News for hackers. Stuff that matters.

A comment on Security Flaws in Adobe Acrobat Reader Allow Gaining Root on macOS Silently. Parent comment

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by fouc on Friday May 15, 2020 @04:07AM (#23189993)
In general I think we should all be running every single app in their own VMs. And in the oldest or most basic OS possible. Something like Windows XP.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by josteink on Friday May 15, 2020 @07:40AM (#23191004)
> In general I think we should all be running every single app in their own VMs.

Qubes OS says hello.

https://www.qubes-os.org/

[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by Sevaris on Friday May 15, 2020 @11:11AM (#23193050)
I always really liked the idea of Sandboxie (https://www.sandboxie.com/) where you can run any and every application in its own sandbox, but I was never convinced that its security was as strong as it promised to be. I wish MS would implement something like this.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by DaiPlusPlus on Friday May 15, 2020 @11:57AM (#23193671)
That’s what Microsoft App-V does.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by Sevaris on Sunday May 17, 2020 @09:48PM (#23217343)
https://docs.microsoft.com/en-us/windows/application-managem...

This seems totally unsuited to desktop non-enterprise use.

[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by thejynxed on Friday May 15, 2020 @06:27AM (#23190628)
You do not want to run such things in an XP VM if you can help it. XP is such a hot mess security wise that flaws in it allowed attackers to break VM sandboxing more than once.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by DaiPlusPlus on Friday May 15, 2020 @12:03PM (#23193736)
Eh what? Bypassing VM sandboxing demonstrates a vulnerability in the VM host, not the VM guest.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by pjmlp on Friday May 15, 2020 @04:46AM (#23190160)
Yeah, something like a sandbox!
[ Parent | on HN ]