News for hackers. Stuff that matters.

A comment on A quick look at unprivileged sandboxing. Parent comment

Re:A quick look at unprivileged sandboxing by simonw on Tuesday July 15, 2025 @05:27PM (#44575986)
Right now on my Mac I use a messy combination of Docker containers, sandbox-exec, bits and pieces of WebAssembly and mostly don't bother at all.

I want the friction on this to be way lower. I'd like everything to run in a sandbox by default.

[ Parent | on HN ]
Re:A quick look at unprivileged sandboxing by fsflover on Tuesday July 15, 2025 @05:50PM (#44576178)
> I want the friction on this to be way lower. I'd like everything to run in a sandbox by default.

You've just described Qubes OS: https://qubes-os.org. My daily driver, can't recommend it enough.

[ Parent | on HN ]