" know how to fit the building blocks together " which is, in essence, finding all the vulns at various levels. maybe it's just a difference of point of view af

" know how to fit the building blocks together " which is, in essence, finding all the vulns at various levels. maybe it's just a difference of point of view after all. I'm thinking that knowing system architecture, and programming with the various languages used by the program is necessary and natural for exploit research, but maybe that's because I've been around that stuff for too long. And yes, I was hinting at the kind of OSes you're mentioning. When you're left with logic bugs, it's a huge step forward IMO. Most importantly, as long as you're not having all data in one container the failure of one component does not impact the next component unless you made terrible messaging choices, those being generally extremely controlled to avoid these (which arguably browser vendors are attempting to do right now, but that their browser-based-OSes are trying to decouple)