4 ms·
I'd go a step further, and say per-application virtualization. Every single program running its own (ideally encrypted memory) namespace, with its own assigned
by briffle 4y ago
I'd go a step further, and say per-application virtualization. Every single program running its own (ideally encrypted memory) namespace, with its own assigned memory, etc.
- muricula 4y agoThat's what the ios sandbox provides. Heck, the tools arm64 gives you to isolate VMs are awfully similar to the tools they give you to isolate processes. VM escapes aren't too different than sandbox escapes. Encrypted memory isn't part of arm yet, I was holding out hope with armv9 "realms" but not so.
- jmprspret 4y agoI think this is one of the very (very) long term goals of the GrapheneOS project.
- fsflover 4y agoSo basically Qubes OS on a phone?