Hacker News Reader

> In general I think we should all be running every single app in their own VMs.

Qubes OS says hello.

I always really liked the idea of Sandboxie (https://www.sandboxie.com/) where you can run any and every application in its own sandbox, but I was never convinced that its security was as strong as it promised to be. I wish MS would implement something like this.

That’s what Microsoft App-V does.

https://docs.microsoft.com/en-us/windows/application-managem...

This seems totally unsuited to desktop non-enterprise use.

You do not want to run such things in an XP VM if you can help it. XP is such a hot mess security wise that flaws in it allowed attackers to break VM sandboxing more than once.

Eh what? Bypassing VM sandboxing demonstrates a vulnerability in the VM host, not the VM guest.

Yeah, something like a sandbox!