4 ms·
But it is true. Who cares if the program can write to your system configuration when it can encrypt your entire home directory and use your private SSH keys to
by derkades 5y ago
But it is true. Who cares if the program can write to your system configuration when it can encrypt your entire home directory and use your private SSH keys to encrypt all your servers as well.
I'd argue the root/normal user separation is largely useless on single user desktop computers.
- randomhodler84 5y agoPresumably only the homedirs of the servers. You want a world where a browser exploit can drop a bootkit? Nahhh
- Gigachad 5y agoThey could just drop something in bashrc or somewhere else for a persistent exploit. The system files contain nothing worth touching on a personal device.
- randomhodler84 5y agoPersistent userspace. And while I understand privesc in major platforms is not the insurmountable problem it seems, it is still a layer of protection important to the model of preventing SMM, hypervisor efi boot and root level persistence, without something else up its sleeves.