Hacker News new | ask | show | jobs
by literalAardvark 479 days ago
The other general purpose sandboxes are just as valid. Which is why all modern OS are moving towards them ( apk, appx, whatever OSX does)

Yes, qubes is harder, but it's also very niche, barely supported, and difficult to use.

There's really a lot of middle ground "any application can do whatever on your system as the user running it" and "any application runs in a separate OS with no rights and just 120 lines of hardened hypervisor code in common.