3 ms·
The classic example is "the confused deputy" in which any programs run on behalf of the user can damage unintended targets.
by mikewarot 4y ago
The classic example is "the confused deputy" in which any programs run on behalf of the user can damage unintended targets.
- fsflover 4y agoOn Qubes, you compartmentalize your workflows and data into security domains. All programs in one domain have only access to the same security level (in the edge case, it's one app per compartment). Unintended targets are simply not accessible from a wrong domain, i.e., by wrong programs.