Thread

Several vulnerabilities have been discovered in the Linux kernel

576 points · 408 comments · luispa

hn_submit · 1790918078 · focus · HN ↗
We need to switchover to microkernel operating systems ASAP or our entire computing infrastructure becomes a liability.
There are good reasons for QNX becoming viable again in the automotive world. Linux / Android has so many vulnerabilities that it needs indefinite patching, which is unrealistic for any computing device but cars especially. Car makers are switching to QNX even though it costs them money.
Weren't there rumours that intelligence agencies have been using microkernel operating systems for decades?
1. snvzz · 1790923549 · focus · HN ↗
  >Weren't there rumours that intelligence agencies have been using microkernel operating systems for decades?
  Governments, military, aviation, space.
  For a good portion of the usage, the people involved cannot even talk about it. But sometimes it's possible. A surprising amount of real world use showed up in talks in seL4 summit 2026[0].
  0. <a href="https://www.youtube.com/playlist?list=PLd7rrADYxxQQ" rel="nofollow">https://www.youtube.com/playlist?list=PLd7rrADYxxQQ
  1. hn_submit · 1790926600 · focus · HN ↗
    I remember this guy selling an operating system to intelligence agencies. I believe it was essentially MINIX or Sel4 with a GUI layer on top.
    The government isn't telling anyone about it because they don't want to sink a multi-trillion dollar corporation.
2. FlowingRiver · 1790926500 · focus · HN ↗
  GNU Hurd shall rise!
  1. tpoacher · 1790928823 · focus · HN ↗
    Along with its Hirds!
3. applfanboysbgon · 1790927313 · focus · HN ↗
  You cannot possibly compare embedded/single-purpose systems to a general-purpose OS that is expected to run arbitrary user-written software performantly on thousands of different hardware combinations.
  1. hn_submit · 1790927868 · focus · HN ↗
    Then don't use a general purpose OS in embedded stuff. Yet everyone's doing it anyway.
    P.S.: QNX is a general purpose OS as well and runs on PCs, ARM and a myriad of other architectures. Same holds for MINIX and Sel4.
4. fsflover · 1790931216 · focus · HN ↗
  Alternatively, we could benefit from security through compartmentalization. Qubes OS runs everything in VMs, and there were two VM escapes in the last 20 years [0]. A dedicated VM for your email doesn't allow any attacker to compromise it, since you do not run anything else in it.
  [0] <a href="https://forum.qubes-os.org/t/qsb-116-multiple-xen-issues-xsa-500-xsa-505-xsa-506-xsa-507/42672/" rel="nofollow">https://forum.qubes-os.org/t/qsb-116-multiple-xen-issues-xsa...
5. TacticalCoder · 1790932331 · focus · HN ↗
  > Car makers are switching to QNX even though it costs them money.
  My car runs QNX for its infotainment/navi system but I had the impression that manufacturers were, sadly, moving away from QNX?
  1. hn_submit · 1790944916 · focus · HN ↗
    They found out that it wasn't prudent to use Linux / Android in their core vehicle software after cars were hacked and miscreants were able to control the brakes, steering and accelerator.
    I suppose they're only using QNX for critical functions. The infotainment system will probably continue to run Android.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.