Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Err no thank you. Ld preload and similar mechanism are great to inject code into apps legitimately, i.e. to patch long unsupported systems or to tame current ones.

For example I have vision issue and without reshade filter I would be unable to play a great deal of games.

Now that is also an attack vector, that's for sure, but you cannot go ax features willy nilly just because you don't see value in them.




LD_PRELOAD won't be needed if the OS were built around containers / jails, instead of the weakly isolated processes and process groups.

The Unix kernel (both Linux, BSD, and Solaris) already had much of what's needed, say, 30 years ago, but nobody saw it as such a burning necessity (likely except Solaris which eventually developed Zones).


On a "normal" desktop system, you don't need containers or jails. Your programs must communicate with each other (copy paste, print screen, etc.).

But today every god damn UI program needs an internet connection to phone home and execute remote code. This is the actual problem which must be fixed.


Are you confusing LD_PRELOAD with LD_LIBRARY_PATH? I'm not sure how jails and containers help with the former.


At least it could be additionally guarded by a system setting or something like that.


Yes, for example by setting an environment variable.


> Err no thank you.

> Err no

Not sure if you are trolling




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: