5 ms·

I'm not being sarcastic, this is a serious question because the specifics of this are over my head Are you saying that the "nested kernel" architecture technic

by bcg1 12y ago

I'm not being sarcastic, this is a serious question because the specifics of this are over my head Are you saying that the "nested kernel" architecture technically increases the surface area for attack, or is the problem that it gives a false sense of security compared to what it actually provides?

comex 12y ago
The latter. There's no obvious reason it would decrease security, but if the main kernel is compromised, the inner kernel's security model is really hard to enforce correctly against an opponent which is also running in ring 0.