3 ms·

Well, a kernel bug gets write access to everything. A bug in userland is a bit more constrained in what it can do. That counts especially for accidental bugs

by eru 3mo ago

Well, a kernel bug gets write access to everything. A bug in userland is a bit more constrained in what it can do. That counts especially for accidental bugs and denial of service. To make a userland bug exploited adversarially not impact the rest of the system requires more hardening of the kernel.

inigyou 3mo ago
Yeah a userland bug just gets all my passwords, SSH keys, personal secrets and whatever. Say it with me - there's no practical difference.
- eru 3mo ago
  You are talking about a single user system. You can compartmentalise further. Modern processors even give you these 'rings' to help with the hardware side of that, if you want to.
  - inigyou 3mo ago
    Yes, these are the standard excuses. But has anyone actually thought about them in the last twenty years, in the context of the way we actually use computers?
    - eru 3mo ago
      Eh, yes? Just look the discussions surrounding the development of any web browser? Or look at the permissions system in Android or iOS or on Mac (and perhaps even Windows?).
      - inigyou 3mo ago
        So you acknowledge a browser bug is just as bad as a kernel bug.
        eru 3mo ago
        A bug in the website itself is just as bad, if it's a website you care about. They differ in how easy a fix is to develop and roll out, and what the blast radius is.