Follow the latest coverage, related explainers and connected technology stories.
David Chisnall explains how the CHERI architecture uses hardware capabilities to protect pointers and enforce memory bounds and permissions, providing spatial and temporal security for software written in C and C++ without extensive rewriting. The presentation connects this mechanism to the possibility of building precise isolation between system components while directly sharing data structures instead of relying entirely on traditional RPC mechanisms.
Google says that adopting Rust in Android reduced the density of memory-safety vulnerabilities by more than 1,000 times compared with C and C++ code, while Rust changes recorded lower regression rates and shorter code-review times. Its analysis reviews Rust’s expansion into the kernel, firmware, and Google applications, alongside lessons learned from a vulnerability that nearly reached a public release.