News for hackers. Stuff that matters.

A comment on Show HN: Sandy – A tiny Sandbox to run untrusted code ️. Parent comment

Re:Show HN: Sandy – A tiny Sandbox to run untrusted code ️ by craig on Monday January 13, 2020 @09:41AM (#22034805)
Thanks for the input, I agree and I've added a warning to the readme taking this into account and directing readers to this discussion.

I do think there is value in ease of use with something like sandy. I'm unlikely to setup gvisor just to run some arbitrary script I found online. I assume most people today just will run scripts directly on their machine. With sandy, I was experimenting if you could get 80% of the security while still making it really easy to use. I agree that it still hasn't met that mark with regards to security but I think it's possible to improve that.

[ Parent | on HN ]
Re:Show HN: Sandy – A tiny Sandbox to run untrusted code ️ by grawprog on Monday January 13, 2020 @10:55AM (#22035506)
>With sandy, I was experimenting if you could get 80% of the security while still making it really easy to use

This seems dangerous. That 20% insecurity is still pretty large, but small enough it makes users complacent and gives them that false '100%' secure feeling, especially when coupled with ease of use.

[ Parent | on HN ]