undefined | Better HN

0 pointskevincox9y ago0 comments

I guess I would have expected it to not have an operating system. I understand that and operating system can provide security through isolation but when you are running small amounts of highly security critical code it seems like the isolation benefit would be outweighed by the extra attack surface.

Everything is a trade off I guess...

0 comments

tptacek9y ago

Can you be more specific about the extra attack surface to which you're referring? What vantage point does an attacker need to have to target that attack surface?

kevincoxOP9y ago

Well most data is going through more layers of code. And as a rough approximation the more code running the more vulnerabilities. I guess this "internal" code isn't as critical of a surface because you have to get through the applications but there is certainly still risk.

tptacek9y ago

I'm still not sure I follow. Can you outline a hypothetical in which there is a practical risk, so I know what you're talking about? Obviously, neither of us have all the technical details, so just propose something.

1 more reply

j / k navigate · click thread line to collapse

0 pointskevincox9y ago0 comments

Everything is a trade off I guess...

0 comments

tptacek9y ago

Can you be more specific about the extra attack surface to which you're referring? What vantage point does an attacker need to have to target that attack surface?

kevincoxOP9y ago

tptacek9y ago

1 more reply

j / k navigate · click thread line to collapse