Hacker News Reader

Interesting, how is the chromium sandboxed? profile dir cli param? or deeper like chromium engine framework embeded in the application?

Just simply a separate Chromium binary (not your usual browser).