3 ms·

The feature is designed for multi-user applications such as meetings, chat, and online games. Meanwhile, from the "old man shakes fist at cloud department" I'l

The feature is designed for multi-user applications such as meetings, chat, and online games. Meanwhile, from the "old man shakes fist at cloud department" I'll just add that I don't think most of those things belong in the browser to begin with. Of course we lost that battle a long time ago, so not much point in worrying about it now. At this point, I guess we just have to accept that browsers will keep inflating much like the cosmos itself... without apparent end unless there's enough gravitational mass to cause the whole thing to eventually collapse back into itelf.

mdaniel 5y ago
Speaking as a consumer of the Zoom browser client, I can say that one less thing to install and then have it inevitably RCE my machine due to some "cute" feature, plus consume 100% of my CPU, is a strong use-case for in-browser when possible I am, of course, deeply aware of the bi-weekly Chrome vulns, along with its ability to consume all RAM and CPU, but on the whole I trust Chromium developers a lot more than randos with g++ and a dream That's not even mentioning my chromebook where "installing something" is a very weird concept anyway
- Nicksil 5y ago
  >[...] have it inevitably RCE my machine due to some "cute" feature, plus consume 100% of my CPU [...] >I am, of course, deeply aware of the bi-weekly Chrome vulns, along with its ability to consume all RAM and CPU [...] This doesn't sense. The latter statement negates the former. >but on the whole I trust Chromium developers a lot more than randos with g++ and a dream Why? Unless you're familiar with Chrome developers then they are indeed a bunch of "randos" to you. They also work for a company with a solid history of dark patterns, shoddy software, and abuse of trust. I don't see how that group of developers is somehow more trustworthy than any other software developer you don't know. >with g++ and a dream What does this even mean?
  - AlexAndScripts 5y ago
    Because Google may not have your best interests at heart, but their engineers and security are above average.
    - Nicksil 5y ago
      >their engineers and security are above average. I don't think that's saying a whole lot.
- Seirdy 5y ago
  You don't need a browser to sandbox a program. I personally sandbox Zoom (which I'm required to use for classes) in a Bubblewrap sandbox and seccomp filter. This offers sandboxing capabilities unavailable in the browser, such as W^X enforcement and resource restrictions (CPU and bandwidth limits). For other programs (not Zoom), I can (and do) also completely block off network access.

mdaniel 5y ago

Speaking as a consumer of the Zoom browser client, I can say that one less thing to install and then have it inevitably RCE my machine due to some "cute" feature, plus consume 100% of my CPU, is a strong use-case for in-browser when possible I am, of course, deeply aware of the bi-weekly Chrome vulns, along with its ability to consume all RAM and CPU, but on the whole I trust Chromium developers a lot more than randos with g++ and a dream That's not even mentioning my chromebook where "installing something" is a very weird concept anyway

Nicksil 5y ago
>[...] have it inevitably RCE my machine due to some "cute" feature, plus consume 100% of my CPU [...] >I am, of course, deeply aware of the bi-weekly Chrome vulns, along with its ability to consume all RAM and CPU [...] This doesn't sense. The latter statement negates the former. >but on the whole I trust Chromium developers a lot more than randos with g++ and a dream Why? Unless you're familiar with Chrome developers then they are indeed a bunch of "randos" to you. They also work for a company with a solid history of dark patterns, shoddy software, and abuse of trust. I don't see how that group of developers is somehow more trustworthy than any other software developer you don't know. >with g++ and a dream What does this even mean?
- AlexAndScripts 5y ago
  Because Google may not have your best interests at heart, but their engineers and security are above average.
  - Nicksil 5y ago
    >their engineers and security are above average. I don't think that's saying a whole lot.
Seirdy 5y ago
You don't need a browser to sandbox a program. I personally sandbox Zoom (which I'm required to use for classes) in a Bubblewrap sandbox and seccomp filter. This offers sandboxing capabilities unavailable in the browser, such as W^X enforcement and resource restrictions (CPU and bandwidth limits). For other programs (not Zoom), I can (and do) also completely block off network access.