logoalt Hacker News

MattPalmer1086 • today at 7:56 AM • 1 reply • view on HN

Actually, most operating systems were designed as multi-user systems where users cannot access each other's data. Trusted administrators installed software. This made sense in a world of expensive computers that needed to be shared.

In the modern world we do not share our computers with other users, and allow untrusted software to run on our machines from the internet. Without further sandboxing, it would execute as the user with access to everything for that user - which in practice means mostly everything.


Replies

throwawayffffas • today at 8:46 AM

> Without further sandboxing, it would execute as the user with access to everything for that user - which in practice means mostly everything.

Which is fine and the reason behind qubes OS decision to have passwordless sudo enabled on qubes.