Hacker News Reader

Many of ChromeOS's security guarantees evaporate as soon as you install or enable the android subsystem.

I beg to differ on this. Went to a presentation by the ChromeOS engineers who developed the Android support, at LinuxCon 2016(?) in Berlin. Everything shown there pointed to an explicit distrust of Android, their security posture was essentially 'sandbox the hell out of it'.

The Android sandbox on ChromeOS was pretty weak until recently, sharing a kernel with significant attack surface with the underlying chromeos.

Android 11 on ChromeOS is being deployed as a lightweight VM, called ARCVM: https://chromeunboxed.com/how-to-check-your-chromebook-new-a... It’s similar to how the Linux VMs on chromeos work.

Better link: https://chromeos.dev/en/posts/making-android-more-secure-wit...

Reply on news.ycombinator.com