Linux Kernel Security Done Right (Google Security Blog)

Gernot Heiser says that Linux's habit of giving drivers of dubious quality the ability to subvert the security of the entire system warrants a re-write. I think he has a point that security against a determined local adversary (rather than just script kiddies) is impossible, despite the great skill of people like Kees Cook (who I had the pleasure of eating Chinese with before at a conference).