@david_chisnall@infosec.exchange
Post #3064061
2025-08-26 09:14 UTC
@denzilferreira@techhub.social @Gargron@mastodon.social
Except that, it doesn't prevent malware. Note that this news article is from today. I went to find the most recent example of this and it turns out that I didn't even have to go back as far as yesterday.
Proper safety is done by reducing kernel attack surface, reducing the size of the TCB, and making it easy for applications to respect the principle of least privilege so that ones that don't stand out as things that obviously request more permissions than they should have.
Replies (1)
-
@denzilferreira@techhub.social 2025-08-26 09:18
@david_chisnall@infosec.exchange @Gargron@mastodon.social yep, there is only so much that automated and human review of code can do to prevent or minimize malicious code.