Hacker News new | ask | show | jobs
by jmclnx 300 days ago
If would be interesting to see what happens on OpenBSD. With pledge(2) and unveil(2) in Firefox, I wonder what it would see. I expect it would see nothing.

I will give it a try and see what happens and if I see anything I will add it here.
1 comments
jmclnx 300 days ago
I saw nothing of note on OpenBSD. I added the plugin and it prompted me an attempt was made to scan the network, it said it blocked the scan

SO, I guess that is going to be used on all my firefox runs.

link
uticus 300 days ago
Pushing the burden of network permissions management outside the browser, to the OS? Heresy!

To be serious, this has introduced me to sandboxing on BSD via pledge [0] and comparisons against Linux seccomp [1] - thank you!

[0] https://news.ycombinator.com/item?id=17289654

[1] https://kristaps.bsd.lv/devsecflops/ (submission by same poster at https://news.ycombinator.com/item?id=44264021)

link