The State of Kernel Self Protection Project by Kees Cook, Google
The Linux Foundation1 HN recommenders · 2016–2019
7K views · talk · dated · Uploaded 2016-12-08
Kees Cook of Google gives a Linux Foundation talk on the Kernel Self Protection Project, which aims to harden Linux against attackers. He surveys threats, the state of available defensive technologies and a year of community progress.
Cited as the authoritative overview of kernel hardening goals and priorities, including Cook's car-safety analogy for kernel security.
47:18The Tragedy of systemd
linux.conf.au
51:32Behind the Scenes of iOS Security
Black Hat
12:01Why Electronic Voting Is Still A Bad Idea
Tom Scott
51:22USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
42:50Defcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
1:48:55The Thirty Million Line Problem
Molly Rocket
1:03:51VCF East: Ken Thompson interviewed by Brian Kernighan
Vintage Computer Federation
45:35The Real Story Behind Wayland and X - Daniel Stone (linux.conf.au 2013)
Mladen Mijatov
4 comments from Hacker News
He gave two talks, the one he referenced in the article, "The State of Kernel Self Protection Project", is here: [VIDEO] All the available videos from the Linux Security Summit are listed here: [LINK]
Here is Kees Cook talk from the Linux Security Summit, "The State of Kernel Self Protection Project", he makes the same analogy to car safety in his talk: [VIDEO] All the available videos from the Linux Security Summit are listed here: [LINK]
> But… till now they’ve hardly accomplished anything compared to what PaX/Grsecurity did, e.g. they ported some mitigations while introducing more (exploitable?) bugs or incomplete implementations That doesn't seem particularly charitable. Regardless of what you think of the Linux Foundation's marketing arm, the KSPP is not a bad thing. They seem to have a very different priority to PaX/Grsecurity, with an emphasis on things that have a clear technical/political/etc path to being enabled by default. I really enjoyed this talk about KSPP's agenda: [VIDEO]
Really?!? Then you should advise Google on what they are doing wrong. "The State of Kernel Self Protection Project by Kees Cook, Google" [VIDEO]