dmcq (dmcq.delete@this.fano.co.uk) on March 16, 2021 9:17 am wrote:

> However then I go on to
> wondering what kind of thing would mean that we didn't have megabytes of code in the kernel and yet could
> do things as efficiently or better and support most current programs without disruptive changes? As far
> as I can see if you want to avoid copying lots of data it seems capabilities are the way - that brings
> other problems of course but I think they would be easier to manage and contain.

Do you honestly think OS kernels are the most relevant (or even very relevant) security issue we are dealing with? I'm not an expert, but seems to me that just about all newsworthy security issues (that aren't about hardware) are not kernel related. Personally I'm mostly worried about stuff that will happily run with user privileges, e.g. inside a browser or email client.

-JLarja