News for hackers. Stuff that matters.

Batman8675309

> And doesn’t this whole thing break with practical realities, such as processes needing to interact with each other ?

There will always be advantages and disadvantages to all of this. But the general idea is to protect the "core" OS, and for that virtualization is superior to anything else you could try really. Android and iOS are already built to isolate apps from one another. ChromeOS uses Crostini to run Linux programs in a VM, etc.

> without increasing friction

That's always the compromise with an Antivirus, isn't it? The logical thing would be to build password managers into the OS, or maybe even to handle them differently. As they are already done in Android and iOS today.

I'm a firm believer that hardware virtualization is the way forward for security. Qubes OS has the right idea, but running an entire OS for every application is demanding.

IMO it would make more sense to run every app in its own scaled down VM, like Microdroid for Android. Windows 10 had Microsoft Defender Application Guard for Microsoft Edge, and as far as security goes it was a fortress.

Too bad they discontinued it, and that performance was subpar. I would have loved to see them develop the idea more.

Re:An update on how we confirm your age group on Discord on Wednesday September 23, 2026 @10:42AM (#49816939)
Do you actually believe so? I genuinely believe that 99.99% of people won't give a crap. They will accept this like they've accepted most things in life without question.
Re:My practical approach to surfing the web safely on Tuesday September 08, 2026 @02:47AM (#49606405)
Just run your browser in a secured VM and you won't have to basically kill the experience to be able to use it.
Re:My practical approach to surfing the web safely on Tuesday September 08, 2026 @02:46AM (#49606401)
Pale Moon? That doesn't even have sandboxing?

Why?

Re:My practical approach to surfing the web safely on Tuesday September 08, 2026 @02:21AM (#49606200)
How would you expect your AI to build you a more secure browser than Microsoft or Google could?
Re:My practical approach to surfing the web safely on Tuesday September 08, 2026 @02:20AM (#49606183)
What are the easiest ways of doing so though? I'm running Windows Sandbox on Windows, and MacOS has Bromure. What's the easiest for Linux? KVM?
Re:Actively exploited sandbox RCE in all Chromium versions on Saturday September 05, 2026 @09:58AM (#49576570)
uBO stops exploits? Source?
FYI Thorium is updated once every 3 months or so. Not exactly the safest thing in the world.
Re:Ente – Opening Our Books on Thursday July 16, 2026 @12:38PM (#48936841)
Man I love this kind of "evidence" that can't be dismissed, that is ultimately just a big "just trust me bro".
Re:Germany set to restrict its Freedom of Information Act on Tuesday July 14, 2026 @11:47AM (#48908640)
Some would argue that's the same thing these days.
Just a few years ago this was about to change in Sweden.

But they didn't change it, because "women should be able to look up the men that they date".

Re:Young adults report lower life satisfaction in Sweden on Wednesday February 04, 2026 @02:16AM (#46882535)
A theory is that it just might have something to do with the shootings and bombings. Just a thought.
Re:That's not how email works on Thursday January 29, 2026 @05:14AM (#46808093)
Indeed. What would they do if he refused? Would they cancel his account over tracking pixels?
Said E2EE is mobile only and completely unavailable in group chats
Yes. Let's switch to an app with Russian connections that has actively refused to implement E2EE for over a decade now.
And with Europe you mean a single country, Spain?
Most if not all of their attacks are inexcusable. Calling a competing OS, CalyxOS, nazi sympathizers is unacceptable and when I first read that I started seeing the red flags.

Nothing is open about GrapheneOS aside from the source code. We officially know nothing about the leadership, their current plans, what their finances look like or even who this new mysterious OEM is.

It's weird.

Re:Ask HN: Cloudflare is down. How does this affect you? on Tuesday November 18, 2025 @06:41AM (#45963854)
Still down for me.
The average person is literally never encountering malware on either platform.
Why would they want goodwill when they can run propaganda campaigns against this instead?
I don't see how LLMs could pump stuff like this out anytime soon. Especially when you'll have defensive LLMs around that time.

If anything else, this just shows that we need more layered security for everything, even the ancient parts of the OS.

44% AI on that page. I'm looking forward to the day where every review will be AI generated... sigh.
They are building their own device trees now.
Re:Why do LLMs freak out over the seahorse emoji? on Monday October 06, 2025 @06:16AM (#45489748)
What are some examples of it being racist?
Re:GrapheneOS and Forensic Extraction of Data (2024) on Friday September 12, 2025 @02:45PM (#45225253)
>You can't have a cake and eat it.

That is usually how it's done, yes.

Yeah talk about clickbait.
> They should be investing like crazy to make Safari the best browser out there instead of just relying on their monopole. And why the fuck is there no Windows version to make their iOS users happy?

Simple. Apple doesn't want you to use Windows. They want you to buy an expensive Apple computer instead.

Proton isn’t giving up VPN users. It’s giving up mail users. There’s a huge legal difference.
Re:Pixels in Islamic art: square Kufic calligraphy on Tuesday May 06, 2025 @08:36AM (#43904394)
Because they can. I've encountered plenty of pages like this and it would seem that doing so is risk free.

Older »