3 ms·

Speaking as a consumer of the Zoom browser client, I can say that one less thing to install and then have it inevitably RCE my machine due to some "cute" featur

Speaking as a consumer of the Zoom browser client, I can say that one less thing to install and then have it inevitably RCE my machine due to some "cute" feature, plus consume 100% of my CPU, is a strong use-case for in-browser when possible I am, of course, deeply aware of the bi-weekly Chrome vulns, along with its ability to consume all RAM and CPU, but on the whole I trust Chromium developers a lot more than randos with g++ and a dream That's not even mentioning my chromebook where "installing something" is a very weird concept anyway

Nicksil 5y ago
>[...] have it inevitably RCE my machine due to some "cute" feature, plus consume 100% of my CPU [...] >I am, of course, deeply aware of the bi-weekly Chrome vulns, along with its ability to consume all RAM and CPU [...] This doesn't sense. The latter statement negates the former. >but on the whole I trust Chromium developers a lot more than randos with g++ and a dream Why? Unless you're familiar with Chrome developers then they are indeed a bunch of "randos" to you. They also work for a company with a solid history of dark patterns, shoddy software, and abuse of trust. I don't see how that group of developers is somehow more trustworthy than any other software developer you don't know. >with g++ and a dream What does this even mean?
- AlexAndScripts 5y ago
  Because Google may not have your best interests at heart, but their engineers and security are above average.
  - Nicksil 5y ago
    >their engineers and security are above average. I don't think that's saying a whole lot.
Seirdy 5y ago
You don't need a browser to sandbox a program. I personally sandbox Zoom (which I'm required to use for classes) in a Bubblewrap sandbox and seccomp filter. This offers sandboxing capabilities unavailable in the browser, such as W^X enforcement and resource restrictions (CPU and bandwidth limits). For other programs (not Zoom), I can (and do) also completely block off network access.

Nicksil 5y ago

>[...] have it inevitably RCE my machine due to some "cute" feature, plus consume 100% of my CPU [...] >I am, of course, deeply aware of the bi-weekly Chrome vulns, along with its ability to consume all RAM and CPU [...] This doesn't sense. The latter statement negates the former. >but on the whole I trust Chromium developers a lot more than randos with g++ and a dream Why? Unless you're familiar with Chrome developers then they are indeed a bunch of "randos" to you. They also work for a company with a solid history of dark patterns, shoddy software, and abuse of trust. I don't see how that group of developers is somehow more trustworthy than any other software developer you don't know. >with g++ and a dream What does this even mean?

AlexAndScripts 5y ago
Because Google may not have your best interests at heart, but their engineers and security are above average.
- Nicksil 5y ago
  >their engineers and security are above average. I don't think that's saying a whole lot.

Seirdy 5y ago

You don't need a browser to sandbox a program. I personally sandbox Zoom (which I'm required to use for classes) in a Bubblewrap sandbox and seccomp filter. This offers sandboxing capabilities unavailable in the browser, such as W^X enforcement and resource restrictions (CPU and bandwidth limits). For other programs (not Zoom), I can (and do) also completely block off network access.