3 ms·
I think this is especially problematic for Windows, where a simple and effective lightweight sandboxing solution is absent AFAIK. Docker-based sandboxing is pos
by lifthrasiir 11mo ago
I think this is especially problematic for Windows, where a simple and effective lightweight sandboxing solution is absent AFAIK. Docker-based sandboxing is possible but very cumbersome and alien even to Windows-based developers.
- donkeylazy456 11mo agoI don't like that we need to handle docker(container) ourselves for sandboxing such a light task load. The app should provide itself.
- esseph 11mo agoThe problem is you can't trust the app, therefore it must be sandboxed.
- bossyTeacher 11mo ago>The app should provide itself. The whole point of the container is trust. You can't delegate that unfortunately, ultimately, you need to be in control which is why the current crop of AI is so limited
- donkeylazy456 11mo agofair point.
- jrjfjgkrj 11mo agoWindows Sandbox is built in, lightweight, but not easy to use programmatically (like an SSH into a VM)
- lifthrasiir 11mo agoWSB is great by its own, but is relatively heavyweight compared to other OSes (namespaces in Linux, Seatbelt in macOS).