Re:Decrypting encrypted files from Akira ransomware using a ...
by cyberpunk on Saturday March 15, 2025 @02:20AM
(#43370422)
Okay so you give the sandboxed app access to ~/Documents and those get encrypted…
I think most people don’t care about their system directories but their data?
Backups and onedrive for enterprises, yes. :)
Re:Decrypting encrypted files from Akira ransomware using a ...
by stavros on Saturday March 15, 2025 @05:30AM
(#43371275)
Obviously if you give all sandboxed processes access to /, that doesn't improve anything.
The idea is that you'd notice that your new git binary is trying to get access to /var/postgres, and you'd deny it, because it has no reason to want that.
Then changes made to files should be stored as deltas to the original.
But realistically a good readonly/write new backup solution is needed, you never know when something bad might happen.