Using a microkernel just pushes the vulnerabilities to the userspace.

krylon · on Dec 31, 2017

Yes. That is part of the idea. So the vulnerability is isolated and does not automatically compromise the entire system.

aceofspad3s · on Dec 31, 2017

Who cares? In consumer devices, userspace is the entire system.

greenhouse_gas · on Dec 31, 2017

Well, not in i.e Android.

For example, I have an app that has a vulnerability (let's say my alarm app accidentally runs unauthorized code). What can it do? Nothing. It can't read from my banking app, it can't get my SSH keys, it may not even be able to read from my SD card.

But what happens when my Linux kernel is also compromised? Any app can get root.

atombender · on Dec 31, 2017

It's not just one userspace. Fuchsia is capabilities-oriented, when apps are sandboxed by default and only get access to the services it has been granted access to.