Joanna Rutkowska @rootkovska
Yes, I know [1]. But most ppl: "Oh, let's use this formally-verified ukernel, b/c it's *proved* to be secure!" [1]… https://t.co/A5jtCq9imB — PolitiTweet.org
Mathias Payer @gannimo
@rootkovska everything above the kernel is expected to behave like in the specs, any violation (e.g., HW error) may still fail seL4