News for hackers. Stuff that matters.

A comment on $ sudo rm -rf / === NPM install. Parent comment

Re:$ sudo rm -rf / === NPM install by Ginden on Tuesday November 09, 2021 @08:55AM (#29161735)
ssh_rsa shouldn't be readable to browser, Spotify, Zoom or whatever is currently running. And browser files should be isolated from any other process etc.

Linux security model (and I suppose other OSes too, but I'm most familiar with) is fundamentally incompatible with desktop environments. Mobile OSes got it much better.

I love Snap because it confines processes to sandbox.

[ Parent | on HN ]
Re:$ sudo rm -rf / === NPM install by kevinmgranger on Tuesday November 09, 2021 @01:41PM (#29165575)
Linux _does_ have SELinux. It's just too confusing to use.
[ Parent | on HN ]
Re:$ sudo rm -rf / === NPM install by Ginden on Tuesday November 09, 2021 @07:35PM (#29169562)
It's unusable for anyone but few highly qualified sysadmins.

If good security isn't easily obtainable for tech-savvy person in one hour, there is basically no security.

[ Parent | on HN ]