akyuu

If you mean restricting filesystem access to random programs, I think that's already possible on macOS (with TCC) and Linux (with Flatpak), but the underlying mechanisms aren't very robust a…

I'm curious about how they're going to manage this at the same time Linux LTS kernels are returning to being supported for 2 years rather than 6: https://news.ycombinator.com/…

> And your Mac sends all the hashes as well, whether they are in iCloud or not. Could you elaborate? I didn't know Macs send local file hashes to Apple even if you don't use iCloud.

From https://primatology.xyz/sheriff/faqs : > Does Sheriff block all JavaScript? > No. Sheriff only blocks externally-loaded JavaScript. That is, JavaScript linked to from a…

In the GitHub issue, there is a mention of replacing rustls and Go's crypto library with OpenSSL. That seems like a serious security downgrade.

It means there is a full trusted boot chain from the TPM to loading the immutable root filesystem: https://github.com/bottlerocket-os/bottlerocket/blob/develop... Regul…

On the GitHub repo ( https://github.com/bottlerocket-os/bottlerocket ), there are instructions for using it on VMware and bare metal: https://github.com/bottlerocke…

> Fortunately, the solution of just sticking to mainstream platforms works. Well, it depends. For widespread non-targeted attacks, like the one mentioned in the parent comment, I think using a nich…

I have serious doubts about how comprehensive this support will actually be, especially regarding firmware updates and non-Google vendor commitment. There is a wide variety of Chromebook hardware manu…

There is plenty of software written in memory-unsafe languages that interacts with untrusted input: browsers are the most prominent example, but also email clients, media players, PDF viewers, archive…

There are several existing options: - Windows: Simplewall (uses native WPF for filtering), Portmaster (interactive firewall, uses custom kernel extension). - macOS: LuLu or Little Snitch (they all use…

Do you have a source for that? AFAIK Pixel 7 uses an ARM v8.2 CPU, which doesn't support MTE. The upcoming Pixel 8 might support it, but Google hasn't announced anything yet.

Not really. Even with modern technologies, the Linux desktop technology stack is very, very far behind when it comes to security. The Linux kernel itself is a very weak foundation security-wise, the o…

The business model is simply selling the game (typically in a $10-60 range), and sometimes additional DLC (downloadable content). There are many games by independent developers on consoles, too. For e…