3 ms·

> The app needs permission to access your data. If you want to use the application what choice do you have except to grant it access? But it doesn't need netwo

by eviks 4mo ago

> The app needs permission to access your data. If you want to use the application what choice do you have except to grant it access? But it doesn't need network access to be useful, so it doesn't have that permission and can't exfiltrate your data?

pjmlp 4mo ago
https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file https://learn.microsoft.com/en-us/windows/security/applicati...
- eviks 4mo ago
  In general, what's three point of a link to a sandbox in a conversation about the benefits of sanboxingm But specifically, this sandbox also kills all interop with your system, other apps/utilities, so way too disruptive for the purpose of isolating just from the network.
  - pjmlp 4mo ago
    Just like any WebAssembly runtime, without imports of external functions, the code can only warm CPUs.
    - eviks 4mo ago
      So? Will they not have imports of external functions?
      - pjmlp 4mo ago
        The point being that WASM doesn't improve anything over sandoxing native applications, on the OSes that actually are serious about it. It should confine itself as the evolution from browser plugins.
        eviks 4mo ago
        So it does improve since the OSes are not actually serious about it otherwise they would've fixed these basic usability concerns years ago.
        pjmlp 4mo ago
        I haven't said such thing.