Post #1898577

@josh @mike No, that's orthogonal. An alternative to the ridiculous ambient-authority UNIX-like kernel is what I was talking about. The bug would never have even been possible were the kernel using capability security for its own threads (instead of ambient authority where kernel threads have access to everything and just pretend not to) or implemented in a language with an adequate type system like Ada (which would have had it caught at compile time).