Hacker News new | ask | show | jobs
by vanviegen 191 days ago
> The security aspect seems also a bit funny to me. After all the average Desktop has most data in the home directory, so every application can read everything.

The world is moving towards sandboxed applications (through flatpak and friends) more and more. As per the OP, this is one of the things holding sandboxing back.
1 comments
LtWorf 191 days ago
There's sandbox escapes daily since decades. It doesn't work.
link
akimbostrawman 191 days ago
>There's lock picking daily since centuries. It doesn't work
link
LtWorf 191 days ago
It takes time to pick one lock and twice as much to pick two.

It takes the same time to escape 1 or 10000000 sandboxes.

link
gf000 190 days ago
That's only somewhat true if we are talking about the same sandbox nested (which would be quite dumb to do).

Escaping two different sandboxes are multiple times as hard, and a sane sandbox is not trivially picked, see web browsers and that the fact that the world is not one giant botnet.

link
LtWorf 189 days ago
How many implementations of linux namespaces are there in the kernel? Is it more than one?
link
gf000 189 days ago
Is a wasm sandbox, or the browser not a sandbox, independent of the kernel?
link