Harlan (He/Him)

@soatok@furry.engineer @haicen@infosec.exchange can neither confirm nor deny

@haicen@infosec.exchange @soatok@furry.engineer This was one of the challenges at NSEC this year.

@Suran@toot.cat really, really expensive… even before you start including the inevitable lawsuits about buildings which burned down and had those sprinklers installed.

Is the current state of the art for application sandboxing on Linux still bubblewrap, or are there other options out there that aren't at the entire-OS level like Qubes? (I know Spectrum [thanks @qyliss!], but afaik it's still under very heavy development and meant to stand on its own at the OS layer.) #linux #security