Re: This seems a very level-headed and straight forward discussion
> Isn't it about time any OS worthy of the name got hardened by making full use of the hardware's rings of protection. Just doing that would reduce the attack surface by quite a large amount.
That might have been true when the hardware was (a) actually hardware, not microcode, and (b) simple enough to validate. Now, it's just a completely different set of attack surfaces.