3 ms·
third parties being able to take down your kernel is an implication in incompetence. if you leave your door unlocked, it is not your fault you got robbed, but
by tylerchilds 2y ago
third parties being able to take down your kernel is an implication in incompetence.
if you leave your door unlocked, it is not your fault you got robbed, but you probably should have locked the door for security.
this is microsoft’s critical security flaw and needs to be addressed head on. it’s a backdoor for them that they wanted and got locked open according to them via antitrust.
the solution is to close the backdoor, but they won’t because all the windows business is in the back room deals.
did we as a hacker news collective just forget who the first tech company in the PRISM leaks was?
same kernel vulnerability, different day.
- voxic11 2y agoYou know Linux let's you load whatever kernel module you want. Do you expect every OS to be like iOS and disallow any modifications at all?
- steve1977 2y agoEspecially operating systems that also let you do stuff beyond listening to Spotify while doom-scrolling Instagram or Tiktok.
- tylerchilds 2y agoit is possible to lock the kernel and leave the userland unlocked, that is generally what linux sys admins do. i’m talking about a literal back door that affected critical infrastructure, not an os debate there’s a middle road between iOS and windows, between having too much security and no pants at all, respectively.
- rk06 2y agoIf your lawyer is incompetent, is it still your fault that you end up in jail? In this case, crowdstrike was the incompetent software which was given kernel access by Companies. One can’t blame companies for using incompetent company like crowdstrike
- mensetmanusman 2y agoMS was forced by the EU to give access to the kernel to prevent monopolies on security services.
- jononor 2y agoI have seen this claims several places. Is there a good source for this?
- sam_bristow 2y agoI believe the EU said they can't limit third-party security access to write kernel drivers unless they put the same restictions on Microsoft Defender. https://www.neowin.net/news/microsoft-points-finger-at-the-eu-for-not-being-able-to-lock-down-windows/ https://www.neowin.net/news/microsoft-points-finger-at-the-e...
- steve1977 2y agoCrowdstrike also caused some Linux distros to crash earlier this year: https://www.theregister.com/2024/07/21/crowdstrike_linux_crashes_restoration_tools/ https://www.theregister.com/2024/07/21/crowdstrike_linux_cra... So by your measure, Windows and Linux are out of the game. Doesn’t leave that many other options…
- self_awareness 2y agoIf you cause a car crash, do you blame the car manufacturer? Because in theory, car manufacturer could maybe introduce some security measures so that you wouln't able to perform a car crash. The fact that you can sounds like a security vulnerability!
- SpaghettiCthulu 2y agoKernel module/driver sandboxing, if it cannot be feature complete (I believe it can), should be optional, opt-out, and strongly recommended.