3 ms·

> Your computer can be compromised without demonstrating any visible signs of it. Yours can too. How do you know yours isn't?

weavejester 12y ago
I don't. Absolute security is impossible, all I can do is take precautions that minimise the risk. That's why sandboxing of apps seems a rather good idea: it reduces the risk without adding much inconvenience to the user.
- wfunction 12y ago
  > I don't. Absolute security is impossible Yeah then why do you suddenly jump when I tell you the same thing? To the best of my knowledge I don't have any malware, and to the best of your knowledge you don't either. Seems pretty equal to me, yet somehow you freak out when I say the same thing as you do. I'm pretty sure I'm at least as certain as you are that my system doesn't have any malware, so if that's not enough of an assurance for you then it shouldn't be enough for you either.
  - weavejester 12y ago
    Because regarding the sandboxing of applications, you said: > Absolutely horrible idea. Linux users aren't exactly in desperate need of protection from their computers. If you agree that your system can be compromised, why would you say that an extra layer of protection was a bad idea?
    - wfunction 12y ago
      Because I'm almost certain that it will cause some kind of inconvenience down the road. It's unlikely to be "free" -- no OS-level security feature I've seen has been "free" in terms of convenience.
      - weavejester 12y ago
        Just off the top of my head, hard drive encryption is an OS-level security feature that's reasonably "free" in terms of convenience. But even if all previous efforts have failed, which I really don't think is the case, trying to improve security is surely a laudable goal. And even if you would consider sandboxing to be inconvenient, there are plenty of people who'd love to have something like that. Right now, if I open up an application, I have no idea what directories it's accessing or servers its communicating with. Forcing an app to tell me whenever it wants to access something new would be fantastic, and as a side effect, it would put pressure on application programmers to reduce the number of privileges they ask for.

weavejester 12y ago

I don't. Absolute security is impossible, all I can do is take precautions that minimise the risk. That's why sandboxing of apps seems a rather good idea: it reduces the risk without adding much inconvenience to the user.

wfunction 12y ago
> I don't. Absolute security is impossible Yeah then why do you suddenly jump when I tell you the same thing? To the best of my knowledge I don't have any malware, and to the best of your knowledge you don't either. Seems pretty equal to me, yet somehow you freak out when I say the same thing as you do. I'm pretty sure I'm at least as certain as you are that my system doesn't have any malware, so if that's not enough of an assurance for you then it shouldn't be enough for you either.
- weavejester 12y ago
  Because regarding the sandboxing of applications, you said: > Absolutely horrible idea. Linux users aren't exactly in desperate need of protection from their computers. If you agree that your system can be compromised, why would you say that an extra layer of protection was a bad idea?
  - wfunction 12y ago
    Because I'm almost certain that it will cause some kind of inconvenience down the road. It's unlikely to be "free" -- no OS-level security feature I've seen has been "free" in terms of convenience.
    - weavejester 12y ago
      Just off the top of my head, hard drive encryption is an OS-level security feature that's reasonably "free" in terms of convenience. But even if all previous efforts have failed, which I really don't think is the case, trying to improve security is surely a laudable goal. And even if you would consider sandboxing to be inconvenient, there are plenty of people who'd love to have something like that. Right now, if I open up an application, I have no idea what directories it's accessing or servers its communicating with. Forcing an app to tell me whenever it wants to access something new would be fantastic, and as a side effect, it would put pressure on application programmers to reduce the number of privileges they ask for.