long way in protecting the rest of the device from poorly written c code parsing user input.
- saagarjha 5y agoFor one, Apple's chips lacked hardware support for virtualization until last year.
- yokoprime 5y agoOn device? The vast majority of people don't give a flying fuck about privacy, for them the decrease in battery life would not be worth it
- dannyw 5y agoso we should get rid of all security features then? No memory management, no code signing, no HTTPS, no certificate pinning? Vierualisation has a negligible impact on power consumption.
- KaiserPro 5y ago> Vierualisation has a negligible impact on power consumption. [citation needed] Virtualization on embedded devices with constrained power is a big ask. They are not asking to get rid of all security protections, just pointing out that loosing 10-20% of battery life for marginal security improvement isn't a product winner.
- yokoprime 5y agoWhat? How did you derive "we should get rid of all security features" from my reply? I'm saying your idea of using virtualization on-device is not feasible due to the power envelope available vs customer demands.
- thehappypm 5y agoThe answer is probably plain old complexity. Getting an application that's running in a hypervisor to seamlessly, for example, accept deep-link clicks is more complicated for the same reason that they're more secure. That extra boundary is another wall, another interface. And of course that means more complexity for app developers, and more compute cost/battery utilization.