HackerTube.dev

The State of Kernel Self Protection Project by Kees Cook, Google

The Linux Foundation · 7.3K views · 2016-12-08 · 45:47

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

Kees Cook of Google gives a Linux Foundation talk on the Kernel Self Protection Project, which aims to harden Linux against attackers. He surveys threats, the state of available defensive technologies and a year of community progress.

On Hacker News

Cited as the authoritative overview of kernel hardening goals and priorities, including Cook's car-safety analogy for kernel security.

Recommended by 1 HN people across 1 months · HN mentions 2016–2019

Topics

Search by tags

What people said

lclarkmichalek · 2017-05 · Recommendation

> But… till now they’ve hardly accomplished anything compared to what PaX/Grsecurity did, e.g. they ported some mitigations while introducing more (exploitable?) bugs or incomplete implementations That doesn't seem particularly charitable. Regardless of what you think of the Linux Foundation's marketing arm, the KSPP is not a bad thing. They seem to have a very different priority to PaX/Grsecurity, with an emphasis on things that have a clear technical/political/etc path to being enabled by default. I really enjoyed this talk about KSPP's agenda: [VIDEO]

Read the original HN comment ↗
pjmlp · 2019-06 · Joke / meme

Really?!? Then you should advise Google on what they are doing wrong. "The State of Kernel Self Protection Project by Kees Cook, Google" [VIDEO]

Read the original HN comment ↗
tux1968 · 2016-09 · Reference

He gave two talks, the one he referenced in the article, "The State of Kernel Self Protection Project", is here: [VIDEO] All the available videos from the Linux Security Summit are listed here: [LINK]

Read the original HN comment ↗

Sources

Video by The Linux Foundation, played through YouTube.

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks
  • SaaS & AI candidates: Topic keywords do not match
  • Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources