Hacker News new | ask | show | jobs
by kevindamm 480 days ago
You're describing Qubes, which is great but I found it tedious to use as a daily driver.
1 comments

The other general purpose sandboxes are just as valid. Which is why all modern OS are moving towards them ( apk, appx, whatever OSX does)

Yes, qubes is harder, but it's also very niche, barely supported, and difficult to use.

There's really a lot of middle ground "any application can do whatever on your system as the user running it" and "any application runs in a separate OS with no rights and just 120 lines of hardened hypervisor code in common.