Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Reply to @sun@shitposter.world
Blurry Moon@sun@shitposter.world (2026-10-25 20:13:05)
@menherahair @phnt imagine you didn't have to sandbox your applications at all because no application could do even a single thing without having been launched with an unforgeable capability for it.
---Reply---
Phantasm@phnt@fluffytail.org (2026-10-25 20:14:05)
@sun @menherahair seccomp-bpf is the closest thing to that on Linux and it fucking sucks.

---Replies---

Blurry Moon@sun@shitposter.world (2026-10-25 20:21:09)
@phnt @menherahair it's leaky if the entire OS and hardware isn't based around it. 

btw here's the capability hardware emulator and scheme operating system I vibe coded to learn more about capability os: 

https://frute.net/fruteos.html