softirq

10 ms·

1. 91.▲
   by softirq 4y ago

   I think you really need to understand that the term micro kernel refers to a very specific thing. Please go read the wikipedia definition because it does a good job of summarizing it. A microkernel handles only the basic kernel primitives i
2. 92.▲
   by softirq 4y ago

   The kernel talks to NICs in kernel mode and can actually segregate a device's view of memory via an iommu. While there's some overlap in potential vulnerabilities, bad hardware/firmware is a different vector than userland hav
3. 93.▲
   by softirq 4y ago

   It's still running code inside of the kernel. The point of a microkernel is to run as little in ring 0 as possible and have a very thin resource manger that can talk to system servers. The point of eBPF is to move even more stuff dynam
4. 94.▲
   by softirq 4y ago

   io_uring (and eBPF for that matter) are still super concerning attack vectors and we've already seen eBPF being used in the wild by bad actors. kernel_lockdown explicitly disables eBPF and other methods of kernel injection and is turne
5. 95.▲
   by softirq 4y ago

   This really has nothing to do with the mono vs. micro kernel argument. Also micro kernels were very popular in the research community at the time that Linux was in its infancy, mach and minix are both examples of this. Linux did win on meri
6. 96.▲
   Ask HN: How to deal with OCD/decision paralysis?

   2 points by softirq 4y ago|1 comments