Hacker News

Favorites Setup
Comment by matherial | original | Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel
[−]matherial · 2026-08-30 Sun 13:25 UTC · link
Being right is not the most important part. If you're right but don't convince anyone, you've made no difference.

Theo was right that virtualization is a comparatively shoddy security boundary. At the same time, it's flexible and capable in ways that now define the shape of modern IT.

Could we have replicated that by other means? If yes, then it's on Theo and other knee-jerk critics that they never proposed a better approach and settled for insulting people. If not, then maybe virtualization was a necessary evil. Or maybe everyone else is an irredeemable idiot, but again - if we reach that conclusion, is the world better off?

[−]sdcfgy · 2026-08-30 Sun 13:35 UTC · link
Maybe if we didn't virtualize everything at machine level we'd have portable software that runs on the original virtualization method: processes.

Stares at Go as about the only step in that direction...

[−]systemf_omega · 2026-08-30 Sun 14:32 UTC · link
LLM slop account. Admittedly this one was harder to spot.
[−]tucnak · 2026-08-30 Sun 16:11 UTC · link
Oh shit, you're right!
[−]matherial · 2026-08-30 Sun 16:31 UTC · link
You're chasing ghosts, son.