News for hackers. Stuff that matters.

frolvlad

Well, the challenge is to know if the action supposed to be executed BEFORE it is requested to be executed. If the email with my secrets is sent, it is too late to deal with the consequences.

Sandboxes could provide that level of observability, HOWEVER, it is a hard lift. Yet, I don't have better ideas either. Do you?

Instead of expecting the tools to adhere, they are enforced. For example, to make an HTTP call with a secret key, the tool must use the proxy service that will enforce that the secret key is only used for the specific domain, if that is allowed, then the proxy service will make the call, thus the secret never leaks outside of the service.

However, this design is still under development as it creates quite a bit of challenges.

Re: on Friday February 25, 2022 @02:03PM (#30470852)
Are you fucking kidding us? What does totalitarian country (russia) know about liberty? You must be playing an idiot if you believe that military invasion can be called "liberation".
Re: on Friday February 25, 2022 @01:53PM (#30470736)
Because my friends and relatives die in Ukraine from russian troops
COVID Connecting People (c)