2 ms·
Forgive me if I'm wrong, but isn't that what iOS does, where every app is sandboxed and can't access anything from others? Of course, there may be exploits der
by carlesfe 10y ago
Forgive me if I'm wrong, but isn't that what iOS does, where every app is sandboxed and can't access anything from others?
Of course, there may be exploits derived from kernel/"supervisor" bugs, but all apps are sandboxed by default, for better or worse.
- walterbell 10y agoQubes also isolates some devices (e.g. NIC, WiFi, USB) and their drivers/firmware, using the hardware IOMMU to protect against DMA attacks by a compromised device. There is a separate threat from the Intel ME, but the threat from non-Intel devices is reduced.
- pjmlp 10y agoYou can still exploit memory corruption, even if the app is sandboxed.