Batman8675309
Batman8675309 on Hacker News
> And doesn’t this whole thing break with practical realities, such as processes needing to interact with each other ?
There will always be advantages and disadvantages to all of this. But the general idea is to protect the "core" OS, and for that virtualization is superior to anything else you could try really. Android and iOS are already built to isolate apps from one another. ChromeOS uses Crostini to run Linux programs in a VM, etc.
> without increasing friction
That's always the compromise with an Antivirus, isn't it? The logical thing would be to build password managers into the OS, or maybe even to handle them differently. As they are already done in Android and iOS today.
I'm a firm believer that hardware virtualization is the way forward for security. Qubes OS has the right idea, but running an entire OS for every application is demanding.
IMO it would make more sense to run every app in its own scaled down VM, like Microdroid for Android. Windows 10 had Microsoft Defender Application Guard for Microsoft Edge, and as far as security goes it was a fortress.
Too bad they discontinued it, and that performance was subpar. I would have loved to see them develop the idea more.
Do you actually believe so? I genuinely believe that 99.99% of people won't give a crap. They will accept this like they've accepted most things in life without question.
Just run your browser in a secured VM and you won't have to basically kill the experience to be able to use it.
Pale Moon? That doesn't even have sandboxing?
Why?
How would you expect your AI to build you a more secure browser than Microsoft or Google could?
What are the easiest ways of doing so though? I'm running Windows Sandbox on Windows, and MacOS has Bromure. What's the easiest for Linux? KVM?
uBO stops exploits? Source?
FYI Thorium is updated once every 3 months or so. Not exactly the safest thing in the world.
Man I love this kind of "evidence" that can't be dismissed, that is ultimately just a big "just trust me bro".
Some would argue that's the same thing these days.
Just a few years ago this was about to change in Sweden.
But they didn't change it, because "women should be able to look up the men that they date".
A theory is that it just might have something to do with the shootings and bombings. Just a thought.
Indeed. What would they do if he refused? Would they cancel his account over tracking pixels?
Said E2EE is mobile only and completely unavailable in group chats
Yes. Let's switch to an app with Russian connections that has actively refused to implement E2EE for over a decade now.
And with Europe you mean a single country, Spain?
Most if not all of their attacks are inexcusable. Calling a competing OS, CalyxOS, nazi sympathizers is unacceptable and when I first read that I started seeing the red flags.
Nothing is open about GrapheneOS aside from the source code. We officially know nothing about the leadership, their current plans, what their finances look like or even who this new mysterious OEM is.
It's weird.
The average person is literally never encountering malware on either platform.
Why would they want goodwill when they can run propaganda campaigns against this instead?
I don't see how LLMs could pump stuff like this out anytime soon. Especially when you'll have defensive LLMs around that time.
If anything else, this just shows that we need more layered security for everything, even the ancient parts of the OS.
44% AI on that page. I'm looking forward to the day where every review will be AI generated... sigh.
They are building their own device trees now.
What are some examples of it being racist?
>You can't have a cake and eat it.
That is usually how it's done, yes.
Yeah talk about clickbait.
> They should be investing like crazy to make Safari the best browser out there instead of just relying on their monopole. And why the fuck is there no Windows version to make their iOS users happy?
Simple. Apple doesn't want you to use Windows. They want you to buy an expensive Apple computer instead.
Proton isn’t giving up VPN users. It’s giving up mail users. There’s a huge legal difference.
Because they can. I've encountered plenty of pages like this and it would seem that doing so is risk free.