4 ms·
Maybe I’ve been reading about 0days and spyware too much recently, but this just seems like it’s going to speed run privilege escalation.
by bennyg 3y ago
Maybe I’ve been reading about 0days and spyware too much recently, but this just seems like it’s going to speed run privilege escalation.
- arghwhat 3y agoSimple wire protocols, including cryptographic ones, are not concerning. They are easy to validate and do not operate on complex inputs, which is why something like Wireguard can exist in the kernel. The issue is complex super-protocols like TLS, with handshakes, negotiations, numerous operational modes and so forth. Splitting this so the kernel only sees a simple wire protocol - with anything involving complexity and decision-making happening in user-space - removes any concern.