|
|
Log in / Subscribe / Register

Failure of sandboxing

Failure of sandboxing

Posted Apr 17, 2025 21:55 UTC (Thu) by khim (subscriber, #9252)
In reply to: Failure of sandboxing by epa
Parent article: Catanzaro: Dangerous arbitrary file read vulnerability in Yelp

The big problem with all that reasoning is that it's very hard to “tighten the screws” and not make users run somewhere.

If your OS was designed from the very beginning not to allow integration between programs except in a severely restricted form, then it's very hard to add any semblance of sane security restrictions without users immediately declaring your worshiper of Satan for breaking your workflow.

That's why I'm a bit sad that it takes so much for Google to finally replace ChromeOS with Android (like they should have done years ago).

Then we would finally have kinda-sorta-OSS desktop OS with lots of software.

Of course a lot of people would complain when that would happen, anyway… It's not possible to win there, ultimately, only lose… lose less or lose more, but you always lose.


The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:

Note: you can avoid this step in the future by logging into your LWN account.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds