3 ms·
Or alternatively, you can pursue security through compartmentalization. My VM for random browsing has JS enabled, but if I'm hacked, the attacker will not get a
by fsflover 3y ago
Or alternatively, you can pursue security through compartmentalization. My VM for random browsing has JS enabled, but if I'm hacked, the attacker will not get access to any files. Also the VM is destroyed when the browser is closed.
- lxgr 3y agoWhat’s the threat model here? Javascript sandbox escapes are extremely rare these days (subjectively they happen less frequently that image or video codec bugs).
- fsflover 3y agoApart from js escapes, you are protected even if you run random executables from the Internet, or any untrusted software in general. More reasons: https://forum.qubes-os.org/t/how-to-pitch-qubes-os/4499/15 https://forum.qubes-os.org/t/how-to-pitch-qubes-os/4499/15
- lxgr 3y ago> run random executables from the Internet Well, here's your actual problem. That's a vastly different threat model! Modern browsers are very well sandboxed.
- fsflover 3y agoEven with the original threat model, CVEs in the web browsers are much more frequent than in the hardware virtualization with Xen, aren't they?