It's my long standing position that all currently popular operating systems are insecure by design. It's going to require rip and replacement of the whole thing

It's my long standing position that all currently popular operating systems are insecure by design. It's going to require rip and replacement of the whole thing before we can even begin to approach secure general purpose computation. Ironically this was sorted out in the 1970s and 80s, with Gnosis[1], and KeyKOS, but the PC revolution swamped it away in the noise as Windows and Linux took off. The best you can do without jumping to a capabilities based system in the meanwhile is to use hypervisors and the principle of least privilege to segregate tasks using VMs as very course grained capabilities systems[3]. This is the root cause that has been driving the adoption of hypervisors, virtualization, etc. for decades. [1] https://en.wikipedia.org/wiki/GNOSIS https://en.wikipedia.org/wiki/GNOSIS [2] https://en.wikipedia.org/wiki/KeyKOS https://en.wikipedia.org/wiki/KeyKOS [3] https://en.wikipedia.org/wiki/Capability-based_security https://en.wikipedia.org/wiki/Capability-based_security