↓ Skip to main content

“Despite KASLR, the kernel pointers were the same on every Fuchsia boot!”

Alexander Popova13xp0p0v.github.io ↗

Google’s new OS was sold as built for security from the ground up. A Linux kernel hacker read kernel pointers straight out of the log from an unprivileged component. Address randomisation was on paper and did nothing in practice. A clean-sheet microkernel still ships with the oldest mistakes in the book.