News for hackers. Stuff that matters.
Re:Crazy New Ideas by pantulis on Thursday May 06, 2021 @09:09AM (#27062652)
I was going to try Mighty but even in my somewhat relaxed work environment item 4 is not really solved by Mighty apart from "we will not access your data". Obviously they are very smart and will surely be working on E2E encryption but they do not seem to have it.
Re:Crazy New Ideas by IAmLiterallyAB on Thursday May 06, 2021 @09:16AM (#27062731)
> E2E encryption

How on earth would that work for their product? They need to access the data so they can render it.

Re:Crazy New Ideas by nomel on Thursday May 06, 2021 @11:25AM (#27064653)
Surely that could happen client side.
Re:Crazy New Ideas by tsimionescu on Thursday May 06, 2021 @12:06PM (#27065312)
The whole value proposition is that the beefy remote machine is handling the rendering, isn't it? At least half the performance of a web page is wasted on DOM re-shuffling.

Not to mention, it's not like Chrome can run Javascript without looking at the data, and if they're not running Chrome, they'll start getting into compatibility issues.

Re:Crazy New Ideas by sjg007 on Thursday May 06, 2021 @09:28PM (#27070914)
It's endpoint security as well. All browsing goes through Mighty.
Re:Crazy New Ideas by tsimionescu on Friday May 07, 2021 @02:16AM (#27072828)
If Mighty behaves like a full replacement for a modern web browser on my system, it will have to give the web pages I visit (opt-in) access to my GPS, camera, microphone, Bluetooth, battery information, and other peripherals, I sliding all of my mouse and keyboard input. It will have to allow me to upload or download files from the web page. Also, all my tabs are running on the same remote VM, so this only protects other systems, not my banking or JIRA.

Sure, it's the ultimate sandbox for the code itself, it probably protects me perfectly from Meltdown attacks against other programs on my main system, but I don't think that's enough to call it 'endpoint security'.

Re:Crazy New Ideas by pantulis on Friday May 07, 2021 @03:42AM (#27073372)
I don't have the faintest idea, but the notion of having my session cookies and credentials stored in a VM somewhere makes me very nervous and I am not even half paranoid.

So they need to figure it out otherwise it's only valid for personal use, which is not exactly the money is, imho.

Maybe some self hosted solution for corporate departments? Or waiting for an acquision from Citrix or VMWare...