Recent submissions

Comment · 1 month ago
> And doesn’t this whole thing break with practical realities, such as processes needing to interact with each other ?

There will always be advantages and disadvantages to all of this. But the general idea is to protect the "core" OS, and for that virtualization is superior to anything else you could try really. Android and iOS are already built to isolate apps from one another. ChromeOS uses Crostini to run Linux programs in a VM, etc.

> without increasing friction

That's always the compromise with an Antivirus, isn't it? The logical thing would be to build password managers into the OS, or maybe even to handle them differently. As they are already done in Android and iOS today.

Comment · 1 month ago
I'm a firm believer that hardware virtualization is the way forward for security. Qubes OS has the right idea, but running an entire OS for every application is demanding.

IMO it would make more sense to run every app in its own scaled down VM, like Microdroid for Android. Windows 10 had Microsoft Defender Application Guard for Microsoft Edge, and as far as security goes it was a fortress.

Too bad they discontinued it, and that performance was subpar. I would have loved to see them develop the idea more.

Comment · 1 month ago
Do you actually believe so? I genuinely believe that 99.99% of people won't give a crap. They will accept this like they've accepted most things in life without question.
Comment · 1 month ago
Just run your browser in a secured VM and you won't have to basically kill the experience to be able to use it.
Comment · 1 month ago
Pale Moon? That doesn't even have sandboxing?

Why?

Comment · 1 month ago
How would you expect your AI to build you a more secure browser than Microsoft or Google could?
Comment · 1 month ago
What are the easiest ways of doing so though? I'm running Windows Sandbox on Windows, and MacOS has Bromure. What's the easiest for Linux? KVM?
Comment · 1 month ago
uBO stops exploits? Source?
Comment · 2 months ago
FYI Thorium is updated once every 3 months or so. Not exactly the safest thing in the world.
Comment · 3 months ago
Man I love this kind of "evidence" that can't be dismissed, that is ultimately just a big "just trust me bro".
Comment · 3 months ago
Some would argue that's the same thing these days.
Comment · 7 months ago
Just a few years ago this was about to change in Sweden.

But they didn't change it, because "women should be able to look up the men that they date".

Comment · 9 months ago
A theory is that it just might have something to do with the shootings and bombings. Just a thought.
Comment · 9 months ago
Indeed. What would they do if he refused? Would they cancel his account over tracking pixels?
Comment · 9 months ago
Said E2EE is mobile only and completely unavailable in group chats

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton