3 ms·
It's still silly to not allow sandboxing of unsigned binaries. There could at least be a user sandbox where all non-signed apps can live. There could be an opti
by actionfromafar 3y ago
It's still silly to not allow sandboxing of unsigned binaries. There could at least be a user sandbox where all non-signed apps can live. There could be an option for a temporary sandbox. And so on.
There could be many useful options which would still improve security incrementally.
- mike_hearn 3y agoWindows already has that, it's a feature called Windows Sandbox: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview https://learn.microsoft.com/en-us/windows/security/applicati... But this blog post is about App Isolation which is more conventional kernel level sandboxing.
- actionfromafar 3y agoThanks!