• 0 Posts
  • 125 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle








  • Errrrmmmm I think this is just an issue either with your choice of distro or your approach to security.

    The Linux ecosystem has by far some of the greatest security technologies available for modern operating systems. Android is a Linux distribution after all.

    Most of the issues with Linux on a phone so far is more the hardware and architecture to support and integrate the hardware.

    Major mobile device manufacturers have secure enclaves, cryptographic co-processors, advanced face/depth cameras, fingerprint readers, etc. The system architecture needs to be tailored to the hardware and security architecture for the threat models mobile devices face that you want to mitigate.

    iOS is Unix deep under the hood, Android is Linux deep under the hood. The issues here aren’t with the kernels, they’re with userspace, hardware selection, and perhaps the odd supporting driver, service, or interface.







  • I have a feeling you’re right about this. I do wish Microsoft would take the Apple approach as Apple steamed ahead with deprecating kernel-mode access.

    Love them or hate them, Apple take security a lot more seriously than Microsoft these days and it’s a real shame MS see security architecture as a nuisance rather than a core responsibility of their business.


  • fartsparkles@lemmy.worldtoGames@lemmy.worldBegun the kernel wars have
    link
    fedilink
    English
    arrow-up
    58
    ·
    edit-2
    1 month ago

    Nope. They’re developing an alternative set of APIs for userspace in conjunction with security vendors for their products to use but it’s all still a long way off and will be optional to start with.

    Given the volume of mission-critical devices security products are installed on (which the CrowdStrike fuckup highlighted), getting them out of kernel space would be a huge risk reduction for the world. And security vendors would love to get away from that risk as pulling a CrowdStrike costs a lot of money setting things right with customers.

    But an anticheat used by consumers on their personal devices for a game, not such a big deal.

    While I’m sure MS will eventually deprecate and then kill off third party kernel drivers, it could take a decade since MS has so much business (both internal and within their customer base) that relies on legacy crap.