4 ms·
Bets aren't off. Look at what Chrome, NaCL does, or how iOS and Symbian (yeah) and Android (eh Linux there actually) isolate. Privilege escalation bugs are ge
by willvarfar 13y ago
Bets aren't off. Look at what Chrome, NaCL does, or how iOS and Symbian (yeah) and Android (eh Linux there actually) isolate.
Privilege escalation bugs are getting rarer.
If Ubuntu put the browser in a LXC etc things could move forward.
Bets not off! We should carry on trying!
- daeken 13y agoEven in these cases, they're still allowing full access to that sandbox. This trojan doesn't escalate -- it doesn't need to. It just has to drop other payloads, which could be done on any system without hard code signing requirements.
- pmelendez 13y agoPlease correct me if I am wrong, but I think all the OS's that you referred run apps on sandboxes with strong limitations on the file system access. If that is the case then the compromises might not worth it on desktops
- willvarfar 13y agoWhy should code downloaded in the browser context read your CD drive? Seperation is good. Even cut paste can go via a trusted intemediary.
- gcr 13y agoIf I'm not mistaken, Ubuntu ships Firefox with an AppArmor profile that restricts it by default. (Question for those in the know: what exactly does it prevent firefox from doing?)
- willvarfar 13y agoYes it does. But I want defense in depth: I want it contained, I want OpenBSD-style randomisations and so on.
- deleted 13y ago[deleted]
- mistercow 13y agoWhy couldn't the browser run itself in a VM instead of relying on the OS to do it? There's some file size overhead, sure, but it seems like a custom VM would be the best way to ensure maximum compatibility, and avoids the potential for a tangle of mutual workarounds.