4 ms·

> The security aspect seems also a bit funny to me. After all the average Desktop has most data in the home directory, so every application can read everything.

> The security aspect seems also a bit funny to me. After all the average Desktop has most data in the home directory, so every application can read everything. The world is moving towards sandboxed applications (through flatpak and friends) more and more. As per the OP, this is one of the things holding sandboxing back.

LtWorf 10mo ago
There's sandbox escapes daily since decades. It doesn't work.
- akimbostrawman 10mo ago
  >There's lock picking daily since centuries. It doesn't work
  - LtWorf 10mo ago
    It takes time to pick one lock and twice as much to pick two. It takes the same time to escape 1 or 10000000 sandboxes.
    - gf000 10mo ago
      That's only somewhat true if we are talking about the same sandbox nested (which would be quite dumb to do). Escaping two different sandboxes are multiple times as hard, and a sane sandbox is not trivially picked, see web browsers and that the fact that the world is not one giant botnet.
      - LtWorf 10mo ago
        How many implementations of linux namespaces are there in the kernel? Is it more than one?
        gf000 10mo ago
        Is a wasm sandbox, or the browser not a sandbox, independent of the kernel?
        LtWorf 10mo ago
        Has one of them ever gone more than a month without a CVE?