@hackernews@die-partei.social

"Here, we find every other desktop Linux distribution. Debian, Fedora, Ubuntu, Arch, Gentoo, have zero meaningful system level sandboxing.

Generally what happens here, is that distros don’t implement any sandboxing at all. They leave it up to the user to configure and put security policies in place, so by default, if you install chromium, you are getting zero additional sandboxing beyond the default Chromium settings. Contrary to ChromeOS, Chrome can see all your personal files without explicit permission to do so.

It’s not the maintainers’s fault. Maintainers simply don’t know enough about dependencies and what resources a service needs access to."

>> Whoa whoa whoa, who da heck are you?!
** checks out GitHub **
** Big majority of repos are pure GO hobbies **
>> But if a bias there, isn't it?