But, and this is the important part, is he wrong?
Being right is not the most important part. If you're right but don't convince anyone, you've made no difference.
Theo was right that virtualization is a comparatively shoddy security boundary. At the same time, it's flexible and capable in ways that now define the shape of modern IT.
Could we have replicated that by other means? If yes, then it's on Theo and other knee-jerk critics that they never proposed a better approach and settled for insulting people. If not, then maybe virtualization was a necessary evil. Or maybe everyone else is an irredeemable idiot, but again - if we reach that conclusion, is the world better off?
I don't really know as the argument is mainly about how stupid people are... The technical argument is one paragraph ended with an insult, not much to make an educated and civilized opinion.
it's not right nor wrong, it's irrelevant. this exploit has nothing to do with the Xen hypervisor which underlies the virtualization in QubesOS
This community lives on not understanding that...form over function always...
What if that isn’t the most important part
I feel like he is. VM breakouts are vastly rarer than kernel LPEs, aren't they?