3 ms·
Nothing, but "there are already working options" does not necessarily mean we shouldn't try new (and sometimes weird) things
by g947o 8mo ago
Nothing, but "there are already working options" does not necessarily mean we shouldn't try new (and sometimes weird) things
- TacticalCoder 8mo agoYeah but GP was answering to a comment saying "you don't want to run code in a well protected VM". Which is of course complete non sense to say and GP was right to question it.
- cloudfudge 8mo agoGP says "You don't want to just run that code in ... even a very well protected VM." Why?
- redleader55 8mo agoBecause unless you can fund several teams - kernel, firmware(bios,etc), GPU drivers, qemu, KVM, extra hardening(eg. qemu runs under something like bpfilter) + a red team, security through obscurity is cheaper. The attack surface area is just too large.
- cloudfudge 7mo agoWhat is this "security through obscurity" you're talking about? We're talking about running linux in a VM running in a browser. That has just as much attack surface (and in some ways, more) as running linux in a hypervisor.