3 ms·
>You still have to get through Xen to get to anything I consider of value. It's not unthinkable, as Xen is huge, at hundreds of kLoCs. But there's an effort[0]
by snvzz 3y ago
>You still have to get through Xen to get to anything I consider of value.
It's not unthinkable, as Xen is huge, at hundreds of kLoCs. But there's an effort[0] to make a Qubes that uses seL4 in place of Xen.
0. https://trustworthy.systems/projects/TS/makatea https://trustworthy.systems/projects/TS/makatea
- fsflover 3y agoMost of Xen's vulnerabilities do not affect Qubes OS: https://www.qubes-os.org/security/xsa/ https://www.qubes-os.org/security/xsa/.
- snvzz 3y agoMost vulnerabilities of anything do not affect all its users. But it's bad enough if any do. (some do affect Qubes) It is an architectural problem. SeL4 is a good replacement, with excellent performance and strong formal proofs.
- fsflover 3y agoSeL4 is great an all, but no one of those Xen vulnerabilities has led to an escape since forever, have they?