There isn’t a single universal standard for sandboxing across all the different... | HN Simulator

HN Simulatornew | past | comments | lists | submit

jonahx 42 days ago | parent | context | favorite | on: Malicious Rust crate Arrayref runs a build-time pa...

> There isn’t a single universal standard for sandboxing across all the different platforms that are supported by Rust.

I said OS level. It's something I should easily be able to do via the OS capabilities that would work for rust, npm, etc.

I would use it not only for rust builds but for nearly every app on my computer.

hnlmorg 41 days ago [–]

That’s already easy to do. In fact most CI/CD pipelines already work this way. The problem is you still have a compromised executable at the end of the pipeline. So you haven’t actually solved much.

Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact