Re:SolarWinds hacking campaign puts Microsoft in hot seat
by amluto on Saturday April 17, 2021 @04:58PM
(#26847391)
The Windows sandbox infrastructure may well be more advanced than seccomp in the sense of being more complicated, but I would argue that makes it worse, not better. There are many sandbox escapes based on the insane complexity of Windows integrity levels. In contrast, there have been maybe 5 known Linux kernel bugs allowing a breakout from a strict seccomp policy in the last few years.
[ Parent
| on HN ]
Re:SolarWinds hacking campaign puts Microsoft in hot seat
by pjmlp on Sunday April 18, 2021 @01:55AM
(#26850140)
What hardware vendor does sell GNU/Linux systems already pre-configured with such policies?
Re:SolarWinds hacking campaign puts Microsoft in hot seat
by amluto on Monday April 19, 2021 @11:35PM
(#26870416)
What hardware vendor sells the Windows sandbox preconfigured with policies?
Chromium and Firefox configure the Windows sandbox and seccomp on Windows and Linux respectively. I would argue that seccomp is better.
On the other hand, Windows has its app sandbox and Linux has snap and flatpak. I don’t think any of them are amazing.