6 ms·
The misconception here is that most of the valuable stuff actually lives inside the browser. That's where users access their email, banking information, use pas
by jillesvangurp 3y ago
The misconception here is that most of the valuable stuff actually lives inside the browser. That's where users access their email, banking information, use password managers, etc. Breaking out of the sandbox is a relatively low priority goal for hackers looking to compromise browsers. Which is why this is much less of an issue than the author assumes. Browsers have to be safe regardless of whether they are sand boxed. Which is why browsers use sand boxing technology inside the browser. Sand boxing your browser is relatively low value in terms of security benefits.
This is less true on mobile because people use lots of apps there. And if you have some game implemented by a twelve year old and somebody hacks it and then installs whatever on the phone, that is a big issue. So Google and Apple spent a lot of time fixing that on mobile and then applied the same level of standards to their desktop operating systems. MS has of course over the years had their fair share of issues like that so they've gotten a lot better at this as well.
Server side linux is pretty secure out of the box. Pretty much the whole internet runs on Linux at this point. Mostly servers only run one process that matters; which is whatever they are serving. Or a bunch of dockerized processes in some cases. Which are indeed sand boxed.
Desktop Linux is server side linux with some extra stuff. Not a very homogeneous target to hack because there are lots of different software packages that people use in different combinations and versions. And the baseline security of Linux is of course not horrible like it used to be with Microsoft.
And of course things like snap and flatpak actually do use some sandboxing. So, use that if it makes you feel good. Of course that sandboxing isn't perfect as I'm sure people will be itching to point out. But the problem that addresses is pretty minor to begin with. And there is of course a certain amount of resistance against using either of those with some people.
So, not much of a problem and it's been kind of solved anyway.