4 ms·

Please correct me if I am wrong, but I think all the OS's that you referred run apps on sandboxes with strong limitations on the file system access. If that is

Please correct me if I am wrong, but I think all the OS's that you referred run apps on sandboxes with strong limitations on the file system access. If that is the case then the compromises might not worth it on desktops

willvarfar 13y ago
Why should code downloaded in the browser context read your CD drive? Seperation is good. Even cut paste can go via a trusted intemediary.
gcr 13y ago
If I'm not mistaken, Ubuntu ships Firefox with an AppArmor profile that restricts it by default. (Question for those in the know: what exactly does it prevent firefox from doing?)
- willvarfar 13y ago
  Yes it does. But I want defense in depth: I want it contained, I want OpenBSD-style randomisations and so on.