Post

Two of the Linux vulns are in ksmb. Maybe having a Windows file server in the kernel is… unnecessary. (Seriously, the rate of vuln-finding has me thinking that we really need more thin kernels and microkernel designs. Contain the blast radius of future vulnerabilities.)

For a side project I've been exploring pushing code to handle untrusted inputs into WASM. It'll be a little slower, but I can sandbox the WASM runtime's resource access, so data exploiting vulnerabilities in the data processing also has to break out of WASM to do anything interesting.

No replies yet.