throw7484485
Re:A quick look at unprivileged sandboxing
on Tuesday July 15, 2025 @05:14PM (#44575891)
This has been solved for like 15 years. Use virtual machines!
Re:Code highlighting with Cursor AI used for $500k theft
on Tuesday July 15, 2025 @01:19PM (#44573575)
But I am not on windows
Re:Bringing Virtualization to the x86 Architecture with the Original V...
on Tuesday July 15, 2025 @09:57AM (#44571225)
Hardware virtualization is cheating by using unsecure enhancements. Like 90% of existing CPUs have security vulnerabilities, that must be patched in OS.
We can have this discussion when hardware gets a few years without major security flaw!
Re:Code highlighting with Cursor AI used for $500k theft
on Tuesday July 15, 2025 @09:01AM (#44570684)
Downloading random code from internet is just normal development on Mac. Brew, npm and other sorts of "package managers".
I have code, passwords and certificates separated in virtual machines, even IDE GUI app is virtualized, and has no rights to access GitHub, internet or filesystem directly.
But I get a lot of flack from coworkers. They say it is unintuitive and uses x86 CPU which is uncool. Mac has no reasonable VM software or secure containers!