3 ms·

Strong sandboxing, yes. But I'd especially appreciate it if it was wrapped up in an interface like Sandstorm.io. I want to teach something like Tailscale abou

Strong sandboxing, yes. But I'd especially appreciate it if it was wrapped up in an interface like Sandstorm.io. I want to teach something like Tailscale about my contacts, so they are allowed to communicate with my services (through their services). Then I want to run an app inside a strong sanbox that has capability-based APIs to do things kind of like ZeroMQ for sending messages TO THE CONTACTS. I don't want the API to look like a tcp/ip or udp connection. I want the app to think it's sending a message to a contact I've given it permission to talk to. If this was running in a strong sandbox, I think this would be an awesome way to develop and use simple federated apps. If something like Mastodon existed on top of this, I'd think it would be really secure and much easier to tell people to stand up their own node...

anderspitman 4y ago
I consider Sandstorm to sort of be the platonic ideal in many ways. But in practice, the fact that the apps have to be modified to run on it holds it back.
- VikingCoder 4y ago
  Sure, but I feel like that's just part of the trade-offs. And chicken-and-egg, really. But if I were really bought in to Sandstorm.io, developing new apps for it would make a lot of sense, and I agree with their assessments about accounts and security - that those are better left to the OS. So I'm just wanting to build federated apps, using that same philosophy. And if Tailscale Funnel let me safely run in a sandbox on prem...? That sounds amazing. Like, this is the kind of thing where I'd buy a headless PC just to host federated apps for my extended friends and family network, if the config were painless enough and the sandbox secure enough, and the self-updating, self-maintaining story of Sandstorm.io worked well enough... It's like the Chrome OS of federation, in my head. The OS does exactly and only what you need, making it easy for you to add the business logic of your thing. Like, I wish this was roughly how SAS worked... I wish to hell more businesses felt secure in letting their employees stand up convenience servers. And I feel like these are steps in the right direction.

anderspitman 4y ago

I consider Sandstorm to sort of be the platonic ideal in many ways. But in practice, the fact that the apps have to be modified to run on it holds it back.

VikingCoder 4y ago
Sure, but I feel like that's just part of the trade-offs. And chicken-and-egg, really. But if I were really bought in to Sandstorm.io, developing new apps for it would make a lot of sense, and I agree with their assessments about accounts and security - that those are better left to the OS. So I'm just wanting to build federated apps, using that same philosophy. And if Tailscale Funnel let me safely run in a sandbox on prem...? That sounds amazing. Like, this is the kind of thing where I'd buy a headless PC just to host federated apps for my extended friends and family network, if the config were painless enough and the sandbox secure enough, and the self-updating, self-maintaining story of Sandstorm.io worked well enough... It's like the Chrome OS of federation, in my head. The OS does exactly and only what you need, making it easy for you to add the business logic of your thing. Like, I wish this was roughly how SAS worked... I wish to hell more businesses felt secure in letting their employees stand up convenience servers. And I feel like these are steps in the right direction.