Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Reply to @menherahair@eientei.org
Blurry Moon@sun@shitposter.world (2026-10-25 20:10:10)
@menherahair @phnt capability-based operating system design solved this in 1966 but the entire industry other than a few cell phone companies and Google with Fuschia have completely ignored it for the "pile of shit in a leaky bag" design
---Reply---
Blurry Moon@sun@shitposter.world (2026-10-25 20:13:05)
@menherahair @phnt imagine you didn't have to sandbox your applications at all because no application could do even a single thing without having been launched with an unforgeable capability for it.

---Replies---

Phantasm@phnt@fluffytail.org (2026-10-25 20:14:05)
@sun @menherahair seccomp-bpf is the closest thing to that on Linux and it fucking sucks.