3 ms·
That's not really true. Tremendous effort has gone into making sandboxed programs. Otherwise any website that has JavaScript could take over your computer. The
by Houshalter 11y ago
That's not really true. Tremendous effort has gone into making sandboxed programs. Otherwise any website that has JavaScript could take over your computer. The browser is basically a functioning sandboxed operating system.
There's no reason that can't be true of actual OSes. All programs could be sandboxed by default. But they just were designed under the assumption that all app makers would be good and no one would ever download and run malicious programs. Yeah, right.
- ffk 11y agoOne such feature is the use of seccomp, which removes all but 4 system calls: read, write, sigreturn and exit This is used by many browsers and apps to reduce the impact of security flaws and untrusted code (such as js from a website).