3 ms·
Cool. Is this going to require phasing out systems written in C/C++ with horrible security track records like Linux and Windows? Or are they going to get a "too
by Veserv 2y ago
Cool. Is this going to require phasing out systems written in C/C++ with horrible security track records like Linux and Windows? Or are they going to get a "too critical to be improved" exemption?
- deleted 2y ago[deleted]
- Sevii 2y agoDo you have an OS written in a memory safe language with a good security track record we can switch to? If we start building now we might have a prototype by 2030.
- Veserv 2y agoThere are plenty with good security track records, formal specifications, formal proofs of various security properties, and decades of deployments. SCOMP, GEMSOS, INTEGRITY-178, seL4.
- ArtixFox 2y agogod seL4 everywhere would be awesome.
- kyleee 2y agoDon’t forget Temple OS
- burnt-resistor 2y ago> Eschew flamebait. Avoid generic tangents. Omit internet tropes. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- burnt-resistor 2y agoseL4 is far more rigorous that the others. The problem today is a widespread lack of understanding of software engineering approaches and tools for formal verification of source model verification, compiler toolchains, and binaries, and also a lack of diligence and effort in implementing rigorous practices.
- multimoon 2y agoThis is the most HN comment I’ve seen in recent memory.