4 ms·
Respectfully, an enormous amount of work has gone into making sure things like Python, .NET, and Rust are secure. And the security researchers still regularly f
by bilbo0s 5y ago
Respectfully, an enormous amount of work has gone into making sure things like Python, .NET, and Rust are secure. And the security researchers still regularly find bugs and sell 0-days. That's not even counting the work that's gone into the gold standard that is the JVM. Any serious minded security expert could tell you that guaranteeing security on any of these platforms is a sysiphean effort. Your platform is state of the art with respect to security, until it is not.
The essential problem is features. Devs want features. So Python, .NET, etc, and even the browsers try to provide access to those features. But some of those features are simply inherently unsafe. Someone will find a way to compromise this feature or that. How does one provide 100% safe access to the GPU? The file system? And so on. It's not really possible. At some point, the app level dev will have to keep a security mindset when writing his code. Don't do things on the GPU that compromise the system. But that has to be on the app developer if that developer is demanding that the browsers give him/her access to the GPU.
I don't know if I'm being clear? But I hope you can see what I'm trying to say.
- simion314 5y agoYou are using big words like "Impossible" such big word would need a proof. There are languages that can produce programs proven to be correct as per the specifications. We don't have such programs because we prefer moving fast, breaking things, having fun while coding, making money etc. Do you have a proof that it is impossible to have a secure calculator application? About .Net and Python, they are using a lot of wrappers around old unsafe code, so we would need to put more work and eliminate that, MS failed because of their shity Windows first ideals and their FUD,
- saagarjha 5y ago> Don't do things on the GPU that compromise the system. Easier said than done…
- simion314 5y agoIf say a Game or 3D program crashes the system or causes a security issue the problem is the driver or the hardware. A correct driver and hardware should not allow any user level application to cause issues. I know is hard, this GPU companies need to keep backward compatibility, support different operating systems(and versions), support old stuff that worked by mistake. and probably some "benchmark cheeting might be hidden in the proprietary drivers too".
- saagarjha 5y agoDrivers and hardware are not designed by application developers.
- simion314 5y agoI understand. But my point is we can have safe application if GPU makers would care for safety , at this moment they care to impress people with benchmarks to they make money, probably people that run GPU servers will visualize them and put zero pressure on the driver maker to produce safety that might reduce a bit of speed.
- staticassertion 5y ago> How does one provide 100% safe access to the GPU? Presumably through pointer capabilities. > The file system? File system namespacing and virtualization. I disagree with most of your assertions.