Hacker News new | ask | show | jobs
by JupiterMoon 3380 days ago
> The OS is in no position to sandbox multiple tabs running in the same browser

Who said anything about tabs?

>> More like: Leaking local information over Tor is equivalent to not using Tor

> This isn't even slightly true

There is no middle ground. There are two states here. Anonymous and not anonymous. Once one is not anonymous they are not anonymous. If one leaks one's local IP one is not anonymous. If one leaks one's voice data one is not anonymous.

> At some point you have to trust that your software is doing what it's supposed to do.

I agree. The thing is that Tor Browser is supposed to be limiting data leakage whilst Chrome is supposed to be sending data to Google.

1 comments

> Who said anything about tabs?

If all your tabs run in the same process, any vulnerability triggered by malicious content in one tab has access to all the content in any other tab. Sandboxing the brower process makes it more difficult for that to result in taking over your entire system, but in this case merely taking over the browser is sufficient.

So no, OS-level sandboxing isn't sufficient. And if you don't understand that, you should not be making assertions about security.