Embed Notice

@dalias A vulnerability in a GPU or Wi-Fi driver shouldn't compromise the security of the whole OS because it should be isolated. Filesystems should at least be possible to run isolated. Linux is fundamentally opposed to that design. Still feasible to coerce it into working that way by running separate Linux kernels isolated from each other side-by-side. It will add a bunch of overhead vs. it being designed that way to start.

They also have problematic attitudes towards undefined behavior, etc.