News for hackers. Stuff that matters.
Re:Decrypting encrypted files from Akira ransomware using a ... by cyberpunk on Saturday March 15, 2025 @02:20AM (#43370422)
Okay so you give the sandboxed app access to ~/Documents and those get encrypted…

I think most people don’t care about their system directories but their data?

Backups and onedrive for enterprises, yes. :)

Re:Decrypting encrypted files from Akira ransomware using a ... by stavros on Saturday March 15, 2025 @05:30AM (#43371275)
Obviously if you give all sandboxed processes access to /, that doesn't improve anything.

The idea is that you'd notice that your new git binary is trying to get access to /var/postgres, and you'd deny it, because it has no reason to want that.