2 ms·
If you are importing libraries or 3rd party dependencies you are no longer “running your own code”. Micro VMs help to some extent limiting the fallout of supply
by __turbobrew__ 5y ago
If you are importing libraries or 3rd party dependencies you are no longer “running your own code”. Micro VMs help to some extent limiting the fallout of supply chain attacks.
- rahimnathwani 5y agoThis is a great point. Now I'm wondering whether I should sandbox everything on my desktop...
- __turbobrew__ 5y agoAbsolutely! Plan9 had this 30 years ago! OpenBSD also has pledge and unveil to sandbox programs. I think one day we will look back how insane it is that our programs are not isolated. Why does every program I run need access to my SSH keys?