2 ms·

Exactly. As far as I can tell all modern OSes are built on the assumption that users of a machine need protection from each other, rather than that each user ne

by taneq 5y ago

Exactly. As far as I can tell all modern OSes are built on the assumption that users of a machine need protection from each other, rather than that each user needs protection from the third party code that they run.

iggldiggl 5y ago
> user needs protection from the third party code that they run Unfortunately the above then often crosses the line over into "protecting the user from actually accomplishing useful stuff". The file sandboxing approaches I've seen so for e.g. commonly ignore the existence of file formats that don't consist of a single, atomic file.