4 ms·
I have no freaking idea. Needless to say I don't think our current operating systems are up to the task of actually being secure. You have to be able to somehow
by bitwize 2y ago
I have no freaking idea. Needless to say I don't think our current operating systems are up to the task of actually being secure. You have to be able to somehow dynamic-link in a library whilst only giving calls into that library certain permissions/capabilities... which I don't think even Windows can do.
- huijzer 2y agoDidn’t Jess Frazelle have most of her dependencies running inside lots of Docker containers for a while? She went pretty far and also kept it up for a long time. E.g., https://blog.jessfraz.com/post/docker-containers-on-the-desktop/ https://blog.jessfraz.com/post/docker-containers-on-the-desk...
- LtWorf 2y agoHow would that protect you from a library?
- GuinansEyebrows 2y agoIgnorant reply here, but would openbsd's `pledge` and `unveil` sorta cover what you're talking about?
- LtWorf 2y agoAt the library level? Not as far as I know…
- gizmo686 2y agoForget OS support, is that something that modern CPUs can support efficiently? As far as I can tell, enforcing a security boundary across libraries would require changing the page table twice for every library call, which seems like a big performance hit.
- izacus 2y agoThen maybe your notion of security is useless in the real world and needs a rethink. Security, when practiced, is a fundamentally practical discipline that needs to work with the world as is, not with dreams of putting people in basements in chains.