TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Virtual Machine as a core Android Primitive

255 pointsby r00tbeerover 1 year ago

14 comments

usrusrover 1 year ago
Back at university one lecture included an infographic about how CPU and operating system features like MMU, increasing register width and the like all started at mainframe-scale installations and trickled down to desktop scale systems and later to handheld devices at a surprisingly consistent pace. It was the time w2k was trying to make NT features mainstream and J2ME arrived on phones. I extrapolated a little and made a joke about multi-user concepts arriving on phones and a few years later Android was right on schedule (when that happened, repurposing Linux users as units of app isolation was the headline feature in tech news).<p>By that measure, virtualization is long overdue, but I really can&#x27;t claim that I&#x27;m not surprised.
评论 #38541961 未加载
评论 #38543055 未加载
评论 #38541938 未加载
codedokodeover 1 year ago
Looks like something absolutely overengineered and unnecessary. Why do you need a virtual machine with a separate kernel? Why do you need to protect it from kernel? I guess, it is made mostly for playing DRM content?
评论 #38542751 未加载
评论 #38543427 未加载
评论 #38547062 未加载
评论 #38545699 未加载
评论 #38570899 未加载
评论 #38542726 未加载
Shoopover 1 year ago
How does two way isolation work? How do you prevent the host kernel (which presumably has full control of the hardware?) from inspecting the guest VM?
评论 #38540430 未加载
评论 #38541812 未加载
评论 #38540496 未加载
评论 #38540201 未加载
评论 #38540529 未加载
评论 #38542348 未加载
评论 #38540161 未加载
评论 #38540159 未加载
Animatsover 1 year ago
So what is something running in this virtual machine allowed to do? Talk to the Internet? Talk to the screen? Talk only to whatever started it?<p>How much of this is closed source?
评论 #38541691 未加载
评论 #38542588 未加载
评论 #38541403 未加载
kmeisthaxover 1 year ago
The use of the word &quot;privileged&quot; seems to imply that only system apps will be able to use this - i.e. no installing virtual machines off Google Play anytime soon. Bleh.
评论 #38540518 未加载
rstat1over 1 year ago
Its annoying that I can&#x27;t use this without greater-than-normal-user access.
评论 #38542074 未加载
awoimbeeover 1 year ago
Will this allow running linux VMs on any Android device ? Via something like nestbox: <a href="https:&#x2F;&#x2F;www.patreon.com&#x2F;posts&#x2F;74333551" rel="nofollow noreferrer">https:&#x2F;&#x2F;www.patreon.com&#x2F;posts&#x2F;74333551</a> ?
评论 #38538882 未加载
评论 #38539315 未加载
评论 #38563859 未加载
评论 #38540078 未加载
评论 #38541262 未加载
ForkMeOnTinderover 1 year ago
So on desktop, if I spin up a VM with networking disabled I feel pretty confident I can run anything safely, even malware is not going to escape.<p>What&#x27;s the current state of the art for Android virtualization? Let&#x27;s assume we&#x27;re talking about the newest Pixel and newest Android version. Is there any way to safely run malware or the Facebook app in some sort of air-gapped container and throw it away when you&#x27;re done?
评论 #38539151 未加载
评论 #38540313 未加载
评论 #38539622 未加载
评论 #38538804 未加载
tripdoutover 1 year ago
Why does the tutorial for creating a demo app, <a href="https:&#x2F;&#x2F;source.android.com&#x2F;docs&#x2F;core&#x2F;virtualization&#x2F;writeavfapp" rel="nofollow noreferrer">https:&#x2F;&#x2F;source.android.com&#x2F;docs&#x2F;core&#x2F;virtualization&#x2F;writeavf...</a>, only work on Cuttlefish (emulator)?<p>Nevermind, only the demo app, not the tutorial, so who knows what its doing.
评论 #38539274 未加载
jeffrallenover 1 year ago
Another salvo in the war on general purpose computing.(<a href="https:&#x2F;&#x2F;lwn.net&#x2F;Articles&#x2F;473794&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;lwn.net&#x2F;Articles&#x2F;473794&#x2F;</a>)
评论 #38541080 未加载
robertwt7over 1 year ago
Although this is very exciting. Surely performance is not the benefit here? It won’t perform better than android app built not on top of the virtualisation tdchnology?
评论 #38541374 未加载
评论 #38541360 未加载
londons_exploreover 1 year ago
How lightweight are these? Can I start 100 Vm&#x27;s to render content from 100 web origins in a secure web browser?
josephcsibleover 1 year ago
Two-way isolation seems like it&#x27;d only be useful for DRM and Treacherous Computing.
评论 #38538931 未加载
评论 #38538593 未加载
评论 #38538447 未加载
评论 #38538482 未加载
评论 #38539039 未加载
评论 #38539583 未加载
fidotronover 1 year ago
I wonder if this has anything to do with RISC-V and them needing TrustZone equivalent functionality in that environment.
评论 #38553910 未加载