3 ms·
I think you should use a virtual machine rather than a separate user, for what it's worth.
by startling 11y ago
I think you should use a virtual machine rather than a separate user, for what it's worth.
- dietrichepp 11y agoWhy? That sounds like even more work, does it provide any benefits? (The guest would need solid graphics acceleration.)
- gefh 11y agoLocal user to root privilege escalation is generally easier than a VM escape. Though both are possible.
- dietrichepp 11y agoWeighing the risks. Cost of protecting against root escalation versus likelihood of a root escalation exploit on a patched Windows computer, and cost of using a different user to play the games against the likelihood that someone typo'd a script and it wipes out my home directory. If I really wanted security I'd unplug from the network and refuse to run third-party code at all. See Myth II: http://minimaxir.com/2013/06/working-as-intended/ http://minimaxir.com/2013/06/working-as-intended/ This is the type of scenario I'm protecting against, as well as unsophisticated but malicious actors.
- nommm-nommm 11y agoA VM would be less work because you wouldn't have to install than uninstall Flash each time.
- dietrichepp 11y agoThree times a year... versus the time it takes to set up a VM.
- astrange 11y agoYou could get a perfectly working GPU by reimaging a second partition with a fresh install every time, just like the PCs in high school. Not that that's any less work!