4 ms·
That's like saying "in a native-based future we only need to security proof the OS". There's no free lunch, you always need to check both the sandbox layer and
by rhn_mk1 4y ago
That's like saying "in a native-based future we only need to security proof the OS". There's no free lunch, you always need to check both the sandbox layer and the application.
- jeswin 4y agoBrowsers have a truly remarkable track record when it comes to security. We have been able to run untrusted code for nearly two decades now without a large scale breach.
- mavhc 4y agoEven since they banned plugins
- rhn_mk1 4y agoThat's because browsers don't do all that much compared to an operating system (although they are catching up). On the other side, since Windows XP, security of the OS's has been steadily improving as well. What breaches do you mean anyway? Once you push broad access to user data and hardware to browsers, you'll get ransomware there, too. Meanwhile, native sandboxing keeps advancing. So no, web will not remain the safer option forever.
- deleted 4y ago[deleted]
- hulitu 4y ago> We have been able to run untrusted code for nearly two decades now without a large scale breach None that we know of. Keep in mind that not so long ago the browser did not have access to filesystem except to save files. Now the browsers have access to filesystem, camera, microfone, they can act as servers, they have access to USB devices. I mean WTF. What kind of security is that ?