Re:What a one line change did to the Chrome sandbox
by signal11 on Thursday April 23, 2020 @10:06AM
(#22956108)
Could "fast" VMs be a solution? e.g. Firecracker. You get a fairly robust level of isolation that way and they're quick to start.
[ Parent
| on HN ]
Re:What a one line change did to the Chrome sandbox
by CJefferson on Thursday April 23, 2020 @03:23PM
(#22960027)
VMs feel a bit heavy, even if they are fast. If i want to wrap multiple parts of a program I could end up spawning a dozen VMs...