Remix.run Logo
▲ mdspan 4 hours ago

I think until something hardware-based like CHERI becomes widely deployed (which seems extremely unlikely in the near to mid term given), we're going to keep seeing VM escape CVEs pop up indefinitely.

▲LtWorf 2 hours ago | parent [-]

Because we've never encountered hardware bugs…

▲mdspan 43 minutes ago | parent [-]

Critical hardware bugs occur an order of magnitude less frequently than critical hypervisor/kernel bugs, which is why they always make the news. In general, they're also more difficult to exploit. We haven't seen any serious spectre or meltdown malware in the wild almost a decade later.