5 ms·
This has been solved for like 15 years. Use virtual machines!
by throw7484485 1y ago
This has been solved for like 15 years. Use virtual machines!
- simonw 1y agoRight now on my Mac I use a messy combination of Docker containers, sandbox-exec, bits and pieces of WebAssembly and mostly don't bother at all. I want the friction on this to be way lower. I'd like everything to run in a sandbox by default.
- fsflover 1y ago> I want the friction on this to be way lower. I'd like everything to run in a sandbox by default. You've just described Qubes OS: https://qubes-os.org https://qubes-os.org. My daily driver, can't recommend it enough.
- hsbauauvhabzb 1y agoVirtual machine escapes exist either due to hypervisor 0day, misconfiguration or lateral attacks. 0day won’t be wasted on low value targets, but it’s worth pointing out that they’re not an effective security boundary in all scenarios.
- pjmlp 1y agoA bit more, considering I was using HP-UX Virtual Vault in 2000. Note the windows captions on the screenshot. https://www.reddit.com/media?url=https%3A%2F%2Fi.redd.it%2F70ckn58vvou71.png https://www.reddit.com/media?url=https%3A%2F%2Fi.redd.it%2F7...