• scholar@lemmy.world
    link
    fedilink
    English
    arrow-up
    94
    ·
    2 months ago

    Every program ideally should be in a sandbox and if it wants permission to access something it should have to ask for it.

    • Default Username@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      45
      ·
      2 months ago

      Kind of like Android or iOS.

      Flatpak tries to accomplish this on Desktop, and it works, but isn’t as comprehensive as something like Android or iOS.

      On the extreme side, there is QubesOS, which runs every app in a dedicated virtual machine, including the networking stack.