Hacker Newsnew | past | comments | ask | show | jobs | submit | ritchiey's commentslogin

I have the same concern. Something might be worth looking into is replacing docker with Podman because it runs as the authenticated user rather than using a daemon running as root. Also, I believe Podman desktop allows for multiple VMs.

Also consider QubesOS. Where everything runs in a VM (if you can find appropriate hardware on which to run it).

Less flexible but easier to install is ChromeOS FLEX (or a high end Chromebook). Like QubesOS, ChromeOS lets you run Linux in a VM but with the ability to open native windows.


WSL probably is good but I believe it still has access to the whole Windows file system.

Linux on ChromeOS is probably better because its file system is separate. Files and directories must be explicitly shared from the main OS.

I think both have the ability to open windows on the main desktop so you can run graphical IDEs and the like in the VM which is nice.


The filesystem access is optional and can be removed, WSL2 is actually a fairly nice implementation of a linux sandbox that can be used like it's just running alongside windows. I think your concern is valid for WSL1, where the seperation is managed by a Microsoft provided Windows driver, but WSL2 is just a VM with dynamic memory allocation, so you can lock it down basically as well as any other Hyper-V VM, it just has a lot of integrations enabled by default.


To me the big difference between the two is security.

WSL2 mounts the windows file systems. A VM in crostini is completely isolated and yet it can still display windows on the main desktop.

The only other thing I know that does that is QubesOS.


I can see it being useful in a corporate setting to limit which sites you can visit with Chrome to just your secure admin panels and internal apps. Then use Firefox to go to dangerous places like… the Internet.

That way if one of your users clicks a link in a phishing email Chrome simply won’t open it.


This works similarly to any live-reloading local server except that there is no server. All you need is a text editor and a web-browser.


I'd be interested to hear if anyone has learned Rust without first understanding memory addressing and pointers.

Although I think Rust is a better way to write safe code and the industry is right to adopt it, it seems like a heavy lift to learn about heaps, stacks and pointers whilst also learning about ownership and lifetimes.

I don't really think that C++ is worth learning unless you have to work on an existing C++ codebase.


The reason usually cited for why not BitTorrent for software packages is because it makes public what package versions you have and haven’t downloaded.

This information could be useful to an attacker.


Hardly. Plus I'd rather have a random bunch of people get a small fraction of such information rather than a single company see everything.


Only if you're only seeding what you're using. It would be easy to add an obfuscation layer that seeds more.


I personally know at least one person who had his Google account locked with no explanation.


That's not linked to what's local in your Chrome browser


The killer tab feature I would like to see is a keystroke to switch to the previously focused tab in the current window. That’s it.

I frequently find myself jumping between two tabs (for example filling a form with details from another page) and no browser I know of makes it easy.


Thank you for the feedback. This is a popular request for sure. As it currently stands the way to back to the previous tab has one extra step :

- Open the extension : Shift + Cmd + A

- Press Enter

I will stick with that for the first cut as I want it released soon but this feature is definitely on the top of my list once this extension is released.



Vimium provides go-to-previous-tab via `^`.


I imagine they’d find it no more annoying than do Frank, Bob, Doug or Russell.

In fact I might call my next project Karen. Because things can only get better for her.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: