3 ms·
Apple's Lack of Full Site Isolation and iOS Browser Ban Puts Users at Risk
- fsflover 2y agoRelated discussion: New speculative attacks on Apple CPUs (predictors.fail) 1081 points by cylo 6 days ago | 355 comments https://news.ycombinator.com/item?id=42856023 https://news.ycombinator.com/item?id=42856023
- graemep 2y agoThe real problem is that we run untrusted software. This problem only exists because browsers are application runtimes.
- lxgr 2y agoTrue, and one possible solution is to stop using web applications. The other is to properly sandbox them. I have a suspicion as to which one is more realistic.
- fsflover 2y agoQubes OS implements the second option, and it works very well: https://qubes-os.org https://qubes-os.org.
- mdhb 2y agoThis is like making the argument against cars because “untrusted drivers” and it’s equally as bad.
- add-sub-mul-div 2y agoI'll take responsibility for deciding what code to trust, though. Letting Apple decide what code I have permission to run is a non-starter.