3 ms·
>Like, it has absolutely zero security, Wait until you discover exploits for the rust Runtime >no accessibility AtSPI, speech-distpacher. >no fine-grained p
by anthk 2y ago
>Like, it has absolutely zero security,
Wait until you discover exploits for the rust Runtime
>no accessibility
AtSPI, speech-distpacher.
>no fine-grained permissions system,
ACLs.
>no normal cross-application communication
DBUS did that.
>No userspace resource control (cgroups are cool, but they are not exposed)
Unless you use Plan9/9front, every Unix and even NT it's like that.
Inb4 sandboxing and X.org easy eavesdropping, upon running any unsupervised malware as your user account, you are powned under every OS (by default) as you can just tgz the Chromium/Firefox/SSH profile from $HOME and rsync+netcat/NNCP the whole pack over the net. Everything else it's snake oil.
- kaba0 2y ago> you are powned under every OS That literally wouldn’t work on Android, or ios. And android’s solution is very elegant, and only relies on standard linux interfaces, so there is zero reason why running every process under a new, dynamic user is not the default way of interaction.
- anthk 2y agoThat's what power users do when say 'Linux in insecure because wih $HOME you can loss all you real life assets'. Wel, first at all, anyone with at least two neurons would create separate users for work, financial/goverment data and gaming/leisure/casual browsing.