Now it's too bad per-user firewalling cannot be done easily on neither Windows nor OS X. I haven't tried this, but pf seems to have the support there, so I'

Now it's too bad per-user firewalling cannot be done easily on neither Windows nor OS X. I haven't tried this, but pf seems to have the support there, so I'm not sure why you couldn't. It's also too bad one user (say the one allowed to surf the Web) cannot display its browser window(s) in another user (say your main account)'s graphical display (neither on Windows nor on OS X). $ su testuser $ /Applications/Safari.app/Contents/MacOS/Safari Seems to work for me. Or too bad OS X doesn't allow to run two graphical sessions simultaneously This is called Fast User Switching on OS X.