Hacker News Reader

The other one is that embedded devices need to running their components in sandboxes.

To be honest, a compromised dnsmasq can do quite a lot of harm even if it is running in a sandbox. The rest of the system expects to trust the output.

Reply on news.ycombinator.com