2 ms·

C++ software should really only be run in a sandbox since this kind of stuff is inevitable.

• nijave 3y ago
  Would that make a difference for a text editor since it likely already has filesytem access? Snap/Flatpak (can) do sandboxing
  • eru 3y ago
    You can give your texteditor very restricted filesystem access.
    • nijave 3y ago
      While it's possible, I'm not sure how practical it is. On macOS (which has fairly granular permissions in recent releases), my terminal emulator and text editor end up with access to pretty much everything. If you're editing code/scripts, a malicious actor could insert something into a file the editor has access to and wait for it to be executed
  • Gigachad 3y ago
    With something like flatpak portals you could restrict the directories it has access too. Though it could possibly insert something in the code you will be running unsandboxed.
• MuffinFlavored 3y ago
  what if the sandbox is written in C++?
  • guestbest 3y ago
    Then run your sandbox on someone else’s computer.
  • ronsor 3y ago
    Then you run the sandbox in itself for extra security
  • _moof 3y ago
    Make the whole computer out of sand.
• andersa 3y ago
  I wish. When do we get this upgrade to windows security in a way that is actually useful? Windows Sandbox is not useful. App Isolation seems promising but is still in some kind of preview phase. I've been waiting for so long.