2 ms·
Arguing that we shouldn’t deploy sandboxing because it’s not widely used seems counterproductive, and a recipe for not catching up with macOS or even Windows.
by acdha 3y ago
Arguing that we shouldn’t deploy sandboxing because it’s not widely used seems counterproductive, and a recipe for not catching up with macOS or even Windows.
Even if Firefox is perfect, that still leaves everything else which connects to the outside world or opens downloaded files. We know there’s a long history of those exploits and everyone serious in the desktop OS space has been trying to harden things so it’s not a single mistake away from an irrecoverable compromise.
- Dylan16807 3y agoNobody said we shouldn't, it's a matter of whether this particular attack vector is worth so much trouble to prevent. Security needs to allow usability or the whole system fails.
- acdha 3y agoPreventing any compromise of an X11 app from being easily escalated seems useful, and there's no usability hit for users. Developers have to update code designed in the 1990s – which I should note most of us griped about even back then – but that's not especially onerous and has multiple other benefits.